mbam-log datei / Win 8 / explorer.EXE ERROR

ComboFix 14-01-04.03 - Admin 06.01.2014   0:49.1.4 - x64
Microsoft Windows 8  6.2.9200.0.1252.49.1031.18.3982.2499 [GMT 1:00]
ausgeführt von:: c:\users\Bellissima Polaris\Desktop\ComboFix.exe
AV: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\programdata\SetStretch.exe
c:\programdata\SetStretch.VBS
c:\users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\SecretSauce_iels
.
.
(((((((((((((((((((((((   Dateien erstellt von 2013-12-05 bis 2014-01-05  ))))))))))))))))))))))))))))))
.
.
2014-01-05 23:56 . 2014-01-05 23:56	--------	d-----w-	c:\users\UpdatusUser\AppData\Local\temp
2014-01-05 23:56 . 2014-01-05 23:56	--------	d-----w-	c:\users\Default\AppData\Local\temp
2014-01-05 22:37 . 2014-01-05 22:37	--------	d-----w-	C:\FRST
2014-01-05 21:08 . 2014-01-05 21:08	--------	d-----w-	c:\users\TEMP
2014-01-05 20:26 . 2014-01-05 22:30	--------	d-----w-	C:\EEK
2014-01-05 16:57 . 2014-01-05 16:57	--------	d-----w-	c:\program files (x86)\Tools&More
2014-01-05 16:57 . 2014-01-05 16:57	--------	d-----w-	c:\windows\Downloaded Installations
2014-01-05 14:37 . 2014-01-05 14:37	--------	d-----w-	c:\programdata\Kaspersky Lab
2014-01-05 13:09 . 2014-01-05 13:09	--------	d-----w-	c:\users\Bellissima Polaris\AppData\Roaming\Malwarebytes
2014-01-05 12:50 . 2014-01-05 14:06	--------	d-----w-	c:\program files (x86)\RegClean Pro
2014-01-05 11:48 . 2014-01-05 11:48	--------	d-----w-	c:\programdata\Malwarebytes
2014-01-05 11:48 . 2014-01-05 23:22	--------	d-----w-	c:\program files (x86)\Malwarebytes' Anti-Malware
2014-01-05 11:39 . 2014-01-05 11:39	--------	d-----w-	C:\sh4ldr
2014-01-05 11:39 . 2014-01-05 11:39	--------	d-----w-	c:\program files\Enigma Software Group
2014-01-05 11:39 . 2014-01-05 11:39	--------	d-----w-	c:\windows\72AAF4551E54475BB0AB5413C78D0E63.TMP
2014-01-05 11:39 . 2014-01-05 11:39	--------	d-----w-	c:\program files (x86)\Common Files\Wise Installation Wizard
2014-01-05 10:32 . 2014-01-05 11:06	--------	d-----w-	c:\program files (x86)\Virtual Router
2014-01-05 09:58 . 2014-01-05 20:32	--------	d-----w-	c:\users\Bellissima Polaris\AppData\Local\3A0B199C-440E-4749-9DA2-48362C50319D.aplzod
2014-01-05 05:44 . 2014-01-05 14:06	--------	d-----w-	c:\programdata\SecTaskMan
2014-01-05 05:43 . 2014-01-05 14:06	--------	d-----w-	c:\program files (x86)\Security Task Manager
2014-01-05 03:12 . 2014-01-05 13:35	--------	d-----w-	c:\program files (x86)\Mobogenie
2014-01-05 03:07 . 2014-01-05 04:51	--------	d-----w-	c:\program files (x86)\Virtual WiFi Router
2014-01-05 02:46 . 2014-01-05 02:46	--------	d-----w-	c:\program files (x86)\Runxia Electronics
2014-01-05 02:25 . 2014-01-05 22:23	--------	d-----w-	c:\users\Admin
2014-01-02 14:29 . 2014-01-03 09:19	--------	d-----w-	c:\users\Bellissima Polaris\AppData\Roaming\SQLiteManager
2014-01-02 14:22 . 2014-01-05 19:50	--------	dc----w-	c:\windows\system32\DRVSTORE
2014-01-02 09:50 . 2014-01-05 19:29	--------	d-----w-	c:\users\Bellissima Polaris\AppData\Local\Diagnostics
2014-01-02 09:24 . 2014-01-02 09:24	--------	d-----w-	c:\users\Default\AppData\Local\Google
2014-01-02 09:14 . 2014-01-02 09:14	--------	d-----w-	C:\Temp
2014-01-02 06:05 . 2014-01-02 06:05	--------	d-----w-	c:\programdata\Elcomsoft Password Recovery
2014-01-02 06:05 . 2014-01-02 06:05	--------	d-----w-	c:\program files (x86)\Elcomsoft
2014-01-02 05:35 . 2014-01-05 09:56	--------	d-----w-	c:\users\Bellissima Polaris\.android
2014-01-02 05:35 . 2014-01-02 05:35	--------	d-----w-	c:\users\Bellissima Polaris\AppData\Local\cache
2014-01-02 05:35 . 2014-01-02 10:10	--------	d-----w-	c:\users\Bellissima Polaris\AppData\Local\Mobogenie
2014-01-02 05:30 . 2014-01-05 11:59	--------	d-----w-	c:\program files (x86)\TornTV.com
2014-01-02 04:36 . 2014-01-02 04:36	--------	d-----w-	c:\users\Bellissima Polaris\AppData\Roaming\TuneUp Software
2014-01-02 04:35 . 2014-01-02 04:37	--------	d-----w-	c:\programdata\TuneUp Software
2014-01-02 04:35 . 2014-01-02 04:35	--------	d--h--w-	c:\programdata\Common Files
2014-01-02 03:24 . 2014-01-02 03:24	--------	d-----w-	c:\users\Bellissima Polaris\AppData\Roaming\VOWSoft
2014-01-02 03:15 . 2014-01-05 19:52	--------	d-----w-	c:\program files\iPod
2014-01-02 03:15 . 2014-01-05 19:52	--------	d-----w-	c:\program files (x86)\iTunes
2014-01-02 03:15 . 2014-01-05 19:52	--------	d-----w-	c:\programdata\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-01-02 03:15 . 2014-01-02 14:22	--------	d-----w-	c:\programdata\Apple Computer
2014-01-02 02:01 . 2014-01-02 02:01	--------	d-----w-	c:\program files (x86)\VOWSoft iPod Software
2014-01-02 01:37 . 2014-01-02 03:42	--------	d-----w-	c:\users\Bellissima Polaris\AppData\Roaming\iMobie
2014-01-02 01:37 . 2014-01-02 01:37	--------	d-----w-	c:\program files (x86)\iMobie
2014-01-01 23:30 . 2014-01-02 06:05	--------	d-----w-	c:\program files (x86)\Elcomsoft Password Recovery
2014-01-01 23:11 . 2014-01-02 03:16	--------	d-----w-	c:\users\Bellissima Polaris\AppData\Local\Apple Computer
2014-01-01 22:46 . 2014-01-05 22:22	--------	d-----w-	c:\users\Bellissima Polaris\AppData\Roaming\Apple Computer
2014-01-01 22:45 . 2014-01-05 20:15	--------	d-----w-	c:\program files\Common Files\Apple
2014-01-01 22:45 . 2014-01-02 03:15	--------	d-----w-	c:\program files (x86)\Common Files\Apple
2014-01-01 22:44 . 2014-01-03 08:55	--------	d-----w-	c:\users\Bellissima Polaris\AppData\Local\Apple
2014-01-01 22:44 . 2014-01-02 10:08	--------	d-----w-	c:\programdata\Apple
2014-01-01 03:55 . 2014-01-01 03:55	236208	----a-w-	c:\programdata\Microsoft\Windows\Sqm\Manifest\Sqm10229.bin
2013-12-24 02:36 . 2013-12-24 02:36	--------	d-----w-	c:\users\Bellissima Polaris\AppData\Local\Adobe
2013-12-14 02:57 . 2013-11-01 01:45	23350272	----a-w-	c:\program files\Common Files\Microsoft Shared\Microsoft Camera Codec Pack\MicrosoftRawCodec.dll
2013-12-14 02:57 . 2013-11-01 01:16	22615040	----a-w-	c:\program files (x86)\Common Files\Microsoft Shared\Microsoft Camera Codec Pack\MicrosoftRawCodec.dll
2013-12-13 22:58 . 2013-10-19 05:45	62976	----a-w-	c:\windows\system32\imagehlp.dll
2013-12-13 22:57 . 2013-10-10 09:32	115712	----a-w-	c:\windows\SysWow64\cscript.exe
2013-12-13 22:57 . 2013-10-10 09:30	162304	----a-w-	c:\windows\SysWow64\scrobj.dll
2013-12-13 22:57 . 2013-10-10 09:30	156160	----a-w-	c:\windows\SysWow64\scrrun.dll
2013-12-13 22:57 . 2013-10-10 09:24	143872	----a-w-	c:\windows\system32\wshom.ocx
2013-12-13 22:57 . 2013-10-10 09:23	146944	----a-w-	c:\windows\system32\cscript.exe
2013-12-13 22:57 . 2013-10-10 09:22	222720	----a-w-	c:\windows\system32\scrobj.dll
2013-12-13 22:57 . 2013-10-10 09:22	194048	----a-w-	c:\windows\system32\scrrun.dll
2013-12-13 22:57 . 2013-11-06 23:18	4036608	----a-w-	c:\windows\system32\win32k.sys
2013-12-13 22:57 . 2013-11-23 06:43	420864	----a-w-	c:\windows\system32\WMPhoto.dll
2013-12-13 22:57 . 2013-11-23 05:05	368640	----a-w-	c:\windows\SysWow64\WMPhoto.dll
2013-12-13 22:57 . 2013-09-28 03:35	288768	----a-w-	c:\windows\system32\drivers\portcls.sys
2013-12-13 22:57 . 2013-11-01 05:38	312320	----a-w-	c:\windows\system32\msieftp.dll
2013-12-13 22:57 . 2013-11-01 03:49	273408	----a-w-	c:\windows\SysWow64\msieftp.dll
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-01-05 21:09 . 2013-09-09 15:59	62	----a-w-	c:\users\Bellissima Polaris\AppData\Roaming\sp_data.sys
2013-12-14 02:58 . 2013-10-06 21:00	90708896	----a-w-	c:\windows\system32\MRT.exe
2013-12-13 22:44 . 2013-10-06 22:21	566480	----a-w-	c:\programdata\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\integrator.exe
2013-12-04 00:53 . 2013-11-15 07:13	78304	----a-w-	c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-12-04 00:53 . 2013-11-15 07:13	694240	----a-w-	c:\windows\SysWow64\FlashPlayerApp.exe
2013-11-22 03:09 . 2013-11-22 03:09	96168	----a-w-	c:\windows\SysWow64\WindowsAccessBridge-32.dll
2013-10-29 09:07 . 2013-10-29 09:07	227680	----a-w-	c:\windows\SysWow64\ddBACCTM.cpl
2013-10-29 09:07 . 2013-10-29 09:07	825696	----a-w-	c:\windows\SysWow64\Ddbaccpl.cpl
2013-10-10 11:53 . 2013-11-14 06:53	96600	----a-w-	c:\windows\system32\drivers\wfplwfs.sys
2013-10-10 09:21 . 2013-11-14 06:53	1160192	----a-w-	c:\windows\system32\IKEEXT.DLL
2013-10-10 09:20 . 2013-11-14 06:53	723968	----a-w-	c:\windows\system32\BFE.DLL
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AutoStart-Manager"="c:\program files (x86)\Tools&More\Autostart-Manager\AutoStart-Manager.exe" [2012-11-27 409600]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe" [2010-11-15 35736]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-11-15 932288]
"PDFPrint"="c:\program files (x86)\PDF24\pdf24.exe" [2013-07-22 162856]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2013-07-02 254336]
"ASUSPRP"="c:\program files (x86)\ASUS\APRP\APRP.EXE" [2013-04-25 3187360]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce]
"GrpConv"="grpconv -og" [X]
" Malwarebytes Anti-Malware  (cleanup)"="c:\programdata\Malwarebytes\Malwarebytes' Anti-Malware\cleanup.dll" [2013-04-04 1127496]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\StartUp\AutorunsDisabled\
windata 8 Zahlungserinnerung.lnk - d:\windata\professional 8\windataZahlungserinnerung.exe [2013-12-23 698040]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"EnableUIADesktopToggle"= 0 (0x0)
"EnableCursorSuppression"= 1 (0x1)
"ConsentPromptBehaviorUser"= 3 (0x3)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
"AppInit_DLLs"=c:\windows\SysWOW64\nvinit.dll
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc]
@=""
.
R0 SymELAM;Symantec ELAM Driver;c:\windows\system32\drivers\NISx64\1404000.028\SymELAM.sys;c:\windows\SYSNATIVE\drivers\NISx64\1404000.028\SymELAM.sys [x]
R1 BHDrvx64;BHDrvx64;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.3.0.36\Definitions\BASHDefs\20131203.001\BHDrvx64.sys;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.3.0.36\Definitions\BASHDefs\20131203.001\BHDrvx64.sys [x]
R3 cleanhlp;cleanhlp;c:\eek\Run\cleanhlp64.sys;c:\eek\Run\cleanhlp64.sys [x]
R3 GamesAppService;GamesAppService;c:\program files (x86)\WildTangent Games\App\GamesAppService.exe;c:\program files (x86)\WildTangent Games\App\GamesAppService.exe [x]
R3 RTL8168;Realtek 8168 NT-Treiber;c:\windows\system32\DRIVERS\Rt630x64.sys;c:\windows\SYSNATIVE\DRIVERS\Rt630x64.sys [x]
S0 iaStorA;iaStorA;c:\windows\System32\drivers\iaStorA.sys;c:\windows\SYSNATIVE\drivers\iaStorA.sys [x]
S0 nvpciflt;nvpciflt;c:\windows\system32\DRIVERS\nvpciflt.sys;c:\windows\SYSNATIVE\DRIVERS\nvpciflt.sys [x]
S0 SymDS;Symantec Data Store;c:\windows\system32\drivers\NISx64\1404000.028\SYMDS64.SYS;c:\windows\SYSNATIVE\drivers\NISx64\1404000.028\SYMDS64.SYS [x]
S0 SymEFA;Symantec Extended File Attributes;c:\windows\system32\drivers\NISx64\1404000.028\SYMEFA64.SYS;c:\windows\SYSNATIVE\drivers\NISx64\1404000.028\SYMEFA64.SYS [x]
S1 ATKWMIACPIIO;ATKWMIACPI Driver;c:\program files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys;c:\program files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys [x]
S1 ccSet_NIS;Norton Internet Security Settings Manager;c:\windows\system32\drivers\NISx64\1404000.028\ccSetx64.sys;c:\windows\SYSNATIVE\drivers\NISx64\1404000.028\ccSetx64.sys [x]
S1 IDSVia64;IDSVia64;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.3.0.36\Definitions\IPSDefs\20140103.001\IDSvia64.sys;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.3.0.36\Definitions\IPSDefs\20140103.001\IDSvia64.sys [x]
S1 SymIRON;Symantec Iron Driver;c:\windows\system32\drivers\NISx64\1404000.028\Ironx64.SYS;c:\windows\SYSNATIVE\drivers\NISx64\1404000.028\Ironx64.SYS [x]
S1 SymNetS;Symantec Network Security WFP Driver;c:\windows\system32\drivers\NISx64\1404000.028\SYMNETS.SYS;c:\windows\SYSNATIVE\drivers\NISx64\1404000.028\SYMNETS.SYS [x]
S2 ASMMAP64;ASMMAP64;c:\program files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys;c:\program files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys [x]
S2 ASUS InstantOn;ASUS InstantOn Service;c:\program files\ASUS\P4G\InsOnSrv.exe;c:\program files\ASUS\P4G\InsOnSrv.exe [x]
S2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface;c:\program files\Intel\iCLS Client\HeciServer.exe;c:\program files\Intel\iCLS Client\HeciServer.exe [x]
S2 Intel(R) ME Service;Intel(R) ME Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [x]
S2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [x]
S2 NIS;Norton Internet Security;c:\program files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe;c:\program files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe [x]
S2 OfficeSvc;Microsoft Office-Dienst;c:\program files\Microsoft Office 15\ClientX64\integratedoffice.exe;c:\program files\Microsoft Office 15\ClientX64\integratedoffice.exe [x]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]
S3 AiCharger;ASUS Charger Driver;c:\windows\system32\DRIVERS\AiCharger.sys;c:\windows\SYSNATIVE\DRIVERS\AiCharger.sys [x]
S3 ATP;ASUS Input Device;c:\windows\System32\drivers\AsusTP.sys;c:\windows\SYSNATIVE\drivers\AsusTP.sys [x]
S3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys;c:\program files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [x]
S3 HIDSwitch;ASUS Wireless Radio Control;c:\windows\System32\drivers\AsHIDSwitch64.sys;c:\windows\SYSNATIVE\drivers\AsHIDSwitch64.sys [x]
S3 IntcDAud;Intel(R) Display-Audio;c:\windows\system32\DRIVERS\IntcDAud.sys;c:\windows\SYSNATIVE\DRIVERS\IntcDAud.sys [x]
S3 L1C;NDIS Miniport Driver for Qualcomm Atheros AR81xx PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C63x64.sys;c:\windows\SYSNATIVE\DRIVERS\L1C63x64.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2013-12-07 12:24	1210320	----a-w-	c:\program files (x86)\Google\Chrome\Application\31.0.1650.63\Installer\chrmstp.exe
.
Inhalt des "geplante Tasks" Ordners
.
2014-01-05 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-09-09 19:14]
.
2014-01-05 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-09-09 19:14]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro1 (ErrorConflict)]
@="{8BA85C75-763B-4103-94EB-9470F12FE0F7}"
[HKEY_CLASSES_ROOT\CLSID\{8BA85C75-763B-4103-94EB-9470F12FE0F7}]
2013-12-13 22:46	2331336	----a-w-	c:\program files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro2 (SyncInProgress)]
@="{CD55129A-B1A1-438E-A425-CEBC7DC684EE}"
[HKEY_CLASSES_ROOT\CLSID\{CD55129A-B1A1-438E-A425-CEBC7DC684EE}]
2013-12-13 22:46	2331336	----a-w-	c:\program files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro3 (InSync)]
@="{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}"
[HKEY_CLASSES_ROOT\CLSID\{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}]
2013-12-13 22:46	2331336	----a-w-	c:\program files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2012-11-21 171064]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2012-11-21 399416]
"RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2012-12-12 13263072]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=c:\windows\System32\nvinitx.dll
.
------- Zusätzlicher Suchlauf -------
.
mLocal Page = c:\windows\SysWOW64\blank.htm
TCP: DhcpNameServer = 192.168.178.1
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Toolbar-Locked - (no file)
ShellIconOverlayIdentifiers-{F241C880-6982-4CE5-8CF7-7085BA96DA5A} - (no file)
ShellIconOverlayIdentifiers-{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} - (no file)
ShellIconOverlayIdentifiers-{BBACC218-34EA-4666-9D7A-C78F2274A524} - (no file)
SafeBoot-CleanHlp
SafeBoot-CleanHlp.sys
Toolbar-Locked - (no file)
ShellIconOverlayIdentifiers-{F241C880-6982-4CE5-8CF7-7085BA96DA5A} - (no file)
ShellIconOverlayIdentifiers-{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} - (no file)
ShellIconOverlayIdentifiers-{BBACC218-34EA-4666-9D7A-C78F2274A524} - (no file)
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\NIS]
"ImagePath"="\"c:\program files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe\" /s \"NIS\" /m \"c:\program files (x86)\Norton Internet Security\Engine\20.4.0.40\diMaster.dll\" /prefetch:1"
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
@Denied: (A) (Everyone)
"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]
"Key"="ActionsPane3"
"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
@SACL=(02 0000)
.
Zeit der Fertigstellung: 2014-01-06  01:00:41
ComboFix-quarantined-files.txt  2014-01-06 00:00
.
Vor Suchlauf: 13 Verzeichnis(se), 144.793.989.120 Bytes frei
Nach Suchlauf: 19 Verzeichnis(se), 144.642.383.872 Bytes frei
.
- - End Of File - - 36456943CEF75711363AD1A69F67EFAE