dann weiter klicken, dann sucht revo nach Resten.

Zitat von schrauber

dann weiter klicken, dann sucht revo nach Resten.

Okay danke ist deinstalliert


Eine Frage noch: Ist das relativ gut gemacht worden von mir? Ich hab durch Source Code Analysis Registry einträgen von den Programmen wie FastPlayer gefunden und habe alle zerstört.
Ist die Sache kritisch? Den Combofix heisst ja eigentlich kritisch

ComboFix 14-09-24.01 - admin 27.09.2014   9:56.1.2 - x64
Microsoft Windows 7 Ultimate   6.1.7601.1.1252.49.1031.18.2047.541 [GMT 2:00]
ausgeführt von:: c:\users\admin\Desktop\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AV: AVG AntiVirus Free Edition 2015 *Disabled/Updated* {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9}
SP: avast! Antivirus *Disabled/Updated* {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
SP: AVG AntiVirus Free Edition 2015 *Disabled/Updated* {B5F5C120-2089-702E-0001-553BB0D5A664}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\admin\AppData\Local\nsy1FF8.tmp
.
.
(((((((((((((((((((((((   Dateien erstellt von 2014-08-27 bis 2014-09-27  ))))))))))))))))))))))))))))))
.
.
2014-09-27 08:06 . 2014-09-27 08:06	--------	d-----w-	c:\users\Default\AppData\Local\temp
2014-09-25 17:41 . 2014-09-25 17:45	--------	d-----w-	C:\FRST
2014-09-25 17:39 . 2014-09-25 17:39	--------	d-----w-	c:\program files (x86)\Common Files\Skype
2014-09-25 12:17 . 2014-09-25 12:17	--------	d-----w-	c:\program files (x86)\VS Revo Group
2014-09-25 11:52 . 2014-09-25 11:54	--------	d-----w-	c:\program files\Unlocker
2014-09-25 11:37 . 2014-09-25 11:37	--------	d-----w-	c:\programdata\Avg_Update_0914av
2014-09-24 12:40 . 2014-09-24 12:40	--------	d-----w-	c:\users\admin\AppData\Roaming\AVG2015
2014-09-24 12:39 . 2014-09-24 12:39	--------	d-----w-	c:\users\admin\AppData\Roaming\TuneUp Software
2014-09-24 12:38 . 2014-09-24 12:38	--------	d-----w-	C:\$AVG
2014-09-24 12:38 . 2014-09-24 12:40	--------	d-----w-	c:\programdata\AVG2015
2014-09-24 12:37 . 2014-09-24 12:37	--------	d-----w-	c:\program files (x86)\AVG
2014-09-24 12:36 . 2014-09-27 07:49	--------	d-----w-	c:\programdata\MFAData
2014-09-24 12:36 . 2014-09-24 12:48	--------	d-----w-	c:\users\admin\AppData\Local\Avg2015
2014-09-24 12:36 . 2014-09-24 12:36	--------	d--h--w-	c:\programdata\Common Files
2014-09-24 12:36 . 2014-09-24 12:36	--------	d-----w-	c:\users\admin\AppData\Local\MFAData
2014-09-24 12:16 . 2014-09-25 12:03	--------	d-----w-	C:\AdwCleaner
2014-09-22 17:06 . 2014-09-22 17:06	--------	d-----w-	c:\windows\SysWow64\Flash
2014-09-22 16:46 . 2010-08-30 06:34	536576	----a-w-	c:\windows\SysWow64\sqlite3.dll
2014-09-22 16:14 . 2012-10-17 02:31	741480	------w-	c:\windows\system32\HPDiscoPM5D12.dll
2014-09-22 16:13 . 2014-09-22 16:13	--------	d-----w-	c:\programdata\HP
2014-09-22 16:13 . 2014-09-22 16:13	--------	d-----w-	c:\program files (x86)\HP
2014-09-22 16:13 . 2014-09-22 16:13	--------	d-----w-	c:\program files\HP
2014-09-22 16:12 . 2014-09-22 16:12	--------	d-----w-	c:\users\admin\AppData\Local\HP
2014-09-22 15:56 . 2014-09-22 15:56	--------	d-----w-	c:\users\admin\AppData\Local\com
2014-09-22 15:54 . 2014-09-22 15:54	--------	d-----w-	c:\users\admin\AppData\Local\fastplayer
2014-09-22 15:43 . 2014-09-26 12:11	--------	d-----w-	c:\users\admin\AppData\Local\FreePDF_XP
2014-09-20 09:56 . 2014-09-20 10:01	--------	d-----w-	c:\program files (x86)\AutoIt3
2014-09-14 16:51 . 2014-09-14 17:15	--------	d-----w-	c:\users\admin\AppData\Roaming\avidemux
2014-09-14 16:48 . 2014-09-14 16:48	--------	d-----w-	c:\program files (x86)\Avidemux 2.6
2014-09-14 11:38 . 2014-09-14 11:38	--------	d-----w-	c:\program files\WinRAR
2014-09-13 11:34 . 2014-09-14 11:31	--------	d-----w-	c:\users\admin\AppData\Local\Razer
2014-09-13 11:34 . 2012-11-20 14:13	1998168	----a-w-	c:\windows\SysWow64\D3DX9_43.dll
2014-09-13 11:34 . 2012-11-20 14:13	2106216	----a-w-	c:\windows\SysWow64\D3DCompiler_43.dll
2014-09-13 11:34 . 2012-11-20 14:13	470880	----a-w-	c:\windows\SysWow64\d3dx10_43.dll
2014-09-13 11:34 . 2012-11-20 14:13	248672	----a-w-	c:\windows\SysWow64\d3dx11_43.dll
2014-09-13 11:33 . 2014-09-14 11:31	--------	d-----w-	c:\program files (x86)\Razer
2014-09-13 11:33 . 2014-09-14 11:31	--------	d-----w-	c:\programdata\Razer
2014-09-13 11:20 . 2014-08-25 12:54	98216	----a-w-	c:\windows\SysWow64\WindowsAccessBridge-32.dll
2014-09-13 08:39 . 2014-09-13 08:40	--------	d-----w-	c:\program files (x86)\WinPcap
2014-09-13 08:21 . 2014-09-13 08:27	--------	d-----w-	c:\program files (x86)\Cain
2014-09-12 11:57 . 2014-08-21 09:24	11319192	----a-w-	c:\programdata\Microsoft\Windows Defender\Definition Updates\{FCD84746-6342-45E4-8CBA-5671B6804511}\mpengine.dll
2014-09-11 13:50 . 2014-09-11 13:50	--------	d-----w-	c:\users\admin\AppData\Roaming\BANDISOFT
2014-09-11 13:37 . 2014-09-11 13:37	--------	d-----w-	c:\program files (x86)\Bandicam
2014-09-11 13:37 . 2014-09-11 13:37	--------	d-----w-	c:\program files (x86)\BandiMPEG1
2014-09-10 18:28 . 2014-08-18 20:45	360448	----a-w-	c:\program files\Internet Explorer\IEShims.dll
2014-09-10 18:13 . 2014-06-27 02:08	2777088	----a-w-	c:\windows\system32\msmpeg2vdec.dll
2014-09-10 18:13 . 2014-06-27 01:45	2285056	----a-w-	c:\windows\SysWow64\msmpeg2vdec.dll
2014-09-10 12:01 . 2014-08-01 11:53	1031168	----a-w-	c:\windows\system32\TSWorkspace.dll
2014-09-10 12:00 . 2014-08-01 11:35	793600	----a-w-	c:\windows\SysWow64\TSWorkspace.dll
2014-09-10 12:00 . 2014-06-24 03:29	2565120	----a-w-	c:\windows\system32\d3d10warp.dll
2014-09-10 12:00 . 2014-06-24 02:59	1987584	----a-w-	c:\windows\SysWow64\d3d10warp.dll
2014-09-10 11:59 . 2014-07-07 02:06	728064	----a-w-	c:\windows\system32\kerberos.dll
2014-09-10 11:59 . 2014-07-07 01:40	550912	----a-w-	c:\windows\SysWow64\kerberos.dll
2014-09-10 11:59 . 2014-07-07 02:06	1460736	----a-w-	c:\windows\system32\lsasrv.dll
2014-09-10 11:59 . 2014-07-07 01:40	22016	----a-w-	c:\windows\SysWow64\secur32.dll
2014-09-10 11:59 . 2014-07-07 01:39	96768	----a-w-	c:\windows\SysWow64\sspicli.dll
2014-09-10 11:58 . 2014-09-05 02:10	578048	----a-w-	c:\windows\system32\aepdu.dll
2014-09-10 11:58 . 2014-09-05 02:05	424448	----a-w-	c:\windows\system32\aeinv.dll
2014-09-07 08:57 . 2014-09-07 08:57	--------	d-sh--w-	c:\users\admin\AppData\Local\EmieUserList
2014-09-07 08:57 . 2014-09-07 08:57	--------	d-sh--w-	c:\users\admin\AppData\Local\EmieSiteList
2014-09-05 07:31 . 2014-09-26 16:32	122584	----a-w-	c:\windows\system32\drivers\MBAMSwissArmy.sys
2014-09-05 07:26 . 2014-09-05 07:26	--------	d-----w-	c:\program files (x86)\ Malwarebytes Anti-Malware 
2014-09-05 07:26 . 2014-09-05 07:26	--------	d-----w-	c:\programdata\Malwarebytes
2014-09-05 07:26 . 2014-05-12 05:26	63704	----a-w-	c:\windows\system32\drivers\mwac.sys
2014-09-05 07:26 . 2014-05-12 05:26	91352	----a-w-	c:\windows\system32\drivers\mbamchameleon.sys
2014-09-05 07:26 . 2014-05-12 05:25	25816	----a-w-	c:\windows\system32\drivers\mbam.sys
2014-09-05 07:26 . 2014-09-05 07:26	--------	d-----w-	c:\users\admin\AppData\Local\Programs
2014-09-02 17:30 . 2014-09-02 17:30	--------	d-----w-	c:\users\admin\AppData\Local\Skype
2014-09-02 17:30 . 2014-09-26 12:44	--------	d-----w-	c:\users\admin\AppData\Roaming\Skype
2014-09-02 17:30 . 2014-09-25 17:39	--------	d-----r-	c:\program files (x86)\Skype
2014-09-02 17:30 . 2014-09-25 17:39	--------	d-----w-	c:\programdata\Skype
2014-08-28 08:25 . 2014-08-23 00:59	3163648	----a-w-	c:\windows\system32\win32k.sys
2014-08-28 08:25 . 2014-08-23 02:07	404480	----a-w-	c:\windows\system32\gdi32.dll
2014-08-28 08:25 . 2014-08-23 01:45	311808	----a-w-	c:\windows\SysWow64\gdi32.dll
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-09-10 18:14 . 2014-01-23 18:03	101694776	----a-w-	c:\windows\system32\MRT.exe
2014-08-23 06:13 . 2014-08-23 06:13	285280	----a-w-	c:\windows\system32\drivers\afcdp.sys
2014-08-23 06:12 . 2014-08-23 06:12	1263200	----a-w-	c:\windows\system32\drivers\tdrpm273.sys
2014-08-23 06:12 . 2014-08-23 06:12	970336	----a-w-	c:\windows\system32\drivers\timntr.sys
2014-08-23 06:12 . 2014-08-23 06:12	277088	----a-w-	c:\windows\system32\drivers\snapman.sys
2014-08-21 20:04 . 2014-01-25 09:30	427360	----a-w-	c:\windows\system32\drivers\aswsp.sys
2014-08-21 20:03 . 2014-01-25 09:30	92008	----a-w-	c:\windows\system32\drivers\aswStm.sys
2014-08-21 20:03 . 2014-08-21 20:03	29208	----a-w-	c:\windows\system32\drivers\aswHwid.sys
2014-08-21 20:03 . 2014-01-25 09:30	65776	----a-w-	c:\windows\system32\drivers\aswRvrt.sys
2014-08-21 20:03 . 2014-01-25 09:30	224896	----a-w-	c:\windows\system32\drivers\aswVmm.sys
2014-08-21 20:03 . 2014-01-25 09:30	1041168	----a-w-	c:\windows\system32\drivers\aswSnx.sys
2014-08-21 20:03 . 2014-01-25 09:30	79184	----a-w-	c:\windows\system32\drivers\aswMonFlt.sys
2014-08-21 20:03 . 2014-01-25 09:30	93568	----a-w-	c:\windows\system32\drivers\aswRdr2.sys
2014-08-21 20:03 . 2014-01-25 09:30	307344	----a-w-	c:\windows\system32\aswBoot.exe
2014-08-21 20:03 . 2014-08-21 20:03	43152	----a-w-	c:\windows\avastSS.scr
2014-08-20 19:45 . 2014-08-20 19:45	243480	----a-w-	c:\windows\system32\drivers\avgldx64.sys
2014-08-06 19:39 . 2014-08-06 19:39	123672	----a-w-	c:\windows\system32\drivers\avgmfx64.sys
2014-08-05 07:20 . 2010-11-21 03:27	270496	------w-	c:\windows\system32\MpSigStub.exe
2014-07-25 00:35 . 2014-07-25 00:35	875688	----a-w-	c:\windows\SysWow64\msvcr120_clr0400.dll
2014-07-24 21:47 . 2014-07-24 21:47	869544	----a-w-	c:\windows\system32\msvcr120_clr0400.dll
2014-07-24 12:06 . 2014-07-24 12:06	247576	----a-w-	c:\windows\system32\drivers\avgidsdrivera.sys
2014-07-18 13:53 . 2014-07-18 13:53	313624	----a-w-	c:\windows\system32\drivers\avgloga.sys
2014-07-16 03:23 . 2014-08-21 21:22	2048	----a-w-	c:\windows\system32\tzres.dll
2014-07-16 02:46 . 2014-08-21 21:22	2048	----a-w-	c:\windows\SysWow64\tzres.dll
2014-07-14 02:02 . 2014-08-21 21:18	1216000	----a-w-	c:\windows\system32\rpcrt4.dll
2014-07-14 01:40 . 2014-08-21 21:18	664064	----a-w-	c:\windows\SysWow64\rpcrt4.dll
2014-07-02 20:48 . 2014-08-21 21:22	75040	----a-w-	c:\windows\system32\OpenCL.dll
2014-07-02 20:48 . 2014-08-21 21:22	61912	----a-w-	c:\windows\SysWow64\OpenCL.dll
2014-07-02 20:48 . 2014-08-21 21:19	18626304	----a-w-	c:\windows\system32\nvwgf2umx.dll
2014-07-02 20:48 . 2014-08-21 21:19	16122344	----a-w-	c:\windows\SysWow64\nvwgf2um.dll
2014-07-02 20:48 . 2014-08-21 21:19	13922752	----a-w-	c:\windows\system32\nvopencl.dll
2014-07-02 20:48 . 2014-08-21 21:19	31512520	----a-w-	c:\windows\system32\nvoglv64.dll
2014-07-02 20:48 . 2014-08-21 21:19	11283344	----a-w-	c:\windows\SysWow64\nvopencl.dll
2014-07-02 20:48 . 2014-08-21 21:19	24196896	----a-w-	c:\windows\SysWow64\nvoglv32.dll
2014-07-02 20:48 . 2014-08-21 21:19	12866008	----a-w-	c:\windows\system32\drivers\nvlddmkm.sys
2014-07-02 20:48 . 2014-08-21 21:19	944928	----a-w-	c:\windows\system32\NvIFR64.dll
2014-07-02 20:48 . 2014-08-21 21:19	907096	----a-w-	c:\windows\SysWow64\NvIFR.dll
2014-07-02 20:48 . 2014-08-21 21:19	903624	----a-w-	c:\windows\system32\NvFBC64.dll
2014-07-02 20:48 . 2014-08-21 21:19	869152	----a-w-	c:\windows\SysWow64\NvFBC.dll
2014-07-02 20:48 . 2014-08-21 21:19	1890080	----a-w-	c:\windows\system32\nvdispco6434052.dll
2014-07-02 20:48 . 2014-08-21 21:19	1539928	----a-w-	c:\windows\system32\nvdispgenco6434052.dll
2014-07-02 20:48 . 2014-08-21 21:19	17555104	----a-w-	c:\windows\system32\nvd3dumx.dll
2014-07-02 20:48 . 2014-08-21 21:19	14498552	----a-w-	c:\windows\SysWow64\nvd3dum.dll
2014-07-02 20:48 . 2014-08-21 21:19	4247000	----a-w-	c:\windows\system32\nvcuvid.dll
2014-07-02 20:48 . 2014-08-21 21:19	3989960	----a-w-	c:\windows\SysWow64\nvcuvid.dll
2014-07-02 20:48 . 2014-08-21 21:19	13835208	----a-w-	c:\windows\system32\nvcuda.dll
2014-07-02 20:48 . 2014-08-21 21:19	22994208	----a-w-	c:\windows\system32\nvcompiler.dll
2014-07-02 20:48 . 2014-08-21 21:19	11222048	----a-w-	c:\windows\SysWow64\nvcuda.dll
2014-07-02 20:48 . 2014-08-21 21:19	3196816	----a-w-	c:\windows\system32\nvapi64.dll
2014-07-02 20:48 . 2014-08-21 21:19	15294296	----a-w-	c:\windows\SysWow64\nvcompiler.dll
2014-07-02 20:48 . 2014-08-21 21:19	2814656	----a-w-	c:\windows\SysWow64\nvapi.dll
2014-07-02 18:55 . 2014-08-21 21:23	6783776	----a-w-	c:\windows\system32\nvcpl.dll
2014-07-02 18:55 . 2014-08-21 21:23	3522392	----a-w-	c:\windows\system32\nvsvc64.dll
2014-07-02 18:55 . 2014-08-21 21:23	935368	----a-w-	c:\windows\system32\nvvsvc.exe
2014-07-02 18:55 . 2014-08-21 21:23	62808	----a-w-	c:\windows\system32\nvshext.dll
2014-07-02 18:55 . 2014-08-21 21:23	386520	----a-w-	c:\windows\system32\nvmctray.dll
2014-07-02 18:55 . 2014-08-21 21:23	2559960	----a-w-	c:\windows\system32\nvsvcr.dll
2014-07-02 17:44 . 2014-08-21 21:24	609240	----a-w-	c:\windows\SysWow64\nvStreaming.exe
2014-07-02 10:14 . 2014-08-21 21:23	3826628	----a-w-	c:\windows\system32\nvcoproc.bin
2014-07-02 07:58 . 2014-07-02 07:58	270616	----a-w-	c:\windows\system32\drivers\avgtdia.sys
2014-06-30 22:24 . 2014-08-21 21:30	8856	----a-w-	c:\windows\system32\icardres.dll
2014-06-30 22:14 . 2014-08-21 21:30	8856	----a-w-	c:\windows\SysWow64\icardres.dll
2014-04-01 15:58 . 2014-04-01 15:58	6000640	----a-w-	c:\program files (x86)\GUT59BF.tmp
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-11 02:09	131248	----a-w-	c:\users\admin\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-11 02:09	131248	----a-w-	c:\users\admin\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-11 02:09	131248	----a-w-	c:\users\admin\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"AvastUI.exe"="c:\program files\AVAST Software\Avast\AvastUI.exe" [2014-08-21 4085896]
"AVG_UI"="c:\program files (x86)\AVG\AVG2015\avgui.exe" [2014-09-05 3593744]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"EnableLinkedConnections"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"aux1"=wdmaud.drv
.
R2 aswStm;aswStm;c:\windows\system32\drivers\aswStm.sys;c:\windows\SYSNATIVE\drivers\aswStm.sys [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 MBAMService;MBAMService;c:\program files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe;c:\program files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys;c:\windows\SYSNATIVE\drivers\dmvsc.sys [x]
R3 e1kexpress;Intel(R) PRO/1000 PCI-Express-Netzwerkverbindungstreiber K;c:\windows\system32\DRIVERS\e1k60x64.sys;c:\windows\SYSNATIVE\DRIVERS\e1k60x64.sys [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 MBAMWebAccessControl;MBAMWebAccessControl;c:\windows\system32\drivers\mwac.sys;c:\windows\SYSNATIVE\drivers\mwac.sys [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys;c:\windows\SYSNATIVE\drivers\synth3dvsc.sys [x]
R3 terminpt;Microsoft Remote Desktop Input Driver;c:\windows\system32\drivers\terminpt.sys;c:\windows\SYSNATIVE\drivers\terminpt.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys;c:\windows\SYSNATIVE\drivers\tsusbhub.sys [x]
R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys;c:\windows\SYSNATIVE\drivers\rdvgkmd.sys [x]
R3 yukonw7;NDIS6.2-Miniporttreiber für Marvell Yukon-Ethernet-Controller;c:\windows\system32\DRIVERS\yk62x64.sys;c:\windows\SYSNATIVE\DRIVERS\yk62x64.sys [x]
R4 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]
S0 aswRvrt;avast! Revert; [x]
S0 aswVmm;avast! VM Monitor; [x]
S0 AVGIDSHA;AVGIDSHA;c:\windows\system32\DRIVERS\avgidsha.sys;c:\windows\SYSNATIVE\DRIVERS\avgidsha.sys [x]
S0 Avgloga;AVG Logging Driver;c:\windows\system32\DRIVERS\avgloga.sys;c:\windows\SYSNATIVE\DRIVERS\avgloga.sys [x]
S0 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield;c:\windows\system32\DRIVERS\avgmfx64.sys;c:\windows\SYSNATIVE\DRIVERS\avgmfx64.sys [x]
S0 Avgrkx64;AVG Anti-Rootkit Driver;c:\windows\system32\DRIVERS\avgrkx64.sys;c:\windows\SYSNATIVE\DRIVERS\avgrkx64.sys [x]
S0 tdrpman273;Acronis Try&Decide and Restore Points filter (build 273);c:\windows\system32\DRIVERS\tdrpm273.sys;c:\windows\SYSNATIVE\DRIVERS\tdrpm273.sys [x]
S1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys;c:\windows\SYSNATIVE\drivers\aswSnx.sys [x]
S1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys;c:\windows\SYSNATIVE\drivers\aswSP.sys [x]
S1 Avgdiska;AVG Disk Driver;c:\windows\system32\DRIVERS\avgdiska.sys;c:\windows\SYSNATIVE\DRIVERS\avgdiska.sys [x]
S1 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\DRIVERS\avgidsdrivera.sys;c:\windows\SYSNATIVE\DRIVERS\avgidsdrivera.sys [x]
S1 Avgldx64;AVG AVI Loader Driver;c:\windows\system32\DRIVERS\avgldx64.sys;c:\windows\SYSNATIVE\DRIVERS\avgldx64.sys [x]
S1 Avgtdia;AVG TDI Driver;c:\windows\system32\DRIVERS\avgtdia.sys;c:\windows\SYSNATIVE\DRIVERS\avgtdia.sys [x]
S2 afcdpsrv;Acronis Nonstop Backup-Dienst;c:\program files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe;c:\program files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe [x]
S2 aswHwid;avast! HardwareID;c:\windows\system32\drivers\aswHwid.sys;c:\windows\SYSNATIVE\drivers\aswHwid.sys [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys;c:\windows\SYSNATIVE\drivers\aswMonFlt.sys [x]
S2 AVGIDSAgent;AVGIDSAgent;c:\program files (x86)\AVG\AVG2015\avgidsagent.exe;c:\program files (x86)\AVG\AVG2015\avgidsagent.exe [x]
S2 avgwd;AVG WatchDog;c:\program files (x86)\AVG\AVG2015\avgwdsvc.exe;c:\program files (x86)\AVG\AVG2015\avgwdsvc.exe [x]
S2 c2cautoupdatesvc;Skype Click to Call Updater;c:\program files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe;c:\program files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [x]
S2 c2cpnrsvc;Skype Click to Call PNR Service;c:\program files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe;c:\program files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [x]
S2 MBAMScheduler;MBAMScheduler;c:\program files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe;c:\program files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [x]
S2 NPF;NetGroup Packet Filter Driver;c:\windows\system32\drivers\npf.sys;c:\windows\SYSNATIVE\drivers\npf.sys [x]
S2 RzKLService;RzKLService;c:\program files (x86)\Razer\Razer Cortex\RzKLService.exe;c:\program files (x86)\Razer\Razer Cortex\RzKLService.exe [x]
S3 afcdp;afcdp;c:\windows\system32\DRIVERS\afcdp.sys;c:\windows\SYSNATIVE\DRIVERS\afcdp.sys [x]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys;c:\windows\SYSNATIVE\drivers\mbam.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2014-09-12 12:11	1096520	----a-w-	c:\program files (x86)\Google\Chrome\Application\37.0.2062.120\Installer\chrmstp.exe
.
Inhalt des "geplante Tasks" Ordners
.
2014-09-27 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2014-01-25 09:31]
.
2014-09-27 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2014-01-25 09:31]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2014-08-21 20:03	634872	----a-w-	c:\program files\AVAST Software\Avast\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-11 02:09	164016	----a-w-	c:\users\admin\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-11 02:09	164016	----a-w-	c:\users\admin\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-11 02:09	164016	----a-w-	c:\users\admin\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]
@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-11 02:09	164016	----a-w-	c:\users\admin\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.google.com
mDefault_Search_URL = hxxp://www.google.com
mDefault_Page_URL = hxxp://www.google.com
mStart Page = hxxp://www.google.com
mLocal Page = c:\windows\SysWOW64\blank.htm
mSearch Page = hxxp://www.google.com
IE: An OneNote s&enden - c:\progra~2\MICROS~1\Office14\ONBttnIE.dll/105
IE: Nach Microsoft E&xcel exportieren - c:\progra~2\MICROS~1\Office14\EXCEL.EXE/3000
TCP: DhcpNameServer = 192.168.178.1
TCP: Interfaces\{F18E5683-3D26-413B-A883-AB5D71070ECD}: NameServer = 5.79.84.141,8.38.77.107
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWow64\\Flash\\Flash32_11_8_800_94.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWow64\\Flash\\Flash32_11_8_800_94.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWow64\\Flash\\Flash32_11_8_800_94.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWow64\\Flash\\Flash32_11_8_800_94.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
@Denied: (A) (Everyone)
"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]
"Key"="ActionsPane3"
"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2014-09-27  10:09:58
ComboFix-quarantined-files.txt  2014-09-27 08:09
.
Vor Suchlauf: 10 Verzeichnis(se), 242.303.115.264 Bytes frei
Nach Suchlauf: 15 Verzeichnis(se), 248.392.351.744 Bytes frei
.
- - End Of File - - A88E4156E3CE61C734C6AA9D16A41728
A36C5E4F47E84449FF07ED3517B43A31
         

Hier zur Liste der Programme die ICH heruntergeladen habe:
Alle die ihr mir gesagt habt ;D
RRkill
Unlock
AVG 2015
Und nicht gewollt jede menge AdWare
Ein Treiber für unseren HP Drucker
Sardu multiple Antivirus Live CD


Falls du dich fragst was Sadumasu.iso ist er war ein Scherz von mir indem ich Sardu s ISO einfach Sadumasu genannt habe