Log nach scheinbar erfolgreicher(?)Entfernung von ,,System Progressive Protection''

ComboFix 12-10-12.01 - Vittorio 12.10.2012  14:09:54.1.2 - x86
Microsoft Windows XP Home Edition  5.1.2600.3.1252.49.1031.18.1022.427 [GMT 2:00]
ausgeführt von:: c:\dokumente und einstellungen\***\Desktop\ComboFix.exe
AV: Avira AntiVir PersonalEdition Classic *Disabled/Updated* {85A325E4-FFA4-0105-0D24-347CA8A3377C}
AV: Avira AntiVir PersonalEdition Classic *Enabled/Updated* {00000000-0000-0000-0000-000000000000}
AV: Avira AntiVir PersonalEdition Classic *Enabled/Updated* {00000246-FFA4-0105-0D24-347CA8A3377C}
AV: Avira AntiVir PersonalEdition Classic *Enabled/Updated* {00007FFD-FFA4-0105-0D24-347CA8A3377C}
AV: Avira AntiVir PersonalEdition Classic *Enabled/Updated* {85F3E2DC-FFA4-0105-0D24-347CA8A3377C}
AV: Avira AntiVir PersonalEdition Classic *Enabled/Updated* {85FA5C44-FFA4-0105-0D24-347CA8A3377C}
AV: Avira AntiVir PersonalEdition Classic *Enabled/Updated* {860714E4-FFA4-0105-0D24-347CA8A3377C}
AV: Avira AntiVir PersonalEdition Classic *Enabled/Updated* {860787AC-FFA4-0105-0D24-347CA8A3377C}
AV: Avira AntiVir PersonalEdition Classic *Enabled/Updated* {860A3DDC-FFA4-0105-0D24-347CA8A3377C}
AV: Avira AntiVir PersonalEdition Classic *Enabled/Updated* {860D16B4-FFA4-0105-0D24-347CA8A3377C}
AV: Avira AntiVir PersonalEdition Classic *Enabled/Updated* {8612265C-FFA4-0105-0D24-347CA8A3377C}
AV: Avira AntiVir PersonalEdition Classic *Enabled/Updated* {86230DDC-FFA4-0105-0D24-347CA8A3377C}
AV: Avira AntiVir PersonalEdition Classic *Enabled/Updated* {8625ADDC-FFA4-0105-0D24-347CA8A3377C}
AV: Avira AntiVir PersonalEdition Classic *Enabled/Updated* {86273054-FFA4-0105-0D24-347CA8A3377C}
AV: Avira AntiVir PersonalEdition Classic *Enabled/Updated* {862A977C-FFA4-0105-0D24-347CA8A3377C}
AV: Avira AntiVir PersonalEdition Classic *Enabled/Updated* {862D4C1C-FFA4-0105-0D24-347CA8A3377C}
AV: Avira AntiVir PersonalEdition Classic *Enabled/Updated* {862EDB5C-FFA4-0105-0D24-347CA8A3377C}
AV: Avira AntiVir PersonalEdition Classic *Enabled/Updated* {86304B14-FFA4-0105-0D24-347CA8A3377C}
AV: Avira AntiVir PersonalEdition Classic *Enabled/Updated* {86324394-FFA4-0105-0D24-347CA8A3377C}
AV: Avira AntiVir PersonalEdition Classic *Enabled/Updated* {8637CDDC-FFA4-0105-0D24-347CA8A3377C}
AV: Avira AntiVir PersonalEdition Classic *Enabled/Updated* {863B1554-FFA4-0105-0D24-347CA8A3377C}
AV: Avira AntiVir PersonalEdition Classic *Enabled/Updated* {86403764-FFA4-0105-0D24-347CA8A3377C}
AV: Avira AntiVir PersonalEdition Classic *Enabled/Updated* {8663E054-FFA4-0105-0D24-347CA8A3377C}
AV: Avira Desktop *Enabled/Updated* {C19476D9-52BC-4E93-8AF3-CCF59F7AE8FE}
.
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\dokumente und einstellungen\Vittorio\Anwendungsdaten\AdobeDLM.log
c:\dokumente und einstellungen\Vittorio\WINDOWS
c:\programme\xp-AntiSpy
c:\programme\xp-AntiSpy\sponsoring\ebay.ico
c:\programme\xp-AntiSpy\sponsoring\ebay_hover.ico
c:\programme\xp-AntiSpy\uninst.exe
c:\programme\xp-AntiSpy\xp-AntiSpy.chm
c:\programme\xp-AntiSpy\xp-AntiSpy.exe
c:\programme\xp-AntiSpy\xp-AntiSpy.url
c:\temp\17o7
c:\temp\17o7\tmpTF.log
c:\windows\Downloaded Program Files\popcaploader.inf
c:\windows\EventSystem.log
c:\windows\IsUn0407.exe
c:\windows\iun6002.exe
c:\windows\system32\muzapp.exe
c:\windows\system32\smpi1
c:\windows\system32\URTTemp
c:\windows\system32\URTTemp\FUSION.DLL
c:\windows\system32\URTTemp\MSCOREE.DLL
c:\windows\system32\URTTemp\mscoree.dll.local
c:\windows\system32\URTTemp\MSCORSN.DLL
c:\windows\system32\URTTemp\MSCORWKS.DLL
c:\windows\system32\URTTemp\MSVCR71.DLL
c:\windows\system32\URTTemp\REGTLIB.EXE
.
.
(((((((((((((((((((((((   Dateien erstellt von 2012-09-12 bis 2012-10-12  ))))))))))))))))))))))))))))))
.
.
2012-10-10 06:12 . 2012-10-10 06:12	--------	d-----w-	C:\_OTL
2012-10-06 06:06 . 2012-10-06 06:06	--------	d-----w-	c:\programme\ESET
2012-10-02 21:26 . 2012-10-02 21:26	--------	d-----w-	c:\dokumente und einstellungen\***\Anwendungsdaten\Malwarebytes
2012-10-02 21:25 . 2012-10-02 21:25	--------	d-----w-	c:\dokumente und einstellungen\All Users\Anwendungsdaten\Malwarebytes
2012-10-02 21:25 . 2012-10-02 21:25	--------	d-----w-	c:\programme\Malwarebytes' Anti-Malware
2012-10-02 21:25 . 2012-09-07 15:04	22856	----a-w-	c:\windows\system32\drivers\mbam.sys
2012-10-02 20:58 . 2012-10-02 20:58	--------	d-----w-	c:\dokumente und einstellungen\Administrator.FAMILIEN-PC\Anwendungsdaten\Avira
2012-10-02 20:58 . 2012-10-02 20:58	--------	d-sh--w-	c:\dokumente und einstellungen\Administrator.FAMILIEN-PC\IETldCache
2012-09-21 12:37 . 2012-09-21 12:37	--------	d-----w-	c:\dokumente und einstellungen\***.***\Anwendungsdaten\Avira
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-09-21 13:38 . 2012-06-27 06:03	696240	----a-w-	c:\windows\system32\FlashPlayerApp.exe
2012-09-21 13:38 . 2011-05-28 05:48	73136	----a-w-	c:\windows\system32\FlashPlayerCPLApp.cpl
2012-09-01 05:53 . 2012-09-01 07:32	36000	----a-w-	c:\windows\system32\drivers\avkmgr.sys
2012-09-01 05:53 . 2012-09-01 07:32	137928	----a-w-	c:\windows\system32\drivers\avipbb.sys
2012-09-01 05:52 . 2012-09-01 07:32	83392	----a-w-	c:\windows\system32\drivers\avgntflt.sys
2012-08-28 15:05 . 2004-08-17 12:07	916992	----a-w-	c:\windows\system32\wininet.dll
2012-08-28 15:05 . 2004-08-17 11:56	43520	----a-w-	c:\windows\system32\licmgr10.dll
2012-08-28 15:05 . 2004-08-17 11:55	1469440	----a-w-	c:\windows\system32\inetcpl.cpl
2012-08-28 12:07 . 2004-08-17 11:55	385024	----a-w-	c:\windows\system32\html.iec
2012-08-24 13:53 . 2004-08-17 12:07	177664	----a-w-	c:\windows\system32\wintrust.dll
2012-08-23 07:15 . 2012-08-31 09:54	7022536	----a-w-	c:\dokumente und einstellungen\All Users\Anwendungsdaten\Microsoft\Windows Defender\Definition Updates\{113685DD-4832-4A52-AA3B-B4A114D8B467}\mpengine.dll
2012-08-23 07:15 . 2006-10-07 19:23	7022536	----a-w-	c:\dokumente und einstellungen\All Users\Anwendungsdaten\Microsoft\Windows Defender\Definition Updates\Backup\mpengine.dll
2012-08-23 06:26 . 2004-08-17 12:00	2151424	----a-w-	c:\windows\system32\ntoskrnl.exe
2012-08-23 06:26 . 2004-08-04 00:50	2030080	----a-w-	c:\windows\system32\ntkrnlpa.exe
2012-08-10 11:11 . 2012-08-10 11:11	242240	----a-w-	c:\windows\system32\drivers\dtsoftbus01.sys
2012-07-30 12:16 . 2012-08-10 17:25	4659712	----a-w-	c:\windows\system32\Redemption.dll
2012-07-30 12:16 . 2012-07-30 12:16	974848	----a-w-	c:\windows\system32\cis-2.4.dll
2012-07-30 12:16 . 2012-07-30 12:16	81920	----a-w-	c:\windows\system32\issacapi_bs-2.3.dll
2012-07-30 12:16 . 2012-07-30 12:16	65536	----a-w-	c:\windows\system32\issacapi_pe-2.3.dll
2012-07-30 12:16 . 2012-07-30 12:16	57344	----a-w-	c:\windows\system32\MTXSYNCICON.dll
2012-07-30 12:16 . 2012-07-30 12:16	57344	----a-w-	c:\windows\system32\MK_Lyric.dll
2012-07-30 12:16 . 2012-07-30 12:16	57344	----a-w-	c:\windows\system32\issacapi_se-2.3.dll
2012-07-30 12:16 . 2012-07-30 12:16	569344	----a-w-	c:\windows\system32\muzdecode.ax
2012-07-30 12:16 . 2012-07-30 12:16	491520	----a-w-	c:\windows\system32\muzapp.dll
2012-07-30 12:16 . 2012-07-30 12:16	49152	----a-w-	c:\windows\system32\MaJGUILib.dll
2012-07-30 12:16 . 2012-07-30 12:16	45320	----a-w-	c:\windows\system32\MAMACExtract.dll
2012-07-30 12:16 . 2012-07-30 12:16	45056	----a-w-	c:\windows\system32\MaXMLProto.dll
2012-07-30 12:16 . 2012-07-30 12:16	45056	----a-w-	c:\windows\system32\MACXMLProto.dll
2012-07-30 12:16 . 2012-07-30 12:16	40960	----a-w-	c:\windows\system32\MTTELECHIP.dll
2012-07-30 12:16 . 2012-07-30 12:16	352256	----a-w-	c:\windows\system32\MSLUR71.dll
2012-07-30 12:16 . 2012-07-30 12:16	258048	----a-w-	c:\windows\system32\muzoggsp.ax
2012-07-30 12:16 . 2012-07-30 12:16	245760	----a-w-	c:\windows\system32\MSCLib.dll
2012-07-30 12:16 . 2012-07-30 12:16	24576	----a-w-	c:\windows\system32\MASetupCleaner.exe
2012-07-30 12:16 . 2012-07-30 12:16	200704	----a-w-	c:\windows\system32\muzwmts.dll
2012-07-30 12:16 . 2012-07-30 12:16	155648	----a-w-	c:\windows\system32\MSFLib.dll
2012-07-30 12:16 . 2012-07-30 12:16	143360	----a-w-	c:\windows\system32\3DAudio.ax
2012-07-30 12:16 . 2012-07-30 12:16	135168	----a-w-	c:\windows\system32\muzaf1.dll
2012-07-30 12:16 . 2012-07-30 12:16	131072	----a-w-	c:\windows\system32\muzmpgsp.ax
2012-07-30 12:16 . 2012-07-30 12:16	122880	----a-w-	c:\windows\system32\muzeffect.ax
2012-07-30 12:16 . 2012-07-30 12:16	118784	----a-w-	c:\windows\system32\MaDRM.dll
2012-07-30 12:16 . 2012-07-30 12:16	110592	----a-w-	c:\windows\system32\muzmp4sp.ax
2008-02-25 17:09 . 2008-10-02 14:01	852080	-c--a-w-	c:\programme\AudioRecorder.exe
2006-01-12 17:38 . 2007-01-12 20:46	63128	----a-w-	c:\programme\internet explorer\plugins\AcroIEHelper.dll
2006-05-16 18:31 . 2007-01-12 20:46	296584	----a-w-	c:\programme\internet explorer\plugins\AcroPDF.dll
2004-12-13 23:15 . 2007-01-12 20:46	67192	----a-w-	c:\programme\internet explorer\plugins\GbDetect.dll
2004-12-13 23:20 . 2007-01-12 20:46	110592	----a-w-	c:\programme\internet explorer\plugins\pdfshell.dll
2012-09-07 19:52 . 2012-09-07 19:52	266720	----a-w-	c:\programme\mozilla firefox\components\browsercomps.dll
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2011-12-05 19:17	94208	----a-w-	c:\dokumente und einstellungen\Vittorio\Anwendungsdaten\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2011-12-05 19:17	94208	----a-w-	c:\dokumente und einstellungen\Vittorio\Anwendungsdaten\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2011-12-05 19:17	94208	----a-w-	c:\dokumente und einstellungen\Vittorio\Anwendungsdaten\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]
@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
2011-12-05 19:17	94208	----a-w-	c:\dokumente und einstellungen\Vittorio\Anwendungsdaten\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"="c:\programme\DAEMON Tools Lite\DTLite.exe" [2012-04-11 3672384]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"avgnt"="c:\programme\Avira\AntiVir Desktop\avgnt.exe" [2012-09-01 348664]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]
"DWQueuedReporting"="c:\progra~1\GEMEIN~1\MICROS~1\DW\dwtrig20.exe" [2007-02-26 437160]
.
c:\dokumente und einstellungen\Vittorio\Startmenü\Programme\Autostart\
Dropbox.lnk - c:\dokumente und einstellungen\Vittorio\Anwendungsdaten\Dropbox\bin\Dropbox.exe [2012-5-24 27112840]
Picture Motion Browser Medien-Prüfung.lnk - c:\programme\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe [2011-12-9 368640]
.
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]
"DisableClock"= 0 (0x0)
.
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoMultiIE"= 0 (0x0)
"LWA"= 0 (0x0)
"LWB"= 0 (0x0)
"LWC"= 0 (0x0)
"LWD"= 0 (0x0)
"LWE"= 0 (0x0)
"LWF"= 0 (0x0)
"LWG"= 0 (0x0)
"LWH"= 0 (0x0)
"LWI"= 0 (0x0)
"LWJ"= 0 (0x0)
"LWK"= 0 (0x0)
"LWL"= 0 (0x0)
"LWM"= 0 (0x0)
"LWN"= 0 (0x0)
"LWO"= 0 (0x0)
"LWP"= 0 (0x0)
"LWQ"= 0 (0x0)
"LWR"= 0 (0x0)
"LWS"= 0 (0x0)
"LWT"= 0 (0x0)
"LWU"= 0 (0x0)
"LWV"= 0 (0x0)
"LWW"= 0 (0x0)
"LWX"= 0 (0x0)
"LWY"= 0 (0x0)
"LWZ"= 0 (0x0)
.
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "c:\programme\Windows Desktop Search\MSNLNamespaceMgr.dll" [2007-02-05 294400]
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"MSMSGS"="c:\programme\Messenger\msmsgs.exe" /background
"swg"=c:\programme\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"EPSON Stylus Photo RX420 Series (Kopie 1)"=c:\windows\System32\spool\DRIVERS\W32X86\3\E_FATI9CE.EXE /P41 "EPSON Stylus Photo RX420 Series (Kopie 1)" /O6 "USB001" /M "Stylus Photo RX420"
"EPSON Stylus Photo RX420 Series"=c:\windows\System32\spool\DRIVERS\W32X86\3\E_FATI9CE.EXE /P31 "EPSON Stylus Photo RX420 Series" /O6 "USB001" /M "Stylus Photo RX420"
"DVDLauncher"="c:\programme\CyberLink\PowerDVD\DVDLauncher.exe"
"NeroFilterCheck"=c:\windows\system32\NeroCheck.exe
"SoundMAXPnP"=c:\programme\Analog Devices\Core\smax4pnp.exe
"SunJavaUpdateSched"="c:\programme\Gemeinsame Dateien\Java\Java Update\jusched.exe"
"WinSvr"=c:\windows\system32\WinSvr.exe
"KernelFaultCheck"=%systemroot%\system32\dumprep 0 -k
"IMEKRMIG6.1"=c:\windows\ime\imkr6_1\IMEKRMIG.EXE
"IMJPMIG8.1"="c:\windows\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
"snpstd3"=c:\windows\vsnpstd3.exe
"tsnpstd3"=c:\windows\tsnpstd3.exe
"BluetoothAuthenticationAgent"=rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
"Adobe Reader Speed Launcher"="c:\programme\Adobe\Reader 8.0\Reader\Reader_sl.exe"
"Windows Defender"="c:\programme\Windows Defender\MSASCui.exe" -hide
"AppleSyncNotifier"=c:\programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleSyncNotifier.exe
"iTunesHelper"="c:\programme\iTunes\iTunesHelper.exe"
.
R1 avkmgr;avkmgr;c:\windows\SYSTEM32\DRIVERS\avkmgr.sys [01.09.2012 09:32 36000]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\SYSTEM32\DRIVERS\dtsoftbus01.sys [10.08.2012 13:11 242240]
R2 AntiVirMailService;Avira Email Schutz;c:\programme\Avira\AntiVir Desktop\avmailc.exe [01.09.2012 09:32 375760]
R2 AntiVirSchedulerService;Avira Planer;c:\programme\Avira\AntiVir Desktop\sched.exe [01.09.2012 09:32 86224]
R2 AntiVirWebService;Avira Browser Schutz;c:\programme\Avira\AntiVir Desktop\avwebgrd.exe [01.09.2012 09:32 465360]
R2 litsgt;litsgt;c:\windows\SYSTEM32\DRIVERS\litsgt.sys [07.02.2008 23:16 137344]
R2 tansgt;tansgt;c:\windows\SYSTEM32\DRIVERS\tansgt.sys [07.02.2008 23:16 12032]
R3 seehcri;Sony Ericsson seehcri Device Driver;c:\windows\SYSTEM32\DRIVERS\seehcri.sys [06.09.2009 13:35 27632]
S2 gupdate1c9984e2df4c2fa;Google Update Service (gupdate1c9984e2df4c2fa);c:\programme\Google\Update\GoogleUpdate.exe [25.06.2011 11:41 136176]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\SYSTEM32\Macromed\Flash\FlashPlayerUpdateService.exe [27.06.2012 08:03 250288]
S3 AVMUNET;AVM FRITZ!Box;c:\windows\SYSTEM32\DRIVERS\avmunet.sys [09.02.2005 13:16 16384]
S3 gupdatem;Google Update-Dienst (gupdatem);c:\programme\Google\Update\GoogleUpdate.exe [25.06.2011 11:41 136176]
S3 MotDev;Motorola Inc. USB Device;c:\windows\SYSTEM32\DRIVERS\motodrv.sys [11.04.2007 20:30 40832]
S3 PIXMCV;JVC Communication PIX-MCV Driver;c:\windows\SYSTEM32\DRIVERS\pixmcvc.sys [22.04.2005 17:58 32000]
S3 PIXMCVA;JVC PIX-MCV Audio Capture;c:\windows\SYSTEM32\DRIVERS\pixmcva.sys [23.04.2005 19:32 28057]
S3 PIXMCVV;JVC PIX-MCV Video Capture;c:\windows\SYSTEM32\DRIVERS\pixmcvv.sys [23.04.2005 19:31 21081]
.
--- Andere Dienste/Treiber im Speicher ---
.
*Deregistered* - mchInjDrv
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
getPlusHelper	REG_MULTI_SZ   	getPlusHelper
.
Inhalt des "geplante Tasks" Ordners
.
2012-10-06 c:\windows\Tasks\1-Klick-Wartung.job
- c:\programme\TuneUp Utilities 2004\SystemOptimizer.exe [2004-03-02 17:33]
.
2012-10-12 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-06-27 13:38]
.
2012-10-08 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\programme\Apple Software Update\SoftwareUpdate.exe [2009-10-22 09:50]
.
2012-10-12 c:\windows\Tasks\Google Software Updater.job
- c:\programme\Google\Common\Google Updater\GoogleUpdaterService.exe [2007-02-01 05:33]
.
2012-10-12 c:\windows\Tasks\GoogleUpdateTaskMachineCore1cd9236ee3000a8.job
- c:\programme\Google\Update\GoogleUpdate.exe [2011-06-25 09:41]
.
2012-09-01 c:\windows\Tasks\MP Scheduled Scan.job
- c:\programme\Windows Defender\MpCmdRun.exe [2006-11-03 17:20]
.
2012-10-12 c:\windows\Tasks\User_Feed_Synchronization-{310EC4ED-CB0D-49BB-9D3F-517E1B7D90AB}.job
- c:\windows\system32\msfeedssync.exe [2006-10-17 03:31]
.
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = hxxp://www.google.de/
uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
uDefault_Search_URL = hxxp://www.google.com/ie
uInternet Connection Wizard,ShellNext = hxxp://www.euro.dell.com/
uInternet Settings,ProxyOverride = *.local
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: &ICQ Toolbar Search - c:\programme\ICQToolbar\toolbaru.dll/SEARCH.HTML
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: Free YouTube to MP3 Converter - c:\dokumente und einstellungen\Vittorio\Anwendungsdaten\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm
IE: Nach Microsoft &Excel exportieren - c:\progra~1\MICROS~3\Office10\EXCEL.EXE/3000
LSP: c:\programme\Avira\AntiVir Desktop\avsda.dll
TCP: DhcpNameServer = 192.168.178.1
DPF: {BA162249-F2C5-4851-8ADC-FC58CB424243} - hxxp://static.ak.schuelervz.net/photouploader/ImageUploader5.cab?nocache=20080125-1
DPF: {F8C5C0F1-D884-43EB-A5A0-9E1C4A102FA8} - hxxps://secure.gopetslive.com/dev/GoPetsWeb.cab
FF - ProfilePath - c:\dokumente und einstellungen\Vittorio\Anwendungsdaten\Mozilla\Firefox\Profiles\zof52xax.default\
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
HKU-Default-Run-Picasa Media Detector - c:\programme\Picasa2\PicasaMediaDetector.exe
SafeBoot-WinDefend
AddRemove-iPlayer_1.0 - c:\windows\iun6002.exe
AddRemove-Microsoft Interactive Training - c:\windows\IsUn0407.exe
AddRemove-Splashtop Software Updater - c:\programme\Splashtop\Splashtop Software Updater\uninst.exe
AddRemove-xp-AntiSpy - c:\programme\xp-AntiSpy\uninst.exe
AddRemove-01_Simmental - c:\programme\Samsung\USB Drivers\01_Simmental\Uninstall.exe
AddRemove-02_Siberian - c:\programme\Samsung\USB Drivers\02_Siberian\Uninstall.exe
AddRemove-03_Swallowtail - c:\programme\Samsung\USB Drivers\03_Swallowtail\Uninstall.exe
AddRemove-04_semseyite - c:\programme\Samsung\USB Drivers\04_semseyite\Uninstall.exe
AddRemove-05_Sloan - c:\programme\Samsung\USB Drivers\05_Sloan\Uninstall.exe
AddRemove-06_Spencer - c:\programme\Samsung\USB Drivers\06_Spencer\Uninstall.exe
AddRemove-07_Schorl - c:\programme\Samsung\USB Drivers\07_Schorl\Uninstall.exe
AddRemove-08_EMPChipset - c:\programme\Samsung\USB Drivers\08_EMPChipset\Uninstall.exe
AddRemove-09_Hsp - c:\programme\Samsung\USB Drivers\09_Hsp\Uninstall.exe
AddRemove-11_HSP_Plus_Default - c:\programme\Samsung\USB Drivers\11_HSP_Plus_Default\Uninstall.exe
AddRemove-16_Shrewsbury - c:\programme\Samsung\USB Drivers\16_Shrewsbury\Uninstall.exe
AddRemove-17_EMP_Chipset2 - c:\programme\Samsung\USB Drivers\17_EMP_Chipset2\Uninstall.exe
AddRemove-18_Zinia_Serial_Driver - c:\programme\Samsung\USB Drivers\18_Zinia_Serial_Driver\Uninstall.exe
AddRemove-19_VIA_driver - c:\programme\Samsung\USB Drivers\19_VIA_driver\Uninstall.exe
AddRemove-20_NXP_Driver - c:\programme\Samsung\USB Drivers\20_NXP_Driver\Uninstall.exe
AddRemove-21_Searsburg - c:\programme\Samsung\USB Drivers\21_Searsburg\Uninstall.exe
AddRemove-22_WiBro_WiMAX - c:\programme\Samsung\USB Drivers\22_WiBro_WiMAX\Uninstall.exe
AddRemove-24_flashusbdriver - c:\programme\Samsung\USB Drivers\24_flashusbdriver\Uninstall.exe
AddRemove-25_escape - c:\programme\Samsung\USB Drivers\25_escape\Uninstall.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, hxxp://www.gmer.net
Rootkit scan 2012-10-12 14:29
Windows 5.1.2600 Service Pack 3 NTFS
.
Scanne versteckte Prozesse... 
.
Scanne versteckte Autostarteinträge... 
.
Scanne versteckte Dateien... 
.
Scan erfolgreich abgeschlossen
versteckte Dateien: 0
.
**************************************************************************
.
[HKEY_LOCAL_MACHINE\System\ControlSet003\Services\mchInjDrv]
"ImagePath"="\??\c:\windows\TEMP\mc21.tmp"
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_USERS\S-1-5-21-2993945987-1433914867-763228881-1007\Software\¢0×0ê0±0ü0·0ç0ó0 *¦0£0¶0ü0É0g0ubU0Œ0_0í0ü0«0ë0 *¢0×0ê0±0ü0·0ç0ó0]
@Allowed: (Read) (RestrictedCode)
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-2993945987-1433914867-763228881-1007\Software\¢0×0ê0±0ü0·0ç0ó0 *¦0£0¶0ü0É0g0ubU0Œ0_0í0ü0«0ë0 *¢0×0ê0±0ü0·0ç0ó0\ImageDataLightboxSR\ControlState]
"008b-06a9"=dword:00000000
"008b-06ab"=dword:00000001
"008b-0514"="JPEG-Format"
"008b-0580"="Weihnachten"
"008b-0583"="c:\\Dokumente und Einstellungen\\Vittorio\\Eigene Dateien\\Image Data Converter SR\\Collections"
.
--------------------- Durch laufende Prozesse gestartete DLLs ---------------------
.
- - - - - - - > 'winlogon.exe'(628)
c:\programme\TuneUp Utilities 2004\WinStylerThemeHelper.dll
.
- - - - - - - > 'lsass.exe'(692)
c:\programme\TuneUp Utilities 2004\WinStylerThemeHelper.dll
c:\programme\Avira\AntiVir Desktop\avsda.dll
.
Zeit der Fertigstellung: 2012-10-12  14:35:50
ComboFix-quarantined-files.txt  2012-10-12 12:35
.
Vor Suchlauf: 9.052.712.960 Bytes frei
Nach Suchlauf: 9.433.427.968 Bytes frei
.
WindowsXP-KB310994-SP2-Home-BootDisk-DEU.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(2)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(2)\WINDOWS="Microsoft Windows XP Home Edition" /noexecute=optin /fastdetect
.
- - End Of File - - A8E13C867219A2E163FA5B96496F027D