ebenfalls: schwarzer Desktop, keine Dateien, Delayed Write Failed, Critical Error

ComboFix 11-11-08.02 - marius 09.11.2011  16:06:11.2.1 - x86
Microsoft Windows 7 Ultimate   6.1.7601.1.1252.49.1031.18.1790.1153 [GMT 1:00]
ausgeführt von:: c:\users\marius\Desktop\ComboFix.exe
Benutzte Befehlsschalter :: c:\users\marius\Desktop\cfscript.txt
AV: Symantec Endpoint Protection *Enabled/Updated* {63DF5164-9100-186D-2187-8DC619EFD8BF}
FW: Symantec Endpoint Protection *Disabled* {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}
SP: Symantec Endpoint Protection *Enabled/Updated* {D8BEB080-B73A-17E3-1B37-B6B462689202}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
(((((((((((((((((((((((   Dateien erstellt von 2011-10-09 bis 2011-11-09  ))))))))))))))))))))))))))))))
.
.
2011-11-09 15:10 . 2011-11-09 15:10	--------	d-----w-	c:\users\Surfer\AppData\Local\temp
2011-11-09 15:10 . 2011-11-09 15:10	--------	d-----w-	c:\users\Default\AppData\Local\temp
2011-11-09 13:32 . 2011-11-09 15:12	--------	d-----w-	c:\users\marius\AppData\Local\temp
2011-11-09 13:28 . 2011-11-09 13:37	56200	----a-w-	c:\programdata\Microsoft\Windows Defender\Definition Updates\{9A4E8610-C976-42AB-B81E-EAAAA356CE6C}\offreg.dll
2011-11-09 13:21 . 2009-07-13 23:11	80896	----a-w-	c:\windows\system32\drivers\i8042prt.sys
2011-11-09 10:09 . 2011-10-18 01:28	6668624	----a-w-	c:\programdata\Microsoft\Windows Defender\Definition Updates\{9A4E8610-C976-42AB-B81E-EAAAA356CE6C}\mpengine.dll
2011-10-31 21:25 . 2011-10-31 21:49	--------	d-----w-	c:\users\Surfer\AppData\Roaming\vlc
2011-10-31 09:16 . 2011-10-31 09:16	--------	d-----w-	c:\users\Surfer\AppData\Local\Diagnostics
2011-10-31 09:14 . 2011-02-19 06:30	805376	----a-w-	c:\windows\system32\FntCache.dll
2011-10-31 09:14 . 2011-02-19 06:30	1076736	----a-w-	c:\windows\system32\DWrite.dll
2011-10-31 09:14 . 2011-02-19 06:30	739840	----a-w-	c:\windows\system32\d2d1.dll
2011-10-25 21:23 . 2011-08-13 04:18	6144	----a-w-	c:\program files\Internet Explorer\iecompat.dll
2011-10-15 00:56 . 2011-10-15 00:56	--------	d-----w-	c:\users\Surfer\AppData\Local\Adobe
2011-10-15 00:32 . 2011-10-15 00:32	--------	d-----w-	c:\users\Surfer\AppData\Local\Symantec
2011-10-12 07:42 . 2011-08-27 04:26	233472	----a-w-	c:\windows\system32\oleacc.dll
2011-10-12 07:42 . 2011-08-27 04:26	571904	----a-w-	c:\windows\system32\oleaut32.dll
2011-10-12 07:41 . 2011-08-17 04:24	465408	----a-w-	c:\windows\system32\psisdecd.dll
2011-10-12 07:41 . 2011-08-17 04:19	75776	----a-w-	c:\windows\system32\psisrndr.ax
2011-10-12 07:41 . 2011-09-06 02:28	2334720	----a-w-	c:\windows\system32\win32k.sys
2011-10-12 07:40 . 2011-08-20 04:31	981504	----a-w-	c:\windows\system32\wininet.dll
2011-10-12 07:40 . 2011-08-20 04:26	860672	----a-w-	c:\program files\Internet Explorer\iedvtool.dll
2011-10-12 07:40 . 2011-08-20 04:26	163328	----a-w-	c:\program files\Internet Explorer\ieproxy.dll
2011-10-12 07:40 . 2011-10-01 02:42	1638912	----a-w-	c:\windows\system32\mshtml.tlb
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-10-15 16:58 . 2011-06-12 01:33	414368	----a-w-	c:\windows\system32\FlashPlayerCPLApp.cpl
2011-09-23 13:50 . 2011-09-23 13:50	126584	----a-w-	c:\windows\system32\drivers\SYMEVENT.SYS
2011-10-19 09:45 . 2011-06-10 09:19	134104	----a-w-	c:\program files\mozilla firefox\components\browsercomps.dll
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2011-02-18 05:12	94208	----a-w-	c:\users\marius\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2011-02-18 05:12	94208	----a-w-	c:\users\marius\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2011-02-18 05:12	94208	----a-w-	c:\users\marius\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1174016]
"RESTART_STICKY_NOTES"="c:\windows\System32\StikyNot.exe" [2009-07-14 354304]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DivXUpdate"="c:\program files\DivX\DivX Update\DivXUpdate.exe" [2011-03-21 1230704]
"EEventManager"="c:\progra~1\EPSONS~1\EVENTM~1\EEventManager.exe" [2009-04-07 673616]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2011-04-08 254696]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-06-06 937920]
"itype"="c:\program files\Microsoft IntelliType Pro\itype.exe" [2010-07-21 1778064]
"IntelliPoint"="c:\program files\Microsoft IntelliPoint\ipoint.exe" [2010-07-21 1797008]
"SSBkgdUpdate"="c:\program files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" [2003-10-14 155648]
"PaperPort PTD"="c:\program files\ScanSoft\PaperPort\pptd40nt.exe" [2005-03-17 57393]
"IndexSearch"="c:\program files\ScanSoft\PaperPort\IndexSearch.exe" [2005-03-17 40960]
"ccApp"="c:\program files\Common Files\Symantec Shared\ccApp.exe" [2011-03-30 115624]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux1"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ccEvtMgr]
@="Service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ccSetMgr]
@="Service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Symantec Antivirus]
@="Service"
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2010-11-20 15872]
R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 52224]
R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys [x]
R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys [x]
S1 Teefer3;Symantec Endpoint Protection Firewall;c:\windows\system32\DRIVERS\Teefer3.sys [2011-04-08 43936]
S1 VWiFiFlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [2009-07-13 48128]
S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files\Common Files\Adobe\ARM\1.0\armsvc.exe [2011-06-06 64952]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2009-08-18 176128]
S3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2011-09-15 105592]
S3 k57nd60x;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0;c:\windows\system32\DRIVERS\k57nd60x.sys [2009-10-16 274984]
S3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\system32\DRIVERS\vwifimp.sys [2009-07-13 14336]
.
.
Inhalt des "geplante Tasks" Ordners
.
2011-11-08 c:\windows\Tasks\Epson Printer Software Downloader.job
- c:\program files\EPSON\EPAPDL\E_SAPDL2.EXE [2009-05-26 09:43]
.
.
------- Zusätzlicher Suchlauf -------
.
TCP: DhcpNameServer = 192.168.1.1
FF - ProfilePath - c:\users\marius\AppData\Roaming\Mozilla\Firefox\Profiles\4mvs2cq2.default\
FF - prefs.js: network.proxy.type - 0
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
--------------------- Durch laufende Prozesse gestartete DLLs ---------------------
.
- - - - - - - > 'Explorer.exe'(300)
c:\users\marius\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\windows\system32\atieclxx.exe
c:\program files\Symantec\Symantec Endpoint Protection\Smc.exe
c:\program files\Common Files\Symantec Shared\ccSvcHst.exe
c:\program files\Common Files\EPSON\EBAPI\eEBSVC.exe
c:\windows\system32\sppsvc.exe
c:\program files\Symantec\Symantec Endpoint Protection\Rtvscan.exe
c:\windows\system32\taskhost.exe
c:\program files\Symantec\Symantec Endpoint Protection\SmcGui.exe
c:\windows\system32\conhost.exe
c:\program files\Windows Media Player\wmpnetwk.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2011-11-09  16:16:40 - PC wurde neu gestartet
ComboFix-quarantined-files.txt  2011-11-09 15:16
ComboFix2.txt  2011-11-09 13:39
.
Vor Suchlauf: 7 Verzeichnis(se), 195.043.467.264 Bytes frei
Nach Suchlauf: 8 Verzeichnis(se), 194.851.049.472 Bytes frei
.
- - End Of File - - 4DDC20BA0CA1AF4A84D89B345D113157