Links werden umgeleitet, AV Webseiten und Programme funktionieren nicht mehr, Homepage gehackt

ComboFix 10-06-25.01 - *** 25.06.2010  23:48:59.1.1 - x86
Microsoft Windows XP Professional  5.1.2600.3.1252.49.1031.18.1014.565 [GMT 2:00]
ausgeführt von:: c:\dokumente und einstellungen\***\Desktop\ComboFix.exe
AV: ESET NOD32 Antivirus 4.2 *On-access scanning disabled* (Outdated) {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
.

((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\dokume~1\***\LOKALE~1\Temp\org.bak
c:\dokumente und einstellungen\***\Lokale Einstellungen\Temp\org.bak
c:\windows\system32\1.tmp
c:\windows\system32\csftxctl.ocx
c:\windows\system32\win.ini

.
(((((((((((((((((((((((   Dateien erstellt von 2010-05-25 bis 2010-06-25  ))))))))))))))))))))))))))))))
.

2010-06-25 21:58 . 2010-06-25 21:58	--------	d-----w-	c:\windows\system32\xircom
2010-06-25 21:58 . 2010-06-25 21:58	--------	d-----w-	c:\windows\system32\wbem\snmp
2010-06-25 21:58 . 2010-06-25 21:58	--------	d-----w-	c:\programme\microsoft frontpage
2010-06-20 19:01 . 2010-06-20 19:01	--------	d-----w-	c:\dokumente und einstellungen\***\Anwendungsdaten\Malwarebytes
2010-06-20 19:01 . 2010-04-29 10:19	38224	----a-w-	c:\windows\system32\drivers\mbamswissarmy.sys
2010-06-20 19:01 . 2010-06-20 19:01	--------	d-----w-	c:\dokumente und einstellungen\All Users\Anwendungsdaten\Malwarebytes
2010-06-20 19:01 . 2010-04-29 10:19	20952	----a-w-	c:\windows\system32\drivers\mbam.sys
2010-06-20 19:01 . 2010-06-20 22:55	--------	d-----w-	c:\programme\Malwarebytes' Anti-Malware
2010-06-20 18:44 . 2010-06-20 18:44	77312	----a-w-	C:\mbr.exe
2010-06-19 18:33 . 2010-06-19 18:33	--------	d-----w-	c:\programme\Sophos
2010-06-18 11:17 . 2010-06-18 11:17	--------	d-----w-	c:\programme\Trend Micro
2010-06-15 00:28 . 2010-06-15 01:02	--------	d---a-w-	C:\Kaspersky Rescue Disk 10.0
2010-06-14 14:00 . 2010-06-14 14:00	--------	d-----w-	c:\dokumente und einstellungen\***\Lokale Einstellungen\Anwendungsdaten\ESET
2010-06-14 11:51 . 2010-06-14 11:51	--------	d-----w-	c:\programme\ESET
2010-06-14 11:51 . 2010-06-14 11:51	--------	d-----w-	c:\dokumente und einstellungen\All Users\Anwendungsdaten\ESET
2010-06-11 10:13 . 2010-04-20 05:29	285696	------w-	c:\windows\system32\dllcache\atmfd.dll
2010-06-11 10:13 . 2009-10-21 05:38	75776	------w-	c:\windows\system32\dllcache\strmfilt.dll
2010-06-11 10:13 . 2009-10-21 05:38	25088	------w-	c:\windows\system32\dllcache\httpapi.dll
2010-06-11 10:13 . 2009-10-20 16:20	265728	------w-	c:\windows\system32\dllcache\http.sys
2010-06-11 10:12 . 2010-03-05 14:37	65536	------w-	c:\windows\system32\dllcache\asycfilt.dll
2010-06-10 22:20 . 2010-06-11 10:34	--------	d-----w-	C:\Meine Webseiten
2010-06-10 22:16 . 2010-06-10 22:17	--------	d-----w-	c:\programme\WinHTTrack
2010-06-08 17:10 . 2010-01-29 14:59	691712	------w-	c:\windows\system32\dllcache\inetcomm.dll
2010-06-08 17:09 . 2010-03-09 11:07	430080	------w-	c:\windows\system32\dllcache\vbscript.dll
2010-06-08 17:09 . 2010-02-12 04:33	100864	------w-	c:\windows\system32\dllcache\6to4svc.dll
2010-06-08 17:09 . 2010-02-24 11:57	457216	------w-	c:\windows\system32\dllcache\mrxsmb.sys
2010-06-08 17:08 . 2009-10-23 15:28	3558912	------w-	c:\windows\system32\dllcache\moviemk.exe
2010-06-08 17:08 . 2009-12-17 07:40	346624	------w-	c:\windows\system32\dllcache\mspaint.exe
2010-06-08 17:08 . 2009-12-31 16:50	353792	------w-	c:\windows\system32\dllcache\srv.sys
2010-06-08 17:08 . 2009-11-27 16:08	8704	------w-	c:\windows\system32\dllcache\tsbyuv.dll
2010-06-08 17:08 . 2009-11-27 16:08	85504	------w-	c:\windows\system32\dllcache\avifil32.dll
2010-06-08 17:08 . 2009-11-27 16:08	48128	------w-	c:\windows\system32\dllcache\iyuv_32.dll
2010-06-08 17:08 . 2009-11-27 16:08	28672	------w-	c:\windows\system32\dllcache\msvidc32.dll
2010-06-08 17:08 . 2009-11-27 16:08	11264	------w-	c:\windows\system32\dllcache\msrle32.dll
2010-06-08 17:06 . 2009-10-15 16:28	81920	------w-	c:\windows\system32\dllcache\fontsub.dll
2010-06-08 17:06 . 2009-10-15 16:28	119808	------w-	c:\windows\system32\dllcache\t2embed.dll
2010-06-08 17:05 . 2009-11-21 15:54	471552	------w-	c:\windows\system32\dllcache\aclayers.dll
2010-06-08 17:05 . 2009-10-13 10:32	271360	------w-	c:\windows\system32\dllcache\oakley.dll
2010-06-08 17:05 . 2009-10-12 13:29	79872	------w-	c:\windows\system32\dllcache\raschap.dll
2010-06-08 17:04 . 2009-06-25 08:41	54272	------w-	c:\windows\system32\dllcache\wdigest.dll
2010-06-08 17:04 . 2009-06-25 08:41	301568	------w-	c:\windows\system32\dllcache\kerberos.dll
2010-06-08 17:04 . 2009-09-11 14:14	136704	------w-	c:\windows\system32\dllcache\msv1_0.dll
2010-06-08 17:04 . 2009-06-24 10:28	92928	------w-	c:\windows\system32\dllcache\ksecdd.sys
2010-06-08 17:03 . 2009-07-17 16:15	1441792	------w-	c:\windows\system32\dllcache\query.dll
2010-06-08 17:03 . 2009-08-26 08:00	247326	------w-	c:\windows\system32\dllcache\strmdll.dll
2010-06-08 17:03 . 2009-09-04 21:03	58880	------w-	c:\windows\system32\dllcache\msasn1.dll
2010-06-08 17:02 . 2009-08-13 15:15	512000	------w-	c:\windows\system32\dllcache\jscript.dll
2010-06-08 17:01 . 2009-06-21 21:45	153088	------w-	c:\windows\system32\dllcache\triedit.dll
2010-06-08 17:01 . 2009-06-10 06:17	134144	------w-	c:\windows\system32\dllcache\wkssvc.dll
2010-06-08 17:01 . 2009-08-05 08:59	206336	------w-	c:\windows\system32\dllcache\mswebdvd.dll
2010-06-08 17:01 . 2009-06-15 11:08	82944	------w-	c:\windows\system32\dllcache\tlntsess.exe
2010-06-08 17:01 . 2009-06-15 10:43	78848	------w-	c:\windows\system32\dllcache\telnet.exe
2010-06-08 17:01 . 2009-07-17 19:01	58880	------w-	c:\windows\system32\dllcache\atl.dll
2010-06-08 16:59 . 2009-04-15 14:51	585216	------w-	c:\windows\system32\dllcache\rpcrt4.dll
2010-06-08 16:59 . 2009-05-07 15:15	348672	------w-	c:\windows\system32\dllcache\localspl.dll
2010-06-08 16:59 . 2009-06-25 08:41	56832	------w-	c:\windows\system32\dllcache\secur32.dll
2010-06-08 16:59 . 2009-03-21 14:06	1063424	------w-	c:\windows\system32\dllcache\kernel32.dll
2010-06-08 16:59 . 2009-08-25 09:17	354816	------w-	c:\windows\system32\dllcache\winhttp.dll
2010-06-08 16:59 . 2008-06-12 14:20	956928	------w-	c:\windows\system32\dllcache\msdtctm.dll
2010-06-08 16:59 . 2008-06-12 14:20	91648	------w-	c:\windows\system32\dllcache\mtxoci.dll
2010-06-08 16:59 . 2008-06-12 14:20	66560	------w-	c:\windows\system32\dllcache\mtxclu.dll
2010-06-08 16:59 . 2008-06-12 14:20	58880	------w-	c:\windows\system32\dllcache\msdtclog.dll
2010-06-08 16:59 . 2008-06-12 14:20	161792	------w-	c:\windows\system32\dllcache\msdtcuiu.dll
2010-06-08 16:57 . 2009-06-25 08:41	147456	------w-	c:\windows\system32\dllcache\schannel.dll
2010-06-08 16:57 . 2008-10-23 12:36	286720	------w-	c:\windows\system32\dllcache\gdi32.dll
2010-06-08 16:57 . 2009-07-31 08:02	1372672	------w-	c:\windows\system32\dllcache\msxml6.dll
2010-06-08 16:56 . 2009-07-31 04:32	1172480	------w-	c:\windows\system32\dllcache\msxml3.dll
2010-06-08 16:56 . 2008-10-15 16:35	337408	------w-	c:\windows\system32\dllcache\netapi32.dll
2010-06-08 16:56 . 2008-07-07 20:26	253952	------w-	c:\windows\system32\dllcache\es.dll
2010-06-08 16:56 . 2008-06-24 16:42	74240	------w-	c:\windows\system32\dllcache\mscms.dll
2010-06-08 16:56 . 2010-02-11 12:02	226880	------w-	c:\windows\system32\dllcache\tcpip6.sys
2010-06-08 16:56 . 2008-08-14 10:04	138496	------w-	c:\windows\system32\dllcache\afd.sys
2010-06-08 16:56 . 2008-06-20 17:46	247296	------w-	c:\windows\system32\dllcache\mswsock.dll
2010-06-08 16:56 . 2008-06-20 17:46	147968	------w-	c:\windows\system32\dllcache\dnsapi.dll
2010-06-08 16:56 . 2008-06-20 11:51	361600	------w-	c:\windows\system32\dllcache\tcpip.sys
2010-06-08 16:55 . 2008-06-14 17:37	273024	------w-	c:\windows\system32\dllcache\bthport.sys
2010-06-08 16:55 . 2009-12-24 06:59	177664	------w-	c:\windows\system32\dllcache\wintrust.dll
2010-06-08 16:55 . 2010-01-13 14:00	86528	------w-	c:\windows\system32\dllcache\cabview.dll
2010-06-08 16:50 . 2003-12-14 19:51	159744	----a-w-	c:\windows\system32\igfxres.dll
2010-06-08 15:03 . 2010-06-12 01:37	--------	d-----w-	c:\windows\system32\dllcache
2010-06-08 14:38 . 2007-10-29 12:00	13824	----a-w-	c:\windows\system32\irclass.dll
2010-06-08 14:38 . 2007-10-29 12:00	24661	----a-w-	c:\windows\system32\spxcoins.dll

.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-06-24 01:20 . 2007-10-29 12:00	84908	----a-w-	c:\windows\system32\perfc007.dat
2010-06-24 01:20 . 2007-10-29 12:00	459050	----a-w-	c:\windows\system32\perfh007.dat
2010-06-23 19:00 . 2010-02-21 12:29	--------	d-----w-	c:\programme\TTQV4
2010-06-20 15:19 . 2008-10-10 01:18	--------	d-----w-	c:\programme\Sandboxie
2010-06-18 23:28 . 2010-01-05 13:19	--------	d-----w-	c:\programme\mapedit1-0-57-3
2010-06-18 11:17 . 2010-06-18 11:17	388096	----a-r-	c:\dokumente und einstellungen\***\Anwendungsdaten\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2010-06-08 17:27 . 2009-12-07 22:42	--------	d-----w-	c:\dokumente und einstellungen\***\Anwendungsdaten\GlobalMapper
2010-06-08 14:59 . 2008-08-26 22:38	--------	d-----w-	c:\programme\Gemeinsame Dateien\Dienste
2010-06-08 14:57 . 2008-08-26 22:36	23504	----a-w-	c:\windows\system32\emptyregdb.dat
2010-06-08 14:56 . 2008-08-26 22:36	--------	d-----w-	c:\programme\Windows Media Connect 2
2010-05-21 22:47 . 2009-12-03 00:30	--------	d-----w-	c:\programme\xpdf-302pl4
2010-05-20 23:14 . 2010-05-20 23:14	--------	d-----w-	c:\programme\satmap_v2.3.7
2010-05-19 20:48 . 2010-01-30 15:52	--------	d-----w-	c:\programme\UnxUtils
2010-05-04 16:48 . 2008-06-18 08:36	841216	----a-w-	c:\windows\system32\wininet.dll
2010-05-04 16:48 . 2008-06-18 08:36	78336	----a-w-	c:\windows\system32\ieencode.dll
2010-05-04 16:48 . 2008-06-18 08:36	17408	----a-w-	c:\windows\system32\corpol.dll
2010-05-02 11:30 . 2008-06-18 08:35	1860480	----a-w-	c:\windows\system32\win32k.sys
2010-04-20 05:29 . 2008-04-14 05:50	285696	----a-w-	c:\windows\system32\atmfd.dll
2010-04-08 15:16 . 2010-04-16 01:00	1711232	----a-w-	c:\windows\system32\BootMan.exe
2010-04-07 19:08 . 2010-04-07 19:08	95872	----a-w-	c:\windows\system32\drivers\epfwtdir.sys
2010-04-07 19:07 . 2010-04-07 19:07	114984	----a-w-	c:\windows\system32\drivers\ehdrv.sys
2010-04-07 19:03 . 2010-04-07 19:03	139192	----a-w-	c:\windows\system32\drivers\eamon.sys
2010-03-30 22:16 . 2010-03-30 22:16	99176	----a-w-	c:\windows\system32\PresentationHostProxy.dll
2010-03-30 22:10 . 2010-03-30 22:10	295264	----a-w-	c:\windows\system32\PresentationHost.exe
2010-01-03 12:42 . 2009-06-12 00:09	0	-c--a-w-	c:\programme\lastdir
2009-06-11 22:40 . 2009-06-11 22:13	14243	----a-w-	c:\programme\RenameFiles.log
2009-06-11 21:23 . 2009-06-11 21:23	315392	----a-w-	c:\programme\renamefiles_v2.42_de.exe
2007-11-06 11:22 . 2008-11-06 03:15	49236	----a-w-	c:\programme\fat32format.exe
2007-08-27 09:29 . 2008-10-08 23:06	64751	----a-w-	c:\programme\compare.exe
2007-01-05 10:56 . 2008-10-08 23:14	1296896	----a-w-	c:\programme\COMPAREIT.exe
2007-01-04 13:16 . 2010-03-28 21:54	401408	----a-w-	c:\programme\SmartDisk_FAT32_tool.exe
.

((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SandboxieControl"="c:\programme\Sandboxie\SbieCtrl.exe" [2010-04-17 394984]
"LightScribe Control Panel"="c:\programme\Gemeinsame Dateien\LightScribe\LightScribeControlPanel.exe" [2007-10-18 455968]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"PCTVOICE"="pctspk.exe" [2003-02-24 163840]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2003-12-14 155648]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2003-12-14 118784]
"SynTPLpr"="c:\programme\Synaptics\SynTP\SynTPLpr.exe" [2004-10-14 98394]
"SynTPEnh"="c:\programme\Synaptics\SynTP\SynTPEnh.exe" [2004-10-14 688218]
"IntelZeroConfig"="c:\programme\Intel\Wireless\bin\ZCfgSvc.exe" [2007-11-01 995328]
"IntelWireless"="c:\programme\Intel\Wireless\Bin\ifrmewrk.exe" [2007-11-01 1101824]
"Panasonic Hotkey Manager"="c:\programme\Panasonic\Hotkey Appendix\HKEYAPP.EXE" [2007-08-23 976264]
"WSwitch"="c:\programme\Panasonic\WSwitch\WSwitch.exe" [2007-12-19 734568]
"PCinfo"="c:\programme\Panasonic\PCINFO\SetDiag.exe" [2004-01-28 45056]
"NeroFilterCheck"="c:\programme\Gemeinsame Dateien\Ahead\Lib\NeroCheck.exe" [2007-03-01 153136]
"SecurDisc"="c:\programme\Nero\Nero 7\InCD\NBHGui.exe" [2007-06-01 1629744]
"InCD"="c:\programme\Nero\Nero 7\InCD\InCD.exe" [2007-06-01 1057328]
"VirtualCloneDrive"="c:\programme\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" [2008-06-29 52168]
"HPDJ Taskbar Utility"="c:\windows\system32\spool\drivers\w32x86\3\hpztsb04.exe" [2001-12-11 196608]
"Adobe Reader Speed Launcher"="c:\programme\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2010-04-04 36272]
"Adobe ARM"="c:\programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe" [2010-03-24 952768]
"egui"="c:\programme\ESET\ESET NOD32 Antivirus\egui.exe" [2010-04-07 2145000]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"ShowDeskFix"="shell32" [X]
"nltide_3"="advpack.dll" [2010-05-04 124928]
"IE7"="advpack.dll" [2010-05-04 124928]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"midi9"=c:\dokume~1\***\LOKALE~1\Temp\org.bak 2yAPFDOFNF

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute	REG_MULTI_SZ   	autocheck autochk *\0sprestrt

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Programme\\Java\\jre1.6.0_06\\bin\\java.exe"=
"c:\\Programme\\eMule0.49b\\emule.exe"=
"c:\\Programme\\Opera\\opera.exe"=
"c:\\Programme\\Java\\jre1.6.0_06\\launch4j-tmp\\JDownloader.exe"=
"c:\\WINDOWS\\system32\\java.exe"=
"c:\\Programme\\WinSCP\\WinSCP.exe"=

R0 hotcore3;hc3ServiceName;c:\windows\system32\drivers\hotcore3.sys [18.03.2010 04:19 40560]
R1 ehdrv;ehdrv;c:\windows\system32\drivers\ehdrv.sys [07.04.2010 21:07 114984]
R1 epfwtdir;epfwtdir;c:\windows\system32\drivers\epfwtdir.sys [07.04.2010 21:08 95872]
R2 brecal;Panasonic Battery Recalibration Driver;c:\programme\Panasonic\BRECAL\Brecal.sys [28.08.2008 15:10 7168]
R2 ekrn;ESET Service;c:\programme\ESET\ESET NOD32 Antivirus\ekrn.exe [07.04.2010 21:07 810120]
R2 pcinfo;Panasonic PC Info. Viewer Driver;c:\programme\Panasonic\PCINFO\PCINFO.sys [28.08.2008 15:27 7168]
R2 WMDrive;WMDrive;c:\windows\system32\drivers\WMDrive.sys [20.10.2008 13:24 88832]
R3 AVMWAN;AVM NDIS WAN CAPI-Treiber;c:\windows\system32\drivers\avmwan.sys [15.01.2009 19:23 37568]
R3 NewMisc;Panasonic Misc Driver;c:\windows\system32\drivers\newmisc.sys [28.08.2008 14:24 50440]
S3 epmntdrv;epmntdrv;c:\windows\system32\epmntdrv.sys [16.04.2010 03:00 13192]
S3 EuGdiDrv;EuGdiDrv;c:\windows\system32\EuGdiDrv.sys [16.04.2010 03:00 8456]
S3 fpcmbase;AVM ISDN-Controller FRITZ!Card PCMCIA;c:\windows\system32\drivers\fpcmbase.sys [15.01.2009 19:22 441728]
S3 MEMSWEEP2;MEMSWEEP2;\??\c:\windows\system32\4.tmp --> c:\windows\system32\4.tmp [?]
S3 UltraCrypt;UltraCrypt;\??\c:\programme\UltraLeecher\UltraCrypt.sys --> c:\programme\UltraLeecher\UltraCrypt.sys [?]
S3 WinRM;Windows-Remoteverwaltung (WS-Verwaltung);c:\windows\System32\svchost.exe -k WinRM [14.04.2008 07:53 14336]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
WINRM	REG_MULTI_SZ   	WINRM

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
2007-10-18 13:25	451872	----a-w-	c:\programme\Gemeinsame Dateien\LightScribe\LSRunOnce.exe
.
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = hxxp://www.google.de/
TCP: {D9AE09D2-9DAE-46C5-93FE-0DC1FCBB848E} = 217.0.43.161 217.0.43.177
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -

HKU-Default-RunOnce-tscuninstall - c:\windows\system32\tscupgrd.exe
AddRemove-hp deskjet 930c series - c:\programme\hp deskjet 930c series\hpfiui.exe



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, hxxp://www.gmer.net
Rootkit scan 2010-06-25 23:58
Windows 5.1.2600 Service Pack 3 NTFS

Scanne versteckte Prozesse... 

Scanne versteckte Autostarteinträge... 

Scanne versteckte Dateien... 

Scan erfolgreich abgeschlossen
versteckte Dateien: 0

**************************************************************************

[HKEY_LOCAL_MACHINE\System\ControlSet003\Services\MEMSWEEP2]
"ImagePath"="\??\c:\windows\system32\4.tmp"
.
--------------------- Durch laufende Prozesse gestartete DLLs ---------------------

- - - - - - - > 'winlogon.exe'(784)
c:\windows\system32\netprovcredman.dll

- - - - - - - > 'explorer.exe'(732)
c:\programme\Windows Media Player\wmpband.dll
c:\windows\system32\msi.dll
c:\windows\system32\wpdshserviceobj.dll
c:\programme\WinSCP\DragExt.dll
c:\windows\system32\portabledevicetypes.dll
c:\windows\system32\portabledeviceapi.dll
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\programme\Intel\Wireless\Bin\S24EvMon.exe
c:\programme\Intel\Wireless\Bin\EvtEng.exe
c:\programme\Nero\Nero 7\InCD\InCDsrv.exe
c:\programme\Gemeinsame Dateien\LightScribe\LSSrvc.exe
c:\programme\Intel\Wireless\Bin\RegSrvc.exe
c:\programme\Sandboxie\SbieSvc.exe
c:\windows\system32\pctspk.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2010-06-26  00:05:26 - PC wurde neu gestartet
ComboFix-quarantined-files.txt  2010-06-25 22:05

Vor Suchlauf: 8.527.527.936 Bytes frei
Nach Suchlauf: 8.848.887.808 Bytes frei

WindowsXP-KB310994-SP2-Pro-BootDisk-DEU.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect

- - End Of File - - 914E63082233DBCC1FC83442D2E4C5E2
         

C:\Qoobox\Quarantine\C\DOKUME~1\***\LOKALE~1\Temp\org.bak.vir - Variante von Win32/Daonol.CY Trojaner - Gesäubert durch Löschen - in Quarantäne kopiert [1]