Mahnungsmail mit ZIP Datei ( MS-DOS)

ComboFix 13-05-18.02 - Helliot 18.05.2013  17:53:02.1.4 - x64
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.49.1031.18.8087.5792 [GMT 2:00]
ausgeführt von:: c:\users\Helliot\Desktop\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\SysWow64\URTTemp
c:\windows\SysWow64\URTTemp\regtlib.exe
.
.
(((((((((((((((((((((((   Dateien erstellt von 2013-04-18 bis 2013-05-18  ))))))))))))))))))))))))))))))
.
.
2013-05-18 15:57 . 2013-05-18 15:57	94656	----a-w-	c:\windows\system32\WPRO_41_2001woem.tmp
2013-05-18 10:19 . 2013-05-18 10:19	--------	d-----w-	c:\program files (x86)\Common Files\Java
2013-05-18 10:19 . 2013-05-18 10:19	95648	----a-w-	c:\windows\SysWow64\WindowsAccessBridge-32.dll
2013-05-18 10:19 . 2013-05-18 10:19	--------	d-----w-	c:\program files (x86)\Java
2013-05-18 10:18 . 2013-05-18 10:18	71048	----a-w-	c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-05-18 10:18 . 2013-05-18 10:18	692104	----a-w-	c:\windows\SysWow64\FlashPlayerApp.exe
2013-05-18 09:54 . 2013-05-18 09:54	--------	d-----w-	c:\program files (x86)\Mozilla Maintenance Service
2013-05-16 19:49 . 2013-05-16 19:49	--------	d-----w-	c:\users\Helliot\AppData\Local\WindowsUpdate
2013-05-16 19:48 . 2013-05-16 19:48	--------	d-----w-	c:\program files (x86)\Common Files\Adobe
2013-05-14 19:32 . 2013-05-14 19:32	--------	d-----w-	c:\users\GrandmasterACE
2013-05-14 19:05 . 2013-05-14 19:05	311200	----a-w-	c:\windows\system32\javaws.exe
2013-05-14 19:05 . 2013-05-14 19:05	971680	----a-w-	c:\windows\system32\deployJava1.dll
2013-05-14 19:05 . 2013-05-14 19:05	1092512	----a-w-	c:\windows\system32\npDeployJava1.dll
2013-05-14 19:05 . 2013-05-14 19:05	188832	----a-w-	c:\windows\system32\javaw.exe
2013-05-14 19:05 . 2013-05-14 19:05	188320	----a-w-	c:\windows\system32\java.exe
2013-05-14 19:05 . 2013-05-14 19:05	108448	----a-w-	c:\windows\system32\WindowsAccessBridge-64.dll
2013-05-14 19:05 . 2013-05-14 19:05	--------	d-----w-	c:\program files\Java
2013-05-14 00:17 . 2013-05-14 00:17	--------	d-----w-	c:\program files (x86)\Secure Banking
2013-05-14 00:04 . 2013-05-14 19:36	--------	d-----r-	C:\Sandbox
2013-05-14 00:02 . 2013-05-14 00:02	--------	d-----w-	c:\program files\Sandboxie
2013-05-13 23:47 . 2013-05-13 23:47	--------	d-----w-	c:\program files (x86)\Malwarebytes' Anti-Malware
2013-05-13 23:47 . 2013-04-04 12:50	25928	----a-w-	c:\windows\system32\drivers\mbam.sys
2013-05-13 23:43 . 2013-05-09 08:59	72016	----a-w-	c:\windows\system32\drivers\aswRdr2.sys
2013-05-13 23:43 . 2013-05-09 08:59	378432	----a-w-	c:\windows\system32\drivers\aswSP.sys
2013-05-13 23:43 . 2013-05-09 08:59	33400	----a-w-	c:\windows\system32\drivers\aswFsBlk.sys
2013-05-13 23:43 . 2013-05-09 08:59	65336	----a-w-	c:\windows\system32\drivers\aswRvrt.sys
2013-05-13 23:43 . 2013-05-09 08:59	64288	----a-w-	c:\windows\system32\drivers\aswTdi.sys
2013-05-13 23:43 . 2013-05-09 08:59	189936	----a-w-	c:\windows\system32\drivers\aswVmm.sys
2013-05-13 23:43 . 2013-05-09 08:59	1025808	----a-w-	c:\windows\system32\drivers\aswSnx.sys
2013-05-13 23:43 . 2013-05-09 08:59	80816	----a-w-	c:\windows\system32\drivers\aswMonFlt.sys
2013-05-13 23:43 . 2013-05-09 08:58	287840	----a-w-	c:\windows\system32\aswBoot.exe
2013-05-13 23:43 . 2013-05-09 08:58	41664	----a-w-	c:\windows\avastSS.scr
2013-05-13 23:43 . 2013-05-13 23:43	--------	d-----w-	c:\program files\AVAST Software
2013-05-13 23:42 . 2013-05-13 23:43	--------	d-----w-	c:\programdata\AVAST Software
2013-05-13 23:23 . 2013-05-13 23:33	--------	d-----r-	c:\program files (x86)\Skype
2013-05-13 23:23 . 2013-05-13 23:23	--------	d-----w-	c:\program files (x86)\Common Files\Skype
2013-05-13 23:19 . 2013-05-13 23:19	--------	d-----w-	c:\users\Helliot\AppData\Local\Secunia PSI
2013-05-13 23:18 . 2013-05-13 23:18	--------	d-----w-	c:\program files (x86)\Secunia
2013-05-13 23:10 . 2013-05-18 10:19	788896	----a-w-	c:\windows\SysWow64\deployJava1.dll
2013-05-13 23:10 . 2013-05-13 23:12	866720	----a-w-	c:\windows\SysWow64\npDeployJava1.dll
2013-05-13 23:04 . 2013-05-13 23:04	--------	d-----w-	c:\windows\ERUNT
2013-05-13 22:42 . 2013-04-17 04:31	9317456	----a-w-	c:\programdata\Microsoft\Windows Defender\Definition Updates\{531E5C29-CE24-4F4F-AE51-4E15A70897A5}\mpengine.dll
2013-05-13 22:34 . 2013-05-13 22:34	--------	d-----w-	c:\users\Helliot\AppData\Roaming\Malwarebytes
2013-05-13 22:34 . 2013-05-13 22:34	--------	d-----w-	c:\programdata\Malwarebytes
2013-05-13 22:11 . 2013-05-18 15:56	--------	d-----w-	c:\users\Helliot\AppData\Local\Temp
2013-05-12 12:34 . 2013-05-12 12:34	--------	d-----w-	c:\users\Helliot\AppData\Roaming\IrfanView
2013-05-12 12:34 . 2013-05-12 12:34	--------	d-----w-	c:\program files (x86)\IrfanView
2013-04-28 10:57 . 2013-04-28 10:57	--------	d-----w-	c:\program files (x86)\Battlelog Web Plugins
2013-04-28 10:41 . 2013-05-01 20:30	--------	d-----w-	c:\windows\SysWow64\NV
2013-04-28 10:41 . 2013-05-01 20:30	--------	d-----w-	c:\windows\system32\NV
2013-04-27 22:09 . 2011-05-13 12:16	493056	----a-w-	c:\windows\SysWow64\dhRichClient3.dll
2013-04-27 22:09 . 2011-03-25 20:42	338432	----a-w-	c:\windows\SysWow64\sqlite36_engine.dll
2013-04-27 22:02 . 2013-04-27 22:02	--------	d-----w-	c:\users\Helliot\AppData\Roaming\tiger-k
2013-04-27 22:01 . 2013-04-27 22:01	--------	d-----w-	c:\users\Helliot\AppData\Roaming\Leawo
2013-04-27 21:58 . 2013-04-27 21:58	--------	d-----w-	c:\users\Helliot\AppData\Local\iDeerApp
2013-04-27 21:51 . 2013-04-27 21:52	--------	d-----w-	c:\programdata\Protexis
2013-04-27 21:50 . 2010-11-16 14:24	15672	----a-w-	c:\windows\system32\drivers\regi.sys
2013-04-27 21:25 . 2013-04-27 21:25	--------	d-----w-	c:\users\Helliot\AppData\Roaming\dvdcss
2013-04-26 15:30 . 2013-04-26 15:30	--------	d-----w-	c:\program files (x86)\SoftwareUpdater
2013-04-26 15:21 . 2013-04-26 15:54	--------	d-----w-	c:\users\Helliot\AppData\Roaming\TP-LINK
2013-04-26 15:21 . 2013-04-26 15:21	--------	d-----w-	c:\program files (x86)\TP-LINK
2013-04-26 15:20 . 2011-08-11 15:32	1579520	----a-w-	c:\windows\system32\drivers\athrx.sys
2013-04-26 15:20 . 2011-08-11 15:32	1579520	----a-w-	c:\windows\system32\athrx.sys
2013-04-26 15:20 . 2013-04-26 15:21	--------	d-----w-	c:\programdata\TP-LINK
2013-04-24 15:29 . 2013-04-24 15:29	--------	d-----w-	c:\program files (x86)\FRITZ!Box
2013-04-24 15:29 . 2006-12-14 11:42	69120	----a-r-	c:\windows\SysWow64\avmadd32.dll
2013-04-23 22:07 . 2013-04-12 14:45	1656680	----a-w-	c:\windows\system32\drivers\ntfs.sys
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-05-18 15:57 . 2012-10-05 19:53	34752	----a-w-	c:\windows\system32\drivers\WPRO_41_2001.sys
2013-05-02 00:06 . 2010-11-21 03:27	278800	------w-	c:\windows\system32\MpSigStub.exe
2013-05-01 16:14 . 2012-10-10 19:38	291088	----a-w-	c:\windows\SysWow64\PnkBstrB.exe
2013-05-01 16:14 . 2012-10-05 22:06	291088	----a-w-	c:\windows\SysWow64\PnkBstrB.xtr
2013-05-01 16:14 . 2012-10-10 19:38	281520	----a-w-	c:\windows\SysWow64\PnkBstrB.ex0
2013-04-18 13:55 . 2013-04-18 13:55	18456	----a-w-	c:\windows\system32\drivers\psi_mf_amd64.sys
2013-04-10 22:23 . 2012-10-06 01:16	72702784	----a-w-	c:\windows\system32\MRT.exe
2013-03-19 06:04 . 2013-04-10 18:28	5550424	----a-w-	c:\windows\system32\ntoskrnl.exe
2013-03-19 05:46 . 2013-04-10 18:28	43520	----a-w-	c:\windows\system32\csrsrv.dll
2013-03-19 05:04 . 2013-04-10 18:28	3968856	----a-w-	c:\windows\SysWow64\ntkrnlpa.exe
2013-03-19 05:04 . 2013-04-10 18:28	3913560	----a-w-	c:\windows\SysWow64\ntoskrnl.exe
2013-03-19 04:47 . 2013-04-10 18:28	6656	----a-w-	c:\windows\SysWow64\apisetschema.dll
2013-03-19 03:06 . 2013-04-10 18:28	112640	----a-w-	c:\windows\system32\smss.exe
2013-03-13 20:08 . 2013-03-13 20:08	719360	----a-w-	c:\windows\SysWow64\mshtmlmedia.dll
2013-03-13 20:08 . 2013-03-13 20:08	523264	----a-w-	c:\windows\SysWow64\vbscript.dll
2013-03-13 20:08 . 2013-03-13 20:08	38400	----a-w-	c:\windows\SysWow64\imgutil.dll
2013-03-13 20:08 . 2013-03-13 20:08	226304	----a-w-	c:\windows\system32\elshyph.dll
2013-03-13 20:08 . 2013-03-13 20:08	185344	----a-w-	c:\windows\SysWow64\elshyph.dll
2013-03-13 20:08 . 2013-03-13 20:08	158720	----a-w-	c:\windows\SysWow64\msls31.dll
2013-03-13 20:08 . 2013-03-13 20:08	150528	----a-w-	c:\windows\SysWow64\iexpress.exe
2013-03-13 20:08 . 2013-03-13 20:08	138752	----a-w-	c:\windows\SysWow64\wextract.exe
2013-03-13 20:08 . 2013-03-13 20:08	137216	----a-w-	c:\windows\SysWow64\ieUnatt.exe
2013-03-13 20:08 . 2013-03-13 20:08	12800	----a-w-	c:\windows\SysWow64\mshta.exe
2013-03-13 20:08 . 2013-03-13 20:08	110592	----a-w-	c:\windows\SysWow64\IEAdvpack.dll
2013-03-13 20:08 . 2013-03-13 20:08	1054720	----a-w-	c:\windows\system32\MsSpellCheckingFacility.exe
2013-03-13 20:08 . 2013-03-13 20:08	97280	----a-w-	c:\windows\system32\mshtmled.dll
2013-03-13 20:08 . 2013-03-13 20:08	92160	----a-w-	c:\windows\system32\SetIEInstalledDate.exe
2013-03-13 20:08 . 2013-03-13 20:08	905728	----a-w-	c:\windows\system32\mshtmlmedia.dll
2013-03-13 20:08 . 2013-03-13 20:08	81408	----a-w-	c:\windows\system32\icardie.dll
2013-03-13 20:08 . 2013-03-13 20:08	77312	----a-w-	c:\windows\system32\tdc.ocx
2013-03-13 20:08 . 2013-03-13 20:08	762368	----a-w-	c:\windows\system32\ieapfltr.dll
2013-03-13 20:08 . 2013-03-13 20:08	73728	----a-w-	c:\windows\SysWow64\SetIEInstalledDate.exe
2013-03-13 20:08 . 2013-03-13 20:08	62976	----a-w-	c:\windows\system32\pngfilt.dll
2013-03-13 20:08 . 2013-03-13 20:08	61952	----a-w-	c:\windows\SysWow64\tdc.ocx
2013-03-13 20:08 . 2013-03-13 20:08	599552	----a-w-	c:\windows\system32\vbscript.dll
2013-03-13 20:08 . 2013-03-13 20:08	52224	----a-w-	c:\windows\system32\msfeedsbs.dll
2013-03-13 20:08 . 2013-03-13 20:08	51200	----a-w-	c:\windows\system32\imgutil.dll
2013-03-13 20:08 . 2013-03-13 20:08	48640	----a-w-	c:\windows\SysWow64\mshtmler.dll
2013-03-13 20:08 . 2013-03-13 20:08	48640	----a-w-	c:\windows\system32\mshtmler.dll
2013-03-13 20:08 . 2013-03-13 20:08	452096	----a-w-	c:\windows\system32\dxtmsft.dll
2013-03-13 20:08 . 2013-03-13 20:08	441856	----a-w-	c:\windows\system32\html.iec
2013-03-13 20:08 . 2013-03-13 20:08	361984	----a-w-	c:\windows\SysWow64\html.iec
2013-03-13 20:08 . 2013-03-13 20:08	281600	----a-w-	c:\windows\system32\dxtrans.dll
2013-03-13 20:08 . 2013-03-13 20:08	27648	----a-w-	c:\windows\system32\licmgr10.dll
2013-03-13 20:08 . 2013-03-13 20:08	270848	----a-w-	c:\windows\system32\iedkcs32.dll
2013-03-13 20:08 . 2013-03-13 20:08	247296	----a-w-	c:\windows\system32\webcheck.dll
2013-03-13 20:08 . 2013-03-13 20:08	235008	----a-w-	c:\windows\system32\url.dll
2013-03-13 20:08 . 2013-03-13 20:08	23040	----a-w-	c:\windows\SysWow64\licmgr10.dll
2013-03-13 20:08 . 2013-03-13 20:08	216064	----a-w-	c:\windows\system32\msls31.dll
2013-03-13 20:08 . 2013-03-13 20:08	197120	----a-w-	c:\windows\system32\msrating.dll
2013-03-13 20:08 . 2013-03-13 20:08	173568	----a-w-	c:\windows\system32\ieUnatt.exe
2013-03-13 20:08 . 2013-03-13 20:08	167424	----a-w-	c:\windows\system32\iexpress.exe
2013-03-13 20:08 . 2013-03-13 20:08	1509376	----a-w-	c:\windows\system32\inetcpl.cpl
2013-03-13 20:08 . 2013-03-13 20:08	149504	----a-w-	c:\windows\system32\occache.dll
2013-03-13 20:08 . 2013-03-13 20:08	144896	----a-w-	c:\windows\system32\wextract.exe
2013-03-13 20:08 . 2013-03-13 20:08	1441280	----a-w-	c:\windows\SysWow64\inetcpl.cpl
2013-03-13 20:08 . 2013-03-13 20:08	1400416	----a-w-	c:\windows\system32\ieapfltr.dat
2013-03-13 20:08 . 2013-03-13 20:08	13824	----a-w-	c:\windows\system32\mshta.exe
2013-03-13 20:08 . 2013-03-13 20:08	136192	----a-w-	c:\windows\system32\iepeers.dll
2013-03-13 20:08 . 2013-03-13 20:08	135680	----a-w-	c:\windows\system32\IEAdvpack.dll
2013-03-13 20:08 . 2013-03-13 20:08	12800	----a-w-	c:\windows\system32\msfeedssync.exe
2013-03-13 20:08 . 2013-03-13 20:08	102912	----a-w-	c:\windows\system32\inseng.dll
2013-03-01 03:36 . 2013-04-10 18:28	3153408	----a-w-	c:\windows\system32\win32k.sys
2013-02-21 10:30 . 2013-04-10 22:23	1766912	----a-w-	c:\windows\SysWow64\wininet.dll
2013-02-21 10:29 . 2013-04-10 22:23	2877440	----a-w-	c:\windows\SysWow64\jscript9.dll
2013-02-21 10:29 . 2013-04-10 22:23	61440	----a-w-	c:\windows\SysWow64\iesetup.dll
2013-02-21 10:29 . 2013-04-10 22:23	109056	----a-w-	c:\windows\SysWow64\iesysprep.dll
2013-02-21 10:15 . 2013-04-10 22:23	51712	----a-w-	c:\windows\system32\ie4uinit.exe
2013-02-21 10:15 . 2013-04-10 22:23	2240512	----a-w-	c:\windows\system32\wininet.dll
2013-02-21 10:14 . 2013-04-10 22:23	1365504	----a-w-	c:\windows\system32\urlmon.dll
2013-02-21 10:14 . 2013-04-10 22:23	19230208	----a-w-	c:\windows\system32\mshtml.dll
2013-02-21 10:14 . 2013-04-10 22:23	603136	----a-w-	c:\windows\system32\msfeeds.dll
2013-02-21 10:14 . 2013-04-10 22:23	53248	----a-w-	c:\windows\system32\jsproxy.dll
2013-02-21 10:14 . 2013-04-10 22:23	3958784	----a-w-	c:\windows\system32\jscript9.dll
2013-02-21 10:14 . 2013-04-10 22:23	855552	----a-w-	c:\windows\system32\jscript.dll
2013-02-21 10:14 . 2013-04-10 22:23	67072	----a-w-	c:\windows\system32\iesetup.dll
2013-02-21 10:14 . 2013-04-10 22:23	526336	----a-w-	c:\windows\system32\ieui.dll
2013-02-21 10:14 . 2013-04-10 22:23	136704	----a-w-	c:\windows\system32\iesysprep.dll
2013-02-21 10:14 . 2013-04-10 22:23	2647040	----a-w-	c:\windows\system32\iertutil.dll
2013-02-21 10:14 . 2013-04-10 22:23	39936	----a-w-	c:\windows\system32\iernonce.dll
2013-02-21 10:14 . 2013-04-10 22:23	15404544	----a-w-	c:\windows\system32\ieframe.dll
2013-02-19 12:01 . 2013-04-10 22:23	2706432	----a-w-	c:\windows\SysWow64\mshtml.tlb
2013-02-19 11:42 . 2013-04-10 22:23	2706432	----a-w-	c:\windows\system32\mshtml.tlb
2013-02-19 11:10 . 2013-04-10 22:23	71680	----a-w-	c:\windows\SysWow64\RegisterIEPKEYs.exe
2013-02-19 10:51 . 2013-04-10 22:23	89600	----a-w-	c:\windows\system32\RegisterIEPKEYs.exe
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-21 1475584]
"SandboxieControl"="c:\program files\Sandboxie\SbieCtrl.exe" [2012-12-16 765200]
"SecureBanking"="c:\program files (x86)\Secure Banking\SecureBanking.exe" [2012-09-10 372736]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"IAStorIcon"="c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" [2011-11-29 284440]
"USB3MON"="c:\program files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe" [2012-01-26 291608]
"UpdReg"="c:\windows\UpdReg.EXE" [2000-05-10 90112]
"Sound Blaster Recon3D PCIe Control Panel"="c:\program files (x86)\Creative\Sound Blaster Recon3D PCIe\Sound Blaster Recon3D PCIe Control Panel\SBRnPCIe.exe" [2012-12-18 976896]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2013-05-09 4858968]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-05-11 958576]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2013-03-12 253816]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Secunia PSI Tray.lnk - c:\program files (x86)\Secunia\PSI\psi_tray.exe [2013-4-18 563224]
TP-LINK Wireless Configuration Utility.lnk - c:\program files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\TWCU.exe [2013-4-26 788992]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"EnableSecureUIAPath"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
"AppInit_DLLs"=c:\windows\SysWOW64\nvinit.dll c:\windows\SysWOW64\nvinit.dll
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2011-11-29 13592]
R2 Secunia Update Agent;Secunia Update Agent;c:\program files (x86)\Secunia\PSI\sua.exe [2013-04-18 659992]
R2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2012-02-07 363800]
R3 Creative ALchemy AL6 Licensing Service;Creative ALchemy AL6 Licensing Service;c:\program files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [2013-04-28 79360]
R3 Creative Audio Engine Licensing Service;Creative Audio Engine Licensing Service;c:\program files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [2013-04-28 79360]
R3 LGVirHid;Logitech Gamepanel Virtual HID Device Driver;c:\windows\system32\drivers\LGVirHid.sys [2009-11-24 16008]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2012-08-23 19456]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2012-08-23 57856]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [2012-08-23 30208]
S0 asahci64;asahci64;c:\windows\system32\DRIVERS\asahci64.sys [2011-09-21 49760]
S0 aswRvrt;aswRvrt; [x]
S0 aswVmm;aswVmm; [x]
S0 iusb3hcs;Intel(R) USB 3.0 Hostcontroller-Switchtreiber;c:\windows\system32\DRIVERS\iusb3hcs.sys [2012-01-26 16152]
S1 aswSnx;aswSnx; [x]
S1 aswSP;aswSP; [x]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2013-05-09 80816]
S2 CtHdaSvc;Sound Blaster Service;c:\windows\sysWow64\CtHdaSvc.exe [2013-01-29 103424]
S2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface;c:\program files\Intel\iCLS Client\HeciServer.exe [2012-02-02 628448]
S2 Intel(R) ME Service;Intel(R) ME Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [2012-02-07 121344]
S2 ISCTAgent;ISCT Always Updated Agent;c:\program files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe [2012-02-09 133632]
S2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2012-02-07 161560]
S2 MBAMScheduler;MBAMScheduler;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [2013-04-04 418376]
S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2013-04-04 701512]
S2 regi;regi;c:\windows\system32\drivers\regi.sys [2010-11-16 15672]
S2 Secunia PSI Agent;Secunia PSI Agent;c:\program files (x86)\Secunia\PSI\PSIA.exe [2013-04-18 1227800]
S2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2013-04-24 161384]
S3 cthda;Sound Blaster HDAudio;c:\windows\system32\drivers\cthda.sys [2013-01-29 1044760]
S3 cthdb;SB Recon3D PCIe Audio Bus Filter;c:\windows\system32\DRIVERS\cthdb.sys [2013-01-29 28440]
S3 ikbevent;Intel Upper keyboard Class Filter Driver;c:\windows\system32\DRIVERS\ikbevent.sys [2012-02-09 25536]
S3 imsevent;Intel Upper Mouse Class Filter Driver;c:\windows\system32\DRIVERS\imsevent.sys [2012-02-09 25536]
S3 ISCT;Intel(R) Smart Connect Technology Device Driver;c:\windows\system32\DRIVERS\ISCTD64.sys [2012-02-09 44992]
S3 iusb3hub;Intel(R) USB 3.0-Hubtreiber;c:\windows\system32\DRIVERS\iusb3hub.sys [2012-01-26 356120]
S3 iusb3xhc;Intel(R) USB 3.0 eXtensible-Hostcontrollertreiber;c:\windows\system32\DRIVERS\iusb3xhc.sys [2012-01-26 787736]
S3 LGBusEnum;Logitech GamePanel Virtual Bus Enumerator Driver;c:\windows\system32\drivers\LGBusEnum.sys [2009-11-24 22408]
S3 LGSHidFilt;Logitech Gaming KMDF HID Filter Driver;c:\windows\system32\DRIVERS\LGSHidFilt.Sys [2012-02-07 66328]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2013-04-04 25928]
S3 PSI;PSI;c:\windows\system32\DRIVERS\psi_mf_amd64.sys [2013-04-18 18456]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [2011-08-23 565352]
S3 WPRO_41_2001;WinPcap Packet Driver (WPRO_41_2001);c:\windows\system32\drivers\WPRO_41_2001.sys [2013-05-18 34752]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*NewlyCreated* - WS2IFSL
.
Inhalt des "geplante Tasks" Ordners
.
2013-05-18 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-05-18 10:18]
.
2013-05-14 c:\windows\Tasks\avast! Emergency Update.job
- c:\program files\AVAST Software\Avast\AvastEmUpdate.exe [2013-05-13 08:58]
.
2013-05-18 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-12-14 17:06]
.
2013-05-13 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-12-14 17:06]
.
2013-05-18 c:\windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job
- c:\program files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2011-11-25 11:41]
.
2013-05-13 c:\windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job
- c:\program files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2011-11-25 11:41]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2013-05-09 08:58	133840	----a-w-	c:\program files\AVAST Software\Avast\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Launch LCore"="c:\program files\Logitech Gaming Software\LCore.exe" [2012-07-24 6900024]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2012-12-14 172144]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2012-12-14 399984]
"Persistence"="c:\windows\system32\igfxpers.exe" [2012-12-14 441968]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=c:\windows\System32\nvinitx.dll
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost  - LocalService
FontCache
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
TCP: DhcpNameServer = 192.168.178.1
FF - ProfilePath - c:\users\Helliot\AppData\Roaming\Mozilla\Firefox\Profiles\64xea5dh.default\
FF - prefs.js: browser.startup.homepage - google.de
FF - prefs.js: network.proxy.type - 0
FF - ExtSQL: 2013-05-14 01:29; testpilot@labs.mozilla.com; c:\users\Helliot\AppData\Roaming\Mozilla\Firefox\Profiles\64xea5dh.default\extensions\testpilot@labs.mozilla.com.xpi
FF - ExtSQL: 2013-05-14 01:43; wrc@avast.com; c:\program files\AVAST Software\Avast\WebRep\FF
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Wow6432Node-HKLM-Run-<NO NAME> - (no file)
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*1*]
@="?????????????????? v1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*1*\CLSID]
@="{E23FE9C6-778E-49D4-B537-38FCDE4887D8}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*2*]
@="?????????????????? v2"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*2*\CLSID]
@="{9BE31822-FDAD-461B-AD51-BE1D1C159921}"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\program files (x86)\Creative\Shared Files\CTAudSvc.exe
c:\program files\AVAST Software\Avast\AvastSvc.exe
c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\windows\SysWOW64\PnkBstrA.exe
c:\program files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2013-05-18  17:59:13 - PC wurde neu gestartet
ComboFix-quarantined-files.txt  2013-05-18 15:59
.
Vor Suchlauf: 9 Verzeichnis(se), 55.698.915.328 Bytes frei
Nach Suchlauf: 13 Verzeichnis(se), 55.631.417.344 Bytes frei
.
- - End Of File - - 863BBCC191EC5AFC9D9EA862BD6A9CEC