64 infizierte Dateien nach Malwarebytes-Scan - Was nun?

ComboFix 13-08-20.01 - Uli 21.08.2013  13:26:31.2.4 - x64
Microsoft Windows 8  6.2.9200.0.1252.49.1031.18.3955.1296 [GMT 2:00]
ausgeführt von:: c:\users\Uli\Desktop\ComboFix.exe
Benutzte Befehlsschalter :: c:\users\Uli\Desktop\CFScript.txt
AV: Avira Desktop *Disabled/Updated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
AV: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Avira Desktop *Disabled/Updated* {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
FILE ::
"c:\windows\system32\NAPCRYQT.exe"
.
.
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
.
(((((((((((((((((((((((((((((((((((((((   Treiber/Dienste   )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Service_GenValPbj
.
.
(((((((((((((((((((((((   Dateien erstellt von 2013-07-21 bis 2013-08-21  ))))))))))))))))))))))))))))))
.
.
2013-08-21 11:34 . 2013-08-21 11:34	--------	d-----w-	c:\users\UpdatusUser\AppData\Local\temp
2013-08-21 11:34 . 2013-08-21 11:34	--------	d-----w-	c:\users\Uli\AppData\Local\temp
2013-08-21 11:34 . 2013-08-21 11:34	--------	d-----w-	c:\users\Default\AppData\Local\temp
2013-08-20 20:17 . 2013-08-20 20:17	--------	d-----w-	C:\FRST
2013-08-20 20:04 . 2013-08-20 20:04	--------	d-----w-	c:\windows\ERUNT
2013-08-20 19:49 . 2013-08-20 19:58	--------	d-----w-	C:\AdwCleaner
2013-08-20 19:43 . 2013-08-20 19:43	--------	d-----w-	c:\windows\system32\IO
2013-08-20 16:21 . 2013-08-20 16:21	388608	----a-w-	c:\program files\HiJackThis204.exe
2013-08-20 16:20 . 2013-08-20 16:20	--------	d-----w-	c:\users\Uli\AppData\Roaming\Malwarebytes
2013-08-20 16:20 . 2013-08-20 16:20	--------	d-----w-	c:\programdata\Malwarebytes
2013-08-20 16:20 . 2013-04-04 12:50	25928	----a-w-	c:\windows\system32\drivers\mbam.sys
2013-08-20 16:20 . 2013-08-20 16:20	--------	d-----w-	c:\program files (x86)\Malwarebytes' Anti-Malware
2013-08-20 07:11 . 2013-08-20 07:11	240304	----a-w-	c:\programdata\Microsoft\Windows\Sqm\Manifest\Sqm10214.bin
2013-08-15 09:34 . 2013-08-15 09:37	--------	d-----w-	c:\windows\system32\MRT
2013-08-15 09:09 . 2013-07-26 05:12	15405056	----a-w-	c:\windows\system32\ieframe.dll
2013-08-15 09:09 . 2013-07-26 05:12	855552	----a-w-	c:\windows\system32\jscript.dll
2013-08-15 09:09 . 2013-07-26 05:12	148992	----a-w-	c:\program files\Internet Explorer\jsdebuggeride.dll
2013-08-15 09:09 . 2013-07-26 05:12	19239424	----a-w-	c:\windows\system32\mshtml.dll
2013-08-15 09:09 . 2013-07-26 05:12	2647040	----a-w-	c:\windows\system32\iertutil.dll
2013-08-15 09:09 . 2013-07-26 05:12	3958784	----a-w-	c:\windows\system32\jscript9.dll
2013-08-15 09:08 . 2013-07-26 03:12	2877440	----a-w-	c:\windows\SysWow64\jscript9.dll
2013-08-15 09:08 . 2013-07-26 03:12	108032	----a-w-	c:\program files (x86)\Internet Explorer\jsdebuggeride.dll
2013-08-15 08:41 . 2013-07-13 06:18	337408	----a-w-	c:\windows\system32\wintrust.dll
2013-08-15 08:41 . 2013-07-13 06:16	1889280	----a-w-	c:\windows\system32\crypt32.dll
2013-08-15 08:41 . 2013-07-13 04:24	261120	----a-w-	c:\windows\SysWow64\wintrust.dll
2013-08-15 08:41 . 2013-07-13 04:23	1568256	----a-w-	c:\windows\SysWow64\crypt32.dll
2013-08-15 08:41 . 2013-07-13 06:16	68096	----a-w-	c:\windows\system32\cryptsvc.dll
2013-08-15 08:41 . 2013-07-13 06:15	98304	----a-w-	c:\windows\system32\apprepsync.dll
2013-08-15 08:41 . 2013-07-13 06:15	124416	----a-w-	c:\windows\system32\apprepapi.dll
2013-08-15 08:41 . 2013-07-13 04:23	87040	----a-w-	c:\windows\SysWow64\apprepapi.dll
2013-08-15 08:41 . 2013-07-13 04:23	74240	----a-w-	c:\windows\SysWow64\apprepsync.dll
2013-08-15 08:39 . 2013-07-09 06:07	2233168	----a-w-	c:\windows\system32\drivers\tcpip.sys
2013-08-13 08:22 . 2013-08-13 08:23	--------	d-----w-	c:\users\Uli\AppData\Local\Amazon
2013-08-08 08:31 . 2013-08-09 14:50	--------	d-----w-	c:\program files (x86)\Mozilla Thunderbird
2013-07-31 14:01 . 2013-07-31 14:01	--------	d-----w-	c:\users\Uli\AppData\Roaming\IrfanView
2013-07-31 14:01 . 2013-07-31 14:01	--------	d-----w-	c:\program files (x86)\IrfanView
2013-07-30 06:51 . 2013-07-30 06:51	--------	d-----w-	c:\programdata\Energy Management
2013-07-26 14:26 . 2013-07-26 14:26	--------	d-----w-	c:\users\Uli\AppData\Roaming\ASCOMP Software
2013-07-26 14:26 . 2013-07-26 14:26	--------	d-----w-	c:\program files (x86)\ASCOMP Software
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-08-20 09:05 . 2013-06-25 17:33	82136	----a-w-	c:\windows\system32\drivers\avnetflt.sys
2013-08-20 09:05 . 2013-06-25 17:33	132088	----a-w-	c:\windows\system32\drivers\avipbb.sys
2013-08-20 09:05 . 2013-06-25 17:33	105344	----a-w-	c:\windows\system32\drivers\avgntflt.sys
2013-08-15 09:34 . 2013-06-26 08:35	78161360	----a-w-	c:\windows\system32\MRT.exe
2013-07-12 17:17 . 2013-07-04 13:58	117760	----a-w-	c:\windows\system32\NAPCRYQT.exe
2013-07-08 19:17 . 2013-07-08 19:17	61440	----a-r-	c:\users\Uli\AppData\Roaming\Microsoft\Installer\{11953C65-BB4E-4CA4-B0F0-2600A4B20040}\ARPPRODUCTICON.exe
2013-07-08 19:16 . 2013-07-08 19:16	106496	----a-w-	c:\windows\SysWow64\ATL71.DLL
2013-07-04 13:58 . 2013-07-04 13:58	121856	----a-w-	c:\windows\system32\GFilterSvc0.exe
2013-06-27 22:04 . 2012-07-26 08:14	78200	----a-w-	c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-06-27 22:04 . 2012-07-26 08:14	693112	----a-w-	c:\windows\SysWow64\FlashPlayerApp.exe
2013-06-26 11:00 . 2013-06-26 11:00	50784	----a-w-	c:\programdata\Microsoft\windowsfiltering\Sqm\Manifest\Sqm3.bin
2013-06-26 11:00 . 2013-06-26 11:00	17536	----a-w-	c:\programdata\Microsoft\windowssampling\Sqm\Manifest\Sqm3.bin
2013-06-25 17:25 . 2013-06-25 17:33	28600	----a-w-	c:\windows\system32\drivers\avkmgr.sys
2013-06-25 15:29 . 2012-07-26 08:13	22240	----a-w-	c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2013-06-16 22:41 . 2013-07-17 08:09	997632	----a-w-	c:\windows\system32\drivers\ndis.sys
2013-06-04 07:15 . 2013-06-04 07:15	708168	----a-w-	c:\windows\system32\WinUSBCoInstaller.dll
2013-06-04 07:15 . 2013-06-04 07:15	103448	----a-w-	c:\windows\system32\drivers\ssudbus.sys
2013-06-04 07:15 . 2013-06-04 07:15	203672	----a-w-	c:\windows\system32\drivers\ssudmdm.sys
2013-06-04 07:15 . 2013-06-04 07:15	1490656	----a-w-	c:\windows\system32\WdfCoInstaller01007.dll
2013-06-01 11:54 . 2013-07-17 08:09	194816	----a-w-	c:\windows\system32\drivers\sdbus.sys
2013-06-01 11:54 . 2013-07-17 08:09	125184	----a-w-	c:\windows\system32\drivers\dumpsd.sys
2013-06-01 11:34 . 2013-07-17 08:09	2391280	----a-w-	c:\windows\explorer.exe
2013-06-01 11:29 . 2013-07-17 08:09	213248	----a-w-	c:\windows\system32\drivers\UCX01000.SYS
2013-06-01 11:29 . 2013-07-17 08:09	337152	----a-w-	c:\windows\system32\drivers\USBXHCI.SYS
2013-06-01 11:26 . 2013-07-17 08:09	327936	----a-w-	c:\windows\system32\drivers\volsnap.sys
2013-06-01 11:26 . 2013-07-17 08:09	6987008	----a-w-	c:\windows\system32\ntoskrnl.exe
2013-06-01 10:24 . 2013-07-17 08:09	2106176	----a-w-	c:\windows\SysWow64\explorer.exe
2013-06-01 09:25 . 2013-07-17 08:09	364544	----a-w-	c:\windows\SysWow64\XpsGdiConverter.dll
2013-06-01 09:25 . 2013-07-17 08:09	67584	----a-w-	c:\windows\SysWow64\samlib.dll
2013-06-01 09:25 . 2013-07-09 20:44	496640	----a-w-	c:\windows\SysWow64\qedit.dll
2013-06-01 09:24 . 2013-07-17 08:09	493056	----a-w-	c:\windows\SysWow64\mscms.dll
2013-06-01 09:24 . 2013-07-17 08:09	1453568	----a-w-	c:\windows\SysWow64\mfcore.dll
2013-06-01 09:24 . 2013-07-17 08:09	850944	----a-w-	c:\windows\SysWow64\mfasfsrcsnk.dll
2013-06-01 09:23 . 2013-07-17 08:09	1842176	----a-w-	c:\windows\SysWow64\dwmcore.dll
2013-06-01 09:23 . 2013-07-17 08:09	680960	----a-w-	c:\windows\system32\vds.exe
2013-06-01 09:22 . 2013-07-17 08:09	80896	----a-w-	c:\windows\system32\MbaeParserTask.exe
2013-06-01 09:22 . 2013-07-17 08:09	523264	----a-w-	c:\windows\system32\XpsGdiConverter.dll
2013-06-01 09:22 . 2013-07-17 08:09	446976	----a-w-	c:\windows\system32\wwansvc.dll
2013-06-01 09:22 . 2013-07-17 08:09	190976	----a-w-	c:\windows\system32\vdsutil.dll
2013-06-01 09:21 . 2013-07-17 08:09	729600	----a-w-	c:\windows\system32\samsrv.dll
2013-06-01 09:21 . 2013-07-17 08:09	106496	----a-w-	c:\windows\system32\samlib.dll
2013-06-01 09:21 . 2013-07-09 20:44	595968	----a-w-	c:\windows\system32\qedit.dll
2013-06-01 09:20 . 2013-07-17 08:09	583168	----a-w-	c:\windows\system32\mscms.dll
2013-06-01 09:20 . 2013-07-17 08:09	1527808	----a-w-	c:\windows\system32\mfcore.dll
2013-06-01 09:20 . 2013-07-17 08:09	1048576	----a-w-	c:\windows\system32\mfasfsrcsnk.dll
2013-06-01 09:20 . 2013-07-17 08:09	2219520	----a-w-	c:\windows\system32\dwmcore.dll
2013-06-01 09:19 . 2013-07-17 08:09	207872	----a-w-	c:\windows\system32\DeviceSetupManager.dll
2013-06-01 09:19 . 2013-07-17 08:09	785408	----a-w-	c:\windows\system32\audiosrv.dll
2013-06-01 03:08 . 2013-07-17 08:09	37632	----a-w-	c:\windows\system32\drivers\BthAvrcpTg.sys
2013-05-30 23:24 . 2013-06-25 22:29	1257472	----a-w-	c:\windows\system32\kernel32.dll
2013-05-30 23:14 . 2013-07-09 20:45	4036096	----a-w-	c:\windows\system32\win32k.sys
2013-05-24 22:09 . 2013-07-17 08:09	1403296	----a-w-	c:\windows\system32\winload.efi
2013-05-24 22:09 . 2013-07-17 08:09	1271584	----a-w-	c:\windows\system32\winload.exe
2013-05-24 22:09 . 2013-07-17 08:09	1217352	----a-w-	c:\windows\system32\winresume.efi
2013-05-24 22:09 . 2013-07-17 08:09	1093904	----a-w-	c:\windows\system32\winresume.exe
2013-05-23 23:01 . 2013-06-25 21:53	1300992	----a-w-	c:\windows\system32\gdi32.dll
2013-05-23 22:27 . 2013-06-25 21:53	1022464	----a-w-	c:\windows\SysWow64\gdi32.dll
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2013-06-13 23:00	130736	----a-w-	c:\users\Uli\AppData\Roaming\Dropbox\bin\DropboxExt.19.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2013-06-13 23:00	130736	----a-w-	c:\users\Uli\AppData\Roaming\Dropbox\bin\DropboxExt.19.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2013-06-13 23:00	130736	----a-w-	c:\users\Uli\AppData\Roaming\Dropbox\bin\DropboxExt.19.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Spotify Web Helper"="c:\users\Uli\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" [2013-07-10 1104384]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"Dolby Home Theater v4"="c:\program files (x86)\Dolby Home Theater v4\pcee4.exe" [2012-07-25 508656]
"YouCam Mirage"="c:\program files (x86)\Lenovo\YouCam\YCMMirage.exe" [2012-07-27 136488]
"YouCam Tray"="c:\program files (x86)\Lenovo\YouCam\YouCamTray.exe" [2012-07-27 167024]
"Smart Update"="c:\program files (x86)\Lenovo\Lenovo Smart Update\Lenovo Smart Update.exe" [2012-07-23 1706576]
"Intel AppUp(SM) center"="c:\program files (x86)\Intel\IntelAppStore\bin\ismagent.exe" [2012-07-12 155488]
"IntellingentTouchpad"="c:\program files (x86)\Lenovo\Intelligent Touchpad\IntelligentTouchpad.exe" [2012-07-23 673336]
"avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2013-08-20 347192]
"HP Software Update"="c:\program files (x86)\HP\HP Software Update\HPWuSchd2.exe" [2010-06-09 49208]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-05-11 958576]
"Reader Application Helper"="c:\program files (x86)\Sony\ReaderDesktop\appHelper\ReaderAppHelper.exe" [2013-03-18 899400]
"Nikon Message Center 2"="c:\program files (x86)\Nikon\Nikon Message Center 2\NkMC2.exe" [2011-10-30 571392]
.
c:\users\Uli\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Dropbox.lnk - c:\users\Uli\AppData\Roaming\Dropbox\bin\Dropbox.exe /systemstartup [2013-8-3 28057256]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\StartUp\
HP Digital Imaging Monitor.lnk - c:\program files (x86)\HP\Digital Imaging\bin\hpqtra08.exe [2011-4-29 276328]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"EnableUIADesktopToggle"= 0 (0x0)
"EnableCursorSuppression"= 1 (0x1)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLinkedConnections"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon]
"Userinit"="userinit.exe"
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
"AppInit_DLLs"=c:\windows\SysWOW64\nvinit.dll
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
.
R2 mcbootdelaystartsvc;McAfee Boot Delay Start Service;c:\program files\Common Files\mcafee\McSvcHost\McSvHost.exe;c:\program files\Common Files\mcafee\McSvcHost\McSvHost.exe [x]
R3 AMPPALP;Intel® Centrino® Wireless Bluetooth® + High Speed Protokoll;c:\windows\system32\DRIVERS\amppal.sys;c:\windows\SYSNATIVE\DRIVERS\amppal.sys [x]
R3 AmUStor;AM USB Stroage Driver;c:\windows\system32\drivers\AmUStor.SYS;c:\windows\SYSNATIVE\drivers\AmUStor.SYS [x]
R3 BthLEEnum;Treiber für energiearme Bluetooth-Geräte;c:\windows\system32\DRIVERS\BthLEEnum.sys;c:\windows\SYSNATIVE\DRIVERS\BthLEEnum.sys [x]
R3 btmaux;Intel Bluetooth Auxiliary Service;c:\windows\system32\DRIVERS\btmaux.sys;c:\windows\SYSNATIVE\DRIVERS\btmaux.sys [x]
R3 btmhsf;btmhsf;c:\windows\system32\DRIVERS\btmhsf.sys;c:\windows\SYSNATIVE\DRIVERS\btmhsf.sys [x]
R3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudbus.sys;c:\windows\SYSNATIVE\DRIVERS\ssudbus.sys [x]
R3 ibtfltcoex;ibtfltcoex;c:\windows\system32\DRIVERS\iBtFltCoex.sys;c:\windows\SYSNATIVE\DRIVERS\iBtFltCoex.sys [x]
R3 intaud_WaveExtensible;Intel WiDi Audio Device;c:\windows\system32\drivers\intelaud.sys;c:\windows\SYSNATIVE\drivers\intelaud.sys [x]
R3 MyWiFiDHCPDNS;Wireless PAN DHCP Server;c:\program files\Intel\WiFi\bin\PanDhcpDns.exe;c:\program files\Intel\WiFi\bin\PanDhcpDns.exe [x]
R3 ssudmdm;SAMSUNG  Mobile USB Modem Drivers (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudmdm.sys;c:\windows\SYSNATIVE\DRIVERS\ssudmdm.sys [x]
R3 usb3Hub;USB-IF USB 3.0 Hub;c:\windows\System32\drivers\usb3Hub.sys;c:\windows\SYSNATIVE\drivers\usb3Hub.sys [x]
R3 wsvd;wsvd;c:\windows\system32\DRIVERS\wsvd.sys;c:\windows\SYSNATIVE\DRIVERS\wsvd.sys [x]
R3 XHCIPort;USB-IF xHCI USB Host Controller;c:\windows\System32\drivers\XHCIPort.sys;c:\windows\SYSNATIVE\drivers\XHCIPort.sys [x]
S0 excsd;ExpressCache Storage Filter Driver;c:\windows\system32\DRIVERS\excsd.sys;c:\windows\SYSNATIVE\DRIVERS\excsd.sys [x]
S0 iaStorA;iaStorA;c:\windows\System32\drivers\iaStorA.sys;c:\windows\SYSNATIVE\drivers\iaStorA.sys [x]
S0 LHDmgr;LHDmgr;c:\windows\System32\DRIVERS\LhdX64.sys;c:\windows\SYSNATIVE\DRIVERS\LhdX64.sys [x]
S0 nvpciflt;nvpciflt;c:\windows\system32\DRIVERS\nvpciflt.sys;c:\windows\SYSNATIVE\DRIVERS\nvpciflt.sys [x]
S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys;c:\windows\SYSNATIVE\DRIVERS\avkmgr.sys [x]
S1 excfs;ExpressCache File System Filter Driver;c:\windows\system32\DRIVERS\excfs.sys;c:\windows\SYSNATIVE\DRIVERS\excfs.sys [x]
S2 AMPPALR3;Intel® Centrino® Wireless Bluetooth® + High Speed Service;c:\program files\Intel\BluetoothHS\BTHSAmpPalService.exe;c:\program files\Intel\BluetoothHS\BTHSAmpPalService.exe [x]
S2 AntiVirMailService;Avira Email Schutz;c:\program files (x86)\Avira\AntiVir Desktop\avmailc7.exe;c:\program files (x86)\Avira\AntiVir Desktop\avmailc7.exe [x]
S2 AntiVirSchedulerService;Avira Planer;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [x]
S2 AntiVirWebService;Avira Browser-Schutz;c:\program files (x86)\Avira\AntiVir Desktop\avwebg7.exe;c:\program files (x86)\Avira\AntiVir Desktop\avwebg7.exe [x]
S2 avnetflt;avnetflt;c:\windows\system32\DRIVERS\avnetflt.sys;c:\windows\SYSNATIVE\DRIVERS\avnetflt.sys [x]
S2 Bluetooth Device Monitor;Bluetooth Device Monitor;c:\program files (x86)\Intel\Bluetooth\devmonsrv.exe;c:\program files (x86)\Intel\Bluetooth\devmonsrv.exe [x]
S2 Bluetooth OBEX Service;Bluetooth OBEX Service;c:\program files (x86)\Intel\Bluetooth\obexsrv.exe;c:\program files (x86)\Intel\Bluetooth\obexsrv.exe [x]
S2 BTHSSecurityMgr;Intel(R) Centrino(R) Wireless Bluetooth(R) + High Speed Security Service;c:\program files\Intel\BluetoothHS\BTHSSecurityMgr.exe;c:\program files\Intel\BluetoothHS\BTHSSecurityMgr.exe [x]
S2 CxAudMsg;Conexant Audio Message Service;c:\windows\system32\CxAudMsg64.exe;c:\windows\SYSNATIVE\CxAudMsg64.exe [x]
S2 ExpressCache;ExpressCache;c:\program files\Diskeeper Corporation\ExpressCache\ExpressCache.exe;c:\program files\Diskeeper Corporation\ExpressCache\ExpressCache.exe [x]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage-Technologie;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [x]
S2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface;c:\program files\Intel\iCLS Client\HeciServer.exe;c:\program files\Intel\iCLS Client\HeciServer.exe [x]
S2 Intel(R) ME Service;Intel(R) ME Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [x]
S2 irstrtsv;Intel(R) Rapid Start Technology Service;c:\windows\SysWOW64\irstrtsv.exe;c:\windows\SysWOW64\irstrtsv.exe [x]
S2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [x]
S2 Lenovo Smart Update Service;Lenovo Smart Update Service;c:\program files (x86)\Lenovo\Lenovo Smart Update\Lenovo Smart Update Service.exe;c:\program files (x86)\Lenovo\Lenovo Smart Update\Lenovo Smart Update Service.exe [x]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]
S2 ZeroConfigService;Intel(R) PROSet/Wireless Zero Configuration Service;c:\program files\Intel\WiFi\bin\ZeroConfigService.exe;c:\program files\Intel\WiFi\bin\ZeroConfigService.exe [x]
S3 ACPIVPC;Lenovo Virtual Power Controller Driver;c:\windows\System32\drivers\AcpiVpc.sys;c:\windows\SYSNATIVE\drivers\AcpiVpc.sys [x]
S3 AMPPAL;Intel® Centrino® Wireless Bluetooth® + High Speed - Virtueller Adapter;c:\windows\System32\drivers\AMPPAL.sys;c:\windows\SYSNATIVE\drivers\AMPPAL.sys [x]
S3 IntcDAud;Intel(R) Display-Audio;c:\windows\system32\DRIVERS\IntcDAud.sys;c:\windows\SYSNATIVE\DRIVERS\IntcDAud.sys [x]
S3 irstrtdv;Intel(R) Rapid Start Technology Driver;c:\windows\System32\drivers\irstrtdv.sys;c:\windows\SYSNATIVE\drivers\irstrtdv.sys [x]
S3 iwdbus;IWD Bus Enumerator;c:\windows\System32\drivers\iwdbus.sys;c:\windows\SYSNATIVE\drivers\iwdbus.sys [x]
S3 LAD;Lenovo AOAC Driver;c:\windows\System32\drivers\LAD.sys;c:\windows\SYSNATIVE\drivers\LAD.sys [x]
S3 NETwNe64;@oem13.inf,___ %NIC_Service_DispName_WIN8_64%;___ Intel(R) Wireless WiFi Link der Serie 5000 Adaptertreiber für Windows 8 64-Bit;c:\windows\system32\DRIVERS\NETwew00.sys;c:\windows\SYSNATIVE\DRIVERS\NETwew00.sys [x]
S3 RTL8168;Realtek 8168 NT Driver;c:\windows\system32\DRIVERS\Rt630x64.sys;c:\windows\SYSNATIVE\DRIVERS\Rt630x64.sys [x]
S3 rtsuvc;Lenovo EasyCamera;c:\windows\system32\DRIVERS\rtsuvc.sys;c:\windows\SYSNATIVE\DRIVERS\rtsuvc.sys [x]
S3 SmbDrvI;SmbDrvI;c:\windows\system32\DRIVERS\Smb_driver_Intel.sys;c:\windows\SYSNATIVE\DRIVERS\Smb_driver_Intel.sys [x]
S3 WUDFWpdMtp;WUDFWpdMtp;c:\windows\system32\DRIVERS\WUDFRd.sys;c:\windows\SYSNATIVE\DRIVERS\WUDFRd.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost]
hpdevmgmt	REG_MULTI_SZ   	hpqcxs08 hpqddsvc
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{A6EADE66-0000-0000-484E-7E8A45000000}]
2013-05-11 10:37	215264	----a-w-	c:\program files (x86)\Adobe\Reader 11.0\Esl\AiodLite.dll
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2013-06-13 23:00	164016	----a-w-	c:\users\Uli\AppData\Roaming\Dropbox\bin\DropboxExt64.19.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2013-06-13 23:00	164016	----a-w-	c:\users\Uli\AppData\Roaming\Dropbox\bin\DropboxExt64.19.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2013-06-13 23:00	164016	----a-w-	c:\users\Uli\AppData\Roaming\Dropbox\bin\DropboxExt64.19.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]
@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
2013-06-13 23:00	164016	----a-w-	c:\users\Uli\AppData\Roaming\Dropbox\bin\DropboxExt64.19.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\SugarSyncBackedUp]
@="{0C4A258A-3F3B-4FFF-80A7-9B3BEC139472}"
[HKEY_CLASSES_ROOT\CLSID\{0C4A258A-3F3B-4FFF-80A7-9B3BEC139472}]
2012-05-14 17:39	463952	----a-w-	c:\program files (x86)\SugarSync\SugarSyncShellExt_x64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\SugarSyncPending]
@="{62CCD8E3-9C21-41E1-B55E-1E26DFC68511}"
[HKEY_CLASSES_ROOT\CLSID\{62CCD8E3-9C21-41E1-B55E-1E26DFC68511}]
2012-05-14 17:39	463952	----a-w-	c:\program files (x86)\SugarSync\SugarSyncShellExt_x64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\SugarSyncRoot]
@="{A759AFF6-5851-457D-A540-F4ECED148351}"
[HKEY_CLASSES_ROOT\CLSID\{A759AFF6-5851-457D-A540-F4ECED148351}]
2012-05-14 17:39	463952	----a-w-	c:\program files (x86)\SugarSync\SugarSyncShellExt_x64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\SugarSyncShared]
@="{1574C9EF-7D58-488F-B358-8B78C1538F51}"
[HKEY_CLASSES_ROOT\CLSID\{1574C9EF-7D58-488F-B358-8B78C1538F51}]
2012-05-14 17:39	463952	----a-w-	c:\program files (x86)\SugarSync\SugarSyncShellExt_x64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2012-08-21 170304]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2012-08-21 398656]
"Persistence"="c:\windows\system32\igfxpers.exe" [2012-08-21 440640]
"AmIcoSinglun64"="c:\program files (x86)\AmIcoSingLun\AmIcoSinglun64.exe" [2012-06-29 380544]
"BTMTrayAgent"="c:\program files (x86)\Intel\Bluetooth\btmshellex.dll" [2012-08-27 11577216]
"cAudioFilterAgent"="c:\program files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe" [2012-06-14 887968]
"ForteConfig"="c:\program files\Conexant\ForteConfig\fmapp.exe" [2010-10-26 49056]
"SmartAudio"="c:\program files\CONEXANT\SAII\SACpl.exe" [2012-06-13 1647616]
"SynTPEnh"="c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe" [BU]
"SynLenovoGestureMgr"="c:\program files (x86)\Synaptics\SynTP\SynLenovoGestureMgr.exe" [BU]
"Energy Management"="c:\program files (x86)\Lenovo\Energy Management\Energy Management.exe" [2012-09-29 17079376]
"EnergyUtility"="c:\program files (x86)\Lenovo\Energy Management\Utility.exe" [2012-09-29 191568]
"Logitech Download Assistant"="c:\windows\System32\LogiLDA.dll" [2012-09-20 3933496]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=c:\windows\System32\nvinitx.dll
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.google.com
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: An Bluetooth senden - c:\program files (x86)\Intel\Bluetooth\btSendToObject.htm
IE: Nach Microsoft E&xel exportieren - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 192.168.2.1
FF - ProfilePath - c:\users\Uli\AppData\Roaming\Mozilla\Firefox\Profiles\w4j87b57.default\
FF - ExtSQL: 2013-06-26 12:10; {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}; c:\users\Uli\AppData\Roaming\Mozilla\Firefox\Profiles\w4j87b57.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Toolbar-Locked - (no file)
Wow6432Node-HKLM-Run-<NO NAME> - (no file)
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e96d-e325-11ce-bfc1-08002be10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
@SACL=(02 0000)
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\program files (x86)\Avira\AntiVir Desktop\avguard.exe
c:\program files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
c:\program files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
c:\program files (x86)\Intel\irstrt\RapidStartConfig.exe
c:\users\Uli\AppData\Roaming\Dropbox\bin\Dropbox.exe
c:\program files (x86)\avira\antivir desktop\ipmGui.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2013-08-21  13:53:09 - PC wurde neu gestartet
ComboFix-quarantined-files.txt  2013-08-21 11:53
ComboFix2.txt  2013-08-21 10:58
.
Vor Suchlauf: 16 Verzeichnis(se), 378.836.193.280 Bytes frei
Nach Suchlauf: 17 Verzeichnis(se), 378.544.762.880 Bytes frei
.
- - End Of File - - ECB6AF9D85BBC38B1CEE9F77DA482400
Hochladen war erfolgreich