Skype Trojaner

# AdwCleaner v2.004 - Datei am 08/10/2012 um 20:29:21 erstellt
# Aktualisiert am 06/10/2012 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzer : *** - ***
# Bootmodus : Normal
# Ausgeführt unter : C:\Users\***\Desktop\adwcleaner.exe
# Option [Löschen]


**** [Dienste] ****


***** [Dateien / Ordner] *****

Datei Gelöscht : C:\user.js
Ordner Gelöscht : C:\ProgramData\Babylon
Ordner Gelöscht : C:\Users\***\AppData\Roaming\Babylon

***** [Registrierungsdatenbank] *****

Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\PriceGong
Schlüssel Gelöscht : HKCU\Software\DataMngr
Schlüssel Gelöscht : HKCU\Software\DataMngr_Toolbar
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{98889811-442D-49DD-99D7-DC866BE87DBC}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
Schlüssel Gelöscht : HKLM\Software\Babylon
Schlüssel Gelöscht : HKLM\Software\BabylonToolbar
Schlüssel Gelöscht : HKLM\Software\BrowserMngr
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Schlüssel Gelöscht : HKLM\Software\DataMngr
Schlüssel Gelöscht : HKLM\Software\Freeze.com
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2EECD738-5844-4A99-B4B6-146BF802613B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
Wert Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{98889811-442D-49DD-99D7-DC866BE87DBC}]

***** [Internet Browser] *****

-\\ Internet Explorer v9.0.8112.16421

[OK] Die Registrierungsdatenbank ist sauber.

-\\ Mozilla Firefox v15.0.1 (de)

Profilname : default 
Datei : C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\94q1vlf9.default\prefs.js

[OK] Die Datei ist sauber.

*************************

AdwCleaner[S1].txt - [2127 octets] - [08/10/2012 20:29:21]

########## EOF - C:\AdwCleaner[S1].txt - [2187 octets] ##########
         

ComboFix 12-10-08.02 - *** 08.10.2012  20:38:57.1.4 - x64
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.49.1031.18.8087.6527 [GMT 2:00]
ausgeführt von:: c:\users\***\Desktop\ComboFix.exe
AV: Avira Desktop *Disabled/Updated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
SP: Avira Desktop *Disabled/Updated* {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
(((((((((((((((((((((((   Dateien erstellt von 2012-09-08 bis 2012-10-08  ))))))))))))))))))))))))))))))
.
.
2012-10-08 18:41 . 2012-10-08 18:41	--------	d-----w-	c:\users\Default\AppData\Local\temp
2012-10-03 16:10 . 2012-10-03 16:10	--------	d-----w-	c:\program files (x86)\Common Files\Skype
2012-10-03 11:27 . 2012-10-03 11:27	--------	d-----w-	c:\program files (x86)\Malwarebytes' Anti-Malware
2012-10-03 11:27 . 2012-10-03 11:27	--------	d-----w-	c:\programdata\Malwarebytes
2012-10-03 11:27 . 2012-09-07 15:04	25928	----a-w-	c:\windows\system32\drivers\mbam.sys
2012-09-29 11:55 . 2012-08-21 21:01	245760	----a-w-	c:\windows\system32\OxpsConverter.exe
2012-09-19 18:03 . 2012-09-23 16:53	280904	----a-w-	c:\windows\SysWow64\PnkBstrB.xtr
2012-09-19 18:03 . 2012-09-19 18:03	--------	d-----w-	c:\program files (x86)\Battlelog Web Plugins
2012-09-19 14:59 . 2012-09-20 06:15	--------	d-----w-	c:\programdata\EA Logs
2012-09-19 14:59 . 2012-09-19 14:59	--------	d-----w-	c:\programdata\EA Core
2012-09-19 14:56 . 2012-09-19 14:56	--------	d--h--w-	c:\program files (x86)\Common Files\EAInstaller
2012-09-19 14:56 . 2012-09-23 16:53	280904	----a-w-	c:\windows\SysWow64\PnkBstrB.exe
2012-09-19 14:56 . 2012-09-23 10:50	281520	----a-w-	c:\windows\SysWow64\PnkBstrB.ex0
2012-09-19 14:56 . 2012-09-20 15:31	76888	----a-w-	c:\windows\SysWow64\PnkBstrA.exe
2012-09-19 07:40 . 2012-09-19 08:58	--------	d-----w-	c:\program files (x86)\Origin Games
2012-09-19 07:38 . 2012-09-21 06:46	--------	d-----w-	c:\programdata\Origin
2012-09-19 07:38 . 2012-09-19 14:59	--------	d-----w-	c:\programdata\Electronic Arts
2012-09-19 07:38 . 2012-09-21 06:46	--------	d-----w-	c:\program files (x86)\Origin
2012-09-18 15:49 . 2012-09-18 15:49	--------	d-----w-	c:\program files\TeamSpeak 3 Client
2012-09-18 08:56 . 2008-07-12 06:18	467984	----a-w-	c:\windows\SysWow64\d3dx10_39.dll
2012-09-18 08:56 . 2008-07-12 06:18	1493528	----a-w-	c:\windows\SysWow64\D3DCompiler_39.dll
2012-09-18 08:56 . 2008-07-12 06:18	3851784	----a-w-	c:\windows\SysWow64\D3DX9_39.dll
2012-09-18 08:53 . 2012-09-18 08:54	--------	d-----w-	c:\program files (x86)\Riot Games
2012-09-18 08:40 . 2012-09-07 18:26	98848	----a-w-	c:\windows\system32\drivers\avgntflt.sys
2012-09-18 08:40 . 2012-09-07 18:26	27760	----a-w-	c:\windows\system32\drivers\avkmgr.sys
2012-09-18 08:40 . 2012-09-07 18:26	132832	----a-w-	c:\windows\system32\drivers\avipbb.sys
2012-09-18 08:40 . 2012-09-18 08:40	--------	d-----w-	c:\programdata\Avira
2012-09-18 08:40 . 2012-09-18 08:40	--------	d-----w-	c:\program files (x86)\Avira
2012-09-17 22:30 . 2012-10-08 18:30	94656	----a-w-	c:\windows\system32\WPRO_41_2001woem.tmp
2012-09-17 21:26 . 2012-09-18 08:53	--------	d-----w-	c:\program files (x86)\League of Legends
2012-09-17 21:24 . 2012-10-07 15:21	--------	d-----w-	c:\programdata\PMB Files
2012-09-17 21:23 . 2012-09-17 21:23	--------	d-----w-	c:\program files (x86)\Pando Networks
2012-09-17 17:22 . 2012-09-17 22:32	--------	dc----w-	c:\windows\system32\DRVSTORE
2012-09-17 17:16 . 2012-09-17 17:16	--------	d-----w-	c:\programdata\CheckPoint
2012-09-17 17:10 . 2012-10-03 16:10	--------	d-----r-	c:\program files (x86)\Skype
2012-09-17 17:10 . 2012-10-03 16:10	--------	d-----w-	c:\programdata\Skype
2012-09-16 11:45 . 2012-10-03 18:21	--------	d-----w-	c:\program files (x86)\World of Warcraft
2012-09-16 11:45 . 2012-09-16 11:45	--------	d-----w-	c:\programdata\Blizzard Entertainment
2012-09-16 11:45 . 2012-09-16 11:45	--------	d-----w-	c:\program files (x86)\Common Files\Blizzard Entertainment
2012-09-16 11:44 . 2012-09-16 11:44	--------	d-----w-	c:\programdata\Battle.net
2012-09-16 11:34 . 2012-09-16 12:37	--------	d-----w-	c:\program files (x86)\Common Files\Steam
2012-09-16 11:34 . 2012-10-07 15:22	--------	d-----w-	c:\program files (x86)\Steam
2012-09-15 20:23 . 2012-09-15 19:35	--------	d-----w-	c:\windows\Panther
2012-09-15 19:42 . 2012-09-15 19:42	--------	d-----w-	c:\windows\SysWow64\RTCOM
2012-09-15 19:42 . 2012-09-15 19:42	--------	d-----w-	c:\program files\Realtek
2012-09-15 19:40 . 2012-09-15 19:40	--------	d-----w-	c:\program files\Common Files\Intel
2012-09-15 19:37 . 2012-09-15 13:47	--------	d-----w-	c:\program files (x86)\Intel
2012-09-15 19:37 . 2011-12-06 07:55	53248	----a-r-	c:\windows\SysWow64\CSVer.dll
2012-09-15 19:37 . 2012-09-15 19:39	--------	d-----w-	C:\Intel
2012-09-15 16:42 . 2012-09-15 17:07	--------	d-----w-	c:\program files\Core Temp
2012-09-15 16:14 . 2012-09-15 16:14	--------	d-----w-	c:\program files (x86)\Microsoft
2012-09-15 16:01 . 2012-09-15 16:01	--------	d-----w-	c:\windows\PCHEALTH
2012-09-15 15:18 . 2012-09-15 15:18	--------	d-----w-	c:\program files\7-Zip
2012-09-15 15:13 . 2012-09-15 15:13	--------	d-----w-	c:\program files\Microsoft Silverlight
2012-09-15 15:13 . 2012-09-15 15:13	--------	d-----w-	c:\program files (x86)\Microsoft Silverlight
2012-09-15 15:13 . 2012-05-04 11:00	366592	----a-w-	c:\windows\system32\qdvd.dll
2012-09-15 15:13 . 2012-05-04 09:59	514560	----a-w-	c:\windows\SysWow64\qdvd.dll
2012-09-15 15:13 . 2011-02-19 12:05	1139200	----a-w-	c:\windows\system32\FntCache.dll
2012-09-15 15:13 . 2011-02-19 12:04	902656	----a-w-	c:\windows\system32\d2d1.dll
2012-09-15 15:13 . 2011-02-19 06:30	739840	----a-w-	c:\windows\SysWow64\d2d1.dll
2012-09-15 15:09 . 2012-06-09 17:21	178688	----a-w-	c:\windows\SysWow64\unrar.dll
2012-09-15 15:09 . 2012-09-15 15:09	--------	d-----w-	c:\program files (x86)\K-Lite Codec Pack
2012-09-15 15:09 . 2012-09-15 15:08	916456	----a-w-	c:\windows\system32\deployJava1.dll
2012-09-15 15:09 . 2012-09-15 15:08	289768	----a-w-	c:\windows\system32\javaws.exe
2012-09-15 15:09 . 2012-09-15 15:08	1034216	----a-w-	c:\windows\system32\npDeployJava1.dll
2012-09-15 15:08 . 2012-09-15 15:08	108008	----a-w-	c:\windows\system32\WindowsAccessBridge-64.dll
2012-09-15 15:08 . 2012-09-15 15:08	189416	----a-w-	c:\windows\system32\javaw.exe
2012-09-15 15:08 . 2012-09-15 15:08	188904	----a-w-	c:\windows\system32\java.exe
2012-09-15 15:08 . 2012-09-15 15:08	--------	d-----w-	c:\program files\Java
2012-09-15 15:08 . 2012-09-15 15:08	--------	d-----w-	c:\program files (x86)\Common Files\Adobe
2012-09-15 15:07 . 2012-09-15 15:07	73416	----a-w-	c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2012-09-15 15:07 . 2012-09-15 15:07	696520	----a-w-	c:\windows\SysWow64\FlashPlayerApp.exe
2012-09-15 15:07 . 2012-09-15 15:07	--------	d-----w-	c:\windows\SysWow64\Macromed
2012-09-15 15:07 . 2012-09-15 15:07	--------	d-----w-	c:\windows\system32\Macromed
2012-09-15 15:07 . 2012-09-15 15:07	--------	d-----w-	c:\program files (x86)\COMPUTERBILD-Abzockschutz
2012-09-15 14:54 . 2012-09-17 22:29	--------	d-----w-	c:\program files (x86)\Mozilla Maintenance Service
2012-09-15 14:51 . 2012-09-15 14:51	--------	d-----w-	c:\windows\SysWow64\wbem\en-US
2012-09-15 14:51 . 2012-09-15 14:51	--------	d-----w-	c:\windows\system32\wbem\en-US
2012-09-15 14:38 . 2010-02-23 08:16	294912	----a-w-	c:\windows\system32\browserchoice.exe
2012-09-15 14:35 . 2012-08-27 23:49	9310152	----a-w-	c:\programdata\Microsoft\Windows Defender\Definition Updates\{A139537D-AA11-469B-8FC1-3BB7576A8196}\mpengine.dll
2012-09-15 14:35 . 2012-08-30 22:43	64462936	----a-w-	c:\windows\system32\MRT.exe
2012-09-15 14:34 . 2012-03-01 06:46	23408	----a-w-	c:\windows\system32\drivers\fs_rec.sys
2012-09-15 14:34 . 2012-03-01 06:38	220672	----a-w-	c:\windows\system32\wintrust.dll
2012-09-15 14:34 . 2012-03-01 06:33	81408	----a-w-	c:\windows\system32\imagehlp.dll
2012-09-15 14:34 . 2012-03-01 06:28	5120	----a-w-	c:\windows\system32\wmi.dll
2012-09-15 14:34 . 2012-03-01 05:37	172544	----a-w-	c:\windows\SysWow64\wintrust.dll
2012-09-15 14:34 . 2012-03-01 05:33	159232	----a-w-	c:\windows\SysWow64\imagehlp.dll
2012-09-15 14:34 . 2012-03-01 05:29	5120	----a-w-	c:\windows\SysWow64\wmi.dll
2012-09-15 14:32 . 2011-12-16 08:46	634880	----a-w-	c:\windows\system32\msvcrt.dll
2012-09-15 14:32 . 2011-12-16 07:52	690688	----a-w-	c:\windows\SysWow64\msvcrt.dll
2012-09-15 14:32 . 2011-05-03 05:29	976896	----a-w-	c:\windows\system32\inetcomm.dll
2012-09-15 14:32 . 2011-05-03 04:30	741376	----a-w-	c:\windows\SysWow64\inetcomm.dll
2012-09-15 14:32 . 2011-02-12 11:34	267776	----a-w-	c:\windows\system32\FXSCOVER.exe
2012-09-15 14:32 . 2012-05-14 05:26	956928	----a-w-	c:\windows\system32\localspl.dll
2012-09-15 14:32 . 2011-02-23 04:55	90624	----a-w-	c:\windows\system32\drivers\bowser.sys
2012-09-15 14:29 . 2012-06-02 22:19	2428952	----a-w-	c:\windows\system32\wuaueng.dll
2012-09-15 14:29 . 2012-06-02 22:19	57880	----a-w-	c:\windows\system32\wuauclt.exe
2012-09-15 14:29 . 2012-06-02 22:19	44056	----a-w-	c:\windows\system32\wups2.dll
2012-09-15 14:29 . 2012-06-02 22:15	2622464	----a-w-	c:\windows\system32\wucltux.dll
2012-09-15 14:29 . 2012-06-02 22:19	38424	----a-w-	c:\windows\system32\wups.dll
2012-09-15 14:29 . 2012-06-02 22:19	701976	----a-w-	c:\windows\system32\wuapi.dll
2012-09-15 14:29 . 2012-06-02 22:15	99840	----a-w-	c:\windows\system32\wudriver.dll
2012-09-15 14:29 . 2012-06-02 13:19	186752	----a-w-	c:\windows\system32\wuwebv.dll
2012-09-15 14:29 . 2012-06-02 13:15	36864	----a-w-	c:\windows\system32\wuapp.exe
2012-09-15 14:06 . 2012-09-15 15:55	--------	d-sha-r-	c:\programdata\Key-Base
2012-09-15 13:58 . 2012-09-15 13:58	--------	d-----w-	C:\NVIDIA
2012-09-15 13:53 . 2012-09-15 13:53	--------	d-----w-	c:\program files (x86)\Common Files\Intel Corporation
2012-09-15 13:50 . 2012-09-15 13:50	--------	d-----w-	c:\program files\ASRock Utility
2012-09-15 13:50 . 2011-05-10 14:28	17192	----a-w-	c:\windows\system32\drivers\AsrAppCharger.sys
2012-09-15 13:49 . 2012-10-08 18:30	34752	----a-w-	c:\windows\system32\drivers\WPRO_41_2001.sys
2012-09-15 13:48 . 2012-09-15 13:48	--------	d-----w-	c:\program files (x86)\ASM106xSATA
2012-09-15 13:48 . 2012-01-26 17:39	16152	----a-w-	c:\windows\system32\drivers\iusb3hcs.sys
2012-09-15 13:48 . 2012-01-26 17:39	356120	----a-w-	c:\windows\system32\drivers\iusb3hub.sys
2012-09-15 13:47 . 2012-01-26 17:39	787736	----a-w-	c:\windows\system32\drivers\iusb3xhc.sys
2012-09-15 13:46 . 2012-02-07 15:40	15128	----a-w-	c:\windows\system32\drivers\IntelMEFWVer.dll
2012-09-15 13:46 . 2012-09-15 14:06	--------	d-----w-	c:\programdata\Intel
2012-09-15 13:46 . 2012-09-15 13:49	--------	d-----w-	c:\program files\Intel
2012-09-15 13:45 . 2012-10-03 16:10	--------	d-sh--w-	c:\windows\Installer
2012-09-15 13:45 . 2012-09-15 13:45	--------	d-----w-	c:\program files (x86)\Common Files\postureAgent
2012-09-15 13:45 . 2011-11-09 23:04	60184	----a-w-	c:\windows\system32\drivers\HECIx64.sys
2012-09-15 13:44 . 2011-11-29 17:40	568600	----a-w-	c:\windows\system32\drivers\iaStor.sys
2012-09-15 13:43 . 2011-08-23 13:57	74272	----a-w-	c:\windows\system32\RtNicProp64.dll
2012-09-15 13:43 . 2011-08-23 13:57	565352	----a-w-	c:\windows\system32\drivers\Rt64win7.sys
2012-09-15 13:43 . 2011-08-23 13:57	107552	----a-w-	c:\windows\system32\RTNUninst64.dll
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-08-30 08:40 . 2012-08-30 08:40	429416	----a-w-	c:\windows\SysWow64\nvStreaming.exe
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-21 1475584]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"IAStorIcon"="c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" [2011-11-29 284440]
"USB3MON"="c:\program files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe" [2012-01-26 291608]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-07-27 919008]
"avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2012-09-07 348664]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 Intel(R) ME Service;Intel(R) ME Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [2012-02-07 121344]
R2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2012-09-07 676936]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2012-07-13 160944]
R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-09-15 250568]
R3 ALSysIO;ALSysIO;c:\users\***\AppData\Local\Temp\ALSysIO64.sys [x]
R3 cphs;Intel(R) Content Protection HECI Service;c:\windows\SysWow64\IntelCpHeciSvc.exe [2012-03-22 276248]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2012-09-07 25928]
R3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2012-09-06 114144]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
S0 asahci64;asahci64;c:\windows\system32\DRIVERS\asahci64.sys [2011-09-21 49760]
S0 iusb3hcs;Intel(R) USB 3.0 Hostcontroller-Switchtreiber;c:\windows\system32\DRIVERS\iusb3hcs.sys [2012-01-26 16152]
S1 AsrAppCharger;AsrAppCharger;c:\windows\system32\DRIVERS\AsrAppCharger.sys [2011-05-10 17192]
S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys [2012-09-07 27760]
S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-07-27 63960]
S2 AntiVirSchedulerService;Avira Planer;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [2012-09-07 86224]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2011-11-29 13592]
S2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface;c:\program files\Intel\iCLS Client\HeciServer.exe [2012-02-02 628448]
S2 ISCTAgent;ISCT Always Updated Agent;c:\program files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe [2012-02-09 133632]
S2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2012-02-07 161560]
S2 MBAMScheduler;MBAMScheduler;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [2012-09-07 399432]
S2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2012-08-30 1258856]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2012-08-30 382312]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2012-02-07 363800]
S3 ikbevent;Intel Upper keyboard Class Filter Driver;c:\windows\system32\DRIVERS\ikbevent.sys [2012-02-09 25536]
S3 imsevent;Intel Upper Mouse Class Filter Driver;c:\windows\system32\DRIVERS\imsevent.sys [2012-02-09 25536]
S3 IntcDAud;Intel(R) Display-Audio;c:\windows\system32\DRIVERS\IntcDAud.sys [2011-12-05 331264]
S3 ISCT;Intel(R) Smart Connect Technology Device Driver;c:\windows\system32\DRIVERS\ISCTD64.sys [2012-02-09 44992]
S3 iusb3hub;Intel(R) USB 3.0-Hubtreiber;c:\windows\system32\DRIVERS\iusb3hub.sys [2012-01-26 356120]
S3 iusb3xhc;Intel(R) USB 3.0 eXtensible-Hostcontrollertreiber;c:\windows\system32\DRIVERS\iusb3xhc.sys [2012-01-26 787736]
S3 MBfilt;MBfilt;c:\windows\system32\drivers\MBfilt64.sys [2009-11-17 32344]
S3 MEIx64;Intel(R) Management Engine Interface ;c:\windows\system32\DRIVERS\HECIx64.sys [2011-11-09 60184]
S3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda64v.sys [2012-07-03 189288]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [2011-08-23 565352]
S3 WPRO_41_2001;WinPcap Packet Driver (WPRO_41_2001);c:\windows\system32\drivers\WPRO_41_2001.sys [2012-10-08 34752]
.
.
Inhalt des "geplante Tasks" Ordners
.
2012-10-08 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-09-15 15:07]
.
2012-10-08 c:\windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job
- c:\program files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2011-11-25 11:41]
.
2012-10-08 c:\windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job
- c:\program files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2011-11-25 11:41]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2012-03-22 170264]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2012-03-22 398616]
"Persistence"="c:\windows\system32\igfxpers.exe" [2012-03-22 439064]
"RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2011-10-17 13307496]
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: Nach Microsoft &Excel exportieren - c:\progra~2\MICROS~2\OFFICE11\EXCEL.EXE/3000
TCP: DhcpNameServer = 192.168.1.1
FF - ProfilePath - c:\users\***\AppData\Roaming\Mozilla\Firefox\Profiles\94q1vlf9.default\
FF - prefs.js: browser.startup.homepage - google.de
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Wow6432Node-HKLM-Run-ZoneAlarm Installer - c:\program files (x86)\CheckPoint\Install\Launcher.exe
AddRemove-MozillaMaintenanceService - c:\program files (x86)\Mozilla Maintenance Service\uninstall.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2012-10-08  20:43:08
ComboFix-quarantined-files.txt  2012-10-08 18:43
.
Vor Suchlauf: 9 Verzeichnis(se), 72.505.212.928 Bytes frei
Nach Suchlauf: 12 Verzeichnis(se), 72.484.261.888 Bytes frei
.
- - End Of File - - 2BB3DCF0193D7C558D93379079E0323B