thanks!!
Here is a problem again: when drag&drop-ping the script file to ComboFix I receive the message "CFScript is not a registry script file"... I am sure I copied it correctly.
I tried the same in the safe mode with networking (but not connected to the network) (I cannot login in the pure safe mode) and get the same message...
The hijackthis did a good job, though.