Browser (Firefox) zweifelt Zertifikate an

ComboFix 12-02-17.02 - ASUS 18.02.2012  21:12:12.1.2 - x86
Microsoft® Windows Vista™ Home Premium   6.0.6002.2.1252.49.1031.18.3071.2146 [GMT 1:00]
ausgeführt von:: c:\users\ASUS\Desktop\ComboFix.exe
Benutzte Befehlsschalter :: c:\users\ASUS\Desktop\cfscript.txt
AV: AntiVir Desktop *Disabled/Updated* {090F9C29-64CE-6C6F-379C-5901B49A85B7}
SP: AntiVir Desktop *Disabled/Updated* {B26E7DCD-42F4-63E1-0D2C-6273CF1DCF0A}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\ASUS\AppData\Roaming\Duul
c:\users\ASUS\AppData\Roaming\Duul\hopun.tmp
c:\users\ASUS\AppData\Roaming\Duul\hopun.ywx
c:\users\ASUS\AppData\Roaming\Lyamuh
.
.
(((((((((((((((((((((((   Dateien erstellt von 2012-01-18 bis 2012-02-18  ))))))))))))))))))))))))))))))
.
.
2012-02-18 20:17 . 2012-02-18 20:20	--------	d-----w-	c:\users\ASUS\AppData\Local\temp
2012-02-18 20:17 . 2012-02-18 20:17	--------	d-----w-	c:\users\Jessy\AppData\Local\temp
2012-02-17 20:01 . 2012-02-17 20:01	--------	d-----w-	C:\found.000
2012-02-17 17:31 . 2012-01-06 04:19	6557240	----a-w-	c:\programdata\Microsoft\Windows Defender\Definition Updates\{85633861-5D67-4D0A-A5D2-A0F777FED96A}\mpengine.dll
2012-02-13 22:40 . 2008-07-07 04:20	224016	----a-w-	c:\windows\system32\tabctl32.ocx
2012-02-13 22:40 . 2008-07-07 04:20	152848	----a-w-	c:\windows\system32\comdlg32.ocx
2012-02-13 22:40 . 2008-07-07 04:20	119808	----a-w-	c:\windows\system32\msstdfmt.dll
2012-02-13 22:40 . 2008-07-07 04:20	1081616	----a-w-	c:\windows\system32\mscomctl.ocx
2012-02-13 22:40 . 2012-02-14 01:26	--------	d-----w-	c:\program files\iMacros
2012-02-09 16:51 . 2012-02-18 19:48	--------	d-----w-	c:\users\ASUS\AppData\Local\PokerStars
2012-02-09 16:50 . 2012-02-10 08:11	--------	d-----w-	c:\program files\PokerStars
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-02-18 20:19 . 2011-03-03 13:48	45056	----a-w-	c:\windows\system32\acovcnt.exe
2012-02-16 00:24 . 2011-08-06 19:50	414368	----a-w-	c:\windows\system32\FlashPlayerCPLApp.cpl
2012-01-26 23:21 . 2011-04-25 11:36	237072	------w-	c:\windows\system32\MpSigStub.exe
2011-12-10 14:24 . 2011-06-03 20:36	20464	----a-w-	c:\windows\system32\drivers\mbam.sys
2011-11-25 15:59 . 2012-01-11 19:51	376320	----a-w-	c:\windows\system32\winsrv.dll
2008-08-08 22:48 . 2008-08-08 22:48	90112	----a-w-	c:\program files\Common Files\CPInstallAction.dll
2012-02-17 19:54 . 2011-04-01 20:57	134104	----a-w-	c:\program files\mozilla firefox\components\browsercomps.dll
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)
.
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2011-08-24 113024]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
2009-09-03 22:21	548352	----a-w-	c:\program files\SUPERAntiSpyware\SASWINLO.DLL
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE]
@=""
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001
.
S2 !SASCORE;SAS Core Service;c:\program files\SUPERAntiSpyware\SASCORE.EXE [2011-08-24 116608]
.
.
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = hxxp://www.google.de/
TCP: DhcpNameServer = 193.189.244.225 193.189.244.206
TCP: Interfaces\{9D21917B-13E3-480F-B124-E38DF509530B}: NameServer = 208.67.222.222,208.67.220.220
FF - ProfilePath - c:\users\ASUS\AppData\Roaming\Mozilla\Firefox\Profiles\m3coibkm.default\
FF - prefs.js: browser.startup.homepage - about:home
FF - prefs.js: keyword.URL - hxxp://www.google.com/search?sourceid=navclient&hl=de&q=
FF - user.js: network.cookie.cookieBehavior - 0
FF - user.js: privacy.clearOnShutdown.cookies - false
FF - user.js: security.warn_viewing_mixed - false
FF - user.js: security.warn_viewing_mixed.show_once - false
FF - user.js: security.warn_submit_insecure - false
FF - user.js: security.warn_submit_insecure.show_once - false
.
.
**************************************************************************
Scanne versteckte Prozesse... 
.
Scanne versteckte Autostarteinträge... 
.
Scanne versteckte Dateien... 
.
Scan erfolgreich abgeschlossen
versteckte Dateien: 
.
**************************************************************************
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0004\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0005\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0006\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\windows\system32\nvvsvc.exe
c:\program files\ASUS\ATK Hotkey\ASLDRSrv.exe
c:\windows\system32\WLANExt.exe
c:\program files\ATKGFNEX\GFNEXSrv.exe
c:\windows\system32\rundll32.exe
c:\program files\Avira\AntiVir Desktop\sched.exe
c:\windows\System32\lpksetup.exe
c:\program files\ASUS\SmartLogon\sensorsrv.exe
c:\program files\ASUS\ASUS CopyProtect\aspg.exe
c:\program files\P4G\BatteryLife.exe
c:\program files\ASUS\ATK Hotkey\MsgTranAgt.exe
c:\program files\ASUS\ATK Hotkey\HControl.exe
c:\program files\Wireless Console 2\wcourier.exe
c:\program files\ASUS\Splendid\ACMON.exe
c:\program files\ASUS\ATK Hotkey\ATKOSD.exe
c:\program files\ASUS\ATK Hotkey\KBFiltr.exe
c:\program files\ASUS\ATK Hotkey\WDC.exe
c:\windows\System32\ACEngSvr.exe
c:\program files\Avira\AntiVir Desktop\avguard.exe
c:\asus.sys\DVMExportService.exe
c:\programdata\DatacardService\HWDeviceService.exe
c:\program files\Silvercrest MTS2218 driver\KMWDSrv.exe
c:\program files\Avira\AntiVir Desktop\avshadow.exe
c:\programdata\Mobile Partner\OnlineUpdate\ouc.exe
c:\program files\XSManager\WTGService.exe
c:\windows\service4g.exe
c:\windows\system32\WUDFHost.exe
c:\windows\starter4g.exe
c:\windows\servicing\TrustedInstaller.exe
c:\windows\system32\conime.exe
c:\program files\Symantec\LiveUpdate\AluSchedulerSvc.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2012-02-18  21:25:22 - PC wurde neu gestartet
ComboFix-quarantined-files.txt  2012-02-18 20:24
ComboFix2.txt  2012-02-18 17:23
.
Vor Suchlauf: 11 Verzeichnis(se), 60.351.176.704 Bytes frei
Nach Suchlauf: 13 Verzeichnis(se), 60.652.060.672 Bytes frei
.
- - End Of File - - D01BC746D883A0327786D3138A122D6E