Sehr schoen, bitte nochmal ein Cf Report und aktualisiere dein Mbam erneut und schaue, ob die Packermeldungen noch auftauchen...

Hier nun der Malwarebytesbericht:

Malwarebytes' Anti-Malware 1.41
Datenbank Version: 2794
Windows 6.0.6001 Service Pack 1

14.09.2009 19:30:04
mbam-log-2009-09-14 (19-30-04).txt

Scan-Methode: Vollständiger Scan (C:\|)
Durchsuchte Objekte: 347460
Laufzeit: 1 hour(s), 24 minute(s), 21 second(s)

Infizierte Speicherprozesse: 0
Infizierte Speichermodule: 0
Infizierte Registrierungsschlüssel: 1
Infizierte Registrierungswerte: 0
Infizierte Dateiobjekte der Registrierung: 0
Infizierte Verzeichnisse: 0
Infizierte Dateien: 4

Infizierte Speicherprozesse:
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel:
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\kbiwkmpyemwcfj (Rootkit.TDSS) -> Quarantined and deleted successfully.

Infizierte Registrierungswerte:
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung:
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse:
(Keine bösartigen Objekte gefunden)

Infizierte Dateien:
C:\Program Files\Matlab\toolbox\compiler\mcr\matlab\verctrl\verctrl.mexw32 (Malware.Packer) -> Not selected for removal.
C:\Program Files\Matlab\toolbox\datafeed\datafeed\bbdatafeed.mexw32 (Malware.Packer) -> Not selected for removal.
C:\Program Files\Matlab\toolbox\matlab\verctrl\verctrl.mexw32 (Malware.Packer) -> Not selected for removal.
C:\Program Files\Steinberg\WaveLab\UNWISE.EXE (Malware.Packer.Morphine) -> Not selected for removal.

und zum (hoffentlich) Abschluss hab ich noch einen ComboFix Scan durchgeführt (diesmal wirklich ohne Anitvir)

Ich hoffe dass nun alles weg ist!

Herzlichen Dank Raman jetzt schon mal für dein tolles Bemühen!!!!!!!!!!

ComboFix 09-09-14.01 - Wolfgang 14.09.2009 19:50.3.2 - NTFSx86
Microsoft® Windows Vista™ Home Premium 6.0.6001.1.1252.43.1031.18.2718.1721 [GMT 2:00]
ausgeführt von:: c:\users\Wolfgang\Desktop\HilfeCombo.exe
SP: Windows-Defender *disabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
.

(((((((((((((((((((((((((((((((((((( Weitere Löschungen ))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\system32\acovcnt.exe

.
((((((((((((((((((((((( Dateien erstellt von 2009-08-14 bis 2009-09-14 ))))))))))))))))))))))))))))))
.

2009-09-14 18:13 . 2009-09-14 18:13 -------- d-----w- c:\users\Public\AppData\Local\temp
2009-09-14 18:13 . 2009-09-14 18:13 -------- d-----w- c:\users\Default\AppData\Local\temp
2009-09-11 15:09 . 2009-09-11 15:38 -------- d-----w- c:\program files\BsPlayer
2009-09-10 08:05 . 2009-06-09 15:29 1177600 ----a-w- c:\windows\system32\drivers\athr.sys
2009-08-19 15:57 . 2009-08-19 15:57 -------- d-----w- c:\program files\Geogrid
2009-08-19 15:57 . 2009-08-19 15:57 -------- d-----w- c:\program files\Austrian Map Fly
2009-08-19 15:42 . 2009-08-19 15:47 -------- d-----w- c:\program files\Amap Fly

.
(((((((((((((((((((((((((((((((((((( Find3M Bericht ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-09-14 17:34 . 2007-09-23 12:57 -------- d-----w- c:\program files\Firefox
2009-09-14 17:33 . 2007-09-23 13:57 -------- d-----w- c:\users\Wolfgang\AppData\Roaming\Skype
2009-09-14 17:31 . 2007-04-18 08:33 12 ----a-w- c:\windows\bthservsdp.dat
2009-09-14 15:57 . 2008-03-30 18:19 -------- d-----w- c:\users\Wolfgang\AppData\Roaming\skypePM
2009-09-14 15:56 . 2007-09-23 13:19 -------- d-----w- c:\program files\Avira
2009-09-14 12:29 . 2009-09-14 12:29 -------- d-----w- c:\users\Wolfgang\AppData\Roaming\Malwarebytes
2009-09-14 12:29 . 2009-09-14 12:29 -------- d-----w- c:\programdata\Malwarebytes
2009-09-14 12:29 . 2009-09-14 12:28 -------- d-----w- c:\program files\Malwarebytes
2009-09-14 11:19 . 2007-12-31 15:10 -------- d-----w- c:\users\Wolfgang\AppData\Roaming\DAEMON Tools
2009-09-14 11:10 . 2009-09-14 11:10 -------- d-----w- c:\program files\CCCleaner
2009-09-14 08:02 . 2007-04-18 09:14 621940 ----a-w- c:\windows\system32\perfh007.dat
2009-09-14 08:02 . 2007-04-18 09:14 123658 ----a-w- c:\windows\system32\perfc007.dat
2009-09-11 15:02 . 2009-03-05 17:08 -------- d-----w- c:\program files\Koordinatentransformation
2009-09-10 12:54 . 2009-09-14 12:29 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-09-10 12:53 . 2009-09-14 12:29 19160 ----a-w- c:\windows\system32\drivers\mbam.sys
2009-09-10 08:05 . 2007-09-06 21:54 -------- d-----w- c:\program files\Atheros
2009-08-27 11:29 . 2007-09-23 13:57 -------- d-----w- c:\program files\Google
2009-08-23 13:28 . 2009-01-21 19:53 -------- d-----w- c:\programdata\SecTaskMan
2009-08-19 15:42 . 2007-12-31 15:05 -------- d-----w- c:\program files\Daemon Tools
2009-07-28 14:33 . 2009-08-06 16:43 55656 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2009-07-22 13:47 . 2008-01-23 15:00 -------- d-----w- c:\users\Wolfgang\AppData\Roaming\LimeWire
2009-07-22 13:38 . 2008-01-23 14:58 -------- d-----w- c:\program files\LimeWire
2009-01-30 14:29 . 2009-01-30 14:26 10724584 ----a-w- c:\program files\bsplayer_setup.exe
2007-12-09 20:47 . 2007-12-09 20:47 318904 ----a-w- c:\program files\wmpfirefoxplugin.exe
1997-06-23 02:00 . 1997-06-23 02:00 123664 --sha-w- c:\windows\System32\Msjint35.dll
1997-06-23 11:06 . 1997-06-23 11:06 24848 --sha-w- c:\windows\System32\Msjter35.dll
1997-06-23 11:06 . 1997-06-23 11:06 252176 --sha-w- c:\windows\System32\Msrd2x35.dll
1997-06-23 11:06 . 1997-06-23 11:06 287504 --sha-w- c:\windows\System32\Msxbse35.dll
.

(((((((((((((((((((((((((((( Autostartpunkte der Registrierung ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ADSMOverlayIcon1]
@="{A8D448F4-0431-45AC-9F5E-E1B434AB2249}"
[HKEY_CLASSES_ROOT\CLSID\{A8D448F4-0431-45AC-9F5E-E1B434AB2249}]
2007-06-02 00:08 143360 ----a-w- c:\program files\ASUS\ASUS Data Security Manager\OverlayIconShlExt1.dll

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-18 125952]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-08-27 39408]
"DAEMON Tools Lite"="c:\program files\Daemon Tools\DAEMON Tools Lite\daemon.exe" [2007-12-29 486856]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Common Files\Ahead\Lib\NMBgMonitor.exe" [2007-03-26 149040]
"PC Suite Tray"="c:\program files\Nokia\Nokia PC Suite 7\PCSuite.exe" [2008-08-11 1124352]
"Nokia.PCSync"="c:\program files\Nokia\Nokia PC Suite 7\PcSync2.exe" [2008-06-17 1249280]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2009-05-26 24264488]
"WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-18 202240]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"="c:\program files\Windows Defender\MSASCui.exe" [2008-01-18 1008184]
"NeroFilterCheck"="c:\program files\Common Files\Ahead\Lib\NeroCheck.exe" [2007-03-26 161328]
"InCD"="c:\program files\Nero\Nero 7\InCD\InCD.exe" [2007-03-26 1057328]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2006-11-10 90112]
"SMSERIAL"="c:\program files\Motorola\SMSERIAL\sm56hlpr.exe" [2006-11-22 630784]
"ATKMEDIA"="c:\program files\ASUS\ATK Media\DMEDIA.EXE" [2006-11-02 61440]
"JMB36X IDE Setup"="c:\windows\JM\JMInsIDE.exe" [2006-10-30 36864]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2007-03-01 857648]
"ASUS Camera ScreenSaver"="c:\windows\ASScrProlog.exe" [2007-09-06 37232]
"ASUS Screen Saver Protector"="c:\windows\ASScrPro.exe" [2007-09-06 33136]
"SunJavaUpdateSched"="c:\program files\Java\jre1.6.0_02\bin\jusched.exe" [2007-07-12 132496]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2006-10-26 31016]
"hpqSRMon"="c:\program files\Drucker\Digital Imaging\bin\hpqSRMon.exe" [2008-03-13 81920]
"MaxMenuMgr"="c:\program files\Seagate\SeagateManager\FreeAgent Status\StxMenuMgr.exe" [2009-03-27 181544]
" Malwarebytes Anti-Malware (reboot)"="c:\program files\Malwarebytes\Malwarebytes' Anti-Malware\mbam.exe" [2009-09-10 1312080]
"RtHDVCpl"="RtHDVCpl.exe" - c:\windows\RtHDVCpl.exe [2007-02-15 4390912]

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Adobe Reader Speed Launch.lnk - c:\program files\Adobe\Reader 8.0\Reader\reader_sl.exe [2006-10-23 40048]
Adobe Reader Synchronizer.lnk - c:\program files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe [2006-10-23 734872]
AutoCAD-Startbeschleuniger.lnk - c:\program files\Common Files\Autodesk Shared\acstart16.exe [2005-3-5 10872]
Bluetooth Manager.lnk - c:\program files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe [2007-5-22 2756608]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aawservice]
@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]
"{CFC1F61E-E161-46C3-A02D-9998C0FA2A6E}"= UDP:c:\spiele\FIFI08\FIFA08.exe:FIFA 08
"{4F669F32-08B8-40BC-A42C-4852A33B4698}"= TCP:c:\spiele\FIFI08\FIFA08.exe:FIFA 08
"{692D0822-7870-4B13-B0F2-2D3E0A3E4CA8}"= TCP:6004|c:\program files\Microsoft Office\Office12\outlook.exe:Microsoft Office Outlook
"{BE77DEB0-A74D-4B76-AB27-312592D17148}"= UDP:c:\program files\Microsoft Office\Office12\GROOVE.EXE:Microsoft Office Groove
"{F692DE8E-43A8-4799-A2B9-62AA5909EDB8}"= TCP:c:\program files\Microsoft Office\Office12\GROOVE.EXE:Microsoft Office Groove
"{9B037490-0262-4A5D-AF8E-1E3AAC831645}"= UDP:c:\program files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
"{A9E06124-19BD-44BA-8196-33CBF03FBD54}"= TCP:c:\program files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
"{2C887DB1-CBBD-4165-8B69-A95286F4D03B}"= UDP:c:\programme\Matlab\bin\win32\matlab.exe:MATLAB 6.5
"{310BE0CB-D06C-4DC5-A990-6C1FE3A140A9}"= TCP:c:\programme\Matlab\bin\win32\matlab.exe:MATLAB 6.5
"{B60F3575-9A94-4D12-BC38-7C9221B65F85}"= UDP:c:\spiele\CallOfDuty\iw3mp.exe:Call of Duty(R) 4 - Modern Warfare(TM)
"{AA74888E-06E0-40D3-A523-8B1E3372EF61}"= TCP:c:\spiele\CallOfDuty\iw3mp.exe:Call of Duty(R) 4 - Modern Warfare(TM)
"TCP Query User{4E0F5FA6-8C47-43D2-A770-3FC600387095}c:\\spiele\\flat out 2\\flatout2.exe"= UDP:c:\spiele\flat out 2\flatout2.exe:FlatOut2
"UDP Query User{7AB11537-1AE7-4586-B150-86CD80C59ED4}c:\\spiele\\flat out 2\\flatout2.exe"= TCP:c:\spiele\flat out 2\flatout2.exe:FlatOut2
"{77C37AFC-E9FF-4822-8DE3-58A15E9184A2}"= Disabled:UDP:c:\program files\Autodesk Architectural Desktop 3 Deu\pman32.exe:AutoCAD Lizenzierungsdienstprogramm
"{67FCB941-DB82-4B38-B6DF-132098D33944}"= Disabled:TCP:c:\program files\Autodesk Architectural Desktop 3 Deu\pman32.exe:AutoCAD Lizenzierungsdienstprogramm
"{11AD94C1-1583-4EA7-BB9C-EE4ED84AD7FB}"= Disabled:UDP:c:\program files\Autodesk\Autodesk DWF Viewer\DwfViewer.exe:Autodesk DWF Viewer
"{9E21BC45-6B27-456D-BC4B-37A73E30D674}"= Disabled:TCP:c:\program files\Autodesk\Autodesk DWF Viewer\DwfViewer.exe:Autodesk DWF Viewer
"{7DE9B370-59F0-4A95-A59D-8724BCC0EFE9}"= UDP:c:\program files\LimeWire\LimeWire.exe:LimeWire
"{21D22EB1-48DF-41C6-8A80-4D0E2614AE01}"= TCP:c:\program files\LimeWire\LimeWire.exe:LimeWire
"{857ABAE5-B852-4B43-A1DD-02C3EF4C554B}"= Disabled:UDP:c:\program files\Skype\Phone\Skype.exe:Skype
"{362A1C43-3D94-4ABD-A027-E1D5DB410061}"= Disabled:TCP:c:\program files\Skype\Phone\Skype.exe:Skype
"{15C1DAB2-6224-4140-8D29-6FB77F7B9B9C}"= Disabled:UDP:c:\program files\Skype\Phone\Skype.exe:Skype
"{BAF6889C-9F4B-4BD9-A06E-7E519C652F89}"= TCP:c:\program files\Skype\Phone\Skype.exe:Skype
"TCP Query User{AAF2D74F-D330-48EB-A352-686F75970E45}c:\\program files\\mp4 player\\bsplayerpro\\bsplayer.exe"= UDP:c:\program files\mp4 player\bsplayerpro\bsplayer.exe:BS.Player
"UDP Query User{ADB5FC04-74A0-4D04-8EA9-42E334D12932}c:\\program files\\mp4 player\\bsplayerpro\\bsplayer.exe"= TCP:c:\program files\mp4 player\bsplayerpro\bsplayer.exe:BS.Player
"{2A47F4A9-F1CD-460C-875A-22FFB7268A96}"= Profile=Public|c:\program files\Drucker\Digital Imaging\bin\hpqtra08.exe:hpqtra08.exe
"{E371EE85-0481-42B2-AE0F-68048FF6E589}"= Profile=Public|c:\program files\Drucker\Digital Imaging\bin\hpqste08.exe:hpqste08.exe
"{C2C8E62A-2AB0-4114-802D-FCFEF7ADE31C}"= Profile=Public|c:\program files\Drucker\Digital Imaging\bin\hposid01.exe:hposid01.exe
"{7F63666A-1E2A-477E-A9CA-217530B2B04D}"= Profile=Public|c:\program files\Common Files\HP\Digital Imaging\bin\hpqphotocrm.exe:hpqphotocrm.exe
"{8BC4E6B5-E666-49D3-A6C2-58D811CA842B}"= Profile=Public|c:\program files\Drucker\Digital Imaging\bin\hpqsudi.exe:hpqsudi.exe
"{CFC590B3-E3C7-4016-8E6B-E87CCB5974D1}"= Profile=Public|c:\program files\Drucker\Digital Imaging\bin\hpqpsapp.exe:hpqpsapp.exe
"{EEFF0C91-F67B-4B8B-9CD5-227D32761CAB}"= Profile=Public|c:\program files\Drucker\Digital Imaging\bin\hpqpse.exe:hpqpse.exe
"TCP Query User{2E3586BE-8446-4ACE-ACAA-9A7C7A5E5E40}c:\\program files\\matlab\\bin\\win32\\matlab.exe"= UDP:c:\program files\matlab\bin\win32\matlab.exe:MATLAB
"UDP Query User{D4814B7D-2007-4517-BBA4-6C2CB6F5A902}c:\\program files\\matlab\\bin\\win32\\matlab.exe"= TCP:c:\program files\matlab\bin\win32\matlab.exe:MATLAB
"{D9CE1BDF-220C-45CE-97C6-0A4E054ACD73}"= c:\program files\Skype\Phone\Skype.exe:Skype
"{A9F0F49A-59CF-47D0-B380-498BD866633C}"= c:\program files\Skype\Phone\Skype.exe:Skype
"{23CB0B3D-98A9-4274-8AC6-FEE7C7E6139F}"= c:\program files\Skype\Phone\Skype.exe:Skype
"{FF479D79-1E8B-4D76-B40F-1E3FDDA17BEB}"= Disabled:c:\program files\Drucker\Digital Imaging\bin\hposid01.exe:hposid01.exe
"{B58430AD-C94D-4FCD-AE80-A1E5BAD0C696}"= Disabled:c:\program files\Common Files\HP\Digital Imaging\bin\hpqphotocrm.exe:hpqphotocrm.exe
"{98E397DC-498D-422F-9504-B96C5D841750}"= Disabled:c:\program files\Drucker\Digital Imaging\bin\hpqpsapp.exe:hpqpsapp.exe
"{E0011C75-21A1-4CC1-B3AF-9B2BE06F6A50}"= Disabled:c:\program files\Drucker\Digital Imaging\bin\hpqpse.exe:hpqpse.exe
"{CEFCB89F-977B-4BAA-B7AB-B8D66F6F0571}"= Disabled:c:\program files\Drucker\Digital Imaging\bin\hpqste08.exe:hpqste08.exe
"{47835FC4-41C9-46A9-AB94-A1B8B0E6866F}"= Disabled:c:\program files\Drucker\Digital Imaging\bin\hpqsudi.exe:hpqsudi.exe
"{CE8B893B-67A0-477A-8247-2578994BB7F7}"= Disabled:c:\program files\Drucker\Digital Imaging\bin\hpqtra08.exe:hpqtra08.exe
"{9F3A2F2A-2247-448F-B1B0-890DFFE2468B}"= c:\program files\Skype\Phone\Skype.exe:Skype
"{6282CA53-5071-422B-8D91-3115C196AE60}"= c:\program files\Skype\Phone\Skype.exe:Skype
"{D5D4543E-EA06-4A84-B2B8-C30E91FA1DB6}"= c:\program files\Skype\Phone\Skype.exe:Skype
"{A087E06B-50E1-4055-A64C-0C121F4BBE0A}"= UDP:c:\program files\Telekom Austria\Breitband-Internet-Installation\fixnet installer\Installer.exe:Breitband-Internet-Installation
"{6872BC02-E46D-4A34-996F-A9B711F8DA4C}"= TCP:c:\program files\Telekom Austria\Breitband-Internet-Installation\fixnet installer\Installer.exe:Breitband-Internet-Installation
"{5996B2CF-144C-4ADB-94EC-16EF33BD3885}"= c:\program files\Skype\Phone\Skype.exe:Skype

R0 sfdrv01a;StarForce Protection Environment Driver (version 1.x.a);c:\windows\System32\drivers\sfdrv01a.sys [05.07.2006 14:46 63352]
R2 FreeAgentGoNext Service;Seagate Service;c:\program files\Seagate\SeagateManager\Sync\FreeAgentService.exe [27.03.2009 15:54 165160]
R2 StkSSrv;Syntek AVStream USB2.0 WebCam Service;c:\windows\System32\StkCSrv.exe [07.02.2007 12:44 24576]
R3 itecir;ITECIR Infrared Receiver;c:\windows\System32\drivers\itecir.sys [07.09.2007 00:03 45568]
R3 StkCMini;Syntek AVStream USB2.0 1.3M WebCam;c:\windows\System32\drivers\StkCMini.sys [13.02.2007 06:41 1245056]
S2 aawserviceADSMService;Ad-Aware 2007 Service aawserviceADSMService;c:\windows\TEMP\uflaavxnka.exe service --> c:\windows\TEMP\uflaavxnka.exe service [?]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
bthsvcs REG_MULTI_SZ BthServ
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
.
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = hxxp://www.daemon-search.com/startpage
uInternet Settings,ProxyOverride = *.local
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: Senden an &Bluetooth - c:\program files\Bluetooth\btsendto_ie_ctx.htm
TCP: {12599AE3-12D1-48DE-A035-627173664419} = 192.168.1.1
FF - ProfilePath - c:\users\Wolfgang\AppData\Roaming\Mozilla\Firefox\Profiles\g3gk2f0y.default\
FF - plugin: c:\program files\Firefox\plugins\np-mswmp.dll
FF - plugin: c:\program files\Virtools\3D Life Player\npvirtools.dll
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -

AddRemove-BSPlayerp - c:\program files\mp4 player\BSplayerPro\uninstall.exe
AddRemove-ODBC - c:\windows\IsUninst.exe -fc:\program files\ODBC-DAO-RDO\ODBC\Uninst.isu
AddRemove-TotalBF2 Map Pack 3 - c:\spiele\Battlefield2\Uninstal.exe
AddRemove-{D10AB8DE-0ED1-4152-A247-FB89CF1435D5} - c:\program files\Drucker\Digital Imaging\{D10AB8DE-0ED1-4152-A247-FB89CF1435D5}\setup\hpzscr01.exe -datfile hphscr25.dat



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-09-14 20:13
Windows 6.0.6001 Service Pack 1 NTFS

Scanne versteckte Prozesse...

Scanne versteckte Autostarteinträge...

Scanne versteckte Dateien...


c:\users\Wolfgang\AppData\Local\Temp\catchme.dll 53248 bytes executable
C:\ADSM_PData_0150

Scan erfolgreich abgeschlossen
versteckte Dateien: 2

**************************************************************************
.
--------------------- Gesperrte Registrierungsschluessel ---------------------

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
"MSCurrentCountry"=dword:000000b5

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
Zeit der Fertigstellung: 2009-09-14 20:16
ComboFix-quarantined-files.txt 2009-09-14 18:16
ComboFix2.txt 2009-09-14 12:15

Vor Suchlauf: 18 Verzeichnis(se), 28.138.696.704 Bytes frei
Nach Suchlauf: 19 Verzeichnis(se), 28.648.153.088 Bytes frei

218 --- E O F --- 2009-03-05 10:03

Zitat von raman

Sehr schoen, bitte nochmal ein Cf Report und aktualisiere dein Mbam erneut und schaue, ob die Packermeldungen noch auftauchen...

hört sich vieleicht blöd an, aber wie mach ich den Cf Report??