Trojaner-Board - PC Lüfter drehen im Leerlauf hoch und nach bewegen der Maus hängt sich der Anzeigetreiber auf

Hiho,

es gab keine Anweisung darüber, dass Dateien eingesandt werden müssen.

hier die 3 Logs:

ComboFix.txt:

Code:

ComboFix 13-06-02.02 - Prometheus_2 02.06.2013  19:45:10.2.2 - x64

Microsoft Windows 7 Ultimate   6.1.7601.1.1252.49.1031.18.4095.1872 [GMT 2:00]

ausgeführt von:: d:\users\Prometheus_2\Desktop\ComboFix.exe

Benutzte Befehlsschalter :: d:\users\Prometheus_2\Desktop\CFScript.txt

AV: Norton Internet Security *Disabled/Updated* {63DF5164-9100-186D-2187-8DC619EFD8BF}

FW: Norton Internet Security *Enabled* {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}

SP: Norton Internet Security *Disabled/Updated* {D8BEB080-B73A-17E3-1B37-B6B462689202}

SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

.

.

((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))

.

.

d:\users\Prometheus_2\AppData\Roaming\tor

d:\users\Prometheus_2\AppData\Roaming\tor\cached-certs

d:\users\Prometheus_2\AppData\Roaming\tor\cached-microdesc-consensus

d:\users\Prometheus_2\AppData\Roaming\tor\cached-microdescs

d:\users\Prometheus_2\AppData\Roaming\tor\cached-microdescs.new

d:\users\Prometheus_2\AppData\Roaming\tor\hidden_service\hostname

d:\users\Prometheus_2\AppData\Roaming\tor\hidden_service\private_key

d:\users\Prometheus_2\AppData\Roaming\tor\lock

d:\users\Prometheus_2\AppData\Roaming\tor\state

d:\users\Prometheus_2\AppData\Roaming\Vuyxe

d:\users\Prometheus_2\AppData\Roaming\Xiipqy

.

.

(((((((((((((((((((((((   Dateien erstellt von 2013-05-02 bis 2013-06-02  ))))))))))))))))))))))))))))))

.

.

2013-06-02 17:53 . 2013-06-02 17:53        --------        d-----w-        d:\users\UpdatusUser\AppData\Local\temp

2013-06-02 17:53 . 2013-06-02 17:53        --------        d-----w-        d:\users\Default\AppData\Local\temp

2013-06-02 09:14 . 2013-06-02 09:14        --------        d-----w-        C:\FRST

2013-05-31 05:15 . 2013-05-31 05:15        --------        d-----w-        c:\program files (x86)\Common Files\Java

2013-05-31 05:15 . 2013-05-31 05:15        --------        d-----w-        c:\program files (x86)\Java

2013-05-30 07:53 . 2013-05-30 07:53        --------        d-----w-        C:\Crash

2013-05-28 08:38 . 2013-05-28 08:38        --------        d-----w-        c:\windows\ERUNT

2013-05-24 07:39 . 2013-05-24 07:39        --------        d-----w-        d:\users\Prometheus_2\AppData\Roaming\Kalypso Media

2013-05-20 17:17 . 2013-05-20 17:24        --------        d-----w-        d:\users\Prometheus_2\AppData\Roaming\FreeCAD

2013-05-20 09:36 . 2013-05-20 09:38        --------        d-----w-        d:\users\Prometheus_2\AppData\Local\Darksiders2

2013-05-20 09:36 . 2013-05-20 09:36        --------        d-----w-        d:\users\Prometheus_2\AppData\Local\SKIDROW

2013-05-19 17:38 . 2013-05-19 17:38        --------        d-----w-        d:\users\Prometheus_2\AppData\Roaming\MAGIX

2013-05-19 17:11 . 2009-04-14 06:31        38784        ----a-w-        c:\windows\SysWow64\drivers\virtualdisk_u.sys

2013-05-19 17:11 . 2009-02-06 07:54        38272        ----a-w-        c:\windows\SysWow64\drivers\virtualdisk.sys

2013-05-19 17:11 . 2009-01-20 05:42        14208        ----a-w-        c:\windows\SysWow64\drivers\disksec.sys

2013-05-19 17:10 . 2003-04-18 14:29        82432        ----a-w-        c:\windows\SysWow64\msxml4r.dll

2013-05-19 17:10 . 2003-04-18 14:29        44544        ----a-w-        c:\windows\SysWow64\msxml4a.dll

2013-05-19 16:59 . 2007-04-27 08:43        120200        ----a-w-        c:\windows\SysWow64\DLLDEV32i.dll

2013-05-17 10:32 . 2013-05-17 10:32        --------        d-----w-        d:\users\Prometheus_2\AppData\Local\4A Games

2013-05-17 08:26 . 2013-05-17 08:26        --------        d-----w-        d:\users\Prometheus_2\AppData\Roaming\Utherverse

2013-05-17 06:55 . 2013-05-17 06:55        --------        d-----w-        c:\program files (x86)\Utherverse Digital Inc

2013-05-15 15:43 . 2013-05-15 15:43        --------        d-----w-        c:\programdata\Corel

2013-05-15 15:41 . 2013-05-15 15:41        --------        d-----w-        c:\program files (x86)\Common Files\Corel

2013-05-15 05:25 . 2013-04-10 06:01        265064        ----a-w-        c:\windows\system32\drivers\dxgmms1.sys

2013-05-15 05:25 . 2013-04-10 06:01        983400        ----a-w-        c:\windows\system32\drivers\dxgkrnl.sys

2013-05-15 05:25 . 2011-02-03 11:25        144384        ----a-w-        c:\windows\system32\cdd.dll

2013-05-15 05:24 . 2013-02-27 05:52        14172672        ----a-w-        c:\windows\system32\shell32.dll

2013-05-15 05:24 . 2013-02-27 06:02        111448        ----a-w-        c:\windows\system32\consent.exe

2013-05-15 05:24 . 2013-02-27 05:52        197120        ----a-w-        c:\windows\system32\shdocvw.dll

2013-05-15 05:24 . 2013-02-27 05:48        1930752        ----a-w-        c:\windows\system32\authui.dll

2013-05-15 05:24 . 2013-02-27 05:47        70144        ----a-w-        c:\windows\system32\appinfo.dll

2013-05-15 05:24 . 2013-02-27 04:49        1796096        ----a-w-        c:\windows\SysWow64\authui.dll

2013-05-15 05:24 . 2013-03-19 05:53        48640        ----a-w-        c:\windows\system32\wwanprotdim.dll

2013-05-15 05:24 . 2013-03-19 05:53        230400        ----a-w-        c:\windows\system32\wwansvc.dll

2013-05-15 05:24 . 2013-04-10 03:30        3153920        ----a-w-        c:\windows\system32\win32k.sys

2013-05-14 21:12 . 2013-05-14 21:12        --------        d-----w-        c:\program files (x86)\MSXML 4.0

2013-05-14 17:24 . 2013-05-14 17:24        --------        d-----w-        d:\users\Prometheus_2\AppData\Local\libimobiledevice

2013-05-14 15:19 . 2013-05-19 17:12        --------        d-----w-        c:\programdata\Magix

2013-05-14 15:11 . 2013-05-19 17:12        --------        d-----w-        c:\program files (x86)\Common Files\MAGIX Services

2013-05-14 11:30 . 2013-05-14 11:30        --------        d-----w-        d:\users\Prometheus_2\AppData\Local\ElevatedDiagnostics

2013-05-14 11:26 . 2013-05-15 05:58        --------        d-----w-        c:\program files\Bonjour

2013-05-14 11:26 . 2013-05-15 05:58        --------        d-----w-        c:\program files (x86)\Bonjour

2013-05-14 08:30 . 2013-05-14 08:30        --------        d-----w-        c:\program files (x86)\Common Files\Wise Installation Wizard

2013-05-13 16:48 . 2013-05-13 16:48        --------        d-----w-        d:\users\Prometheus_2\AppData\Roaming\Malwarebytes

2013-05-13 16:48 . 2013-05-13 16:48        --------        d-----w-        c:\programdata\Malwarebytes

2013-05-13 16:46 . 2013-05-13 16:46        --------        d-----w-        d:\users\Prometheus_2\AppData\Local\SCE

2013-05-13 06:31 . 2013-05-13 06:31        --------        d-----w-        d:\users\Prometheus_2\AppData\Local\Targem

2013-05-13 05:59 . 2013-05-13 05:59        --------        d-----w-        C:\gravity

2013-05-12 06:14 . 2013-05-12 06:14        --------        d-----w-        d:\users\Prometheus_2\AppData\Local\BigHugeEngine

2013-05-12 06:14 . 2013-05-12 06:14        --------        d-----w-        c:\programdata\EA Core

2013-05-12 06:13 . 2013-05-12 06:14        --------        d-----w-        c:\programdata\EA Logs

2013-05-11 10:37 . 2013-05-11 10:37        209472        ----a-w-        c:\program files (x86)\Internet Explorer\Plugins\nppdf32.dll

2013-05-08 21:11 . 2013-02-25 22:32        1814304        ----a-w-        c:\windows\system32\nvdispco64.dll

2013-05-08 21:11 . 2013-02-25 22:32        7932256        ----a-w-        c:\windows\SysWow64\nvcuda.dll

2013-05-08 21:11 . 2012-05-15 10:48        364352        ----a-w-        c:\windows\system32\nvdecodemft.dll

2013-05-08 21:11 . 2012-05-15 10:48        301376        ----a-w-        c:\windows\SysWow64\nvdecodemft.dll

2013-05-08 21:11 . 2012-05-15 10:48        1468224        ----a-w-        c:\windows\system32\nvgenco64.dll

2013-05-08 21:11 . 2012-04-18 17:08        31040        ----a-w-        c:\windows\system32\nvhdap64.dll

2013-05-08 21:11 . 2012-04-18 17:08        188736        ----a-w-        c:\windows\system32\drivers\nvhda64v.sys

2013-05-07 06:17 . 2013-05-24 07:34        --------        d-----w-        c:\program files (x86)\Google

2013-05-07 06:17 . 2013-05-07 06:29        --------        d-----w-        d:\users\Prometheus_2\AppData\Local\Google

.

.

.

((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2013-05-15 20:44 . 2013-03-05 21:56        75016696        ----a-w-        c:\windows\system32\MRT.exe

2013-05-15 06:45 . 2013-03-07 22:34        71048        ----a-w-        c:\windows\SysWow64\FlashPlayerCPLApp.cpl

2013-05-15 06:45 . 2013-03-07 22:34        692104        ----a-w-        c:\windows\SysWow64\FlashPlayerApp.exe

2013-04-21 07:04 . 2013-04-21 07:04        163504        ----a-w-        c:\programdata\Microsoft\Windows\Sqm\Manifest\Sqm10144.bin

2013-04-13 05:49 . 2013-05-15 05:25        135168        ----a-w-        c:\windows\apppatch\AppPatch64\AcXtrnal.dll

2013-04-13 05:49 . 2013-05-15 05:25        350208        ----a-w-        c:\windows\apppatch\AppPatch64\AcLayers.dll

2013-04-13 05:49 . 2013-05-15 05:25        308736        ----a-w-        c:\windows\apppatch\AppPatch64\AcGenral.dll

2013-04-13 05:49 . 2013-05-15 05:25        111104        ----a-w-        c:\windows\apppatch\AppPatch64\acspecfc.dll

2013-04-13 04:45 . 2013-05-15 05:25        474624        ----a-w-        c:\windows\apppatch\AcSpecfc.dll

2013-04-13 04:45 . 2013-05-15 05:25        2176512        ----a-w-        c:\windows\apppatch\AcGenral.dll

2013-04-12 14:45 . 2013-04-24 05:42        1656680        ----a-w-        c:\windows\system32\drivers\ntfs.sys

2013-04-04 15:16 . 2013-03-21 11:30        281688        ----a-w-        c:\windows\SysWow64\PnkBstrB.xtr

2013-04-04 15:16 . 2013-03-07 23:03        281688        ----a-w-        c:\windows\SysWow64\PnkBstrB.exe

2013-04-01 10:28 . 2009-08-18 10:49        564632        ----a-w-        c:\programdata\Microsoft\IdentityCRL\production\wlidui.dll

2013-04-01 10:28 . 2009-08-18 09:24        19696        ----a-w-        c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll

2013-03-31 15:44 . 2013-03-07 23:03        281872        ----a-w-        c:\windows\SysWow64\PnkBstrB.ex0

2013-03-31 15:44 . 2013-03-07 23:02        76888        ----a-w-        c:\windows\SysWow64\PnkBstrA.exe

2013-03-25 18:36 . 2013-03-25 18:36        283200        ----a-w-        c:\windows\system32\drivers\dtsoftbus01.sys

2013-03-21 16:00 . 2013-03-21 16:00        466456        ----a-w-        c:\windows\system32\wrap_oal.dll

2013-03-21 16:00 . 2013-03-21 16:00        444952        ----a-w-        c:\windows\SysWow64\wrap_oal.dll

2013-03-21 16:00 . 2013-03-21 16:00        122904        ----a-w-        c:\windows\system32\OpenAL32.dll

2013-03-21 16:00 . 2013-03-21 16:00        109080        ----a-w-        c:\windows\SysWow64\OpenAL32.dll

2013-03-21 15:29 . 2013-03-21 15:29        47016        ----a-w-        c:\windows\system32\AcSignIcon.dll

2013-03-21 15:29 . 2013-03-21 15:29        435624        ----a-w-        c:\windows\system32\AcSignOpt.exe

2013-03-21 15:29 . 2013-03-21 15:29        35240        ----a-w-        c:\windows\system32\AcSignExt.dll

2013-03-21 15:29 . 2013-03-21 15:29        94208        ----a-w-        c:\windows\SysWow64\msstkprp.dll

2013-03-21 15:29 . 2013-03-21 15:29        608448        ----a-w-        c:\windows\SysWow64\comctl32.ocx

2013-03-21 15:29 . 2013-03-21 15:29        140488        ----a-w-        c:\windows\SysWow64\comdlg32.ocx

2013-03-21 15:28 . 2013-03-21 15:28        2312616        ----a-w-        c:\windows\system32\plotman.cpl

2013-03-21 15:28 . 2013-03-21 15:28        16808        ----a-w-        c:\windows\system32\AcSignExtRes.dll

2013-03-20 18:51 . 2013-03-20 18:51        114688        ----a-w-        c:\windows\system32\keymgr64.exe

2013-03-19 06:04 . 2013-04-10 22:53        5550424        ----a-w-        c:\windows\system32\ntoskrnl.exe

2013-03-19 05:46 . 2013-04-10 22:53        43520        ----a-w-        c:\windows\system32\csrsrv.dll

2013-03-19 05:04 . 2013-04-10 22:53        3968856        ----a-w-        c:\windows\SysWow64\ntkrnlpa.exe

2013-03-19 05:04 . 2013-04-10 22:53        3913560        ----a-w-        c:\windows\SysWow64\ntoskrnl.exe

2013-03-19 04:47 . 2013-04-10 22:53        6656        ----a-w-        c:\windows\SysWow64\apisetschema.dll

2013-03-19 03:06 . 2013-04-10 22:53        112640        ----a-w-        c:\windows\system32\smss.exe

2013-03-15 05:53 . 2013-04-28 07:29        1807136        ----a-w-        c:\windows\system32\nvdispco6431422.dll

2013-03-15 05:53 . 2013-04-28 07:29        1510176        ----a-w-        c:\windows\system32\nvdispgenco6431422.dll

2013-03-07 20:47 . 2013-03-07 20:47        177312        ----a-w-        c:\windows\system32\drivers\SYMEVENT64x86.SYS

2013-03-06 20:43 . 2013-03-06 20:43        905728        ----a-w-        c:\windows\system32\mshtmlmedia.dll

2013-03-06 20:43 . 2013-03-06 20:43        81408        ----a-w-        c:\windows\system32\icardie.dll

2013-03-06 20:43 . 2013-03-06 20:43        762368        ----a-w-        c:\windows\system32\ieapfltr.dll

2013-03-06 20:43 . 2013-03-06 20:43        73728        ----a-w-        c:\windows\SysWow64\SetIEInstalledDate.exe

2013-03-06 20:43 . 2013-03-06 20:43        719360        ----a-w-        c:\windows\SysWow64\mshtmlmedia.dll

2013-03-06 20:43 . 2013-03-06 20:43        61952        ----a-w-        c:\windows\SysWow64\tdc.ocx

2013-03-06 20:43 . 2013-03-06 20:43        523264        ----a-w-        c:\windows\SysWow64\vbscript.dll

2013-03-06 20:43 . 2013-03-06 20:43        48640        ----a-w-        c:\windows\SysWow64\mshtmler.dll

2013-03-06 20:43 . 2013-03-06 20:43        452096        ----a-w-        c:\windows\system32\dxtmsft.dll

2013-03-06 20:43 . 2013-03-06 20:43        441856        ----a-w-        c:\windows\system32\html.iec

2013-03-06 20:43 . 2013-03-06 20:43        38400        ----a-w-        c:\windows\SysWow64\imgutil.dll

2013-03-06 20:43 . 2013-03-06 20:43        361984        ----a-w-        c:\windows\SysWow64\html.iec

2013-03-06 20:43 . 2013-03-06 20:43        281600        ----a-w-        c:\windows\system32\dxtrans.dll

2013-03-06 20:43 . 2013-03-06 20:43        27648        ----a-w-        c:\windows\system32\licmgr10.dll

2013-03-06 20:43 . 2013-03-06 20:43        270848        ----a-w-        c:\windows\system32\iedkcs32.dll

2013-03-06 20:43 . 2013-03-06 20:43        247296        ----a-w-        c:\windows\system32\webcheck.dll

2013-03-06 20:43 . 2013-03-06 20:43        235008        ----a-w-        c:\windows\system32\url.dll

2013-03-06 20:43 . 2013-03-06 20:43        23040        ----a-w-        c:\windows\SysWow64\licmgr10.dll

2013-03-06 20:43 . 2013-03-06 20:43        226304        ----a-w-        c:\windows\system32\elshyph.dll

2013-03-06 20:43 . 2013-03-06 20:43        216064        ----a-w-        c:\windows\system32\msls31.dll

2013-03-06 20:43 . 2013-03-06 20:43        197120        ----a-w-        c:\windows\system32\msrating.dll

2013-03-06 20:43 . 2013-03-06 20:43        185344        ----a-w-        c:\windows\SysWow64\elshyph.dll

2013-03-06 20:43 . 2013-03-06 20:43        158720        ----a-w-        c:\windows\SysWow64\msls31.dll

2013-03-06 20:43 . 2013-03-06 20:43        1509376        ----a-w-        c:\windows\system32\inetcpl.cpl

2013-03-06 20:43 . 2013-03-06 20:43        150528        ----a-w-        c:\windows\SysWow64\iexpress.exe

2013-03-06 20:43 . 2013-03-06 20:43        1441280        ----a-w-        c:\windows\SysWow64\inetcpl.cpl

2013-03-06 20:43 . 2013-03-06 20:43        1400416        ----a-w-        c:\windows\system32\ieapfltr.dat

2013-03-06 20:43 . 2013-03-06 20:43        138752        ----a-w-        c:\windows\SysWow64\wextract.exe

2013-03-06 20:43 . 2013-03-06 20:43        137216        ----a-w-        c:\windows\SysWow64\ieUnatt.exe

2013-03-06 20:43 . 2013-03-06 20:43        12800        ----a-w-        c:\windows\SysWow64\mshta.exe

2013-03-06 20:43 . 2013-03-06 20:43        110592        ----a-w-        c:\windows\SysWow64\IEAdvpack.dll

2013-03-06 20:43 . 2013-03-06 20:43        1054720        ----a-w-        c:\windows\system32\MsSpellCheckingFacility.exe

2013-03-06 20:43 . 2013-03-06 20:43        97280        ----a-w-        c:\windows\system32\mshtmled.dll

2013-03-06 20:43 . 2013-03-06 20:43        92160        ----a-w-        c:\windows\system32\SetIEInstalledDate.exe

2013-03-06 20:43 . 2013-03-06 20:43        77312        ----a-w-        c:\windows\system32\tdc.ocx

2013-03-06 20:43 . 2013-03-06 20:43        62976        ----a-w-        c:\windows\system32\pngfilt.dll

2013-03-06 20:43 . 2013-03-06 20:43        599552        ----a-w-        c:\windows\system32\vbscript.dll

2013-03-06 20:43 . 2013-03-06 20:43        52224        ----a-w-        c:\windows\system32\msfeedsbs.dll

2013-03-06 20:43 . 2013-03-06 20:43        51200        ----a-w-        c:\windows\system32\imgutil.dll

2013-03-06 20:43 . 2013-03-06 20:43        48640        ----a-w-        c:\windows\system32\mshtmler.dll

2013-03-06 20:43 . 2013-03-06 20:43        173568        ----a-w-        c:\windows\system32\ieUnatt.exe

2013-03-06 20:43 . 2013-03-06 20:43        167424        ----a-w-        c:\windows\system32\iexpress.exe

2013-03-06 20:43 . 2013-03-06 20:43        149504        ----a-w-        c:\windows\system32\occache.dll

2013-03-06 20:43 . 2013-03-06 20:43        144896        ----a-w-        c:\windows\system32\wextract.exe

2013-03-06 20:43 . 2013-03-06 20:43        13824        ----a-w-        c:\windows\system32\mshta.exe

2013-03-06 20:43 . 2013-03-06 20:43        136192        ----a-w-        c:\windows\system32\iepeers.dll

2013-03-06 20:43 . 2013-03-06 20:43        135680        ----a-w-        c:\windows\system32\IEAdvpack.dll

2013-03-06 20:43 . 2013-03-06 20:43        12800        ----a-w-        c:\windows\system32\msfeedssync.exe

2013-03-06 20:43 . 2013-03-06 20:43        102912        ----a-w-        c:\windows\system32\inseng.dll

2013-03-06 20:42 . 2013-03-06 20:42        68608        ----a-w-        c:\windows\system32\taskhost.exe

2013-03-06 20:42 . 2013-03-06 20:42        9728        ---ha-w-        c:\windows\SysWow64\api-ms-win-downlevel-shlwapi-l1-1-0.dll

2013-03-06 20:42 . 2013-03-06 20:42        9728        ---ha-w-        c:\windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll

2013-03-06 20:42 . 2013-03-06 20:42        648192        ----a-w-        c:\windows\system32\d3d10level9.dll

2013-03-06 20:42 . 2013-03-06 20:42        604160        ----a-w-        c:\windows\SysWow64\d3d10level9.dll

2013-03-06 20:42 . 2013-03-06 20:42        5632        ---ha-w-        c:\windows\SysWow64\api-ms-win-downlevel-shlwapi-l2-1-0.dll

2013-03-06 20:42 . 2013-03-06 20:42        5632        ---ha-w-        c:\windows\SysWow64\api-ms-win-downlevel-ole32-l1-1-0.dll

2013-03-06 20:42 . 2013-03-06 20:42        5632        ---ha-w-        c:\windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll

2013-03-06 20:42 . 2013-03-06 20:42        5632        ---ha-w-        c:\windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll

2013-03-06 20:42 . 2013-03-06 20:42        522752        ----a-w-        c:\windows\system32\XpsGdiConverter.dll

2013-03-06 20:42 . 2013-03-06 20:42        465920        ----a-w-        c:\windows\system32\WMPhoto.dll

.

.

((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))

.

.

*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 

REGEDIT4

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro1 (ErrorConflict)]

@="{8BA85C75-763B-4103-94EB-9470F12FE0F7}"

[HKEY_CLASSES_ROOT\CLSID\{8BA85C75-763B-4103-94EB-9470F12FE0F7}]

2013-03-19 19:31        1724600        ----a-w-        c:\progra~2\MICROS~1\Office15\GROOVEEX.DLL

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro2 (SyncInProgress)]

@="{CD55129A-B1A1-438E-A425-CEBC7DC684EE}"

[HKEY_CLASSES_ROOT\CLSID\{CD55129A-B1A1-438E-A425-CEBC7DC684EE}]

2013-03-19 19:31        1724600        ----a-w-        c:\progra~2\MICROS~1\Office15\GROOVEEX.DLL

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro3 (InSync)]

@="{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}"

[HKEY_CLASSES_ROOT\CLSID\{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}]

2013-03-19 19:31        1724600        ----a-w-        c:\progra~2\MICROS~1\Office15\GROOVEEX.DLL

.

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"Steam"="d:\program files (x86)\Steam\steam.exe" [2013-05-03 1635752]

"DAEMON Tools Lite"="d:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2013-03-14 3672640]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]

"SteelSeries World of Warcraft Cataclysm MMO Gaming Mouse"="c:\program files (x86)\SteelSeries\World of Warcraft Cataclysm MMO Gaming Mouse\WoWMHID2.exe" [2011-08-18 1993216]

"TrueImageMonitor.exe"="d:\program files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe" [2012-08-23 6049096]

"AcronisTibMounterMonitor"="c:\program files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe" [2012-07-24 943856]

"M-Audio Taskbar Icon"="c:\windows\system32\MAFWTray.exe" [2009-07-29 252424]

"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2013-01-28 59720]

"QuickTime Task"="d:\program files (x86)\QuickTime\QTTask.exe" [2012-10-25 421888]

"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-04-04 958576]

"iTunesHelper"="d:\program files (x86)\iTunes\iTunesHelper.exe" [2013-02-20 152392]

.

d:\users\Prometheus_2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\

BUFFALO NAS Navigator2.lnk - c:\program files (x86)\BUFFALO\NASNAVI\NasNavi.exe [2012-9-24 1925211]

NAS Scheduler.lnk - c:\program files (x86)\BUFFALO\NASNAVI\nassche.exe [2009-5-15 206128]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"ConsentPromptBehaviorAdmin"= 5 (0x5)

"ConsentPromptBehaviorUser"= 3 (0x3)

"EnableUIADesktopToggle"= 0 (0x0)

"EnableLinkedConnections"= 1 (0x1)

"EnableSecureUIAPath"= 1 (0x1)

.

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]

BootExecute        REG_MULTI_SZ           autocheck autochk *\0\0sdnclean64.exe

.

R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]

R3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys [2012-11-06 96256]

R3 EagleX64;EagleX64;c:\windows\system32\drivers\EagleX64.sys [x]

R3 FirebirdServerMAGIXInstance;Firebird Server - MAGIX Instance;c:\program files (x86)\Common Files\MAGIX Services\Database_28a7da4\bin\fbserver.exe [2008-08-07 3276800]

R3 MAFW;Service for M-Audio FireWire;c:\windows\system32\DRIVERS\mafw.sys [2009-07-29 231944]

R3 ose64;Office 64 Source Engine;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2012-10-01 178824]

R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2010-11-20 20992]

R3 RRNetCap;RRNetCap Service;c:\windows\system32\DRIVERS\rrnetcap.sys [2011-09-09 37480]

R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys [x]

R3 tapoas;TAP-Win32 Adapter OAS;c:\windows\system32\DRIVERS\tapoas.sys [2012-07-15 30720]

R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]

R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys [x]

R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys [2012-12-13 54784]

R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys [x]

R4 mspaintd;Filtertreiber Peernetzwerkidentitäts-Manager Mouse;c:\windows\system32\keymgr64.exe [2013-03-20 114688]

R4 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2013-01-18 383264]

S0 fltsrv;Acronis Storage Filter Management;c:\windows\system32\DRIVERS\fltsrv.sys [2013-03-05 155272]

S0 sptd;sptd;c:\windows\\SystemRoot\System32\Drivers\sptd.sys [x]

S0 SymDS;Symantec Data Store;c:\windows\system32\drivers\NISx64\1403010.016\SYMDS64.SYS [2013-01-22 493656]

S0 SymEFA;Symantec Extended File Attributes;c:\windows\system32\drivers\NISx64\1403010.016\SYMEFA64.SYS [2013-01-31 1139800]

S0 tib_mounter;Acronis TIB Mounter;c:\windows\system32\DRIVERS\tib_mounter.sys [2013-03-05 1093256]

S0 vididr;Acronis Virtual Disk;c:\windows\system32\DRIVERS\vididr.sys [2013-03-05 228488]

S0 vidsflt;Acronis Disk Storage Filter;c:\windows\system32\DRIVERS\vidsflt.sys [2013-03-05 166024]

S1 BHDrvx64;BHDrvx64;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.3.0.36\Definitions\BASHDefs\20130515.001\BHDrvx64.sys [2013-04-12 1390680]

S1 ccSet_NIS;Norton Internet Security Settings Manager;c:\windows\system32\drivers\NISx64\1403010.016\ccSetx64.sys [2012-11-16 168096]

S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [2013-03-25 283200]

S1 IDSVia64;IDSVia64;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.3.0.36\Definitions\IPSDefs\20130531.001_b7\IDSvia64.sys [2013-03-06 513184]

S1 SymIRON;Symantec Iron Driver;c:\windows\system32\drivers\NISx64\1403010.016\Ironx64.SYS [2012-11-16 224416]

S1 SymNetS;Symantec Network Security WFP Driver;c:\windows\System32\Drivers\NISx64\1403010.016\SYMNETS.SYS [2013-01-31 432800]

S2 afcdpsrv;Acronis Nonstop Backup Service;c:\program files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe [2013-03-05 3729400]

S2 Fabs;FABS - Helping agent for MAGIX media database;c:\program files (x86)\Common Files\MAGIX Services\Database_28a7da4\bin\FABS.exe [2009-02-03 1155072]

S2 NasPmService;NAS PM Service;c:\program files (x86)\BUFFALO\NASNAVI\nassvc.exe [2012-11-13 251760]

S2 NIS;Norton Internet Security;c:\program files (x86)\Norton Internet Security\Engine\20.3.1.22\ccSvcHst.exe [2012-12-24 144520]

S2 syncagentsrv;Acronis Sync Agent Service;c:\program files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe [2012-08-18 7027752]

S3 afcdp;afcdp;c:\windows\system32\DRIVERS\afcdp.sys [2013-03-05 367200]

S3 RRNetCapMP;RRNetCapMP;c:\windows\system32\DRIVERS\rrnetcap.sys [2011-09-09 37480]

S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [2011-06-10 539240]

S3 SSMO3v2Filter;MMO3v2 Mouse;c:\windows\system32\drivers\MO3v2Driver.sys [2010-12-17 23040]

.

.

--- Andere Dienste/Treiber im Speicher ---

.

*Deregistered* - EraserUtilDrv11220

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]

2013-05-25 07:23        1165776        ----a-w-        c:\program files (x86)\Google\Chrome\Application\27.0.1453.94\Installer\chrmstp.exe

.

Inhalt des "geplante Tasks" Ordners

.

2013-06-02 c:\windows\Tasks\Adobe Flash Player Updater.job

- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-03-07 06:45]

.

2013-06-02 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job

- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-05-07 06:17]

.

2013-06-02 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-05-07 06:17]

.

.

--------- X64 Entries -----------

.

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro1 (ErrorConflict)]

@="{8BA85C75-763B-4103-94EB-9470F12FE0F7}"

[HKEY_CLASSES_ROOT\CLSID\{8BA85C75-763B-4103-94EB-9470F12FE0F7}]

2013-03-19 19:27        2328760        ----a-w-        d:\progra~2\MICROS~1\Office15\GROOVEEX.DLL

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro2 (SyncInProgress)]

@="{CD55129A-B1A1-438E-A425-CEBC7DC684EE}"

[HKEY_CLASSES_ROOT\CLSID\{CD55129A-B1A1-438E-A425-CEBC7DC684EE}]

2013-03-19 19:27        2328760        ----a-w-        d:\progra~2\MICROS~1\Office15\GROOVEEX.DLL

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro3 (InSync)]

@="{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}"

[HKEY_CLASSES_ROOT\CLSID\{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}]

2013-03-19 19:27        2328760        ----a-w-        d:\progra~2\MICROS~1\Office15\GROOVEEX.DLL

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\AcronisSyncError]

@="{934BC6C0-FEC2-4df5-A100-961DE2C8A0ED}"

[HKEY_CLASSES_ROOT\CLSID\{934BC6C0-FEC2-4df5-A100-961DE2C8A0ED}]

2012-08-23 02:51        2741024        ----a-w-        d:\program files (x86)\Acronis\TrueImageHome\tishell64.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\AcronisSyncInProgress]

@="{00F848DC-B1D4-4892-9C25-CAADC86A215D}"

[HKEY_CLASSES_ROOT\CLSID\{00F848DC-B1D4-4892-9C25-CAADC86A215D}]

2012-08-23 02:51        2741024        ----a-w-        d:\program files (x86)\Acronis\TrueImageHome\tishell64.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\AcronisSyncOk]

@="{71573297-552E-46fc-BE3D-3DFAF88D47B7}"

[HKEY_CLASSES_ROOT\CLSID\{71573297-552E-46fc-BE3D-3DFAF88D47B7}]

2012-08-23 02:51        2741024        ----a-w-        d:\program files (x86)\Acronis\TrueImageHome\tishell64.dll

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"CmPCIaudio"="c:\windows\Syswow64\CMICNFG3.dll" [2009-09-07 8151040]

"XboxStat"="c:\program files\Microsoft Xbox 360 Accessories\XboxStat.exe" [2009-09-30 825184]

"Acronis Scheduler2 Service"="c:\program files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe" [2012-08-03 403888]

"CNAP2 Launcher"="c:\windows\system32\spool\DRIVERS\x64\3\CNAP2LAK.EXE" [2010-10-14 226784]

.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost  - LocalService

FontCache

.

------- Zusätzlicher Suchlauf -------

.

uLocal Page = c:\windows\system32\blank.htm

uStart Page = hxxp://www.google.de/

uInternet Settings,ProxyOverride = <local>;*.local

uSearchAssistant = hxxp://www.google.com

Trusted Zone: clonewarsadventures.com

Trusted Zone: freerealms.com

Trusted Zone: soe.com

Trusted Zone: sony.com

TCP: DhcpNameServer = 217.0.43.33 217.0.43.17

Filter: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - c:\program files (x86)\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL

FF - ProfilePath - d:\users\Prometheus_2\AppData\Roaming\Mozilla\Firefox\Profiles\i895j0p6.default\

FF - prefs.js: browser.startup.homepage - hxxp://www.google.de/

FF - ExtSQL: 2013-04-10 09:48; feca4b87-3be4-43da-a1b1-137c24220968@jetpack; d:\users\Prometheus_2\AppData\Roaming\Mozilla\Firefox\Profiles\i895j0p6.default\extensions\feca4b87-3be4-43da-a1b1-137c24220968@jetpack.xpi

FF - ExtSQL: 2013-04-10 10:07; ich@maltegoetz.de; d:\users\Prometheus_2\AppData\Roaming\Mozilla\Firefox\Profiles\i895j0p6.default\extensions\ich@maltegoetz.de

FF - ExtSQL: 2013-04-11 11:16; anttoolbar@ant.com; d:\users\Prometheus_2\AppData\Roaming\Mozilla\Firefox\Profiles\i895j0p6.default\extensions\anttoolbar@ant.com

.

.

[HKEY_LOCAL_MACHINE\system\ControlSet001\services\NIS]

"ImagePath"="\"c:\program files (x86)\Norton Internet Security\Engine\20.3.1.22\ccSvcHst.exe\" /s \"NIS\" /m \"c:\program files (x86)\Norton Internet Security\Engine\20.3.1.22\diMaster.dll\" /prefetch:1"

.

--------------------- Gesperrte Registrierungsschluessel ---------------------

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]

@Denied: (A 2) (Everyone)

@="FlashBroker"

"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_7_700_202_ActiveX.exe,-101"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]

"Enabled"=dword:00000001

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]

@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_7_700_202_ActiveX.exe"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

.

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]

@Denied: (A 2) (Everyone)

@="IFlashBroker5"

.

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]

@="{00020424-0000-0000-C000-000000000046}"

.

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

"Version"="1.0"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]

@Denied: (A 2) (Everyone)

@="FlashBroker"

"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_7_700_202_ActiveX.exe,-101"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]

"Enabled"=dword:00000001

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_7_700_202_ActiveX.exe"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Shockwave Flash Object"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_202.ocx"

"ThreadingModel"="Apartment"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]

@="0"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]

@="ShockwaveFlash.ShockwaveFlash.11"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_202.ocx, 1"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="ShockwaveFlash.ShockwaveFlash"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Macromedia Flash Factory Object"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_202.ocx"

"ThreadingModel"="Apartment"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]

@="FlashFactory.FlashFactory.1"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_202.ocx, 1"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="FlashFactory.FlashFactory"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]

@Denied: (A 2) (Everyone)

@="IFlashBroker5"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]

@="{00020424-0000-0000-C000-000000000046}"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

"Version"="1.0"

.

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]

@Denied: (Full) (Everyone)

.

Zeit der Fertigstellung: 2013-06-02  20:10:51

ComboFix-quarantined-files.txt  2013-06-02 18:10

ComboFix2.txt  2013-06-02 17:01

.

Vor Suchlauf: 15 Verzeichnis(se), 23.207.960.576 Bytes frei

Nach Suchlauf: 16 Verzeichnis(se), 23.132.110.848 Bytes frei

.

- - End Of File - - 62FA04524AED2197EFF4F2F6331213CA

AdwCleaner[S1]:

Code:

# AdwCleaner v2.301 - Datei am 30/05/2013 um 21:00:57 erstellt

# Aktualisiert am 16/05/2013 von Xplode

# Betriebssystem : Windows 7 Ultimate Service Pack 1 (64 bits)

# Benutzer : Prometheus_2 - PROMETHEUS-PC

# Bootmodus : Normal

# Ausgeführt unter : D:\Users\Prometheus_2\Downloads\adwcleaner.exe

# Option [Löschen]
 
 

**** [Dienste] ****
 
 

***** [Dateien / Ordner] *****
 
 

***** [Registrierungsdatenbank] *****
 
 

***** [Internet Browser] *****
 

-\\ Internet Explorer v10.0.9200.16576
 

[OK] Die Registrierungsdatenbank ist sauber.
 

-\\ Mozilla Firefox v19.0.2 (de)
 

Datei : d:\Users\Prometheus_2\AppData\Roaming\Mozilla\Firefox\Profiles\i895j0p6.default\prefs.js
 

d:\Users\Prometheus_2\AppData\Roaming\Mozilla\Firefox\Profiles\i895j0p6.default\user.js ... Gelöscht !
 

[OK] Die Datei ist sauber.
 

-\\ Google Chrome v27.0.1453.94
 

Datei : d:\Users\Prometheus_2\AppData\Local\Google\Chrome\User Data\Default\Preferences
 

Gelöscht [l.2514] : homepage = "hxxp://feed.snap.do/?publisher=SnapdoOCYB&dpid=SnapdoOCYB&co=DE&userid=70ef8486-1c5e[...]
 

*************************
 

AdwCleaner[S1].txt - [1107 octets] - [30/05/2013 21:00:57]
 

########## EOF - d:\AdwCleaner[S1].txt - [1167 octets] ##########

AdwCleaner[S2]:

Code:

# AdwCleaner v2.301 - Datei am 02/06/2013 um 20:34:40 erstellt

# Aktualisiert am 16/05/2013 von Xplode

# Betriebssystem : Windows 7 Ultimate Service Pack 1 (64 bits)

# Benutzer : Prometheus_2 - PROMETHEUS-PC

# Bootmodus : Normal

# Ausgeführt unter : D:\Users\Prometheus_2\Desktop\adwcleaner.exe

# Option [Löschen]
 
 

**** [Dienste] ****
 
 

***** [Dateien / Ordner] *****
 
 

***** [Registrierungsdatenbank] *****
 
 

***** [Internet Browser] *****
 

-\\ Internet Explorer v10.0.9200.16576
 

[OK] Die Registrierungsdatenbank ist sauber.
 

-\\ Mozilla Firefox v19.0.2 (de)
 

Datei : d:\Users\Prometheus_2\AppData\Roaming\Mozilla\Firefox\Profiles\i895j0p6.default\prefs.js
 

[OK] Die Datei ist sauber.
 

-\\ Google Chrome v27.0.1453.94
 

Datei : d:\Users\Prometheus_2\AppData\Local\Google\Chrome\User Data\Default\Preferences
 

Gelöscht [l.2517] : homepage = "hxxp://feed.snap.do/?publisher=SnapdoOCYB&dpid=SnapdoOCYB&co=DE&userid=70ef8486-1c5e[...]
 

*************************
 

AdwCleaner[S1].txt - [1236 octets] - [30/05/2013 21:00:57]

AdwCleaner[S2].txt - [1059 octets] - [02/06/2013 20:34:40]
 

########## EOF - d:\AdwCleaner[S2].txt - [1119 octets] ##########

JRT:

Code:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Junkware Removal Tool (JRT) by Thisisu

Version: 4.9.4 (05.06.2013:1)

OS: Windows 7 Ultimate x64

Ran by Prometheus_2 on 02.06.2013 at 20:40:20,16

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
 
 
 

~~~ Services
 
 
 

~~~ Registry Values
 
 
 

~~~ Registry Keys
 
 
 

~~~ Files
 
 
 

~~~ Folders
 
 
 

~~~ Event Viewer Logs were cleared
 
 
 
 
 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Scan was completed on 02.06.2013 at 20:44:35,66

End of JRT log

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~