Hilfe, meine Startseite spielt verrückt!!!

[Novalee]

Hi,

ich habe ein kleines Problem mit meiner Internetstartseite. Wenn ich meinen Explorer öffne, kommt immer eine Searchseite. Ebenfalls lassen sich manche Internetseiten nicht öffnen.
Da ich leider überhaupt keine Ahnung davon habe, wie ich diese Seite da wegbekomme, würde ich mich sehr über eure Hilfe freuen.

Logfile of Browser Hijack Recover(BHR) v1.41
http://www.browser-hijack.com/
Log created on 23.02.2005 20:54:34
Microsoft Windows XP Professional  (Build 2600)
Internet Explorer v6.0.2600.0000

[Process Manager] - [Process]
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Programme\AVPersonal\AVGUARD.EXE
C:\Programme\AVPersonal\AVWUPSRV.EXE
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\RUNDLL32.EXE
C:\WINDOWS\Mixer.exe
C:\Programme\AVPersonal\AVGNT.EXE
C:\WINDOWS\System32\ctfmon.exe
C:\Programme\Messenger\msmsgs.exe
C:\Programme\Internet Explorer\iexplore.exe
C:\Programme\Internet Explorer\IEXPLORE.EXE
C:\Programme\Browser Hijack Recover\bhr.exe

[Process Manager] - [NT Services]
Service Name: Microsoft ACPI-Treiber - Start Type: SERVICE_BOOT_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINDOWS\System32\DRIVERS\ACPI.sys
Service Name: Umgebung für die AFD-Netzwerkunterstützung - Start Type: SERVICE_AUTO_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINDOWS\System32\drivers\afd.sys
Service Name: Intel AGP-Bus-Filter - Start Type: SERVICE_BOOT_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINDOWS\System32\DRIVERS\agp440.sys
Service Name: AntiVir Service - Start Type: SERVICE_AUTO_START - Service Status: SERVICE_RUNNING - Binary path: C:\Programme\AVPersonal\AVGUARD.EXE
Service Name: Standard-IDE/ESDI-Festplattencontroller - Start Type: SERVICE_BOOT_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINDOWS\System32\DRIVERS\atapi.sys
Service Name: Windows Audio - Start Type: SERVICE_AUTO_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINDOWS\System32\svchost.exe -k netsvcs
Service Name: Audiostubtreiber - Start Type: SERVICE_DEMAND_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINDOWS\DRIVERS\audstub.sys
Service Name: avgntdd - Start Type: SERVICE_DEMAND_START - Service Status: SERVICE_RUNNING - Binary path: C:\Programme\AVPersonal\AVGNTDD.SYS
Service Name: AntiVir Update - Start Type: SERVICE_AUTO_START - Service Status: SERVICE_RUNNING - Binary path: C:\Programme\AVPersonal\AVWUPSRV.EXE
Service Name: Beep - Start Type: SERVICE_SYSTEM_START - Service Status: SERVICE_RUNNING - Binary path: 
Service Name: Computerbrowser - Start Type: SERVICE_AUTO_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINDOWS\System32\svchost.exe -k netsvcs
Service Name: Cdfs - Start Type: SERVICE_DISABLED - Service Status: SERVICE_RUNNING - Binary path: 
Service Name: CD-ROM-Laufwerktreiber - Start Type: SERVICE_SYSTEM_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINDOWS\DRIVERS\cdrom.sys
Service Name: C-Media PCI Audio Driver (WDM) - Start Type: SERVICE_DEMAND_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINDOWS\drivers\cmaudio.sys
Service Name: Kryptografiedienste - Start Type: SERVICE_AUTO_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINDOWS\system32\svchost.exe -k netsvcs
Service Name: DHCP-Client - Start Type: SERVICE_AUTO_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINDOWS\System32\svchost.exe -k netsvcs
Service Name: Laufwerktreiber - Start Type: SERVICE_BOOT_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINDOWS\System32\DRIVERS\disk.sys
Service Name: Treiber für die Verwaltung logischer Datenträger - Start Type: SERVICE_BOOT_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINDOWS\System32\drivers\dmio.sys
Service Name: dmload - Start Type: SERVICE_BOOT_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINDOWS\System32\drivers\dmload.sys
Service Name: Verwaltung logischer Datenträger - Start Type: SERVICE_AUTO_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINDOWS\System32\svchost.exe -k netsvcs
Service Name: DNS-Client - Start Type: SERVICE_AUTO_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINDOWS\System32\svchost.exe -k NetworkService
Service Name: Fehlerberichterstattungsdienst - Start Type: SERVICE_AUTO_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINDOWS\System32\svchost.exe -k netsvcs
Service Name: Ereignisprotokoll - Start Type: SERVICE_AUTO_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINDOWS\system32\services.exe
Service Name: COM+-Ereignissystem - Start Type: SERVICE_DEMAND_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINDOWS\System32\svchost.exe -k netsvcs
Service Name: Fastfat - Start Type: SERVICE_DISABLED - Service Status: SERVICE_RUNNING - Binary path: 
Service Name: Kompatibilität für schnelle Benutzerumschaltung - Start Type: SERVICE_DEMAND_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINDOWS\System32\svchost.exe -k netsvcs
Service Name: Diskettencontrollertreiber - Start Type: SERVICE_DEMAND_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINDOWS\DRIVERS\fdc.sys
Service Name: Fips - Start Type: SERVICE_SYSTEM_START - Service Status: SERVICE_RUNNING - Binary path: 
Service Name: Diskettenlaufwerktreiber - Start Type: SERVICE_DEMAND_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINDOWS\DRIVERS\flpydisk.sys
Service Name: Treiber für Volume-Manager - Start Type: SERVICE_BOOT_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINDOWS\System32\DRIVERS\ftdisk.sys
Service Name: Gameport-Enumerator - Start Type: SERVICE_DEMAND_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINDOWS\DRIVERS\gameenum.sys
Service Name: Standardpaketklassifizierung - Start Type: SERVICE_DEMAND_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINDOWS\DRIVERS\msgpc.sys
Service Name: Hilfe und Support - Start Type: SERVICE_AUTO_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINDOWS\System32\svchost.exe -k netsvcs
Service Name: i8042-Tastatur- und PS/2-Mausanschluss-Treiber - Start Type: SERVICE_SYSTEM_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINDOWS\DRIVERS\i8042prt.sys
Service Name: Imapi - Start Type: SERVICE_SYSTEM_START - Service Status: SERVICE_RUNNING - Binary path: 
Service Name: IPSEC-Treiber - Start Type: SERVICE_SYSTEM_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINDOWS\DRIVERS\ipsec.sys
Service Name: PnP-ISA/EISA-Bus-Treiber - Start Type: SERVICE_BOOT_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINDOWS\System32\DRIVERS\isapnp.sys
Service Name: Tastaturklassentreiber - Start Type: SERVICE_SYSTEM_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINDOWS\DRIVERS\kbdclass.sys
Service Name: Microsoft Kernel-Waveaudiomixer - Start Type: SERVICE_DEMAND_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINDOWS\drivers\kmixer.sys
Service Name: KSecDD - Start Type: SERVICE_BOOT_START - Service Status: SERVICE_RUNNING - Binary path: 
Service Name: Server - Start Type: SERVICE_AUTO_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINDOWS\System32\svchost.exe -k netsvcs
Service Name: Arbeitsstationsdienst - Start Type: SERVICE_AUTO_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINDOWS\System32\svchost.exe -k netsvcs
Service Name: TCP/IP-NetBIOS-Hilfsprogramm - Start Type: SERVICE_AUTO_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINDOWS\System32\svchost.exe -k LocalService
Service Name: Nachrichtendienst - Start Type: SERVICE_AUTO_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINDOWS\System32\svchost.exe -k netsvcs
Service Name: mnmdd - Start Type: SERVICE_SYSTEM_START - Service Status: SERVICE_RUNNING - Binary path: 
Service Name: Mausklassentreiber - Start Type: SERVICE_SYSTEM_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINDOWS\DRIVERS\mouclass.sys
Service Name: MountMgr - Start Type: SERVICE_BOOT_START - Service Status: SERVICE_RUNNING - Binary path: 
Service Name: Redirector für WebDav-Client - Start Type: SERVICE_DEMAND_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINDOWS\DRIVERS\mrxdav.sys
Service Name: MRXSMB - Start Type: SERVICE_SYSTEM_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINDOWS\DRIVERS\mrxsmb.sys
Service Name: Msfs - Start Type: SERVICE_SYSTEM_START - Service Status: SERVICE_RUNNING - Binary path: 
Service Name: Mup - Start Type: SERVICE_BOOT_START - Service Status: SERVICE_RUNNING - Binary path: 
Service Name: NDIS-Systemtreiber - Start Type: SERVICE_BOOT_START - Service Status: SERVICE_RUNNING - Binary path: 
Service Name: RAS-NDIS-TAPI-Treiber - Start Type: SERVICE_DEMAND_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINDOWS\DRIVERS\ndistapi.sys
Service Name: NDIS-Benutzermodus-E/A-Protokoll - Start Type: SERVICE_DEMAND_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINDOWS\DRIVERS\ndisuio.sys
Service Name: RAS-NDIS-WAN-Treiber - Start Type: SERVICE_DEMAND_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINDOWS\DRIVERS\ndiswan.sys
Service Name: NDIS-Proxy - Start Type: SERVICE_DEMAND_START - Service Status: SERVICE_RUNNING - Binary path: 
Service Name: NetBIOS-Schnittstelle - Start Type: SERVICE_SYSTEM_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINDOWS\DRIVERS\netbios.sys
Service Name: NetBios über TCP/IP - Start Type: SERVICE_SYSTEM_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINDOWS\DRIVERS\netbt.sys
Service Name: Netzwerkverbindungen - Start Type: SERVICE_DEMAND_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINDOWS\System32\svchost.exe -k netsvcs
Service Name: NLA (Network Location Awareness) - Start Type: SERVICE_DEMAND_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINDOWS\System32\svchost.exe -k netsvcs
Service Name: Npfs - Start Type: SERVICE_SYSTEM_START - Service Status: SERVICE_RUNNING - Binary path: 
Service Name: Null - Start Type: SERVICE_SYSTEM_START - Service Status: SERVICE_RUNNING - Binary path: 
Service Name: nv - Start Type: SERVICE_DEMAND_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINDOWS\DRIVERS\nv4_mini.sys
Service Name: NVIDIA Display Driver Service - Start Type: SERVICE_AUTO_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINDOWS\System32\nvsvc32.exe
Service Name: Treiber für parallelen Anschluss - Start Type: SERVICE_DEMAND_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINDOWS\DRIVERS\parport.sys
Service Name: PartMgr - Start Type: SERVICE_BOOT_START - Service Status: SERVICE_RUNNING - Binary path: 
Service Name: ParVdm - Start Type: SERVICE_AUTO_START - Service Status: SERVICE_RUNNING - Binary path: 
Service Name: PCI-Bus-Treiber - Start Type: SERVICE_BOOT_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINDOWS\System32\DRIVERS\pci.sys
Service Name: PCIIde - Start Type: SERVICE_BOOT_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINDOWS\System32\DRIVERS\pciide.sys
Service Name: Plug & Play - Start Type: SERVICE_AUTO_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINDOWS\system32\services.exe
Service Name: IPSEC-Dienste - Start Type: SERVICE_AUTO_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINDOWS\System32\lsass.exe
Service Name: WAN-Miniport (PPTP) - Start Type: SERVICE_DEMAND_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINDOWS\DRIVERS\raspptp.sys
Service Name: Prozessortreiber - Start Type: SERVICE_SYSTEM_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINDOWS\DRIVERS\processr.sys
Service Name: Geschützter Speicher - Start Type: SERVICE_AUTO_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINDOWS\system32\lsass.exe
Service Name: Treiber für direkte Parallelverbindung - Start Type: SERVICE_DEMAND_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINDOWS\DRIVERS\ptilink.sys
Service Name: Treiber für automatische RAS-Verbindung - Start Type: SERVICE_SYSTEM_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINDOWS\DRIVERS\rasacd.sys
Service Name: WAN-Miniport (L2TP) - Start Type: SERVICE_DEMAND_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINDOWS\DRIVERS\rasl2tp.sys
Service Name: Remotezugriff-PPPOE-Treiber - Start Type: SERVICE_DEMAND_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINDOWS\DRIVERS\raspppoe.sys
Service Name: Parallelanschluss (direkt) - Start Type: SERVICE_DEMAND_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINDOWS\DRIVERS\raspti.sys
Service Name: Rdbss - Start Type: SERVICE_SYSTEM_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINDOWS\DRIVERS\rdbss.sys
Service Name: RDPCDD - Start Type: SERVICE_SYSTEM_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINDOWS\DRIVERS\RDPCDD.sys
Service Name: Treiber für Terminalserver-Geräteumleitung - Start Type: SERVICE_DEMAND_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINDOWS\DRIVERS\rdpdr.sys
Service Name: Filtertreiber für digitale CD-Audiowiedergabe - Start Type: SERVICE_SYSTEM_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINDOWS\DRIVERS\redbook.sys
Service Name: Remote-Registrierung - Start Type: SERVICE_AUTO_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINDOWS\system32\svchost.exe -k LocalService
Service Name: Remoteprozeduraufruf (RPC) - Start Type: SERVICE_AUTO_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINDOWS\system32\svchost -k rpcss
Service Name: NT-Treiber für Realtek RTL8139(A/B/C)-basierten PCI-Fast Ethernetadapter - Start Type: SERVICE_DEMAND_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINDOWS\DRIVERS\RTL8139.SYS
Service Name: Sicherheitskontenverwaltung - Start Type: SERVICE_AUTO_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINDOWS\system32\lsass.exe
Service Name: Taskplaner - Start Type: SERVICE_AUTO_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINDOWS\System32\svchost.exe -k netsvcs
Service Name: Sekundäre Anmeldung - Start Type: SERVICE_AUTO_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINDOWS\System32\svchost.exe -k netsvcs
Service Name: Systemereignisbenachrichtigung - Start Type: SERVICE_AUTO_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINDOWS\system32\svchost.exe -k netsvcs
Service Name: Serenum-Filtertreiber - Start Type: SERVICE_DEMAND_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINDOWS\DRIVERS\serenum.sys
Service Name: Treiber für seriellen Anschluss - Start Type: SERVICE_SYSTEM_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINDOWS\DRIVERS\serial.sys
Service Name: Shellhardwareerkennung - Start Type: SERVICE_AUTO_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINDOWS\System32\svchost.exe -k netsvcs
Service Name: Druckwarteschlange - Start Type: SERVICE_AUTO_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINDOWS\system32\spoolsv.exe
Service Name: Srv - Start Type: SERVICE_DEMAND_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINDOWS\DRIVERS\srv.sys
Service Name: SSDP-Suchdienst - Start Type: SERVICE_DEMAND_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINDOWS\System32\svchost.exe -k LocalService
Service Name: Software-Bus-Treiber - Start Type: SERVICE_DEMAND_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINDOWS\DRIVERS\swenum.sys
Service Name: Microsoft Kernel-Systemaudiogerät - Start Type: SERVICE_DEMAND_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINDOWS\drivers\sysaudio.sys
Service Name: TCP/IP-Protokolltreiber - Start Type: SERVICE_SYSTEM_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINDOWS\DRIVERS\tcpip.sys
Service Name: Terminal-Gerätetreiber - Start Type: SERVICE_SYSTEM_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINDOWS\DRIVERS\termdd.sys
Service Name: Terminaldienste - Start Type: SERVICE_DEMAND_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINDOWS\System32\svchost.exe -k netsvcs
Service Name: Designs - Start Type: SERVICE_AUTO_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINDOWS\System32\svchost.exe -k netsvcs
Service Name: Überwachung verteilter Verknüpfungen (Client) - Start Type: SERVICE_AUTO_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINDOWS\system32\svchost.exe -k netsvcs
Service Name: Microcode Updatetreiber - Start Type: SERVICE_DEMAND_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINDOWS\DRIVERS\update.sys
Service Name: Upload-Manager - Start Type: SERVICE_AUTO_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINDOWS\System32\svchost.exe -k netsvcs
Service Name: USB2-aktivierter Hub - Start Type: SERVICE_DEMAND_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINDOWS\DRIVERS\usbhub.sys
Service Name: Miniporttreiber für universellen Microsoft USB-Hostcontroller - Start Type: SERVICE_DEMAND_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINDOWS\DRIVERS\usbuhci.sys
Service Name: VgaSave - Start Type: SERVICE_SYSTEM_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINDOWS\System32\drivers\vga.sys
Service Name: VolSnap - Start Type: SERVICE_BOOT_START - Service Status: SERVICE_RUNNING - Binary path: 
Service Name: Windows-Zeitgeber - Start Type: SERVICE_AUTO_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINDOWS\System32\svchost.exe -k netsvcs
Service Name: RAS-IP-ARP-Treiber - Start Type: SERVICE_DEMAND_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINDOWS\DRIVERS\wanarp.sys
Service Name: Treiber für Microsoft WINMM-WDM-Audiokompatibilität - Start Type: SERVICE_DEMAND_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINDOWS\drivers\wdmaud.sys
Service Name: Webclient - Start Type: SERVICE_AUTO_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINDOWS\System32\svchost.exe -k LocalService
Service Name: Windows-Verwaltungsinstrumentation - Start Type: SERVICE_AUTO_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINDOWS\system32\svchost.exe -k netsvcs
Service Name: Seriennummer der tragbaren Medien - Start Type: SERVICE_AUTO_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINDOWS\System32\svchost.exe -k netsvcs
Service Name: Automatische Updates - Start Type: SERVICE_AUTO_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINDOWS\system32\svchost.exe -k netsvcs
Service Name: Konfigurationsfreie drahtlose Verbindung - Start Type: SERVICE_AUTO_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINDOWS\System32\svchost.exe -k netsvcs

[IE Options] - [Normal]
R0 - HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.microsoft.com/windows/ie_intl/en/start/
R0 - HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main,Window Title = 
R1 - HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank

[IE Options] - [IE Menu]

[IE Options] - [Internet Options]

[IE Options] - [IE Search Hooks]
R3 - URLSearchHook: Microsoft Url Sucheingriff - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\WINDOWS\System32\shdocvw.dll

[IE Add-Ons] - [Toolbars]
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx

[IE Add-Ons] - [Explorer Bars]
O9 - Extra "View" Explorer Bars: Media Band - {32683183-48a0-441b-a342-7c2a440a9478} - C:\WINDOWS\System32\browseui.dll
O9 - Extra "View" Explorer Bars: File and Folders Search ActiveX Control - {C4EE31F3-4768-11D2-BE5C-00A0C9A83DA1} - C:\WINDOWS\system32\SHELL32.dll
O9 - Extra "View" Explorer Bars: Explorer Band - {EFA24E64-B078-11D0-89E4-00C04FC9E26E} - C:\WINDOWS\System32\shdocvw.dll

[IE Add-Ons] - [Context Menu]

[IE Add-Ons] - [BHOs]
O2 - BHO: (No Name) - {1E86777E-235A-4639-9557-348808DF26F6} - C:\WINDOWS\System32\hglo.dll

[IE Add-Ons] - [Tools Menu]
O9 - Extra "Tool" Menu Item: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Programme\ICQLite\ICQLite.exe

[IE Add-Ons] - [Tools Button]
O9 - Extra Button: ICQ 4 - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Programme\ICQLite\ICQLite.exe

[System Options]

[StartUp]
04 - HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run CTFMON.EXE = C:\WINDOWS\System32\ctfmon.exe
04 - HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run MSMSGS = C:\Programme\Messenger\msmsgs.exe" /background
04 - HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run Spyware Vanisher = c:\spywarevanisher-free\FreeScanner.exe -FastScan
04 - HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run SystemTray = SysTray.Exe
04 - HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run NvCplDaemon = RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
04 - HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run nwiz = nwiz.exe /install
04 - HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run NvMediaCenter = RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
04 - HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run C-Media Mixer = Mixer.exe /startup
04 - HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run AVGCtrl = C:\Programme\AVPersonal\AVGNT.EXE" /min
04 - HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run sp = rundll32 C:\DOKUME~1\KATHAR~1\LOKALE~1\Temp\se.dll,DllInstall
O4 - C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\Adobe Gamma Loader.lnk = C:\PROGRA~1\GEMEIN~1\Adobe\CALIBR~1\ADOBEG~1.EXE
O4 - C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\Microsoft Office.lnk = C:\PROGRA~1\MICROS~3\Office\OSA9.EXE

Bye Nova

[Speedy]

hi

Browser Hijack Recover(BHR) v1.41

gepostet hast du das ja richtig, aber wir bevorzugen hier HijackThis

Download: http://www.merijn.org/files/hijackthis.zip
Alternativ: http://www.hijackthis.de/downloads/hijackthis_199.zip

eine beschreibung dazu findest du hier http://members.linzag.net/680262/HJT/HijackThis.html

[Novalee]

Hi,
sorry, das wußte ich nicht . Ich hoffe dieses MAl ist es richtig.

Logfile of HijackThis v1.99.1
Scan saved at 17:06:30, on 24.02.2005
Platform: Windows XP  (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Programme\AVPersonal\AVGUARD.EXE
C:\Programme\AVPersonal\AVWUPSRV.EXE
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\RUNDLL32.EXE
C:\WINDOWS\Mixer.exe
C:\Programme\AVPersonal\AVGNT.EXE
C:\WINDOWS\System32\ctfmon.exe
C:\Programme\Messenger\msmsgs.exe
C:\Programme\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\System32\wuauclt.exe
C:\Dokumente und Einstellungen\Katharina Guzy\Eigene Dateien\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\DOKUME~1\KATHAR~1\LOKALE~1\Temp\se.dll/sp.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\DOKUME~1\KATHAR~1\LOKALE~1\Temp\se.dll/sp.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = javascript:self.close();
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,HomeOldSP = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\SYSTEM\blank.htm
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,HomeOldSP = about:blank
O2 - BHO: (no name) - {1E86777E-235A-4639-9557-348808DF26F6} - C:\WINDOWS\System32\hglo.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [C-Media Mixer] Mixer.exe /startup
O4 - HKLM\..\Run: [AVGCtrl] "C:\Programme\AVPersonal\AVGNT.EXE" /min
O4 - HKLM\..\Run: [sp] rundll32 C:\DOKUME~1\KATHAR~1\LOKALE~1\Temp\se.dll,DllInstall
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Programme\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Spyware Vanisher] c:\spywarevanisher-free\FreeScanner.exe -FastScan
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Programme\Gemeinsame Dateien\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Programme\Microsoft Office\Office\OSA9.EXE
O9 - Extra button: ICQ 4 - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Programme\ICQLite\ICQLite.exe
O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Programme\ICQLite\ICQLite.exe
O16 - DPF: Win32 Classes - 
O16 - DPF: {22222222-2222-2222-2222-222222222222} - file://c:\x.cab
O16 - DPF: {62475759-9E84-458E-A1AB-5D2C442ADFDE} - http://a1540.g.akamai.net/7/1540/52/20040105/qtinstall.info.apple.com/mickey/de/win/QuickTimeInstaller.exe
O18 - Filter: text/html - {EFC4172A-3C4B-4D47-AEB1-9F96C6238BD8} - C:\WINDOWS\System32\hglo.dll
O18 - Filter: text/plain - {EFC4172A-3C4B-4D47-AEB1-9F96C6238BD8} - C:\WINDOWS\System32\hglo.dll
O23 - Service: AntiVir Service (AntiVirService) - H+BEDV Datentechnik GmbH - C:\Programme\AVPersonal\AVGUARD.EXE
O23 - Service: AntiVir Update (AVWUpSrv) - H+BEDV Datentechnik GmbH, Germany - C:\Programme\AVPersonal\AVWUPSRV.EXE
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe

[Speedy]

hi

hast du Browser Hijack Recover(BHR) v1.41 tatsächlich gekauft?

dein windows stammt noch vom vorigen jahrtausend, update auf sp2 ist pflicht.
die infektion ist beim derzeitigen stand nicht allzu einfach zu entfernen,
du kannst dich auch zu format:c entschließen, dauert vermutlich nicht solange wie die reinigung und wäre sicherer.
bitte um rückmeldung, welchen weg du gehen möchtest.

[Novalee]

Hi,

ich habe mir Browser Hijack Recover(BHR) v1.41, als Demoversion heruntergeladen, da ich irgendwo gelesen habe, dass es mir helfen könnte.
Wenn ich jetzt mal wüßte, was update auf sp2 und format:c heißen, könnte ich dir wahrscheinlich mehr sagen.

Sorry, aber wie schon gesagt, ich habe überhaupt keine Ahnung davon. Ich benutze meinen Computer für die Schule und um ab und zu Mal im Netz zu surfen.

[Ruby]

Hi Novalee,

update auf sp2: (Windows XP SP2 aufspielen) www.windowsupdate.com

format:c: www.formatieren.de