GVU Virus abgesicherter modus geht nicht

ComboFix 13-06-22.01 - Poweruser 23/06/2013  21:21:20.1.2 - x86
Microsoft Windows 7 Professional   6.1.7601.1.1252.49.1031.18.3327.2249 [GMT 2:00]
ausgeführt von:: F:\ComboFix.exe
AV: Microsoft Security Essentials *Enabled/Updated* {108DAC43-C256-20B7-BB05-914135DA5160}
SP: Microsoft Security Essentials *Enabled/Updated* {ABEC4DA7-E46C-2F39-81B5-AA334E5D1BDD}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 * Neuer Wiederherstellungspunkt wurde erstellt
.
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\programdata\1359413359.bdinstall.bin
c:\programdata\1359450575.bdinstall.bin
c:\users\Poweruser\AppData\Local\._Revolution_
c:\users\Poweruser\AppData\Roaming\skype.dat
c:\users\Poweruser\AppData\Roaming\skype.ini
c:\windows\$NtUninstallKB37202$
c:\windows\$NtUninstallKB37202$\1131621634
c:\windows\$NtUninstallKB37202$\2501641294\@
c:\windows\$NtUninstallKB37202$\2501641294\bckfg.tmp
c:\windows\$NtUninstallKB37202$\2501641294\cfg.ini
c:\windows\$NtUninstallKB37202$\2501641294\Desktop.ini
c:\windows\$NtUninstallKB37202$\2501641294\keywords
c:\windows\$NtUninstallKB37202$\2501641294\kwrd.dll
c:\windows\$NtUninstallKB37202$\2501641294\L\xadqgnnk
c:\windows\$NtUninstallKB37202$\2501641294\U\00000001.@
c:\windows\$NtUninstallKB37202$\2501641294\U\00000002.@
c:\windows\$NtUninstallKB37202$\2501641294\U\00000004.@
c:\windows\$NtUninstallKB37202$\2501641294\U\80000000.@
c:\windows\$NtUninstallKB37202$\2501641294\U\80000004.@
c:\windows\$NtUninstallKB37202$\2501641294\U\80000032.@
c:\windows\system32\muzapp.exe
.
.
(((((((((((((((((((((((   Dateien erstellt von 2013-05-23 bis 2013-06-23  ))))))))))))))))))))))))))))))
.
.
2013-06-23 19:30 . 2013-06-23 19:33	--------	d-----w-	c:\users\Poweruser\AppData\Local\temp
2013-06-23 19:30 . 2013-06-23 19:30	--------	d-----w-	c:\users\UpdatusUser\AppData\Local\temp
2013-06-23 19:30 . 2013-06-23 19:30	--------	d-----w-	c:\users\Default\AppData\Local\temp
2013-06-23 19:21 . 2013-06-23 19:21	29904	----a-w-	c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{7C24572F-BC22-40D7-9254-C84004AD4D9F}\MpKsl807aec83.sys
2013-06-23 16:14 . 2013-06-23 16:14	--------	d-----w-	c:\programdata\PMB Files
2013-06-23 16:14 . 2013-06-12 04:18	7068072	----a-w-	c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{7C24572F-BC22-40D7-9254-C84004AD4D9F}\mpengine.dll
2013-06-23 16:14 . 2013-06-23 19:32	--------	d-----w-	c:\programdata\NVIDIA
2013-06-22 08:46 . 2013-06-12 04:18	7068072	----a-w-	c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2013-06-12 01:08 . 2013-06-08 11:41	218112	----a-w-	c:\program files\Internet Explorer\sqmapi.dll
2013-06-12 01:08 . 2013-06-08 11:13	2706432	----a-w-	c:\windows\system32\mshtml.tlb
2013-06-11 18:43 . 2013-04-25 23:30	1505280	----a-w-	c:\windows\system32\d3d11.dll
2013-06-11 18:43 . 2013-05-10 03:20	24576	----a-w-	c:\windows\system32\cryptdlg.dll
2013-06-11 18:43 . 2013-04-26 04:55	492544	----a-w-	c:\windows\system32\win32spl.dll
2013-06-11 18:43 . 2013-05-13 03:08	903168	----a-w-	c:\windows\system32\certutil.exe
2013-06-11 18:43 . 2013-05-13 04:45	140288	----a-w-	c:\windows\system32\cryptsvc.dll
2013-06-11 18:43 . 2013-05-13 04:45	1160192	----a-w-	c:\windows\system32\crypt32.dll
2013-06-11 18:43 . 2013-05-13 04:45	103936	----a-w-	c:\windows\system32\cryptnet.dll
2013-06-11 18:43 . 2013-05-13 03:08	43008	----a-w-	c:\windows\system32\certenc.dll
2013-06-11 18:43 . 2013-04-17 07:02	1230336	----a-w-	c:\windows\system32\WindowsCodecs.dll
2013-06-11 18:43 . 2013-05-06 05:06	3968872	----a-w-	c:\windows\system32\ntkrnlpa.exe
2013-06-11 18:43 . 2013-05-06 05:06	3913576	----a-w-	c:\windows\system32\ntoskrnl.exe
2013-06-11 18:43 . 2013-05-08 05:38	1293672	----a-w-	c:\windows\system32\drivers\tcpip.sys
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-06-11 19:42 . 2012-11-07 20:23	692104	----a-w-	c:\windows\system32\FlashPlayerApp.exe
2013-06-11 19:42 . 2011-11-23 18:18	71048	----a-w-	c:\windows\system32\FlashPlayerCPLApp.cpl
2013-05-02 15:28 . 2010-03-04 14:42	238872	------w-	c:\windows\system32\MpSigStub.exe
2013-04-13 04:45 . 2013-05-15 22:31	474624	----a-w-	c:\windows\apppatch\AcSpecfc.dll
2013-04-13 04:45 . 2013-05-15 22:31	2176512	----a-w-	c:\windows\apppatch\AcGenral.dll
2013-04-12 13:45 . 2013-04-24 18:25	1211752	----a-w-	c:\windows\system32\drivers\ntfs.sys
2013-04-10 05:18 . 2013-05-15 22:31	728424	----a-w-	c:\windows\system32\drivers\dxgkrnl.sys
2013-04-10 05:18 . 2013-05-15 22:31	218984	----a-w-	c:\windows\system32\drivers\dxgmms1.sys
2013-04-10 03:14 . 2013-05-15 22:31	2347520	----a-w-	c:\windows\system32\win32k.sys
2013-04-06 22:21 . 2013-04-06 22:21	745472	----a-w-	c:\windows\system32\MsSpellCheckingFacility.exe
2013-04-06 22:21 . 2013-04-06 22:21	523264	----a-w-	c:\windows\system32\vbscript.dll
2013-04-06 22:21 . 2013-04-06 22:21	185344	----a-w-	c:\windows\system32\elshyph.dll
2013-04-06 22:21 . 2013-04-06 22:21	158720	----a-w-	c:\windows\system32\msls31.dll
2013-04-06 22:21 . 2013-04-06 22:21	150528	----a-w-	c:\windows\system32\iexpress.exe
2013-04-06 22:21 . 2013-04-06 22:21	138752	----a-w-	c:\windows\system32\wextract.exe
2013-04-06 22:21 . 2013-04-06 22:21	137216	----a-w-	c:\windows\system32\ieUnatt.exe
2013-04-06 22:21 . 2013-04-06 22:21	12800	----a-w-	c:\windows\system32\mshta.exe
2013-04-06 22:21 . 2013-04-06 22:21	38400	----a-w-	c:\windows\system32\imgutil.dll
2013-04-06 22:21 . 2013-04-06 22:21	73728	----a-w-	c:\windows\system32\SetIEInstalledDate.exe
2013-04-06 22:21 . 2013-04-06 22:21	719360	----a-w-	c:\windows\system32\mshtmlmedia.dll
2013-04-06 22:21 . 2013-04-06 22:21	61952	----a-w-	c:\windows\system32\tdc.ocx
2013-04-06 22:21 . 2013-04-06 22:21	48640	----a-w-	c:\windows\system32\mshtmler.dll
2013-04-06 22:21 . 2013-04-06 22:21	361984	----a-w-	c:\windows\system32\html.iec
2013-04-06 22:21 . 2013-04-06 22:21	23040	----a-w-	c:\windows\system32\licmgr10.dll
2013-04-06 22:21 . 2013-04-06 22:21	1441280	----a-w-	c:\windows\system32\inetcpl.cpl
2013-04-06 22:21 . 2013-04-06 22:21	110592	----a-w-	c:\windows\system32\IEAdvpack.dll
2013-04-04 12:50 . 2012-01-11 23:19	22856	----a-w-	c:\windows\system32\drivers\mbam.sys
2013-03-31 18:30 . 2010-12-30 19:14	22328	----a-w-	c:\windows\system32\drivers\PnkBstrK.sys
2013-03-31 18:30 . 2010-12-30 19:14	103736	----a-w-	c:\windows\system32\PnkBstrB.exe
2013-03-29 21:27 . 2010-12-30 19:14	66872	----a-w-	c:\windows\system32\PnkBstrA.exe
2013-03-29 21:23 . 2010-12-30 19:14	22328	----a-w-	c:\users\Poweruser\AppData\Roaming\PnkBstrK.sys
2013-01-22 20:17 . 2011-05-15 08:49	266720	----a-w-	c:\program files\mozilla firefox\components\browsercomps.dll
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SUPERAntiSpyware"="c:\program files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2013-05-24 4760816]
"TomTomHOME.exe"="c:\program files\TomTom HOME 2\TomTomHOMERunner.exe" [2012-01-23 247728]
"Spotify Web Helper"="c:\users\Poweruser\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" [2013-06-19 1104384]
"KiesPreload"="c:\program files\Samsung\Kies\Kies.exe" [2012-11-12 968120]
"KiesAirMessage"="c:\program files\Samsung\Kies\KiesAirMessage.exe" [2012-11-01 577536]
"Pando Media Booster"="c:\program files\Pando Networks\Media Booster\PMB.exe" [2013-02-16 3093624]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2009-02-26 30040]
"Launch LGDCore"="c:\program files\Logitech\GamePanel Software\G-series Software\LGDCore.exe" [2009-08-13 3161608]
"IntelliPoint"="c:\program files\Microsoft IntelliPoint\ipoint.exe" [2009-11-11 1468256]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RtHDVCpl.exe" [2009-05-22 7514656]
"XboxStat"="c:\program files\Microsoft Xbox 360 Accessories\XboxStat.exe" [2009-09-30 718688]
"itype"="c:\program files\Microsoft IntelliType Pro\itype.exe" [2010-07-21 1778064]
"Launch LgDeviceAgent"="c:\program files\Logitech\GamePanel Software\LgDevAgt.exe" [2009-08-13 357384]
"KiesTrayAgent"="c:\program files\Samsung\Kies\KiesTrayAgent.exe" [2012-11-12 309688]
"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2013-01-27 947152]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2011-07-19 113024]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
2011-05-04 17:54	551296	----a-w-	c:\program files\SUPERAntiSpyware\SASWINLO.DLL
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"Google Update"="c:\users\Poweruser\AppData\Local\Google\Update\GoogleUpdate.exe" /c
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" -atboottime
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
"DivXUpdate"="c:\program files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe"
.
R2 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [2013-02-28 161384]
R2 XobniService;XobniService;c:\program files\Xobni\XobniService.exe [2010-11-22 62184]
R3 dc3d;MS Hardware Device Detection Driver (USB);c:\windows\system32\DRIVERS\dc3d.sys [2011-05-18 40320]
R3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudbus.sys [2013-02-06 83864]
R3 DisplayLinkUsbPort;DisplayLink USB Device;c:\windows\system32\DRIVERS\DisplayLinkUsbPort_5.5.29055.0.sys [x]
R3 DWA;Wireless USB Device Adapter;c:\windows\system32\DRIVERS\WSR_DWA.SYS [2010-05-10 483328]
R3 hwa;Wireless USB Host Adapter;c:\windows\system32\DRIVERS\WSR_HWA.SYS [2010-05-10 794624]
R3 HWARadio;Wireless USB Host Radio;c:\windows\system32\DRIVERS\WSR_RCI.SYS [2010-05-10 142848]
R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys [2013-01-20 100328]
R3 NisSrv;Microsoft-Netzwerkinspektion;c:\program files\Microsoft Security Client\NisSrv.exe [2013-01-27 295232]
R3 ssudmdm;SAMSUNG  Mobile USB Modem Drivers (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudmdm.sys [2012-09-20 181344]
R3 TrufosAlt;TrufosAlt;c:\windows\system32\DRIVERS\TrufosAlt.sys [2013-03-06 309320]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 52224]
S1 MpKsl807aec83;MpKsl807aec83;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{7C24572F-BC22-40D7-9254-C84004AD4D9F}\MpKsl807aec83.sys [2013-06-23 29904]
S1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\SASDIFSV.SYS [2011-07-22 12880]
S1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [2011-07-12 67664]
S2 !SASCORE;SAS Core Service;c:\program files\SUPERAntiSpyware\SASCORE.EXE [2012-09-08 116608]
S2 MBAMScheduler;MBAMScheduler;c:\program files\Malwarebytes' Anti-Malware\mbamscheduler.exe [2013-04-04 418376]
S2 MBAMService;MBAMService;c:\program files\Malwarebytes' Anti-Malware\mbamservice.exe [2013-04-04 701512]
S2 Skype C2C Service;Skype C2C Service;c:\programdata\Skype\Toolbars\Skype C2C Service\c2c_service.exe [2013-05-14 3289208]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2013-01-18 383264]
S2 TeamViewer6;TeamViewer 6;c:\program files\TeamViewer\Version6\TeamViewer_Service.exe [2011-03-18 2271608]
S2 TomTomHOMEService;TomTomHOMEService;c:\program files\TomTom HOME 2\TomTomHOMEService.exe [2012-01-23 92592]
S2 TuneUp.UtilitiesSvc;TuneUp Utilities Service;c:\program files\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe [2013-01-28 1724192]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2013-04-04 22856]
S3 netr28;Ralink 802.11n Extensible Wireless Driver;c:\windows\system32\DRIVERS\netr28.sys [2012-12-06 2046560]
S3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files\TuneUp Utilities 2013\TuneUpUtilitiesDriver32.sys [2012-11-16 10088]
.
.
Inhalt des "geplante Tasks" Ordners
.
2013-06-23 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-11-07 19:42]
.
2013-06-23 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1373173765-90203179-3046966341-1001Core.job
- c:\users\Poweruser\AppData\Local\Google\Update\GoogleUpdate.exe [2012-03-21 18:31]
.
2013-06-23 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1373173765-90203179-3046966341-1001UA.job
- c:\users\Poweruser\AppData\Local\Google\Update\GoogleUpdate.exe [2012-03-21 18:31]
.
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = hxxp://feed.snap.do/?publisher=SnapdoOCYB&dpid=SnapdoOCYB&co=DE&userid=5817b7f5-3cff-41d2-8592-45cfbd903ca9&searchtype=hp&installDate=31/03/2013
uSearchAssistant = hxxp://feed.snap.do/?publisher=SnapdoOCYB&dpid=SnapdoOCYB&co=DE&userid=5817b7f5-3cff-41d2-8592-45cfbd903ca9&searchtype=ds&q={searchTerms}&installDate=31/03/2013
IE: Free YouTube to MP3 Converter - c:\users\Poweruser\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm
IE: Nach Microsoft E&xel exportieren - c:\progra~1\MICROS~1\Office12\EXCEL.EXE/3000
IE: {{71BFC818-0CED-42D6-9C87-5142918957EE} - c:\program files\ICQ7.1\ICQ.exe
TCP: DhcpNameServer = 192.168.0.1
TCP: Interfaces\{601A2EDB-CF78-449C-8E0C-C27E80C3F858}: NameServer = 192.168.0.1
FF - ProfilePath - c:\users\Poweruser\AppData\Roaming\Mozilla\Firefox\Profiles\c7ckhesf.default\
FF - prefs.js: browser.search.selectedEngine - Web Search
FF - prefs.js: browser.startup.homepage - hxxp://feed.snap.do/?publisher=SnapdoOCYB&dpid=SnapdoOCYB&co=DE&userid=5817b7f5-3cff-41d2-8592-45cfbd903ca9&searchtype=hp&installDate=31/03/2013
FF - prefs.js: keyword.URL - hxxp://feed.snap.do/?publisher=SnapdoOCYB&dpid=SnapdoOCYB&co=DE&userid=5817b7f5-3cff-41d2-8592-45cfbd903ca9&searchtype=ds&installDate=31/03/2013&q=
FF - prefs.js: network.proxy.http - 94.23.192.79
FF - prefs.js: network.proxy.http_port - 3128
FF - prefs.js: network.proxy.type - 0
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
AddRemove-01_Simmental - c:\program files\Samsung\USB Drivers\01_Simmental\Uninstall.exe
AddRemove-02_Siberian - c:\program files\Samsung\USB Drivers\02_Siberian\Uninstall.exe
AddRemove-03_Swallowtail - c:\program files\Samsung\USB Drivers\03_Swallowtail\Uninstall.exe
AddRemove-04_semseyite - c:\program files\Samsung\USB Drivers\04_semseyite\Uninstall.exe
AddRemove-07_Schorl - c:\program files\Samsung\USB Drivers\07_Schorl\Uninstall.exe
AddRemove-09_Hsp - c:\program files\Samsung\USB Drivers\09_Hsp\Uninstall.exe
AddRemove-11_HSP_Plus_Default - c:\program files\Samsung\USB Drivers\11_HSP_Plus_Default\Uninstall.exe
AddRemove-16_Shrewsbury - c:\program files\Samsung\USB Drivers\16_Shrewsbury\Uninstall.exe
AddRemove-20_NXP_Driver - c:\program files\Samsung\USB Drivers\20_NXP_Driver\Uninstall.exe
AddRemove-24_flashusbdriver - c:\program files\Samsung\USB Drivers\24_flashusbdriver\Uninstall.exe
AddRemove-25_escape - c:\program files\Samsung\USB Drivers\25_escape\Uninstall.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil32_11_7_700_224_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil32_11_7_700_224_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*1*]
@="?????????????????? v1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*1*\CLSID]
@="{E23FE9C6-778E-49D4-B537-38FCDE4887D8}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*2*]
@="?????????????????? v2"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*2*\CLSID]
@="{9BE31822-FDAD-461B-AD51-BE1D1C159921}"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\windows\system32\nvvsvc.exe
c:\program files\Microsoft Security Client\MsMpEng.exe
c:\program files\NVIDIA Corporation\Display\nvxdsync.exe
c:\windows\system32\nvvsvc.exe
c:\windows\system32\WLANExt.exe
c:\windows\system32\conhost.exe
c:\windows\system32\taskhost.exe
c:\program files\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\program files\Malwarebytes' Anti-Malware\mbamgui.exe
c:\windows\system32\PnkBstrA.exe
c:\program files\Edimax\Common\RaRegistry.exe
c:\windows\system32\conhost.exe
c:\program files\NVIDIA Corporation\Display\nvtray.exe
c:\program files\Windows Media Player\wmpnetwk.exe
c:\program files\TuneUp Utilities 2013\TuneUpUtilitiesApp32.exe
c:\windows\system32\sppsvc.exe
c:\program files\Microsoft Security Client\MpCmdRun.exe
c:\windows\system32\DllHost.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2013-06-23  19:39:14 - PC wurde neu gestartet
ComboFix-quarantined-files.txt  2013-06-23 17:39
.
Vor Suchlauf: 12 Verzeichnis(se), 54.104.551.424 Bytes frei
Nach Suchlauf: 19 Verzeichnis(se), 60.827.451.392 Bytes frei
.
- - End Of File - - 6D036690ECA5E6906B46DB189C2DEC4F
A36C5E4F47E84449FF07ED3517B43A31