Trojaner-Board - GVU Trojaner, Win 7, Systemwiederherstellung durchgeführt

Code:

ComboFix 13-01-24.02 - jana 24.01.2013  17:54:57.1.2 - x64

Microsoft Windows 7 Professional   6.1.7600.0.1252.49.1031.18.3935.2522 [GMT 1:00]

ausgeführt von:: c:\users\jana\Desktop\ComboFix.exe

AV: Avira Desktop *Disabled/Updated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}

SP: Avira Desktop *Disabled/Updated* {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}

SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

.

.

((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))

.

.

c:\program files (x86)\Mozilla Firefox\searchplugins\zwunzi141.xml

c:\program files (x86)\Mozilla Firefox\searchplugins\zwunzi143.xml

c:\program files (x86)\Mozilla Firefox\searchplugins\zwunzi145.xml

c:\users\jana\AppData\Roaming\Local

c:\users\jana\AppData\Roaming\Local\Temp\DDM\Settings\0.ddi

c:\users\jana\AppData\Roaming\Local\Temp\DDM\Settings\2f710af47fa91a843cdb712f01159c0a.ddr

c:\users\jana\AppData\Roaming\Local\Temp\DDM\Settings\gilmore.girls.419-med.avi.ddr

c:\users\jana\AppData\Roaming\Local\Temp\DDM\Settings\Gilmore.Girls.S01E10.avi.ddr

c:\users\jana\AppData\Roaming\Local\Temp\DDM\Settings\Gilmore.Girls.S01E11.avi.ddr

c:\users\jana\AppData\Roaming\Local\Temp\DDM\Settings\gilmore.girls.s02e01.dvdrip.xvid-river.avi.ddr

c:\users\jana\AppData\Roaming\Local\Temp\DDM\Settings\Gilmore.Girls.S02E16.avi.ddr

c:\users\jana\AppData\Roaming\Local\Temp\DDM\Settings\Gilmore.Girls.S02E17_Eine.Hochzeit.und.ein.Todesfall.avi.ddr

c:\users\jana\AppData\Roaming\Local\Temp\DDM\Settings\How.I.Met.Your.Mother.S01E01.DVDRip.XviD-TOPAZ.avi.ddr

c:\users\jana\AppData\Roaming\Local\Temp\DDM\Settings\How.I.Met.Your.Mother.s01e09.avi.ddr

c:\users\jana\AppData\Roaming\Local\Temp\DDM\Settings\How.I.Met.Your.Mother.S01E10.DVDRip.XviD-FoV.avi.ddr

c:\users\jana\AppData\Roaming\Local\Temp\DDM\Settings\How_I_Met_Your_Mother_1x04_-_Return_of_the_Shirt.avi.ddr

c:\users\jana\AppData\Roaming\Local\Temp\DDM\Settings\settings.ddi

c:\users\jana\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\(2).ddp

c:\users\jana\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\.ddp

c:\users\jana\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\2f710af47fa91a843cdb712f01159c0a

c:\users\jana\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\gilmore.girls.419-med.avi.ddp

c:\users\jana\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\Gilmore.Girls.S01E10.avi.ddp

c:\users\jana\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\Gilmore.Girls.S01E11.avi.ddp

c:\users\jana\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\gilmore.girls.s02e01.dvdrip.xvid-river.avi.ddp

c:\users\jana\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\Gilmore.Girls.S02E16.avi

c:\users\jana\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\Gilmore.Girls.S02E17_Eine.Hochzeit.und.ein.Todesfall.avi

c:\users\jana\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\How.I.Met.Your.Mother.S01E01.DVDRip.XviD-TOPAZ.avi

c:\users\jana\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\How.I.Met.Your.Mother.s01e09.avi.ddp

c:\users\jana\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\How.I.Met.Your.Mother.S01E10.DVDRip.XviD-FoV.avi.ddp

c:\users\jana\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\How_I_Met_Your_Mother_1x04_-_Return_of_the_Shirt.avi

c:\users\jana\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\The.Big.Bang.Theory.S01E02.DVDRip.XviD-FoV.avi.ddp

c:\users\jana\AppData\Roaming\Local\Temp\DDM\Settings\The.Big.Bang.Theory.S01E02.DVDRip.XviD-FoV.avi.ddr

c:\users\jana\AppData\Roaming\yuvcodecs-1.3.exe

.

.

(((((((((((((((((((((((   Dateien erstellt von 2012-12-24 bis 2013-01-24  ))))))))))))))))))))))))))))))

.

.

2013-01-24 17:11 . 2013-01-24 17:11        --------        d-----w-        c:\users\Default\AppData\Local\temp

2013-01-22 19:24 . 2013-01-22 19:24        95648        ----a-w-        c:\windows\SysWow64\WindowsAccessBridge-32.dll

2013-01-21 13:25 . 2013-01-21 13:25        --------        d-----w-        c:\users\jana\AppData\Roaming\Malwarebytes

2013-01-21 13:25 . 2013-01-21 13:25        --------        d-----w-        c:\programdata\Malwarebytes

2013-01-21 13:25 . 2013-01-21 13:25        --------        d-----w-        c:\program files (x86)\Malwarebytes' Anti-Malware

2013-01-21 13:25 . 2012-12-14 15:49        24176        ----a-w-        c:\windows\system32\drivers\mbam.sys

2013-01-13 16:33 . 2013-01-13 16:33        --------        d-----w-        c:\users\jana\AppData\Roaming\Avira

2013-01-13 16:27 . 2012-12-03 14:36        129216        ----a-w-        c:\windows\system32\drivers\avipbb.sys

2013-01-13 16:27 . 2012-11-16 19:17        27800        ----a-w-        c:\windows\system32\drivers\avkmgr.sys

2013-01-13 16:27 . 2012-12-03 14:36        99912        ----a-w-        c:\windows\system32\drivers\avgntflt.sys

2013-01-13 16:27 . 2013-01-13 16:27        --------        d-----w-        c:\programdata\Avira

2013-01-13 16:27 . 2013-01-13 16:27        --------        d-----w-        c:\program files (x86)\Avira

2013-01-13 15:14 . 2013-01-13 15:14        76232        ----a-w-        c:\programdata\Microsoft\Windows Defender\Definition Updates\{AE2A1877-4E99-4E66-812F-41D24DB04121}\offreg.dll

2013-01-12 16:23 . 2012-11-08 17:24        9125352        ----a-w-        c:\programdata\Microsoft\Windows Defender\Definition Updates\{AE2A1877-4E99-4E66-812F-41D24DB04121}\mpengine.dll

2013-01-10 18:16 . 2012-11-02 05:30        2001408        ----a-w-        c:\windows\system32\msxml6.dll

2013-01-10 18:16 . 2012-11-02 05:30        1880064        ----a-w-        c:\windows\system32\msxml3.dll

2013-01-10 18:16 . 2012-11-02 04:50        1388544        ----a-w-        c:\windows\SysWow64\msxml6.dll

2013-01-10 18:16 . 2012-11-02 04:50        1236992        ----a-w-        c:\windows\SysWow64\msxml3.dll

2013-01-10 18:16 . 2012-11-20 05:55        307200        ----a-w-        c:\windows\system32\ncrypt.dll

2013-01-10 18:16 . 2012-11-20 05:10        219136        ----a-w-        c:\windows\SysWow64\ncrypt.dll

2013-01-10 18:14 . 2012-11-09 05:34        751104        ----a-w-        c:\windows\system32\win32spl.dll

2013-01-10 18:14 . 2012-11-09 04:49        492032        ----a-w-        c:\windows\SysWow64\win32spl.dll

2013-01-10 18:14 . 2012-11-22 10:32        801280        ----a-w-        c:\windows\system32\usp10.dll

2013-01-10 18:14 . 2012-11-22 09:33        627712        ----a-w-        c:\windows\SysWow64\usp10.dll

2013-01-10 18:06 . 2012-11-30 05:43        424960        ----a-w-        c:\windows\system32\KernelBase.dll

2013-01-10 18:05 . 2012-11-30 02:51        3072        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-util-l1-1-0.dll

2013-01-10 18:05 . 2012-11-30 02:51        4608        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-threadpool-l1-1-0.dll

2013-01-10 18:04 . 2012-11-30 04:56        3584        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-libraryloader-l1-1-0.dll

2013-01-10 18:04 . 2012-11-30 02:51        6144        ---ha-w-        c:\windows\SysWow64\api-ms-win-security-base-l1-1-0.dll

2013-01-10 18:04 . 2012-11-30 05:41        6144        ---ha-w-        c:\windows\system32\api-ms-win-security-base-l1-1-0.dll

2013-01-10 18:04 . 2012-11-30 02:56        25600        ----a-w-        c:\windows\SysWow64\setup16.exe

2013-01-10 18:04 . 2012-11-30 02:56        7680        ----a-w-        c:\windows\SysWow64\instnm.exe

2013-01-10 18:04 . 2012-11-30 05:41        4096        ---ha-w-        c:\windows\system32\api-ms-win-core-localization-l1-1-0.dll

2013-01-10 18:04 . 2012-11-30 04:56        4096        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-localization-l1-1-0.dll

2013-01-10 18:04 . 2012-11-30 05:41        3072        ---ha-w-        c:\windows\system32\api-ms-win-core-console-l1-1-0.dll

2013-01-10 18:04 . 2012-11-30 04:56        3072        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-console-l1-1-0.dll

2013-01-10 18:03 . 2012-11-30 02:56        2048        ----a-w-        c:\windows\SysWow64\user.exe

2013-01-10 01:32 . 2012-11-23 03:45        3147264        ----a-w-        c:\windows\system32\win32k.sys

2012-12-25 18:16 . 2012-12-16 16:52        46080        ----a-w-        c:\windows\system32\atmlib.dll

2012-12-25 18:16 . 2012-12-16 14:25        34304        ----a-w-        c:\windows\SysWow64\atmlib.dll

2012-12-25 18:16 . 2012-12-16 14:40        367616        ----a-w-        c:\windows\system32\atmfd.dll

2012-12-25 18:16 . 2012-12-16 14:25        295424        ----a-w-        c:\windows\SysWow64\atmfd.dll

.

.

.

((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2013-01-22 20:32 . 2012-03-30 17:21        697864        ----a-w-        c:\windows\SysWow64\FlashPlayerApp.exe

2013-01-22 20:32 . 2011-05-21 21:50        74248        ----a-w-        c:\windows\SysWow64\FlashPlayerCPLApp.cpl

2013-01-22 19:24 . 2012-10-05 13:50        859552        ----a-w-        c:\windows\SysWow64\npDeployJava1.dll

2013-01-22 19:24 . 2010-12-31 18:45        780192        ----a-w-        c:\windows\SysWow64\deployJava1.dll

2013-01-13 02:07 . 2009-12-13 11:12        67599240        ----a-w-        c:\windows\system32\MRT.exe

2012-11-30 04:56 . 2013-01-10 18:06        44032        ----a-w-        c:\windows\apppatch\acwow64.dll

2012-11-28 19:18 . 2012-12-17 13:58        4659712        ----a-w-        c:\windows\SysWow64\Redemption.dll

2012-11-28 19:17 . 2012-11-28 19:17        974848        ----a-w-        c:\windows\SysWow64\cis-2.4.dll

2012-11-28 19:17 . 2012-11-28 19:17        81920        ----a-w-        c:\windows\SysWow64\issacapi_bs-2.3.dll

2012-11-28 19:17 . 2012-11-28 19:17        65536        ----a-w-        c:\windows\SysWow64\issacapi_pe-2.3.dll

2012-11-28 19:17 . 2012-11-28 19:17        57344        ----a-w-        c:\windows\SysWow64\MTXSYNCICON.dll

2012-11-28 19:17 . 2012-11-28 19:17        57344        ----a-w-        c:\windows\SysWow64\MK_Lyric.dll

2012-11-28 19:17 . 2012-11-28 19:17        57344        ----a-w-        c:\windows\SysWow64\issacapi_se-2.3.dll

2012-11-28 19:17 . 2012-11-28 19:17        569344        ----a-w-        c:\windows\SysWow64\muzdecode.ax

2012-11-28 19:17 . 2012-11-28 19:17        491520        ----a-w-        c:\windows\SysWow64\muzapp.dll

2012-11-28 19:17 . 2012-11-28 19:17        49152        ----a-w-        c:\windows\SysWow64\MaJGUILib.dll

2012-11-28 19:17 . 2012-11-28 19:17        45320        ----a-w-        c:\windows\SysWow64\MAMACExtract.dll

2012-11-28 19:17 . 2012-11-28 19:17        45056        ----a-w-        c:\windows\SysWow64\MaXMLProto.dll

2012-11-28 19:17 . 2012-11-28 19:17        45056        ----a-w-        c:\windows\SysWow64\MACXMLProto.dll

2012-11-28 19:17 . 2012-11-28 19:17        40960        ----a-w-        c:\windows\SysWow64\MTTELECHIP.dll

2012-11-28 19:17 . 2012-11-28 19:17        352256        ----a-w-        c:\windows\SysWow64\MSLUR71.dll

2012-11-28 19:17 . 2012-11-28 19:17        258048        ----a-w-        c:\windows\SysWow64\muzoggsp.ax

2012-11-28 19:17 . 2012-11-28 19:17        245760        ----a-w-        c:\windows\SysWow64\MSCLib.dll

2012-11-28 19:17 . 2012-11-28 19:17        24576        ----a-w-        c:\windows\SysWow64\MASetupCleaner.exe

2012-11-28 19:17 . 2012-11-28 19:17        200704        ----a-w-        c:\windows\SysWow64\muzwmts.dll

2012-11-28 19:17 . 2012-11-28 19:17        172032        ----a-w-        c:\windows\SysWow64\muzapp.exe

2012-11-28 19:17 . 2012-11-28 19:17        155648        ----a-w-        c:\windows\SysWow64\MSFLib.dll

2012-11-28 19:17 . 2012-11-28 19:17        143360        ----a-w-        c:\windows\SysWow64\3DAudio.ax

2012-11-28 19:17 . 2012-11-28 19:17        135168        ----a-w-        c:\windows\SysWow64\muzaf1.dll

2012-11-28 19:17 . 2012-11-28 19:17        131072        ----a-w-        c:\windows\SysWow64\muzmpgsp.ax

2012-11-28 19:17 . 2012-11-28 19:17        122880        ----a-w-        c:\windows\SysWow64\muzeffect.ax

2012-11-28 19:17 . 2012-11-28 19:17        118784        ----a-w-        c:\windows\SysWow64\MaDRM.dll

2012-11-28 19:17 . 2012-11-28 19:17        110592        ----a-w-        c:\windows\SysWow64\muzmp4sp.ax

2012-11-14 07:06 . 2012-12-13 08:08        17811968        ----a-w-        c:\windows\system32\mshtml.dll

2012-11-14 06:32 . 2012-12-13 08:08        10925568        ----a-w-        c:\windows\system32\ieframe.dll

2012-11-14 06:11 . 2012-12-13 08:09        2312704        ----a-w-        c:\windows\system32\jscript9.dll

2012-11-14 06:04 . 2012-12-13 08:09        1346048        ----a-w-        c:\windows\system32\urlmon.dll

2012-11-14 06:04 . 2012-12-13 08:09        1392128        ----a-w-        c:\windows\system32\wininet.dll

2012-11-14 06:02 . 2012-12-13 08:09        1494528        ----a-w-        c:\windows\system32\inetcpl.cpl

2012-11-14 06:02 . 2012-12-13 08:09        237056        ----a-w-        c:\windows\system32\url.dll

2012-11-14 05:59 . 2012-12-13 08:09        85504        ----a-w-        c:\windows\system32\jsproxy.dll

2012-11-14 05:58 . 2012-12-13 08:08        816640        ----a-w-        c:\windows\system32\jscript.dll

2012-11-14 05:57 . 2012-12-13 08:08        599040        ----a-w-        c:\windows\system32\vbscript.dll

2012-11-14 05:57 . 2012-12-13 08:09        173056        ----a-w-        c:\windows\system32\ieUnatt.exe

2012-11-14 05:55 . 2012-12-13 08:08        2144768        ----a-w-        c:\windows\system32\iertutil.dll

2012-11-14 05:55 . 2012-12-13 08:09        729088        ----a-w-        c:\windows\system32\msfeeds.dll

2012-11-14 05:53 . 2012-12-13 08:09        96768        ----a-w-        c:\windows\system32\mshtmled.dll

2012-11-14 05:52 . 2012-12-13 08:09        2382848        ----a-w-        c:\windows\system32\mshtml.tlb

2012-11-14 05:46 . 2012-12-13 08:09        248320        ----a-w-        c:\windows\system32\ieui.dll

2012-11-14 02:09 . 2012-12-13 08:08        1800704        ----a-w-        c:\windows\SysWow64\jscript9.dll

2012-11-14 01:58 . 2012-12-13 08:09        1427968        ----a-w-        c:\windows\SysWow64\inetcpl.cpl

2012-11-14 01:57 . 2012-12-13 08:09        1129472        ----a-w-        c:\windows\SysWow64\wininet.dll

2012-11-14 01:49 . 2012-12-13 08:09        142848        ----a-w-        c:\windows\SysWow64\ieUnatt.exe

2012-11-14 01:48 . 2012-12-13 08:09        420864        ----a-w-        c:\windows\SysWow64\vbscript.dll

2012-11-14 01:44 . 2012-12-13 08:09        2382848        ----a-w-        c:\windows\SysWow64\mshtml.tlb

2012-11-09 05:34 . 2012-12-13 05:13        2048        ----a-w-        c:\windows\system32\tzres.dll

2012-11-09 04:49 . 2012-12-13 05:13        2048        ----a-w-        c:\windows\SysWow64\tzres.dll

2012-11-02 05:27 . 2012-12-13 05:09        478208        ----a-w-        c:\windows\system32\dpnet.dll

2012-11-02 04:48 . 2012-12-13 05:09        376832        ----a-w-        c:\windows\SysWow64\dpnet.dll

.

.

((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))

.

.

*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 

REGEDIT4

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]

@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"

[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]

2012-11-13 23:32        129272        ----a-w-        c:\users\jana\AppData\Roaming\Dropbox\bin\DropboxExt.17.dll

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]

@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"

[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]

2012-11-13 23:32        129272        ----a-w-        c:\users\jana\AppData\Roaming\Dropbox\bin\DropboxExt.17.dll

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]

@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"

[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]

2012-11-13 23:32        129272        ----a-w-        c:\users\jana\AppData\Roaming\Dropbox\bin\DropboxExt.17.dll

.

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"Spotify Web Helper"="c:\users\jana\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" [2012-10-31 1199576]

"swg"="c:\program files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-12-01 39408]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]

"ISBMgr.exe"="c:\program files (x86)\Sony\ISB Utility\ISBMgr.exe" [2009-05-26 317288]

"NortonOnlineBackupReminder"="c:\program files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe" [2009-06-17 538472]

"VMSwitch"="c:\program files (x86)\Sony\VAIO Mode Switch\VMSwitch.exe" [2009-07-28 538472]

"SHTtray.exe"="c:\program files (x86)\Common Files\Sony Shared\SOHLib\SHTtray.exe" [2009-07-27 99624]

"BlackBerryAutoUpdate"="c:\program files (x86)\Common Files\Research In Motion\Auto Update\RIMAutoUpdate.exe" [2009-07-01 623960]

"SwitchBoard"="c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe" [2010-02-19 517096]

"VMonitorVMUVC"="c:\program files (x86)\Vimicro Corporation\VMUVC\VMonitor.exe" [2008-03-26 135168]

"Acrobat Assistant 8.0"="c:\program files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe" [2012-04-04 815512]

"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2012-05-30 59280]

"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2012-06-07 421776]

"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2012-04-19 421888]

"Adobe Acrobat Speed Launcher"="c:\program files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe" [2012-04-04 36760]

"Cisco AnyConnect Secure Mobility Agent for Windows"="c:\program files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe" [2012-10-17 684024]

"avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2012-12-04 384800]

"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-12-18 946352]

.

c:\users\jana\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\

Dropbox.lnk - c:\users\jana\AppData\Roaming\Dropbox\bin\Dropbox.exe [2012-12-29 28539392]

.

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\

Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2009-7-1 1079584]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"ConsentPromptBehaviorAdmin"= 5 (0x5)

"ConsentPromptBehaviorUser"= 3 (0x3)

"EnableUIADesktopToggle"= 0 (0x0)

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon]

"Userinit"="userinit.exe"

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\VESWinlogon]

2009-07-01 10:49        98304        ----a-w-        c:\windows\System32\VESWinlogon.dll

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]

"LoadAppInit_DLLs"=1 (0x1)

"AppInit_DLLs"=c:\progra~2\WXDOWN~1\sprotector.dll

.

R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]

R2 Roxio Upnp Server 10;Roxio Upnp Server 10;c:\program files (x86)\Roxio\Digital Home 10\RoxioUpnpService10.exe [2009-06-26 362992]

R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2012-07-13 160944]

R3 acsock;acsock;c:\windows\system32\DRIVERS\acsock64.sys [2012-10-17 107432]

R3 bautpw64;BUFFALO eco manager for HD Filter;c:\windows\system32\drivers\bautpw64.sys [2009-07-10 16000]

R3 btusb64h;BUFFALO TurboUSB for HD Filter;c:\windows\system32\drivers\btusb64h.sys [2009-06-24 28728]

R3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys [2009-08-03 35104]

R3 ew_hwusbdev;Huawei MobileBroadband USB PNP Device;c:\windows\system32\DRIVERS\ew_hwusbdev.sys [x]

R3 ewusbnet;HUAWEI USB-NDIS miniport;c:\windows\system32\DRIVERS\ewusbnet.sys [x]

R3 huawei_enumerator;huawei_enumerator;c:\windows\system32\DRIVERS\ew_jubusenum.sys [x]

R3 netw5v64;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 64 Bit;c:\windows\system32\DRIVERS\netw5v64.sys [2009-06-05 5435904]

R3 Roxio UPnP Renderer 10;Roxio UPnP Renderer 10;c:\program files (x86)\Roxio\Digital Home 10\RoxioUPnPRenderer10.exe [2009-06-26 313840]

R3 SrvHsfHDA;SrvHsfHDA;c:\windows\system32\DRIVERS\VSTAZL6.SYS [2009-06-10 292864]

R3 SrvHsfV92;SrvHsfV92;c:\windows\system32\DRIVERS\VSTDPV6.SYS [2009-06-10 1485312]

R3 SrvHsfWinac;SrvHsfWinac;c:\windows\system32\DRIVERS\VSTCNXT6.SYS [2009-06-10 740864]

R3 SwitchBoard;SwitchBoard;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]

R3 VcmINSMgr;VAIO Content Metadata Intelligent Network Service Manager;c:\program files\Sony\VCM Intelligent Network Service Manager\VcmINSMgr.exe [2009-09-01 361840]

R3 VcmXmlIfHelper;VAIO Content Metadata XML Interface;c:\program files\Common Files\Sony Shared\VcmXml\VcmXmlIfHelper64.exe [2009-06-17 110888]

R3 VMUVC;Vimicro Camera Service VMUVC;c:\windows\system32\Drivers\VMUVC.sys [2009-03-11 198400]

R3 vvftUVC;Vimicro Camera Filter Service VMUVC;c:\windows\system32\drivers\vvftUVC.sys [2008-07-01 303616]

R3 WatAdminSvc;Windows-Aktivierungstechnologieservice;c:\windows\system32\Wat\WatAdminSvc.exe [2010-07-23 1255736]

R4 Mfehto;Mfehto; [x]

S0 MDFSYSNT;MacDrive file system driver; [x]

S0 MDPMGRNT;MacDrive Partition Driver;c:\windows\system32\DRIVERS\MDPMGRNT.SYS [2011-05-09 32936]

S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys [2010-08-12 55856]

S0 shpf;Sony HDD Protection Filter Driver;c:\windows\system32\DRIVERS\shpf.sys [2009-05-28 25120]

S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys [2012-11-16 27800]

S1 CBDisk;CBDisk;c:\windows\system32\drivers\CBDisk.sys [2011-05-06 70344]

S2 AntiVirSchedulerService;Avira Planer;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [2012-12-04 85280]

S2 HsfXAudioService;HsfXAudioService;c:\windows\system32\svchost.exe [2009-07-14 27136]

S2 MacDrive9Service;MacDrive 9 service;c:\program files\Mediafour\MacDrive 9\MacDrive9Service.exe [2011-09-23 178176]

S2 RtkAudioService;Realtek Audio Service;c:\program files\Realtek\Audio\HDA\RtkAudioService64.exe [2012-05-09 200808]

S2 SOHCImp;VAIO Media plus Content Importer;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHCImp.exe [2009-07-27 120104]

S2 SOHDBSvr;VAIO Media plus Database Manager;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHDBSvr.exe [2009-07-27 70952]

S2 SOHDms;VAIO Media plus Digital Media Server;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHDms.exe [2009-07-27 427304]

S2 SOHDs;VAIO Media plus Device Searcher;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHDs.exe [2009-07-27 75048]

S2 SOHPlMgr;VAIO Media plus Playlist Manager;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHPlMgr.exe [2009-07-27 91432]

S2 uCamMonitor;CamMonitor;c:\program files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [2008-09-18 104960]

S2 VAIO Power Management;VAIO Power Management;c:\program files\Sony\VAIO Power Management\SPMService.exe [2009-07-16 411496]

S2 VCFw;VAIO Content Folder Watcher;c:\program files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [2009-07-22 642920]

S2 VcmIAlzMgr;VAIO Content Metadata Intelligent Analyzing Manager;c:\program files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe [2009-06-26 468264]

S2 vpnagent;Cisco AnyConnect Secure Mobility Agent;c:\program files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe [2012-10-17 544248]

S2 VSNService;VSNService;c:\program files\Sony\VAIO Smart Network\VSNService.exe [2010-08-11 845312]

S2 yksvc;Marvell Yukon Service;c:\windows\System32\svchost.exe [2009-07-14 27136]

S3 ArcSoftKsUFilter;ArcSoft Magic-I Visual Effect;c:\windows\system32\DRIVERS\ArcSoftKsUFilter.sys [2009-05-26 19968]

S3 CAXHWAZL;CAXHWAZL;c:\windows\system32\DRIVERS\CAXHWAZL.sys [2009-07-31 292864]

S3 NETw5s64;Intel(R) Wireless WiFi Link Adaptertreiber für Windows 7 64-Bit;c:\windows\system32\DRIVERS\NETw5s64.sys [2009-09-15 6952960]

S3 SFEP;Sony Firmware Extension Parser;c:\windows\system32\DRIVERS\SFEP.sys [2009-06-11 11392]

S3 VUAgent;VUAgent;c:\program files\Sony\VAIO Update\VUAgent.exe [2012-10-26 1286784]

S3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;c:\windows\system32\DRIVERS\yk62x64.sys [2009-07-31 393216]

.

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]

2013-01-23 15:17        1607120        ----a-w-        c:\program files (x86)\Google\Chrome\Application\24.0.1312.56\Installer\chrmstp.exe

.

Inhalt des "geplante Tasks" Ordners

.

2013-01-24 c:\windows\Tasks\Adobe Flash Player Updater.job

- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-03-30 20:32]

.

2013-01-24 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job

- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2009-12-01 07:14]

.

2013-01-24 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2009-12-01 07:14]

.

2013-01-22 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1843916268-2013816725-1031614781-1004Core.job

- c:\users\jana\AppData\Local\Google\Update\GoogleUpdate.exe [2011-07-19 06:33]

.

2013-01-24 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1843916268-2013816725-1031614781-1004UA.job

- c:\users\jana\AppData\Local\Google\Update\GoogleUpdate.exe [2011-07-19 06:33]

.

.

--------- X64 Entries -----------

.

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]

@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"

[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]

2012-11-13 23:32        162552        ----a-w-        c:\users\jana\AppData\Roaming\Dropbox\bin\DropboxExt64.17.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]

@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"

[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]

2012-11-13 23:32        162552        ----a-w-        c:\users\jana\AppData\Roaming\Dropbox\bin\DropboxExt64.17.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]

@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"

[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]

2012-11-13 23:32        162552        ----a-w-        c:\users\jana\AppData\Roaming\Dropbox\bin\DropboxExt64.17.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\MacDriveVolumeIcon]

@="{6B21AF46-EE37-40D0-A707-C06C17D06CE9}"

[HKEY_CLASSES_ROOT\CLSID\{6B21AF46-EE37-40D0-A707-C06C17D06CE9}]

2011-07-13 16:22        231936        ----a-w-        c:\program files\Mediafour\MacDrive 9\MDVolumeIcons.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\MacDriveVolumeIconReadOnly]

@="{E9BC4DCA-0A4E-4C65-9D40-621C9D0CDC5F}"

[HKEY_CLASSES_ROOT\CLSID\{E9BC4DCA-0A4E-4C65-9D40-621C9D0CDC5F}]

2011-07-13 16:22        231936        ----a-w-        c:\program files\Mediafour\MacDrive 9\MDVolumeIcons.dll

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"IAAnotif"="c:\program files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2009-06-04 186904]

"IgfxTray"="c:\windows\system32\igfxtray.exe" [2010-08-25 161304]

"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2010-08-25 386584]

"Persistence"="c:\windows\system32\igfxpers.exe" [2010-08-25 415256]

.

------- Zusätzlicher Suchlauf -------

.

uLocal Page = c:\windows\system32\blank.htm

uStart Page = hxxp://www.google.com/ig/redirectdomain?brand=SVEA&bmod=EU01

uDefault_Search_URL = hxxp://www.google.com/ie

mLocal Page = c:\windows\SysWOW64\blank.htm

uInternet Settings,ProxyOverride = *.local

uSearchAssistant = hxxp://www.google.com/ie

uSearchURL,(Default) = hxxp://www.google.com/search?q=%s

IE: An vorhandene PDF-Datei anfügen - c:\program files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html

IE: Bild an &Bluetooth-Gerät senden... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm

IE: Free YouTube to Mp3 Converter - c:\users\jana\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm

IE: In Adobe PDF konvertieren - c:\program files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html

IE: Linkziel an vorhandene PDF-Datei anhängen - c:\program files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html

IE: Linkziel in Adobe PDF konvertieren - c:\program files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html

IE: Nach Microsoft E&xel exportieren - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000

IE: Seite an &Bluetooth-Gerät senden... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm

TCP: DhcpNameServer = 192.168.178.1

FF - ProfilePath - c:\users\jana\AppData\Roaming\Mozilla\Firefox\Profiles\7buma6y5.default\

FF - prefs.js: browser.search.defaulturl - 

FF - prefs.js: browser.search.selectedEngine - dict.cc

FF - prefs.js: keyword.URL - 

FF - prefs.js: browser.startup.homepage - 

FF - ExtSQL: 2012-12-17 17:20; 50cf466168e18@50cf466168e51.com; c:\users\jana\AppData\Roaming\Mozilla\Firefox\Profiles\7buma6y5.default\extensions\50cf466168e18@50cf466168e51.com

.

- - - - Entfernte verwaiste Registrierungseinträge - - - -

.

Wow6432Node-HKCU-Run-AdobeBridge - (no file)

Wow6432Node-HKLM-Run-<NO NAME> - (no file)

Wow6432Node-HKLM-Run-KiesTrayAgent - c:\program files (x86)\Samsung\Kies\KiesTrayAgent.exe

SafeBoot-mcmscsvc

SafeBoot-MCODS

HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe

AddRemove-HelixYUVCodecs - c:\windows\system32\uninstHelixYUV.exe

.

.

.

--------------------- Gesperrte Registrierungsschluessel ---------------------

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]

@Denied: (A 2) (Everyone)

@="FlashBroker"

"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_5_502_146_ActiveX.exe,-101"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]

"Enabled"=dword:00000001

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]

@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_5_502_146_ActiveX.exe"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

.

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]

@Denied: (A 2) (Everyone)

@="IFlashBroker5"

.

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]

@="{00020424-0000-0000-C000-000000000046}"

.

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

"Version"="1.0"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]

@Denied: (A 2) (Everyone)

@="FlashBroker"

"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_5_502_146_ActiveX.exe,-101"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]

"Enabled"=dword:00000001

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_5_502_146_ActiveX.exe"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Shockwave Flash Object"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_5_502_146.ocx"

"ThreadingModel"="Apartment"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]

@="0"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]

@="ShockwaveFlash.ShockwaveFlash.11"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_5_502_146.ocx, 1"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="ShockwaveFlash.ShockwaveFlash"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Macromedia Flash Factory Object"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_5_502_146.ocx"

"ThreadingModel"="Apartment"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]

@="FlashFactory.FlashFactory.1"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_5_502_146.ocx, 1"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="FlashFactory.FlashFactory"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]

@Denied: (A 2) (Everyone)

@="IFlashBroker5"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]

@="{00020424-0000-0000-C000-000000000046}"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

"Version"="1.0"

.

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

"BlindDial"=dword:00000000

.

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

"BlindDial"=dword:00000000

.

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

"BlindDial"=dword:00000000

.

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

"BlindDial"=dword:00000000

.

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]

@Denied: (Full) (Everyone)

.

Zeit der Fertigstellung: 2013-01-24  18:18:45

ComboFix-quarantined-files.txt  2013-01-24 17:18

.

Vor Suchlauf: 15 Verzeichnis(se), 138.515.386.368 Bytes frei

Nach Suchlauf: 19 Verzeichnis(se), 148.797.194.240 Bytes frei

.

- - End Of File - - E4B49F2B34534F3E30A40E52CA0A451A

Code:

 Update for Microsoft Office 2007 (KB2508958)

2007 Microsoft Office system

7-Zip 4.65

Adobe Acrobat X Pro - English, Français, Deutsch

Adobe AIR

Adobe Community Help

Adobe Content Viewer

Adobe Creative Suite 5.5 Master Collection

Adobe Download Assistant

Adobe Flash Player 11 ActiveX

Adobe Flash Player 11 Plugin

Adobe Flash Professional CS5

Adobe Media Player

Adobe Photoshop CS

Adobe Reader XI (11.0.01) - Deutsch

Adobe Story

Adobe Widget Browser

Advanced PDF-to-Word 1.0 Demo

ALDI Süd Foto Service

ALDI Süd Online Druck Service 4.6

Aldi Sued Fotoservice 2.7

Apple Application Support

Apple Software Update

ArcSoft Magic-i Visual Effects 2

ArcSoft WebCam Companion 3

AudibleManager

Audiograbber 1.83 SE 

Avira Free Antivirus

AviSynth 2.6

AvsP

BlackBerry Desktop Software 5.0

BlackBerry® Media Sync

BUFFALO eco Manager for HD

BUFFALO INC. DISK FORMATTER

BUFFALO TurboUSB for FLASH/HDD

Business Contact Manager für Outlook 2007 SP2

Choice Guard

Cisco AnyConnect Secure Mobility Client

Cisco AnyConnect Secure Mobility Client 

Click to Disc

Click to Disc Editor

deskUNPDF 3 Professional

Digital microscope

DivX-Setup

Dropbox

DVD Shrink 3.2 deutsch (DeCSS-frei)

DVD slideshow GUI 0.9.5.2

Einstellungen für VAIO-Inhaltsüberwachung

FoxyTunes for Firefox

Free Audio CD Burner version 1.4.7

Free Sound Recorder v8.1.1

Free YouTube to MP3 Converter version 3.10.8.815

FreePDF (Remove only)

GoldWave v5.67

Google Chrome

Google Talk Plugin

Google Toolbar for Internet Explorer

Google Update Helper

GPL Ghostscript 8.70

GUI for dvdauthor 1.07

Haali Media Splitter

Helix YUV Codecs (remove only)

Hotfix für Microsoft Visual Studio 2008 Remote Debugger Light (x64) - DEU (KB944899)

Hotfix for Microsoft .NET Framework 4 Client Profile (KB2461678)

Java 7 Update 11

Java Auto Updater

Malwarebytes Anti-Malware Version 1.70.0.1100

Mendeley Desktop 1.6

MicroCapture 2.0

Microsoft Office 2003 Web Components

Microsoft Office 2007 Primary Interop Assemblies

Microsoft Office 2007 Service Pack 3 (SP3)

Microsoft Office Access MUI (German) 2007

Microsoft Office Excel MUI (German) 2007

Microsoft Office InfoPath MUI (German) 2007

Microsoft Office OneNote 2007

Microsoft Office OneNote MUI (German) 2007

Microsoft Office Outlook MUI (German) 2007

Microsoft Office PowerPoint MUI (German) 2007

Microsoft Office PowerPoint Remote

Microsoft Office Professional Hybrid 2007

Microsoft Office Professional Plus 2007

Microsoft Office Proof (English) 2007

Microsoft Office Proof (French) 2007

Microsoft Office Proof (German) 2007

Microsoft Office Proof (Italian) 2007

Microsoft Office Proofing (German) 2007

Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)

Microsoft Office Publisher MUI (German) 2007

Microsoft Office Shared MUI (German) 2007

Microsoft Office Small Business Connectivity Components

Microsoft Office Standard 2007

Microsoft Office Suite Activation Assistant

Microsoft Office Word MUI (German) 2007

Microsoft SQL Server 2005

Microsoft SQL Server 2005 Express Edition (MSSMLBIZ)

Microsoft SQL Server Compact 3.5 SP1 English

Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053

Microsoft Visual C++ 2005 Redistributable

Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219

Microsoft Visual Studio 2008 Remote Debugger Light (x64) - DEU Service Pack 1 (KB945140)

Microsoft_VC80_ATL_x86

Microsoft_VC80_CRT_x86

Microsoft_VC80_MFC_x86

Microsoft_VC80_MFCLOC_x86

Microsoft_VC90_ATL_x86

Microsoft_VC90_CRT_x86

Microsoft_VC90_MFC_x86

Microsoft_VC90_MFCLOC_x86

Miranda IM 0.9.9

Mozilla Firefox 13.0.1 (x86 de)

Mozilla Maintenance Service

Mozilla Thunderbird 17.0 (x86 de)

MSVCRT

MSXML 4.0 SP2 (KB954430)

MSXML 4.0 SP2 (KB973688)

multiTree v0.45

Music Transfer

MusicStation

Neuro-Programmer 3.1

Norton Online Backup

OpenOffice.org 3.3

PC Inspector File Recovery

PDF Settings CS5

PDFCreator

Primo

PxMergeModule

QuarkXPress

QuickTime

Realtek High Definition Audio Driver

Roxio Central Audio

Roxio Central Copy

Roxio Central Core

Roxio Central Data

Roxio Central Tools

Roxio Easy Media Creator 10 LJ

Roxio Easy Media Creator Home

Runtime

Security Update for Microsoft .NET Framework 4 Client Profile (KB2160841)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2446708)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2633870)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368v2)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2656405)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2686827)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2729449)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2737019)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2742595)

Security Update for Microsoft .NET Framework 4 Client Profile DEU Language Pack (KB2478663)

Security Update for Microsoft .NET Framework 4 Client Profile DEU Language Pack (KB2518870)

Security Update for Microsoft Office 2007 suites (KB2596615) 32-Bit Edition 

Security Update for Microsoft Office 2007 suites (KB2596672) 32-Bit Edition 

Security Update for Microsoft Office 2007 suites (KB2596744) 32-Bit Edition 

Security Update for Microsoft Office 2007 suites (KB2596754) 32-Bit Edition 

Security Update for Microsoft Office 2007 suites (KB2596785) 32-Bit Edition

Security Update for Microsoft Office 2007 suites (KB2596792) 32-Bit Edition

Security Update for Microsoft Office 2007 suites (KB2596871) 32-Bit Edition

Security Update for Microsoft Office 2007 suites (KB2597969) 32-Bit Edition

Security Update for Microsoft Office 2007 suites (KB2687311) 32-Bit Edition 

Security Update for Microsoft Office 2007 suites (KB2687439) 32-Bit Edition 

Security Update for Microsoft Office 2007 suites (KB2687441) 32-Bit Edition 

Security Update for Microsoft Office 2007 suites (KB2687499) 32-Bit Edition 

Security Update for Microsoft Office 2007 suites (KB2760416) 32-Bit Edition 

Security Update for Microsoft Office Excel 2007 (KB2687307) 32-Bit Edition 

Security Update for Microsoft Office InfoPath 2007 (KB2687440) 32-Bit Edition 

Security Update for Microsoft Office PowerPoint 2007 (KB2596764) 32-Bit Edition

Security Update for Microsoft Office PowerPoint 2007 (KB2596912) 32-Bit Edition

Security Update for Microsoft Office Publisher 2007 (KB2596705) 32-Bit Edition

Security Update for Microsoft Office Word 2007 (KB2760421) 32-Bit Edition 

Setting Utility Series

Skype™ 5.10

Some PDF to HTML Converter 1.5

Sony Home Network Library

Sony Picture Utility

Spelling Dictionaries Support For Adobe Reader 9

Spotify

SQL Server System CLR Types

Tuned!

Uninstall 1.0.0.1

Universal Document Converter (Demo)

Unterstützung für VAIO-Präsentation

Unterstützungsdateien für das Microsoft SQL Server-Setup (Englisch)

Update für Microsoft Office Excel 2007 Help (KB963678)

Update für Microsoft Office Outlook 2007 Help (KB963677)

Update für Microsoft Office Powerpoint 2007 Help (KB963669)

Update für Microsoft Office Word 2007 Help (KB963665)

Update for 2007 Microsoft Office System (KB967642)

Update for Microsoft .NET Framework 4 Client Profile (KB2468871)

Update for Microsoft .NET Framework 4 Client Profile (KB2533523)

Update for Microsoft .NET Framework 4 Client Profile (KB2600217)

Update for Microsoft Office 2007 suites (KB2596660) 32-Bit Edition

Update for Microsoft Office 2007 suites (KB2596848) 32-Bit Edition

Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition

Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2760586) 32-Bit Edition

VAIO-Support für Übertragungen

VAIO Content Metadata Intelligent Analyzing Manager

VAIO Content Metadata Intelligent Network Service Manager

VAIO Content Metadata Manager Settings

VAIO Content Metadata XML Interface Library

VAIO Content Monitoring Settings

VAIO Control Center

VAIO Data Restore Tool

VAIO DVD Menu Data Basic

VAIO Energie Verwaltung

VAIO Entertainment Platform

VAIO Event Service

VAIO Marketing Tools

VAIO Media plus

VAIO Media plus Opening Movie

VAIO Mode Switch

VAIO Movie Story

VAIO Movie Story 1.5 Upgrade

VAIO Movie Story Template Data

VAIO Original Function Settings

VAIO Original Funktion Einstellungen

VAIO Premium Partners 1.00

VAIO Smart Network

VAIO SR screensaver

VAIO Update

VAIO Wallpaper Contents

VC80CRTRedist - 8.0.50727.4053

VLC media player 1.1.5

VU5x86

Windows Live-Uploadtool

Windows Live Anmelde-Assistent

Windows Live Call

Windows Live Communications Platform

Windows Live Essentials

Windows Live Messenger

wxDownload

Yahoo! Detect

Ich hab nur Avira Antivirus und die Windows-Firewall deaktiviert - hab ich was vergessen?