svchost fehler bei rechner start

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:32:56, on 21.04.2011
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Microsoft Security Client\msseces.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Users\markus\AppData\Local\Temp\Win_Update_newdsfsd\Windows_Update_newdsfsd.exe
C:\Users\markus\AppData\Roaming\svchost.exe
C:\Users\markus\AppData\Roaming\svchostwindows\svchost.bat
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
D:\Downloads\HiJackThis204.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Bing
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Startfenster.de - Mein Startfenster im Internet
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN NL: Hotmail, Outlook, Skype, het laatste nieuws, entertainment en meer!
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN NL: Hotmail, Outlook, Skype, het laatste nieuws, entertainment en meer!
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - - (no file)
O2 - BHO: vShare Toolbar - {043C5167-00BB-4324-AF7E-62013FAEDACF} - C:\Program Files\vShare\vshare_toolbar.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: vShare Toolbar - {043C5167-00BB-4324-AF7E-62013FAEDACF} - C:\Program Files\vShare\vshare_toolbar.dll
O4 - HKLM\..\Run: [MSC] "c:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKCU\..\Run: [Update] C:\Users\markus\AppData\Local\Temp\Win_Update_newdsfsd\Windows_Update_newdsfsd.exe
O4 - HKCU\..\Run: [Windows Explorer] C:\Users\markus\AppData\Roaming\svchost.exe
O4 - HKCU\..\Run: [Windows] C:\Users\markus\AppData\Roaming\svchostwindows\svchost.bat
O8 - Extra context menu item: Nach Microsoft E&xel exportieren - res://C:\PROGRA~1\MICROS~4\Office12\EXCEL.EXE/3000
O9 - Extra button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~4\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~4\Office12\ONBttnIE.dll
O9 - Extra button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: vsharechrome - {3F3A4B8A-86FC-43A4-BB00-6D7EBE9D4484} - C:\Program Files\vShare\vshare_toolbar.dll
O20 - AppInit_DLLs: AnyDiscHelp.dll
O23 - Service: AMD External Events Utility - AMD - C:\Windows\system32\atiesrxx.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Dienst "Bonjour" (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Dragon Age: Origins - Inhaltsupdater (DAUpdaterSvc) - BioWare - D:\spiele\Dragon Age\bin_ship\DAUpdaterSvc.Service.exe
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies, Inc. - C:\Program Files\WinPcap\rpcapd.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe

--
End of file - 5178 bytes

Malwarebytes' Anti-Malware 1.50.1.1100
Malwarebytes | Free Anti-Malware & Internet Security Software

Datenbank Version: 6414

Windows 6.1.7600
Internet Explorer 9.0.8112.16421

21.04.2011 21:04:33
mbam-log-2011-04-21 (21-04-25).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|)
Durchsuchte Objekte: 219268
Laufzeit: 2 Stunde(n), 26 Minute(n), 32 Sekunde(n)

Infizierte Speicherprozesse: 2
Infizierte Speichermodule: 0
Infizierte Registrierungsschlüssel: 0
Infizierte Registrierungswerte: 2
Infizierte Dateiobjekte der Registrierung: 0
Infizierte Verzeichnisse: 0
Infizierte Dateien: 15

Infizierte Speicherprozesse:
c:\Users\markus\AppData\Local\Temp\win_update_newdsfsd\windows_update_newdsfsd.exe (Trojan.Agent) -> 2680 -> No action taken.
c:\Users\markus\AppData\Roaming\svchostwindows\svchost.bat (Trojan.MSIL) -> 2752 -> No action taken.

Infizierte Speichermodule:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Update (Trojan.Agent) -> Value: Update -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Windows (Trojan.MSIL) -> Value: Windows -> No action taken.

Infizierte Dateiobjekte der Registrierung:
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse:
(Keine bösartigen Objekte gefunden)

Infizierte Dateien:
c:\Users\markus\AppData\Local\Temp\win_update_newdsfsd\windows_update_newdsfsd.exe (Trojan.Agent) -> No action taken.
c:\Users\markus\AppData\Roaming\svchostwindows\svchost.bat (Trojan.MSIL) -> No action taken.
c:\Users\markus\AppData\Local\Temp\0.exe (Trojan.P2P.Worm) -> No action taken.
c:\Users\markus\AppData\Local\Temp\1.exe (Trojan.MSIL) -> No action taken.
c:\Users\markus\AppData\Local\Temp\4gstawdcvxc.exe (Trojan.MSIL.ND3) -> No action taken.
c:\Users\markus\AppData\Local\Temp\5qhlkyufdwd.exe (Trojan.Agent) -> No action taken.
c:\Users\markus\AppData\Local\Temp\BB32urSG.exe (Trojan.Agent) -> No action taken.
c:\Users\markus\AppData\Local\Temp\cbvbcvvvd.exe (Trojan.MSIL) -> No action taken.
c:\Users\markus\AppData\Local\Temp\is-UVCRP.tmp\Oleau64.dll (Spyware.Banker.Gen) -> No action taken.
c:\Users\markus\AppData\Local\Temp\is-UVCRP.tmp\RMPly00.exe (Adware.Agent) -> No action taken.
c:\Users\markus\AppData\Roaming\secure-soft stealer\Update.exe (Trojan.P2P.Worm) -> No action taken.
c:\program files\SlySoft\AnyDVD\anydvd.hd.6.6.8.3.final.patch-jw.exe (RiskWare.Tool.CK) -> No action taken.
d:\downloads\Apps\00002\slysoft clonedvd 2.9.2.8\core key-generator\CORE10k.EXE (Dont.Steal.Our.Software) -> No action taken.
d:\downloads\Apps\00002\slysoft clonedvd 2.9.2.8\core key-generator\keygen.exe (RiskWare.Tool.CK) -> No action taken.
d:\downloads\Apps\advdhd6683f\anydvd hd v.6.6.8.3 final\patch\anydvd.hd.6.6.8.3.final.patch-jw.exe (RiskWare.Tool.CK) -> No action taken.