Trojaner-Board - Google leitet Link um

Combofix Logfile:
Code:
ComboFix 11-06-05.02 - steffen 05.06.2011  21:44:39.1.2 - x64

Microsoft Windows 7 Home Premium   6.1.7600.0.1252.49.1031.18.4094.2705 [GMT 2:00]

ausgeführt von:: c:\users\steffen\Desktop\Cofi.exe

AV: Microsoft Security Essentials *Disabled/Updated* {108DAC43-C256-20B7-BB05-914135DA5160}

SP: Microsoft Security Essentials *Disabled/Updated* {ABEC4DA7-E46C-2F39-81B5-AA334E5D1BDD}

SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

.

.

(((((((((((((((((((((((   Dateien erstellt von 2011-05-05 bis 2011-06-05  ))))))))))))))))))))))))))))))

.

.

2011-06-05 19:48 . 2011-06-05 19:48        --------        d-----w-        c:\users\Default\AppData\Local\temp

2011-06-05 18:31 . 2011-06-05 18:31        --------        d-----w-        c:\program files (x86)\Mozilla Thunderbird

2011-06-05 18:14 . 2010-09-14 06:45        367104        ----a-w-        c:\windows\system32\wcncsvc.dll

2011-06-05 18:14 . 2010-09-14 06:07        276992        ----a-w-        c:\windows\SysWow64\wcncsvc.dll

2011-06-05 18:06 . 2009-09-10 06:28        311808        ----a-w-        c:\windows\system32\msv1_0.dll

2011-06-05 18:06 . 2009-09-10 05:52        257024        ----a-w-        c:\windows\SysWow64\msv1_0.dll

2011-06-05 17:53 . 2010-02-23 08:16        294912        ----a-w-        c:\windows\system32\browserchoice.exe

2011-06-05 17:45 . 2010-03-04 04:40        184832        ----a-w-        c:\windows\system32\drivers\usbvideo.sys

2011-06-05 17:45 . 2010-03-04 04:32        243712        ----a-w-        c:\windows\system32\drivers\ks.sys

2011-06-04 22:00 . 2011-05-24 17:12        8718160        ----a-w-        c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{57C9CC83-3BE4-4AEA-BABB-DD3CF61AD192}\mpengine.dll

2011-06-04 21:43 . 2009-12-11 10:29        153160        ----a-w-        c:\windows\system32\drivers\ksecpkg.sys

2011-06-04 21:43 . 2009-12-11 09:24        1446912        ----a-w-        c:\windows\system32\lsasrv.dll

2011-06-04 21:43 . 2009-12-11 07:39        22016        ----a-w-        c:\windows\SysWow64\secur32.dll

2011-06-04 21:43 . 2009-12-11 07:36        96768        ----a-w-        c:\windows\SysWow64\sspicli.dll

2011-06-04 21:40 . 2010-09-01 05:14        167424        ----a-w-        c:\program files\Windows Media Player\wmplayer.exe

2011-06-04 21:40 . 2010-09-01 04:26        164864        ----a-w-        c:\program files (x86)\Windows Media Player\wmplayer.exe

2011-06-04 21:40 . 2010-09-01 05:12        12625920        ----a-w-        c:\windows\system32\wmploc.DLL

2011-06-04 21:40 . 2010-09-01 04:23        12625408        ----a-w-        c:\windows\SysWow64\wmploc.DLL

2011-06-04 21:40 . 2010-12-18 06:11        714752        ----a-w-        c:\windows\system32\kerberos.dll

2011-06-04 21:40 . 2010-12-18 05:29        541184        ----a-w-        c:\windows\SysWow64\kerberos.dll

2011-06-04 21:40 . 2010-03-05 07:52        84992        ----a-w-        c:\windows\system32\asycfilt.dll

2011-06-04 21:40 . 2010-03-05 07:42        67584        ----a-w-        c:\windows\SysWow64\asycfilt.dll

2011-06-04 21:40 . 2010-10-27 05:06        2048        ----a-w-        c:\windows\system32\tzres.dll

2011-06-04 21:40 . 2010-10-27 04:32        2048        ----a-w-        c:\windows\SysWow64\tzres.dll

2011-06-04 21:39 . 2011-02-26 06:23        2870272        ----a-w-        c:\windows\explorer.exe

2011-06-04 21:38 . 2010-12-23 06:07        961024        ----a-w-        c:\windows\system32\CPFilters.dll

2011-06-04 21:38 . 2010-12-23 06:07        723968        ----a-w-        c:\windows\system32\EncDec.dll

2011-06-04 21:38 . 2010-12-23 06:07        1118720        ----a-w-        c:\windows\system32\sbe.dll

2011-06-04 21:38 . 2010-12-23 06:02        259072        ----a-w-        c:\windows\system32\mpg2splt.ax

2011-06-04 21:38 . 2010-12-23 05:28        642048        ----a-w-        c:\windows\SysWow64\CPFilters.dll

2011-06-04 21:38 . 2010-12-23 05:28        534528        ----a-w-        c:\windows\SysWow64\EncDec.dll

2011-06-04 21:38 . 2010-12-23 05:28        850432        ----a-w-        c:\windows\SysWow64\sbe.dll

2011-06-04 21:38 . 2010-12-23 05:24        199680        ----a-w-        c:\windows\SysWow64\mpg2splt.ax

2011-06-04 21:37 . 2010-08-26 04:39        109056        ----a-w-        c:\windows\SysWow64\t2embed.dll

2011-06-04 21:37 . 2010-10-19 08:10        7680        ----a-w-        c:\program files (x86)\Internet Explorer\iecompat.dll

2011-06-04 21:37 . 2010-06-29 05:35        4582912        ----a-w-        c:\program files\Windows NT\Accessories\wordpad.exe

2011-06-04 21:37 . 2010-06-29 05:39        2085376        ----a-w-        c:\windows\system32\ole32.dll

2011-06-04 21:37 . 2010-06-29 05:02        1413632        ----a-w-        c:\windows\SysWow64\ole32.dll

2011-06-04 21:36 . 2010-11-02 05:17        1169408        ----a-w-        c:\windows\system32\taskschd.dll

2011-06-04 21:36 . 2010-11-02 05:16        1114624        ----a-w-        c:\windows\system32\schedsvc.dll

2011-06-04 21:36 . 2010-11-02 05:10        464384        ----a-w-        c:\windows\system32\taskeng.exe

2011-06-04 21:36 . 2010-11-02 05:10        285696        ----a-w-        c:\windows\system32\schtasks.exe

2011-06-04 21:36 . 2010-11-02 04:40        496128        ----a-w-        c:\windows\SysWow64\taskschd.dll

2011-06-04 21:36 . 2010-11-02 04:40        305152        ----a-w-        c:\windows\SysWow64\taskcomp.dll

2011-06-04 21:36 . 2010-11-02 04:34        192000        ----a-w-        c:\windows\SysWow64\taskeng.exe

2011-06-04 21:36 . 2010-11-02 04:34        179712        ----a-w-        c:\windows\SysWow64\schtasks.exe

2011-06-04 21:36 . 2010-05-05 07:37        483840        ----a-w-        c:\windows\system32\StructuredQuery.dll

2011-06-04 21:36 . 2010-05-05 06:46        363520        ----a-w-        c:\windows\SysWow64\StructuredQuery.dll

2011-06-04 21:36 . 2009-09-03 07:36        1975296        ----a-w-        c:\windows\system32\CertEnroll.dll

2011-06-04 21:36 . 2009-09-03 07:04        1320960        ----a-w-        c:\windows\SysWow64\CertEnroll.dll

2011-06-04 21:33 . 2010-03-04 07:57        2080256        ----a-w-        c:\program files\Windows Mail\msoe.dll

2011-06-04 21:33 . 2010-03-04 07:33        1619968        ----a-w-        c:\program files (x86)\Windows Mail\msoe.dll

2011-06-04 21:33 . 2010-08-04 07:07        552960        ----a-w-        c:\windows\system32\msdri.dll

2011-06-04 21:33 . 2010-08-04 07:05        288256        ----a-w-        c:\windows\system32\MSNP.ax

2011-06-04 21:33 . 2010-08-04 06:15        204288        ----a-w-        c:\windows\SysWow64\MSNP.ax

2011-06-04 21:30 . 2010-06-14 06:37        1896832        ----a-w-        c:\windows\system32\drivers\tcpip.sys

2011-06-04 21:30 . 2011-02-24 06:30        476160        ----a-w-        c:\windows\system32\XpsGdiConverter.dll

2011-06-04 21:30 . 2011-02-24 05:32        288256        ----a-w-        c:\windows\SysWow64\XpsGdiConverter.dll

2011-06-04 21:30 . 2010-08-21 06:36        340992        ----a-w-        c:\windows\system32\schannel.dll

2011-06-04 21:30 . 2010-08-21 05:36        224256        ----a-w-        c:\windows\SysWow64\schannel.dll

2011-06-04 21:30 . 2010-08-21 06:31        633856        ----a-w-        c:\windows\system32\comctl32.dll

2011-06-04 21:30 . 2011-02-18 06:37        612352        ----a-w-        c:\windows\system32\vbscript.dll

2011-06-04 21:30 . 2011-02-18 05:36        428032        ----a-w-        c:\windows\SysWow64\vbscript.dll

2011-06-04 21:28 . 2009-12-22 08:36        243200        ----a-w-        c:\windows\system32\wow64.dll

2011-06-04 21:27 . 2011-02-24 06:29        1197056        ----a-w-        c:\windows\system32\wininet.dll

2011-06-04 21:24 . 2010-12-21 06:16        214016        ----a-w-        c:\windows\system32\winsrv.dll

2011-06-04 21:23 . 2010-10-16 05:19        395776        ----a-w-        c:\windows\system32\webio.dll

2011-06-04 21:23 . 2010-10-16 04:36        314368        ----a-w-        c:\windows\SysWow64\webio.dll

2011-06-04 21:23 . 2011-04-22 20:18        27008        ----a-w-        c:\windows\system32\drivers\Diskdump.sys

2011-06-04 21:23 . 2010-07-29 06:30        82944        ----a-w-        c:\windows\SysWow64\iccvid.dll

2011-06-04 21:23 . 2009-09-26 06:20        223448        ----a-w-        c:\windows\system32\drivers\fvevol.sys

2011-06-04 21:23 . 2011-03-03 06:17        182272        ----a-w-        c:\windows\system32\dnsrslvr.dll

2011-06-04 21:23 . 2011-03-03 06:14        30208        ----a-w-        c:\windows\system32\dnscacheugc.exe

2011-06-04 21:21 . 2010-10-27 05:16        1739176        ----a-w-        c:\windows\system32\ntdll.dll

2011-06-04 21:21 . 2010-10-27 04:40        1293120        ----a-w-        c:\windows\SysWow64\ntdll.dll

2011-06-04 21:21 . 2011-03-08 06:14        976896        ----a-w-        c:\windows\system32\inetcomm.dll

2011-06-04 21:21 . 2010-10-12 05:05        35328        ----a-w-        c:\program files\Windows Mail\wabfind.dll

2011-06-04 21:21 . 2010-10-12 05:00        516096        ----a-w-        c:\program files\Windows Mail\wab.exe

2011-06-04 21:21 . 2010-10-12 04:25        516096        ----a-w-        c:\program files (x86)\Windows Mail\wab.exe

2011-06-04 21:13 . 2011-02-23 05:15        157696        ----a-w-        c:\windows\system32\drivers\mrxsmb.sys

2011-06-04 20:05 . 2010-12-18 06:12        3138048        ----a-w-        c:\windows\system32\mstscax.dll

2011-06-04 20:05 . 2010-12-18 06:08        1097216        ----a-w-        c:\windows\system32\mstsc.exe

2011-06-04 20:05 . 2010-12-18 05:30        2690560        ----a-w-        c:\windows\SysWow64\mstscax.dll

2011-06-04 20:05 . 2010-12-18 05:26        1034240        ----a-w-        c:\windows\SysWow64\mstsc.exe

2011-06-03 21:57 . 2011-06-04 22:43        --------        d-----w-        c:\program files (x86)\7-Zip

2011-06-03 21:47 . 2010-06-29 04:57        4247040        ----a-w-        c:\program files (x86)\Windows NT\Accessories\wordpad.exe

2011-06-03 21:47 . 2010-11-02 05:18        524288        ----a-w-        c:\windows\system32\wmicmiplugin.dll

2011-06-03 21:47 . 2010-11-02 05:17        473600        ----a-w-        c:\windows\system32\taskcomp.dll

2011-06-03 21:45 . 2010-08-21 05:33        530432        ----a-w-        c:\windows\SysWow64\comctl32.dll

2011-06-03 21:41 . 2010-11-02 05:12        197120        ----a-w-        c:\windows\system32\d3d10_1.dll

2011-06-03 21:41 . 2010-11-02 04:41        135168        ----a-w-        c:\windows\SysWow64\XpsRasterService.dll

2011-06-03 21:41 . 2010-11-02 04:35        161792        ----a-w-        c:\windows\SysWow64\d3d10_1.dll

2011-06-03 21:41 . 2011-03-03 05:27        28672        ----a-w-        c:\windows\SysWow64\dnscacheugc.exe

2011-06-03 21:41 . 2010-08-21 05:36        738816        ----a-w-        c:\windows\SysWow64\wmpmde.dll

2011-06-03 21:39 . 2011-03-08 05:38        740864        ----a-w-        c:\windows\SysWow64\inetcomm.dll

2011-06-03 21:38 . 2011-04-09 06:58        142336        ----a-w-        c:\windows\system32\poqexec.exe

2011-06-03 21:38 . 2011-04-09 05:56        123904        ----a-w-        c:\windows\SysWow64\poqexec.exe

2011-06-03 21:38 . 2011-02-26 05:33        2614784        ----a-w-        c:\windows\SysWow64\explorer.exe

2011-06-03 21:38 . 2010-10-19 08:47        7680        ----a-w-        c:\program files\Internet Explorer\iecompat.dll

2011-06-03 21:37 . 2010-01-18 23:28        280064        ----a-w-        c:\windows\SysWow64\RMActivate_ssp.exe

2011-06-03 21:36 . 2011-04-09 06:45        5509504        ----a-w-        c:\windows\system32\ntoskrnl.exe

2011-06-03 21:36 . 2010-12-21 06:13        2003968        ----a-w-        c:\windows\system32\msxml6.dll

2011-06-03 21:36 . 2010-12-21 05:38        204288        ----a-w-        c:\windows\SysWow64\upnp.dll

2011-06-03 21:36 . 2010-12-21 06:15        15360        ----a-w-        c:\windows\system32\slwga.dll

2011-06-03 21:36 . 2010-12-21 05:38        14336        ----a-w-        c:\windows\SysWow64\slwga.dll

2011-06-03 21:35 . 2009-12-22 04:28        2048        ----a-w-        c:\windows\SysWow64\user.exe

2011-06-03 21:35 . 2010-08-21 06:29        558592        ----a-w-        c:\windows\system32\spoolsv.exe

2011-06-03 21:34 . 2011-02-05 12:41        20352        ----a-w-        c:\windows\system32\kdusb.dll

2011-06-03 21:27 . 2010-10-16 04:33        208896        ----a-w-        c:\program files (x86)\Common Files\System\msadc\msadco.dll

2011-06-03 21:27 . 2010-08-27 05:46        9728        ----a-w-        c:\windows\SysWow64\sscore.dll

2011-06-03 19:13 . 2011-06-03 19:13        --------        d-----w-        c:\programdata\SUPERAntiSpyware.com

2011-06-03 19:13 . 2011-06-03 19:13        --------        d-----w-        c:\programdata\!SASCORE

2011-06-03 19:13 . 2011-06-04 07:04        --------        d-----w-        c:\program files\SUPERAntiSpyware

2011-06-02 18:56 . 2010-08-26 05:27        148992        ----a-w-        c:\windows\system32\t2embed.dll

2011-06-02 18:52 . 2009-12-13 09:46        613888        ----a-w-        c:\windows\system32\psisdecd.dll

2011-06-02 18:52 . 2009-12-13 09:30        465408        ----a-w-        c:\windows\SysWow64\psisdecd.dll

2011-06-02 18:52 . 2011-04-09 06:13        3957632        ----a-w-        c:\windows\SysWow64\ntkrnlpa.exe

2011-06-02 18:52 . 2011-04-09 06:13        3901824        ----a-w-        c:\windows\SysWow64\ntoskrnl.exe

2011-06-02 18:46 . 2011-06-02 18:46        --------        d-----w-        c:\program files (x86)\MSXML 4.0

2011-06-01 19:51 . 2011-06-04 07:04        --------        d-----w-        c:\program files (x86)\WhiteSmoke

2011-06-01 19:16 . 2011-06-01 19:16        --------        d-----w-        c:\programdata\Photo Notifier and Animation Creator

2011-06-01 19:16 . 2011-06-01 19:16        --------        d-----w-        c:\program files (x86)\Photo Notifier and Animation Creator

2011-05-31 20:25 . 2011-05-31 20:25        --------        d-----w-        c:\programdata\Malwarebytes

2011-05-31 20:25 . 2011-05-31 21:30        --------        d-----w-        c:\program files (x86)\Malwarebytes' Anti-Malware

2011-05-31 19:42 . 2011-05-31 19:42        --------        d-----w-        c:\program files (x86)\Trend Micro

.

.

((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2011-05-30 04:56 . 2011-05-30 04:56        2560        ----a-w-        c:\windows\SysWow64\drivers\de-DE\qwavedrv.sys.mui

2011-05-30 04:55 . 2011-05-30 04:55        5632        ----a-w-        c:\windows\SysWow64\drivers\de-DE\ndiscap.sys.mui

2011-05-30 04:55 . 2011-05-30 04:55        2560        ----a-w-        c:\windows\SysWow64\drivers\de-DE\scfilter.sys.mui

2011-05-30 04:55 . 2011-05-30 04:55        51712        ----a-w-        c:\windows\SysWow64\drivers\de-DE\tcpip.sys.mui

2011-05-30 04:55 . 2011-05-30 04:55        29696        ----a-w-        c:\windows\SysWow64\drivers\de-DE\bfe.dll.mui

2011-05-30 04:55 . 2011-05-30 04:55        16896        ----a-w-        c:\windows\SysWow64\drivers\de-DE\pacer.sys.mui

2011-05-29 19:08 . 2009-11-03 04:11        6        ----a-w-        c:\windows\system32\PLD_Framework.cmd

.

.

((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))

.

.

*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 

REGEDIT4

.

[HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{83FF80F4-8C74-4b80-B5BA-C8DDD434E5C4}]

2009-11-03 04:22        433648        ----a-w-        c:\programdata\Partner\Partner.dll

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP]

@="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}"

[HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}]

2009-09-10 13:41        120104        ----a-w-        c:\program files (x86)\EgisTec\MyWinLocker 3\x86\PSDProtect.dll

.

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"swg"="c:\program files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-11-03 39408]

"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-07-14 1475072]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]

"LManager"="c:\program files (x86)\Launch Manager\LManager.exe" [2009-08-18 1157128]

"EgisTecLiveUpdate"="c:\program files (x86)\EgisTec Egis Software Update\EgisUpdate.exe" [2009-08-04 199464]

"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-02-28 35696]

"ArcadeDeluxeAgent"="c:\program files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe" [2009-10-29 419112]

"PlayMovie"="c:\program files (x86)\Acer Arcade Deluxe\PlayMovie\PMVService.exe" [2009-10-22 181480]

"NortonOnlineBackupReminder"="c:\program files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe" [2009-07-25 588648]

"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2009-09-08 98304]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"ConsentPromptBehaviorAdmin"= 5 (0x5)

"ConsentPromptBehaviorUser"= 3 (0x3)

"EnableUIADesktopToggle"= 0 (0x0)

.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

@="Service"

.

R2 gupdate;Google Update Service (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-05-29 135664]

R3 MWLService;MyWinLocker Service;c:\program files (x86)\EgisTec\MyWinLocker 3\x86\\MWLService.exe [2009-09-10 305448]

R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys [x]

R3 NisSrv;Microsoft-Netzwerkinspektion;c:\program files\Microsoft Security Client\Antimalware\NisSrv.exe [2010-11-11 282616]

R3 NTIBackupSvc;NTI Backup Now 5 Backup Service;c:\program files (x86)\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe [2009-06-18 50432]

R3 Partner Service;Partner Service;c:\programdata\Partner\Partner.exe [2009-11-03 332272]

R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\System32\Drivers\RtsUStor.sys [2009-09-02 225280]

S1 mwlPSDFilter;mwlPSDFilter;c:\windows\system32\DRIVERS\mwlPSDFilter.sys [x]

S1 mwlPSDNServ;mwlPSDNServ;c:\windows\system32\DRIVERS\mwlPSDNServ.sys [x]

S1 mwlPSDVDisk;mwlPSDVDisk;c:\windows\system32\DRIVERS\mwlPSDVDisk.sys [x]

S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x]

S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [x]

S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]

S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]

S2 ePowerSvc;Acer ePower Service;c:\program files\Acer\Acer ePower Management\ePowerSvc.exe [2009-10-29 844320]

S2 NTISchedulerSvc;NTI Backup Now 5 Scheduler Service;c:\program files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe [2009-06-18 144640]

S2 Updater Service;Updater Service;c:\program files\Acer\Acer Updater\UpdaterService.exe [2009-07-04 240160]

S3 L1C;NDIS Miniport Driver for Atheros AR8131/AR8132 PCI-E Ethernet Controller (NDIS 6.20);c:\windows\system32\DRIVERS\L1C62x64.sys [x]

S3 MpNWMon;Microsoft Malware Protection Network Driver;c:\windows\system32\DRIVERS\MpNWMon.sys [x]

.

.

--- Andere Dienste/Treiber im Speicher ---

.

*NewlyCreated* - 07442199

*Deregistered* - 07442199

.

Inhalt des "geplante Tasks" Ordners

.

2011-06-05 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job

- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-05-29 19:40]

.

2011-06-05 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-05-29 19:40]

.

2011-06-05 c:\windows\Tasks\WinMaximizer-steffen-Startup.job

- c:\program files (x86)\WinMaximizer\WinMaximizer.exe [2011-05-31 14:21]

.

.

--------- x86-64 -----------

.

.

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{83FF80F4-8C74-4b80-B5BA-C8DDD434E5C4}]

2009-11-03 04:22        750064        ----a-w-        c:\programdata\Partner\Partner64.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP]

@="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}"

[HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}]

2009-09-10 13:44        137512        ----a-w-        c:\program files (x86)\EgisTec\MyWinLocker 3\x64\PSDProtect.dll

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"IAAnotif"="c:\program files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2009-10-13 186904]

"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2009-07-28 7982112]

"Acer ePower Management"="c:\program files\Acer\Acer ePower Management\ePowerTray.exe" [2009-10-29 822816]

"mwlDaemon"="c:\program files (x86)\EgisTec\MyWinLocker 3\x86\mwlDaemon.exe" [2009-09-10 349480]

"SynTPEnh"="c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe" [BU]

"PLFSetI"="c:\windows\PLFSetI.exe" [2008-07-29 200704]

"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2010-11-30 1436224]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]

"LoadAppInit_DLLs"=0x0

.

------- Zusätzlicher Suchlauf -------

.

uStart Page = hxxp://mystart.incredimail.com/mb50?u=1036045019594548084

uLocal Page = c:\windows\system32\blank.htm

mStart Page = hxxp://mystart.incredimail.com/mb50?u=1036045019594548084

mLocal Page = c:\windows\SysWOW64\blank.htm

IE: Google Sidewiki... - c:\program files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_6CE5017F567343CA.dll/cmsidewiki.html

TCP: DhcpNameServer = 192.168.2.1

FF - ProfilePath - c:\users\steffen\AppData\Roaming\Mozilla\Firefox\Profiles\047vxo1k.default\

FF - prefs.js: browser.startup.homepage - hxxp://www.freenet.de/

FF - prefs.js: network.proxy.type - 0

FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files (x86)\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

FF - Ext: Adblock Plus: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} - %profile%\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}

FF - Ext: Conduit Engine : engine@conduit.com - %profile%\extensions\engine@conduit.com

FF - Ext: IncrediMail MediaBar Deutsch 2 Community Toolbar: {990af1c2-5a27-4460-8149-ecc6bc122af3} - %profile%\extensions\{990af1c2-5a27-4460-8149-ecc6bc122af3}

.

- - - - Entfernte verwaiste Registrierungseinträge - - - -

.

URLSearchHooks-{990af1c2-5a27-4460-8149-ecc6bc122af3} - (no file)

Toolbar-Locked - (no file)

Toolbar-Locked - (no file)

WebBrowser-{990AF1C2-5A27-4460-8149-ECC6BC122AF3} - (no file)

.

.

.

--------------------- Gesperrte Registrierungsschluessel ---------------------

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}]

@Denied: (A 2) (Everyone)

@="FlashBroker"

"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil10c.exe,-101"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\Elevation]

"Enabled"=dword:00000001

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\LocalServer32]

@="c:\\Windows\\SysWow64\\Macromed\\Flash\\FlashUtil10c.exe"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Shockwave Flash Object"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10c.ocx"

"ThreadingModel"="Apartment"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]

@="0"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]

@="ShockwaveFlash.ShockwaveFlash.10"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10c.ocx, 1"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="ShockwaveFlash.ShockwaveFlash"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Macromedia Flash Factory Object"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10c.ocx"

"ThreadingModel"="Apartment"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]

@="FlashFactory.FlashFactory.1"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10c.ocx, 1"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="FlashFactory.FlashFactory"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}]

@Denied: (A 2) (Everyone)

@="IFlashBroker3"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\ProxyStubClsid32]

@="{00020424-0000-0000-C000-000000000046}"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

"Version"="1.0"

.

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]

@Denied: (Full) (Everyone)

.

Zeit der Fertigstellung: 2011-06-05  21:49:59

ComboFix-quarantined-files.txt  2011-06-05 19:49

ComboFix2.txt  2011-05-31 20:59

.

Vor Suchlauf: 9 Verzeichnis(se), 350.002.372.608 Bytes frei

Nach Suchlauf: 12 Verzeichnis(se), 349.687.324.672 Bytes frei

.

- - End Of File - - F45E72E407329A75C2A46D4C2130B3B9
--- --- ---