kann es sein, dass wen Malwarebytes scannt und ich gleichzeitig im internet bin, mein pc auf grund dessen abschmiert (bluescreen)?!

Eher nicht. Aber teste es doch einfach. Dass Du nichts machen solltest, während Malwarebytes scant, sollte ja klar sein, aber Du kannst ja Malwarebytes nochmal starten, dann sofort aktualisieren und wenn das Update fertig ist, die Internetverbindung deaktivieren (Kabel ziehen oder Router/Modem ausschalten) und dann einen weiteren Vollscan ausführen.


Probier danach mal ein Log mit CF zu erstellen:

ComboFix

Ein Leitfaden und Tutorium zur Nutzung von ComboFix

• Lade dir ComboFix hier herunter auf deinen Desktop. Benenne es beim Runterladen um in cofi.exe.

• Dann folgende Anleitung durchlesen und abarbeiten -> CCleaner Systembereinigung

• Schliesse alle Programme, vor allem dein Antivirenprogramm und andere Hintergrundwächter sowie deinen Internetbrowser.

• Starte cofi.exe von deinem Desktop aus, bestätige die Warnmeldungen, führe die Updates durch (falls vorgeschlagen), installiere die Wiederherstellungskonsole (falls vorgeschlagen) und lass dein System durchsuchen.
  Vermeide es auch während Combofix läuft die Maus und Tastatur zu benutzen.

• Im Anschluss öffnet sich automatisch eine combofix.txt, diesen Inhalt bitte kopieren ([Strg]a, [Strg]c) und in deinen Beitrag einfügen ([Strg]v). Die Datei findest du außerdem unter: C:\ComboFix.txt.

Wichtiger Hinweis:

Combofix darf ausschließlich ausgeführt werden, wenn ein Kompetenzler dies ausdrücklich empfohlen hat!
Es sollte nie auf eigene Initiative hin ausgeführt werden! Eine falsche Benutzung kann ernsthafte Computerprobleme nach sich ziehen und eine Bereinigung der Infektion noch erschweren.

hallo, so ich habe alles gemacht wie du gesagt hast und hier ist das log von combofix

ComboFix 10-02-12.01 - Tool Pusher 16.02.2010 21:20:22.4.2 - x86
Microsoft Windows 7 Home Premium 6.1.7600.0.1252.43.1031.18.3070.2236 [GMT 1:00]
ausgeführt von:: c:\users\Tool Pusher\Desktop\cofi.exe
SP: Spybot - Search and Destroy *disabled* (Updated) {ED588FAF-1B8F-43B4-ACA8-8E3C85DADBE9}
.

(((((((((((((((((((((((((((((((((((( Weitere Löschungen ))))))))))))))))))))))))))))))))))))))))))))))))
.

Infizierte Kopie von c:\windows\system32\DRIVERS\iaStor.sys wurde gefunden und desinfiziert
Kopie von - Kitty ate it wurde wiederhergestellt
.
((((((((((((((((((((((( Dateien erstellt von 2010-01-16 bis 2010-02-16 ))))))))))))))))))))))))))))))
.

2010-02-16 20:26 . 2010-02-16 20:28 -------- d-----w- c:\users\Tool Pusher\AppData\Local\temp
2010-02-16 20:26 . 2010-02-16 20:26 -------- d-----w- c:\users\Public\AppData\Local\temp
2010-02-16 20:26 . 2010-02-16 20:26 -------- d-----w- c:\users\Default\AppData\Local\temp
2010-02-16 19:40 . 2010-02-16 19:55 -------- d-----w- C:\cofi
2010-02-15 09:43 . 2010-02-15 09:43 -------- d-----w- c:\program files\iPod
2010-02-15 09:43 . 2010-02-15 09:44 -------- d-----w- c:\program files\iTunes
2010-02-15 09:29 . 2010-02-15 09:29 72488 ----a-w- c:\programdata\Apple Computer\Installer Cache\iTunes 9.0.3.15\SetupAdmin.exe
2010-02-10 09:46 . 2010-02-14 20:21 -------- d-----w- C:\rsit
2010-02-10 09:46 . 2010-02-14 20:21 -------- d-----w- c:\program files\trend micro
2010-02-09 12:47 . 2010-02-09 12:47 -------- d-----w- c:\program files\CCleaner
2010-02-09 10:55 . 2010-02-09 13:34 52224 ----a-w- c:\users\Tool Pusher\AppData\Roaming\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10005.dll
2010-02-09 10:55 . 2010-02-09 13:34 117760 ----a-w- c:\users\Tool Pusher\AppData\Roaming\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\UIREPAIR.DLL
2010-02-09 10:52 . 2010-02-09 10:52 -------- d-----w- c:\programdata\SUPERAntiSpyware.com
2010-02-09 10:51 . 2010-02-09 10:51 -------- d-----w- c:\program files\SUPERAntiSpyware
2010-02-09 10:51 . 2010-02-09 10:51 -------- d-----w- c:\users\Tool Pusher\AppData\Roaming\SUPERAntiSpyware.com
2010-02-09 10:49 . 2010-02-09 10:49 -------- d-----w- c:\program files\Common Files\Wise Installation Wizard
2010-02-09 10:06 . 2010-02-09 10:06 727360 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight-2\SpotlightResources.dll
2010-02-05 17:58 . 2010-02-05 17:58 -------- d-----w- c:\users\Tool Pusher\AppData\Roaming\Malwarebytes
2010-02-05 17:58 . 2010-01-07 15:07 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-02-05 17:58 . 2010-02-05 17:58 -------- d-----w- c:\programdata\Malwarebytes
2010-02-05 17:58 . 2010-02-15 09:25 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-02-05 17:58 . 2010-01-07 15:07 19160 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-02-05 12:09 . 2010-02-11 18:42 162512 ----a-w- c:\windows\system32\drivers\aswSP.sys
2010-02-05 12:09 . 2010-02-11 18:38 19024 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2010-02-05 12:09 . 2010-02-11 18:42 46672 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2010-02-05 12:09 . 2010-02-11 18:39 23376 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2010-02-05 12:09 . 2010-02-11 18:38 51792 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2010-02-05 12:08 . 2010-02-11 18:53 38848 ----a-w- c:\windows\system32\avastSS.scr
2010-02-05 12:08 . 2010-02-11 18:53 153184 ----a-w- c:\windows\system32\aswBoot.exe
2010-02-05 12:08 . 2010-02-05 12:08 -------- d-----w- c:\programdata\Alwil Software
2010-02-05 12:08 . 2010-02-05 12:08 -------- d-----w- c:\program files\Alwil Software
2010-02-02 09:57 . 2010-02-10 09:43 48648 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup-2\Markup.dll
2010-02-01 16:39 . 2010-02-15 18:54 -------- d-----w- c:\users\Tool Pusher\AppData\Roaming\vlc
2010-02-01 15:45 . 2010-02-15 09:03 48648 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup\Markup.dll
2010-02-01 15:44 . 2010-02-15 09:03 727360 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight\SpotlightResources.dll
2010-01-31 20:26 . 2010-01-31 20:26 -------- d-----w- c:\users\Tool Pusher\.jagex_cache_32
2010-01-29 16:14 . 2010-01-29 16:14 -------- d-----w- c:\users\Tool Pusher\AppData\Local\Diagnostics
2010-01-27 15:56 . 2009-10-31 05:45 2614272 ----a-w- c:\windows\explorer.exe
2010-01-27 15:56 . 2009-10-28 06:17 285696 ----a-w- c:\windows\system32\winlogon.exe
2010-01-22 13:06 . 2009-12-19 09:02 977920 ----a-w- c:\windows\system32\wininet.dll
2010-01-20 09:24 . 2010-01-20 09:24 -------- d-----w- c:\programdata\Office Genuine Advantage
2010-01-20 09:24 . 2010-01-20 09:24 -------- d-----w- c:\users\Tool Pusher\Office Genuine Advantage

.
(((((((((((((((((((((((((((((((((((( Find3M Bericht ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-02-16 20:26 . 2009-07-14 08:47 240294 ----a-w- c:\windows\system32\perfc007.dat
2010-02-16 20:26 . 2009-07-14 08:47 1009166 ----a-w- c:\windows\system32\perfh007.dat
2010-02-16 20:15 . 2009-11-25 21:11 -------- d-----w- c:\programdata\Spybot - Search & Destroy
2010-02-16 15:56 . 2009-10-21 19:56 -------- d-----w- c:\users\Tool Pusher\AppData\Roaming\BitTorrent
2010-02-15 09:43 . 2009-12-06 17:16 -------- d-----w- c:\program files\Common Files\Apple
2010-02-15 09:18 . 2009-10-21 20:18 69 ----a-w- c:\users\Tool Pusher\jagex_runescape_preferences.dat
2010-02-15 09:15 . 2009-10-21 20:20 69 ----a-w- c:\users\Tool Pusher\jagex_runescape_preferences2.dat
2010-02-14 14:31 . 2009-11-09 12:10 -------- d-----w- c:\users\Tool Pusher\AppData\Roaming\3DataManager
2010-02-14 11:54 . 2009-06-24 11:09 -------- d-----w- c:\programdata\Microsoft Help
2010-02-09 10:57 . 2009-11-25 21:11 -------- d-----w- c:\program files\Spybot - Search & Destroy
2010-02-09 01:11 . 2009-12-19 23:29 330264 ----a-w- c:\windows\system32\drivers\iaStor.sys
2010-02-03 14:15 . 2009-06-24 10:47 -------- d-----w- c:\program files\Common Files\Adobe
2010-01-26 16:28 . 2009-12-26 14:18 -------- d-----w- c:\users\Tool Pusher\AppData\Roaming\PrimoPDF
2010-01-20 23:03 . 2009-12-06 17:20 -------- d-----w- c:\users\Tool Pusher\AppData\Roaming\Apple Computer
2010-01-18 23:29 . 2010-02-11 08:39 85504 ----a-w- c:\windows\system32\secproc_ssp_isv.dll
2010-01-18 23:29 . 2010-02-11 08:39 85504 ----a-w- c:\windows\system32\secproc_ssp.dll
2010-01-18 23:29 . 2010-02-11 08:39 365568 ----a-w- c:\windows\system32\secproc_isv.dll
2010-01-18 23:29 . 2010-02-11 08:39 369152 ----a-w- c:\windows\system32\secproc.dll
2010-01-18 23:28 . 2010-02-11 08:39 324608 ----a-w- c:\windows\system32\RMActivate_isv.exe
2010-01-18 23:28 . 2010-02-11 08:39 277504 ----a-w- c:\windows\system32\RMActivate_ssp_isv.exe
2010-01-18 23:28 . 2010-02-11 08:39 320512 ----a-w- c:\windows\system32\RMActivate.exe
2010-01-18 23:28 . 2010-02-11 08:39 280064 ----a-w- c:\windows\system32\RMActivate_ssp.exe
2010-01-17 14:25 . 2009-12-06 13:22 1670624 ----a-w- c:\programdata\WildTangent\TOSHIBA Game Console\Downloads\de\Installers\SetupGamesClient.exe
2010-01-17 13:28 . 2010-01-17 13:28 -------- d-----w- c:\program files\Common Files\Deterministic Networks
2010-01-17 13:28 . 2010-01-17 13:28 -------- d-----w- c:\program files\Cisco Systems
2010-01-13 18:17 . 2009-10-29 14:27 -------- d-----w- c:\users\Tool Pusher\AppData\Roaming\dvdcss
2010-01-08 21:23 . 2010-01-08 21:23 0 ---ha-w- c:\windows\system32\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
2010-01-08 03:18 . 2010-02-11 08:39 221184 ----a-w- c:\windows\system32\drivers\mrxsmb10.sys
2010-01-08 03:17 . 2010-02-11 08:39 123392 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
2009-12-26 14:16 . 2009-12-26 14:16 -------- d-----w- c:\program files\Nitro PDF
2009-12-23 16:13 . 2009-12-23 16:13 -------- d-----w- c:\program files\Microsoft
2009-12-23 16:13 . 2009-12-23 16:13 -------- d-----w- c:\program files\Windows Live
2009-12-23 16:13 . 2009-12-23 16:13 -------- d-----w- c:\program files\Windows Live SkyDrive
2009-12-23 16:09 . 2009-12-23 16:09 -------- d-----w- c:\program files\Common Files\Windows Live
2009-12-20 10:42 . 2009-12-20 10:42 0 ---ha-w- c:\windows\system32\drivers\Msft_User_WpdFs_01_09_00.Wdf
2009-12-19 23:33 . 2009-06-24 10:38 -------- d--h--w- c:\program files\InstallShield Installation Information
2009-12-19 23:31 . 2009-12-19 23:31 -------- d-----w- c:\program files\Realtek WLAN Driver
2009-12-19 23:30 . 2009-12-19 21:59 -------- d-----w- c:\program files\Realtek
2009-12-19 23:28 . 2009-12-19 23:28 -------- d-----w- c:\programdata\ATI
2009-12-19 23:28 . 2009-08-24 00:21 -------- d-----w- c:\program files\ATI Technologies
2009-12-19 23:26 . 2009-12-19 23:26 10134 ----a-r- c:\users\Tool Pusher\AppData\Roaming\Microsoft\Installer\{E25FA4E1-678F-414F-9777-1E3FDBBDA4D1}\ARPPRODUCTICON.exe
2009-12-19 22:53 . 2009-12-19 22:53 -------- d-----w- c:\program files\Common Files\Toshiba Shared
2009-12-19 22:53 . 2009-08-24 00:40 -------- d-----w- c:\programdata\Toshiba
2009-12-19 22:53 . 2009-06-24 10:41 -------- d-----w- c:\program files\TOSHIBA
2009-12-19 22:52 . 2009-12-19 22:52 -------- d-----w- c:\users\Tool Pusher\AppData\Roaming\InstallShield
2009-12-19 22:46 . 2009-12-19 22:46 110816 ----a-w- c:\users\Tool Pusher\AppData\Local\GDIPFONTCACHEV1.DAT
2009-12-19 22:40 . 2009-12-19 22:40 -------- d-sh--we c:\programdata\Vorlagen
2009-12-19 22:40 . 2009-12-19 22:40 -------- d-sh--we c:\programdata\Startmenü
2009-12-19 22:40 . 2009-12-19 22:40 -------- d-sh--we c:\programdata\Favoriten
2009-12-19 22:40 . 2009-12-19 22:40 -------- d-sh--we c:\programdata\Dokumente
2009-12-19 22:40 . 2009-12-19 22:40 -------- d-sh--we c:\programdata\Anwendungsdaten
2009-12-19 22:40 . 2009-12-19 22:40 -------- d-sh--we c:\program files\Gemeinsame Dateien
2009-12-19 22:22 . 2009-12-19 22:22 21532 ----a-w- c:\windows\system32\emptyregdb.dat
2009-12-19 22:17 . 2009-12-19 18:45 -------- d-----w- c:\users\Tool Pusher\AppData\Roaming\WinBatch
2009-12-19 22:17 . 2009-10-22 08:22 -------- d-----w- c:\users\Tool Pusher\AppData\Roaming\WildTangent
2009-12-19 22:17 . 2009-11-05 18:24 -------- d-----w- c:\users\Tool Pusher\AppData\Roaming\TOSHIBA
2009-12-19 22:17 . 2009-10-25 11:38 -------- d-----w- c:\users\Tool Pusher\AppData\Roaming\Ubisoft
2009-12-19 22:17 . 2009-10-21 19:48 -------- d-----w- c:\users\Tool Pusher\AppData\Roaming\TuneUp Software
2009-12-19 22:17 . 2009-10-21 17:59 -------- d-----w- c:\users\Tool Pusher\AppData\Roaming\Program Files
2009-12-19 22:17 . 2009-10-21 17:39 -------- d-----w- c:\users\Tool Pusher\AppData\Roaming\ATI
2009-12-19 22:08 . 2009-12-06 17:19 -------- d-----w- c:\programdata\{755AC846-7372-4AC8-8550-C52491DAA8BD}
2009-12-19 22:08 . 2009-10-21 19:47 -------- d-sh--w- c:\programdata\{55A29068-F2CE-456C-9148-C869879E2357}
2009-12-19 22:08 . 2009-06-24 11:13 -------- d-----w- c:\programdata\{174892B1-CBE7-44F5-86FF-AB555EFD73A3}
2009-12-19 22:05 . 2009-12-06 17:18 -------- d-----w- c:\program files\QuickTime
2009-12-19 22:05 . 2009-07-14 04:52 -------- d-----w- c:\program files\MSBuild
2009-12-19 22:05 . 2009-10-22 17:31 -------- d-----w- c:\program files\Microsoft.NET
2009-12-19 22:05 . 2009-10-22 17:29 -------- d-----w- c:\program files\Microsoft Visual Studio 8
2009-12-19 22:05 . 2009-06-24 11:11 -------- d-----w- c:\program files\Microsoft Works
2009-12-19 22:04 . 2009-07-14 04:52 -------- d-----w- c:\program files\Microsoft Games
2009-12-19 22:04 . 2009-06-24 10:42 -------- d-----w- c:\program files\Java
2009-12-19 22:03 . 2009-06-24 10:27 -------- d-----w- c:\program files\Intel
2009-12-19 22:03 . 2009-10-29 14:32 -------- d-----w- c:\program files\Free DVD Ripper
2009-12-19 22:03 . 2009-10-22 17:22 -------- d-----w- c:\program files\DAEMON Tools
2009-12-19 22:03 . 2009-06-24 11:02 -------- d-----w- c:\program files\eBay
2009-12-19 22:03 . 2009-06-24 10:58 -------- d-----w- c:\program files\Google
2009-12-19 22:03 . 2009-06-24 10:40 -------- d-----w- c:\program files\Common Files\InstallShield
2009-12-19 22:03 . 2009-08-24 00:44 -------- d-----w- c:\program files\Camera Assistant Software for Toshiba
2009-12-19 22:03 . 2009-12-06 17:19 -------- d-----w- c:\program files\Bonjour
2009-12-19 22:03 . 2009-10-21 19:54 -------- d-----w- c:\program files\BitTorrent
2009-12-19 22:03 . 2009-08-24 00:21 -------- d-----w- c:\program files\ATI
2009-12-19 22:02 . 2009-12-06 17:18 -------- d-----w- c:\program files\Apple Software Update
2009-12-19 22:02 . 2009-11-30 18:23 -------- d-----w- c:\program files\Ashampoo
2009-12-19 22:02 . 2009-06-24 11:02 -------- d-----w- c:\program files\Amazon
2009-12-19 22:02 . 2009-06-24 11:13 -------- d-----w- c:\program files\Activation Assistant for the 2007 Microsoft Office suites
2009-12-19 22:02 . 2009-11-09 12:06 -------- d-----w- c:\program files\3DataManager
2009-12-19 22:02 . 2009-11-09 12:08 -------- d-----w- c:\program files\3-addons
2009-12-19 21:59 . 2009-12-19 21:59 0 ---ha-w- c:\windows\system32\drivers\Msft_Kernel_SynTP_01007.Wdf
2009-12-19 21:59 . 2009-12-19 21:59 0 ----a-w- c:\windows\ativpsrm.bin
2009-12-19 21:59 . 2009-12-19 21:59 -------- d-----w- c:\program files\Synaptics
2009-12-19 18:49 . 2009-08-24 00:32 319456 ----a-w- c:\windows\DIFxAPI.dll
2009-12-19 09:02 . 2010-02-11 08:39 12288 ----a-w- c:\windows\system32\tsbyuv.dll
2009-12-19 09:02 . 2010-02-11 08:39 1328640 ----a-w- c:\windows\system32\quartz.dll
2009-12-19 09:02 . 2010-02-11 08:39 22016 ----a-w- c:\windows\system32\msyuv.dll
2009-12-19 09:02 . 2010-02-11 08:39 31744 ----a-w- c:\windows\system32\msvidc32.dll
2009-12-19 09:02 . 2010-02-11 08:39 13312 ----a-w- c:\windows\system32\msrle32.dll
2009-12-19 09:02 . 2010-02-11 08:39 84480 ----a-w- c:\windows\system32\mciavi32.dll
2009-12-19 09:02 . 2010-02-11 08:39 50176 ----a-w- c:\windows\system32\iyuv_32.dll
2009-12-19 09:02 . 2010-02-11 08:39 91648 ----a-w- c:\windows\system32\avifil32.dll
2009-12-08 08:05 . 2010-02-11 08:39 310784 ----a-w- c:\windows\system32\drivers\srv.sys
2009-12-08 08:05 . 2010-02-11 08:39 113664 ----a-w- c:\windows\system32\drivers\srvnet.sys
2009-06-10 21:26 . 2009-07-14 02:04 9633792 --sha-r- c:\windows\Fonts\StaticCache.dat
2009-07-14 01:14 . 2009-07-13 23:42 396800 --sha-w- c:\windows\winsxs\x86_microsoft-windows-mail-app_31bf3856ad364e35_6.1.7600.16385_none_f12e83abb108c86c\WinMail.exe
.

(((((((((((((((((((((((((((( Autostartpunkte der Registrierung ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SpybotSD TeaTimer"="c:\program files\Spybot - Search & Destroy\TeaTimer.exe" [2009-03-05 2260480]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2008-08-14 1348904]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RtHDVCpl.exe" [2009-07-28 7625248]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2008-10-25 31072]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2009-11-10 417792]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2009-07-29 98304]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-12-22 35760]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2009-12-11 948672]
"avast5"="c:\progra~1\ALWILS~1\Avast5\avastUI.exe" [2010-02-11 2756488]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2010-01-22 141608]
" Malwarebytes Anti-Malware (reboot)"="c:\program files\Malwarebytes' Anti-Malware\mbam.exe" [2010-01-07 1394000]

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
VPN Client.lnk - c:\windows\Installer\{A7091E1D-36A4-47F1-A739-173CC341414F}\Icon3E5562ED7.ico [2010-1-17 6144]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2008-05-13 77824]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
2009-09-03 13:21 548352 ----a-w- c:\program files\SUPERAntiSpyware\SASWINLO.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux1"=wdmaud.drv

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sr.sys]
@="FSFilter System Recovery"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\setup\disabledrunkeys]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun

R1 aswSP;aswSP;c:\windows\System32\drivers\aswSP.sys [05.02.2010 13:09 162512]
R1 RtlProt;Realtke RtlProt WLAN Utility Protocol Driver;c:\windows\System32\drivers\RtlProt.sys [24.08.2009 01:43 25896]
R1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\sasdifsv.sys [05.01.2010 07:56 9968]
R1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [05.01.2010 07:56 74480]
R1 vwififlt;Virtual WiFi Filter Driver;c:\windows\System32\drivers\vwififlt.sys [14.07.2009 00:52 48128]
R2 AMD External Events Utility;AMD External Events Utility;c:\windows\System32\atiesrxx.exe [20.12.2009 00:26 176128]
R2 aswFsBlk;aswFsBlk;c:\windows\System32\drivers\aswFsBlk.sys [05.02.2010 13:09 19024]
R2 aswMonFlt;aswMonFlt;c:\windows\System32\drivers\aswMonFlt.sys [05.02.2010 13:09 51792]
R2 cfWiMAXService;ConfigFree WiMAX Service;c:\program files\TOSHIBA\ConfigFree\CFIWmxSvcs.exe [10.08.2009 19:55 185712]
R2 ConfigFree Service;ConfigFree Service;c:\program files\TOSHIBA\ConfigFree\CFSvcs.exe [10.03.2009 18:51 46448]
R2 SBSDWSCService;SBSD Security Center Service;c:\program files\Spybot - Search & Destroy\SDWinSec.exe [25.11.2009 22:11 1153368]
R2 TMachInfo;TMachInfo;c:\program files\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe [24.08.2009 01:40 62776]
R2 WTGService;WTGService;c:\program files\3DataManager\WTGService.exe [09.11.2009 13:06 308688]
R3 FwLnk;FwLnk Driver;c:\windows\System32\drivers\FwLnk.sys [20.12.2009 00:33 7680]
R3 rtl819xp;Realtek RTL8190\RTL8192E 802.11n Wireless LAN (Mini-) PCI NIC-NT-Treiber;c:\windows\System32\drivers\rtl819xp.sys [20.12.2009 00:31 546304]
R3 SmartFaceVWatchSrv;SmartFaceVWatchSrv;c:\program files\TOSHIBA\SmartFaceV\SmartFaceVWatchSrv.exe [25.08.2008 08:58 77824]
S0 sptd;sptd;c:\windows\System32\drivers\sptd.sys [22.10.2009 18:11 682232]
S3 ASPI;Advanced SCSI Programming Interface Driver;c:\windows\System32\drivers\ASPI32.SYS [29.10.2009 15:32 84832]
S3 DfSdkS;Defragmentation-Service;c:\program files\Ashampoo\Ashampoo WinOptimizer 6\DfSdkS.exe [30.11.2009 19:23 406016]
S3 massfilter;ZTE Mass Storage Filter Driver;c:\windows\System32\drivers\massfilter.sys [09.11.2009 13:06 9216]

--- Andere Dienste/Treiber im Speicher ---

*Deregistered* - avgntflt
.
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = hxxp://www.ask.com?o=14978&l=dis
uInternet Settings,ProxyOverride = *.local
IE: Nach Microsoft E&xel exportieren - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: {{76577871-04EC-495E-A12B-91F7C3600AFA} - http://rover.ebay.com/rover/1/707-44556-9400-3/4
IE: {{8A918C1D-E123-4E36-B562-5C1519E434CE} - http://www.amazon.de/exec/obidos/redirect-home?tag=Toshibadebholink-21&site=home
FF - ProfilePath - c:\users\Tool Pusher\AppData\Roaming\Mozilla\Firefox\Profiles\bnhy5ska.default\
FF - prefs.js: browser.search.defaulturl - hxxp://www.bing.com/search?FORM=IEFM1&q=
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxps://studmail.unileoben.ac.at/|https://online.unileoben.ac.at/mu_online/webnav.ini|http://orf.at/#|http://www.bloomberg.com/markets/commodities/energyprices.html
FF - prefs.js: keyword.URL - hxxp://www.bing.com/search?FORM=IEFM1&q=
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- FIREFOX Richtlinien ----
FF - user.js: network.http.max-persistent-connections-per-server - 4
FF - user.js: nglayout.initialpaint.delay - 600
FF - user.js: content.notify.interval - 600000
FF - user.js: content.max.tokenizing.time - 1800000
FF - user.js: content.switch.threshold - 600000
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -

SafeBoot-dmboot.sys
SafeBoot-dmio.sys
SafeBoot-dmload.sys
SafeBoot-dmadmin
SafeBoot-dmserver
SafeBoot-SRService


.
--------------------- Gesperrte Registrierungsschluessel ---------------------

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\windows\system32\atieclxx.exe
c:\program files\Alwil Software\Avast5\AvastSvc.exe
c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\program files\Cisco Systems\VPN Client\cvpnd.exe
c:\windows\system32\TODDSrv.exe
c:\program files\TOSHIBA\Power Saver\TosCoSrv.exe
c:\windows\system32\taskhost.exe
c:\windows\system32\conhost.exe
c:\program files\Alwil Software\Avast5\AvastUI.exe
c:\program files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
c:\program files\Synaptics\SynTP\SynTPHelper.exe
c:\program files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
c:\program files\iPod\bin\iPodService.exe
c:\program files\TOSHIBA\ConfigFree\NDSTray.exe
c:\windows\system32\sppsvc.exe
c:\program files\TOSHIBA\ConfigFree\CFSwMgr.exe
c:\program files\Windows Media Player\wmpnetwk.exe
c:\\?\c:\windows\system32\wbem\WMIADAP.EXE
.
**************************************************************************
.
Zeit der Fertigstellung: 2010-02-16 21:32:03 - PC wurde neu gestartet
ComboFix-quarantined-files.txt 2010-02-16 20:32
ComboFix2.txt 2010-02-16 19:55

Vor Suchlauf: 15 Verzeichnis(se), 97.848.020.992 Bytes frei
Nach Suchlauf: 16 Verzeichnis(se), 97.548.320.768 Bytes frei

- - End Of File - - A24D44499802615001FAD9E7768C50EA