Trojaner-Board - softwareupdater.bootstrapper.exe auf Laptop und PC

Hier der neue Bericht:
Combofix Logfile:
Code:
ComboFix 13-07-08.02 - gesti 07.07.2013  22:04:14.2.2 - x86

ausgeführt von:: c:\users\gesti\Downloads\ComboFix.exe

Benutzte Befehlsschalter :: c:\users\gesti\Desktop\CFScript.txt

.

.

((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))

.

.

c:\programdata\ntuser.dat

c:\windows\pkunzip.pif

c:\windows\pkzip.pif

.

.

(((((((((((((((((((((((   Dateien erstellt von 2013-06-07 bis 2013-07-07  ))))))))))))))))))))))))))))))

.

.

2013-07-07 20:15 . 2013-07-07 20:15        --------        d-----w-        c:\users\Kompetenzteam Bonn\AppData\Local\temp

2013-07-07 20:15 . 2013-07-07 20:15        --------        d-----w-        c:\users\gesti_2\AppData\Local\temp

2013-07-07 20:15 . 2013-07-07 20:15        --------        d-----w-        c:\users\Default\AppData\Local\temp

2013-07-07 20:15 . 2013-07-07 20:15        --------        d-----w-        c:\users\gesti\AppData\Local\temp

2013-07-07 19:42 . 2013-07-07 19:42        60872        ----a-w-        c:\programdata\Microsoft\Windows Defender\Definition Updates\{75B53DF4-4AE7-4BD9-8833-387A616CAC4B}\offreg.dll

2013-07-07 19:24 . 2013-07-07 19:24        --------        d-----w-        c:\windows\ERUNT

2013-07-07 19:23 . 2013-07-07 19:24        --------        d-----w-        C:\JRT

2013-07-07 18:20 . 2013-07-07 19:06        --------        d-----w-        c:\programdata\Malwarebytes' Anti-Malware (portable)

2013-07-07 18:19 . 2013-07-07 18:19        --------        d-----w-        c:\programdata\Malwarebytes

2013-07-07 17:46 . 2013-07-07 17:46        --------        d-----w-        c:\program files\LyricsSpeaker

2013-07-07 14:17 . 2013-07-07 14:17        --------        d-----w-        C:\FRST

2013-07-01 12:15 . 2013-06-12 04:18        7068072        ----a-w-        c:\programdata\Microsoft\Windows Defender\Definition Updates\{75B53DF4-4AE7-4BD9-8833-387A616CAC4B}\mpengine.dll

2013-07-01 12:05 . 2013-07-01 12:05        --------        d-----w-        C:\english_save_planet

2013-06-15 12:19 . 2007-10-30 20:57        7463        ----a-w-        c:\windows\system32\drivers\tkbtnpn.sys

2013-06-15 12:19 . 2007-10-30 20:57        1490999        ----a-w-        c:\windows\system32\tkbtnpn1.dll

2013-06-15 12:17 . 2010-12-02 09:41        531968        ------w-        c:\windows\system32\stapi32.dll

2013-06-15 12:16 . 2010-12-02 09:40        524288        ----a-w-        c:\windows\system32\ctapo32.dll

2013-06-15 12:16 . 2010-12-02 09:41        4603904        ----a-w-        c:\windows\system32\stlang.dll

2013-06-15 12:16 . 2010-12-02 09:41        262226        ----a-w-        c:\windows\system32\stacsv.exe

2013-06-15 12:16 . 2010-12-02 09:40        12738652        ----a-w-        c:\windows\system32\idtcpl.cpl

2013-06-15 12:16 . 2010-12-02 09:40        86016        ----a-w-        c:\windows\system32\AESTCom.dll

2013-06-15 12:16 . 2010-12-02 09:40        81920        ----a-w-        c:\windows\system32\AEstSrv.exe

2013-06-15 12:16 . 2010-12-02 09:40        61440        ----a-w-        c:\windows\system32\aestaren.dll

2013-06-15 12:16 . 2010-12-02 09:40        380928        ----a-w-        c:\windows\system32\aestecap.dll

2013-06-15 12:16 . 2010-12-02 09:40        139776        ----a-w-        c:\windows\system32\aestacap.dll

2013-06-15 12:16 . 2013-06-15 12:16        --------        d-----w-        c:\windows\system32\SRSLabs

2013-06-15 12:07 . 2010-12-02 09:41        435200        ----a-w-        c:\windows\system32\drivers\stwrt.sys

2013-06-15 12:07 . 2010-12-02 09:41        405504        ----a-w-        c:\windows\system32\stcplx.dll

2013-06-15 12:07 . 2010-12-02 09:41        947712        ----a-w-        c:\windows\system32\stapo.dll

2013-06-15 12:07 . 2010-12-02 09:41        179712        ----a-w-        c:\windows\system32\st326314.dll

2013-06-15 12:07 . 2010-12-02 09:41        252928        ----a-w-        c:\windows\system32\MaxxAudioAPO30.dll

2013-06-15 12:07 . 2010-12-02 09:41        172032        ----a-w-        c:\windows\system32\MaxxAudioAPOShell.dll

2013-06-15 12:07 . 2013-06-15 12:18        --------        d-----w-        c:\program files\IDT

2013-06-15 12:07 . 2013-06-15 12:07        --------        d-----w-        c:\windows\Dell

2013-06-15 12:06 . 2013-06-15 12:06        --------        d-----w-        c:\program files\Apoint2K

2013-06-15 12:02 . 2013-02-28 19:29        122688        ----a-w-        c:\windows\system32\Vxdif.dll

2013-06-15 12:02 . 2013-04-23 08:29        414512        ----a-w-        c:\windows\system32\drivers\Apfiltr.sys

2013-06-15 11:43 . 2009-09-09 06:53        114688        ----a-w-        c:\windows\system32\RicohMediadriverVer.dll

2013-06-15 11:43 . 2009-06-25 14:58        48128        ----a-w-        c:\windows\system32\drivers\rimmptsk.sys

2013-06-15 11:43 . 2009-06-25 14:25        38400        ----a-w-        c:\windows\system32\drivers\rixdptsk.sys

2013-06-15 11:43 . 2004-09-04 01:00        90112        ----a-w-        c:\windows\system32\snymsico.dll

2013-06-15 11:43 . 2007-07-25 10:48        172032        ----a-w-        c:\windows\system32\rixdicon.dll

2013-06-15 11:39 . 2008-02-29 10:00        1419232        ----a-w-        c:\windows\system32\WdfCoInstaller01005.dll

2013-06-15 11:39 . 2008-02-29 09:12        37008        ----a-w-        c:\windows\system32\drivers\LMouFilt.Sys

2013-06-15 11:39 . 2008-02-29 09:12        35472        ----a-w-        c:\windows\system32\drivers\LHidFilt.Sys

2013-06-15 11:39 . 2008-02-29 09:12        76304        ----a-w-        c:\windows\KHALMNPR.Exe

2013-06-15 11:37 . 2013-06-15 11:37        --------        d-----w-        c:\program files\Intel

2013-06-15 11:37 . 2013-02-27 13:37        53248        ----a-w-        c:\windows\system32\CSVer.dll

2013-06-15 11:36 . 2013-06-15 11:36        --------        d-----w-        C:\Intel

2013-06-15 11:36 . 2013-06-15 12:20        --------        d-----w-        C:\temp

2013-06-15 11:01 . 2013-06-15 11:01        --------        d-----w-        c:\programdata\FreeDriverScout

2013-06-15 10:59 . 2013-06-15 10:59        --------        d-----w-        c:\program files\MyPC Backup

2013-06-15 10:55 . 2013-06-27 05:14        31816        ----a-w-        c:\windows\Launcher.exe

2013-06-15 10:53 . 2013-06-15 10:53        --------        d-----w-        c:\programdata\Package Cache

2013-06-15 10:50 . 2013-06-15 10:51        --------        d-----w-        c:\users\gesti_2\AppData\Local\DownloadGuide

2013-06-14 15:08 . 2013-06-14 15:08        --------        d-----w-        c:\program files\MasterTool-Autorensystem

2013-06-13 14:04 . 2013-06-08 11:41        218112        ----a-w-        c:\program files\Internet Explorer\sqmapi.dll

2013-06-13 14:04 . 2013-06-08 11:13        2706432        ----a-w-        c:\windows\system32\mshtml.tlb

2013-06-12 14:59 . 2013-05-10 03:20        24576        ----a-w-        c:\windows\system32\cryptdlg.dll

2013-06-12 14:59 . 2013-04-25 23:30        1505280        ----a-w-        c:\windows\system32\d3d11.dll

2013-06-12 14:59 . 2013-05-13 04:45        140288        ----a-w-        c:\windows\system32\cryptsvc.dll

2013-06-12 14:59 . 2013-05-13 04:45        1160192        ----a-w-        c:\windows\system32\crypt32.dll

2013-06-12 14:59 . 2013-05-13 04:45        103936        ----a-w-        c:\windows\system32\cryptnet.dll

2013-06-12 14:59 . 2013-05-13 03:08        903168        ----a-w-        c:\windows\system32\certutil.exe

2013-06-12 14:59 . 2013-05-13 03:08        43008        ----a-w-        c:\windows\system32\certenc.dll

2013-06-12 14:59 . 2013-04-26 04:55        492544        ----a-w-        c:\windows\system32\win32spl.dll

2013-06-12 14:59 . 2013-04-17 07:02        1230336        ----a-w-        c:\windows\system32\WindowsCodecs.dll

2013-06-12 14:59 . 2013-05-06 05:06        3968872        ----a-w-        c:\windows\system32\ntkrnlpa.exe

2013-06-12 14:59 . 2013-05-06 05:06        3913576        ----a-w-        c:\windows\system32\ntoskrnl.exe

2013-06-12 14:59 . 2013-05-08 05:38        1293672        ----a-w-        c:\windows\system32\drivers\tcpip.sys

2013-06-09 12:22 . 2013-06-09 12:22        --------        d-----w-        c:\program files\iPod

2013-06-09 12:22 . 2013-06-09 12:23        --------        d-----w-        c:\programdata\188F1432-103A-4ffb-80F1-36B633C5C9E1

2013-06-09 12:22 . 2013-06-09 12:23        --------        d-----w-        c:\program files\iTunes

.

.

.

((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2013-07-01 16:39 . 2013-02-28 14:46        44000        ----a-w-        c:\windows\system32\drivers\kltdi.sys

2013-06-12 14:55 . 2012-04-05 07:15        692104        ----a-w-        c:\windows\system32\FlashPlayerApp.exe

2013-06-12 14:55 . 2011-05-14 12:14        71048        ----a-w-        c:\windows\system32\FlashPlayerCPLApp.cpl

2013-05-07 09:03 . 2012-08-13 14:49        145040        ----a-w-        c:\windows\system32\drivers\kneps.sys

2013-05-07 09:03 . 2012-08-13 16:24        74848        ----a-w-        c:\windows\system32\drivers\klflt.sys

2013-05-02 00:06 . 2009-12-16 10:16        238872        ------w-        c:\windows\system32\MpSigStub.exe

2013-05-01 01:59 . 2013-05-01 01:59        94208        ----a-w-        c:\windows\system32\QuickTimeVR.qtx

2013-05-01 01:59 . 2013-05-01 01:59        69632        ----a-w-        c:\windows\system32\QuickTime.qts

2013-04-13 04:45 . 2013-05-17 08:45        474624        ----a-w-        c:\windows\apppatch\AcSpecfc.dll

2013-04-13 04:45 . 2013-05-17 08:45        2176512        ----a-w-        c:\windows\apppatch\AcGenral.dll

2013-04-12 13:45 . 2013-04-23 19:57        1211752        ----a-w-        c:\windows\system32\drivers\ntfs.sys

2013-04-10 05:18 . 2013-05-17 08:45        728424        ----a-w-        c:\windows\system32\drivers\dxgkrnl.sys

2013-04-10 05:18 . 2013-05-17 08:45        218984        ----a-w-        c:\windows\system32\drivers\dxgmms1.sys

2013-04-10 03:14 . 2013-05-17 08:50        2347520        ----a-w-        c:\windows\system32\win32k.sys

2006-06-15 19:33 . 2013-07-07 19:27        233472        ----a-w-        c:\program files\mozilla firefox\plugins\CrazyTalk4Native.dll

2006-05-25 17:43 . 2013-07-07 19:27        204895        ----a-w-        c:\program files\mozilla firefox\plugins\ctdomemhelper.dll

2005-09-29 13:41 . 2013-07-07 19:27        77824        ----a-w-        c:\program files\mozilla firefox\plugins\ctframeplayerobject.dll

2006-06-19 12:10 . 2013-07-07 19:27        426081        ----a-w-        c:\program files\mozilla firefox\plugins\ctplayerobject.dll

2005-02-02 11:19 . 2013-07-07 19:27        458752        ----a-w-        c:\program files\mozilla firefox\plugins\imagickrt.dll

2006-04-10 17:35 . 2013-07-07 19:27        139264        ----a-w-        c:\program files\mozilla firefox\plugins\rlcontentclass.dll

2005-11-09 10:10 . 2013-07-07 19:27        204800        ----a-w-        c:\program files\mozilla firefox\plugins\RLMusicPacker.dll

2005-11-09 10:42 . 2013-07-07 19:27        106496        ----a-w-        c:\program files\mozilla firefox\plugins\RLMusicUnpacker.dll

2006-01-04 10:22 . 2013-07-07 19:27        212992        ----a-w-        c:\program files\mozilla firefox\plugins\RLVoicePacker.dll

2006-01-04 10:21 . 2013-07-07 19:27        167936        ----a-w-        c:\program files\mozilla firefox\plugins\RLVoiceUnpacker.dll

.

.

((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))

.

.

*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 

REGEDIT4

.

[HKEY_LOCAL_MACHINE\SOFTWARE\~\Browser Helper Objects\{15467C9F-3784-4109-89C9-6ED7100B96B8}]

2013-06-24 09:00        185856        ----a-w-        c:\program files\LyricsSpeaker\116.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveBlacklistedOverlay]

@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}"

[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}]

2013-06-06 21:57        578512        ----a-w-        c:\program files\Google\Drive\googledrivesync32.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedEditOverlay]

@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}"

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedOverlay]

@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}"

[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}]

2013-06-06 21:57        578512        ----a-w-        c:\program files\Google\Drive\googledrivesync32.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedEditOverlay]

@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}"

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedOverlay]

@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}"

[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}]

2013-06-06 21:57        578512        ----a-w-        c:\program files\Google\Drive\googledrivesync32.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedViewOverlay]

@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43}"

[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43}]

2013-06-06 21:57        578512        ----a-w-        c:\program files\Google\Drive\googledrivesync32.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncedOverlay]

@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}"

[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}]

2013-06-06 21:57        578512        ----a-w-        c:\program files\Google\Drive\googledrivesync32.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncingOverlay]

@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}"

[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}]

2013-06-06 21:57        578512        ----a-w-        c:\program files\Google\Drive\googledrivesync32.dll

.

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1174016]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"OEM04Mon.exe"="c:\windows\OEM04Mon.exe" [2007-06-10 36864]

"Windows Mobile Device Center"="c:\windows\WindowsMobile\wmdc.exe" [2007-05-31 648072]

"BrStsWnd"="c:\program files\Brownie\BrstsWnd.exe" [2009-08-19 3618104]

"APSDaemon"="c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2013-04-21 59720]

"IntelliPoint"="c:\program files\Microsoft IntelliPoint\ipoint.exe" [2011-08-01 1821576]

"AVP"="c:\program files\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe" [2013-02-28 356376]

"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2013-05-01 421888]

"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2013-05-31 152392]

"Kernel and Hardware Abstraction Layer"="KHALMNPR.EXE" [2008-02-29 76304]

"Apoint"="c:\program files\Apoint2K\Apoint.exe" [2013-04-25 530776]

"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-09-03 13552160]

"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2008-09-03 92704]

"NVHotkey"="c:\windows\system32\nvHotkey.dll" [2008-09-03 96800]

"SysTrayApp"="c:\program files\IDT\WDM\sttray.exe" [2010-12-02 536668]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"EnableUIADesktopToggle"= 0 (0x0)

"ConsentPromptBehaviorAdmin"= 5 (0x5)

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]

"NoResolveTrack"= 1 (0x1)

"NoFileAssociate"= 0 (0x0)

.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

@=""

.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

@="Driver"

.

[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Adobe Acrobat - Schnellstart.lnk]

path=c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Acrobat - Schnellstart.lnk

backup=c:\windows\pss\Adobe Acrobat - Schnellstart.lnk.CommonStartup

backupExtension=.CommonStartup

.

[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Adobe Reader Synchronizer.lnk]

path=c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Reader Synchronizer.lnk

backup=c:\windows\pss\Adobe Reader Synchronizer.lnk.CommonStartup

backupExtension=.CommonStartup

.

[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Nach Updates suchen.lnk]

path=c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\Nach Updates suchen.lnk

backup=c:\windows\pss\Nach Updates suchen.lnk.CommonStartup

backupExtension=.CommonStartup

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Acrobat Assistant 8.0]

2006-10-22 22:24        620152        ----a-w-        c:\program files\Adobe\Acrobat 8.0\Acrobat\acrotray.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe_ID0EYTHM]

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DELL Webcam Manager]

2007-07-27 15:43        118784        ------w-        c:\program files\Dell\Dell Webcam Manager\DellWMgr.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor]

2009-02-26 17:36        30040        ----a-w-        c:\program files\Microsoft Office\Office12\GrooveMonitor.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OM2_Monitor]

2009-11-25 19:42        54672        ----a-w-        c:\program files\OLYMPUS\OLYMPUS Master 2\FirstStart.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]

2013-05-01 01:59        421888        ----a-w-        c:\program files\QuickTime\QTTask.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RemoTerm.exe]

2010-02-24 09:34        220944        ----a-w-        c:\program files\Common Files\PCTV Systems\RemoTerm\remoterm.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sidebar]

2010-11-20 12:17        1174016        ----a-w-        c:\program files\Windows Sidebar\sidebar.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ToolwizCareFree]

2013-03-27 13:29        5191936        ----a-w-        c:\program files\ToolwizCareFree\ToolwizCares.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus]

"DisableMonitoring"=dword:00000001

.

R0 ZetSFD;Zetera Storage Class Filter Driver;c:\windows\system32\DRIVERS\ZetSFD.sys [2007-08-08 13824]

R2 BackupStack;Computer Backup (MyPC Backup);c:\program files\MyPC Backup\BackupStack.exe [2013-05-31 32808]

R2 WatAdminSvc;Windows-Aktivierungstechnologieservice;c:\windows\system32\Wat\WatAdminSvc.exe [2011-07-30 1343400]

R3 ACTIVhidmini;Promethean USB Board Driver;c:\windows\system32\DRIVERS\ACTIVhidmini.sys [2008-12-17 58240]

R3 dc3d;Microsoft-Hardware – Geräteerkennungstreiber;c:\windows\system32\DRIVERS\dc3d.sys [2011-05-18 40320]

R3 FirebirdServerMAGIXInstance;Firebird Server - MAGIX Instance;c:\program files\MAGIX\Common\Database\bin\fbserver.exe [2005-11-17 1527900]

R3 Ltn_stk7070P;PCTV based TV tuner device;c:\windows\system32\DRIVERS\Ltn_stk7070P.sys [2007-06-14 466048]

R3 Ltn_stkrc;PCTV Infrared Receiver;c:\windows\system32\DRIVERS\Ltn_stkrc.sys [2007-06-13 13440]

R3 netw5v32;Intel(R) Wireless WiFi Link 5000-Serie - Adaptertreiber für Windows Vista 32 Bit;c:\windows\system32\DRIVERS\netw5v32.sys [2009-07-13 4231168]

R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2012-08-23 14848]

R3 SMARTMouseFilterx86;HID-compliant mouse;c:\windows\system32\DRIVERS\SMARTMouseFilterx86.sys [2009-09-17 11048]

R3 SMARTVHidMini2000x86;SMART HID Device;c:\windows\system32\DRIVERS\SMARTVHidMini2000x86.sys [2009-09-17 14120]

R3 SMARTVTabletPCx86;SMART Virtual TabletPC;c:\windows\system32\DRIVERS\SMARTVTabletPCx86.sys [2009-12-15 13440]

R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2012-08-23 49664]

R3 UPnPService;UPnPService;c:\program files\Common Files\MAGIX Shared\UPnPService\UPnPService.exe [2006-12-14 544768]

R3 ZetMPD;ZetMPD;c:\windows\system32\DRIVERS\ZetMPD.sys [2007-08-08 6656]

S0 BTOWSVF;BTOWSVF;c:\windows\system32\Drivers\BTOWSVF.sys [2013-03-27 43584]

S0 KSafeDISK;KSafeDISK;c:\windows\system32\Drivers\KSafeDISK.sys [2013-03-27 48192]

S1 BTOWSFF;BTOWSFF;c:\windows\system32\Drivers\BTOWSFF.sys [2013-03-27 27200]

S1 KLIM6;Kaspersky Anti-Virus NDIS 6 Filter;c:\windows\system32\DRIVERS\klim6.sys [2012-08-02 24408]

S1 kltdi;kltdi;c:\windows\system32\DRIVERS\kltdi.sys [2013-07-01 44000]

S1 kneps;kneps;c:\windows\system32\DRIVERS\kneps.sys [2013-05-07 145040]

S1 Uim_Vim;UIM Virtual Image Plugin;c:\windows\system32\Drivers\Uim_Vim.sys [2012-06-09 283344]

S2 AESTFilters;Andrea ST Filters Service;c:\program files\IDT\WDM\aestsrv.exe [2010-12-02 81920]

S2 SandraAgentSrv;SiSoftware Deployment Agent Service;c:\program files\SiSoftware\SiSoftware Sandra Lite 2013.SP2\RpcAgentSrv.exe [2009-03-01 71832]

S2 SFSZ;DataPlow SFS for Zetera Storage Devices;c:\windows\system32\drivers\sfsz.sys [2007-08-14 289792]

S2 Z-SANService;Z-SAN Service;c:\program files\SC101\Z-SANService.exe [2007-08-08 376891]

S3 ActivHidSerMini;Promethean Serial Board Driver;c:\windows\system32\DRIVERS\activhidsermini.sys [2008-12-17 55424]

S3 azvusb;Virtual USB Hub;c:\windows\system32\DRIVERS\azvusb.sys [2009-08-24 44544]

S3 klkbdflt;Kaspersky Lab KLKBDFLT;c:\windows\system32\DRIVERS\klkbdflt.sys [2013-02-28 25944]

S3 klmouflt;Kaspersky Lab KLMOUFLT;c:\windows\system32\DRIVERS\klmouflt.sys [2013-02-28 25944]

S3 NETwLv32;    Intel(R) Wireless WiFi Link der Serie 5000 Adaptertreiber für Windows Vista 32-Bit;c:\windows\system32\DRIVERS\NETwLv32.sys [2010-10-07 6639616]

S3 OEM04Vfx;Creative Camera OEM004 Video VFX Driver;c:\windows\system32\DRIVERS\OEM04Vfx.sys [2007-03-05 7424]

S3 OEM04Vid;Creative Camera OEM004 Driver;c:\windows\system32\DRIVERS\OEM04Vid.sys [2007-10-10 234720]

S3 prmvmouse;Promethean HID Mouse Service;c:\windows\system32\DRIVERS\activmouse.sys [2008-12-17 4352]

S3 ZetBus;Zetera Virtual Bus;c:\windows\system32\DRIVERS\ZetBus.sys [2007-08-08 15488]

.

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]

WindowsMobile        REG_MULTI_SZ           wcescomm rapimgr

LocalServiceRestricted        REG_MULTI_SZ           WcesComm RapiMgr

.

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]

2013-06-24 12:57        1165776        ----a-w-        c:\program files\Google\Chrome\Application\27.0.1453.116\Installer\chrmstp.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{9C450606-ED24-4958-92BA-B8940C99D441}]

2009-03-04 15:32        8192        ----a-w-        c:\program files\PixiePack Codec Pack\InstallerHelper.exe

.

Inhalt des "geplante Tasks" Ordners

.

2013-07-07 c:\windows\Tasks\Adobe Flash Player Updater.job

- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-05 14:55]

.

2013-07-07 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job

- c:\program files\Google\Update\GoogleUpdate.exe [2009-12-19 16:04]

.

2013-07-07 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

- c:\program files\Google\Update\GoogleUpdate.exe [2009-12-19 16:04]

.

2013-07-07 c:\windows\Tasks\LyricsSpeaker Update.job

- c:\program files\LyricsSpeaker\LyricsUpd.exe [2013-06-24 09:00]

.

.

------- Zusätzlicher Suchlauf -------

.

uStart Page = about:newtab

uDefault_Search_URL = hxxp://www.google.com

mStart Page = about:newtab

mSearch Bar = hxxp://www.google.com

uInternet Settings,ProxyOverride = *.local

IE: An vorhandenes PDF anfügen - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html

IE: Ausgewählte Verknüpfungen in Adobe PDF konvertieren - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html

IE: Ausgewählte Verknüpfungen in vorhandene PDF-Datei konvertieren - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html

IE: Auswahl in Adobe PDF konvertieren - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html

IE: Auswahl in vorhandene PDF-Datei konvertieren - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html

IE: Hinzufügen zu Anti-Banner - c:\program files\Kaspersky Lab\Kaspersky Internet Security 2013\ie_banner_deny.htm

IE: In Adobe PDF konvertieren - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html

IE: Nach Microsoft E&xel exportieren - c:\progra~1\MICROS~1\Office12\EXCEL.EXE/3000

IE: Verknüpfungsziel in Adobe PDF konvertieren - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html

IE: Verknüpfungsziel in vorhandene PDF-Datei konvertieren - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html

IE: {{92808042-fb78-4fa0-bb4f-c9a95e0e9c10} - {ba696155-d96e-4281-b467-0367a0456474} -

TCP: DhcpNameServer = 192.168.178.1

FF - ProfilePath - c:\users\gesti\AppData\Roaming\Mozilla\Firefox\Profiles\5u751fnj.default\

FF - prefs.js: browser.startup.homepage - about:home

FF - ExtSQL: 2013-06-15 12:57; {F58A62EB-38DC-43C4-A539-DC52E135208D}; c:\users\gesti\AppData\Roaming\Mozilla\Firefox\Profiles\5u751fnj.default\extensions\{F58A62EB-38DC-43C4-A539-DC52E135208D}

FF - ExtSQL: 2013-07-07 19:46; lspeaker@lyricsspeaker.net; c:\program files\LyricsSpeaker\116.xpi

FF - ExtSQL: 2013-07-07 21:50; {24532715-4abc-47ee-bd4f-a6774d0723d2}; c:\users\gesti\AppData\Roaming\Mozilla\Firefox\Profiles\5u751fnj.default\extensions\{24532715-4abc-47ee-bd4f-a6774d0723d2}

.

- - - - Entfernte verwaiste Registrierungseinträge - - - -

.

AddRemove-{3a4935b3-b7a0-4065-8ccc-0030471b33f1}_is1 - c:\program files\HomeTab\unins000.exe

.

.

.

--------------------- Gesperrte Registrierungsschluessel ---------------------

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]

@Denied: (Full) (Everyone)

.

Zeit der Fertigstellung: 2013-07-07  22:18:00

ComboFix-quarantined-files.txt  2013-07-07 20:18

ComboFix2.txt  2013-07-07 17:51

.

Vor Suchlauf: 54 Verzeichnis(se), 233.808.932.864 Bytes frei

Nach Suchlauf: 55 Verzeichnis(se), 233.604.763.648 Bytes frei

.

- - End Of File - - A5ABF633E6283B97BB77632FB9EC631E
--- --- ---
A36C5E4F47E84449FF07ED3517B43A31

[/CODE]