Dim command As OleDbCommand = New OleDbCommand("SELECT KatID FROM TDatei WHERE" & _
  "Titel=?", MyConn)
command.Parameters.AddWithValue("@1", TStringReplace(lstTitel.Text))
Dim reader As OleDbDataReader = command.ExecuteReader()

Public Function TStringReplace(ByVal StrName As String) As String
   Dim s As String = StrName
   s = s.Replace("'", "''")
   TStringReplace = s
End Function

~ no brain, no headache ~