Firefox öffnet ungewollt Websites + Generic Host Problem

ComboFix 10-10-31.04 - *** 01.11.2010  20:00:37.3.2 - x86
Microsoft Windows XP Home Edition  5.1.2600.2.1252.49.1031.18.502.213 [GMT 1:00]
ausgeführt von:: c:\dokumente und einstellungen\***\Desktop\Combo-Fix.exe
AV: AntiVir Desktop *On-access scanning disabled* (Updated) {AD166499-45F9-482A-A743-FDD3350758C7}
.

((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\system32\components

.
\\.\PhysicalDrive0 - Bootkit TDL4 was found and disinfected
.
(((((((((((((((((((((((   Dateien erstellt von 2010-10-01 bis 2010-11-01  ))))))))))))))))))))))))))))))
.

2010-11-01 18:59 . 2010-11-01 18:59	--------	d-----w-	c:\windows\LastGood
2010-10-31 08:57 . 2010-10-31 08:57	--------	d-----w-	c:\windows\system32\uninstall
2010-10-31 08:57 . 2010-10-31 08:57	--------	d-----w-	c:\windows\system32\plugins
2010-10-31 08:57 . 2010-10-31 08:57	--------	d-----w-	c:\windows\system32\chrome
2010-10-26 21:30 . 2010-10-26 21:31	--------	d-----w-	C:\AVZ
2010-10-26 21:07 . 2010-10-26 21:05	80384	----a-w-	c:\windows\system32\mbr.exe
2010-10-25 21:00 . 2010-10-25 21:21	--------	d-----w-	c:\windows\BDOSCAN8
2010-10-25 07:34 . 2010-10-25 07:58	--------	d-----w-	c:\dokumente und einstellungen\All Users\Anwendungsdaten\WinZip
2010-10-24 11:02 . 2010-10-24 11:02	--------	d-----w-	c:\windows\system32\config\systemprofile\Anwendungsdaten\Softland
2010-10-22 13:40 . 2010-10-30 20:54	--------	d-----w-	c:\dokumente und einstellungen\Internet
2010-10-22 12:35 . 2004-03-08 23:00	662288	----a-w-	c:\windows\system32\MSCOMCT2.OCX
2010-10-22 12:35 . 2001-10-28 15:42	116224	----a-w-	c:\windows\system32\pdfcmnnt.dll
2010-10-22 12:35 . 1998-06-23 23:00	137000	----a-w-	c:\windows\system32\MSMAPI32.OCX
2010-10-22 12:35 . 1998-07-06 16:56	125712	----a-w-	c:\windows\system32\VB6DE.DLL
2010-10-22 12:35 . 1998-07-06 16:55	158208	----a-w-	c:\windows\system32\MSCMCDE.DLL
2010-10-22 12:35 . 1998-07-06 16:55	64512	----a-w-	c:\windows\system32\MSCC2DE.DLL
2010-10-22 12:35 . 1998-07-05 23:00	23552	----a-w-	c:\windows\system32\MSMPIDE.DLL
2010-10-22 12:35 . 2010-10-22 12:36	--------	d-----w-	c:\programme\PDFCreator
2010-10-22 12:07 . 2010-10-22 12:07	--------	d-----w-	c:\programme\Gemeinsame Dateien\Adobe
2010-10-22 11:47 . 2010-10-22 11:47	--------	d-----w-	c:\dokumente und einstellungen\LocalService\Anwendungsdaten\Softland
2010-10-22 11:47 . 2010-02-05 13:00	1700352	----a-w-	c:\windows\system32\GdiPlus.dll
2010-10-22 11:47 . 2010-10-22 11:47	--------	d-----w-	c:\programme\Softland
2010-10-22 08:41 . 2010-04-29 13:39	38224	----a-w-	c:\windows\system32\drivers\mbamswissarmy.sys
2010-10-22 08:41 . 2010-10-22 08:41	--------	d-----w-	c:\dokumente und einstellungen\All Users\Anwendungsdaten\Malwarebytes
2010-10-22 08:41 . 2010-04-29 13:39	20952	----a-w-	c:\windows\system32\drivers\mbam.sys
2010-10-22 08:41 . 2010-10-22 08:42	--------	d-----w-	c:\programme\Malwarebytes' Anti-Malware
2010-10-21 13:24 . 2010-10-21 13:24	--------	d-s---w-	c:\dokumente und einstellungen\LocalService\UserData
2010-10-21 11:06 . 2010-10-22 10:47	--------	d-----w-	c:\windows\system32\NtmsData
2010-10-21 09:29 . 2010-10-21 09:29	--------	d-----w-	c:\programme\CCleaner
2010-10-21 08:23 . 2010-10-23 11:46	--------	d-----w-	c:\dokumente und einstellungen\NetworkService\Lokale Einstellungen\Anwendungsdaten\Adobe
2010-10-20 17:25 . 2010-10-20 17:28	--------	d-----w-	c:\programme\Mozilla Thunderbird
2010-10-20 17:24 . 2010-10-20 17:24	--------	d-----w-	c:\programme\Google
2010-10-20 15:37 . 2010-10-20 15:37	--------	d-----w-	c:\dokumente und einstellungen\All Users\Anwendungsdaten\McAfee
2010-10-20 11:52 . 2010-10-20 11:52	--------	d-----w-	c:\windows\system32\wbem\Repository
2010-10-20 11:52 . 2004-08-03 21:07	59264	----a-w-	c:\windows\system32\drivers\usbaudio.sys
2010-10-20 11:52 . 2004-08-03 21:07	59264	----a-w-	c:\windows\system32\dllcache\usbaudio.sys
2010-10-20 11:16 . 2010-10-20 11:54	--------	d-s---w-	c:\dokumente und einstellungen\***
2010-10-20 10:59 . 2010-10-21 12:02	--------	d-----w-	c:\programme\PDF Blender
2010-10-20 10:55 . 2005-10-20 12:21	5616	----a-w-	c:\windows\system32\drivers\ma006100.bin
2010-10-20 10:55 . 2010-10-20 10:55	--------	d-----w-	c:\programme\M-Audio Transit
2010-10-20 10:54 . 2010-10-20 10:54	--------	d-----w-	c:\programme\M-Audio
2010-10-20 10:54 . 2009-05-18 21:33	16496	----a-r-	c:\windows\system32\drivers\HPZipr12.sys
2010-10-20 10:54 . 2009-05-18 21:33	49920	----a-r-	c:\windows\system32\drivers\HPZid412.sys
2010-10-20 10:53 . 1999-09-10 10:06	5600	----a-w-	c:\windows\system\WINASPI.DLL
2010-10-20 10:53 . 1999-09-10 10:06	4672	----a-w-	c:\windows\system\WOWPOST.EXE
2010-10-20 10:53 . 1999-09-10 10:06	45056	----a-w-	c:\windows\system32\WNASPI32.DLL
2010-10-20 10:53 . 1999-09-10 10:06	25244	----a-w-	c:\windows\system32\drivers\ASPI32.SYS
2010-10-20 10:53 . 2009-04-20 10:23	315904	----a-w-	c:\windows\system32\Spool\prtprocs\w32x86\hpfpp70w.dll
2010-10-20 10:53 . 2009-04-20 10:23	123904	----a-w-	c:\windows\system32\hpf3l70w.dll
2010-10-20 10:53 . 2009-06-01 23:35	452408	----a-r-	c:\windows\system32\hpzids01.dll
2010-10-20 10:53 . 2010-10-20 10:53	--------	d-----w-	c:\programme\1X-Ripper
2010-10-20 10:53 . 2010-10-20 10:53	--------	d-----w-	c:\programme\mresreg
2010-10-20 10:53 . 2009-05-18 21:33	21568	----a-r-	c:\windows\system32\drivers\HPZius12.sys
2010-10-20 10:53 . 2004-08-03 21:01	25856	----a-w-	c:\windows\system32\drivers\usbprint.sys
2010-10-20 10:53 . 2004-08-03 21:01	25856	----a-w-	c:\windows\system32\dllcache\usbprint.sys
2010-10-20 10:52 . 2009-05-18 21:33	309760	----a-r-	c:\windows\system32\difxapi.dll
2010-10-20 10:52 . 2009-06-01 23:36	315392	----a-r-	c:\windows\system32\hpwvst01.dll
2010-10-20 10:52 . 2009-05-18 21:33	372736	----a-r-	c:\windows\system32\hppldcoi.dll
2010-10-20 10:52 . 2009-06-01 23:36	966656	----a-r-	c:\windows\system32\hpwtiop5.dll
2010-10-20 10:52 . 2009-06-01 23:36	749568	----a-r-	c:\windows\system32\hpwwiax6.dll
2010-10-20 10:52 . 2004-08-03 20:58	15104	----a-w-	c:\windows\system32\drivers\usbscan.sys
2010-10-20 10:52 . 2004-08-03 20:58	15104	----a-w-	c:\windows\system32\dllcache\usbscan.sys
2010-10-20 10:50 . 2004-08-04 03:00	31616	----a-w-	c:\windows\system32\drivers\usbccgp.sys
2010-10-20 10:50 . 2004-08-04 03:00	31616	----a-w-	c:\windows\system32\dllcache\usbccgp.sys
2010-10-20 10:49 . 2010-10-20 10:49	--------	d-----w-	c:\windows\system32\config\systemprofile\Anwendungsdaten\Application Updater
2010-10-20 10:44 . 2010-10-20 10:44	--------	d-----w-	c:\programme\MSECache
2010-10-20 10:44 . 2010-10-20 10:44	--------	d-----w-	c:\programme\VideoLAN
2010-10-20 10:43 . 2010-10-20 10:43	--------	d-----w-	c:\programme\FileZilla FTP Client
2010-10-20 10:43 . 2010-10-20 10:43	--------	d-----w-	c:\programme\ASIO4ALL v2
2010-10-20 10:34 . 2010-10-20 10:38	--------	d-----w-	c:\programme\FeedReader30
2010-10-20 09:34 . 2010-10-20 09:34	--------	d-s---w-	c:\dokumente und einstellungen\NetworkService\UserData
2010-10-20 01:34 . 2010-10-20 01:34	--------	d-----w-	c:\programme\Avira
2010-10-20 01:34 . 2010-10-20 01:34	--------	d-----w-	c:\dokumente und einstellungen\All Users\Anwendungsdaten\Avira
2010-10-20 01:34 . 2010-03-01 08:05	124784	----a-w-	c:\windows\system32\drivers\avipbb.sys
2010-10-20 01:34 . 2010-02-16 12:24	60936	----a-w-	c:\windows\system32\drivers\avgntflt.sys
2010-10-20 01:34 . 2009-05-11 10:49	45416	----a-w-	c:\windows\system32\drivers\avgntdd.sys
2010-10-20 01:34 . 2009-05-11 10:49	22360	----a-w-	c:\windows\system32\drivers\avgntmgr.sys
2010-10-20 01:28 . 2010-10-20 01:28	--------	d-----w-	c:\windows\ShellNew
2010-10-20 01:18 . 2009-11-27 17:33	17920	----a-w-	c:\windows\system32\dllcache\msyuv.dll
2010-10-20 01:18 . 2009-11-27 16:37	8704	----a-w-	c:\windows\system32\dllcache\tsbyuv.dll
2010-10-20 01:18 . 2009-11-27 16:37	48128	----a-w-	c:\windows\system32\dllcache\iyuv_32.dll
2010-10-20 01:11 . 2010-02-16 19:23	2189184	----a-w-	c:\windows\system32\dllcache\ntoskrnl.exe
2010-10-20 01:11 . 2010-02-16 19:23	2024448	----a-w-	c:\windows\system32\dllcache\ntkrpamp.exe
2010-10-20 01:11 . 2010-02-17 12:23	2066048	----a-w-	c:\windows\system32\dllcache\ntkrnlpa.exe
2010-10-20 01:11 . 2010-02-16 19:23	2146304	----a-w-	c:\windows\system32\dllcache\ntkrnlmp.exe
2010-10-20 01:09 . 2010-10-20 01:10	--------	d-----w-	c:\programme\MSXML 6.0
2010-10-20 01:09 . 2010-10-20 01:09	--------	d-----w-	c:\programme\MSXML 4.0
2010-10-20 01:09 . 2008-06-14 17:57	273024	----a-w-	c:\windows\system32\dllcache\bthport.sys
2010-10-20 00:52 . 2006-10-31 10:26	36864	----a-w-	c:\windows\system32\dllcache\hidclass.sys
2010-10-20 00:50 . 2006-11-08 08:51	62336	----a-w-	c:\windows\system32\drivers\rspndr.sys
2010-10-20 00:50 . 2006-11-08 08:51	10752	----a-w-	c:\windows\system32\rspndr.exe
2010-10-20 00:48 . 2006-06-01 18:47	27648	----a-w-	c:\windows\system32\dllcache\jgpl400.dll
2010-10-20 00:48 . 2006-06-01 18:47	163840	----a-w-	c:\windows\system32\dllcache\jgdw400.dll
2010-10-20 00:48 . 2006-08-18 12:38	52736	----a-w-	c:\windows\system32\dllcache\wzcsapi.dll
2010-10-20 00:48 . 2006-08-18 12:38	476160	----a-w-	c:\windows\system32\dllcache\wzcsvc.dll
2010-10-20 00:48 . 2006-08-18 09:36	14592	----a-w-	c:\windows\system32\dllcache\ndisuio.sys
2010-10-20 00:47 . 2010-02-24 12:31	454016	----a-w-	c:\windows\system32\dllcache\mrxsmb.sys
2010-10-20 00:45 . 2006-03-17 00:38	28672	----a-w-	c:\windows\system32\verclsid.exe
2010-10-20 00:45 . 2010-10-20 00:45	--------	d-----w-	c:\windows\system32\de
2010-10-20 00:44 . 2006-01-11 01:20	33792	----a-w-	c:\windows\system32\mmcperf.exe
2010-10-20 00:44 . 2006-01-09 23:11	184320	----a-w-	c:\windows\system32\microsoft.managementconsole.dll
2010-10-20 00:44 . 2006-01-09 23:11	106496	----a-w-	c:\windows\system32\mmcfxcommon.dll
2010-10-20 00:44 . 2006-01-09 13:11	397312	----a-w-	c:\windows\system32\mmcex.dll
2010-10-20 00:41 . 2006-05-12 04:04	6144	----a-w-	c:\windows\system32\kbdpash.dll
2010-10-20 00:41 . 2006-05-12 04:04	6144	----a-w-	c:\windows\system32\kbdnepr.dll
2010-10-20 00:41 . 2006-05-12 04:04	6144	----a-w-	c:\windows\system32\kbdiultn.dll
2010-10-20 00:41 . 2006-05-12 04:04	6144	----a-w-	c:\windows\system32\kbdbhc.dll
2010-10-20 00:23 . 2010-10-20 00:23	--------	d-----w-	c:\windows\ServicePackFiles
2010-10-20 00:21 . 2004-07-17 09:40	19528	----a-w-	c:\windows\000001_.tmp
2010-10-20 00:21 . 2010-10-20 00:21	--------	d-----w-	c:\windows\EHome
2010-10-20 00:10 . 2004-08-04 03:00	26496	----a-w-	c:\windows\system32\dllcache\usbstor.sys
2010-10-20 00:06 . 2010-10-20 00:06	--------	d-----w-	c:\windows\Acer
2010-10-20 00:03 . 2005-09-26 14:40	258048	----a-w-	c:\windows\system32\Uninstall_eRecovery.exe
2010-10-20 00:02 . 2006-01-23 10:41	78208	----a-w-	c:\windows\system32\drivers\epm-shd.sys
2010-10-20 00:02 . 2006-01-23 10:41	4096	----a-w-	c:\windows\system32\drivers\epm-psd.sys
2010-10-20 00:01 . 2010-10-20 10:52	--------	dc----w-	c:\windows\system32\DRVSTORE
2010-10-20 00:01 . 2010-10-20 00:01	21275	----a-w-	c:\windows\system32\drivers\AegisP.sys
2010-10-20 00:01 . 2010-10-20 00:01	--------	d-----w-	c:\windows\system32\config\systemprofile\Anwendungsdaten\Intel
2010-10-20 00:01 . 2010-10-20 00:01	--------	d-----w-	c:\dokumente und einstellungen\All Users\Anwendungsdaten\Intel
2010-10-20 00:01 . 2006-04-10 08:09	61440	----a-w-	c:\windows\system32\acerGina.dll
2010-10-20 00:00 . 2010-10-20 00:00	--------	d-----w-	c:\programme\Launch Manager
2010-10-20 00:00 . 2004-12-09 10:04	5120	----a-w-	c:\windows\system32\FILTRCOI.DLL
2010-10-20 00:00 . 2004-12-08 12:10	16896	----a-w-	c:\windows\system32\drivers\DKbFltr.SYS
2010-10-19 23:59 . 2006-01-20 13:56	53248	----a-w-	c:\windows\system32\acpimof.dll
2010-10-19 23:59 . 2006-01-20 13:56	225350	----a-w-	c:\windows\system32\Epm-Po.dll

.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-10-19 23:48 . 2004-06-25 15:13	69	----a-w-	c:\windows\HotFix.bat
.

(((((((((((((((((((((((((((((   SnapShot@2010-10-23_11.36.43   )))))))))))))))))))))))))))))))))))))))))
.
+ 2009-08-06 18:24 . 2009-08-06 18:24	44768              c:\windows\system32\wups2.dll
+ 2004-08-04 03:00 . 2009-08-06 18:24	53472              c:\windows\system32\wuauclt.exe
+ 2010-11-01 18:59 . 2009-08-06 18:24	35552              c:\windows\system32\SoftwareDistribution\Setup\ServiceStartup\wups.dll\7.4.7600.226\wups.dll
- 2006-08-29 21:18 . 2010-10-20 01:29	53770              c:\windows\system32\perfc009.dat
+ 2006-08-29 21:18 . 2010-10-31 08:24	53770              c:\windows\system32\perfc009.dat
+ 2006-08-29 21:18 . 2010-10-31 08:24	64848              c:\windows\system32\perfc007.dat
- 2006-08-29 21:18 . 2010-10-20 01:29	64848              c:\windows\system32\perfc007.dat
+ 2004-08-04 03:00 . 2009-08-06 18:24	53472              c:\windows\system32\dllcache\wuauclt.exe
+ 2004-08-04 03:00 . 2009-08-06 18:24	96480              c:\windows\system32\dllcache\cdm.dll
+ 2004-08-04 03:00 . 2009-08-06 18:24	96480              c:\windows\system32\cdm.dll
+ 2010-11-01 18:59 . 2004-08-04 03:00	36864              c:\windows\LastGood\system32\wups.dll
+ 2010-11-01 18:59 . 2004-08-04 03:00	66560              c:\windows\LastGood\system32\cdm.dll
+ 2010-10-25 07:35 . 2010-10-25 07:35	29184              c:\windows\Installer\{CD95F661-A5C4-44F5-A6AA-ECDD91C240BD}\IconCD95F6617.exe
+ 2010-10-19 23:00 . 2010-10-19 23:00	73666              c:\windows\Downloaded Program Files\tscan1.dat
+ 2010-10-19 23:00 . 2010-10-19 23:00	98112              c:\windows\Downloaded Program Files\scrauth.dat
+ 2010-02-10 05:22 . 2010-02-10 05:22	42112              c:\windows\Downloaded Program Files\ecmldr32.dll
+ 2009-01-05 12:44 . 2009-01-05 12:44	53248              c:\windows\bdoscandel.exe
+ 2010-10-25 21:01 . 2010-10-25 21:01	86016              c:\windows\BDOSCAN8\librtvr.dll
+ 2010-10-25 21:01 . 2010-10-25 21:01	27136              c:\windows\BDOSCAN8\avxt.dll
+ 2010-10-25 21:01 . 2010-10-25 21:01	10240              c:\windows\BDOSCAN8\avxs.dll
+ 2010-10-25 21:01 . 2010-10-25 21:01	45056              c:\windows\BDOSCAN8\avxdisk.dll
+ 2010-10-25 23:45 . 2010-10-25 23:45	2072              c:\windows\Downloaded Program Files\vscanmsx.dat
+ 2010-10-19 23:00 . 2010-10-19 23:00	3852              c:\windows\Downloaded Program Files\tscan1hd.dat
+ 2010-10-19 23:00 . 2010-10-19 23:00	1957              c:\windows\Downloaded Program Files\tinfl.dat
+ 2010-10-19 23:00 . 2010-10-19 23:00	2504              c:\windows\Downloaded Program Files\catalog.dat
+ 2004-08-04 03:00 . 2009-08-06 18:24	209632              c:\windows\system32\wuweb.dll
+ 2004-08-04 03:00 . 2009-08-06 18:24	327896              c:\windows\system32\wucltui.dll
+ 2004-08-04 03:00 . 2009-08-06 18:23	575704              c:\windows\system32\wuapi.dll
+ 2006-08-29 21:18 . 2010-10-31 08:24	382026              c:\windows\system32\perfh009.dat
- 2006-08-29 21:18 . 2010-10-20 01:29	382026              c:\windows\system32\perfh009.dat
+ 2006-08-29 21:18 . 2010-10-31 08:24	393086              c:\windows\system32\perfh007.dat
- 2006-08-29 21:18 . 2010-10-20 01:29	393086              c:\windows\system32\perfh007.dat
+ 2004-08-04 03:00 . 2009-08-06 18:24	209632              c:\windows\system32\dllcache\wuweb.dll
+ 2004-08-04 03:00 . 2009-08-06 18:24	327896              c:\windows\system32\dllcache\wucltui.dll
+ 2004-08-04 03:00 . 2009-08-06 18:23	575704              c:\windows\system32\dllcache\wuapi.dll
+ 2010-11-01 18:59 . 2004-08-04 03:00	120320              c:\windows\LastGood\system32\wuweb.dll
+ 2010-11-01 18:59 . 2004-08-04 03:00	113664              c:\windows\LastGood\system32\wucltui.dll
+ 2010-11-01 18:59 . 2004-08-04 03:00	111616              c:\windows\LastGood\system32\wuauclt.exe
+ 2010-11-01 18:59 . 2004-08-04 03:00	431616              c:\windows\LastGood\system32\wuapi.dll
+ 2010-10-25 07:35 . 2010-10-25 07:35	632320              c:\windows\Installer\{CD95F661-A5C4-44F5-A6AA-ECDD91C240BD}\IconCD95F66110.exe
+ 2010-10-19 23:00 . 2010-10-19 23:00	986663              c:\windows\Downloaded Program Files\virscan8.dat
+ 2010-10-19 23:00 . 2010-10-19 23:00	397504              c:\windows\Downloaded Program Files\virscan6.dat
+ 2010-10-19 23:00 . 2010-10-19 23:00	320295              c:\windows\Downloaded Program Files\virscan4.dat
+ 2010-10-19 23:00 . 2010-10-19 23:00	156332              c:\windows\Downloaded Program Files\virscan3.dat
+ 2010-10-19 23:00 . 2010-10-19 23:00	573672              c:\windows\Downloaded Program Files\virscan2.dat
+ 2010-10-19 23:00 . 2010-10-19 23:00	504708              c:\windows\Downloaded Program Files\tcscan9.dat
+ 2010-10-19 23:00 . 2010-10-19 23:00	159628              c:\windows\Downloaded Program Files\tcscan8.dat
+ 2010-02-10 05:24 . 2010-02-10 05:24	284048              c:\windows\Downloaded Program Files\rufsi.dll
+ 2010-10-19 23:00 . 2010-10-19 23:00	177520              c:\windows\Downloaded Program Files\naveng32.dll
+ 2010-02-10 05:22 . 2010-02-10 05:22	201896              c:\windows\Downloaded Program Files\navapi32.dll
+ 2009-01-05 12:44 . 2009-01-05 12:44	741376              c:\windows\Downloaded Program Files\ipsupd.dll
+ 2010-10-19 23:00 . 2010-10-19 23:00	279920              c:\windows\Downloaded Program Files\ecmsvr32.dll
+ 2010-02-10 05:24 . 2010-02-10 05:24	264080              c:\windows\Downloaded Program Files\avsniffdlgs.dll
+ 2010-02-10 05:24 . 2010-02-10 05:24	337808              c:\windows\Downloaded Program Files\avsniff.dll
+ 2009-01-05 12:44 . 2010-10-25 21:01	142848              c:\windows\BDOSCAN8\libfn.dll
+ 2009-01-05 12:44 . 2009-01-05 12:44	741376              c:\windows\BDOSCAN8\ipsupd.dll
+ 2009-01-05 12:44 . 2010-10-25 21:06	108448              c:\windows\BDOSCAN8\bdcore.dll
+ 2004-08-04 03:00 . 2009-08-06 18:23	1929952              c:\windows\system32\wuaueng.dll
+ 2004-08-04 03:00 . 2009-08-06 18:23	1929952              c:\windows\system32\dllcache\wuaueng.dll
+ 2010-11-01 18:59 . 2004-08-04 03:00	1134592              c:\windows\LastGood\system32\wuaueng.dll
+ 2010-10-25 07:35 . 2010-10-25 07:35	1559552              c:\windows\Installer\a99a2.msi
+ 2010-10-19 23:00 . 2010-10-19 23:00	5125099              c:\windows\Downloaded Program Files\virscan9.dat
+ 2010-10-19 23:00 . 2010-10-19 23:00	1042557              c:\windows\Downloaded Program Files\virscan1.dat
+ 2010-10-19 23:00 . 2010-10-19 23:00	8081975              c:\windows\Downloaded Program Files\tcdefs.dat
+ 2010-10-19 23:00 . 2010-10-19 23:00	1717616              c:\windows\Downloaded Program Files\navex32a.dll
+ 2010-10-19 23:00 . 2010-10-19 23:00	87503337              c:\windows\Downloaded Program Files\virscan7.dat
+ 2010-10-19 23:00 . 2010-10-19 23:00	15953175              c:\windows\Downloaded Program Files\virscan5.dat
+ 2010-10-19 23:00 . 2010-10-19 23:00	21666473              c:\windows\Downloaded Program Files\tcscan7.dat
.
-- Snapshot auf jetziges Datum zurückgesetzt --
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ccleaner"="c:\programme\CCleaner\CCleaner.exe" [2010-09-24 1786168]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"LaunchApp"="Alaunch" [X]
"igfxtray"="c:\windows\system32\igfxtray.exe" [2006-03-23 94208]
"igfxhkcmd"="c:\windows\system32\hkcmd.exe" [2006-03-23 77824]
"igfxpers"="c:\windows\system32\igfxpers.exe" [2006-03-23 118784]
"RTHDCPL"="RTHDCPL.EXE" [2006-06-28 16248320]
"AzMixerSel"="c:\programme\Realtek\InstallShield\AzMixerSel.exe" [2005-12-21 53248]
"SynTPEnh"="c:\programme\Synaptics\SynTP\SynTPEnh.exe" [2006-03-03 761946]
"IMJPMIG8.1"="c:\windows\IME\imjp8_1\IMJPMIG.EXE" [2004-08-04 208952]
"MSPY2002"="c:\windows\system32\IME\PINTLGNT\ImScInst.exe" [2004-08-04 59392]
"PHIME2002ASync"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-04 455168]
"PHIME2002A"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-04 455168]
"LManager"="c:\progra~1\LAUNCH~1\LManager.exe" [2006-07-20 593920]
"avgnt"="c:\programme\Avira\AntiVir Desktop\avgnt.exe" [2010-03-02 282792]
"ePower_DMC"="c:\acer\Empowering Technology\ePower\ePower_DMC.exe" [2006-08-10 352256]
"QuickTime Task"="c:\programme\QuickTime\qttask.exe" [2006-08-29 98304]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-08-04 15360]

c:\dokumente und einstellungen\All Users\Startmen�\Programme\Autostart\
Microsoft Office.lnk - c:\programme\Microsoft Office\Office10\OSA.EXE [2001-2-13 83360]
PDFCreator.lnk - c:\programme\PDFCreator\PDFCreator.exe [2010-10-22 3096576]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Acer ePower Management]
2006-05-22 10:54	3080704	----a-w-	c:\acer\Empowering Technology\ePower\Acer ePower Management.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ADMTray.exe]
2005-10-24 14:45	2462208	----a-w-	c:\acer\Empowering Technology\admtray.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
2010-09-20 21:07	932288	----a-r-	c:\programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
2010-09-23 02:47	35760	----a-w-	c:\programme\Adobe\Reader 9.0\Reader\reader_sl.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BluetoothAuthenticationAgent]
2004-08-03 22:58	110592	----a-w-	c:\windows\system32\bthprops.cpl

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\eDataSecurity Loader]
2005-12-27 13:50	69632	----a-w-	c:\acer\Empowering Technology\eDataSecurity\eDSloader.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ePower_DMC]
2006-08-10 17:29	352256	----a-w-	c:\acer\Empowering Technology\ePower\ePower_DMC.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\eRecoveryService]
2006-01-24 16:00	397312	----a-w-	c:\acer\Empowering Technology\eRecovery\Monitor.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ntiMUI]
2006-05-15 09:15	45056	----a-w-	c:\programme\NewTech Infosystems\NTI CD & DVD-Maker 7\ntiMUI.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
2006-08-29 21:21	98304	----a-w-	c:\programme\QuickTime\qttask.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SkyTel]
2006-05-16 16:04	2879488	----a-w-	c:\windows\SkyTel.exe

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Programme\\Microsoft Office\\Office10\\OUTLOOK.EXE"=
"c:\\Programme\\Outlook Express\\msimn.exe"=

R2 AntiVirSchedulerService;Avira AntiVir Planer;c:\programme\Avira\AntiVir Desktop\sched.exe [20.10.2010 02:34 135336]
.
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = hxxp://global.acer.com/
uInternet Connection Wizard,ShellNext = hxxp://global.acer.com/
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: Nach Microsoft &Excel exportieren - c:\progra~1\MICROS~2\Office10\EXCEL.EXE/3000
FF - ProfilePath - c:\dokumente und einstellungen\***\Anwendungsdaten\Mozilla\Firefox\Profiles\hexyvwxv.default\
FF - plugin: c:\programme\Google\Picasa3\npPicasa3.dll
FF - plugin: c:\programme\Viewpoint\Viewpoint Experience Technology\npViewpoint.dll

---- FIREFOX Richtlinien ----
c:\programme\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbaam7a8h", true); 
c:\programme\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--fiqz9s", true); // Traditional
c:\programme\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--fiqs8s", true); // Simplified
c:\programme\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--j6w193g", true);
c:\programme\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4ar", true); 
c:\programme\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4a87g", true);
c:\programme\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbqly7c0a67fbc", true);
c:\programme\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbqly7cvafr", true);
c:\programme\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--kpry57d", true);  // Traditional
c:\programme\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--kprw13d", true);  // Simplified
c:\programme\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled", false);
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, hxxp://www.gmer.net
Rootkit scan 2010-11-01 20:06
Windows 5.1.2600 Service Pack 2 NTFS

Scanne versteckte Prozesse... 

Scanne versteckte Autostarteinträge... 

Scanne versteckte Dateien... 

Scan erfolgreich abgeschlossen
versteckte Dateien: 0

**************************************************************************
.
Zeit der Fertigstellung: 2010-11-01  20:09:13
ComboFix-quarantined-files.txt  2010-11-01 19:09
ComboFix2.txt  2010-10-25 19:42
ComboFix3.txt  2010-10-23 11:39

Vor Suchlauf: 13 Verzeichnis(se), 26.471.771.648 Bytes frei
Nach Suchlauf: 15 Verzeichnis(se), 26.471.797.760 Bytes frei

- - End Of File - - FE761BB300BAB30C8EFA958E8CB47D4F