Die Datei a7llneg6 kann angeblich nicht gefunden werden... ich mach das script jetzt ersma ohne das teil , ändert es wieder seinen namen?:/

ComboFix 09-07-14.08 - Jannis 19.07.2009 10:18.2.2 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1252.49.1031.18.2046.1412 [GMT 2:00]
ausgeführt von:: c:\dokumente und einstellungen\Jannis\Desktop\combofix.exe
Benutzte Befehlsschalter :: c:\dokumente und einstellungen\Jannis\Desktop\cfscript.txt
AV: Avira AntiVir PersonalEdition *On-access scanning disabled* (Updated) {AD166499-45F9-482A-A743-FDD3350758C7}
.

(((((((((((((((((((((((((((((((((((( Weitere Löschungen ))))))))))))))))))))))))))))))))))))))))))))))))
.

.
((((((((((((((((((((((((((((((((((((((( Treiber/Dienste )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_IJIBWPTY
-------\Service_ijibwpty


((((((((((((((((((((((( Dateien erstellt von 2009-06-19 bis 2009-07-19 ))))))))))))))))))))))))))))))
.

2009-07-19 08:15 . 2009-07-19 08:16 -------- d-s---w- C:\test.com
2009-07-18 21:42 . 2009-07-18 21:42 -------- d-----w- c:\dokumente und einstellungen\Jannis\Anwendungsdaten\Malwarebytes
2009-07-17 20:51 . 2009-07-17 20:51 -------- d-----w- C:\rsit
2009-07-17 13:21 . 2009-07-13 11:36 38160 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-07-17 13:21 . 2009-07-17 13:43 -------- d-----w- c:\programme\Malwarebytes' Anti-Malware
2009-07-17 13:21 . 2009-07-17 13:21 -------- d-----w- c:\dokume~1\ALLUSE~1\ANWEND~1\Malwarebytes
2009-07-17 13:21 . 2009-07-13 11:36 19096 ----a-w- c:\windows\system32\drivers\mbam.sys
2009-07-13 21:39 . 2004-06-10 11:48 286720 ----a-w- c:\windows\vsnpstd.exe
2009-07-13 21:39 . 2004-05-06 09:22 53248 ----a-w- c:\windows\system32\dsnpstd.dll
2009-07-13 21:39 . 2005-04-26 12:06 390784 ----a-w- c:\windows\system32\drivers\snpstd.sys
2009-07-13 21:39 . 2009-07-13 21:39 -------- d-----w- c:\programme\Gemeinsame Dateien\snpstd
2009-07-13 21:39 . 2005-04-20 15:34 61440 ----a-w- c:\windows\system32\rsnpstd.dll
2009-07-13 21:39 . 2005-04-20 15:16 36864 ----a-w- c:\windows\system32\vsnpstd.dll
2009-07-13 21:39 . 2005-02-01 17:29 20480 ----a-w- c:\windows\usnpstd.exe
2009-07-13 21:39 . 2004-02-16 11:59 61440 ----a-w- c:\windows\system32\csnpstd.dll
2009-07-06 11:46 . 2009-07-06 11:46 10134 ----a-r- c:\dokumente und einstellungen\Jannis\Anwendungsdaten\Microsoft\Installer\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}\ARPPRODUCTICON.exe
2009-07-06 11:46 . 2009-07-06 11:46 -------- d-----w- c:\programme\Microsoft WSE
2009-06-25 13:21 . 2009-07-19 08:39 117760 ----a-w- c:\dokumente und einstellungen\Jannis\Anwendungsdaten\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\UIREPAIR.DLL

.
(((((((((((((((((((((((((((((((((((( Find3M Bericht ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-07-19 08:40 . 2007-12-20 13:23 -------- d-----w- c:\dokumente und einstellungen\Jannis\Anwendungsdaten\Skype
2009-07-19 08:38 . 2008-09-06 13:00 -------- d-----w- c:\programme\Steam
2009-07-19 08:18 . 2008-01-05 13:38 -------- d-----w- c:\dokumente und einstellungen\Jannis\Anwendungsdaten\uTorrent
2009-07-19 06:01 . 2007-12-20 13:24 -------- d-----w- c:\dokumente und einstellungen\Jannis\Anwendungsdaten\skypePM
2009-07-17 16:46 . 2008-12-25 12:38 -------- d-----w- c:\dokumente und einstellungen\Jannis\Anwendungsdaten\U3
2009-07-17 15:24 . 2008-03-14 16:38 -------- d-----w- c:\programme\LittleFighter2
2009-07-16 21:27 . 2009-01-26 12:22 -------- d-----w- c:\programme\SUPERAntiSpyware
2009-07-13 21:39 . 2007-12-20 13:10 -------- d--h--w- c:\programme\InstallShield Installation Information
2009-07-10 06:46 . 2008-03-16 13:21 -------- d-----w- c:\programme\Warcraft III
2009-07-07 16:07 . 2008-02-15 13:59 -------- d-----w- c:\programme\SEGA
2009-07-06 11:37 . 2008-09-10 11:17 -------- d-----w- c:\programme\Electronic Arts
2009-07-01 11:44 . 2008-04-08 17:12 -------- d-----w- c:\programme\Paradox Interactive
2009-06-15 13:25 . 2009-06-05 13:51 456 ----a-w- c:\programme\crash.log
2009-06-15 13:25 . 2009-06-05 13:33 0 ----a-w- c:\programme\STBOF.INI
2009-06-08 16:35 . 2009-06-08 16:35 -------- d-----w- c:\programme\Shrapnel Games
2009-06-07 00:10 . 2008-09-28 19:56 -------- d-----w- c:\programme\LucasArts
2009-06-05 13:51 . 2009-06-05 13:34 -------- d-----w- c:\programme\botf
2009-06-05 13:33 . 2009-06-05 13:33 -------- d-----w- c:\programme\GERMAN
2009-06-05 13:31 . 2009-06-05 13:31 -------- d-----w- c:\programme\ultimate Editor
2009-05-27 12:30 . 2008-12-26 22:19 75096 ----a-w- c:\windows\system32\drivers\avipbb.sys
2009-05-25 13:53 . 2009-05-25 13:53 -------- d-----w- c:\programme\YouTube Downloader
2009-04-25 10:23 . 2007-12-23 16:37 22328 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2009-04-25 10:23 . 2007-12-23 16:36 107832 ----a-w- c:\windows\system32\PnkBstrB.exe
2009-06-13 12:08 . 2008-08-26 12:51 134648 ----a-w- c:\programme\mozilla firefox\components\brwsrcmp.dll
.

((((((((((((((((((((((((((((( SnapShot@2009-07-17_21.38.05 )))))))))))))))))))))))))))))))))))))))))
.
+ 2009-07-19 08:27 . 2009-07-19 08:27 16384 c:\windows\temp\Perflib_Perfdata_194.dat
.
(((((((((((((((((((((((((((( Autostartpunkte der Registrierung ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Skype"="c:\programme\Skype\Phone\Skype.exe" [2007-11-16 21760296]
"NVIDIA nTune"="c:\programme\NVIDIA Corporation\nTune\nTuneCmd.exe" [2007-09-04 81920]
"SpybotSD TeaTimer"="c:\programme\Spybot - Search & Destroy\TeaTimer.exe" [2008-09-16 1833296]
"DAEMON Tools Lite"="c:\programme\DAEMON Tools Lite\daemon.exe" [2008-04-01 486856]
"MsnMsgr"="c:\programme\Windows Live\Messenger\MsnMsgr.Exe" [2007-10-18 5724184]
"Steam"="c:\programme\steam\steam.exe" [2009-06-11 1217784]
"SUPERAntiSpyware"="c:\programme\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2009-01-15 1830128]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2004-08-10 15360]
"ICQ"="c:\programme\ICQ6.5\ICQ.exe" [2009-03-01 172792]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ehTray"="c:\windows\ehome\ehtray.exe" [2005-08-05 64512]
"SunJavaUpdateSched"="c:\programme\Java\jre1.6.0_07\bin\jusched.exe" [2008-06-10 144784]
"PinnacleDriverCheck"="c:\windows\system32\PSDrvCheck.exe" [2003-11-10 406016]
"UnlockerAssistant"="c:\programme\Unlocker\UnlockerAssistant.exe" [2006-09-07 15872]
"NeroFilterCheck"="c:\windows\system32\NeroCheck.exe" [2001-07-09 155648]
"Anti-Blaxx Manager"="c:\programme\Anti-Blaxx 1.18\Anti-Blaxx.exe" [2005-10-26 225280]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2009-02-18 13680640]
"TkBellExe"="c:\programme\Gemeinsame Dateien\Real\Update_OB\realsched.exe" [2008-05-09 185896]
"Ulead Photo Express 5 SE Calendar Checker"="c:\programme\Ulead Systems\Ulead Photo Express 5 SE\calcheck.exe" [2004-01-12 69632]
"avgnt"="c:\programme\Avira\AntiVir PersonalEdition Classic\avgnt.exe" [2008-06-12 266497]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2009-02-18 86016]
"StartCCC"="c:\programme\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2009-02-03 61440]
"SkyTel"="SkyTel.EXE" - c:\windows\SkyTel.exe [2006-05-16 2879488]
"nwiz"="nwiz.exe" - c:\windows\system32\nwiz.exe [2009-02-18 1657376]
"RTHDCPL"="RTHDCPL.EXE" - c:\windows\RTHDCPL.EXE [2006-06-28 16248320]
"Kernel and Hardware Abstraction Layer"="KHALMNPR.EXE" - c:\windows\KHALMNPR.Exe [2007-04-11 56080]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-08-10 15360]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"tscuninstall"="c:\windows\system32\tscupgrd.exe" [2004-08-10 44544]

c:\dokume~1\ALLUSE~1\STARTM~1\PROGRA~1\AUTOST~1\
Logitech SetPoint.lnk - c:\programme\Logitech\SetPoint\SetPoint.exe [2008-12-24 692224]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"NoSMBalloonTip"= 1 (0x1)

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\programme\SUPERAntiSpyware\SASSEH.DLL" [2008-05-13 77824]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
2008-12-22 10:05 356352 ----a-w- c:\programme\SUPERAntiSpyware\SASWINLO.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aawservice]
@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WdfLoadGroup]
@=""

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Programme\\uTorrent\\uTorrent.exe"=
"c:\\Programme\\Mozilla Firefox\\firefox.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Programme\\EA GAMES\\Battlefield 2\\BF2.exe"=
"c:\\Programme\\World of Warcraft\\BackgroundDownloader.exe"=
"c:\\WINDOWS\\system32\\PnkBstrA.exe"=
"c:\\WINDOWS\\system32\\PnkBstrB.exe"=
"c:\\Programme\\Activision\\Call of Duty 4 - Modern Warfare\\iw3mp.exe"=
"c:\\Programme\\LimeWire\\LimeWire.exe"=
"c:\\Programme\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Programme\\Windows Live\\Messenger\\livecall.exe"=
"c:\\Programme\\Messenger\\msmsgs.exe"=
"c:\\Dokumente und Einstellungen\\All Users\\Anwendungsdaten\\Kaspersky Lab Setup Files\\Kaspersky Internet Security 2009\\german\\setup.exe"=
"c:\\Programme\\Warcraft III\\war3.exe"=
"c:\\Programme\\Steam\\SteamApps\\soultaker08\\day of defeat source\\hl2.exe"=
"c:\\Programme\\THQ\\Company of Heroes\\RelicCOH.exe"=
"c:\\Programme\\Paradox Interactive\\Doomsday\\HoI2.exe"=
"c:\\WINDOWS\\system32\\dplaysvr.exe"=
"c:\\Programme\\Firaxis Games\\Sid Meier's Civilization 4\\Civilization4.exe"=
"c:\\Games\\Worms Armageddon - New Edition\\WA.exe"=
"c:\\Programme\\Steam\\SteamApps\\common\\multiwinia\\multiwinia.exe"=
"c:\\Dokumente und Einstellungen\\Jannis\\Desktop\\Call of Duty - World at War\\CoDWaW.exe"=
"c:\\Dokumente und Einstellungen\\Jannis\\Desktop\\Call of Duty - World at War\\CoDWaWmp.exe"=
"c:\\Programme\\ICQ6.5\\ICQ.exe"=
"c:\\Programme\\THQ\\Dawn of War\\W40k.exe"=
"c:\\Programme\\LucasArts\\Star Wars Empire at War\\GameData\\sweaw.exe"=
"c:\\Programme\\LucasArts\\Star Wars Empire at War Forces of Corruption\\swfoc.exe"=
"c:\\Programme\\Steam\\SteamApps\\common\\empire total war\\Empire.exe"=
"c:\\Programme\\LucasArts\\Star Wars Jedi Knight Jedi Academy\\GameData\\jamp.exe"=
"c:\\Programme\\Skype\\Phone\\Skype.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"3724:TCP"= 3724:TCP:Blizzard Downloader: 3724

R1 SASDIFSV;SASDIFSV;c:\programme\SUPERAntiSpyware\sasdifsv.sys [15.01.2009 17:17 8944]
R1 SASKUTIL;SASKUTIL;c:\programme\SUPERAntiSpyware\SASKUTIL.SYS [15.01.2009 17:17 55024]
R2 acedrv11;acedrv11;c:\windows\system32\drivers\ACEDRV11.sys [23.01.2008 10:19 501560]
R3 3xHybrid;Pinnacle PCTV 100i-110i-300i-310i;c:\windows\system32\drivers\3xHybrid.sys [20.12.2007 15:01 882688]
R3 AtiHdmiService;ATI Function Driver for HDMI Service;c:\windows\system32\drivers\AtiHdmi.sys [07.03.2009 16:18 89600]
R3 SASENUM;SASENUM;c:\programme\SUPERAntiSpyware\SASENUM.SYS [15.01.2009 17:17 7408]
S2 aawserviceAlerter;Lavasoft Ad-Aware Service aawserviceAlerter;c:\windows\TEMP\fujpunetbf.exe service --> c:\windows\TEMP\fujpunetbf.exe service [?]
S3 NPF;NetGroup Packet Filter Driver;c:\windows\system32\drivers\npf.sys [02.08.2005 23:10 32512]
S3 TNPacket;T-Systems Nova Packet Capture Driver;c:\programme\T-DSL SpeedManager\TNPACKET.SYS [11.03.2004 18:44 9696]
.
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = about:blank
mStart Page = about:blank
FF - ProfilePath - c:\dokume~1\Jannis\ANWEND~1\Mozilla\Firefox\Profiles\oevd9he8.default\
FF - prefs.js: browser.search.selectedEngine - Searchme
FF - plugin: c:\dokumente und einstellungen\All Users\Anwendungsdaten\Zylom\ZylomGamesPlayer\npzylomgamesplayer.dll
FF - plugin: c:\program files\Real\RealPlayer\Netscape6\nppl3260.dll
FF - plugin: c:\program files\Real\RealPlayer\Netscape6\nprjplug.dll
FF - plugin: c:\program files\Real\RealPlayer\Netscape6\nprpjplug.dll
FF - plugin: c:\programme\Mozilla Firefox\plugins\np-mswmp.dll
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, GMER - Rootkit Detector and Remover
Rootkit scan 2009-07-19 10:38
Windows 5.1.2600 Service Pack 2 NTFS

Scanne versteckte Prozesse...

Scanne versteckte Autostarteinträge...

Scanne versteckte Dateien...

Scan erfolgreich abgeschlossen
versteckte Dateien: 0

**************************************************************************
.
--------------------- Gesperrte Registrierungsschluessel ---------------------

[HKEY_USERS\S-1-5-21-839522115-884357618-682003330-1003\Software\Microsoft\SystemCertificates\AddressBook*]
@Allowed: (Read) (RestrictedCode)
@Allowed: (Read) (RestrictedCode)

[HKEY_USERS\S-1-5-21-839522115-884357618-682003330-1003\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
"??"=hex:69,8e,57,d9,67,d7,03,f9,99,fc,09,7f,0f,cb,23,79,fe,f5,d0,e1,68,94,35,
ce,fb,64,d3,27,6d,8e,88,24,da,9c,00,38,2e,fa,92,7e,6d,25,dc,9d,89,7b,38,c1,\
"??"=hex:70,12,3c,7b,b9,7d,66,ff,68,01,69,88,54,e8,f9,4e

[HKEY_USERS\S-1-5-21-839522115-884357618-682003330-1003\Software\SecuROM\License information*]
"datasecu"=hex:d6,92,1f,92,de,29,51,33,06,ee,83,4b,3a,40,58,ef,47,56,bf,0a,66,
86,b1,c5,5a,fe,fb,69,23,53,a5,ec,78,75,bd,1c,3e,ef,8c,41,55,b6,5b,d2,9e,b1,\
"rkeysecu"=hex:e5,3b,f7,38,07,13,f0,0b,9a,77,af,4d,90,a0,58,29

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{47629D4B-2AD3-4e50-B716-A66C15C63153}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\WINDOWS\\system32\\OLE32.DLL"
"cd042efbbd7f7af1647644e76e06692b"=hex:c8,28,51,af,b0,29,a3,98,39,72,bf,46,f3,
54,92,e5,c8,28,51,af,b0,29,a3,98,06,f1,4b,ba,e8,65,98,94,e2,63,26,f1,3f,c8,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{604BB98A-A94F-4a5c-A67C-D8D3582C741C}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\WINDOWS\\system32\\OLE32.DLL"
"bca643cdc5c2726b20d2ecedcc62c59b"=hex:71,3b,04,66,8b,46,0d,96,a9,52,06,96,cf,
76,da,12,71,3b,04,66,8b,46,0d,96,dd,f2,e1,5e,8d,e2,34,fe,6a,9c,d6,61,af,45,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{684373FB-9CD8-4e47-B990-5A4466C16034}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\WINDOWS\\system32\\OLE32.DLL"
"2c81e34222e8052573023a60d06dd016"=hex:ff,7c,85,e0,43,d4,0e,fe,70,64,58,a1,04,
a6,78,46,25,da,ec,7e,55,20,c9,26,77,43,c6,d5,ff,e4,e3,2f,ff,7c,85,e0,43,d4,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{74554CCD-F60F-4708-AD98-D0152D08C8B9}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\WINDOWS\\system32\\OLE32.DLL"
"2582ae41fb52324423be06337561aa48"=hex:86,8c,21,01,be,91,eb,e7,19,c5,c7,59,dd,
76,4c,19,3e,1e,9e,e0,57,5a,93,61,44,5e,3c,ca,9a,56,7a,38,86,8c,21,01,be,91,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{7EB537F9-A916-4339-B91B-DED8E83632C0}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\WINDOWS\\system32\\OLE32.DLL"
"caaeda5fd7a9ed7697d9686d4b818472"=hex:cd,44,cd,b9,a6,33,6c,cd,d4,4b,f7,02,3d,
53,a0,1a,cd,44,cd,b9,a6,33,6c,cd,d2,b1,12,20,66,94,c7,bd,f5,1d,4d,73,a8,13,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{948395E8-7A56-4fb1-843B-3E52D94DB145}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\WINDOWS\\system32\\OLE32.DLL"
"a4a1bcf2cc2b8bc3716b74b2b4522f5d"=hex:b0,18,ed,a7,3f,8d,37,a4,7d,63,12,3a,79,
bf,1a,cd,b0,18,ed,a7,3f,8d,37,a4,14,60,13,7a,c8,e0,50,12,df,20,58,62,78,6b,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{AC3ED30B-6F1A-4bfc-A4F6-2EBDCCD34C19}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\WINDOWS\\system32\\OLE32.DLL"
"4d370831d2c43cd13623e232fed27b7b"=hex:fb,a7,78,e6,12,2f,9a,ea,87,a0,15,a6,2e,
c8,b2,c1,31,77,e1,ba,b1,f8,68,02,4a,6f,2f,c6,08,9b,9e,75,fb,a7,78,e6,12,2f,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DE5654CA-EB84-4df9-915B-37E957082D6D}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\WINDOWS\\system32\\OLE32.DLL"
"1d68fe701cdea33e477eb204b76f993d"=hex:83,6c,56,8b,a0,85,96,ab,ef,1d,5e,d5,13,
8b,53,de,83,6c,56,8b,a0,85,96,ab,78,bd,38,b1,e9,44,50,00,01,3a,48,fc,e8,04,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E39C35E8-7488-4926-92B2-2F94619AC1A5}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\WINDOWS\\system32\\OLE32.DLL"
"1fac81b91d8e3c5aa4b0a51804d844a3"=hex:b2,46,9a,e2,1b,fe,1b,94,6d,94,67,87,2f,
ce,ae,ee,51,fa,6e,91,28,9e,14,cc,98,da,b5,1f,ba,7e,38,71,f6,0f,4e,58,98,5b,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{EACAFCE5-B0E2-4288-8073-C02FF9619B6F}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\WINDOWS\\system32\\OLE32.DLL"
"f5f62a6129303efb32fbe080bb27835b"=hex:b1,cd,45,5a,a8,c4,f8,b9,46,3f,bc,73,be,
a0,1f,d1,b1,cd,45,5a,a8,c4,f8,b9,32,b9,af,02,ac,6b,22,b9,3d,ce,ea,26,2d,45,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F8F02ADD-7366-4186-9488-C21CB8B3DCEC}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\WINDOWS\\system32\\OLE32.DLL"
"fd4e2e1a3940b94dceb5a6a021f2e3c6"=hex:2a,b7,cc,b5,b9,7f,41,e7,97,03,fa,51,22,
ec,51,8c,e3,0e,66,d5,eb,bc,2f,6b,6e,39,21,ca,34,32,ad,db,2a,b7,cc,b5,b9,7f,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FEE45DE2-A467-4bf9-BF2D-1411304BCD84}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\WINDOWS\\system32\\OLE32.DLL"
"8a8aec57dd6508a385616fbc86791ec2"=hex:6c,43,2d,1e,aa,22,2f,9c,b7,69,c9,7f,4c,
32,da,a4,fa,ea,66,7f,d4,3b,6b,70,6f,54,ac,90,55,e2,69,ce,6c,43,2d,1e,aa,22,\
.
--------------------- Durch laufende Prozesse gestartete DLLs ---------------------

- - - - - - - > 'winlogon.exe'(840)
c:\programme\SUPERAntiSpyware\SASWINLO.dll
c:\windows\system32\Ati2evxx.dll

- - - - - - - > 'explorer.exe'(3032)
c:\programme\Logitech\SetPoint\lgscroll.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\windows\system32\ati2evxx.exe
c:\programme\Lavasoft\Ad-Aware\aawservice.exe
c:\windows\system32\ati2evxx.exe
c:\programme\Avira\AntiVir PersonalEdition Classic\sched.exe
c:\programme\NVIDIA Corporation\nTune\nTuneService.exe
c:\windows\system32\PnkBstrA.exe
c:\windows\ehome\mcrdsvc.exe
c:\windows\system32\wbem\wmiapsrv.exe
c:\windows\system32\wscntfy.exe
c:\programme\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
c:\programme\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
c:\programme\Gemeinsame Dateien\Logitech\KhalShared\KHALMNPR.exe
c:\programme\Skype\Plugin Manager\skypePM.exe
c:\programme\Java\jre1.6.0_07\bin\jucheck.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2009-07-19 10:44 - PC wurde neu gestartet
ComboFix-quarantined-files.txt 2009-07-19 08:44
ComboFix2.txt 2009-07-17 21:45

Vor Suchlauf: 16 Verzeichnis(se), 99.061.448.704 Bytes frei
Nach Suchlauf: 16 Verzeichnis(se), 98.986.434.560 Bytes frei

Current=1 Default=1 Failed=0 LastKnownGood=7 Sets=1,2,3,4,5,6,7
289 --- E O F --- 2009-03-14 18:24

Also Meister wars das oder bedarf es noch einer kleiner Nachbesserung? mein ohr ist offen für Vorschläge

Hi,

sieht gut aus, das sollte es gewesen sein...

chris & Out