Trojaner-Board - GVU Trojaner mit Bild von Webcam auf der rechten Seite im Screen

Die Fehlermeldung kam nicht und ein Neustart war nicht nötig.

So hier die Combofix.txt

Combofix Logfile:
Code:
ComboFix 12-08-29.03 - Asus 30.08.2012  11:43:12.1.4 - x64

Microsoft Windows 7 Ultimate   6.1.7601.1.1252.49.1031.18.3949.2711 [GMT 2:00]

ausgeführt von:: c:\users\Asus\Desktop\ComboFix.exe

AV: Avira Desktop *Disabled/Updated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}

SP: Avira Desktop *Disabled/Updated* {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}

SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

 * Neuer Wiederherstellungspunkt wurde erstellt

.

.

((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))

.

.

c:\programdata\nud0repor.pad

c:\windows\SysWow64\SWCTL.DLL

.

.

(((((((((((((((((((((((   Dateien erstellt von 2012-07-28 bis 2012-08-30  ))))))))))))))))))))))))))))))

.

.

2012-08-30 09:46 . 2012-08-30 09:46        --------        d-----w-        c:\users\Default\AppData\Local\temp

2012-08-30 06:18 . 2012-08-30 06:18        --------        d-----w-        c:\users\Asus\AppData\Roaming\Malwarebytes

2012-08-30 06:18 . 2012-08-30 06:18        --------        d-----w-        c:\programdata\Malwarebytes

2012-08-30 06:18 . 2012-08-30 06:18        --------        d-----w-        c:\program files (x86)\Malwarebytes' Anti-Malware

2012-08-30 06:18 . 2012-07-03 11:46        24904        ----a-w-        c:\windows\system32\drivers\mbam.sys

2012-08-29 21:27 . 2012-08-29 21:27        73696        ----a-w-        c:\program files (x86)\Mozilla Firefox\breakpadinjector.dll

2012-08-29 13:55 . 2009-07-14 01:14        1397248        ----a-w-        c:\windows\SysWow64\utilman.exe

2012-08-26 06:59 . 2012-06-29 03:39        2382848        ----a-w-        c:\windows\system32\mshtml.tlb

2012-08-26 06:56 . 2012-07-04 22:16        73216        ----a-w-        c:\windows\system32\netapi32.dll

2012-08-25 19:18 . 2012-08-25 19:18        --------        d-----w-        C:\found.000

2012-08-23 20:18 . 2012-08-23 20:18        --------        d-----w-        c:\programdata\DATA BECKER Downloads

2012-08-23 20:18 . 2012-08-23 20:18        --------        d-----w-        c:\users\Asus\AppData\Roaming\ProtectDisc

2012-08-23 20:18 . 2012-08-23 20:18        --------        d-----w-        c:\program files (x86)\ProtectDisc Driver Installer

2012-08-23 20:17 . 2012-08-23 20:17        --------        d-----w-        c:\program files (x86)\DATA BECKER

.

.

.

((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2012-08-27 06:03 . 2012-07-01 13:52        73416        ----a-w-        c:\windows\SysWow64\FlashPlayerCPLApp.cpl

2012-08-27 06:03 . 2012-07-01 13:52        696520        ----a-w-        c:\windows\SysWow64\FlashPlayerApp.exe

2012-08-26 06:57 . 2012-07-01 19:20        62134624        ----a-w-        c:\windows\system32\MRT.exe

2012-07-27 09:56 . 2012-07-27 09:56        61440        ----a-r-        c:\users\Asus\AppData\Roaming\Microsoft\Installer\{11953C65-BB4E-4CA4-B0F0-2600A4B20040}\ARPPRODUCTICON.exe

2012-07-27 09:54 . 2012-07-27 09:55        106496        ----a-w-        c:\windows\SysWow64\ATL71.DLL

2012-07-07 20:33 . 2012-07-07 20:33        283200        ----a-w-        c:\windows\system32\drivers\dtsoftbus01.sys

2012-07-05 20:06 . 2012-07-19 21:32        772544        ----a-w-        c:\windows\SysWow64\npDeployJava1.dll

2012-07-05 20:06 . 2012-07-19 21:32        687544        ----a-w-        c:\windows\SysWow64\deployJava1.dll

2012-07-05 17:59 . 2009-07-14 02:36        152576        ----a-w-        c:\windows\SysWow64\msclmd.dll

2012-07-05 17:59 . 2009-07-14 02:36        175616        ----a-w-        c:\windows\system32\msclmd.dll

2012-07-02 10:23 . 2012-07-13 07:53        35112        ----a-w-        c:\windows\system32\drivers\teamviewervpn.sys

2012-07-01 18:44 . 2012-07-01 18:44        74752        ----a-w-        c:\windows\SysWow64\RegisterIEPKEYs.exe

2012-07-01 18:44 . 2012-07-01 18:44        161792        ----a-w-        c:\windows\SysWow64\msls31.dll

2012-07-01 18:44 . 2012-07-01 18:44        89088        ----a-w-        c:\windows\system32\RegisterIEPKEYs.exe

2012-07-01 18:44 . 2012-07-01 18:44        86528        ----a-w-        c:\windows\SysWow64\iesysprep.dll

2012-07-01 18:44 . 2012-07-01 18:44        76800        ----a-w-        c:\windows\SysWow64\SetIEInstalledDate.exe

2012-07-01 18:44 . 2012-07-01 18:44        74752        ----a-w-        c:\windows\SysWow64\iesetup.dll

2012-07-01 18:44 . 2012-07-01 18:44        65024        ----a-w-        c:\windows\system32\pngfilt.dll

2012-07-01 18:44 . 2012-07-01 18:44        63488        ----a-w-        c:\windows\SysWow64\tdc.ocx

2012-07-01 18:44 . 2012-07-01 18:44        49664        ----a-w-        c:\windows\system32\imgutil.dll

2012-07-01 18:44 . 2012-07-01 18:44        48640        ----a-w-        c:\windows\SysWow64\mshtmler.dll

2012-07-01 18:44 . 2012-07-01 18:44        420864        ----a-w-        c:\windows\SysWow64\vbscript.dll

2012-07-01 18:44 . 2012-07-01 18:44        367104        ----a-w-        c:\windows\SysWow64\html.iec

2012-07-01 18:44 . 2012-07-01 18:44        35840        ----a-w-        c:\windows\SysWow64\imgutil.dll

2012-07-01 18:44 . 2012-07-01 18:44        267776        ----a-w-        c:\windows\system32\ieaksie.dll

2012-07-01 18:44 . 2012-07-01 18:44        23552        ----a-w-        c:\windows\SysWow64\licmgr10.dll

2012-07-01 18:44 . 2012-07-01 18:44        222208        ----a-w-        c:\windows\system32\msls31.dll

2012-07-01 18:44 . 2012-07-01 18:44        197120        ----a-w-        c:\windows\system32\msrating.dll

2012-07-01 18:44 . 2012-07-01 18:44        163840        ----a-w-        c:\windows\system32\ieakui.dll

2012-07-01 18:44 . 2012-07-01 18:44        152064        ----a-w-        c:\windows\SysWow64\wextract.exe

2012-07-01 18:44 . 2012-07-01 18:44        150528        ----a-w-        c:\windows\SysWow64\iexpress.exe

2012-07-01 18:44 . 2012-07-01 18:44        149504        ----a-w-        c:\windows\system32\occache.dll

2012-07-01 18:44 . 2012-07-01 18:44        145920        ----a-w-        c:\windows\system32\iepeers.dll

2012-07-01 18:44 . 2012-07-01 18:44        12288        ----a-w-        c:\windows\system32\mshta.exe

2012-07-01 18:44 . 2012-07-01 18:44        11776        ----a-w-        c:\windows\SysWow64\mshta.exe

2012-07-01 18:44 . 2012-07-01 18:44        114176        ----a-w-        c:\windows\system32\admparse.dll

2012-07-01 18:44 . 2012-07-01 18:44        110592        ----a-w-        c:\windows\SysWow64\IEAdvpack.dll

2012-07-01 18:44 . 2012-07-01 18:44        101888        ----a-w-        c:\windows\SysWow64\admparse.dll

2012-07-01 18:44 . 2012-07-01 18:44        91648        ----a-w-        c:\windows\system32\SetIEInstalledDate.exe

2012-07-01 18:44 . 2012-07-01 18:44        89088        ----a-w-        c:\windows\system32\ie4uinit.exe

2012-07-01 18:44 . 2012-07-01 18:44        85504        ----a-w-        c:\windows\system32\iesetup.dll

2012-07-01 18:44 . 2012-07-01 18:44        82432        ----a-w-        c:\windows\system32\icardie.dll

2012-07-01 18:44 . 2012-07-01 18:44        76800        ----a-w-        c:\windows\system32\tdc.ocx

2012-07-01 18:44 . 2012-07-01 18:44        697344        ----a-w-        c:\windows\system32\msfeeds.dll

2012-07-01 18:44 . 2012-07-01 18:44        603648        ----a-w-        c:\windows\system32\vbscript.dll

2012-07-01 18:44 . 2012-07-01 18:44        55296        ----a-w-        c:\windows\system32\msfeedsbs.dll

2012-07-01 18:44 . 2012-07-01 18:44        534528        ----a-w-        c:\windows\system32\ieapfltr.dll

2012-07-01 18:44 . 2012-07-01 18:44        48640        ----a-w-        c:\windows\system32\mshtmler.dll

2012-07-01 18:44 . 2012-07-01 18:44        452608        ----a-w-        c:\windows\system32\dxtmsft.dll

2012-07-01 18:44 . 2012-07-01 18:44        448512        ----a-w-        c:\windows\system32\html.iec

2012-07-01 18:44 . 2012-07-01 18:44        403248        ----a-w-        c:\windows\system32\iedkcs32.dll

2012-07-01 18:44 . 2012-07-01 18:44        39936        ----a-w-        c:\windows\system32\iernonce.dll

2012-07-01 18:44 . 2012-07-01 18:44        3695416        ----a-w-        c:\windows\system32\ieapfltr.dat

2012-07-01 18:44 . 2012-07-01 18:44        30720        ----a-w-        c:\windows\system32\licmgr10.dll

2012-07-01 18:44 . 2012-07-01 18:44        282112        ----a-w-        c:\windows\system32\dxtrans.dll

2012-07-01 18:44 . 2012-07-01 18:44        249344        ----a-w-        c:\windows\system32\webcheck.dll

2012-07-01 18:44 . 2012-07-01 18:44        165888        ----a-w-        c:\windows\system32\iexpress.exe

2012-07-01 18:44 . 2012-07-01 18:44        160256        ----a-w-        c:\windows\system32\wextract.exe

2012-07-01 18:44 . 2012-07-01 18:44        160256        ----a-w-        c:\windows\system32\ieakeng.dll

2012-07-01 18:44 . 2012-07-01 18:44        135168        ----a-w-        c:\windows\system32\IEAdvpack.dll

2012-07-01 18:44 . 2012-07-01 18:44        111616        ----a-w-        c:\windows\system32\iesysprep.dll

2012-07-01 18:44 . 2012-07-01 18:44        10752        ----a-w-        c:\windows\system32\msfeedssync.exe

2012-07-01 18:44 . 2012-07-01 18:44        103936        ----a-w-        c:\windows\system32\inseng.dll

2012-06-18 01:12 . 2012-07-01 10:35        9013136        ----a-w-        c:\programdata\Microsoft\Windows Defender\Definition Updates\{DC14F85B-4ADD-4F5D-8EDD-8E17AE5C5F48}\mpengine.dll

2012-06-15 04:51 . 2012-07-01 16:02        95232        ----a-w-        c:\windows\system32\pdfcmon.dll

2012-06-09 05:43 . 2012-07-10 19:07        14172672        ----a-w-        c:\windows\system32\shell32.dll

2012-06-06 18:59 . 2012-06-06 18:59        1070152        ----a-w-        c:\windows\SysWow64\MSCOMCTL.OCX

2012-06-06 06:06 . 2012-07-10 19:06        2004480        ----a-w-        c:\windows\system32\msxml6.dll

2012-06-06 06:06 . 2012-07-10 19:06        1881600        ----a-w-        c:\windows\system32\msxml3.dll

2012-06-06 06:02 . 2012-07-10 19:07        1133568        ----a-w-        c:\windows\system32\cdosys.dll

2012-06-06 05:05 . 2012-07-10 19:06        1390080        ----a-w-        c:\windows\SysWow64\msxml6.dll

2012-06-06 05:05 . 2012-07-10 19:06        1236992        ----a-w-        c:\windows\SysWow64\msxml3.dll

2012-06-06 05:03 . 2012-07-10 19:07        805376        ----a-w-        c:\windows\SysWow64\cdosys.dll

2012-06-02 22:19 . 2012-07-01 15:11        38424        ----a-w-        c:\windows\system32\wups.dll

2012-06-02 22:19 . 2012-07-01 15:11        2428952        ----a-w-        c:\windows\system32\wuaueng.dll

2012-06-02 22:19 . 2012-07-01 15:11        57880        ----a-w-        c:\windows\system32\wuauclt.exe

2012-06-02 22:19 . 2012-07-01 15:11        44056        ----a-w-        c:\windows\system32\wups2.dll

2012-06-02 22:19 . 2012-07-01 15:11        701976        ----a-w-        c:\windows\system32\wuapi.dll

2012-06-02 22:15 . 2012-07-01 15:11        2622464        ----a-w-        c:\windows\system32\wucltux.dll

2012-06-02 22:15 . 2012-07-01 15:11        99840        ----a-w-        c:\windows\system32\wudriver.dll

2012-06-02 13:19 . 2012-07-01 15:11        186752        ----a-w-        c:\windows\system32\wuwebv.dll

2012-06-02 13:15 . 2012-07-01 15:11        36864        ----a-w-        c:\windows\system32\wuapp.exe

2012-06-02 05:50 . 2012-07-10 19:07        458704        ----a-w-        c:\windows\system32\drivers\cng.sys

2012-06-02 05:48 . 2012-07-10 19:07        95600        ----a-w-        c:\windows\system32\drivers\ksecdd.sys

2012-06-02 05:48 . 2012-07-10 19:07        151920        ----a-w-        c:\windows\system32\drivers\ksecpkg.sys

2012-06-02 05:45 . 2012-07-10 19:07        340992        ----a-w-        c:\windows\system32\schannel.dll

2012-06-02 05:44 . 2012-07-10 19:07        307200        ----a-w-        c:\windows\system32\ncrypt.dll

2012-06-02 04:40 . 2012-07-10 19:07        22016        ----a-w-        c:\windows\SysWow64\secur32.dll

2012-06-02 04:40 . 2012-07-10 19:07        225280        ----a-w-        c:\windows\SysWow64\schannel.dll

2012-06-02 04:39 . 2012-07-10 19:07        219136        ----a-w-        c:\windows\SysWow64\ncrypt.dll

2012-06-02 04:34 . 2012-07-10 19:07        96768        ----a-w-        c:\windows\SysWow64\sspicli.dll

.

.

((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))

.

.

*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 

REGEDIT4

.

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]

"{00000000-6E41-4FD3-8538-502F5495E5FC}"= "c:\program files (x86)\Ask.com\GenericAskToolbar.dll" [2012-06-20 1519824]

.

[HKEY_CLASSES_ROOT\clsid\{00000000-6e41-4fd3-8538-502f5495e5fc}]

.

[HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]

2012-06-20 11:18        1519824        ----a-w-        c:\program files (x86)\Ask.com\GenericAskToolbar.dll

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar]

"{D4027C7F-154A-4066-A1AD-4243D8127440}"= "c:\program files (x86)\Ask.com\GenericAskToolbar.dll" [2012-06-20 1519824]

.

[HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}]

[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1]

[HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}]

[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd]

.

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2012-04-11 3672384]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]

"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2010-01-22 98304]

"ATKOSD2"="c:\program files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe" [2010-02-04 7350912]

"ATKMEDIA"="c:\program files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe" [2010-01-05 170624]

"HControlUser"="c:\program files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe" [2009-06-19 105016]

"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-04-04 843712]

"ApnUpdater"="c:\program files (x86)\Ask.com\Updater\Updater.exe" [2012-06-20 1568976]

"avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2012-08-08 348664]

"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2012-01-17 252296]

"Nikon Message Center 2"="c:\program files (x86)\Nikon\Nikon Message Center 2\NkMC2.exe" [2011-10-30 571392]

"Malwarebytes' Anti-Malware"="c:\program files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" [2012-07-03 462920]

.

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\

SRS Premium Sound.lnk - c:\windows\Installer\{E5CF6B9C-3ABE-43C9-9413-AD5FFC98F049}\NewShortcut5_21C7B668029A47458B27645FE6E4A715.exe [2012-7-1 156952]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"ConsentPromptBehaviorAdmin"= 0 (0x0)

"ConsentPromptBehaviorUser"= 3 (0x3)

"EnableLUA"= 0 (0x0)

"EnableUIADesktopToggle"= 0 (0x0)

"PromptOnSecureDesktop"= 0 (0x0)

"HideFastUserSwitching"= 0 (0x0)

.

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]

"DisableClock"= 0 (0x0)

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]

"aux1"=wdmaud.drv

.

R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]

R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-08-27 250568]

R3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2012-08-29 114144]

R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2010-11-20 20992]

R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys [x]

R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]

R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys [x]

R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys [x]

R3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]

S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys [2012-05-02 27760]

S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [2012-07-07 283200]

S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]

S2 acedrv11;acedrv11;c:\windows\system32\drivers\acedrv11.sys [2010-02-24 191616]

S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-04-04 63928]

S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2010-01-22 202752]

S2 AntiVirSchedulerService;Avira Planer;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [2012-05-01 86224]

S2 AntiVirWebService;Avira Browser Schutz;c:\program files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [2012-05-01 465360]

S2 ASMMAP64;ASMMAP64;c:\program files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys [2009-07-02 15416]

S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2012-07-03 655944]

S2 TeamViewer7;TeamViewer 7;c:\program files (x86)\TeamViewer\Version7\TeamViewer_Service.exe [2012-07-16 2673064]

S2 UNS;Intel(R) Management & Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2009-09-30 2314240]

S3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atipmdag.sys [2010-01-22 6233088]

S3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [2010-01-22 161280]

S3 ETD;ELAN PS/2 Port Input Device;c:\windows\system32\DRIVERS\ETD.sys [2010-04-13 135560]

S3 HECIx64;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys [2009-09-17 56344]

S3 JMCR;JMCR;c:\windows\system32\DRIVERS\jmcr.sys [2009-08-18 143472]

S3 JME;JMicron Ethernet Adapter NDIS6.20 Driver (Amd64 Bits);c:\windows\system32\DRIVERS\JME.sys [2010-02-25 115312]

S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2012-07-03 24904]

S3 teamviewervpn;TeamViewer VPN Adapter;c:\windows\system32\DRIVERS\teamviewervpn.sys [2012-07-02 35112]

.

.

--- Andere Dienste/Treiber im Speicher ---

.

*NewlyCreated* - MBAMPROTECTOR

.

Inhalt des "geplante Tasks" Ordners

.

2012-08-30 c:\windows\Tasks\Adobe Flash Player Updater.job

- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-07-01 06:03]

.

.

--------- X64 Entries -----------

.

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"SmartAudio"="c:\program files\CONEXANT\SAII\SAIICpl.exe" [2011-07-09 307768]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]

"LoadAppInit_DLLs"=0x0

.

------- Zusätzlicher Suchlauf -------

.

uLocal Page = c:\windows\system32\blank.htm

uStart Page = hxxp://www.google.de/

mStart Page = hxxp://home.sweetim.com/?barid={1D5C58C3-C396-11E1-90AD-F18B55A4BCF3}

mLocal Page = c:\windows\SysWOW64\blank.htm

IE: Nach Microsoft E&xel exportieren - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000

LSP: c:\program files (x86)\Avira\AntiVir Desktop\avsda.dll

TCP: DhcpNameServer = 192.168.178.1

FF - ProfilePath - c:\users\Asus\AppData\Roaming\Mozilla\Firefox\Profiles\voajwwvw.default\

FF - prefs.js: browser.search.selectedEngine - Google

FF - prefs.js: browser.startup.homepage - hxxp://www.google.de/

FF - prefs.js: keyword.URL - hxxp://websearch.ask.com/redirect?client=ff&src=kw&tb=AVR-3&o=APN10395&locale=de_DE&apn_uid=cef3e8e5-b292-43e4-86cf-c2d8bcaef4b3&apn_ptnrs=^ABT&apn_sauid=4DFE4C21-369A-4590-B2A7-B31F8380E0D6&apn_dtid=^YYYYYY^YY^DE&&q=

FF - prefs.js: network.proxy.type - 0

.

- - - - Entfernte verwaiste Registrierungseinträge - - - -

.

BHO-{EEE6C35C-6118-11DC-9C72-001320C79847} - c:\program files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll

Toolbar-{EEE6C35B-6118-11DC-9C72-001320C79847} - c:\program files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll

SafeBoot-ksupmgr

WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)

WebBrowser-{EEE6C35B-6118-11DC-9C72-001320C79847} - (no file)

HKLM-Run-ETDWare - c:\program files (x86)\Elantech\ETDCtrl.exe

.

.

.

--------------------- Gesperrte Registrierungsschluessel ---------------------

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]

@Denied: (A 2) (Everyone)

@="FlashBroker"

"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_3_300_271_ActiveX.exe,-101"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]

"Enabled"=dword:00000001

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_3_300_271_ActiveX.exe"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Shockwave Flash Object"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_271.ocx"

"ThreadingModel"="Apartment"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]

@="0"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]

@="ShockwaveFlash.ShockwaveFlash.11"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_271.ocx, 1"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="ShockwaveFlash.ShockwaveFlash"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Macromedia Flash Factory Object"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_271.ocx"

"ThreadingModel"="Apartment"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]

@="FlashFactory.FlashFactory.1"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_271.ocx, 1"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="FlashFactory.FlashFactory"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]

@Denied: (A 2) (Everyone)

@="IFlashBroker4"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]

@="{00020424-0000-0000-C000-000000000046}"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

"Version"="1.0"

.

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]

@Denied: (Full) (Everyone)

.

Zeit der Fertigstellung: 2012-08-30  11:48:34

ComboFix-quarantined-files.txt  2012-08-30 09:48

.

Vor Suchlauf: 8 Verzeichnis(se), 30.808.363.008 Bytes frei

Nach Suchlauf: 13 Verzeichnis(se), 31.193.698.304 Bytes frei

.

- - End Of File - - 8CE46F396E97405978344541B4A94FAF
--- --- ---

Ist noch was zu tun jetzt oder war es das mit dem Laptop.

Mache jetzt alles gerade über mein Handy.