Also angeblich war adaware antispy und adwatch live und antivirus geöffnet während des scans obwohl es nicht so war! beeinträchtigt das das ergebnis?
naja hier der COMBOFIX log:
Code:
Alles auswählen Aufklappen ATTFilter
ComboFix 11-03-05.01 - Mediazentrum 10.03.2011 17:55:09.2.2 - x86 MINIMAL
Microsoft Windows 7 Ultimate 6.1.7600.0.1252.49.1031.18.1013.458 [GMT 1:00]
ausgeführt von:: c:\users\Mediazentrum\Desktop\ComboFix.exe
AV: AntiVir Desktop *Disabled/Updated* {090F9C29-64CE-6C6F-379C-5901B49A85B7}
AV: Lavasoft Ad-Watch Live! Virenschutz *Enabled/Updated* {9FF26384-70D4-CE6B-3ECB-E759A6A40116}
SP: AntiVir Desktop *Disabled/Updated* {B26E7DCD-42F4-63E1-0D2C-6273CF1DCF0A}
SP: Lavasoft Ad-Watch Live! *Enabled/Updated* {24938260-56EE-C1E5-047B-DC2BDD234BAB}
SP: Spyware Doctor *Disabled/Updated* {94076BB2-F3DA-227F-9A1E-F060FF73600F}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
(((((((((((((((((((((((((((((((((((( Weitere Löschungen ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\programdata\FullRemove.exe
c:\users\League of Legends\uninstall.exe
c:\windows\system32\install
.
.
((((((((((((((((((((((( Dateien erstellt von 2011-02-10 bis 2011-03-10 ))))))))))))))))))))))))))))))
.
.
2011-03-10 17:14 . 2011-03-10 17:14 -------- d-----w- c:\users\Leon\AppData\Local\temp
2011-03-10 17:14 . 2011-03-10 17:14 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-03-10 17:14 . 2011-03-10 17:14 -------- d-----w- c:\users\League of Legends\AppData\Local\temp
2011-03-10 17:14 . 2011-03-10 17:14 -------- d-----w- c:\users\KniebeugenGurkenfeld\AppData\Local\temp
2011-03-10 17:14 . 2011-03-10 17:14 -------- d-----w- c:\users\Gast\AppData\Local\temp
2011-03-10 16:03 . 2011-03-10 16:11 -------- d-----w- C:\32788R22FWJFW.2.tmp
2011-03-10 15:57 . 2011-03-10 16:03 -------- d-----w- C:\32788R22FWJFW.1.tmp
2011-03-09 20:20 . 2011-02-19 05:32 1074176 ----a-w- c:\windows\system32\DWrite.dll
2011-03-09 20:20 . 2011-02-19 05:33 802304 ----a-w- c:\windows\system32\FntCache.dll
2011-03-09 20:20 . 2011-02-19 05:32 739840 ----a-w- c:\windows\system32\d2d1.dll
2011-03-09 20:20 . 2010-12-23 05:28 642048 ----a-w- c:\windows\system32\CPFilters.dll
2011-03-09 20:20 . 2010-12-23 05:28 534528 ----a-w- c:\windows\system32\EncDec.dll
2011-03-09 20:20 . 2010-12-23 05:28 850432 ----a-w- c:\windows\system32\sbe.dll
2011-03-09 20:20 . 2010-12-23 05:24 199680 ----a-w- c:\windows\system32\mpg2splt.ax
2011-03-09 20:20 . 2010-12-18 05:30 2690560 ----a-w- c:\windows\system32\mstscax.dll
2011-03-09 20:20 . 2010-12-18 05:26 1034240 ----a-w- c:\windows\system32\mstsc.exe
2011-03-09 20:05 . 2011-03-09 20:05 -------- d-----w- c:\users\Gast\AppData\Roaming\Malwarebytes
2011-03-09 10:54 . 2003-02-27 15:12 696320 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iKernel.dll
2011-03-09 10:54 . 2002-12-05 13:10 155648 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iuser.dll
2011-03-09 10:54 . 2002-12-02 14:22 5632 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\DotNetInstaller.exe
2011-03-09 10:54 . 2002-12-02 12:33 57344 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\ctor.dll
2011-03-09 10:54 . 2002-12-02 12:33 237568 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iscript.dll
2011-03-09 10:53 . 2011-03-09 10:53 163972 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iGdi.dll
2011-03-09 10:53 . 2011-03-09 10:53 282756 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\setup.dll
2011-03-09 09:13 . 2010-12-20 17:09 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2011-03-09 09:13 . 2011-03-09 09:13 -------- d-----w- c:\programdata\Malwarebytes
2011-03-09 09:13 . 2010-12-20 17:08 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-03-09 09:13 . 2011-03-09 09:13 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2011-03-06 23:46 . 2009-03-18 15:35 26176 ---ha-w- c:\windows\system32\hamachi.sys
2011-03-06 21:30 . 2011-03-06 21:39 -------- d-----w- c:\users\KniebeugenGurkenfeld\AppData\Local\ManyCam
2011-03-06 21:29 . 2011-03-06 21:30 -------- d-----w- c:\users\KniebeugenGurkenfeld\AppData\Roaming\ManyCam
2011-03-06 21:28 . 2011-03-06 21:29 -------- d-----w- c:\program files\ManyCam
2011-03-06 11:43 . 2011-03-04 08:20 16432 ----a-w- c:\windows\system32\lsdelete.exe
2011-03-05 22:12 . 2011-03-04 08:20 64512 ----a-w- c:\windows\system32\drivers\Lbd.sys
2011-03-05 22:11 . 2011-03-05 22:11 98392 ----a-w- c:\windows\system32\drivers\SBREDrv.sys
2011-03-05 22:10 . 2011-03-05 22:10 -------- d-----w- c:\users\KniebeugenGurkenfeld\AppData\Local\Sunbelt Software
2011-03-05 22:07 . 2011-03-05 22:07 -------- dc-h--w- c:\programdata\{A5847AFF-A1FE-4929-A3C0-16C23AB1D29D}
2011-03-05 22:06 . 2011-03-05 22:09 -------- d-----w- c:\programdata\Lavasoft
2011-03-05 22:06 . 2011-03-05 22:06 -------- d-----w- c:\program files\Lavasoft
2011-03-03 17:45 . 2011-03-03 17:45 98304 ----a-w- c:\windows\system32\CmdLineExt.dll
2011-03-03 17:20 . 2011-03-09 10:54 -------- d-----w- c:\program files\Rockstar Games
2011-03-03 17:19 . 2004-10-22 01:16 180224 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\10\50\Intel32\iuser.dll
2011-03-03 17:19 . 2004-10-22 01:17 69715 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\10\50\Intel32\ctor.dll
2011-03-03 17:19 . 2004-10-22 01:17 274432 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\10\50\Intel32\iscript.dll
2011-03-03 17:19 . 2004-10-22 01:16 5632 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\10\50\Intel32\DotNetInstaller.exe
2011-03-03 17:19 . 2004-10-22 01:18 749568 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\10\50\Intel32\iKernel.dll
2011-03-03 17:19 . 2011-03-03 17:19 192644 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\10\50\Intel32\iGdi.dll
2011-03-03 17:19 . 2011-03-03 17:19 323716 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\10\50\Intel32\setup.dll
2011-03-02 09:46 . 2011-03-02 09:46 -------- d-----w- c:\users\Leon\AppData\Roaming\Avira
2011-03-01 13:09 . 2011-03-01 13:09 -------- d-----w- c:\users\Leon\AppData\Local\K-Meleon
2011-03-01 13:09 . 2011-03-01 13:09 -------- d-----w- c:\users\Leon\AppData\Roaming\K-Meleon
2011-02-28 11:21 . 2011-03-03 11:16 -------- d-----w- c:\users\Leon\AppData\Local\LogMeIn Hamachi
2011-02-27 16:06 . 2011-02-27 16:06 -------- d-----w- c:\users\KniebeugenGurkenfeld\AppData\Roaming\Avira
2011-02-26 22:33 . 2011-03-05 19:34 -------- d-----w- c:\programdata\SecTaskMan
2011-02-26 22:32 . 2011-02-26 22:33 -------- d-----w- c:\program files\Security Task Manager
2011-02-25 23:04 . 2011-02-26 15:00 61960 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2011-02-25 23:04 . 2011-02-26 15:00 135096 ----a-w- c:\windows\system32\drivers\avipbb.sys
2011-02-25 23:04 . 2009-05-11 11:49 51992 ----a-w- c:\windows\system32\drivers\avgntdd.sys
2011-02-25 23:04 . 2009-05-11 11:49 17016 ----a-w- c:\windows\system32\drivers\avgntmgr.sys
2011-02-25 23:04 . 2011-02-25 23:04 -------- d-----w- c:\programdata\Avira
2011-02-25 23:04 . 2011-02-25 23:04 -------- d-----w- c:\program files\Avira
2011-02-25 14:43 . 2011-02-11 06:54 5943120 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{0D9718F7-30DA-4E69-B7FC-2DF352AA7574}\mpengine.dll
2011-02-25 13:56 . 1998-06-17 18:07 57344 ----a-w- c:\windows\system32\Mfc42loc.dll
2011-02-25 13:56 . 2011-02-25 13:56 -------- d-----w- c:\program files\Bethesda Softworks
2011-02-25 13:55 . 2001-09-05 04:18 225280 ----a-w- c:\program files\Common Files\InstallShield\IScript\iscript.dll
2011-02-25 13:55 . 2001-09-05 04:14 176128 ----a-w- c:\program files\Common Files\InstallShield\Engine\6\Intel 32\iuser.dll
2011-02-25 13:55 . 2001-09-05 04:13 32768 ----a-w- c:\program files\Common Files\InstallShield\Engine\6\Intel 32\objectps.dll
2011-02-25 13:55 . 2001-09-05 04:18 77824 ----a-w- c:\program files\Common Files\InstallShield\Engine\6\Intel 32\ctor.dll
2011-02-25 13:53 . 2011-02-25 13:53 -------- d-----w- c:\program files\BestGameEver
2011-02-25 13:05 . 2011-03-08 12:47 -------- d-----w- c:\users\KniebeugenGurkenfeld\AppData\Roaming\Raptr
2011-02-25 13:05 . 2011-02-25 13:05 -------- d-----w- c:\program files\Raptr
2011-02-24 18:14 . 2011-02-24 18:14 -------- d-----w- C:\AeriaGames
2011-02-24 13:53 . 2011-02-24 13:53 -------- d-----w- C:\GAMIGO
2011-02-24 13:32 . 2011-02-24 18:39 -------- d-----w- c:\users\KniebeugenGurkenfeld\AppData\Local\PMB Files
2011-02-24 05:31 . 2010-09-14 06:07 276992 ----a-w- c:\windows\system32\wcncsvc.dll
2011-02-23 14:12 . 2011-01-07 07:31 442880 ----a-w- c:\windows\system32\XpsPrint.dll
2011-02-23 14:12 . 2011-01-07 07:31 288256 ----a-w- c:\windows\system32\XpsGdiConverter.dll
2011-02-23 11:23 . 2011-02-23 11:23 -------- d-----w- c:\users\Gast\AppData\Local\Diagnostics
2011-02-22 20:27 . 2011-02-22 20:27 -------- d-----w- c:\users\Gast\AppData\Local\SoftGrid Client
2011-02-22 20:27 . 2011-02-22 20:29 -------- d-----w- c:\users\Gast\AppData\Roaming\SoftGrid Client
2011-02-22 19:46 . 2011-03-09 20:05 -------- d-----w- c:\users\Gast\AppData\Local\LogMeIn Hamachi
2011-02-22 19:15 . 2011-02-22 19:15 0 ----a-w- c:\windows\system32\sho91B4.tmp
2011-02-20 21:30 . 2008-11-10 10:41 32656 ----a-w- c:\windows\system32\msonpmon.dll
2011-02-20 21:30 . 2006-10-26 18:56 33104 ----a-w- c:\windows\system32\Spool\prtprocs\w32x86\msonpppr.dll
2011-02-20 20:52 . 2011-02-20 20:52 -------- d-----w- c:\program files\Microsoft Visual Studio 8
2011-02-20 20:27 . 2011-02-20 20:27 -------- d-----w- c:\users\KniebeugenGurkenfeld\AppData\Roaming\DAEMON Tools Lite
2011-02-20 17:34 . 2009-12-14 11:44 39352 ----a-w- c:\windows\system32\drivers\CSVirtualDiskDrv.sys
2011-02-20 17:34 . 2009-12-14 11:44 88632 ----a-w- c:\windows\system32\drivers\CSCrySec.sys
2011-02-20 17:34 . 2011-03-05 22:12 -------- dc----w- c:\windows\system32\DRVSTORE
2011-02-18 17:56 . 2011-03-08 12:41 -------- d-----w- c:\users\KniebeugenGurkenfeld\AppData\Local\LogMeIn Hamachi
2011-02-18 17:53 . 2011-02-18 17:54 -------- d-----w- c:\program files\LogMeIn Hamachi
2011-02-16 13:44 . 2011-02-16 20:20 -------- d-----w- c:\users\KniebeugenGurkenfeld\AppData\Roaming\DVD Flick
2011-02-16 13:42 . 2008-08-31 12:27 28672 ----a-w- c:\windows\system32\mousewheel.ocx
2011-02-16 13:42 . 2007-08-31 17:36 36864 ----a-w- c:\windows\system32\trayicon_handler.ocx
2011-02-16 13:42 . 2003-01-26 12:41 40960 ----a-w- c:\windows\system32\ssubtmr6.dll
2011-02-16 13:42 . 1998-06-23 23:00 164144 ----a-w- c:\windows\system32\comct232.ocx
2011-02-16 13:42 . 2011-02-16 13:43 -------- d-----w- c:\program files\DVD Flick
2011-02-16 13:31 . 2011-02-16 13:32 -------- d-----w- c:\users\KniebeugenGurkenfeld\AppData\Roaming\DivX
2011-02-15 14:57 . 2011-03-07 22:20 -------- d-----w- c:\users\KniebeugenGurkenfeld\AppData\Roaming\Skype
2011-02-14 08:26 . 2011-02-14 08:26 -------- d-----w- c:\users\Leon\AppData\Roaming\Publish Providers
2011-02-14 08:26 . 2011-02-17 10:56 -------- d-----w- c:\users\Leon\AppData\Roaming\DivX
2011-02-14 08:26 . 2011-02-14 08:26 -------- d-----w- c:\users\Leon\AppData\Roaming\Sony
2011-02-14 08:26 . 2011-02-14 08:26 -------- d-----w- c:\users\Leon\AppData\Local\Sony
2011-02-11 14:48 . 2010-10-01 14:20 307200 ----a-w- c:\windows\system32\TubeFinder.exe
2011-02-11 14:48 . 2009-06-19 18:51 84512 ----a-w- c:\windows\system32\PICCLP32.OCX
2011-02-11 14:48 . 2009-06-19 18:51 364544 ----a-w- c:\windows\system32\PropertyGrid.ocx
2011-02-11 14:48 . 2009-06-19 18:51 119568 ----a-w- c:\windows\system32\VB6FR.DLL
2011-02-11 14:48 . 2009-06-19 18:51 9728 ----a-w- c:\windows\system32\PCCLPFR.DLL
2011-02-11 14:48 . 2009-06-19 18:51 32768 ----a-w- c:\windows\system32\CMDLGFR.DLL
2011-02-11 14:48 . 2009-06-19 18:51 24576 ----a-w- c:\windows\system32\ControlSubX.ocx
2011-02-11 14:48 . 2009-06-19 18:51 141312 ----a-w- c:\windows\system32\MSCMCFR.DLL
2011-02-11 14:48 . 2011-02-11 14:48 -------- d-----w- c:\program files\Free FLV Converter
2011-02-11 05:10 . 2011-02-11 05:10 -------- d-----w- c:\program files\Vstplugins
2011-02-11 05:10 . 2011-02-11 13:57 -------- d-----w- c:\programdata\Sony
2011-02-11 05:09 . 2011-02-11 13:57 -------- d-----w- c:\program files\Sony
2011-02-11 05:06 . 2011-02-11 05:06 -------- d-----w- c:\program files\Sony Setup
2011-02-10 20:49 . 2011-02-10 20:49 -------- d-----w- c:\program files\Ask.com
2011-02-09 18:04 . 2011-02-09 18:04 -------- d-----w- c:\programdata\ALM
2011-02-09 17:40 . 2010-03-27 17:06 67032 ----a-w- c:\program files\Mozilla Firefox\plugins\npContribute.dll
2011-02-09 17:33 . 2011-02-09 17:33 -------- d-----w- c:\program files\My Company Name
2011-02-09 14:07 . 2011-01-05 03:37 2329088 ----a-w- c:\windows\system32\win32k.sys
2011-02-09 14:07 . 2010-12-18 05:29 541184 ----a-w- c:\windows\system32\kerberos.dll
2011-02-09 14:07 . 2011-01-05 05:37 428032 ----a-w- c:\windows\system32\vbscript.dll
2011-02-09 13:50 . 2011-02-11 04:44 -------- d-----w- c:\users\Mediazentrum
.
.
(((((((((((((((((((((((((((((((((((( Find3M Bericht ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-03-09 13:41 . 2010-06-24 10:33 18328 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2011-02-02 16:11 . 2010-10-06 14:44 222080 ------w- c:\windows\system32\MpSigStub.exe
2011-01-30 10:53 . 2011-01-30 10:52 290816 ------w- c:\windows\Setup1.exe
2011-01-30 10:53 . 2011-01-30 10:52 74752 ----a-w- c:\windows\ST6UNST.EXE
2010-12-29 12:56 . 2010-12-29 12:56 413696 ----a-w- c:\windows\system32\wrap_oal.dll
2010-12-29 12:56 . 2010-12-29 12:56 110592 ----a-w- c:\windows\system32\OpenAL32.dll
.
.
(((((((((((((((((((((((((((( Autostartpunkte der Registrierung ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{7b13ec3e-999a-4b70-b9cb-2617b8323822}]
2010-12-01 10:27 2735200 ----a-w- c:\program files\Zynga\tbZyng.dll
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
2010-09-28 21:44 1400712 ----a-w- c:\program files\Ask.com\GenericAskToolbar.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{7b13ec3e-999a-4b70-b9cb-2617b8323822}"= "c:\program files\Zynga\tbZyng.dll" [2010-12-01 2735200]
"{D4027C7F-154A-4066-A1AD-4243D8127440}"= "c:\program files\Ask.com\GenericAskToolbar.dll" [2010-09-28 1400712]
.
[HKEY_CLASSES_ROOT\clsid\{7b13ec3e-999a-4b70-b9cb-2617b8323822}]
.
[HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1]
[HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd]
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{7B13EC3E-999A-4B70-B9CB-2617B8323822}"= "c:\program files\Zynga\tbZyng.dll" [2010-12-01 2735200]
"{D4027C7F-154A-4066-A1AD-4243D8127440}"= "c:\program files\Ask.com\GenericAskToolbar.dll" [2010-09-28 1400712]
.
[HKEY_CLASSES_ROOT\clsid\{7b13ec3e-999a-4b70-b9cb-2617b8323822}]
.
[HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1]
[HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP]
@="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}"
[HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}]
2010-05-27 02:40 120176 ----a-w- c:\program files\EgisTec MyWinLocker\x86\PSDProtect.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2010-07-01 39408]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"LManager"="c:\program files\Launch Manager\LManager.exe" [2010-05-25 960080]
"IAAnotif"="c:\program files\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2009-10-13 186904]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RtHDVCpl.exe" [2010-06-22 9292392]
"SuiteTray"="c:\program files\EgisTec MyWinLockerSuite\x86\SuiteTray.exe" [2010-05-27 337264]
"EgisUpdate"="c:\program files\EgisTec IPS\EgisUpdate.exe" [2010-03-11 201584]
"EgisTecPMMUpdate"="c:\program files\EgisTec IPS\PmmUpdate.exe" [2010-03-11 407920]
"mwlDaemon"="c:\program files\EgisTec MyWinLocker\x86\mwlDaemon.exe" [2010-05-27 349552]
"Norton Online Backup"="c:\program files\Symantec\Norton Online Backup\NOBuClient.exe" [2010-06-01 966488]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2010-06-16 141848]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2010-06-16 173592]
"Persistence"="c:\windows\system32\igfxpers.exe" [2010-06-16 150552]
"iSyncData"="c:\program files\Acer\Android Manager\iSync.exe" [2010-01-08 407416]
"AndroidManager"="c:\program files\Acer\Android Manager\AML.exe" [2010-01-08 508280]
"iPatchData"="c:\program files\Acer\Updater\iUpdate.exe" [2010-07-21 492096]
"Acer ePower Management"="c:\program files\Acer\Acer ePower Management\ePowerTray.exe" [2010-06-11 715296]
"YouCam Mirage"="c:\program files\CyberLink\YouCam\YCMMirage.exe" [2010-08-20 136488]
"YouCam Tray"="c:\program files\CyberLink\YouCam\YouCamTray.exe" [2010-08-20 162912]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2010-06-20 35760]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-06-09 976832]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-05-14 248552]
"AdobeAAMUpdater-1.0"="c:\program files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2010-07-29 497648]
"AdobeCS4ServiceManager"="c:\program files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" [2008-08-14 611712]
"AdobeCS5ServiceManager"="c:\program files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" [2010-02-22 406992]
"SwitchBoard"="c:\program files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe" [2010-02-19 517096]
"LogMeIn Hamachi Ui"="c:\program files\LogMeIn Hamachi\hamachi-2-ui.exe" [2010-12-06 1910152]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2008-10-25 31072]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2011-02-26 281768]
"DivXUpdate"="c:\program files\DivX\DivX Update\DivXUpdate.exe" [2011-02-15 1230704]
"Malwarebytes' Anti-Malware (reboot)"="c:\program files\Malwarebytes' Anti-Malware\mbam.exe" [2010-12-20 963976]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"GrpConv"="grpconv -o" [X]
.
c:\users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\StartUp\
Think Green Weather.lnk - c:\program files\Stardock\DesktopGadgets\Think Green Weather\Think Green Weather.exe [2010-10-22 728576]
.
c:\users\KniebeugenGurkenfeld\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\StartUp\
OpenOffice.org 3.2.lnk - c:\program files\OpenOffice.org 3\program\quickstart.exe [2010-5-20 1195008]
Think Green Weather.lnk - c:\program files\Stardock\DesktopGadgets\Think Green Weather\Think Green Weather.exe [2010-10-22 728576]
.
c:\users\League of Legends\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\StartUp\
Think Green Weather.lnk - c:\program files\Stardock\DesktopGadgets\Think Green Weather\Think Green Weather.exe [2010-10-22 728576]
.
c:\users\Leon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OpenOffice.org 3.2.lnk - c:\program files\OpenOffice.org 3\program\quickstart.exe [2010-5-20 1195008]
.
c:\users\Mediazentrum\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\StartUp\
Think Green Weather.lnk - c:\program files\Stardock\DesktopGadgets\Think Green Weather\Think Green Weather.exe [2010-10-22 728576]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Acer VCM.lnk - c:\program files\Acer\Acer VCM\AcerVCM.exe [2010-7-1 704032]
.
c:\users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Think Green Weather.lnk - c:\program files\Stardock\DesktopGadgets\Think Green Weather\Think Green Weather.exe [2010-10-22 728576]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"mixer1"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]
@="Service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
.
R0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [2010-11-11 691696]
R1 mwlPSDFilter;mwlPSDFilter;c:\windows\system32\DRIVERS\mwlPSDFilter.sys [2009-06-03 18992]
R1 mwlPSDNServ;mwlPSDNServ;c:\windows\system32\DRIVERS\mwlPSDNServ.sys [2009-06-03 16432]
R1 mwlPSDVDisk;mwlPSDVDisk;c:\windows\system32\DRIVERS\mwlPSDVDisk.sys [2009-06-03 60976]
R1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [2009-07-13 48128]
R2 AdobeActiveFileMonitor9.0;Adobe Active File Monitor V9;c:\program files\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe [2010-09-30 169408]
R2 Akamai;Akamai NetSession Interface;c:\windows\System32\svchost.exe [2009-07-14 20992]
R2 AntiVirMailService;Avira AntiVir MailGuard;c:\program files\Avira\AntiVir Desktop\avmailc.exe [2011-02-26 339624]
R2 AntiVirSchedulerService;Avira AntiVir Planer;c:\program files\Avira\AntiVir Desktop\sched.exe [2011-02-26 135336]
R2 AntiVirWebService;Avira AntiVir WebGuard;c:\program files\Avira\AntiVir Desktop\AVWEBGRD.EXE [2011-03-08 421032]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 cvhsvc;Client Virtualization Handler;c:\program files\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [2010-02-28 821664]
R2 DsiWMIService;Dritek WMI Service;c:\program files\Launch Manager\dsiwmis.exe [2010-05-25 325200]
R2 ePowerSvc;Acer ePower Service;c:\program files\Acer\Acer ePower Management\ePowerSvc.exe [2010-06-11 735776]
R2 GREGService;GREGService;c:\program files\Acer\Registration\GREGsvc.exe [2010-01-08 23584]
R2 gupdate;Google Update Service (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2010-09-10 135664]
R2 Hamachi2Svc;LogMeIn Hamachi 2.0 Tunneling Engine;c:\program files\LogMeIn Hamachi\hamachi-2.exe [2010-12-06 1238408]
R2 ICQ Service;ICQ Service;c:\program files\ICQ6Toolbar\ICQ Service.exe [2010-09-06 247096]
R2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;c:\program files\Lavasoft\Ad-Aware\AAWService.exe [2011-03-04 1405384]
R2 MWLService;MyWinLocker Service;c:\program files\EgisTec MyWinLocker\x86\MWLService.exe [2010-05-27 305520]
R2 NOBU;Norton Online Backup;c:\program files\Symantec\Norton Online Backup\NOBuAgent.exe SERVICE [x]
R2 RS_Service;Raw Socket Service;c:\program files\Acer\Acer VCM\RS_Service.exe [2010-01-29 260640]
R2 sftlist;Application Virtualization Client;c:\program files\Microsoft Application Virtualization Client\sftlist.exe [2010-04-23 483688]
R2 Updater Service;Updater Service;c:\program files\Acer\Acer Updater\UpdaterService.exe [2010-01-28 243232]
R3 CEDRIVER55;CEDRIVER55;c:\users\League of Legends\Desktop\Random Stuff -_-\Cheat Engine\dbk32.sys [2010-06-15 61056]
R3 clwvd;CyberLink WebCam Virtual Driver;c:\windows\system32\DRIVERS\clwvd.sys [2010-08-20 27632]
R3 EUCR;EUCR;c:\windows\system32\DRIVERS\EUCR6SK.SYS [2010-06-17 82768]
R3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C62x86.sys [2010-05-20 68208]
R3 Lavasoft Kernexplorer;Lavasoft helper driver;c:\program files\Lavasoft\Ad-Aware\KernExplorer.sys [2011-03-04 15232]
R3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\mbamswissarmy.sys [2010-12-20 38224]
R3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4640000]
R3 SCREAMINGBDRIVER;Screaming Bee Audio;c:\windows\system32\drivers\ScreamingBAudio.sys [2009-03-27 23064]
R3 sdAuxService;PC Tools Auxiliary Service;c:\program files\PC Tools Security\pctsAuxs.exe [2010-03-15 366840]
R3 Sftfs;Sftfs;c:\windows\system32\DRIVERS\Sftfslh.sys [2010-04-23 550760]
R3 Sftplay;Sftplay;c:\windows\system32\DRIVERS\Sftplaylh.sys [2010-04-23 195944]
R3 Sftredir;Sftredir;c:\windows\system32\DRIVERS\Sftredirlh.sys [2010-04-23 21864]
R3 Sftvol;Sftvol;c:\windows\system32\DRIVERS\Sftvollh.sys [2010-04-23 19304]
R3 sftvsa;Application Virtualization Service Agent;c:\program files\Microsoft Application Virtualization Client\sftvsa.exe [2010-04-23 209768]
R3 SwitchBoard;SwitchBoard;c:\program files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
R3 XDva289;XDva289;c:\windows\system32\XDva289.sys [x]
R3 XDva356;XDva356;c:\windows\system32\XDva356.sys [x]
S0 Lbd;Lbd;c:\windows\system32\DRIVERS\Lbd.sys [2011-03-04 64512]
S0 PCTCore;PCTools KDS;c:\windows\system32\drivers\PCTCore.sys [2010-11-25 239168]
S0 pctDS;PC Tools Data Store;c:\windows\system32\drivers\pctDS.sys [2010-07-16 338880]
S0 pctEFA;PC Tools Extended File Attributes;c:\windows\system32\drivers\pctEFA.sys [2010-07-16 656320]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*NewlyCreated* - PXHELP20
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
Akamai REG_MULTI_SZ Akamai
.
Inhalt des "geplante Tasks" Ordners
.
2011-03-10 c:\windows\Tasks\Ad-Aware Update (Weekly).job
- c:\program files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2011-03-04 08:20]
.
2011-03-10 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-09-10 09:26]
.
2011-03-10 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-09-10 09:26]
.
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&m=aod255&r=27b50910k405l04f4wwi5w4732u234
mStart Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&m=aod255&r=27b50910k405l04f4wwi5w4732u234
IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_E11712C84EA7E12B.dll/cmsidewiki.html
IE: Nach Microsoft E&xel exportieren - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
LSP: c:\program files\Common Files\PC Tools\Lsp\PCTLsp.dll
LSP: c:\program files\Avira\AntiVir Desktop\avsda.dll
FF - ProfilePath - c:\users\Mediazentrum\AppData\Roaming\Mozilla\Firefox\Profiles\sbvt0t63.default\
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
FF - Ext: Adobe Contribute Toolbar: {01A8CA0A-4C96-465b-A49B-65C46FAD54F9} - c:\program files\Adobe\Adobe Contribute CS5\Plugins\FirefoxPlugin\{01A8CA0A-4C96-465b-A49B-65C46FAD54F9}
FF - Ext: DivX Plus Web Player HTML5 <video>: {23fcfd51-4958-4f00-80a3-ae97e717ed8b} - c:\program files\DivX\DivX Plus Web Player\firefox\html5video
FF - Ext: DivX HiQ: {6904342A-8307-11DF-A508-4AE2DFD72085} - c:\program files\DivX\DivX Plus Web Player\firefox\wpa
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Toolbar-Locked - (no file)
HKLM-Run-SynTPEnh - %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
HKLM-RunOnce-<NO NAME> - (no file)
AddRemove-JDownloader - c:\users\League of Legends\uninstall.exe
AddRemove-Stardock MyColors - c:\programdata\{CFA6F4AE-B6D4-4F71-BBA4-ACFE805E7214}\MyColors.exe
AddRemove-{6F7614CC-F33A-4877-8814-49856F441F3C} - c:\programdata\{CFA6F4AE-B6D4-4F71-BBA4-ACFE805E7214}\MyColors.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2011-03-10 18:20:56
ComboFix-quarantined-files.txt 2011-03-10 17:20
.
Vor Suchlauf: 16 Verzeichnis(se), 89.921.994.752 Bytes frei
Nach Suchlauf: 24 Verzeichnis(se), 108.716.199.936 Bytes frei
.
- - End Of File - - 7CC8990EDBFF15B88B8775802EA5BD89