Das Rootkit hätten wir. Und für den Notfall hast Du mit Parted Magic eine Live-CD
Mach bitte nun ein Log mit CF:

ComboFix

Ein Leitfaden und Tutorium zur Nutzung von ComboFix

• Lade dir ComboFix hier herunter auf deinen Desktop. Benenne es beim Runterladen um in cofi.exe.

• Dann folgende Anleitung durchlesen und abarbeiten -> CCleaner Systembereinigung

• Schliesse alle Programme, vor allem dein Antivirenprogramm und andere Hintergrundwächter sowie deinen Internetbrowser.

• Starte cofi.exe von deinem Desktop aus, bestätige die Warnmeldungen, führe die Updates durch (falls vorgeschlagen), installiere die Wiederherstellungskonsole (falls vorgeschlagen) und lass dein System durchsuchen.
  Vermeide es auch während Combofix läuft die Maus und Tastatur zu benutzen.

• Im Anschluss öffnet sich automatisch eine combofix.txt, diesen Inhalt bitte kopieren ([Strg]a, [Strg]c) und in deinen Beitrag einfügen ([Strg]v). Die Datei findest du außerdem unter: C:\ComboFix.txt.

Wichtiger Hinweis:

Combofix darf ausschließlich ausgeführt werden, wenn ein Kompetenzler dies ausdrücklich empfohlen hat!
Es sollte nie auf eigene Initiative hin ausgeführt werden! Eine falsche Benutzung kann ernsthafte Computerprobleme nach sich ziehen und eine Bereinigung der Infektion noch erschweren.

moins,

hört sich gefärlich an was ich hier machen soll :) naja aber du weißt sicherlicht was du da machst (oder besser gesagt von mir verlangst^^)

hier das log

ComboFix 10-04-06.04 - RedNoak 07.04.2010 16:27:30.1.2 - x86
Microsoft Windows 7 Professional 6.1.7600.0.1252.49.1031.18.2046.1286 [GMT 2:00]
ausgeführt von:: c:\users\RedNoak\Desktop\cofi.exe
.

(((((((((((((((((((((((((((((((((((( Weitere Löschungen ))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\install.exe
c:\program files\StormII
c:\windows\system32\404Fix.exe
c:\windows\system32\Agent.OMZ.Fix.exe
c:\windows\system32\dumphive.exe
c:\windows\system32\IEDFix.C.exe
c:\windows\system32\IEDFix.exe
c:\windows\system32\o4Patch.exe
c:\windows\system32\Process.exe
c:\windows\system32\SrchSTS.exe
c:\windows\system32\tmp.reg
c:\windows\system32\VACFix.exe
c:\windows\system32\VCCLSID.exe
c:\windows\system32\WS2Fix.exe

.
((((((((((((((((((((((( Dateien erstellt von 2010-03-07 bis 2010-04-07 ))))))))))))))))))))))))))))))
.

2010-04-07 15:17 . 2010-04-07 13:11 21584 ----a-w- c:\windows\system32\drivers\atapi.sys
2010-04-07 14:32 . 2010-04-07 14:32 -------- d-----w- c:\users\RedNoak\AppData\Local\temp
2010-04-07 14:32 . 2010-04-07 14:32 -------- d-----w- c:\users\Default\AppData\Local\temp
2010-04-07 13:12 . 2010-04-07 13:11 21584 ----a-w- C:\atapi.sys
2010-04-05 12:31 . 2010-04-05 12:33 -------- d-----w- c:\program files\Google
2010-04-05 12:31 . 2010-04-05 12:33 -------- d-----w- c:\users\RedNoak\AppData\Local\Google
2010-04-05 11:24 . 2010-04-05 11:24 -------- d-----w- c:\program files\Common Files\Steam
2010-04-04 16:26 . 2010-04-04 16:26 1 ----a-w- c:\windows\system32\SI.bin
2010-04-04 11:16 . 2010-04-04 11:16 -------- d-----w- c:\users\RedNoak\AppData\Local\SKIDROW
2010-04-04 11:15 . 2010-04-04 11:15 -------- d-----w- c:\users\RedNoak\AppData\Local\Sidhe
2010-04-02 16:22 . 2010-04-02 16:22 -------- d-----w- c:\program files\Sonata
2010-03-31 11:34 . 2010-02-23 07:56 977920 ----a-w- c:\windows\system32\wininet.dll
2010-03-29 23:45 . 2010-03-29 23:45 -------- d-----w- c:\users\RedNoak\AppData\Roaming\NVIDIA
2010-03-29 23:04 . 2010-03-29 23:04 -------- d-----w- c:\users\RedNoak\AppData\Local\4A Games
2010-03-24 15:58 . 2010-03-25 02:11 -------- d-----w- C:\rsit
2010-03-24 15:58 . 2010-03-25 02:11 -------- d-----w- c:\program files\trend micro
2010-03-23 20:02 . 2010-03-23 20:02 -------- d-----w- c:\windows\Sun
2010-03-22 16:43 . 2010-03-22 16:43 -------- d-----w- c:\users\RedNoak\AppData\Roaming\Malwarebytes
2010-03-22 16:43 . 2010-01-07 15:07 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-03-22 16:43 . 2010-03-22 16:43 -------- d-----w- c:\programdata\Malwarebytes
2010-03-22 16:43 . 2010-03-22 16:43 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-03-22 16:43 . 2010-01-07 15:07 19160 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-03-22 02:54 . 2010-03-22 02:54 388096 ----a-r- c:\users\RedNoak\AppData\Roaming\Microsoft\Installer\{0761C9A8-8F3A-4216-B4A7-B7AFBF24A24A}\HiJackThis.exe
2010-03-22 02:54 . 2010-03-22 02:54 -------- d-----w- c:\program files\TrendMicro
2010-03-22 02:21 . 2010-04-07 13:58 -------- d-----w- c:\program files\CCleaner
2010-03-22 01:23 . 2010-03-22 01:23 -------- d-----w- c:\windows\1C4551A64743409391E41477CD655043.TMP
2010-03-22 01:12 . 2010-03-22 01:23 -------- d-----w- c:\program files\Common Files\BioWare
2010-03-16 00:15 . 2010-03-16 00:15 985704 ----a-w- c:\windows\system32\nvsvc.dll
2010-03-16 00:15 . 2010-03-16 00:15 1515624 ----a-w- c:\windows\system32\nvsvcr.dll
2010-03-16 00:15 . 2010-03-16 00:15 129640 ----a-w- c:\windows\system32\nvvsvc.exe
2010-03-16 00:14 . 2010-03-16 00:14 13683816 ----a-w- c:\windows\system32\nvcpl.dll
2010-03-16 00:14 . 2010-03-16 00:14 110696 ----a-w- c:\windows\system32\nvmctray.dll
2010-03-14 12:49 . 2010-03-14 12:49 -------- d-----w- c:\programdata\ALM
2010-03-14 12:24 . 2009-11-25 10:19 56816 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2010-03-14 12:24 . 2009-03-30 08:33 96104 ----a-w- c:\windows\system32\drivers\avipbb.sys
2010-03-14 12:24 . 2010-03-14 12:24 -------- d-----w- c:\programdata\Avira
2010-03-14 12:24 . 2010-03-14 12:24 -------- d-----w- c:\program files\Avira
2010-03-12 20:30 . 2010-03-22 16:52 -------- d-----w- c:\users\RedNoak\AppData\Local\Microsoft Games
2010-03-12 20:29 . 2010-03-12 20:29 -------- d-----w- c:\program files\Microsoft Games
2010-03-12 15:28 . 2010-03-16 13:48 -------- d-----w- c:\program files\OpenAL
2010-03-12 15:28 . 2010-03-12 15:28 444952 ----a-w- c:\windows\system32\wrap_oal.dll
2010-03-12 15:28 . 2010-03-12 15:28 109080 ----a-w- c:\windows\system32\OpenAL32.dll

.
(((((((((((((((((((((((((((((((((((( Find3M Bericht ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-04-07 14:32 . 2009-07-14 08:47 677940 ----a-w- c:\windows\system32\perfc007.dat
2010-04-07 14:32 . 2009-07-14 08:47 2424012 ----a-w- c:\windows\system32\perfh007.dat
2010-04-07 14:26 . 2010-01-07 02:14 -------- d-----w- c:\programdata\NVIDIA
2010-04-07 13:12 . 2010-01-06 18:36 -------- d-----w- c:\users\RedNoak\AppData\Roaming\uTorrent
2010-04-06 01:44 . 2010-04-06 01:43 116 ----a-w- c:\windows\wininit.tmp
2010-04-06 00:00 . 2010-01-07 02:23 -------- d--h--w- c:\program files\InstallShield Installation Information
2010-04-04 15:46 . 2010-01-20 04:57 -------- d-----w- c:\users\RedNoak\AppData\Roaming\vlc
2010-04-02 15:33 . 2010-01-07 03:17 -------- d-----w- c:\program files\Common Files\Java
2010-04-02 15:32 . 2010-01-07 03:17 -------- d-----w- c:\program files\Java
2010-03-31 21:49 . 2010-01-07 01:52 -------- d-----w- c:\program files\Common Files\Wise Installation Wizard
2010-03-31 17:58 . 2009-07-13 23:11 21584 ----a-w- c:\windows\system32\drivers\atapi.bad
2010-03-30 00:18 . 2010-01-07 02:13 -------- d-----w- c:\program files\NVIDIA Corporation
2010-03-27 19:41 . 2010-01-15 22:54 -------- d-----w- c:\users\RedNoak\AppData\Roaming\Winamp
2010-03-22 01:23 . 2010-01-07 01:52 -------- d-----w- c:\programdata\Media Center Programs
2010-03-22 01:10 . 2010-01-07 01:57 -------- d-----w- c:\programdata\BioWare
2010-03-12 12:51 . 2010-01-21 18:34 -------- d-----w- c:\users\RedNoak\AppData\Roaming\Canon
2010-03-09 02:28 . 2010-01-14 16:25 411368 ----a-w- c:\windows\system32\deploytk.dll
2010-03-03 17:32 . 2010-01-08 16:41 138576 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2010-03-03 17:31 . 2010-01-08 16:41 215104 ----a-w- c:\windows\system32\PnkBstrB.exe
2010-03-02 01:55 . 2010-01-12 16:30 -------- d-----w- c:\program files\Paint.NET
2010-03-02 00:34 . 2010-01-06 18:58 69016 ----a-w- c:\users\RedNoak\AppData\Local\GDIPFONTCACHEV1.DAT
2010-03-01 02:39 . 2010-01-07 01:17 -------- d-----w- c:\program files\Common Files\Adobe
2010-03-01 02:38 . 2010-03-01 02:38 -------- d-----w- c:\program files\Bonjour
2010-02-27 02:57 . 2010-02-27 01:47 -------- d-----w- c:\users\RedNoak\AppData\Roaming\My Battle for Middle-earth Files
2010-02-26 06:24 . 2010-02-26 06:21 -------- d-----w- c:\program files\Driver Cleaner Pro
2010-02-26 06:06 . 2010-02-26 06:06 2626360 ----a-w- c:\users\RedNoak\AppData\Roaming\Mozilla\Firefox\Profiles\se1rq0sk.default\extensions\firefox@tvunetworks.com\plugins\npTVUAx.dll
2010-02-26 06:02 . 2010-01-07 02:35 -------- d--h--w- c:\program files\Temp
2010-02-25 02:20 . 2010-02-25 02:20 -------- d-----w- c:\users\RedNoak\AppData\Roaming\DivX
2010-02-24 09:16 . 2010-01-06 18:38 181632 ------w- c:\windows\system32\MpSigStub.exe
2010-02-22 17:50 . 2010-02-15 13:53 -------- d-----w- c:\users\RedNoak\AppData\Roaming\Bioshock2
2010-02-20 22:02 . 2010-01-23 13:31 -------- d-----w- c:\programdata\AA3DeployClient
2010-02-19 04:08 . 2010-02-19 04:08 -------- d-----w- c:\users\RedNoak\AppData\Roaming\UDC Profiles
2010-02-19 03:58 . 2010-02-19 03:58 -------- d-----w- c:\programdata\FLEXnet
2010-02-19 03:52 . 2010-02-19 03:52 -------- d-----w- c:\program files\Common Files\Macrovision Shared
2010-02-15 13:50 . 2010-02-15 13:50 -------- d-sh--w- c:\programdata\SecuROM
2010-02-15 13:43 . 2010-02-15 13:43 -------- d-----w- c:\program files\Microsoft Games for Windows - LIVE
2010-02-13 03:31 . 2010-02-13 03:31 -------- d-----w- c:\users\RedNoak\AppData\Roaming\Ubisoft
2010-02-13 03:13 . 2010-02-13 03:13 281760 ----a-w- c:\windows\system32\drivers\atksgt.sys
2010-02-13 03:13 . 2010-02-13 03:13 25888 ----a-w- c:\windows\system32\drivers\lirsgt.sys
2010-02-11 07:10 . 2010-03-08 02:00 293376 ----a-w- c:\windows\system32\browserchoice.exe
2010-02-11 03:26 . 2010-02-11 03:26 -------- d-----w- c:\programdata\IsolatedStorage
2010-02-08 17:46 . 2010-02-26 06:01 57376 ----a-w- c:\windows\system32\RtkCoInst.dll
2010-02-08 17:46 . 2010-02-26 06:01 1695264 ----a-w- c:\windows\system32\RtkPgExt.dll
2010-02-08 17:46 . 2010-02-26 06:01 371232 ----a-w- c:\windows\system32\RtkApoApi.dll
2010-02-08 17:46 . 2010-02-26 06:01 2624544 ----a-w- c:\windows\system32\RtkAPO.dll
2010-02-08 17:17 . 2010-02-26 06:01 3019232 ----a-w- c:\windows\system32\drivers\RTKVHDA.sys
2010-02-07 18:41 . 2010-02-07 18:41 -------- d-----w- c:\program files\Veoh Networks
2010-02-06 17:51 . 2010-01-22 19:28 -------- d-----w- c:\program files\Veetle
2010-02-04 09:01 . 2010-02-22 18:34 74072 ----a-w- c:\windows\system32\XAPOFX1_4.dll
2010-02-04 09:01 . 2010-02-22 18:34 528216 ----a-w- c:\windows\system32\XAudio2_6.dll
2010-02-04 09:01 . 2010-02-22 18:34 238936 ----a-w- c:\windows\system32\xactengine3_6.dll
2010-02-04 09:01 . 2010-02-22 18:34 22360 ----a-w- c:\windows\system32\X3DAudio1_7.dll
2010-02-02 07:45 . 2010-02-24 17:03 2048 ----a-w- c:\windows\system32\tzres.dll
2010-02-01 21:26 . 2010-01-08 16:41 139152 ----a-w- c:\users\RedNoak\AppData\Roaming\PnkBstrK.sys
2010-02-01 21:26 . 2010-01-08 16:41 139152 ----a-w- c:\users\RedNoak\AppData\Roaming\PnkBstrK.sys
2010-02-01 15:14 . 2010-02-26 06:01 1247776 ----a-w- c:\windows\RtlExUpd.dll
2010-01-26 10:38 . 2010-02-26 06:01 145760 ----a-w- c:\windows\system32\AERTACap.dll
2010-01-25 18:12 . 2010-02-26 06:01 291232 ----a-w- c:\windows\system32\FMAPO.dll
2010-01-24 14:47 . 2010-01-24 14:47 794408 ----a-w- c:\windows\system32\pbsvc.exe
2010-01-24 14:47 . 2010-01-08 16:41 75064 ----a-w- c:\windows\system32\PnkBstrA.exe
2010-01-18 23:29 . 2010-02-10 17:44 85504 ----a-w- c:\windows\system32\secproc_ssp_isv.dll
2010-01-18 23:29 . 2010-02-10 17:44 85504 ----a-w- c:\windows\system32\secproc_ssp.dll
2010-01-18 23:29 . 2010-02-10 17:44 365568 ----a-w- c:\windows\system32\secproc_isv.dll
2010-01-18 23:29 . 2010-02-10 17:44 369152 ----a-w- c:\windows\system32\secproc.dll
2010-01-18 23:28 . 2010-02-10 17:44 324608 ----a-w- c:\windows\system32\RMActivate_isv.exe
2010-01-18 23:28 . 2010-02-10 17:44 277504 ----a-w- c:\windows\system32\RMActivate_ssp_isv.exe
2010-01-18 23:28 . 2010-02-10 17:44 320512 ----a-w- c:\windows\system32\RMActivate.exe
2010-01-18 23:28 . 2010-02-10 17:44 280064 ----a-w- c:\windows\system32\RMActivate_ssp.exe
2010-01-14 16:38 . 2010-01-14 16:38 766 ----a-r- c:\users\RedNoak\AppData\Roaming\Microsoft\Installer\{8B9852AF-B0B0-47B7-9BC5-89A95D77B6C9}\_6FEFF9B68218417F98F549.exe
2010-01-14 16:38 . 2010-01-14 16:38 2550 ----a-r- c:\users\RedNoak\AppData\Roaming\Microsoft\Installer\{8B9852AF-B0B0-47B7-9BC5-89A95D77B6C9}\_BEBC7E9B550B807D255107.exe
2010-01-14 16:38 . 2010-01-14 16:38 1518 ----a-r- c:\users\RedNoak\AppData\Roaming\Microsoft\Installer\{8B9852AF-B0B0-47B7-9BC5-89A95D77B6C9}\_0D3558C4434A1C598D6FAA.exe
2010-01-14 16:38 . 2010-01-14 16:38 1078 ----a-r- c:\users\RedNoak\AppData\Roaming\Microsoft\Installer\{8B9852AF-B0B0-47B7-9BC5-89A95D77B6C9}\_C86848DD3D088397791DA0.exe
2010-01-14 16:38 . 2010-01-14 16:38 1078 ----a-r- c:\users\RedNoak\AppData\Roaming\Microsoft\Installer\{8B9852AF-B0B0-47B7-9BC5-89A95D77B6C9}\_12C4F2192E2964FB6B5B2C.exe
2010-01-14 16:38 . 2010-01-14 16:38 10134 ----a-r- c:\users\RedNoak\AppData\Roaming\Microsoft\Installer\{8B9852AF-B0B0-47B7-9BC5-89A95D77B6C9}\_0BE142F207011DCE1557E8.exe
2010-01-12 04:03 . 2010-02-26 06:32 182888 ----a-w- c:\windows\system32\nvcod189.dll
2010-01-08 03:18 . 2010-02-10 17:44 221184 ----a-w- c:\windows\system32\drivers\mrxsmb10.sys
2010-01-08 03:17 . 2010-02-10 17:44 123392 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
2009-06-10 21:26 . 2009-07-14 02:04 9633792 --sha-r- c:\windows\Fonts\StaticCache.dat
2009-07-14 01:14 . 2009-07-13 23:42 396800 --sha-w- c:\windows\winsxs\x86_microsoft-windows-mail-app_31bf3856ad364e35_6.1.7600.16385_none_f12e83abb108c86c\WinMail.exe
.

(((((((((((((((((((((((((((( Autostartpunkte der Registrierung ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2009-10-30 369200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-02-18 248040]
"CanonSolutionMenu"="c:\program files\Canon\SolutionMenu\CNSLMAIN.exe" [2008-03-10 689488]
"CanonMyPrinter"="c:\program files\Canon\MyPrinter\BJMyPrt.exe" [2008-03-03 1848648]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-12-22 35760]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2009-12-11 948672]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RtHDVCpl.exe" [2010-02-08 8505888]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2009-03-02 209153]
" Malwarebytes Anti-Malware (reboot)"="c:\program files\Malwarebytes' Anti-Malware\mbam.exe" [2010-01-07 1394000]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MSIServer]
@="Service"

[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^VPN Client.lnk]
path=c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\VPN Client.lnk
backup=c:\windows\pss\VPN Client.lnk.CommonStartup
backupExtension=.CommonStartup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}]
2007-06-27 18:03 152872 ----a-w- c:\program files\Common Files\Ahead\Lib\NMBgMonitor.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ Malwarebytes Anti-Malware (reboot)]
2010-01-07 15:07 1394000 ----a-w- c:\program files\Malwarebytes' Anti-Malware\mbam.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
2007-03-01 14:57 153136 ----a-w- c:\program files\Common Files\Ahead\Lib\NeroCheck.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PWRISOVM.EXE]
2007-08-07 00:05 200704 ----a-w- d:\programme\PowerISO\PWRISOVM.EXE

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinampAgent]
2009-12-21 05:45 39424 ----a-w- c:\program files\Winamp\winampa.exe

R0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [2010-01-07 691696]
R2 gupdate;Google Update Service (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2010-04-05 136176]
R3 DAUpdaterSvc;Dragon Age: Origins - Content Updater;e:\spiele\Dragon Age\bin_ship\DAUpdaterSvc.Service.exe [2009-12-15 25832]
R3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt86win7.sys [2009-08-20 189440]
S2 AntiVirSchedulerService;Avira AntiVir Planer;c:\program files\Avira\AntiVir Desktop\sched.exe [2009-05-13 108289]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2010-03-16 240232]

.
Inhalt des "geplante Tasks" Ordners

2010-04-07 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-04-05 12:31]

2010-04-07 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-04-05 12:31]
.
.
------- Zusätzlicher Suchlauf -------
.
uInternet Settings,ProxyOverride = local
IE: Add to AMV Converter... - e:\mp3 player utilities 4.18\AMVConverter\grab.html
IE: Nach Microsoft E&xel exportieren - e:\micros~1\Office12\EXCEL.EXE/3000
FF - ProfilePath - c:\users\RedNoak\AppData\Roaming\Mozilla\Firefox\Profiles\se1rq0sk.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.google.de/firefox?client=firefox-a&rls=org.mozilla:de:official
FF - plugin: c:\program files\DivX\DivX Plus Web Player\npdivx32.dll
FF - plugin: c:\program files\Google\Google Earth\plugin\npgeplugin.dll
FF - plugin: c:\program files\Google\Update\1.2.183.23\npGoogleOneClick8.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npwachk.dll
FF - plugin: c:\program files\NVIDIA Corporation\3D Vision\npnv3dv.dll
FF - plugin: c:\program files\Veetle\Player\npvlc.dll
FF - plugin: c:\program files\Veetle\plugins\npVeetle.dll
FF - plugin: c:\program files\Veetle\VLCBroadcast\npvbp.dll
FF - plugin: c:\program files\Veoh Networks\VeohWebPlayer\NPVeohTVPlugin.dll
FF - plugin: c:\program files\Veoh Networks\VeohWebPlayer\npWebPlayerVideoPluginATL.dll
FF - plugin: c:\users\RedNoak\AppData\Roaming\Mozilla\Firefox\Profiles\se1rq0sk.default\extensions\firefox@tvunetworks.com\plugins\npTVUAx.dll

---- FIREFOX Richtlinien ----
FF - user.js: yahoo.homepage.dontask - truec:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_colors", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_popup_windows", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.enable_click_image_resizing", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("accessibility.browsewithcaret_shortcut.enabled", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("javascript.options.mem.high_water_mark", 32);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("javascript.options.mem.gc_frequency", 1600);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("svg.smil.enabled", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.trackpoint_hack.enabled", -1);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.debug", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.agedWeight", 2);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.bucketSize", 1);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.maxTimeGroupings", 25);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.timeGroupingSize", 604800);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.boundaryWeight", 25);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.prefixWeight", 5);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("html5.enable", false);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.allow_unrestricted_renego_everywhere__temporarily_available_pref", true);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.renego_unrestricted_hosts", "");
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.treat_unsafe_negotiation_as_broken", false);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.require_safe_negotiation", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("app.update.download.backgroundInterval", 600);
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("app.update.url.manual", "hxxp://www.firefox.com");
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-ja", "mozff");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add", "addons.mozilla.org");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add.36", "getpersonas.com");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("lightweightThemes.update.enabled", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.allTabs.previews", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.hide_infobar_for_outdated_plugin", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("toolbar.customization.usesheet", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.enable", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.max", 20);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.cachetime", 20);
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2010-04-07 16:33:42
ComboFix-quarantined-files.txt 2010-04-07 14:33

Vor Suchlauf: 12 Verzeichnis(se), 55.071.649.792 Bytes frei
Nach Suchlauf: 17 Verzeichnis(se), 54.586.490.880 Bytes frei

- - End Of File - - D362E4FBA537189E67AF9E6BC1DCA394

mfg

red

Sieht ok aus. Mach bitte Kontrollscans mit Malwarebytes und SUPERAntiSpyware und poste die Logs.
Denk dran beide Tools zu updaten vor dem Scan!!

moins,


joa sieht gut aus seit gestern werden keine links mehr geöffnet!

das Malwarebytes log is im anhang das andere tool werd ich heut abend durchlaufen lassen


vielen dank für die hilfe! macht weiter so und viel erfolg mit dieser seite!



mfg


ein dankbarer red ;)