C:\Program Files\Internet Explorer\1906\8AE.exe und bds/gbot.gatk Browser leitet auf andere Seiten

ComboFix 11-11-03.01 - Veronika 03.11.2011  11:18:25.1.2 - x86
Microsoft Windows 7 Ultimate   6.1.7600.0.1252.49.1031.18.959.512 [GMT -4:00]
ausgeführt von:: c:\users\Veronika\Downloads\ComboFix.exe
AV: AntiVir Desktop *Enabled/Updated* {090F9C29-64CE-6C6F-379C-5901B49A85B7}
SP: AntiVir Desktop *Enabled/Updated* {B26E7DCD-42F4-63E1-0D2C-6273CF1DCF0A}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 * Neuer Wiederherstellungspunkt wurde erstellt
.
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files\LP
c:\windows\PFRO.log
.
.
(((((((((((((((((((((((   Dateien erstellt von 2011-10-03 bis 2011-11-03  ))))))))))))))))))))))))))))))
.
.
2011-11-03 15:49 . 2011-11-03 15:51	--------	d-----w-	c:\users\Veronika\AppData\Local\temp
2011-11-03 15:49 . 2011-11-03 15:49	--------	d-----w-	c:\users\Default\AppData\Local\temp
2011-11-01 21:49 . 2011-11-01 21:49	--------	d-----w-	C:\_OTL
2011-11-01 03:33 . 2011-11-03 04:05	--------	d-----w-	c:\users\Veronika\AppData\Roaming\skypePM
2011-11-01 03:32 . 2011-11-01 03:32	--------	d-----w-	c:\program files\Common Files\Skype
2011-11-01 03:32 . 2011-11-01 03:32	--------	d-----r-	c:\program files\Skype
2011-10-31 19:32 . 2011-10-31 19:32	--------	d-----w-	c:\program files\ESET
2011-10-31 15:45 . 2011-10-31 15:45	284672	----a-w-	c:\users\Veronika\AppData\Roaming\Microsoft\DB86\8AE.exe
2011-10-31 14:55 . 2011-10-31 14:55	--------	d-----w-	c:\users\Veronika\AppData\Roaming\Malwarebytes
2011-10-31 14:55 . 2011-10-31 14:55	--------	d-----w-	c:\programdata\Malwarebytes
2011-10-31 14:55 . 2011-10-31 14:55	--------	d-----w-	c:\program files\Malwarebytes' Anti-Malware
2011-10-31 14:55 . 2011-08-31 21:00	22216	----a-w-	c:\windows\system32\drivers\mbam.sys
2011-10-31 01:32 . 2011-10-31 01:32	--------	d-----w-	c:\program files\7-Zip
2011-10-30 18:58 . 2011-11-03 04:11	--------	d-----w-	c:\users\Veronika\AppData\Roaming\Skype
2011-10-30 18:45 . 2011-10-30 18:45	115	----a-w-	c:\users\Veronika\AppData\Roaming\Microsoft\3D76\bl75192_64.bat
2011-10-29 19:20 . 2011-10-29 19:20	--------	d-----w-	c:\program files\284C2
2011-10-19 00:58 . 2011-10-19 00:58	--------	d-----w-	c:\users\Veronika\AppData\Roaming\TuneUp Software
2011-10-19 00:58 . 2011-11-01 19:57	--------	d-----w-	c:\programdata\TuneUp Software
2011-10-16 22:31 . 2011-09-21 13:00	7269712	----a-w-	c:\programdata\Microsoft\Windows Defender\Definition Updates\{E0CE8B4B-1403-4627-8640-DA8184301D8C}\mpengine.dll
2011-10-13 19:16 . 2011-10-13 19:16	--------	d-----w-	c:\program files\iPod
2011-10-13 19:12 . 2011-10-13 19:12	--------	d-----w-	c:\program files\Bonjour
2011-10-11 16:38 . 2011-10-11 16:38	--------	d-----w-	C:\NVIDIA
2011-10-11 16:17 . 2011-10-11 16:17	--------	d-----w-	c:\program files\Common Files\Java
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-09-26 21:07 . 2011-05-23 19:50	404640	----a-w-	c:\windows\system32\FlashPlayerCPLApp.cpl
2011-08-31 03:05 . 2011-08-31 03:05	83816	----a-w-	c:\windows\system32\dns-sd.exe
2011-08-31 03:05 . 2011-08-31 03:05	73064	----a-w-	c:\windows\system32\dnssd.dll
2011-10-02 00:31 . 2011-05-10 15:01	134104	----a-w-	c:\program files\mozilla firefox\components\browsercomps.dll
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2008-03-28 1045800]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2009-03-06 13605408]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2009-03-06 92704]
"AVMWlanClient"="c:\program files\avmwlanstick\FRITZWLANMini.exe" [2006-04-20 323584]
"Malwarebytes' Anti-Malware (reboot)"="c:\program files\Malwarebytes' Anti-Malware\mbam.exe" [2011-08-31 1047208]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"HideSCAHealth"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv
.
[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^VPN Client.lnk]
path=c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\VPN Client.lnk
backup=c:\windows\pss\VPN Client.lnk.CommonStartup
backupExtension=.CommonStartup
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
2010-06-09 08:06	976832	----a-w-	c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
2010-06-20 02:04	35760	----a-w-	c:\program files\Adobe\Reader 9.0\Reader\reader_sl.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\APSDaemon]
2011-09-27 11:22	59240	----a-w-	c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\avgnt]
2009-03-02 11:08	209153	----a-w-	c:\program files\Avira\AntiVir Desktop\avgnt.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DivXUpdate]
2010-09-16 20:04	1164584	----a-w-	c:\program files\DivX\DivX Update\DivXUpdate.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
2011-10-09 22:06	421736	----a-w-	c:\program files\iTunes\iTunesHelper.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PAC7302_Monitor]
2006-11-03 15:01	319488	----a-w-	c:\windows\PixArt\PAC7302\Monitor.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
2011-07-05 22:36	421888	----a-w-	c:\program files\QuickTime\QTTask.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
2010-09-02 19:15	13351304	----a-r-	c:\program files\Skype\Phone\Skype.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe"
.
R2 dtpd;ShrewSoft DNS Proxy Daemon;c:\program files\ShrewSoft\VPN Client\dtpd.exe [2009-11-15 49152]
R2 gupdate;Google Update Service (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2011-08-23 136176]
R2 iked;ShrewSoft IKE Daemon;c:\program files\ShrewSoft\VPN Client\iked.exe [2009-11-15 716800]
R2 ipsecd;ShrewSoft IPSEC Daemon;c:\program files\ShrewSoft\VPN Client\ipsecd.exe [2009-11-15 536576]
R3 FWLANUSB;AVM FRITZ!WLAN;c:\windows\system32\DRIVERS\fwlanusb.sys [2006-04-06 264704]
R3 gupdatem;Google Update-Dienst (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [2011-08-23 136176]
R3 vnet;Shrew Soft Virtual Adapter;c:\windows\system32\DRIVERS\virtualnet.sys [2009-11-19 9728]
S1 vflt;Shrew Soft Lightweight Filter;c:\windows\system32\DRIVERS\vfilter.sys [2009-11-19 17408]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [2009-07-13 48128]
S2 AntiVirSchedulerService;Avira AntiVir Planer;c:\program files\Avira\AntiVir Desktop\sched.exe [2009-05-13 108289]
S3 SrvHsfHDA;SrvHsfHDA;c:\windows\system32\DRIVERS\VSTAZL3.SYS [2009-07-13 207360]
S3 SrvHsfV92;SrvHsfV92;c:\windows\system32\DRIVERS\VSTDPV3.SYS [2009-07-13 980992]
S3 SrvHsfWinac;SrvHsfWinac;c:\windows\system32\DRIVERS\VSTCNXT3.SYS [2009-07-13 661504]
.
.
Inhalt des "geplante Tasks" Ordners
.
2011-11-03 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2011-08-23 22:01]
.
2011-11-03 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2011-08-23 22:01]
.
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = 
mStart Page = 
TCP: DhcpNameServer = 192.168.1.1
TCP: Interfaces\{E07B5056-C63D-418E-8DCB-6E35EB86BEB9}: NameServer = 134.2.200.1,134.2.200.2
FF - ProfilePath - c:\users\Veronika\AppData\Roaming\Mozilla\Firefox\Profiles\ccsfaaq3.default\
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
MSConfigStartUp-8AE - c:\program files\Internet Explorer\1906\8AE.exe
MSConfigStartUp-Microsoft® Windows Update - c:\users\Veronika\M-1-52-5782-8752-5245\winsvc.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2011-11-03  12:07:46
ComboFix-quarantined-files.txt  2011-11-03 16:07
.
Vor Suchlauf: 7 Verzeichnis(se), 79.127.982.080 Bytes frei
Nach Suchlauf: 10 Verzeichnis(se), 78.957.715.456 Bytes frei
.
- - End Of File - - F5493B122E7FC184AC36364C9D6D2D7E