Moin,

seit einigen Wochen erhalte ich regelmäßig Meldungen der Benutzerkontosteuerung von Windows 7, dass das Konsolenregistrierungsprogramm Änderungen am Computer ausführen möchte. Als verifizierter Herausgeber wird Microsoft Windows genannt: Diese Meldung erscheint in der Regel wenn du eine Softwareinstallation Administratorrechte benötigt werden, erscheint die Meldung mehrmals. In der Regel habe ich nein geklickt, doch einmal habe ich die Meldung leider bestätigt: Die Konsequenz war, dass die Benutzerkontosteueruung deaktiviert worden ist.
Nach einem Virenscan mit Kaspersky CBE Version wurde der Trojan-Dropper.Win32.Injector.ewlp in einer heruntergeladenem Datei (.exe Datei) gefunden. Diesen habe ich direkt danach gelöscht. Doch auch nach der Löschung erhalte ich die Meldungen der Benutzerkontosteuerung weiterhin regelmäßig.

Zusätzlich habe ich auch ein Suchdurchlauf mit Malewarebyte gemacht, dabei wurde ein Virus gefunden in der Skype.exe. Hier habe ich noch nichts getan, da nachdem Hochladen bei Virustotal nur 2 von 40 Virensuchmaschinen den Virus erkannt haben und ich - zwar als Amateuer - ein falsch-positiven Alarm vermutet habe: Analysebericht von Virustotal

Ich wollte mit GMER einen Suchdurchlauf machen, allerdings stürzt mir das Programm ab bei /Device/Harddisk/VolumeShadowCopy1.

Nun hier das Log von dds:

[CODE].DDS Logfile:

DDS (Ver_2011-08-26.01) - NTFSx86 
Internet Explorer: 9.0.8112.16421  BrowserJavaVersion: 1.6.0_31
Run by ... at 21:42:34 on 2012-05-19
Microsoft Windows 7 Professional   6.1.7601.1.1252.49.1031.18.3070.1925 [GMT 2:00]
.
AV: Kaspersky Security Suite CBE 11 *Enabled/Updated* {2EAA32A5-1EE1-1B22-95DA-337730C6E984}
SP: Kaspersky Security Suite CBE 11 *Enabled/Updated* {95CBD341-38DB-14AC-AF6A-08054B41A339}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Kaspersky Security Suite CBE 11 *Enabled* {1691B380-548E-1A7A-BE85-9A42CE15AEFF}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
C:\Windows\system32\nvvsvc.exe
C:\Program Files\Cisco\Cisco AnyConnect VPN Client\vpnagent.exe
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\Dwm.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\taskhost.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\avmwlanstick\WlanNetService.exe
C:\Program Files\Kaspersky Lab\Kaspersky Security Suite CBE 11\avp.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Common Files\Nuance\dgnsvc.exe
C:\Program Files\Kaspersky Lab\Kaspersky Security Suite CBE 11\avp.exe
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Program Files\Eraser\Eraser.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Program Files\Adobe\Acrobat 10.0\Acrobat\acrotray.exe
C:\Program Files\Nuance\PaperPort\PDFProFiltSrvPP.exe
C:\Program Files\Nuance\PaperPort\pptd40nt.exe
C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
C:\Windows\system32\svchost.exe -k imgsvc
C:\Program Files\TeamViewer\Version7\TeamViewer_Service.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\Program Files\Nuance\PDFViewerPlus\pdfPro5Hook.exe
C:\Program Files\Mindjet\MindManager 10\MmReminderService.exe
C:\Program Files\avmwlanstick\WLanGUI.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Pinnacle\Shared Files\Programs\USBTip\USBTip.exe
C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe
C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE
C:\Program Files\Droplr\Droplr.exe
C:\Users\...\AppData\Roaming\Dropbox\bin\Dropbox.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE
C:\Windows\system32\SearchIndexer.exe
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\WUDFHost.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
C:\Windows\System32\svchost.exe -k swprv
C:\Windows\servicing\TrustedInstaller.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\consent.exe
C:\Windows\system32\conhost.exe
.
============== Pseudo HJT Report ===============
.
uInternet Settings,ProxyOverride = *.local
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: FGCatchUrl: {2f364306-aa45-47b5-9f9d-39a8b94e7ef7} - c:\program files\flashget\jccatch.dll
BHO: PlusIEEventHelper Class: {551a852f-39a6-44a7-9c13-afbec9185a9d} - c:\program files\nuance\pdfviewerplus\bin\PlusIEContextMenu.dll
BHO: IEVkbdBHO Class: {59273ab4-e7d3-40f9-a1a8-6fa9cca1862c} - c:\program files\kaspersky lab\kaspersky security suite cbe 11\ievkbd.dll
BHO: CmjBrowserHelperObject Object: {6fe6a929-59d1-4763-91ad-29b61cffb35b} - c:\program files\mindjet\mindmanager 10\Mm8InternetExplorer.dll
BHO: Groove GFS Browser Helper: {72853161-30c5-4d22-b7f9-0bbc1d38a37e} - c:\progra~1\micros~1\office14\GROOVEEX.DLL
BHO: Java(tm) Plug-In SSV Helper: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - c:\program files\java\jre6\bin\ssv.dll
BHO: Windows Live ID Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: Adobe PDF Conversion Toolbar Helper: {ae7cd045-e861-484f-8273-0445ee161910} - c:\program files\common files\adobe\acrobat\activex\AcroIEFavClient.dll
BHO: Office Document Cache Handler: {b4f3a835-0e21-4959-ba22-42b3008e02ff} - c:\progra~1\micros~1\office14\URLREDIR.DLL
BHO: ZeonIEEventHelper Class: {da986d7d-ccaf-47b2-84fe-bfa1549bebf9} - c:\program files\nuance\pdfviewerplus\bin\ZeonIEFavClient.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: FilterBHO Class: {e33cf602-d945-461a-83f0-819f76a199f8} - c:\program files\kaspersky lab\kaspersky security suite cbe 11\klwtbbho.dll
BHO: FlashGet GetFlash Class: {f156768e-81ef-470c-9057-481ba8380dba} - c:\program files\flashget\getflash.dll
BHO: SmartSelect Class: {f4971ee7-daa0-4053-9964-665d8ee6a077} - c:\program files\common files\adobe\acrobat\activex\AcroIEFavClient.dll
TB: Adobe PDF: {47833539-d0c5-4125-9fa8-0819e2eaac93} - c:\program files\common files\adobe\acrobat\activex\AcroIEFavClient.dll
TB: Nuance PDF: {e3286bf1-e654-42ff-b4a6-5e111731df6b} - c:\program files\nuance\pdfviewerplus\bin\ZeonIEFavClient.dll
uRun: [Google Update] "c:\users\...\appdata\local\google\update\GoogleUpdate.exe" /c
uRun: [ISUSPM] c:\programdata\flexnet\connect\11\ISUSPM.exe -scheduler
uRun: [OfficeSyncProcess] "c:\program files\microsoft office\office14\MSOSYNC.EXE"
uRun: [MusicManager] "c:\users\...\appdata\local\programs\google\musicmanager\MusicManager.exe"
uRun: [Droplr] "c:\program files\droplr\Droplr.exe"
uRun: [Skype] "c:\users\...\appdata\roaming\skype\phone\Skype.exe" /nosplash /minimized
mRun: [AVP] "c:\program files\kaspersky lab\kaspersky security suite cbe 11\avp.exe"
mRun: [RTHDVCPL] c:\program files\realtek\audio\hda\RtHDVCpl.exe -s
mRun: [Eraser] "c:\progra~1\eraser\Eraser.exe" --atRestart
mRun: [BCSSync] "c:\program files\microsoft office\office14\BCSSync.exe" /DelayServices
mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"
mRun: [<NO NAME>] 
mRun: [Adobe Acrobat Speed Launcher] "c:\program files\adobe\acrobat 10.0\acrobat\Acrobat_sl.exe"
mRun: [Acrobat Assistant 8.0] "c:\program files\adobe\acrobat 10.0\acrobat\Acrotray.exe"
mRun: [IndexSearch] "c:\program files\nuance\paperport\IndexSearch.exe"
mRun: [PaperPort PTD] "c:\program files\nuance\paperport\pptd40nt.exe"
mRun: [PPort12reminder] "c:\program files\nuance\paperport\ereg\ereg.exe" -r "c:\programdata\scansoft\paperport\12\config\ereg\Ereg.ini"
mRun: [PDFHook] c:\program files\nuance\pdfviewerplus\pdfpro5hook.exe
mRun: [PDF5 Registry Controller] c:\program files\nuance\pdfviewerplus\RegistryController.exe
mRun: [APSDaemon] "c:\program files\common files\apple\apple application support\APSDaemon.exe"
mRun: [MMReminderService] c:\program files\mindjet\mindmanager 10\MMReminderService.exe
mRun: [AVMWlanClient] c:\program files\avmwlanstick\wlangui.exe
mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime
mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe"
mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe"
mRun: [USB2Check] RUNDLL32.EXE "c:\windows\system32\PCLECoInst.dll",CheckUSBController
mRun: [USBToolTip] c:\progra~1\pinnacle\shared~1\programs\usbtip\USBTip.exe
StartupFolder: c:\users\...\appdata\roaming\micros~1\windows\startm~1\programs\startup\dropbox.lnk - c:\users\...\appdata\roaming\dropbox\bin\Dropbox.exe
StartupFolder: c:\users\...\appdata\roaming\micros~1\windows\startm~1\programs\startup\onenot~1.lnk - c:\program files\microsoft office\office14\ONENOTEM.EXE
mPolicies-system: ConsentPromptBehaviorAdmin = 5 (0x5)
mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
IE: 	
IE: &Alles mit FlashGet laden - c:\program files\flashget\jc_all.htm
IE: &Mit FlashGet laden - c:\program files\flashget\jc_link.htm
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: An OneNote s&enden - c:\progra~1\micros~1\office14\ONBttnIE.dll/105
IE: An vorhandene PDF-Datei anfügen - c:\program files\common files\adobe\acrobat\activex\AcroIEFavClient.dll/AcroIEAppend.html
IE: Bild an MindManager senden - c:\program files\mindjet\mindmanager 10\Mm8InternetExplorer.dll/201
IE: Free YouTube to MP3 Converter - c:\users\...\appdata\roaming\dvdvideosoftiehelpers\freeyoutubetomp3converter.htm
IE: Hinzufügen zu Anti-Banner - c:\program files\kaspersky lab\kaspersky security suite cbe 11\ie_banner_deny.htm
IE: In Adobe PDF konvertieren - c:\program files\common files\adobe\acrobat\activex\AcroIEFavClient.dll/AcroIECapture.html
IE: Link an MindManager senden - c:\program files\mindjet\mindmanager 10\Mm8InternetExplorer.dll/203
IE: Linkziel an vorhandene PDF-Datei anhängen - c:\program files\common files\adobe\acrobat\activex\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Linkziel in Adobe PDF konvertieren - c:\program files\common files\adobe\acrobat\activex\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Mit PDF Viewer Plus öffnen - c:\program files\nuance\pdfviewerplus\bin\PlusIEContextMenu.dll/PlusIEContextMenu.htm
IE: Nach Microsoft E&xcel exportieren - c:\progra~1\micros~1\office14\EXCEL.EXE/3000
IE: Seite an MindManager senden - c:\program files\mindjet\mindmanager 10\Mm8InternetExplorer.dll/204
IE: Text an MindManager senden - c:\program files\mindjet\mindmanager 10\Mm8InternetExplorer.dll/202
IE: {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - c:\program files\flashget\FlashGet.exe
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\program files\microsoft office\office14\ONBttnIE.dll
IE: {2F72393D-2472-4F82-B600-ED77F354B7FF} - {6FE6A929-59D1-4763-91AD-29B61CFFB35B} - c:\program files\mindjet\mindmanager 10\Mm8InternetExplorer.dll
IE: {4248FE82-7FCB-46AC-B270-339F08212110} - {4248FE82-7FCB-46AC-B270-339F08212110} - c:\program files\kaspersky lab\kaspersky security suite cbe 11\klwtbbho.dll
IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - c:\program files\microsoft office\office14\ONBttnIELinkedNotes.dll
IE: {CCF151D8-D089-449F-A5A4-D9909053F20F} - {CCF151D8-D089-449F-A5A4-D9909053F20F} - c:\program files\kaspersky lab\kaspersky security suite cbe 11\klwtbbho.dll
Trusted Zone: e-tmm.com\h36
Trusted Zone: e-tmm.com\h36
DPF: 55963676-2F5E-4BAF-AC28-CF26AA587566 - vpnweb.cab
DPF: {166B1BCA-3F9C-11CF-8075-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
DPF: {1E54D648-B804-468d-BC78-4AFFED8E262F} - hxxp://www.nvidia.com/content/DriverDownload/srl/3.0.0.4/srl_bin/sysreqlab_nvd.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab
TCP: DhcpNameServer = 192.168.178.1
TCP: Interfaces\{5CAA4505-1671-43E0-A568-A9BCA341BDC4} : DhcpNameServer = 192.168.178.1
Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - c:\program files\common files\microsoft shared\office14\MSOXMLMF.DLL
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\progra~1\common~1\skype\SKYPE4~1.DLL
Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - c:\program files\windows live\photo gallery\AlbumDownloadProtocolHandler.dll
Notify: klogon - c:\windows\system32\klogon.dll
AppInit_DLLs: c:\progra~1\kasper~1\kasper~1\mzvkbd3.dll,c:\progra~1\kasper~1\kasper~1\kloehk.dll
SEH: Groove GFS Stub Execution Hook: {b5a7f190-dda6-4420-b3ba-52453494e6cd} - c:\progra~1\micros~1\office14\GROOVEEX.DLL
mASetup: {90EF4A5E-85DB-4825-96F5-1AB93C2A8EEB} - c:\program files\mindjet\mindmanager 10\sys\MmInternetExplorerActiveSetup.vbs
.
================= FIREFOX ===================
.
FF - ProfilePath - c:\users\...\appdata\roaming\mozilla\firefox\profiles\7bezjaff.default\
FF - prefs.js: network.proxy.type - 4
FF - plugin: c:\progra~1\micros~1\office14\NPAUTHZ.DLL
FF - plugin: c:\progra~1\micros~1\office14\NPSPWRAP.DLL
FF - plugin: c:\program files\adobe\acrobat 10.0\acrobat\air\nppdf32.dll
FF - plugin: c:\program files\google\google earth\plugin\npgeplugin.dll
FF - plugin: c:\program files\google\picasa3\npPicasa3.dll
FF - plugin: c:\program files\google\update\1.3.21.79\npGoogleUpdate3.dll
FF - plugin: c:\program files\google\update\1.3.21.99\npGoogleUpdate3.dll
FF - plugin: c:\program files\java\jre6\bin\new_plugin\npdeployJava1.dll
FF - plugin: c:\program files\microsoft silverlight\4.1.10111.0\npctrlui.dll
FF - plugin: c:\program files\nvidia corporation\3d vision\npnv3dv.dll
FF - plugin: c:\program files\nvidia corporation\3d vision\npnv3dvstreaming.dll
FF - plugin: c:\program files\talkpal\speech plugin for ef\npTalkpalPlugin.dll
FF - plugin: c:\program files\windows live\photo gallery\NPWLPG.dll
FF - plugin: c:\programdata\real\realplayer\browserrecordplugin\mozillaplugins\nprpchromebrowserrecordext.dll
FF - plugin: c:\programdata\real\realplayer\browserrecordplugin\mozillaplugins\nprphtml5videoshim.dll
FF - plugin: c:\users\...\appdata\local\google\update\1.3.21.99\npGoogleUpdate3.dll
.
============= SERVICES / DRIVERS ===============
.
R0 hotcore3;hc3ServiceName;c:\windows\system32\drivers\hotcore3.sys [2011-8-11 40560]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\drivers\dtsoftbus01.sys [2011-8-11 218688]
R1 kl2;kl2;c:\windows\system32\drivers\kl2.sys [2010-6-9 11352]
R1 KLIM6;Kaspersky Anti-Virus NDIS 6 Filter;c:\windows\system32\drivers\klim6.sys [2010-4-22 22104]
R2 AVP;Kaspersky Security Suite CBE 11 Service;c:\program files\kaspersky lab\kaspersky security suite cbe 11\avp.exe [2011-4-13 387696]
R2 DragonSvc;Dragon Service;c:\program files\common files\nuance\dgnsvc.exe [2011-6-4 296808]
R2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files\nvidia corporation\nvidia updatus\daemonu.exe [2011-11-19 2253120]
R2 PDFProFiltSrvPP;PDFProFiltSrvPP;c:\program files\nuance\paperport\PDFProFiltSrvPP.exe [2010-2-10 144672]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files\nvidia corporation\3d vision\nvSCPAPISvr.exe [2011-10-15 381248]
R2 TeamViewer7;TeamViewer 7;c:\program files\teamviewer\version7\TeamViewer_Service.exe [2011-12-2 2916736]
R2 vpnagent;Cisco AnyConnect VPN Agent;c:\program files\cisco\cisco anyconnect vpn client\vpnagent.exe [2011-1-5 602872]
R3 klmouflt;Kaspersky Lab KLMOUFLT;c:\windows\system32\drivers\klmouflt.sys [2009-11-2 19984]
R3 Ph6xIB32;NXP 716x PCIe TV Card;c:\windows\system32\drivers\Ph6xIB32.sys [2009-6-10 1277952]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 gupdate;Google Update-Dienst (gupdate);c:\program files\google\update\GoogleUpdate.exe [2011-11-25 136176]
S2 SkypeUpdate;Skype Updater;c:\program files\skype\updater\Updater.exe [2012-4-5 158856]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\macromed\flash\FlashPlayerUpdateService.exe [2012-4-22 257696]
S3 avmeject;AVM Eject;c:\windows\system32\drivers\avmeject.sys [2012-1-9 4352]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\system32\drivers\b57nd60x.sys [2009-7-14 229888]
S3 fwlanusbn;FRITZ!WLAN N;c:\windows\system32\drivers\fwlanusbn.sys [2012-1-9 586752]
S3 gupdatem;Google Update-Dienst (gupdatem);c:\program files\google\update\GoogleUpdate.exe [2011-11-25 136176]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service;c:\program files\microsoft office\office14\GROOVE.EXE [2011-6-12 31125880]
S3 osppsvc;Office Software Protection Platform;c:\program files\common files\microsoft shared\officesoftwareprotectionplatform\OSPPSVC.EXE [2010-1-9 4640000]
S3 StorSvc;Speicherdienst;c:\windows\system32\svchost.exe -k LocalSystemNetworkRestricted [2009-7-14 20992]
S3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\TsUsbFlt.sys [2011-8-11 52224]
.
=============== Created Last 30 ================
.
2012-05-18 20:25:00	--------	d-----w-	c:\users\...\appdata\roaming\Malwarebytes
2012-05-18 20:23:33	--------	d-----w-	c:\programdata\Malwarebytes
2012-05-18 20:23:17	22344	----a-w-	c:\windows\system32\drivers\mbam.sys
2012-05-18 20:23:17	--------	d-----w-	c:\program files\Malwarebytes' Anti-Malware
2012-05-18 15:23:06	56200	----a-w-	c:\programdata\microsoft\windows defender\definition updates\{1754fa2b-1269-446d-bffa-60e7a2f561e7}\offreg.dll
2012-05-18 09:39:03	6737808	----a-w-	c:\programdata\microsoft\windows defender\definition updates\{1754fa2b-1269-446d-bffa-60e7a2f561e7}\mpengine.dll
2012-05-11 19:30:18	--------	d-----w-	c:\program files\QuizBot
2012-05-11 09:56:32	1291632	----a-w-	c:\windows\system32\drivers\tcpip.sys
2012-05-11 09:56:24	936960	----a-w-	c:\program files\common files\microsoft shared\ink\journal.dll
2012-05-11 09:56:23	1221632	----a-w-	c:\program files\windows journal\NBDoc.DLL
2012-05-11 09:56:22	989184	----a-w-	c:\program files\windows journal\JNTFiltr.dll
2012-05-11 09:56:21	969216	----a-w-	c:\program files\windows journal\JNWDRV.dll
2012-05-11 09:55:39	3968368	----a-w-	c:\windows\system32\ntkrnlpa.exe
2012-05-11 09:55:35	3913072	----a-w-	c:\windows\system32\ntoskrnl.exe
2012-05-11 09:55:34	2343424	----a-w-	c:\windows\system32\win32k.sys
2012-05-11 09:55:18	56176	----a-w-	c:\windows\system32\drivers\partmgr.sys
2012-05-11 09:55:14	1077248	----a-w-	c:\windows\system32\DWrite.dll
2012-05-08 18:38:03	--------	d-----w-	c:\program files\Gamers.IRC
2012-05-08 18:31:51	--------	d-----w-	c:\users\...\appdata\roaming\mIRC
2012-05-08 18:31:51	--------	d-----w-	c:\program files\mIRC
2012-05-04 21:44:28	--------	d-----w-	c:\users\...\appdata\roaming\SmartTools
2012-05-01 09:37:29	--------	d-----w-	c:\users\...\appdata\local\{0335216C-D3CF-48AE-89A0-9E9E7DE269DE}
2012-04-30 21:10:40	--------	d-----w-	c:\users\...\appdata\local\Pinnacle
2012-04-30 20:56:28	--------	d-----w-	c:\program files\common files\Pinnacle
2012-04-30 20:53:41	--------	d-----w-	c:\programdata\Pinnacle Studio Ultimate
2012-04-30 20:36:07	--------	d-----w-	c:\program files\common files\Pegasus Imaging
2012-04-30 20:36:05	--------	d-----w-	c:\program files\common files\Yahoo!
2012-04-30 20:36:02	--------	d-----w-	c:\programdata\Studio 14
2012-04-30 20:36:02	--------	d-----w-	c:\programdata\Pinnacle Studio Plus
2012-04-30 20:19:21	--------	d-----w-	c:\programdata\Studio14Trial
2012-04-30 19:11:07	--------	d-----w-	c:\users\...\appdata\local\{713F5DE4-56D6-47BD-AF77-DE7536637952}
2012-04-30 18:58:46	--------	d-----w-	c:\users\...\appdata\local\{B1D9254C-00F5-4A6B-A6FC-FF540F2FAB4A}
2012-04-30 18:48:47	--------	d-----w-	c:\users\...\appdata\local\{8629394C-D763-45E9-8284-FFA95923AA46}
2012-04-30 18:36:29	22528	----a-w-	c:\windows\system32\drivers\emAudio.sys
2012-04-30 18:35:54	81920	----a-w-	c:\windows\system32\PCLECoInst.dll
2012-04-30 18:35:54	17808	----a-w-	c:\windows\system32\emYUV.dll
2012-04-30 18:35:53	9739	----a-w-	c:\windows\system32\emUSD.dll
2012-04-30 18:35:53	45056	----a-w-	c:\windows\system32\emVFW.dll
2012-04-30 18:35:52	4493	----a-w-	c:\windows\system32\drivers\emScan.sys
2012-04-30 18:35:52	24269	----a-w-	c:\windows\system32\drivers\emStream.sys
2012-04-30 18:35:51	5245	----a-w-	c:\windows\system32\drivers\emFilter.sys
2012-04-30 18:35:51	32768	----a-w-	c:\windows\system32\emProp.ax
2012-04-30 18:35:51	100957	----a-w-	c:\windows\system32\drivers\emDevice.sys
2012-04-30 18:34:41	--------	d-----w-	c:\program files\Pinnacle
2012-04-30 18:31:51	--------	d-----w-	c:\users\...\appdata\local\Downloaded Installations
2012-04-29 08:00:17	--------	d-----r-	c:\program files\Skype
2012-04-22 12:05:56	419488	----a-w-	c:\windows\system32\FlashPlayerApp.exe
2012-04-21 12:04:12	--------	d-----w-	c:\windows\system32\auralog
2012-04-20 21:04:01	119808	----a-r-	c:\users\...\appdata\roaming\microsoft\installer\{ccf298af-9ce1-4b26-b251-486e98a34789}\icons.exe
.
==================== Find3M  ====================
.
2012-05-04 22:01:41	70304	----a-w-	c:\windows\system32\FlashPlayerCPLApp.cpl
2012-03-31 13:51:41	472808	----a-w-	c:\windows\system32\deployJava1.dll
2012-03-01 05:46:57	19824	----a-w-	c:\windows\system32\drivers\fs_rec.sys
2012-03-01 05:37:41	172544	----a-w-	c:\windows\system32\wintrust.dll
2012-03-01 05:33:23	159232	----a-w-	c:\windows\system32\imagehlp.dll
2012-03-01 05:29:16	5120	----a-w-	c:\windows\system32\wmi.dll
2012-02-28 01:18:55	1799168	----a-w-	c:\windows\system32\jscript9.dll
2012-02-28 01:11:21	1427456	----a-w-	c:\windows\system32\inetcpl.cpl
2012-02-28 01:11:07	1127424	----a-w-	c:\windows\system32\wininet.dll
2012-02-28 01:03:16	2382848	----a-w-	c:\windows\system32\mshtml.tlb
2012-02-23 08:18:36	237072	------w-	c:\windows\system32\MpSigStub.exe
2012-02-21 23:05:41	348160	----a-w-	c:\windows\system32\msvcr71.dll
2012-02-21 23:05:40	499712	----a-w-	c:\windows\system32\msvcp71.dll
2006-05-03 10:06:54	163328	--sha-r-	c:\windows\system32\flvDX.dll
2007-02-21 11:47:16	31232	--sha-r-	c:\windows\system32\msfDX.dll
2008-03-16 13:30:52	216064	--sha-r-	c:\windows\system32\nbDX.dll
2010-01-06 22:00:00	107520	--sha-r-	c:\windows\system32\TAKDSDecoder.dll
.
============= FINISH: 21:48:49,10 ===============
         

--- --- ---


Im Anhang sind einmal die Screenshots der Benutzerkontosteuerung Meldung (mit genauem Dateipfad; sollte es nicht lesbar sein, bitte einfach melden) und die attach.txt).

Über Lösungen würde ich mich sehr freuen!

Nach einem Virenscan mit Kaspersky CBE Version wurde der Trojan-Dropper.Win32.Injector.ewlp in einer heruntergeladenem Datei (.exe Datei) gefunden. Diesen habe ich direkt danach gelöscht.

Wieso hälst du dich so bedeckt zur dieser Datei? Es ist schon von großem Interesse welche Datei das war (Dateiname) und welchen Zweck sie hatte