Win32.Sober, vxb.stages.A und andere Viren, Würmer etc

#1 Hallo

Ich habe ein riesen Problem. Ein Freund hat seinen Rechner vorbeigebracht, weil er Probleme damit hatte und mich gebeten hat, mal reinzuschauen. Als ich ihn gestartet habe (Windows XP SPK 1), versuchte er die Treiber für meinen Monitor zu installieren, wobei er dies nicht geschaft hat.
Er hat Sober schon beseitigt. Jetzt lässt sich aber so gut wie kein Programm mehr starten, so wie sämtliche Programme in der Systemsteuerung auch.
Also wollte ich gucken, ob Sober auch aus der Registry gelöscht ist. Als ich nun regedit starten wollte, sagte er mir, dass es weder eine Datei noch ein Verzeichnis namens regedit bzw. regedit.exe gibt. Durch googeln bin ich auf den Wurm "vxb.stages.A" gestoßen, der angäblich die regedit umbenennt und in C:\recycled verschiebt unter dem Namen recycled.vxb, aber auch dort ist solch eine Datei nicht zu finden.
Nun habe ich versucht irgendein Antivirenprogramm aufzuspielen, aber dies schlägt ebenfalls fehl. Was soll ich jetzt tun?

Bitte um Hilfe!
Danke im vorraus.

Havoc

EDIT: DAS HiJackThis Log:

Logfile of HijackThis v1.99.1
Scan saved at 18:40:19, on 04.12.2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\brsvc01a.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\brss01a.exe
C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\SCARDS32.EXE
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\Dit.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Programme\Classic PhoneTools\CapFax.EXE
C:\Programme\Medion\PowerCinema\My_TV\Agent.exe
C:\Programme\Real\RealPlayer\RealPlay.exe
C:\Programme\Logitech\iTouch\iTouch.exe
C:\Programme\MUSICMATCH\MUSICMATCH Jukebox\mmtask.exe
C:\Programme\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
C:\Programme\Logitech\MouseWare\system\em_exec.exe
C:\Programme\BearShare\BearShare.exe
C:\Programme\BearShare\BearShare.exe
C:\Programme\T-Online\T-Online_Software_5\Basis-Software\Basis2\kernel.exe
C:\Programme\T-Online\T-Online_Software_5\Basis-Software\Basis2\sc_watch.exe
C:\PROGRA~1\T-Online\T-ONLI~1\BASIS-~1\Basis2\PROFIL~1.EXE
C:\Dokumente und Einstellungen\Martin\Desktop\Virenscanner\hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.toriii.cc
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.aldi.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [CapFax] C:\Programme\Classic PhoneTools\CapFax.EXE
O4 - HKLM\..\Run: [ISDN SpeedManager] "C:\T-Online\BSW4\ISDNSP~1\Tomcat.exe"
O4 - HKLM\..\Run: [AVGCtrl] "C:\Programme\AVPersonal\AVGNT.EXE" /min
O4 - HKLM\..\Run: [ToADiMon.exe] C:\Programme\T-Online\T-Online_Software_5\Basis-Software\Basis1\ToADiMon.exe -TOnlineAutodialStart
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: MedionShop - {36AF14E3-8E6A-413E-A01F-360900AD6802} - http://www.medionshop.de (file missing) (HKCU)
O14 - IERESET.INF: START_PAGE_URL=http://www.medion.de
O16 - DPF: {4C39376E-FA9D-4349-BACC-D305C1750EF3} (EPUImageControl Class) - http://tools.ebayimg.com/eps/wl/activex/EPUWALControl_v1-0-3-9.cab
O16 - DPF: {6B4788E2-BAE8-11D2-A1B4-00400512739B} (PWMediaSendControl Class) - http://216.249.24.143/code/PWActiveXImgCtl.CAB
O16 - DPF: {8699D723-6DC6-47D3-B55C-489BA006B917} (WebInstall) - http://erotik.x-tonne.de/kerstin/webinstall.cab
O16 - DPF: {AB86CE53-AC9F-449F-9399-D8ABCA09EC09} (Get_ActiveX Control) - https://h17000.www1.hp.com/ewfrf-JAVA/Secure/HPGetDownloadManager.ocx
O16 - DPF: {E855A2D4-987E-4F3B-A51C-64D10A7E2479} (EPSImageControl Class) - http://tools.ebayimg.com/eps/activex/EPSControl_v1-0-3-0.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{EDC6E85D-41B2-43A2-8861-5F80A3CF10E3}: NameServer = 192.168.120.252,192.168.120.253
O18 - Protocol: bw+0 - {89F2BD8E-622B-4F88-8BDE-A9F986C4C931} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {89F2BD8E-622B-4F88-8BDE-A9F986C4C931} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {89F2BD8E-622B-4F88-8BDE-A9F986C4C931} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {89F2BD8E-622B-4F88-8BDE-A9F986C4C931} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {89F2BD8E-622B-4F88-8BDE-A9F986C4C931} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {89F2BD8E-622B-4F88-8BDE-A9F986C4C931} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {89F2BD8E-622B-4F88-8BDE-A9F986C4C931} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {89F2BD8E-622B-4F88-8BDE-A9F986C4C931} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {89F2BD8E-622B-4F88-8BDE-A9F986C4C931} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {89F2BD8E-622B-4F88-8BDE-A9F986C4C931} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {89F2BD8E-622B-4F88-8BDE-A9F986C4C931} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {89F2BD8E-622B-4F88-8BDE-A9F986C4C931} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {89F2BD8E-622B-4F88-8BDE-A9F986C4C931} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {89F2BD8E-622B-4F88-8BDE-A9F986C4C931} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {89F2BD8E-622B-4F88-8BDE-A9F986C4C931} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {89F2BD8E-622B-4F88-8BDE-A9F986C4C931} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {89F2BD8E-622B-4F88-8BDE-A9F986C4C931} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {89F2BD8E-622B-4F88-8BDE-A9F986C4C931} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {89F2BD8E-622B-4F88-8BDE-A9F986C4C931} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {89F2BD8E-622B-4F88-8BDE-A9F986C4C931} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {89F2BD8E-622B-4F88-8BDE-A9F986C4C931} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {89F2BD8E-622B-4F88-8BDE-A9F986C4C931} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {89F2BD8E-622B-4F88-8BDE-A9F986C4C931} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {89F2BD8E-622B-4F88-8BDE-A9F986C4C931} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {89F2BD8E-622B-4F88-8BDE-A9F986C4C931} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {89F2BD8E-622B-4F88-8BDE-A9F986C4C931} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {89F2BD8E-622B-4F88-8BDE-A9F986C4C931} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {89F2BD8E-622B-4F88-8BDE-A9F986C4C931} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {89F2BD8E-622B-4F88-8BDE-A9F986C4C931} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {89F2BD8E-622B-4F88-8BDE-A9F986C4C931} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {89F2BD8E-622B-4F88-8BDE-A9F986C4C931} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {89F2BD8E-622B-4F88-8BDE-A9F986C4C931} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {89F2BD8E-622B-4F88-8BDE-A9F986C4C931} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {89F2BD8E-622B-4F88-8BDE-A9F986C4C931} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {89F2BD8E-622B-4F88-8BDE-A9F986C4C931} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {89F2BD8E-622B-4F88-8BDE-A9F986C4C931} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {89F2BD8E-622B-4F88-8BDE-A9F986C4C931} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {89F2BD8E-622B-4F88-8BDE-A9F986C4C931} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {89F2BD8E-622B-4F88-8BDE-A9F986C4C931} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {89F2BD8E-622B-4F88-8BDE-A9F986C4C931} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {89F2BD8E-622B-4F88-8BDE-A9F986C4C931} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {89F2BD8E-622B-4F88-8BDE-A9F986C4C931} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {89F2BD8E-622B-4F88-8BDE-A9F986C4C931} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {89F2BD8E-622B-4F88-8BDE-A9F986C4C931} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {89F2BD8E-622B-4F88-8BDE-A9F986C4C931} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {89F2BD8E-622B-4F88-8BDE-A9F986C4C931} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {89F2BD8E-622B-4F88-8BDE-A9F986C4C931} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {89F2BD8E-622B-4F88-8BDE-A9F986C4C931} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {89F2BD8E-622B-4F88-8BDE-A9F986C4C931} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {89F2BD8E-622B-4F88-8BDE-A9F986C4C931} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {89F2BD8E-622B-4F88-8BDE-A9F986C4C931} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {89F2BD8E-622B-4F88-8BDE-A9F986C4C931} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {89F2BD8E-622B-4F88-8BDE-A9F986C4C931} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {89F2BD8E-622B-4F88-8BDE-A9F986C4C931} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {89F2BD8E-622B-4F88-8BDE-A9F986C4C931} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {89F2BD8E-622B-4F88-8BDE-A9F986C4C931} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {89F2BD8E-622B-4F88-8BDE-A9F986C4C931} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {89F2BD8E-622B-4F88-8BDE-A9F986C4C931} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {89F2BD8E-622B-4F88-8BDE-A9F986C4C931} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {89F2BD8E-622B-4F88-8BDE-A9F986C4C931} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {89F2BD8E-622B-4F88-8BDE-A9F986C4C931} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {89F2BD8E-622B-4F88-8BDE-A9F986C4C931} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {89F2BD8E-622B-4F88-8BDE-A9F986C4C931} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {89F2BD8E-622B-4F88-8BDE-A9F986C4C931} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {89F2BD8E-622B-4F88-8BDE-A9F986C4C931} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {89F2BD8E-622B-4F88-8BDE-A9F986C4C931} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {89F2BD8E-622B-4F88-8BDE-A9F986C4C931} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {89F2BD8E-622B-4F88-8BDE-A9F986C4C931} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {89F2BD8E-622B-4F88-8BDE-A9F986C4C931} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {89F2BD8E-622B-4F88-8BDE-A9F986C4C931} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {89F2BD8E-622B-4F88-8BDE-A9F986C4C931} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {89F2BD8E-622B-4F88-8BDE-A9F986C4C931} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {89F2BD8E-622B-4F88-8BDE-A9F986C4C931} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {89F2BD8E-622B-4F88-8BDE-A9F986C4C931} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {89F2BD8E-622B-4F88-8BDE-A9F986C4C931} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {89F2BD8E-622B-4F88-8BDE-A9F986C4C931} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: offline-8876480 - {89F2BD8E-622B-4F88-8BDE-A9F986C4C931} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O23 - Service: AntiVir Service (AntiVirService) - H+BEDV Datentechnik GmbH - C:\Programme\AVPersonal\AVGUARD.EXE
O23 - Service: BrSplService (Brother XP spl Service) - brother Industries Ltd - C:\WINDOWS\System32\brsvc01a.exe
O23 - Service: AVM FRITZ!web Routing Service (de_serv) - AVM Berlin - C:\Programme\Gemeinsame Dateien\AVM\de_serv.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: CHIPDRIVE SCARD Service (TWKSCARDSRV) - Towitoko AG - C:\WINDOWS\SCARDS32.EXE

#2 Häkchen setzen und "fix checked" klicken:

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.toriii.cc (außer dieser Eintrag ist gewünscht)
O16 - DPF: {8699D723-6DC6-47D3-B55C-489BA006B917} (WebInstall) - http://erotik.x-tonne.de/kerstin/webinstall.cab

Soweit sieht alles gut aus. Die Probleme können verschiedene Ursachen haben.

Probiere mal, ob folgendes geht:

Start -> Ausführen -> "sfc /scannow" (ohne Anführungszeichen)
Dies sollte die Systemdateien überprüfen und ggf. kaputte ersetzen oder fehlende hinzufügen. Falls er den Dateipfad nicht findet: "c:\windows\system32\sfc.exe /scannow"
Die Windows-XP-CD muss dabei eingelegt sein. Ggf. muss dies im abgesicherten Modus gemacht werden.

Sollte das nicht gehen, von der XP-CD booten und die Windows-Installation reparieren lassen.

Wenn auch das nicht zur Lösung des Problems führt, ist es wohl am einfachsten, Windows ganz neu zu isntallieren.
__________
Dies ist eine Signatur! Persönlicher Service: Du kommst aus Berlin? Dann melde Dich per PN bei mir, evtl. können wir einen Termin vereinbaren.
Der Grabsteinschubser

#3 Habe mich seit meinem Beitrag nen bisschen eingelesen in hijackthis und habe das problem selber gefixt.
Zu löschende Einträge:
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm

16 - DPF: {6B4788E2-BAE8-11D2-A1B4-00400512739B} (PWMediaSendControl Class) - http://216.249.24.143/code/PWActiveXImgCtl.CAB

16 - DPF: {8699D723-6DC6-47D3-B55C-489BA006B917} (WebInstall) - http://erotik.x-tonne.de/kerstin/webinstall.cab

und ALLE 018er Einträge!!!

Aber danke für deine Hilfe.

Vielleicht kannst du mir ja sagen, wie ich den gelöschten regedit wieder in das System bekomme!

MFG Havoc

#4 Das System auf SP2 updaten sollte reichen....
__________
MfG Ralf
SEO-Spam Hunter