Google spinnt!
 

Moin Moin,
Ich bin neu hier und hoffe das ihr mir helfen könnt! Ich habe so seit 2 Tagen das problem das google, wenn ich ein suchergebnis anklicke meistens ein neuer Tab geöffnet wird der auf irgend eine andere Seite verweist! Zudem kommt dauernd bei Firefox ein Werbung fenster so jede 2 min!
Wäre toll wenn ihr mir da behilflich sein könntet!
Hier die LOG-File:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:23:49, on 17.12.2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16705)
Boot mode: Normal

Running processes:
F:\windows\System32\smss.exe
F:\windows\system32\winlogon.exe
F:\windows\system32\services.exe
F:\windows\system32\lsass.exe
F:\windows\system32\svchost.exe
F:\windows\System32\svchost.exe
F:\windows\system32\spoolsv.exe
F:\Programme\Avira\AntiVir PersonalEdition Classic\sched.exe
F:\Programme\Avira\AntiVir PersonalEdition Classic\avguard.exe
F:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
F:\Programme\Bonjour\mDNSResponder.exe
F:\Programme\Gemeinsame Dateien\InterVideo\DeviceService\DevSvc.exe
F:\WINDOWS\system32\LckFldService.exe
F:\Programme\Power Translator 11\LogoMedia TranslateDotNet Server.exe
F:\Programme\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlservr.exe
F:\windows\system32\nvsvc32.exe
F:\windows\system32\PnkBstrA.exe
F:\windows\system32\PnkBstrB.exe
F:\Programme\CyberLink\Shared files\RichVideo.exe
F:\windows\system32\svchost.exe
F:\Programme\Gemeinsame Dateien\Ulead Systems\DVD\ULCDRSvr.exe
F:\Programme\AlienGUIse\wbload.exe
F:\windows\Explorer.EXE
F:\Programme\Analog Devices\Core\smax4pnp.exe
F:\Programme\Analog Devices\SoundMAX\Smax4.exe
F:\Programme\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
F:\Programme\Java\jre1.6.0_07\bin\jusched.exe
F:\windows\system32\rundll32.exe
F:\Programme\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe
F:\Programme\Microsoft Office\Office12\GrooveMonitor.exe
F:\Programme\Siemens\Gigaset USB Adapter 54\PRISMSVR.EXE
F:\Programme\Gemeinsame Dateien\Real\Update_OB\realsched.exe
F:\Programme\Gemeinsame Dateien\Teleca Shared\CapabilityManager.exe
F:\Programme\CyberLink\PowerDVD\PDVDServ.exe
F:\Programme\Hewlett-Packard\HP Share-to-Web\hpgs2wnf.exe
F:\Programme\Steganos Safe Home\SteganosHotKeyService.exe
F:\Programme\Winamp\winampa.exe
F:\Programme\QuickTime\QTTask.exe
F:\windows\System32\svchost.exe
F:\Programme\iTunes\iTunesHelper.exe
F:\windows\system32\RUNDLL32.EXE
F:\DOKUME~1\Hendrik\LOKALE~1\Temp\winloggn.exe
F:\windows\system32\rundll32.exe
F:\Programme\Avira\AntiVir PersonalEdition Classic\avgnt.exe
F:\windows\system32\ctfmon.exe
F:\Programme\Gemeinsame Dateien\Ahead\Lib\NMBgMonitor.exe
F:\Programme\DAEMON Tools\daemon.exe
F:\Programme\Gemeinsame Dateien\Ahead\Lib\NMIndexingService.exe
F:\Programme\Internet Download Manager\IDMan.exe
F:\Programme\Gemeinsame Dateien\Ahead\Lib\NMIndexStoreSvr.exe
F:\Programme\ICQ6\ICQ.exe
F:\windows\system32\wscntfy.exe
F:\Programme\Microsoft Encarta\Encarta 2009 - Enzyklopaedie DVD\EDICT.EXE
F:\Programme\Internet Explorer\IEXPLORE.EXE
F:\Programme\iPod\bin\iPodService.exe
F:\Programme\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
F:\Programme\Siemens\Gigaset USB Adapter 54\GigasetUSBMonitor.exe
F:\Programme\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe
F:\Programme\Internet Download Manager\IEMonitor.exe
F:\Programme\Office-Bibliothek\PCLib.exe
F:\Programme\Hewlett-Packard\Digital Imaging\bin\hposol08.exe
F:\windows\system32\txtuser.exe
F:\Programme\AlienGUIse\AlienwareDock\ObjectDock.exe
F:\Programme\OpenOffice.org 3\program\soffice.exe
F:\Programme\OpenOffice.org 3\program\soffice.bin
F:\Programme\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe
F:\WINDOWS\system32\HPZipm12.exe
F:\Programme\Gemeinsame Dateien\Teleca Shared\Generic.exe
F:\Programme\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe
F:\PROGRA~1\Mozilla Firefox\firefox.exe
F:\DOKUME~1\Hendrik\LOKALE~1\Temp\csrssc.exe
F:\Programme\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://google.icq.com/search/search_frame.php
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://google.icq.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.qip.ru
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R3 - URLSearchHook: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - F:\PROGRA~1\ICQTOO~1\toolbaru.dll
O2 - BHO: F:\windows\system32\rsekd83jde.dll - {D5BF49A2-94F1-42BD-F434-3604812C807D} - F:\windows\system32\rsekd83jde.dll
O3 - Toolbar: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - F:\PROGRA~1\ICQTOO~1\toolbaru.dll
O3 - Toolbar: (no name) - {0124123D-61B4-456f-AF86-78C53A0790C5} - (no file)
O3 - Toolbar: Ask Toolbar - {FE063DB9-4EC0-403e-8DD8-394C54984B2C} - F:\Programme\AskTBar\bar\1.bin\ASKTBAR.DLL (file missing)
O3 - Toolbar: LEC - {1DBAB667-A486-421e-AFE4-CF07DD0088E5} - F:\Programme\Power Translator 11\Applications\LEC IE Translation Extension.dll
O3 - Toolbar: Ask Toolbar - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - F:\Programme\AskBarDis\bar\bin\askBar.dll
O4 - HKLM\..\Run: [SoundMAXPnP] F:\Programme\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [SoundMAX] "F:\Programme\Analog Devices\SoundMAX\Smax4.exe" /tray
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE F:\windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [Share-to-Web Namespace Daemon] F:\Programme\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "F:\Programme\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [Sony Ericsson PC Suite] "F:\Programme\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
O4 - HKLM\..\Run: [GrooveMonitor] "F:\Programme\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [PRISMSVR.EXE] "F:\Programme\Siemens\Gigaset USB Adapter 54\PRISMSVR.EXE" /APPLY
O4 - HKLM\..\Run: [TkBellExe] "F:\Programme\Gemeinsame Dateien\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [NeroFilterCheck] F:\Programme\Gemeinsame Dateien\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [RemoteControl] F:\Programme\CyberLink\PowerDVD\PDVDServ.exe
O4 - HKLM\..\Run: [LanguageShortcut] F:\Programme\CyberLink\PowerDVD\Language\Language.exe
O4 - HKLM\..\Run: [UVS11 Preload] F:\Programme\Ulead Systems\Ulead VideoStudio 11\uvPL.exe
O4 - HKLM\..\Run: [SAFEHOME HotKeys] "F:\Programme\Steganos Safe Home\SteganosHotKeyService.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "F:\Programme\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [WinampAgent] F:\Programme\Winamp\winampa.exe
O4 - HKLM\..\Run: [AppleSyncNotifier] F:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [IME JPN 2007 Migration] F:\PROGRA~1\GEMEIN~1\MICROS~1\IME12\IMEJP\IMJPKLMG.EXE /Preload
O4 - HKLM\..\Run: [Korean IME Migration] F:\PROGRA~1\GEMEIN~1\MICROS~1\IME12\IMEKR\IMKRMIG.EXE
O4 - HKLM\..\Run: [Microsoft Pinyin IME Migration] F:\PROGRA~1\GEMEIN~1\MICROS~1\IME12\IMESC\IMSCMIG.EXE /INSTALL
O4 - HKLM\..\Run: [QuickTime Task] "F:\Programme\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "F:\Programme\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE F:\windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [prunnet] "F:\windows\system32\prunnet.exe"
O4 - HKLM\..\Run: [xsgds4fgffght] F:\DOKUME~1\Hendrik\LOKALE~1\Temp\winloggn.exe
O4 - HKLM\..\Run: [000000af] rundll32.exe "F:\windows\system32\wsdyxxmu.dll",b
O4 - HKLM\..\Run: [avgnt] "F:\Programme\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKCU\..\Run: [Steam] "f:\programme\steam\steam.exe" -silent
O4 - HKCU\..\Run: [ctfmon.exe] F:\windows\system32\ctfmon.exe
O4 - HKCU\..\Run: [PicoZip] F:\Programme\PicoZip\PicoZipTray.exe
O4 - HKCU\..\Run: [Once Grim] F:\DOKUME~1\Hendrik\ANWEND~1\DOGHOL~1\tool second.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "F:\Programme\Gemeinsame Dateien\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [DAEMON Tools] "F:\Programme\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKCU\..\Run: [AnyDVD] "F:\Programme\SlySoft\AnyDVD\AnyDVD.exe"
O4 - HKCU\..\Run: [DeskCalc] "f:\programme\deskcalc pro\deskcalc.exe" /hide
O4 - HKCU\..\Run: [IDMan] F:\Programme\Internet Download Manager\IDMan.exe /onboot
O4 - HKCU\..\Run: [ICQ] "F:\Programme\ICQ6\ICQ.exe" silent
O4 - HKCU\..\Run: [E09DXLRD_14155406] "F:\Programme\Microsoft Encarta\Encarta 2009 - Enzyklopaedie DVD\EDICT.EXE" -m
O4 - HKCU\..\Run: [RGSC] F:\Programme\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe /silent
O4 - HKCU\..\Run: [prunnet] "F:\windows\system32\prunnet.exe"
O4 - HKCU\..\Run: [gadcom] "F:\Dokumente und Einstellungen\Hendrik\Anwendungsdaten\gadcom\gadcom.exe" 61A847B5BBF728173599284503996897C881250221C8670836AC4FA7C8833201749139
O4 - HKCU\..\Run: [xsgds4fgffght] F:\DOKUME~1\Hendrik\LOKALE~1\Temp\winloggn.exe
O4 - HKCU\..\Run: [Jnskdfmf9eldfd] F:\DOKUME~1\Hendrik\LOKALE~1\Temp\csrssc.exe
O4 - Startup: Alienware Dock.lnk = F:\Programme\AlienGUIse\AlienwareDock\ObjectDock.exe
O4 - Startup: OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk = F:\Programme\Microsoft Office\Office12\ONENOTEM.EXE
O4 - Startup: OpenOffice.org 3.0.lnk = F:\Programme\OpenOffice.org 3\program\quickstart.exe
O4 - Global Startup: Dienst-Manager.lnk = F:\Programme\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
O4 - Global Startup: Gigaset WLAN Adapter Monitor.lnk = F:\Programme\Siemens\Gigaset USB Adapter 54\GigasetUSBMonitor.exe
O4 - Global Startup: hp psc 2000 Series.lnk = F:\Programme\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe
O4 - Global Startup: Microsoft Office.lnk = F:\Programme\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Office-Bibliothek-Direktsuche.lnk = F:\Programme\Office-Bibliothek\PCLib.exe
O4 - Global Startup: officejet 6100.lnk = ?
O4 - Global Startup: Privoxy.lnk = F:\Programme\Privoxy\privoxy.exe
O7 - HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1
O8 - Extra context menu item: &ICQ Toolbar Search - res://F:\Programme\ICQToolbar\toolbaru.dll/SEARCH.HTML
O8 - Extra context menu item: Download aller Links mit IDM - F:\Programme\Internet Download Manager\IEGetAll.htm
O8 - Extra context menu item: Download FLV Video Inhalt mit IDM - F:\Programme\Internet Download Manager\IEGetVL.htm
O8 - Extra context menu item: Download mit IDM - F:\Programme\Internet Download Manager\IEExt.htm
O8 - Extra context menu item: Download with IDM - F:\Programme\Internet Download Manager\IEExt.htm
O8 - Extra context menu item: Download with Xilisoft Download YouTube Video - F:\Programme\Xilisoft\Download YouTube Video\upod_link.HTM
O8 - Extra context menu item: Nach Microsoft E&xel exportieren - res://F:\PROGRA~1\MI1933~1\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - F:\Programme\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - F:\Programme\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - F:\PROGRA~1\MI1933~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - F:\PROGRA~1\MI1933~1\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - F:\PROGRA~1\MI1933~1\Office12\REFIEBAR.DLL
O9 - Extra button: Encarta Suchleiste - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - F:\Programme\Gemeinsame Dateien\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - F:\Programme\ICQLite\ICQLite.exe (file missing)
O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - F:\Programme\ICQLite\ICQLite.exe (file missing)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - F:\windows\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - F:\windows\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - F:\Programme\ICQ6\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - F:\Programme\ICQ6\ICQ.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - F:\Programme\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - F:\Programme\Messenger\msmsgs.exe
O15 - Trusted Zone: *.amaena.com
O15 - Trusted Zone: *.antimalwareguard.com
O15 - Trusted Zone: *.antispyexpert.com
O15 - Trusted Zone: *.avsystemcare.com
O15 - Trusted Zone: *.gomyhit.com
O15 - Trusted Zone: *.imagesrvr.com
O15 - Trusted Zone: *.onerateld.com
O15 - Trusted Zone: *.safetydownload.com
O15 - Trusted Zone: *.spyguardpro.com
O15 - Trusted Zone: *.storageguardsoft.com
O15 - Trusted Zone: *.trustedantivirus.com
O15 - Trusted Zone: *.virusremover2008.com
O15 - Trusted Zone: *.virusschlacht.com
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - F:\PROGRA~1\MI1933~1\Office12\GR99D3~1.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - F:\PROGRA~1\GEMEIN~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: wbsys.dll vnxkgo.dll xoixls.dll
O20 - Winlogon Notify: fccyvWNe - fccyvWNe.dll (file missing)
O22 - SharedTaskScheduler: KJhaiufhw3nrih7wefywjfsdfd - {D5BF49A2-94F1-42BD-F434-3604812C807D} - F:\windows\system32\rsekd83jde.dll
O23 - Service: Avira AntiVir Personal - Free Antivirus Planer (AntiVirScheduler) - Avira GmbH - F:\Programme\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - F:\Programme\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Apple Mobile Device - Apple Inc. - F:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Bonjour-Dienst (Bonjour Service) - Apple Inc. - F:\Programme\Bonjour\mDNSResponder.exe
O23 - Service: Capture Device Service - InterVideo Inc. - F:\Programme\Gemeinsame Dateien\InterVideo\DeviceService\DevSvc.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - F:\Programme\Gemeinsame Dateien\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - F:\Programme\Gemeinsame Dateien\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: iPod-Dienst (iPod Service) - Apple Inc. - F:\Programme\iPod\bin\iPodService.exe
O23 - Service: LckFldService - Unknown owner - F:\WINDOWS\system32\LckFldService.exe
O23 - Service: LEC TranslateDotNet Server - Language Engineering Corporation, LLC - F:\Programme\Power Translator 11\LogoMedia TranslateDotNet Server.exe
O23 - Service: NBService - Nero AG - F:\Programme\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - F:\Programme\Gemeinsame Dateien\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - F:\windows\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - F:\WINDOWS\system32\HPZipm12.exe
O23 - Service: PnkBstrA - Unknown owner - F:\windows\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - F:\windows\system32\PnkBstrB.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - F:\Programme\CyberLink\Shared files\RichVideo.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - F:\Programme\Gemeinsame Dateien\Ulead Systems\DVD\ULCDRSvr.exe

--
End of file - 16184 bytes