Logfile of HijackThis v1.99.1
Scan saved at 22:32:01, on 25.08.2006
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)
Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSSystem32Ati2evxx.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32Ati2evxx.exe
C:WINDOWSExplorer.EXE
C:WINDOWSsystem32spoolsv.exe
C

rogrammeATI TechnologiesATI Control Panelatiptaxx.exe
C

rogrammeCreativeShared FilesModule LoaderDLLML.exe
C

rogrammeGemeinsame DateienRealUpdate_OBrealsched.exe
C

rogrammeTVRRecSche.exe
C:WINDOWSCTHELPER.EXE
C

rogrammeUnlockerUnlockerAssistant.exe
C

ROGRA~1GrisoftAVGFRE~1avgcc.exe
C

rogrammeCreativeSBAudigy4DVDAudioCTDVDDET.EXE
C

rogrammeCreativeSBAudigy4Surround MixerCTSysVol.exe
C

rogrammeSoftwinBitDefender9bdnagent.exe
C

rogrammeSoftwinBitDefender9bdswitch.exe
C:WINDOWSSystem32svchost.exe
C

rogrammeTGTSoftStyleXPStyleXP.exe
C

rogrammeMessengermsmsgs.exe
C

rogrammeCreativeMediaSourceDetectorCTDetect.exe
C

rogrammeMySpaceIMMySpaceIM.exe
C

rogrammeAntiVir PersonalEdition Classicsched.exe
C

ROGRA~1GrisoftAVGFRE~1avgamsvr.exe
C

ROGRA~1GrisoftAVGFRE~1avgupsvc.exe
C

ROGRA~1GrisoftAVGFRE~1avgemc.exe
C:WINDOWSSystem32CTsvcCDA.EXE
C:WINDOWSSystem32lvhidsvc.exe
C

rogrammeGemeinsame DateienSoftwinBitDefender Communicatorxcommsvr.exe
C:WINDOWSSystem32svchost.exe
C

rogrammeInternet ExplorerIEXPLORE.EXE
C

rogrammeGemeinsame DateienSoftwinBitDefender Update Servicelivesrv.exe
C

rogrammeGemeinsame DateienSoftwinBitDefender Scan Serverbdss.exe
C

rogrammeSoftwinBitDefender9vsserv.exe
c

rogrammesoftwinbitdefender9bdmcon.exe
c

rogrammesoftwinbitdefender9bdlite.exe
C

okumente und EinstellungenRoVe the OneDesktopHijackThis.exe
R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page =
http://google.de/
R1 - HKCUSoftwareMicrosoftWindowsCurrentVersionInternet Settings,AutoConfigURL = file://C

rogrammeWinSweepws.js
R3 - Default URLSearchHook is missing
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C

rogrammeAdobeAcrobat 7.0ActiveXAcroIEHelper.dll
O2 - BHO: My Global Search Bar BHO - {37B85A21-692B-4205-9CAD-2626E4993404} - C

rogrammeMyGlobalSearchbar2.binMGSBAR.DLL
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c

rogrammegooglegoogletoolbar1.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:WINDOWSSystem32msdxm.ocx
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c

rogrammegooglegoogletoolbar1.dll
O3 - Toolbar: My Global Search Bar - {37B85A29-692B-4205-9CAD-2626E4993404} - C

rogrammeMyGlobalSearchbar2.binMGSBAR.DLL
O3 - Toolbar: (no name) - {EA0D26BD-9029-431A-86E0-83152D67828A} - (no file)
O4 - HKLM..Run: [ATIPTA] C

rogrammeATI TechnologiesATI Control Panelatiptaxx.exe
O4 - HKLM..Run: [AudioDrvEmulator] "C

rogrammeCreativeShared FilesModule LoaderDLLML.exe" -1 AudioDrvEmulator "C

rogrammeCreativeShared FilesModule LoaderAudio EmulatorAudDrvEm.dll"
O4 - HKLM..Run: [TkBellExe] "C

rogrammeGemeinsame DateienRealUpdate_OBrealsched.exe" -osboot
O4 - HKLM..Run: [avgnt] "C

rogrammeAntiVir PersonalEdition Classicavgnt.exe" /min
O4 - HKLM..Run: [NeroFilterCheck] C:WINDOWSSystem32NeroCheck.exe
O4 - HKLM..Run: [RecSche] "C

rogrammeTVRRecSche.exe"
O4 - HKLM..Run: [WinDVRCtrl] C:WINDOWSWDVRCtrl.exe
O4 - HKLM..Run: [ScanRegistry] C:W
O4 - HKLM..Run: [CTHelper] CTHELPER.EXE
O4 - HKLM..Run: [UpdReg] C:WINDOWSUpdReg.EXE
O4 - HKLM..Run: [KernelFaultCheck] %systemroot%system32dumprep 0 -k
O4 - HKLM..Run: [UnlockerAssistant] "C

rogrammeUnlockerUnlockerAssistant.exe"
O4 - HKLM..Run: [AVG7_CC] C

ROGRA~1GrisoftAVGFRE~1avgcc.exe /STARTUP
O4 - HKLM..Run: [CTDVDDET] C

rogrammeCreativeSBAudigy4DVDAudioCTDVDDET.EXE
O4 - HKLM..Run: [CTSysVol] C

rogrammeCreativeSBAudigy4Surround MixerCTSysVol.exe /r
O4 - HKLM..Run: [RCSystem] "C

rogrammeCreativeShared FilesModule LoaderDLLML.exe" RCSystem * -Startup
O4 - HKLM..Run: [.nvsvc] C:WINDOWSsystemsmss.exe /w
O4 - HKLM..Run: [BDMCon] "C

rogrammeSoftwinBitDefender9bdmcon.exe"
O4 - HKLM..Run: [BDNewsAgent] "c

rogrammesoftwinbitdefender9bdnagent.exe"
O4 - HKLM..Run: [BDSwitchAgent] "c

rogrammesoftwinbitdefender9bdswitch.exe"
O4 - HKCU..Run: [STYLEXP] C

rogrammeTGTSoftStyleXPStyleXP.exe -Hide
O4 - HKCU..Run: [MSMSGS] "C

rogrammeMessengermsmsgs.exe" /background
O4 - HKCU..Run: [Creative Detector] C

rogrammeCreativeMediaSourceDetectorCTDetect.exe /R
O4 - HKCU..Run: [MySpaceIM] C

rogrammeMySpaceIMMySpaceIM.exe
O4 - HKCU..Run: [updateMgr] "C

rogrammeAdobeAcrobat 7.0ReaderAdobeUpdateManager.exe" AcRdB7_0_7 -reboot 1
O4 - HKCU..Run: [SpybotSD TeaTimer] C

rogrammeSpybot - Search & DestroyTeaTimer.exe
O4 - Global Startup: Adobe Reader - Schnellstart.lnk = C

rogrammeAdobeAcrobat 7.0Readerreader_sl.exe
O8 - Extra context menu item: &Google-Suche - res://C

rogrammeGoogleGoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: &Ins Deutsche übersetzen - res://C

rogrammeGoogleGoogleToolbar1.dll/cmwordtrans.html
O8 - Extra context menu item: Im Cache gespeicherte Seite - res://C

rogrammeGoogleGoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: Verweisseiten - res://C

rogrammeGoogleGoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Ähnliche Seiten - res://C

rogrammeGoogleGoogleToolbar1.dll/cmsimilar.html
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:WINDOWSwebrelated.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:WINDOWSwebrelated.htm
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) -
http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1148991948842
O16 - DPF: {D2982A7F-489A-47F5-A319-FC1F14EBC245} (Navigator Class) -
http://www.nutzwerk.de/control/NutzNavi.cab
O17 - HKLMSystemCCSServicesTcpip..{568B5E85-A67C-4DC1-8F2A-00F515F4340F}: NameServer = 194.6.239.34,145.253.2.11
O17 - HKLMSystemCCSServicesTcpip..{A5879088-3231-47B9-95BF-0C53BD423734}: NameServer = 194.6.239.34,145.253.2.11
O23 - Service: AntiVir PersonalEdition Classic Planer (AntiVirScheduler) - Avira GmbH - C

rogrammeAntiVir PersonalEdition Classicsched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - AVIRA GmbH - C

rogrammeAntiVir PersonalEdition Classicavguard.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:WINDOWSSystem32Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:WINDOWSsystem32ati2sgag.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C

ROGRA~1GrisoftAVGFRE~1avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C

ROGRA~1GrisoftAVGFRE~1avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C

ROGRA~1GrisoftAVGFRE~1avgemc.exe
O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - C

rogrammeGemeinsame DateienSoftwinBitDefender Scan Serverbdss.exe" /service (file missing)
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:WINDOWSSystem32CTsvcCDA.EXE
O23 - Service: BitDefender Desktop Update Service (LIVESRV) - Unknown owner - C

rogrammeGemeinsame DateienSoftwinBitDefender Update Servicelivesrv.exe" /service (file missing)
O23 - Service: Remote HID Service (LvHidSvc) - Philips - C:WINDOWSSystem32lvhidsvc.exe
O23 - Service: StyleXPService - Unknown owner - C

rogrammeTGTSoftStyleXPStyleXPService.exe
O23 - Service: BitDefender Virus Shield (VSSERV) - Unknown owner - C

rogrammeSoftwinBitDefender9vsserv.exe" /service (file missing)
O23 - Service: BitDefender Communicator (XCOMM) - Unknown owner - C

rogrammeGemeinsame DateienSoftwinBitDefender Communicatorxcommsvr.exe" /service (file missing)