mbam findet C:\Program Files (x86)\DVBViewer TE2\update.exe (Spyware.Zbot)

ComboFix 12-10-29.01 - admin 29.10.2012  13:35:03.6.4 - x64
Microsoft Windows 7 Ultimate   6.1.7601.1.1252.49.1031.18.8183.5923 [GMT 1:00]
ausgeführt von:: c:\users\Uli\Desktop\ComboFix.exe
Benutzte Befehlsschalter :: c:\users\Uli\Desktop\CFScript.txt
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
(((((((((((((((((((((((   Dateien erstellt von 2012-09-28 bis 2012-10-29  ))))))))))))))))))))))))))))))
.
.
2012-10-29 12:42 . 2012-10-29 12:42	--------	d-----w-	c:\users\uliadm\AppData\Local\temp
2012-10-29 12:42 . 2012-10-29 12:42	--------	d-----w-	c:\users\Kate\AppData\Local\temp
2012-10-29 12:42 . 2012-10-29 12:42	--------	d-----w-	c:\users\Default\AppData\Local\temp
2012-10-29 12:42 . 2012-10-29 12:42	--------	d-----w-	c:\users\admin\AppData\Local\temp
2012-10-28 21:52 . 2012-10-23 11:18	25232	----a-w-	c:\windows\system32\drivers\aswFsBlk.sys
2012-10-28 21:52 . 2012-10-23 11:18	364096	----a-w-	c:\windows\system32\drivers\aswSP.sys
2012-10-28 21:52 . 2012-10-23 11:18	59728	----a-w-	c:\windows\system32\drivers\aswTdi.sys
2012-10-28 21:52 . 2012-10-15 17:59	54072	----a-w-	c:\windows\system32\drivers\aswRdr2.sys
2012-10-28 21:51 . 2012-10-23 11:18	984144	----a-w-	c:\windows\system32\drivers\aswSnx.sys
2012-10-28 21:51 . 2012-10-23 11:18	71600	----a-w-	c:\windows\system32\drivers\aswMonFlt.sys
2012-10-28 21:51 . 2012-10-23 11:17	285328	----a-w-	c:\windows\system32\aswBoot.exe
2012-10-28 21:51 . 2012-10-23 11:17	41224	----a-w-	c:\windows\avastSS.scr
2012-10-28 21:51 . 2012-10-23 11:17	227648	----a-w-	c:\windows\SysWow64\aswBoot.exe
2012-10-28 21:51 . 2012-10-28 21:51	--------	d-----w-	c:\programdata\AVAST Software
2012-10-28 21:51 . 2012-10-28 21:51	--------	d-----w-	c:\program files\AVAST Software
2012-10-28 17:14 . 2012-10-28 17:14	--------	d-----w-	c:\users\admin\AppData\Local\Macromedia
2012-10-28 16:45 . 2012-10-28 16:45	--------	d-----w-	c:\users\admin\AppData\Roaming\IrfanView
2012-10-28 16:37 . 2012-10-29 12:42	--------	d-----w-	c:\users\Uli\AppData\Local\temp
2012-10-28 13:33 . 2012-10-28 13:33	--------	d-----w-	c:\users\admin\AppData\Roaming\IObit
2012-10-27 12:23 . 2012-10-27 12:23	--------	d-----w-	c:\users\Uli\AppData\Local\Mozilla Firefox
2012-10-26 09:05 . 2012-10-17 00:31	9291768	----a-w-	c:\programdata\Microsoft\Windows Defender\Definition Updates\{11140E1C-5133-4A88-9FF3-71A21F03D02E}\mpengine.dll
2012-10-24 11:09 . 2012-10-24 11:22	--------	d-----w-	c:\users\testadm
2012-10-17 17:33 . 2012-10-17 17:33	--------	d-----w-	c:\users\Kate\AppData\Roaming\ATI
2012-10-17 17:33 . 2012-10-17 17:33	--------	d-----w-	c:\users\Kate\AppData\Local\ATI
2012-10-17 14:31 . 2012-10-17 14:31	--------	d-----w-	c:\users\Uli\AppData\Roaming\ATI
2012-10-17 14:31 . 2012-10-17 14:31	--------	d-----w-	c:\users\Uli\AppData\Local\ATI
2012-10-17 14:14 . 2012-10-17 14:14	--------	d-----w-	c:\users\admin\AppData\Roaming\ATI
2012-10-17 14:14 . 2012-10-17 14:14	--------	d-----w-	c:\users\admin\AppData\Local\ATI
2012-10-17 14:14 . 2012-10-17 14:14	--------	d-----w-	c:\programdata\ATI
2012-10-17 14:14 . 2012-10-17 14:14	--------	d-----w-	c:\program files\Common Files\ATI Technologies
2012-10-17 14:11 . 2009-08-23 08:02	120336	----a-w-	c:\windows\system32\drivers\AtiHdmi.sys
2012-10-17 14:02 . 2009-05-21 04:23	4178264	----a-w-	c:\windows\SysWow64\D3DX9_41.dll
2012-10-17 14:02 . 2009-03-18 13:00	32768	----a-w-	c:\windows\SysWow64\Auxiliary.dll
2012-10-17 14:00 . 2012-10-17 14:11	--------	d-----w-	c:\program files (x86)\Setup Files
2012-10-17 13:56 . 2012-10-17 13:56	--------	d-----w-	c:\users\Uli\AppData\Roaming\Tracker Software
2012-10-16 20:17 . 2012-10-16 20:18	--------	d-----w-	c:\users\Uli\AppData\Roaming\Research In Motion
2012-10-16 20:17 . 2012-10-16 20:17	--------	d-----w-	c:\users\Uli\AppData\Local\Research In Motion
2012-10-16 20:15 . 2011-07-20 11:58	44032	----a-w-	c:\windows\system32\drivers\RimSerial_AMD64.sys
2012-10-16 20:15 . 2012-10-25 10:43	--------	d-----w-	c:\program files (x86)\Common Files\XCPCSync.OEM
2012-10-15 11:48 . 2012-10-15 11:48	--------	d-----w-	c:\programdata\Gigaset QuickSync
2012-10-15 11:47 . 2012-10-15 11:47	--------	d-----w-	c:\users\Uli\AppData\Local\Gigaset_Communications_Gm
2012-10-15 11:45 . 2012-10-15 11:45	--------	d-----w-	c:\program files (x86)\Gigaset QuickSync
2012-10-15 11:37 . 2012-10-15 11:37	--------	d-----w-	c:\users\Uli\AppData\Local\Shaw Computer
2012-10-15 11:37 . 2009-06-23 03:59	313856	----a-w-	c:\windows\SysWow64\SPort.dll
2012-10-15 11:37 . 2003-06-22 18:31	65536	----a-w-	c:\windows\SysWow64\vbalProgBar6.ocx
2012-10-15 11:37 . 2001-05-24 09:20	544256	----a-w-	c:\windows\SysWow64\janGraphics.dll
2012-10-15 11:37 . 1998-07-05 23:00	158208	----a-w-	c:\windows\SysWow64\MSCMCDE.DLL
2012-10-15 11:37 . 2012-10-15 11:37	--------	d-----w-	c:\program files (x86)\gTool
2012-10-15 11:37 . 2008-10-10 12:36	656200	----a-w-	c:\windows\SysWow64\MSCOMCT2.OCX
2012-10-15 11:37 . 2000-07-19 13:26	151552	----a-w-	c:\windows\SysWow64\ccrpFD6.ocx
2012-10-15 11:37 . 1998-07-06 00:00	33792	----a-w-	c:\windows\SysWow64\CMDLGDE.DLL
2012-10-15 11:37 . 1998-07-05 23:00	64512	----a-w-	c:\windows\SysWow64\MSCC2DE.DLL
2012-10-15 11:37 . 1998-07-05 23:00	14336	----a-w-	c:\windows\SysWow64\MSComDE.dll
2012-10-10 18:45 . 2012-08-11 00:56	715776	----a-w-	c:\windows\system32\kerberos.dll
2012-10-10 18:45 . 2012-08-10 23:56	542208	----a-w-	c:\windows\SysWow64\kerberos.dll
2012-10-10 18:45 . 2012-06-02 05:41	1464320	----a-w-	c:\windows\system32\crypt32.dll
2012-10-10 18:45 . 2012-06-02 05:41	184320	----a-w-	c:\windows\system32\cryptsvc.dll
2012-10-10 18:45 . 2012-06-02 05:41	140288	----a-w-	c:\windows\system32\cryptnet.dll
2012-10-10 18:45 . 2012-06-02 04:36	140288	----a-w-	c:\windows\SysWow64\cryptsvc.dll
2012-10-10 18:45 . 2012-06-02 04:36	1159680	----a-w-	c:\windows\SysWow64\crypt32.dll
2012-10-10 18:45 . 2012-06-02 04:36	103936	----a-w-	c:\windows\SysWow64\cryptnet.dll
2012-10-10 09:56 . 2012-10-10 09:56	--------	d-----w-	c:\program files\CPUID
2012-10-08 13:22 . 2012-08-21 11:01	33240	----a-w-	c:\windows\system32\drivers\GEARAspiWDM.sys
2012-10-08 13:21 . 2012-10-08 13:22	--------	d-----w-	c:\programdata\34BE82C4-E596-4e99-A191-52C6199EBF69
2012-10-08 13:21 . 2012-10-08 13:22	--------	d-----w-	c:\program files\iTunes
2012-10-08 13:21 . 2012-10-08 13:22	--------	d-----w-	c:\program files (x86)\iTunes
2012-10-08 13:21 . 2012-10-08 13:21	--------	d-----w-	c:\program files\iPod
2012-10-08 11:39 . 2012-10-08 11:39	794112	----a-w-	c:\windows\system32\Gqstsp.tsp
2012-10-08 11:26 . 2012-10-08 11:26	495616	----a-w-	c:\windows\SysWow64\Gqstsp.tsp
2012-10-08 11:09 . 2012-10-08 11:09	54272	----a-w-	c:\windows\system32\drivers\GigasetGenericUSB_x64.sys
2012-09-30 22:37 . 2012-09-30 22:37	--------	d-----w-	c:\users\Kate\AppData\Roaming\AVG10
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-10-10 21:57 . 2010-03-20 19:08	65309168	----a-w-	c:\windows\system32\MRT.exe
2012-10-09 09:29 . 2012-04-26 10:18	696760	----a-w-	c:\windows\SysWow64\FlashPlayerApp.exe
2012-10-09 09:29 . 2011-06-10 06:23	73656	----a-w-	c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2012-09-29 17:54 . 2011-08-04 20:39	25928	----a-w-	c:\windows\system32\drivers\mbam.sys
2012-09-16 18:01 . 2012-06-08 11:11	61440	----a-r-	c:\users\admin\AppData\Roaming\Microsoft\Installer\{11953C65-BB4E-4CA4-B0F0-2600A4B20040}\ARPPRODUCTICON.exe
2012-08-24 11:15 . 2012-09-22 09:52	17810944	----a-w-	c:\windows\system32\mshtml.dll
2012-08-24 10:39 . 2012-09-22 09:52	10925568	----a-w-	c:\windows\system32\ieframe.dll
2012-08-24 10:31 . 2012-09-22 09:52	2312704	----a-w-	c:\windows\system32\jscript9.dll
2012-08-24 10:22 . 2012-09-22 09:52	1346048	----a-w-	c:\windows\system32\urlmon.dll
2012-08-24 10:21 . 2012-09-22 09:52	1392128	----a-w-	c:\windows\system32\wininet.dll
2012-08-24 10:20 . 2012-09-22 09:52	1494528	----a-w-	c:\windows\system32\inetcpl.cpl
2012-08-24 10:18 . 2012-09-22 09:52	237056	----a-w-	c:\windows\system32\url.dll
2012-08-24 10:17 . 2012-09-22 09:52	85504	----a-w-	c:\windows\system32\jsproxy.dll
2012-08-24 10:14 . 2012-09-22 09:52	173056	----a-w-	c:\windows\system32\ieUnatt.exe
2012-08-24 10:14 . 2012-09-22 09:52	816640	----a-w-	c:\windows\system32\jscript.dll
2012-08-24 10:13 . 2012-09-22 09:52	599040	----a-w-	c:\windows\system32\vbscript.dll
2012-08-24 10:12 . 2012-09-22 09:52	2144768	----a-w-	c:\windows\system32\iertutil.dll
2012-08-24 10:11 . 2012-09-22 09:52	729088	----a-w-	c:\windows\system32\msfeeds.dll
2012-08-24 10:10 . 2012-09-22 09:52	96768	----a-w-	c:\windows\system32\mshtmled.dll
2012-08-24 10:09 . 2012-09-22 09:52	2382848	----a-w-	c:\windows\system32\mshtml.tlb
2012-08-24 10:04 . 2012-09-22 09:52	248320	----a-w-	c:\windows\system32\ieui.dll
2012-08-24 06:59 . 2012-09-22 09:52	1800704	----a-w-	c:\windows\SysWow64\jscript9.dll
2012-08-24 06:51 . 2012-09-22 09:52	1129472	----a-w-	c:\windows\SysWow64\wininet.dll
2012-08-24 06:51 . 2012-09-22 09:52	1427968	----a-w-	c:\windows\SysWow64\inetcpl.cpl
2012-08-24 06:47 . 2012-09-22 09:52	142848	----a-w-	c:\windows\SysWow64\ieUnatt.exe
2012-08-24 06:47 . 2012-09-22 09:52	420864	----a-w-	c:\windows\SysWow64\vbscript.dll
2012-08-24 06:43 . 2012-09-22 09:52	2382848	----a-w-	c:\windows\SysWow64\mshtml.tlb
2012-08-22 18:12 . 2012-09-12 09:38	1913200	----a-w-	c:\windows\system32\drivers\tcpip.sys
2012-08-22 18:12 . 2012-09-12 09:38	950128	----a-w-	c:\windows\system32\drivers\ndis.sys
2012-08-22 18:12 . 2012-09-12 09:38	376688	----a-w-	c:\windows\system32\drivers\netio.sys
2012-08-22 18:12 . 2012-09-12 09:38	288624	----a-w-	c:\windows\system32\drivers\FWPKCLNT.SYS
2012-08-21 21:01 . 2012-09-26 15:06	245760	----a-w-	c:\windows\system32\OxpsConverter.exe
2012-08-21 11:01 . 2010-03-21 10:21	125872	----a-w-	c:\windows\system32\GEARAspi64.dll
2012-08-21 11:01 . 2010-03-21 10:21	106928	----a-w-	c:\windows\SysWow64\GEARAspi.dll
2012-08-20 17:38 . 2012-10-10 18:46	44032	----a-w-	c:\windows\apppatch\acwow64.dll
2012-08-02 17:58 . 2012-09-12 09:38	574464	----a-w-	c:\windows\system32\d3d10level9.dll
2012-08-02 16:57 . 2012-09-12 09:38	490496	----a-w-	c:\windows\SysWow64\d3d10level9.dll
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"GrooveMonitor"="c:\program files (x86)\Microsoft Office\Office12\GrooveMonitor.exe" [2009-02-26 30040]
"AdobeCS4ServiceManager"="c:\program files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" [2010-04-19 611712]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2012-10-23 4297136]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Spyder3Utility.lnk - c:\program files (x86)\Datacolor\Spyder3Pro\Utility\Spyder3Utility.exe [2009-9-1 6407854]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-10-09 250808]
R3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64;c:\program files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [2010-03-21 1038088]
R3 GigasetGenericUSB_x64;GigasetGenericUSB_x64;c:\windows\system32\DRIVERS\GigasetGenericUSB_x64.sys [2012-10-08 54272]
R3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2012-10-24 115168]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2010-11-20 20992]
R3 Spyder3;Datacolor Spyder3;c:\windows\system32\DRIVERS\Spyder3.sys [2008-09-08 15360]
R3 TFsExDisk;TFsExDisk;c:\windows\System32\Drivers\TFsExDisk.sys [2009-12-14 16392]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys [2011-05-10 51712]
R3 vpcuxd;USB-Virtualisierungsstubdienst;c:\windows\system32\drivers\vpcuxd.sys [2010-11-20 16384]
R4 Adobe Version Cue CS4;Adobe Version Cue CS4;c:\program files (x86)\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4.exe [2010-04-19 288112]
R4 AdobeActiveFileMonitor7.0;Adobe Active File Monitor V7;c:\program files (x86)\Adobe\Photoshop Elements 7.0\PhotoshopElementsFileAgent.exe [2008-09-16 169312]
R4 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys [x]
R4 TomTomHOMEService;TomTomHOMEService;c:\program files (x86)\TomTom HOME 2\TomTomHOMEService.exe [2010-06-24 92008]
R4 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys [x]
R4 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys [x]
S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys [2010-03-21 52856]
S1 aswSnx;aswSnx; [x]
S1 aswSP;aswSP; [x]
S1 VBoxDrv;VirtualBox Service;c:\windows\system32\DRIVERS\VBoxDrv.sys [2011-11-04 224048]
S1 VBoxUSBMon;VirtualBox USB Monitor Driver;c:\windows\system32\DRIVERS\VBoxUSBMon.sys [2011-11-04 130864]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2010-03-03 202752]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2012-10-23 71600]
S2 SBSDWSCService;SBSD Security Center Service;c:\program files (x86)\Spybot - Search & Destroy\SDWinSec.exe [2009-01-26 1153368]
S3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atipmdag.sys [2010-03-03 6402560]
S3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [2010-03-03 188928]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [2010-06-23 344680]
S3 SKYNET;TechniSat DVB-PC TV Star PCI;c:\windows\system32\DRIVERS\SkyNET_AMD64.SYS [2010-03-20 615440]
S3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter;c:\windows\system32\DRIVERS\VBoxNetAdp.sys [2011-11-04 146736]
S3 VBoxNetFlt;VirtualBox Bridged Networking Service;c:\windows\system32\DRIVERS\VBoxNetFlt.sys [2011-11-04 165680]
.
.
Inhalt des "geplante Tasks" Ordners
.
2012-10-29 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-26 09:29]
.
2012-10-28 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1394765569-1510172786-3570238692-1001Core.job
- c:\users\Uli\AppData\Local\Google\Update\GoogleUpdate.exe [2011-11-10 17:13]
.
2012-10-29 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1394765569-1510172786-3570238692-1001UA.job
- c:\users\Uli\AppData\Local\Google\Update\GoogleUpdate.exe [2011-11-10 17:13]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2012-10-23 11:17	133400	----a-w-	c:\program files\AVAST Software\Avast\ashShA64.dll
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: An vorhandene PDF-Datei anfügen - c:\program files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
IE: In Adobe PDF konvertieren - c:\program files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
IE: Linkziel an vorhandene PDF-Datei anhängen - c:\program files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Linkziel in Adobe PDF konvertieren - c:\program files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Nach Microsoft E&xel exportieren - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 192.168.0.1
DPF: {F8FC1530-0608-11DF-2008-0800200C9A66} - hxxps://portal.computacenter.de/CACHE/sdesktop/install/binaries/instweb.cab
FF - ProfilePath - c:\users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\w315ohqn.default\
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Wow6432Node-HKLM-Run-<NO NAME> - (no file)
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2012-10-29  13:44:13
ComboFix-quarantined-files.txt  2012-10-29 12:44
ComboFix2.txt  2012-10-28 16:37
ComboFix3.txt  2012-10-28 15:56
ComboFix4.txt  2012-10-28 12:23
ComboFix5.txt  2012-10-29 08:19
.
Vor Suchlauf: 25 Verzeichnis(se), 670.080.602.112 Bytes frei
Nach Suchlauf: 26 Verzeichnis(se), 669.881.483.264 Bytes frei
.
- - End Of File - - 8F0CFBAC1F53312EBE1AD665C1758D83