Total verwurmt etc...

redeye

hi

hab anti vir gerade geupdatet und laufen lassen...


den rest hab ich jetzt so gemacht hier das file von combo:


"Administrator" - 2007-07-09 22:55:45 - ComboFix 07-07-10.1 - Service Pack 2


((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))


C:\WINDOWS\wr.txt


((((((((((((((((((((((((( Files Created from 2007-06-09 to 2007-07-09 )))))))))))))))))))))))))))))))


2007-07-09 22:53 51,200 --a------ C:\WINDOWS\nircmd.exe
2007-07-09 18:12 <DIR> d-------- C:\Programme\Gemeinsame Dateien\digidesign
2007-07-09 18:11 <DIR> d-------- C:\Programme\Waves
2007-07-09 18:06 <DIR> d-------- C:\WINDOWS\PSP MasterComp
2007-07-09 18:05 <DIR> d-------- C:\Programme\PSPaudioware
2007-07-09 15:13 <DIR> d-------- C:\Programme\iZotope
2007-07-09 15:13 <DIR> d-------- C:\Programme\Gemeinsame Dateien\iZotope
2007-07-09 15:13 <DIR> d-------- C:\DOKUME~1\ALLUSE~1\ANWEND~1\iZotope
2007-07-08 16:50 <DIR> d-------- C:\VundoFix Backups
2007-07-08 16:47 87,040 --a------ C:\WINDOWS\system32\Ra32sipr.dll
2007-07-08 16:47 85,504 --a------ C:\WINDOWS\system32\Encdnet.dll
2007-07-08 16:47 81,920 --a------ C:\WINDOWS\system32\Ra3214_4.dll
2007-07-08 16:47 72,704 --a------ C:\WINDOWS\system32\Ra3228_8.dll
2007-07-08 16:47 61,952 --a------ C:\WINDOWS\system32\Decdnet.dll
2007-07-08 16:47 510,976 --a------ C:\WINDOWS\system32\synsoacc.dll
2007-07-08 16:47 487,936 --a------ C:\WINDOWS\system32\Rmbe3260.dll
2007-07-08 16:47 352,768 --a------ C:\WINDOWS\system32\pngu3263.dll
2007-07-08 16:47 21,504 --a------ C:\WINDOWS\system32\Ra32dnet.dll
2007-07-08 16:47 131,072 --a------ C:\WINDOWS\system32\Pneng50.dll
2007-07-08 16:47 130,560 --a------ C:\WINDOWS\system32\Pnc3250.dll
2007-07-08 16:16 <DIR> d-------- C:\DOKUME~1\ADMINI~1\ANWEND~1\Steinberg
2007-07-08 16:05 <DIR> d-------- C:\Programme\Steinberg
2007-07-08 16:05 <DIR> d-------- C:\DOKUME~1\ALLUSE~1\ANWEND~1\Pinnacle
2007-07-08 16:04 16,896 --a------ C:\WINDOWS\system32\drivers\SynasUSB.sys
2007-07-07 17:10 89,872 --a------ C:\WINDOWS\system32\drivers\k750mdm.sys
2007-07-07 17:10 81,728 --a------ C:\WINDOWS\system32\drivers\k750mgmt.sys
2007-07-07 17:10 79,488 --a------ C:\WINDOWS\system32\drivers\k750obex.sys
2007-07-07 17:10 6,576 --a------ C:\WINDOWS\system32\drivers\k750mdfl.sys
2007-07-07 17:10 6,144 --a------ C:\WINDOWS\system32\drivers\k750cmnt.sys
2007-07-07 17:10 6,144 --a------ C:\WINDOWS\system32\drivers\k750cm.sys
2007-07-07 17:10 55,216 --a------ C:\WINDOWS\system32\drivers\k750bus.sys
2007-07-07 17:10 5,744 --a------ C:\WINDOWS\system32\drivers\k750whnt.sys
2007-07-07 17:10 5,744 --a------ C:\WINDOWS\system32\drivers\k750wh.sys
2007-07-06 23:16 <DIR> d-------- C:\DOKUME~1\ADMINI~1\ANWEND~1\Ahead
2007-07-06 23:13 <DIR> d-------- C:\Programme\Nero
2007-07-06 23:13 <DIR> d-------- C:\Programme\Gemeinsame Dateien\Ahead
2007-07-06 23:13 <DIR> d-------- C:\DOKUME~1\ALLUSE~1\ANWEND~1\Nero
2007-07-05 20:21 <DIR> d-------- C:\DOKUME~1\ADMINI~1\ANWEND~1\FlashFXP
2007-07-04 23:05 <DIR> d-------- C:\DOKUME~1\ADMINI~1\ANWEND~1\Media Player Classic
2007-07-03 19:10 132,904 --a------ C:\WINDOWS\system32\drivers\imagesrv.sys
2007-07-03 19:10 11,304 --a------ C:\WINDOWS\system32\drivers\imagedrv.sys
2007-07-03 17:57 <DIR> d-------- C:\DOKUME~1\ALLUSE~1\ANWEND~1\Adobe Systems
2007-07-03 17:55 <DIR> d-------- C:\Programme\Gemeinsame Dateien\Adobe Systems Shared
2007-07-02 21:19 <DIR> d-------- C:\Programme\Real Alternative
2007-07-02 21:19 <DIR> d-------- C:\Programme\Media Player Classic
2007-07-02 21:19 <DIR> d-------- C:\DOKUME~1\ALLUSE~1\ANWEND~1\Real
2007-07-02 21:19 <DIR> d-------- C:\DOKUME~1\ADMINI~1\ANWEND~1\Real
2007-07-02 18:16 <DIR> d--h----- C:\WINDOWS\Icons
2007-07-02 15:35 <DIR> d-------- C:\DOKUME~1\ALLUSE~1\ANWEND~1\AntiVir PersonalEdition Classic
2007-07-02 14:15 <DIR> d-------- C:\WINDOWS\system32\appmgmt
2007-07-01 22:18 <DIR> d-------- C:\DOKUME~1\ADMINI~1\ANWEND~1\vlc
2007-07-01 22:15 <DIR> d-------- C:\Programme\VideoLAN
2007-07-01 16:29 <DIR> d-------- C:\DOKUME~1\ADMINI~1\ANWEND~1\Help
2007-06-29 19:46 <DIR> d-------- C:\Programme\Ahead
2007-06-28 16:08 <DIR> d-------- C:\WINDOWS\Downloaded Installations
2007-06-27 23:26 24,072 --a------ C:\WINDOWS\system32\uxtuneup.dll
2007-06-27 23:26 <DIR> d-------- C:\Programme\TuneUp Utilities 2007
2007-06-27 23:26 <DIR> d-------- C:\DOKUME~1\ADMINI~1\ANWEND~1\TuneUp Software
2007-06-27 23:25 <DIR> d-------- C:\Programme\Gemeinsame Dateien\Wise Installation Wizard
2007-06-27 23:25 <DIR> d-------- C:\DOKUME~1\ALLUSE~1\ANWEND~1\TuneUp Software
2007-06-27 18:13 <DIR> d-------- C:\Temp
2007-06-27 16:15 <DIR> d-------- C:\DOKUME~1\ADMINI~1\ANWEND~1\uTorrent
2007-06-27 16:13 <DIR> d-------- C:\My Downloads
2007-06-27 15:51 <DIR> d-------- C:\Programme\KONAMI
2007-06-27 15:38 <DIR> dr-hsc--- C:\WINDOWS\system32\dllcache
2007-06-27 15:38 <DIR> dr--s---- C:\WINDOWS\Fonts
2007-06-27 15:38 <DIR> dr------- C:\WINDOWS\Web
2007-06-27 15:38 <DIR> d--h----- C:\WINDOWS\inf
2007-06-27 15:38 <DIR> d-------- C:\WINDOWS\WinSxS
2007-06-27 15:38 <DIR> d-------- C:\WINDOWS\twain_32
2007-06-27 15:38 <DIR> d-------- C:\WINDOWS\system32\wins
2007-06-27 15:38 <DIR> d-------- C:\WINDOWS\system32\wbem
2007-06-27 15:38 <DIR> d-------- C:\WINDOWS\system32\usmt
2007-06-27 15:38 <DIR> d-------- C:\WINDOWS\system32\spool
2007-06-27 15:38 <DIR> d-------- C:\WINDOWS\system32\ShellExt
2007-06-27 15:38 <DIR> d-------- C:\WINDOWS\system32\Setup
2007-06-27 15:38 <DIR> d-------- C:\WINDOWS\system32\ras
2007-06-27 15:38 <DIR> d-------- C:\WINDOWS\system32\oobe
2007-06-27 15:38 <DIR> d-------- C:\WINDOWS\system32\npp
2007-06-27 15:38 <DIR> d-------- C:\WINDOWS\system32\mui
2007-06-27 15:38 <DIR> d-------- C:\WINDOWS\system32\inetsrv
2007-06-27 15:38 <DIR> d-------- C:\WINDOWS\system32\IME
2007-06-27 15:38 <DIR> d-------- C:\WINDOWS\system32\icsxml
2007-06-27 15:38 <DIR> d-------- C:\WINDOWS\system32\ias
2007-06-27 15:38 <DIR> d-------- C:\WINDOWS\system32\export
2007-06-27 15:38 <DIR> d-------- C:\WINDOWS\system32\drivers\etc
2007-06-27 15:38 <DIR> d-------- C:\WINDOWS\system32\drivers\disdn
2007-06-27 15:38 <DIR> d-------- C:\WINDOWS\system32\drivers
2007-06-27 15:38 <DIR> d-------- C:\WINDOWS\system32\dhcp
2007-06-27 15:38 <DIR> d-------- C:\WINDOWS\system32\config
2007-06-27 15:38 <DIR> d-------- C:\WINDOWS\system32\3com_dmi
2007-06-27 15:38 <DIR> d-------- C:\WINDOWS\system32\3076
2007-06-27 15:38 <DIR> d-------- C:\WINDOWS\system32\2052
2007-06-27 15:38 <DIR> d-------- C:\WINDOWS\system32\1054
2007-06-27 15:38 <DIR> d-------- C:\WINDOWS\system32\1042
2007-06-27 15:38 <DIR> d-------- C:\WINDOWS\system32\1041
2007-06-27 15:38 <DIR> d-------- C:\WINDOWS\system32\1037
2007-06-27 15:38 <DIR> d-------- C:\WINDOWS\system32\1033
2007-06-27 15:38 <DIR> d-------- C:\WINDOWS\system32\1031
2007-06-27 15:38 <DIR> d-------- C:\WINDOWS\system32\1028


(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))

2007-06-27 12:21:51 48,156 ----a-w C:\WINDOWS\system32\perfc007.dat
2007-06-27 12:21:51 316,594 ----a-w C:\WINDOWS\system32\perfh007.dat
2007-05-16 07:18:44 95,864 ----a-w C:\WINDOWS\system32\NeroCo.dll


((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))


*Note* empty entries & legit default entries are not shown

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
2006-10-22 23:08 62080 --a------ C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelper.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
2005-05-31 01:04 853672 --a------ C:\PROGRA~1\SPYBOT~1\SDHelper.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
2007-03-14 03:43 501400 --a------ C:\Programme\Java\jre1.6.0_01\bin\ssv.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"="C:\Programme\Java\jre1.6.0_01\bin\jusched.exe" [2007-03-14 03:43]
"ICQ Lite"="C:\Programme\ICQLite\ICQLite.exe" [2006-07-11 12:15]
"avgnt"="C:\Programme\AntiVir PersonalEdition Classic\avgnt.exe" [2007-04-02 10:35]
"NeroFilterCheck"="C:\Programme\Gemeinsame Dateien\Ahead\Lib\NeroCheck.exe" [2007-03-01 15:57]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-11-11 14:00]
"DAEMON Tools"="C:\Programme\DAEMON Tools\daemon.exe" [2007-04-04 00:29]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Programme\Gemeinsame Dateien\Ahead\Lib\NMBgMonitor.exe" [2007-06-27 19:03]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Svchost - netsvcs
UxTuneUp


Contents of the 'Scheduled Tasks' folder
2007-07-06 15:15:18 C:\WINDOWS\tasks\1-Klick-Wartung.job

**************************************************************************

catchme 0.3.915 W2K/XP/Vista - rootkit detector by Gmer, http://www.gmer.net
Rootkit scan 2007-07-09 22:56:21
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************

Completion time: 2007-07-09 22:56:30
C:\ComboFix-quarantined-files.txt ... 2007-07-09 22:56

--- E O F ---