Also vielleicht hätte ich euch meine log datei früher geben sollen, aber dass es ein virus ist....hätte ich nicht gedacht
Logfile of HijackThis v1.97.7
Scan saved at 17:59:08, on 26.05.04
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)
Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\Winmodem.101\wmexe.exe
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM\ATITASK.EXE
C:\WINDOWS\SYSTEM\ATICWD32.EXE
C:\PROGRAMME\MICROSOFT HARDWARE\MOUSE\POINT32.EXE
C:\WINDOWS\ANTIVIR\AVGCTRL.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\PROGRAMME\GEMEINSAME DATEIEN\REAL\UPDATE_OB\REALSCHED.EXE
C:\WINDOWS\SYSTEM\STIMON.EXE
C:\WINDOWS\ANTIVIR\AVSCHED32.EXE
D:\PROGRAMME\COMPUTER\ICQLITE\ICQLITE.EXE
D:\PROGRAMME\COMPUTER\INCREDIMAIL\BIN\IMAPP.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\WINDOWS\ANTIVIR\AVWIN.EXE
D:\EIGENE DATEIEN\DOWNLOADS\PROGRAMME\HIJACKTHIS.EXE
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
http://www.google.de/
O2 - BHO: MediaLoads Enhanced - {85A702BA-EA8F-4B83-AA07-07A5186ACD7E} - C:\PROGRAMME\MEDIALOADS ENHANCED\ME1.DLL
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\PROGRAMME\ADOBE\ACROBAT 6.0\READER\ACTIVEX\ACROIEHELPER.DLL
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O4 - HKLM\..\Run: [Atitask.exe] C:\WINDOWS\SYSTEM\ATITASK.EXE
O4 - HKLM\..\Run: [Aticwd32.exe] C:\WINDOWS\SYSTEM\Aticwd32.exe
O4 - HKLM\..\Run: [point32.exe] C:\Programme\Microsoft Hardware\Mouse\point32.exe
O4 - HKLM\..\Run: [AVGCtrl] C:\WINDOWS\ANTIVIR\AVGCTRL.EXE /min
O4 - HKLM\..\Run: [Neue Anwendung] C:\WINDOWS\SYSTEM\SysTray.Exe
O4 - HKLM\..\Run: [TkBellExe] C:\Programme\Gemeinsame Dateien\Real\Update_OB\realsched.exe -osboot
O4 - HKLM\..\RunServices: [Winmodem] Winmodem.101\wmexe.exe
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKLM\..\RunServices: [Driver32] C:\WINDOWS\SYSTEM\SCam32.exe
O4 - HKCU\..\Run: [stimon] C:\WINDOWS\SYSTEM\STIMON.EXE
O4 - HKCU\..\Run: [AVSCHED32.exe] C:\WINDOWS\ANTIVIR\AVSCHED32.EXE /min
O4 - HKCU\..\Run: [realsched] C:\Programme\Gemeinsame Dateien\Real\Update_OB\realsched.exe
O4 - HKCU\..\RunOnce: [ICQ Lite] D:\PROGRAMME\COMPUTER\ICQLITE\ICQLITE.EXE -trayboot
O4 - Startup: adobe gamma loader.exe.lnk = C:\Programme\Gemeinsame Dateien\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - User Startup: adobe gamma loader.exe.lnk = C:\Programme\Gemeinsame Dateien\Adobe\Calibration\Adobe Gamma Loader.exe
O8 - Extra context menu item: &Add animation to IncrediMail Style Box - D:\PROGRA~1\COMPUTER\INCRED~1\bin\resources\WebMenuImg.htm
O9 - Extra button: Related (HKLM)
O9 - Extra->Tools' menuitem: Show &Related Links (HKLM)
O9 - Extra button: ICQ Lite (HKLM)
O9 - Extra->Tools' menuitem: ICQ Lite (HKLM)
O9 - Extra button: Translate (HKLM)
O9 - Extra->Tools' menuitem: LingoWare Translator... (HKLM)
O14 - IERESET.INF: START_PAGE_URL=http://www.lycos.de/
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) -
http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) -
http://download.macromedia.com/pub/shockwave/cabs/director/swdir.cab
O16 - DPF: {928626A3-6B98-11CF-90B4-00AA00A4011F} (SurroundVideoCtrl Object) -
http://www.alfaromeo.de/obs/include/codebase/MSSurVid.cab
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) -
http://207.188.7.150/1074a9926eb4cdf05114/netzip/RdxIE601_de.cab
O16 - DPF: {02C20140-76F8-4763-83D5-B660107B7A90} (Moniker32 Class) -
http://63.219.181.7/cax.cab
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) -
http://www.apple.com/qtactivex/qtplugin.cab