Of cause, I did the avast boot time, Also tried Norton Intenet security with full scan. Norton just turned off http:80 for all use to stop it.
Winlogon is the process, I think. I had to turn off avast to get the process list right. Otherwise the ashMaiSv.exe is the process.
Tried TCPView - but i got no new information here.
I tried Ad-Aware, found some cookies, but not related to this problem.
Tried Spybot - found nothing new.
Tried to use HiJackThis, but that did not help me find anything
Im gonna trie Ewido Security Suite now, let's hope it can fint it!