Abnow Rootkit (zum Teil wohl entfernt)

Redliner89

Hallo!

Ich habe mir vor ein paar Wochen das mittlerweile wohl gut bekannte "Abnow rootkit" eingefangen (Immer wenn ich über Google auf eine Seite möchte kommt Abnow).
Ich kümmer mich wegen Prüfungsstress leider erst jetzt darum. Nach einiger Recherche Habe ich mal Malwarebytes Stinger, Norton Power Eraser, Bitdefender Removal Tool und FixZeroAccess durchlaufen lassen (etliches wurde gefunden und Gelöscht).
Mit dem Erfolg dass immerhin AVG beim durchlaufen keinen Trojaner etc. mehr fand (vorher waren es um die 70 (alle wegen abnow, denn vorher waren die nicht da)).
Hier dachte ich Erfolg gehabt zu haben und wollte mein Notebook wieder ans Internet anschließen, um zu schauen ob Abnow weg ist.
Das funktionierte aber (gottseidank) nicht. Das veranlasste mich in der Firewall nachzuschauen was los ist. Und dort stand unter alles Optionen bloß : "Die zum Schutz des Computers empfohlenen Einstellungen werden nicht von der Windows Firewall verwendet."
Wenn ich dann daneben auf "Empfohlene Einstellungen" klicke, kommt nur "Einige der Einstellungen können von der Windows Firewall nicht geändert werden". - Fehlercode: 0x80070424.
Also ist vom Abnow Rootkit wohl noch so einiges da oder? Oder hat es womöglich nur einiges verstellt ?

Ps: Ich könnte natürlich über irgendwelche Umwegen( WIndows Installations-CD nicht mehr so recht auffindbar) das Notebook neu aufsetzen, vor allem weil auch EInkäufe und Online Banking auf dem Rechnerdurchgeführt wurden (KEnnwörter geändert), was aber verdammt kompliziert wäre von der Datenrettung her, da nicht wirklich ordentlich geführt O.o
ALso ich würde schon in Kauf nehmen, dass ich keine Finanziellen Sachen mehr über den Rechner machen kann in Zukunft, wenn ich ihn dafür nicht neu Aufsetzen müsste.
Oder ist das gefährlich für andere Rechner in Netzwerken etc.?

Schon mal nen verdammt Großen an alle die helfen oder es Versuchen ! Ihr leistet hier wirklich alle großartige Arbeit!!

DDS:

.
DDS (Ver_2011-08-26.01) - NTFSx86
Internet Explorer: 8.0.7600.16385 BrowserJavaVersion: 1.6.0_26
Run by Stefan at 20:28:46 on 2012-02-20
Microsoft Windows 7 Home Premium 6.1.7600.0.1252.49.1031.18.3071.1995 [GMT 1:00]
.
AV: AVG Anti-Virus Free Edition 2011 *Enabled/Updated* {5A2746B1-DEE9-F85A-FBCD-ADB11639C5F0}
SP: AVG Anti-Virus Free Edition 2011 *Enabled/Updated* {E146A755-F8D3-F7D4-C17D-96C36DBE8F4D}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\PROGRA~1\AVG\AVG10\avgchsvx.exe
C:\PROGRA~1\AVG\AVG10\avgrsx.exe
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\atieclxx.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\AVG\AVG10\avgwdsvc.exe
C:\Program Files\Microsoft\BingBar\BBSvc.EXE
C:\Program Files\Microsoft\BingBar\SeaPort.EXE
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Windows\system32\svchost.exe -k bthsvcs
C:\Windows\System32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Program Files\Rightdown Software SearchBar\GameUpdaterSrv.exe
D:\Program Files\LogMeIn Hamachi\hamachi-2.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
C:\Program Files\ICQ6Toolbar\ICQ Service.exe
C:\Windows\system32\libusbd-nt.exe
C:\Program Files\System Control Manager\MSIService.exe
C:\Windows\system32\PnkBstrA.exe
C:\Users\Stefan\AppData\Roaming\OCS\SM\SearchAnonymizerHelper.exe
C:\Windows\system32\svchost.exe -k imgsvc
D:\Program Files\TuneUp Utilities 2012\TuneUpUtilitiesService32.exe
C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\10.0.6\ToolbarUpdater.exe
C:\Program Files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe
C:\Program Files\AVG\AVG10\avgemcx.exe
C:\Windows\system32\conhost.exe
C:\Windows\servicing\TrustedInstaller.exe
C:\Windows\system32\WUDFHost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskhost.exe
D:\Program Files\TuneUp Utilities 2012\TuneUpUtilitiesApp32.exe
C:\Windows\system32\taskhost.exe
C:\Program Files\Rightdown Software SearchBar\GameUpdater.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\ProgramData\Macrovision\FLEXnet Connect\6\ISUSPM.exe
D:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe
C:\Program Files\ICQ7.2\ICQ.exe
C:\Program Files\Common Files\Nokia\Tss\Instrument API\bin\tray.exe
C:\Windows\System\w98eject.exe
C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\Common Files\Nokia\Tss\Instrument API\bin\root.exe
C:\Windows\system32\conhost.exe
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe
C:\Program Files\PC Connectivity Solution\Transports\NclMSBTSrvEx.exe
C:\Windows\system32\SearchIndexer.exe
C:\Windows\system32\sppsvc.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\DllHost.exe
C:\Windows\system32\DllHost.exe
C:\Windows\system32\conhost.exe
.
============== Pseudo HJT Report ===============
.
uDefault_Page_URL = hxxp://www.msi.com
uStart Page = hxxp://www.google.de/
mDefault_Page_URL = hxxp://www.msi.com
uInternet Settings,ProxyServer = 0.0.0.0:80
uInternet Settings,ProxyOverride = <local>;*.local
uURLSearchHooks: ICQToolBar: {855f3b16-6d32-4fe6-8a56-bbb695989046} - c:\program files\icq6toolbar\ICQToolBar.dll
uURLSearchHooks: H - No File
uURLSearchHooks: H - No File
uURLSearchHooks: softonic-de3 Toolbar: {cc05a3e3-64c3-4af2-bfc1-af0d66b69065} - c:\program files\softonic-de3\tbsoft.dll
mURLSearchHooks: ICQToolBar: {855f3b16-6d32-4fe6-8a56-bbb695989046} - c:\program files\icq6toolbar\ICQToolBar.dll
mURLSearchHooks: softonic-de3 Toolbar: {cc05a3e3-64c3-4af2-bfc1-af0d66b69065} - c:\program files\softonic-de3\tbsoft.dll
mURLSearchHooks: H - No File
mURLSearchHooks: ICQToolBar: {855f3b16-6d32-4fe6-8a56-bbb695989046} - c:\program files\icq6toolbar\ICQToolBar.dll
mURLSearchHooks: H - No File
mURLSearchHooks: H - No File
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: GetRight IE Helper: {31ff080d-12a3-439a-a2ef-4ba95a3148e8} - d:\program files\getright\xx2gr.dll
BHO: DivX Plus Web Player HTML5 <video>: {326e768d-4182-46fd-9c16-1449a49795f4} - c:\program files\divx\divx plus web player\ie\divxhtml5\DivXHTML5.dll
BHO: AVG Safe Search: {3ca2f312-6f6e-4b53-a66e-4e65e497c8c0} - c:\program files\avg\avg10\avgssie.dll
BHO: Windows Live Family Safety Browser Helper Class: {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - c:\program files\windows live\family safety\fssbho.dll
BHO: Windows Live Anmelde-Hilfsprogramm: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: AVG Security Toolbar: {95b7759c-8c7f-4bf1-b163-73684a933233} - c:\program files\avg secure search\10.0.0.7\AVG Secure Search_toolbar.dll
BHO: softonic-de3 Toolbar: {cc05a3e3-64c3-4af2-bfc1-af0d66b69065} - c:\program files\softonic-de3\tbsoft.dll
BHO: Bing Bar Helper: {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - "c:\program files\microsoft\bingbar\BingExt.dll"
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
TB: TerraTec Home Cinema: {ad6e6555-fb2c-47d4-8339-3e2965509877} - c:\progra~1\terratec\terrat~1\THCDES~1.DLL
TB: softonic-de3 Toolbar: {cc05a3e3-64c3-4af2-bfc1-af0d66b69065} - c:\program files\softonic-de3\tbsoft.dll
TB: {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No File
TB: ICQToolBar: {855f3b16-6d32-4fe6-8a56-bbb695989046} - c:\program files\icq6toolbar\ICQToolBar.dll
TB: AVG Security Toolbar: {95b7759c-8c7f-4bf1-b163-73684a933233} - c:\program files\avg secure search\10.0.0.7\AVG Secure Search_toolbar.dll
TB: Bing Bar: {8dcb7100-df86-4384-8842-8fa844297b3f} - "c:\program files\microsoft\bingbar\BingExt.dll"
TB: {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File
{e7df6bff-55a5-4eb7-a673-4ed3e9456d39}
EB: ICQToolBar: {855f3b16-6d32-4fe6-8a56-bbb695989046} - c:\program files\icq6toolbar\ICQToolBar.dll
uRun: [Sidebar] c:\program files\windows sidebar\sidebar.exe /autoRun
uRun: [ehTray.exe] c:\windows\ehome\ehTray.exe
uRun: [msnmsgr] "c:\program files\windows live\messenger\msnmsgr.exe" /background
uRun: [ISUSPM] "c:\programdata\macrovision\flexnet connect\6\ISUSPM.exe" -scheduler
uRun: [<NO NAME>]
uRun: [PC Suite Tray] "d:\program files\nokia\nokia pc suite 7\PCSuite.exe" -onlytray
uRun: [ICQ] "c:\program files\icq7.2\ICQ.exe" silent loginmode=4
mRun: [RtHDVCpl] E -S
mRun: [Diamondback] E
mRun: [IAAnotif] E
mRun: [SMSTray] E
mRun: [MGSysCtrl] E
mRun: [Ocs_SM] E
mRun: [AVG_TRAY] E
mRun: [FLSDeviceControlPanel] E
mRun: [Malwarebytes' Anti-Malware (reboot)] E" /RUNCLEANUPSCRIPT
mRun: [vProt] E"
mRun: [DivXUpdate] E" /CHECKNOW
mRun: [ROC_roc_dec12] E" /PROMPT /CMPID=ROC_DEC12
mRun: [LogMeIn Hamachi Ui] E" --AUTO-START
mRun: [pcsafedoctor.exe] E
StartupFolder: c:\users\stefan\appdata\roaming\micros~1\windows\startm~1\programs\startup\onenot~1.lnk - c:\program files\microsoft office\office12\ONENOTEM.EXE
StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\tssins~1.lnk - c:\program files\common files\nokia\tss\instrument api\bin\tray.exe
StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\w98eject.lnk - c:\windows\system\w98eject.exe
mPolicies-system: ConsentPromptBehaviorAdmin = 5 (0x5)
mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: Download with GetRight - d:\program files\getright\GRdownload.htm
IE: E&xport to Microsoft Excel - c:\progra~1\micros~3\office12\EXCEL.EXE/3000
IE: Free YouTube to Mp3 Converter - c:\users\stefan\appdata\roaming\dvdvideosoftiehelpers\freeyoutubetomp3converter.htm
IE: Open with GetRight Browser - d:\program files\getright\GRbrowse.htm
IE: {7578ADEA-D65F-4C89-A249-B1C88B6FFC20} - c:\program files\icq7.5\ICQ.exe
IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - c:\program files\windows live\writer\WriterBrowserExtension.dll
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~1\micros~3\office12\ONBttnIE.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~3\office12\REFIEBAR.DLL
LSP: mswsock.dll
DPF: {5D6F45B3-9043-443D-A792-115447494D24} - hxxp://messenger.zone.msn.com/MessengerGamesContent/GameContent/de/uno1/GAME_UNO1.cab
DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} - hxxp://download.divx.com/player/DivXBrowserPlugin.cab
DPF: {784797A8-342D-4072-9486-03C8D0F2F0A1} - hxxps://www.battlefieldheroes.com/static/updater/BFHUpdater_4.0.21.0.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab
DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} - hxxp://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab
DPF: {E6F480FC-BD44-4CBA-B74A-89AF7842937D} - hxxp://content.systemrequirementslab.com.s3.amazonaws.com/global/bin/srldetect_cyri_4.5.1.0.cab
TCP: Interfaces\{2DC0E184-07E3-4A7B-B9F0-BDCF0DB3B388} : DhcpNameServer = 192.168.178.1
TCP: Interfaces\{46D8E64C-5F1E-4CF9-9D8F-EBDB79D5F655} : DhcpNameServer = 80.69.100.198 80.69.100.206
TCP: Interfaces\{F90ACDD5-1117-4247-BA62-A4BF84DB780E} : DhcpNameServer = 192.168.178.1
TCP: Interfaces\{F90ACDD5-1117-4247-BA62-A4BF84DB780E}\86F54616 : DhcpNameServer = 141.100.152.2 141.100.10.110
Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - c:\program files\avg\avg10\avgpp.dll
Handler: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - c:\program files\common files\avg secure search\viprotocolinstaller\10.0.6\ViProtocol.dll
.
================= FIREFOX ===================
.
FF - ProfilePath - c:\users\stefan\appdata\roaming\mozilla\firefox\profiles\23hosvvy.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://www.google.de/
FF - prefs.js: keyword.URL - hxxp://search.icq.com/search/afe_results.php?ch_id=afex&tb_ver=1.4.3&q=
FF - component: c:\program files\avg\avg10\firefox\components\avgssff.dll
FF - component: c:\program files\avg\avg10\firefox4\components\avgssff4.dll
FF - component: c:\program files\avg\avg10\toolbar\firefox\avg@igeared\components\IGeared_tavgp_xputils3.dll
FF - component: c:\program files\avg\avg10\toolbar\firefox\avg@igeared\components\IGeared_tavgp_xputils35.dll
FF - component: c:\program files\avg\avg10\toolbar\firefox\avg@igeared\components\xpavgtbapi.dll
FF - component: c:\users\stefan\appdata\roaming\mozilla\firefox\profiles\23hosvvy.default\extensions\{cc05a3e3-64c3-4af2-bfc1-af0d66b69065}\components\FFExternalAlert.dll
FF - component: c:\users\stefan\appdata\roaming\mozilla\firefox\profiles\23hosvvy.default\extensions\{cc05a3e3-64c3-4af2-bfc1-af0d66b69065}\components\RadioWMPCore.dll
FF - plugin: c:\program files\battlelog web plugins\0.80.0\npesnlaunch.dll
FF - plugin: c:\program files\battlelog web plugins\sonar\0.70.0\npesnsonar.dll
FF - plugin: c:\program files\divx\divx ovs helper\npovshelper.dll
FF - plugin: c:\program files\divx\divx plus web player\npdivx32.dll
FF - plugin: c:\program files\google\google earth\plugin\npgeplugin.dll
FF - plugin: c:\program files\google\update\1.3.21.99\npGoogleUpdate3.dll
FF - plugin: c:\program files\java\jre6\bin\new_plugin\npdeployJava1.dll
FF - plugin: c:\program files\microsoft silverlight\4.0.60831.0\npctrlui.dll
FF - plugin: c:\program files\microsoft\office live\npOLW.dll
FF - plugin: c:\program files\windows live\photo gallery\NPWLPG.dll
FF - plugin: c:\programdata\id software\quakelive\npquakezero.dll
FF - plugin: c:\users\stefan\appdata\roaming\mozilla\firefox\profiles\23hosvvy.default\extensions\battlefieldheroespatcher@ea.com\plugins\npBFHUpdater.dll
FF - plugin: d:\program files\google\picasa3\npPicasa3.dll
FF - plugin: d:\program files\itunes\mozilla plugins\npitunes.dll
FF - plugin: d:\program files\mozilla firefox\plugins\npdeployJava1.dll
FF - plugin: d:\program files\opera\program\plugins\npqtplugin.dll
FF - plugin: d:\program files\opera\program\plugins\npqtplugin2.dll
FF - plugin: d:\program files\opera\program\plugins\npqtplugin3.dll
FF - plugin: d:\program files\opera\program\plugins\npqtplugin4.dll
FF - plugin: d:\program files\opera\program\plugins\npqtplugin5.dll
FF - plugin: d:\program files\opera\program\plugins\npqtplugin6.dll
FF - plugin: d:\program files\opera\program\plugins\npqtplugin7.dll
FF - plugin: d:\program files\opera\program\plugins\NPSWF32.dll
.
---- FIREFOX POLICIES ----
.
pref('extensions.shownSelectionUI',true); pref('extensions.autoDisableScopes',0);
============= SERVICES / DRIVERS ===============
.
R0 AVGIDSEH;AVGIDSEH;c:\windows\system32\drivers\AVGIDSEH.sys [2011-2-22 22992]
R0 Avgrkx86;AVG Anti-Rootkit Driver;c:\windows\system32\drivers\avgrkx86.sys [2011-3-16 32592]
R0 BtHidBus;Bluetooth HID Bus Service;c:\windows\system32\drivers\BtHidBus.sys [2009-9-24 19592]
R1 Avgldx86;AVG AVI Loader Driver;c:\windows\system32\drivers\avgldx86.sys [2011-1-7 248656]
R1 Avgmfx86;AVG Mini-Filter Resident Anti-Virus Shield;c:\windows\system32\drivers\avgmfx86.sys [2011-3-1 34896]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\drivers\dtsoftbus01.sys [2011-4-7 218688]
R2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2009-8-18 176128]
R2 AVGIDSAgent;AVGIDSAgent;c:\program files\avg\avg10\identity protection\agent\bin\AVGIDSAgent.exe [2012-1-31 7391072]
R2 avgwd;AVG WatchDog;c:\program files\avg\avg10\avgwdsvc.exe [2011-2-8 269520]
R2 BBSvc;Bing Bar Update Service;c:\program files\microsoft\bingbar\BBSvc.EXE [2011-10-21 196176]
R2 BBUpdate;BBUpdate;c:\program files\microsoft\bingbar\SeaPort.EXE [2011-10-13 249648]
R2 cpuz132;cpuz132;c:\windows\system32\drivers\cpuz132_x32.sys [2009-9-11 12672]
R2 dk2drv;DK2 WindowsNT Driver;c:\windows\system32\drivers\dk2drv.sys [2011-8-30 42624]
R2 FLE5WNNT;FLE-5 WindowsNT Driver;c:\windows\system32\drivers\fle5wnnt.sys [2011-8-30 33404]
R2 FLSIFACE;FLSIFACE;c:\windows\system32\drivers\flsiface.sys [2011-8-30 13440]
R2 FLSPAR;FLSPAR;c:\windows\system32\drivers\flspar.sys [2011-8-30 16314]
R2 FLSSER;FLSSER;c:\windows\system32\drivers\flsser.sys [2011-8-30 8344]
R2 FLSVCOM;FLSVCOM;c:\windows\system32\drivers\flsvcom.sys [2011-8-30 33402]
R2 Game Updater;Game Updater;c:\program files\rightdown software searchbar\GameUpdaterSrv.exe [2010-12-2 130048]
R2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;d:\program files\logmein hamachi\hamachi-2.exe [2012-2-2 1373576]
R2 ICQ Service;ICQ Service;c:\program files\icq6toolbar\ICQ Service.exe [2011-7-16 247608]
R2 libusbd;LibUsb-Win32 - Daemon, Version 0.1.10.1;system32\libusbd-nt.exe --> system32\libusbd-nt.exe [?]
R2 Micro Star SCM;Micro Star SCM;c:\program files\system control manager\MSIService.exe [2010-5-14 160768]
R2 PARLDR2K;PARLDR2K;c:\windows\system32\drivers\parldr2k.sys [2011-8-30 10454]
R2 SearchAnonymizer;SearchAnonymizer;c:\users\stefan\appdata\roaming\ocs\sm\SearchAnonymizerHelper.exe [2011-2-19 40960]
R2 TuneUp.UtilitiesSvc;TuneUp Utilities Service;d:\program files\tuneup utilities 2012\TuneUpUtilitiesService32.exe [2011-11-8 1479488]
R2 vToolbarUpdater;vToolbarUpdater;c:\program files\common files\avg secure search\vtoolbarupdater\10.0.6\ToolbarUpdater.exe [2012-1-16 909152]
R3 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\drivers\AVGIDSDriver.sys [2011-5-27 134480]
R3 AVGIDSFilter;AVGIDSFilter;c:\windows\system32\drivers\AVGIDSFilter.sys [2011-2-10 24144]
R3 AVGIDSShim;AVGIDSShim;c:\windows\system32\drivers\AVGIDSShim.sys [2011-2-10 21968]
R3 enecir;ENE CIR Receiver;c:\windows\system32\drivers\enecir.sys [2009-5-7 54784]
R3 JMCR;JMCR;c:\windows\system32\drivers\jmcr.sys [2009-5-7 112480]
R3 libusb0;LibUsb-Win32 - Kernel Driver, Version 0.1.10.1;c:\windows\system32\drivers\libusb0.sys [2012-1-5 33792]
R3 netw5v32;Intel(R) Wireless WiFi Link 5000-Serie - Adaptertreiber für Windows Vista 32 Bit;c:\windows\system32\drivers\netw5v32.sys [2009-6-10 4231168]
R3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;d:\program files\tuneup utilities 2012\TuneUpUtilitiesDriver32.sys [2011-11-8 10064]
S1 Avgtdix;AVG TDI Driver;c:\windows\system32\drivers\avgtdix.sys [2011-4-4 297168]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 gupdate;Google Update Service (gupdate);c:\program files\google\update\GoogleUpdate.exe [2010-6-4 136176]
S2 naiavfilter1;Cnmpar21;c:\windows\system32\svchost.exe -k netsvcs [2009-7-14 20992]
S2 navapsvc;Smbios;c:\windows\system32\svchost.exe -k netsvcs [2009-7-14 20992]
S2 veteboot;Catchme;c:\windows\system32\svchost.exe -k netsvcs [2009-7-14 20992]
S3 AVG Security Toolbar Service;AVG Security Toolbar Service;c:\program files\avg\avg10\toolbar\ToolbarBroker.exe [2011-5-7 167264]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\system32\drivers\b57nd60x.sys [2009-7-13 229888]
S3 btnetBUs;Bluetooth PAN Bus Service;c:\windows\system32\drivers\btnetBus.sys [2009-9-24 22528]
S3 fssfltr;fssfltr;c:\windows\system32\drivers\fssfltr.sys [2009-10-20 54632]
S3 fsssvc;Windows Live Family Safety-Dienst;c:\program files\windows live\family safety\fsssvc.exe [2010-4-28 704872]
S3 gupdatem;Google Update-Dienst (gupdatem);c:\program files\google\update\GoogleUpdate.exe [2010-6-4 136176]
S3 IvtBtBUs;IVT Bluetooth Bus Service;c:\windows\system32\drivers\IvtBtBus.sys [2009-8-26 25480]
S3 nmwcdnsu;Nokia USB Flashing Phone Parent;c:\windows\system32\drivers\nmwcdnsu.sys [2010-12-2 137600]
S3 nmwcdnsuc;Nokia USB Flashing Generic;c:\windows\system32\drivers\nmwcdnsuc.sys [2010-12-2 8576]
S3 Razerlow;Diamondback 3G USB Filter Driver;c:\windows\system32\drivers\DB3G.sys [2009-9-1 13225]
S3 RkHit;RkHit;c:\windows\system32\drivers\RKHit.sys [2012-2-8 34736]
S3 TTCinergyT2;TerraTec Cinergy T² (BDA);c:\windows\system32\drivers\TTCinergyT2BDA.sys [2005-10-6 22528]
S3 wxpSvc;webcamXP Service;d:\program files\wlite\wService.exe [2010-4-4 4937216]
.
=============== Created Last 30 ================
.
2012-02-20 14:29:48 -------- d-----w- C:\Neuer Ordner
2012-02-17 01:31:05 74240 ----a-w- c:\windows\system32\drivers\tdx.sys
2012-02-16 22:49:05 -------- d-s---w- C:\ComboFix
2012-02-16 21:48:14 335504 ----a-w- c:\windows\system32\drivers\TrufosAlt.sys
2012-02-16 21:43:57 -------- d-----w- c:\users\stefan\appdata\roaming\FixZeroAccess
2012-02-16 21:42:45 -------- d-----w- c:\users\stefan\appdata\local\NPE
2012-02-13 20:40:10 14664 ----a-w- c:\windows\stinger.sys
2012-02-13 20:39:54 159608 ----a-w- c:\windows\system32\mfevtps.exe.b1b1.deleteme
2012-02-13 20:39:45 -------- d-----w- c:\program files\stinger
2012-02-08 13:19:55 98816 ----a-w- c:\windows\sed.exe
2012-02-08 13:19:55 518144 ----a-w- c:\windows\SWREG.exe
2012-02-08 13:19:55 256000 ----a-w- c:\windows\PEV.exe
2012-02-08 13:19:55 208896 ----a-w- c:\windows\MBR.exe
2012-02-08 11:50:43 34736 ----a-w- c:\windows\system32\drivers\RKHit.sys
2012-02-06 19:06:49 -------- d-sh--w- c:\windows\system32\%APPDATA%
2012-02-06 19:03:10 0 --sha-w- c:\windows\system32\dds_log_trash.cmd
2012-02-06 19:02:20 -------- d-sh--w- c:\users\stefan\appdata\local\68197f46
2012-02-04 20:09:59 -------- d-----w- c:\users\stefan\Calibre Bibliothek
2012-02-04 20:09:50 -------- d-----w- c:\users\stefan\appdata\roaming\calibre
2012-02-04 20:09:31 -------- d-----w- c:\program files\Calibre2
2012-02-01 21:09:36 -------- d-----w- c:\users\stefan\appdata\local\DDMSettings
.
==================== Find3M ====================
.
2012-02-01 12:44:56 138160 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2012-02-01 12:44:48 271200 ----a-w- c:\windows\system32\PnkBstrB.xtr
2012-02-01 12:44:48 271200 ----a-w- c:\windows\system32\PnkBstrB.exe
2012-02-01 12:43:00 103736 ----a-w- c:\windows\system32\PnkBstrB.ex0
2012-01-11 15:05:07 414368 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-01-04 00:48:42 354176 ----a-w- c:\windows\system32\DivXControlPanelApplet.cpl
2011-11-29 02:28:28 45648 ------w- c:\windows\system32\drivers\pxhelp20.sys
2011-11-24 04:23:31 2340352 ----a-w- c:\windows\system32\win32k.sys
.
============= FINISH: 20:30:59,93 ===============