Trojaner-Board - Festpallen schalten nicht mehr ab, internet sehr lahm

Combofix Logfile:
Code:
ComboFix 11-02-22.01 - Manuel 22.02.2011  23:50:40.1.6 - x64

Microsoft Windows 7 Home Premium   6.1.7600.0.1252.49.1031.18.8191.6332 [GMT 1:00]

ausgeführt von:: c:\users\Manuel\Desktop\ComboFix.exe

AV: AntiVir Desktop *Disabled/Outdated* {090F9C29-64CE-6C6F-379C-5901B49A85B7}

SP: AntiVir Desktop *Disabled/Outdated* {B26E7DCD-42F4-63E1-0D2C-6273CF1DCF0A}

SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

.
 

(((((((((((((((((((((((   Dateien erstellt von 2011-01-22 bis 2011-02-22  ))))))))))))))))))))))))))))))

.
 

2011-02-22 22:52 . 2011-02-22 22:52        --------        d-----w-        c:\users\Default\AppData\Local\temp

2011-02-22 17:57 . 2009-07-14 01:41        99840        ----a-w-        c:\windows\system32\Spool\prtprocs\x64\LXKPTPRC.DLL

2011-02-22 10:41 . 2011-01-13 10:20        7844688        ----a-w-        c:\programdata\Microsoft\Windows Defender\Definition Updates\{EE513456-93D3-4987-9ABD-98CBD5CAFA56}\mpengine.dll

2011-02-22 10:40 . 2011-02-22 10:40        --------        d-----w-        c:\users\Manuel\AppData\Roaming\Malwarebytes

2011-02-22 10:40 . 2010-12-20 17:09        38224        ----a-w-        c:\windows\SysWow64\drivers\mbamswissarmy.sys

2011-02-22 10:40 . 2011-02-22 10:40        --------        d-----w-        c:\programdata\Malwarebytes

2011-02-22 10:40 . 2011-02-22 10:40        --------        d-----w-        c:\program files (x86)\Malwarebytes' Anti-Malware

2011-02-22 10:40 . 2010-12-20 17:08        24152        ----a-w-        c:\windows\system32\drivers\mbam.sys

2011-02-20 22:31 . 2011-02-20 22:31        --------        d-----w-        c:\program files (x86)\ERUNT

2011-02-20 21:42 . 2011-02-20 21:42        --------        d-----w-        c:\users\Manuel\AppData\Roaming\SUPERAntiSpyware.com

2011-02-20 21:42 . 2011-02-20 21:42        --------        d-----w-        c:\programdata\SUPERAntiSpyware.com

2011-02-20 21:42 . 2011-02-20 21:42        --------        d-----w-        c:\programdata\!SASCORE

2011-02-20 21:42 . 2011-02-20 21:42        --------        d-----w-        c:\program files\SUPERAntiSpyware

2011-02-17 14:22 . 2011-02-17 14:22        --------        d-----w-        c:\users\Manuel\AppData\Roaming\Avira

2011-02-17 14:19 . 2011-02-17 14:19        --------        d-----w-        c:\programdata\Avira

2011-02-17 14:19 . 2011-02-17 14:19        --------        d-----w-        c:\program files (x86)\Avira

2011-02-17 14:19 . 2011-01-10 13:23        83120        ----a-w-        c:\windows\system32\drivers\avgntflt.sys

2011-02-17 14:19 . 2011-01-10 13:23        116568        ----a-w-        c:\windows\system32\drivers\avipbb.sys

2011-02-15 15:09 . 2011-02-15 15:09        --------        d-----w-        c:\program files (x86)\pdfforge Toolbar

2011-02-15 15:09 . 2011-02-15 15:09        --------        d-----w-        c:\program files (x86)\Application Updater

2011-02-13 20:31 . 2011-02-13 20:31        50688        ----a-w-        c:\windows\system32\ImgX6132.dll

2011-02-12 14:05 . 2011-02-12 14:05        --------        d-----w-        c:\users\Manuel\AppData\Local\4A Games

2011-02-10 16:15 . 2010-12-18 06:11        714752        ----a-w-        c:\windows\system32\kerberos.dll

2011-02-03 16:05 . 2011-02-03 16:05        --------        d-----w-        c:\program files (x86)\SpeedFan

2011-02-03 15:59 . 2011-02-03 16:01        --------        d-----w-        c:\program files (x86)\MSI Afterburner

2011-01-31 18:58 . 2011-01-31 18:58        --------        d-----w-        c:\program files (x86)\HD Tune

2011-01-31 18:57 . 2011-01-31 18:57        --------        d-----w-        c:\users\Manuel\AppData\Roaming\FreeCommander

2011-01-31 18:57 . 2011-01-31 18:57        --------        d-----w-        c:\program files (x86)\FreeCommander

2011-01-26 01:44 . 2011-01-26 01:44        --------        d-----w-        c:\users\Default\AppData\Local\Microsoft Help

2011-01-25 00:29 . 2011-01-25 00:29        --------        d-sh--w-        c:\programdata\SecuROM

2011-01-25 00:16 . 2011-01-28 02:37        --------        d-----w-        c:\users\Manuel\AppData\Local\Diagnostics

2011-01-24 20:54 . 2011-01-08 03:27        67176        ----a-w-        c:\windows\system32\OpenCL.dll

2011-01-24 17:56 . 2011-01-24 20:34        --------        d-----w-        c:\users\Manuel\AppData\Local\Rockstar Games

2011-01-24 17:55 . 2011-01-24 17:55        --------        d--h--r-        c:\users\Manuel\AppData\Roaming\SecuROM

2011-01-24 17:54 . 2011-01-24 17:54        178800        ----a-w-        c:\windows\SysWow64\CmdLineExt_x64.dll

2011-01-24 17:52 . 2011-01-25 00:25        --------        d-----w-        c:\program files (x86)\Microsoft Games for Windows - LIVE

2011-01-24 17:52 . 2011-01-24 17:52        --------        d-----w-        c:\windows\SysWow64\xlive

2011-01-24 16:23 . 2011-01-24 20:34        --------        d-----w-        c:\program files (x86)\Rockstar Games
 

.

((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2011-01-08 03:27 . 2010-05-06 10:26        7729256        ----a-w-        c:\windows\system32\nvwgf2umx.dll

2011-01-08 03:27 . 2010-05-06 10:26        2200680        ----a-w-        c:\windows\system32\nvapi64.dll

2011-01-08 03:27 . 2010-05-06 10:26        20471912        ----a-w-        c:\windows\system32\nvoglv64.dll

2011-01-08 03:27 . 2010-05-06 10:26        1965672        ----a-w-        c:\windows\SysWow64\nvapi.dll

2011-01-08 03:27 . 2010-05-06 10:26        10078312        ----a-w-        c:\windows\SysWow64\nvd3dum.dll

2011-01-07 19:50 . 2011-01-07 19:50        795752        ----a-w-        c:\windows\system32\easyUpdatusAPIU64.dll

2011-01-07 19:50 . 2011-01-07 19:50        6143080        ----a-w-        c:\windows\system32\nvcpl.dll

2011-01-07 19:49 . 2011-01-07 19:49        3156072        ----a-w-        c:\windows\system32\nvsvc64.dll

2011-01-07 19:49 . 2011-01-07 19:49        117864        ----a-w-        c:\windows\system32\nvmctray.dll

2011-01-07 19:49 . 2011-01-07 19:49        2558568        ----a-w-        c:\windows\system32\nvsvcr.dll

2011-01-07 19:49 . 2011-01-07 19:49        1005160        ----a-w-        c:\windows\system32\nvvsvc.exe

2011-01-02 21:04 . 2011-01-02 21:04        834544        ----a-w-        c:\windows\system32\drivers\sptd.sys.vir

2010-12-21 19:52 . 2010-12-21 19:52        374792        ----a-w-        c:\windows\system32\drivers\UMDF\lgSSQVGA.dll

2010-12-21 19:52 . 2010-12-21 19:52        157704        ----a-w-        c:\windows\system32\drivers\UMDF\lgSSBW.dll

2010-12-21 19:52 . 2010-12-21 19:52        22408        ----a-w-        c:\windows\system32\drivers\LGBusEnum.sys

2010-12-21 19:52 . 2010-12-21 19:52        16008        ----a-w-        c:\windows\system32\drivers\LGVirHid.sys

2010-12-12 19:38 . 2010-12-12 19:38        472808        ----a-w-        c:\windows\SysWow64\deployJava1.dll

.
 

((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))

.

.

*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 

REGEDIT4
 

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"SUPERAntiSpyware"="c:\program files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2011-01-13 2988784]
 

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]

"Logitech G930"="c:\program files (x86)\Logitech\G930\G930.exe" [2010-11-02 1516888]

"avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2011-01-10 281768]

"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2010-09-23 35760]
 

c:\users\Manuel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\

ERUNT AutoBackup.lnk - c:\program files (x86)\ERUNT\AUTOBACK.EXE [2005-10-20 38912]
 

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"ConsentPromptBehaviorAdmin"= 5 (0x5)

"ConsentPromptBehaviorUser"= 3 (0x3)

"EnableUIADesktopToggle"= 0 (0x0)
 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]

Security Packages        REG_MULTI_SZ           kerberos msv1_0 schannel wdigest tspkg pku2u livessp
 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE]

@=""
 

R0 sptd;sptd; [x]

R2 AODService;AODService;c:\program files (x86)\AMD\OverDrive\AODAssist.exe [2010-04-23 136616]

R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]

R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]

R3 ALSysIO;ALSysIO;c:\users\Manuel\AppData\Local\Temp\ALSysIO64.sys [x]

R3 Futuremark SystemInfo Service;Futuremark SystemInfo Service;c:\program files (x86)\Common Files\Futuremark Shared\Futuremark SystemInfo\FMSISvc.exe [2010-11-11 128928]

S1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\SASDIFSV64.SYS [2010-02-17 14920]

S1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL64.SYS [2010-02-17 12360]

S2 !SASCORE;SAS Core Service;c:\program files\SUPERAntiSpyware\SASCORE64.EXE [2010-06-29 128752]

S2 AntiVirSchedulerService;Avira AntiVir Planer;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [2011-01-10 135336]

S2 cpuz134;cpuz134;c:\windows\system32\drivers\cpuz134_x64.sys [2010-07-09 21480]

S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2011-01-07 378984]

S3 LADF_BakerCOnly;BakerC Filter Driver;c:\windows\system32\DRIVERS\ladfBakerCamd64.sys [2010-10-17 363224]

S3 LADF_BakerROnly;BakerR Filter Driver;c:\windows\system32\DRIVERS\ladfBakerRamd64.sys [2010-10-17 334552]

S3 LGBusEnum;Logitech GamePanel Virtual Bus Enumerator Driver;c:\windows\system32\drivers\LGBusEnum.sys [2010-12-21 22408]

S3 LGVirHid;Logitech Gamepanel Virtual HID Device Driver;c:\windows\system32\drivers\LGVirHid.sys [2010-12-21 16008]

S3 nusb3hub;NEC Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\nusb3hub.sys [2010-01-22 77824]

S3 nusb3xhc;NEC Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\nusb3xhc.sys [2010-01-22 180224]

S3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda64v.sys [2010-11-11 155752]

S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [2010-03-04 346144]

S3 usbfilter;AMD USB Filter Driver;c:\windows\system32\DRIVERS\usbfilter.sys [2009-12-22 38456]
 

.
 

--------- x86-64 -----------
 
 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"Launch LCore"="c:\program files\Logitech Gaming Software\LCore.exe" [2010-11-16 104008]
 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]

"LoadAppInit_DLLs"=0x0

.

------- Zusätzlicher Suchlauf -------

.

uLocal Page = c:\windows\system32\blank.htm

mLocal Page = c:\windows\SysWOW64\blank.htm

IE: Free YouTube to MP3 Converter - c:\users\Manuel\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm

IE: Nach Microsoft E&xel exportieren - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000

FF - ProfilePath - c:\users\Manuel\AppData\Roaming\Mozilla\Firefox\Profiles\tun5re9r.default\

FF - prefs.js: browser.search.selectedEngine - DAEMON Search

FF - prefs.js: keyword.URL - hxxp://de.search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&type=302398&p=

FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files (x86)\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

FF - Ext: Java Console: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} - c:\program files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}

FF - Ext: DVDVideoSoft Menu: {ACAA314B-EEBA-48e4-AD47-84E31C44796C} - %profile%\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}

FF - Ext: DAEMON Tools Toolbar: DTToolbar@toolbarnet.com - %profile%\extensions\DTToolbar@toolbarnet.com

FF - Ext: PC Sync 2 Synchronisation Extension: bkmrksync@nokia.com - c:\program files (x86)\Nokia\Nokia PC Suite 7\bkmrksync

.

.

--------------------- Gesperrte Registrierungsschluessel ---------------------
 

[HKEY_USERS\S-1-5-21-3498365250-4213020722-2298320614-1000\Software\SecuROM\License information*]

"datasecu"=hex:85,12,8f,0c,2c,81,86,a7,74,f6,f9,e1,f4,ec,bd,9f,b4,a1,ec,58,0a,

   c4,4d,84,d0,33,ea,21,41,38,15,18,ce,48,f1,fc,82,19,50,81,d9,b7,be,6d,e8,86,\

"rkeysecu"=hex:2f,0f,d5,3e,02,2b,06,63,b1,0b,dd,b6,71,e2,54,98
 

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

"BlindDial"=dword:00000000
 

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

"BlindDial"=dword:00000000
 

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]

@Denied: (Full) (Everyone)

.

------------------------ Weitere laufende Prozesse ------------------------

.

c:\program files (x86)\Avira\AntiVir Desktop\avguard.exe

c:\program files (x86)\CDBurnerXP\NMSAccessU.exe

c:\program files (x86)\Windows Media Player\wmplayer.exe

.

**************************************************************************

.

Zeit der Fertigstellung: 2011-02-22  23:56:10 - PC wurde neu gestartet

ComboFix-quarantined-files.txt  2011-02-22 22:56
 

Vor Suchlauf: 8 Verzeichnis(se), 186.541.625.344 Bytes frei

Nach Suchlauf: 13 Verzeichnis(se), 186.381.479.936 Bytes frei
 

- - End Of File - - 193FD39D8CD74C45F76913F8666F772F
--- --- ---