Umleitung auf Seiten wie netwere.com, Seite nicht gefunden im Firefox und IE

Combofix Logfile:

	
Code: 

Alles auswählenAufklappen 
ATTFilter

  
	
ComboFix 10-09-17.04 - COMPUTERUSER 18.09.2010  14:46:20.2.4 - x86
Microsoft Windows 7 Professional   6.1.7600.0.1252.49.1031.18.3579.2387 [GMT 2:00]
ausgeführt von:: d:\users\COMPUTERUSER\Desktop\ComboFix.exe
Benutzte Befehlsschalter :: d:\users\COMPUTERUSER\Desktop\cfscript.txt
.

((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.

.
(((((((((((((((((((((((((((((((((((((((   Treiber/Dienste   )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_RYEIV
-------\Service_ryeiv
-------\Service_ztorvpsabtdg3


(((((((((((((((((((((((   Dateien erstellt von 2010-08-18 bis 2010-09-18  ))))))))))))))))))))))))))))))
.

2010-09-18 12:59 . 2010-09-18 12:59	--------	d-----w-	d:\users\Public\AppData\Local\temp
2010-09-18 12:59 . 2010-09-18 12:59	--------	d-----w-	d:\users\Default\AppData\Local\temp
2010-09-18 12:59 . 2010-09-18 12:59	--------	d-----w-	d:\users\bla\AppData\Local\temp
2010-09-18 12:16 . 2010-09-18 13:01	--------	d-----w-	d:\users\COMPUTERUSER\AppData\Local\temp
2010-09-18 08:34 . 2010-09-18 12:43	--------	d-----w-	d:\program files\Spybot - Search & Destroy
2010-09-18 08:34 . 2010-09-18 12:40	--------	d-----w-	d:\programdata\Spybot - Search & Destroy
2010-09-17 14:49 . 2010-08-12 12:15	15880	----a-w-	d:\windows\system32\lsdelete.exe
2010-09-17 14:34 . 2010-08-12 12:15	64288	----a-w-	d:\windows\system32\drivers\Lbd.sys
2010-09-17 14:34 . 2010-09-17 14:34	95024	----a-w-	d:\windows\system32\drivers\SBREDrv.sys
2010-09-17 14:31 . 2010-09-17 14:31	--------	d-----w-	d:\users\COMPUTERUSER\AppData\Local\Sunbelt Software
2010-09-17 14:31 . 2010-09-17 14:31	--------	dc-h--w-	d:\programdata\{ECC164E0-3133-4C70-A831-F08DB2940F70}
2010-09-17 14:30 . 2010-09-17 14:34	--------	d-----w-	d:\programdata\Lavasoft
2010-09-17 14:30 . 2010-09-17 14:30	--------	d-----w-	d:\program files\Lavasoft
2010-09-17 14:26 . 2010-09-17 14:26	--------	d-----w-	d:\programdata\F-Secure
2010-09-17 14:05 . 2010-09-17 21:53	--------	d-----w-	d:\program files\Emsisoft Anti-Malware
2010-09-17 10:54 . 2010-09-17 10:54	--------	d-----w-	d:\program files\MSXML 4.0
2010-09-17 10:52 . 2009-08-03 05:49	2613248	----a-w-	d:\windows\explorer.exe
2010-09-17 10:43 . 2010-09-17 10:43	--------	d-----w-	d:\users\COMPUTERUSER\AppData\Roaming\Malwarebytes
2010-09-17 10:43 . 2010-04-29 13:39	38224	----a-w-	d:\windows\system32\drivers\mbamswissarmy.sys
2010-09-17 10:43 . 2010-09-17 10:43	--------	d-----w-	d:\program files\Malwarebytes' Anti-Malware
2010-09-17 10:43 . 2010-09-17 10:43	--------	d-----w-	d:\programdata\Malwarebytes
2010-09-17 10:43 . 2010-04-29 13:39	20952	----a-w-	d:\windows\system32\drivers\mbam.sys
2010-09-17 10:02 . 2010-09-18 12:59	842240	----a-w-	d:\windows\system32\drivers\ryeiv.sys
2010-09-15 17:40 . 2010-09-15 17:40	--------	d-----w-	d:\program files\Hex-Editor MX
2010-09-15 17:01 . 2010-09-15 17:01	--------	d-----w-	d:\program files\Game Graphic Studio
2010-09-13 19:57 . 2010-09-15 14:52	--------	d-----w-	d:\users\COMPUTERUSER\AppData\Local\AirVideoServer
2010-09-13 17:59 . 2010-09-13 17:59	56	---ha-w-	d:\windows\system32\ezsidmv.dat
2010-09-13 17:59 . 2010-09-13 17:59	--------	d-----w-	d:\users\COMPUTERUSER\AppData\Roaming\skypePM
2010-09-13 17:58 . 2010-09-15 20:24	--------	d-----w-	d:\users\COMPUTERUSER\AppData\Roaming\Skype
2010-09-13 17:58 . 2010-09-13 17:58	--------	d-----r-	d:\program files\Skype
2010-09-13 17:58 . 2010-09-13 17:58	--------	d-----w-	d:\program files\Common Files\Skype
2010-09-13 17:58 . 2010-09-13 17:58	--------	d-----w-	d:\programdata\Skype
2010-09-08 16:51 . 2010-09-08 16:51	--------	d-----w-	D:\Poker
2010-09-07 14:13 . 2010-09-07 14:13	--------	d-----w-	d:\program files\Belkin
2010-09-07 14:13 . 2009-08-21 21:57	573440	----a-w-	d:\windows\system32\drivers\RTL8192su.sys
2010-09-05 10:01 . 2010-09-05 10:01	--------	d-----w-	d:\program files\MSI
2010-09-05 09:43 . 2010-09-05 09:43	--------	d-----w-	d:\programdata\Futuremark
2010-09-05 09:36 . 2010-09-05 09:36	--------	d-----w-	d:\windows\system32\Futuremark
2010-09-05 09:36 . 2010-09-05 09:36	--------	d-----w-	d:\program files\Common Files\Futuremark Shared
2010-09-05 09:36 . 2008-04-22 06:53	27672	----a-r-	d:\windows\system32\drivers\Entech.sys
2010-09-05 09:36 . 2010-09-05 09:36	--------	d-----w-	d:\program files\Futuremark
2010-09-05 09:35 . 2010-09-05 09:35	--------	d-----w-	d:\windows\45235788142C44BE8A4DDDE9A84492E5.TMP
2010-09-05 09:35 . 2010-09-05 09:35	--------	d-----w-	d:\program files\Common Files\Wise Installation Wizard
2010-09-04 17:55 . 2010-09-04 17:55	--------	d-----w-	d:\program files\Microsoft Chart Controls
2010-09-04 17:55 . 2010-09-04 17:55	--------	d-----w-	D:\UDK
2010-08-31 20:16 . 2010-08-31 20:16	--------	d-----w-	d:\users\COMPUTERUSER\AppData\Roaming\Leadertech
2010-08-30 17:14 . 2010-08-30 17:14	--------	d-----w-	d:\programdata\ATI
2010-08-30 16:39 . 2010-08-30 16:39	--------	d-----w-	d:\program files\Common Files\ATI Technologies
2010-08-30 16:38 . 2010-08-30 16:39	--------	d-----w-	d:\program files\ATI Technologies
2010-08-29 10:15 . 2010-08-29 10:15	--------	d-----w-	d:\users\COMPUTERUSER\AppData\Roaming\MAGIX
2010-08-29 10:12 . 2010-08-29 10:12	--------	d-----w-	d:\users\COMPUTERUSER\AppData\Local\Xara
2010-08-29 10:11 . 2010-08-29 10:12	--------	d-----w-	d:\program files\Common Files\MAGIX Shared
2010-08-29 10:11 . 2010-08-29 10:11	--------	d-----w-	d:\program files\Common Files\xara
2010-08-29 09:58 . 2010-08-29 10:12	--------	d-----w-	d:\programdata\MAGIX
2010-08-29 09:57 . 2010-08-29 10:12	--------	d-----w-	d:\program files\MAGIX
2010-08-29 09:57 . 2007-04-27 08:43	120200	----a-w-	d:\windows\system32\DLLDEV32i.dll
2010-08-29 09:57 . 2010-08-29 10:15	--------	d-----w-	d:\program files\Common Files\MAGIX Services
2010-08-27 15:57 . 2010-08-27 15:57	--------	d-----w-	d:\programdata\Sports Interactive
2010-08-27 15:50 . 2010-08-27 15:52	--------	d--h--w-	d:\program files\Zero G Registry
2010-08-27 15:50 . 2010-08-27 15:50	--------	d-----w-	d:\program files\Sports Interactive
2010-08-27 15:50 . 2010-08-27 15:50	--------	d--h--w-	d:\users\COMPUTERUSER\InstallAnywhere
2010-08-27 15:49 . 2010-08-27 15:56	--------	d-----w-	d:\users\COMPUTERUSER\AppData\Roaming\Sports Interactive
2010-08-27 15:12 . 2010-08-27 15:12	--------	d-----w-	d:\program files\SoftMaker Viewer
2010-08-27 15:12 . 2010-02-03 16:27	68640	----a-w-	d:\windows\unTMV.exe
2010-08-27 11:48 . 2010-08-27 11:48	--------	d-----w-	d:\program files\PES 2010 Editor
2010-08-25 20:12 . 2010-08-25 20:12	--------	d-----w-	d:\program files\2K Games

.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-09-18 12:41 . 2010-05-03 15:40	--------	d-----w-	d:\program files\Google
2010-09-18 12:31 . 2009-12-20 01:19	--------	d-----w-	d:\program files\Mozilla Thunderbird
2010-09-17 14:49 . 2009-12-25 12:15	--------	d-----w-	d:\program files\Steamless Left4Dead Pack
2010-09-17 13:49 . 2009-12-25 12:05	--------	d-----w-	d:\program files\Steamless CounterStrikeSource Pack
2010-09-17 13:01 . 2009-07-14 02:37	--------	d-----w-	d:\program files\Windows Mail
2010-09-15 17:24 . 2010-02-04 21:31	--------	d-----w-	d:\program files\EA SPORTS
2010-09-15 15:10 . 2009-12-20 12:53	--------	d-----w-	d:\program files\KONAMI
2010-09-13 19:59 . 2009-12-29 10:21	--------	d-----w-	d:\users\COMPUTERUSER\AppData\Roaming\vlc
2010-09-10 21:28 . 2010-02-15 11:39	--------	d-----w-	d:\program files\Full Tilt Poker
2010-09-09 07:22 . 2009-07-14 08:47	774312	----a-w-	d:\windows\system32\perfh007.dat
2010-09-09 07:22 . 2009-07-14 08:47	170574	----a-w-	d:\windows\system32\perfc007.dat
2010-09-08 15:09 . 2009-12-20 13:41	--------	d-----w-	d:\program files\JDownloader
2010-09-07 14:13 . 2009-12-22 14:14	--------	d--h--w-	d:\program files\InstallShield Installation Information
2010-08-31 14:58 . 2009-12-24 14:05	--------	d-----w-	d:\program files\Steam
2010-08-29 13:24 . 2009-12-20 13:22	125352	----a-w-	d:\users\COMPUTERUSER\AppData\Local\GDIPFONTCACHEV1.DAT
2010-08-15 12:38 . 2010-08-15 12:38	--------	d-----w-	d:\program files\Common Files\EZB Systems
2010-08-15 12:38 . 2010-08-15 12:38	--------	d-----w-	d:\program files\UltraISO
2010-08-11 17:27 . 2010-08-11 17:27	--------	d-----w-	d:\program files\NVIDIA Corporation
2010-08-08 17:50 . 2010-08-06 09:33	--------	d-----w-	d:\programdata\Rosetta Stone
2010-08-08 11:50 . 2010-08-08 11:50	--------	d-----w-	d:\program files\The Rosetta Stone v2
2010-08-07 16:43 . 2010-08-07 16:43	--------	d-----w-	d:\program files\Rosetta Stone
2010-08-04 18:09 . 2010-08-04 18:09	--------	d-----w-	d:\program files\Senstic
2010-08-04 02:21 . 2010-08-04 02:21	6096384	----a-w-	d:\windows\system32\drivers\atikmdag.sys
2010-08-04 01:55 . 2010-08-04 01:55	143360	----a-w-	d:\windows\system32\atiapfxx.exe
2010-08-04 01:54 . 2010-08-04 01:54	519680	----a-w-	d:\windows\system32\aticfx32.dll
2010-08-04 01:52 . 2010-08-04 01:52	450560	----a-w-	d:\windows\system32\ATIDEMGX.dll
2010-08-04 01:51 . 2010-08-04 01:51	380928	----a-w-	d:\windows\system32\atieclxx.exe
2010-08-04 01:51 . 2010-08-04 01:51	176128	----a-w-	d:\windows\system32\atiesrxx.exe
2010-08-04 01:50 . 2010-08-04 01:50	159744	----a-w-	d:\windows\system32\atitmmxx.dll
2010-08-04 01:49 . 2009-11-25 03:15	356352	----a-w-	d:\windows\system32\atipdlxx.dll
2010-08-04 01:49 . 2010-08-04 01:49	15845888	----a-w-	d:\windows\system32\atioglxx.dll
2010-08-04 01:49 . 2010-08-04 01:49	278528	----a-w-	d:\windows\system32\Oemdspif.dll
2010-08-04 01:49 . 2010-08-04 01:49	11776	----a-w-	d:\windows\system32\atimuixx.dll
2010-08-04 01:49 . 2010-08-04 01:49	43520	----a-w-	d:\windows\system32\ati2edxx.dll
2010-08-04 01:46 . 2010-08-04 01:46	3899392	----a-w-	d:\windows\system32\atidxx32.dll
2010-08-04 01:28 . 2010-08-04 01:28	4021760	----a-w-	d:\windows\system32\atiumdag.dll
2010-08-04 01:26 . 2010-08-04 01:26	46080	----a-w-	d:\windows\system32\aticalrt.dll
2010-08-04 01:25 . 2010-08-04 01:25	44032	----a-w-	d:\windows\system32\aticalcl.dll
2010-08-04 01:24 . 2010-08-04 01:24	4341248	----a-w-	d:\windows\system32\aticaldd.dll
2010-08-04 01:23 . 2010-08-04 01:23	65536	----a-w-	d:\windows\system32\coinst.dll
2010-08-04 01:21 . 2010-08-04 01:21	3324416	----a-w-	d:\windows\system32\atiumdva.dll
2010-08-04 01:16 . 2010-08-04 01:16	241664	----a-w-	d:\windows\system32\atiadlxx.dll
2010-08-04 01:15 . 2010-08-04 01:15	12800	----a-w-	d:\windows\system32\atiglpxx.dll
2010-08-04 01:15 . 2010-08-04 01:15	16896	----a-w-	d:\windows\system32\atigktxx.dll
2010-08-04 01:15 . 2010-08-04 01:15	214016	----a-w-	d:\windows\system32\drivers\atikmpag.sys
2010-08-04 01:15 . 2010-08-04 01:15	30208	----a-w-	d:\windows\system32\atiuxpag.dll
2010-08-04 01:14 . 2010-08-04 01:14	27648	----a-w-	d:\windows\system32\atiu9pag.dll
2010-08-04 01:14 . 2010-08-04 01:14	53248	----a-w-	d:\windows\system32\drivers\ati2erec.dll
2010-08-04 01:09 . 2010-08-04 01:09	52736	----a-w-	d:\windows\system32\atimpc32.dll
2010-08-04 01:09 . 2010-08-04 01:09	52736	----a-w-	d:\windows\system32\amdpcom32.dll
2010-08-03 15:32 . 2010-08-03 15:32	--------	d-sh--w-	d:\programdata\SecuROM
2010-08-03 15:31 . 2009-12-28 18:24	--------	d-----w-	d:\program files\Microsoft Games for Windows - LIVE
2010-07-30 18:32 . 2010-02-12 16:46	34	----a-w-	d:\windows\system32\BD2140.DAT
2010-07-30 12:39 . 2010-07-30 09:02	--------	d-----w-	d:\program files\Gothic III
2010-07-29 11:45 . 2010-07-29 11:45	--------	d-----w-	d:\program files\drahtwerk
2010-07-28 20:09 . 2010-07-22 21:24	--------	d-----w-	d:\users\COMPUTERUSER\AppData\Roaming\HandBrake
2010-07-24 19:15 . 2010-07-11 13:23	--------	d-----w-	d:\program files\SpeedFan
2010-07-22 21:24 . 2010-07-22 21:24	--------	d-----w-	d:\program files\Handbrake
2010-07-15 12:47 . 2010-07-15 12:47	101904	----a-w-	d:\windows\system32\drivers\AtihdW73.sys
2010-06-29 10:31 . 2010-07-31 17:10	506566	----a-w-	D:\players.dat
2010-06-29 10:31 . 2010-07-31 17:10	9234	----a-w-	D:\names.dat
2009-06-10 21:26 . 2009-07-14 02:04	9633792	--sha-r-	d:\windows\Fonts\StaticCache.dat
2009-07-14 01:14 . 2009-07-13 23:42	396800	--sha-w-	d:\windows\winsxs\x86_microsoft-windows-mail-app_31bf3856ad364e35_6.1.7600.16385_none_f12e83abb108c86c\WinMail.exe
.

((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AirVideoServer"="d:\program files\AirVideoServer\AirVideoServer.exe" [2010-09-14 4922760]
"AtiTrayTools"="d:\program files\Ray Adams\ATI Tray Tools\atitray.exe" [2010-04-22 883200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Adobe Reader Speed Launcher"="d:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-10-03 35696]
"avast!"="d:\program files\Alwil Software\Avast4\ashDisp.exe" [2009-11-24 81000]
"QuickTime Task"="d:\program files\QuickTime\QTTask.exe" [2010-03-18 421888]
"iTunesHelper"="d:\program files\iTunes\iTunesHelper.exe" [2010-06-15 141624]
"TrayServer"="d:\program files\MAGIX\Video_deluxe_16_Premium\TrayServer.exe" [2008-08-07 90112]
"StartCCC"="d:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2010-08-03 98304]

d:\users\COMPUTERUSER\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
MagicDisc.lnk - d:\program files\MagicDisc\MagicDisc.exe [2009-12-20 576000]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]
@="Service"

[HKLM\~\startupfolder\D:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^VPN Client.lnk]
path=d:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\VPN Client.lnk
backup=d:\windows\pss\VPN Client.lnk.CommonStartup
backupExtension=.CommonStartup

[HKLM\~\startupfolder\D:^Users^COMPUTERUSER^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Antimalware Doctor.lnk]
path=d:\users\COMPUTERUSER\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Antimalware Doctor.lnk
backup=d:\windows\pss\Antimalware Doctor.lnk.Startup
backupExtension=.Startup

[HKLM\~\startupfolder\D:^Users^COMPUTERUSER^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^WinUpdate.lnk]
path=d:\users\COMPUTERUSER\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\WinUpdate.lnk
backup=d:\windows\pss\WinUpdate.lnk.Startup
backupExtension=.Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EA Core]
2009-09-03 21:17	3342336	----a-w-	d:\program files\Electronic Arts\EADM\Core.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Livestream Procaster]
2010-04-08 12:38	6690080	----a-w-	d:\program files\Livestream Procaster\Procaster.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PtiuPbmd]
2009-11-07 15:21	110592	----a-w-	d:\windows\System32\ulutil2.dll

R2 gupdate;Google Update Service (gupdate);d:\program files\Google\Update\GoogleUpdate.exe [2010-05-03 136176]
R3 clr_optimization_v4.0.20506_32;.NET Runtime Optimization Service v4.0.20506_X86;d:\windows\Microsoft.NET\Framework\v4.0.20506\mscorsvw.exe [2009-05-06 104272]
R3 etdrv;etdrv;d:\windows\etdrv.sys [2010-06-10 17488]
R3 FirebirdServerMAGIXInstance;Firebird Server - MAGIX Instance;d:\program files\Common Files\MAGIX Services\Database\bin\fbserver.exe [2008-08-07 3276800]
R3 FLASHSYS;FLASHSYS;d:\program files\MSI\Live Update 4\LU4\FLASHSYS.sys [2007-12-14 9216]
R3 Lavasoft Kernexplorer;Lavasoft helper driver;d:\program files\Lavasoft\Ad-Aware\KernExplorer.sys [2010-08-12 15008]
R3 libusb0;LibUsb-Win32 - Kernel Driver, Version 0.1.12.2;d:\windows\system32\drivers\libusb0.sys [2009-07-07 28160]
R3 RTL8167;Realtek 8167 NT Driver;d:\windows\system32\DRIVERS\Rt86win7.sys [2009-03-01 139776]
R4 MSSQLServerADHelper100;SQL Active Directory Helper Service;d:\program files\Microsoft SQL Server\100\Shared\SQLADHLP.EXE [2008-07-10 47128]
R4 msvsmon100;Visual Studio 10 Remote Debugger;d:\program files\Microsoft Visual Studio 10.0\Common7\IDE\Remote Debugger\x86\msvsmon.exe [2009-05-06 3342672]
R4 RsFx0102;RsFx0102 Driver;d:\windows\system32\DRIVERS\RsFx0102.sys [2008-07-10 242712]
S0 dontgo;Promise Removable Disk Control Driver;d:\windows\system32\DRIVERS\DontGo.sys [2009-11-07 7680]
S0 Lbd;Lbd;d:\windows\system32\DRIVERS\Lbd.sys [2010-08-12 64288]
S1 aswSP;avast! Self Protection; [x]
S1 atitray;atitray;d:\program files\Ray Adams\ATI Tray Tools\atitray.sys [2010-04-22 19232]
S2 AMD External Events Utility;AMD External Events Utility;d:\windows\system32\atiesrxx.exe [2010-08-04 176128]
S2 aswFsBlk;aswFsBlk;d:\windows\system32\DRIVERS\aswFsBlk.sys [2009-11-24 20560]
S2 aswMonFlt;aswMonFlt;d:\windows\system32\DRIVERS\aswMonFlt.sys [2009-11-24 53328]
S2 Fabs;FABS - Helping agent for MAGIX media database;d:\program files\Common Files\MAGIX Services\Database\bin\FABS.exe [2009-05-06 1220608]
S2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;d:\program files\Lavasoft\Ad-Aware\AAWService.exe [2010-09-17 1355928]
S2 mi-raysat_3dsmax2010_32;mental ray 3.7 Satellite for Autodesk 3ds Max 2010 32-bit 32-bit;d:\program files\Autodesk\3ds Max 2010\mentalray\satellite\raysat_3dsmax2010_32server.exe [2009-04-13 86016]
S3 amdkmdag;amdkmdag;d:\windows\system32\DRIVERS\atikmdag.sys [2010-08-04 6096384]
S3 amdkmdap;amdkmdap;d:\windows\system32\DRIVERS\atikmpag.sys [2010-08-04 214016]
S3 AtiHDAudioService;ATI Function Driver for HD Audio Service;d:\windows\system32\drivers\AtihdW73.sys [2010-07-15 101904]
S3 RTL8192su;Realtek RTL8192SU Wireless LAN 802.11n USB 2.0 Network Adapter;d:\windows\system32\DRIVERS\RTL8192su.sys [2009-08-21 573440]

.
Inhalt des "geplante Tasks" Ordners

2010-09-18 d:\windows\Tasks\Ad-Aware Update (Weekly).job
- d:\program files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2010-08-12 14:34]

2010-09-18 d:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- d:\program files\Google\Update\GoogleUpdate.exe [2010-05-03 15:40]

2010-09-18 d:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- d:\program files\Google\Update\GoogleUpdate.exe [2010-05-03 15:40]
.
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = hxxp://www.google.de/
uInternet Settings,ProxyOverride = local
IE: Nach Microsoft E&xel exportieren - d:\progra~1\MICROS~1\Office12\EXCEL.EXE/3000
FF - ProfilePath - d:\users\COMPUTERUSER\AppData\Roaming\Mozilla\Firefox\Profiles\uy4idjn0.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.google.de/
FF - prefs.js: network.proxy.http - localhost
FF - prefs.js: network.proxy.http_port - 9666
FF - prefs.js: network.proxy.socks - localhost
FF - prefs.js: network.proxy.socks_port - 9050
FF - prefs.js: network.proxy.ssl - localhost
FF - prefs.js: network.proxy.ssl_port - 9666
FF - prefs.js: network.proxy.type - 0
FF - plugin: d:\program files\Google\Update\1.2.183.29\npGoogleOneClick8.dll
FF - plugin: d:\program files\Mozilla Firefox\plugins\np-mswmp.dll
FF - plugin: d:\users\COMPUTERUSER\AppData\Roaming\Mozilla\Firefox\Profiles\uy4idjn0.default\extensions\firefox@tvunetworks.com\plugins\npTVUAx.dll
FF - plugin: d:\windows\Microsoft.NET\Framework\v4.0.20506\WPF\NPWPF.dll
FF - plugin: d:\windows\system32\TVUAx\npTVUAx.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - d:\windows\Microsoft.NET\Framework\v4.0.20506\WPF\DotNetAssistantExtension\

---- FIREFOX Richtlinien ----
d:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbaam7a8h", true); 
d:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4ar", true); 
d:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled", false);
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------

[HKEY_USERS\S-1-5-21-3818628217-2300615742-2899095416-1000\Software\SecuROM\License information*]
"datasecu"=hex:7d,84,6f,2e,f4,a6,32,fe,df,b8,64,14,99,77,fe,78,f2,b1,ab,83,06,
   93,f9,33,b2,83,b4,8d,95,f9,7d,7f,62,dc,ba,7e,54,26,31,ff,e1,10,4f,3c,8d,16,\
"rkeysecu"=hex:04,e9,5b,19,54,32,1b,45,c7,30,5a,1e,b9,23,65,8d

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
--------------------- Durch laufende Prozesse gestartete DLLs ---------------------

- - - - - - - > 'Explorer.exe'(3692)
d:\program files\Ray Adams\ATI Tray Tools\raphook.dll
d:\program files\WinSCP\DragExt.dll
.
------------------------ Weitere laufende Prozesse ------------------------
.
d:\program files\Alwil Software\Avast4\aswUpdSv.exe
d:\program files\Alwil Software\Avast4\ashServ.exe
d:\windows\system32\atieclxx.exe
d:\program files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
d:\program files\Bonjour\mDNSResponder.exe
d:\program files\Cisco Systems\VPN Client\cvpnd.exe
d:\program files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe
d:\program files\Microsoft SQL Server\90\Shared\sqlwriter.exe
d:\windows\system32\taskhost.exe
d:\windows\system32\wbem\unsecapp.exe
d:\windows\system32\conhost.exe
d:\program files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
d:\program files\Alwil Software\Avast4\ashWebSv.exe
d:\program files\Alwil Software\Avast4\ashMaiSv.exe
d:\program files\iPod\bin\iPodService.exe
d:\program files\Windows Media Player\wmpnetwk.exe
d:\program files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
d:\program files\Lavasoft\Ad-Aware\AAWTray.exe
d:\windows\system32\taskhost.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2010-09-18  15:08:57 - PC wurde neu gestartet
ComboFix-quarantined-files.txt  2010-09-18 13:08
ComboFix2.txt  2010-09-18 12:26

Vor Suchlauf: 30 Verzeichnis(se), 306.220.003.328 Bytes frei
Nach Suchlauf: 31 Verzeichnis(se), 305.605.779.456 Bytes frei

- - End Of File - - 868775E4E56B56AEA77E88CFCC5A4D51
         
 
--- --- ---