Vermutlich Problem mit Malware/Viurs

ComboFix 11-03-06.05 - Klemens 07.03.2011  13:48:37.1.2 - x86
Microsoft® Windows Vista™ Home Premium   6.0.6002.2.1252.49.1031.18.3066.1821 [GMT 1:00]
ausgeführt von:: c:\users\Klemens\Desktop\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\programdata\Microsoft\Network\Downloader\qmgr0.dat
c:\programdata\Microsoft\Network\Downloader\qmgr1.dat
C:\Recycle.Bin
c:\recycle.bin\config.bin
c:\recycle.bin\Recycle.Bin.exe
c:\windows\system32\LogFiles\Firewall\pfirewall.log
c:\windows\system32\LogFiles\Firewall\pfirewall.log.old
c:\windows\system32\LogFiles\HTTPERR\httperr1.log
c:\windows\system32\LogFiles\Scm\SCM.EVM
c:\windows\system32\LogFiles\Scm\SCM.EVM.1
c:\windows\system32\LogFiles\Scm\SCM.EVM.2
c:\windows\system32\LogFiles\Scm\SCM.EVM.3
c:\windows\system32\LogFiles\Scm\SCM.EVM.4
c:\windows\system32\LogFiles\Scm\SCM.EVM.5
c:\windows\system32\LogFiles\Srt\SrtTrail.txt
c:\windows\system32\LogFiles\WMI\tscore1.etl
c:\windows\system32\LogFiles\WMI\tscore2.etl
c:\windows\system32\LogFiles\WUDF\WUDFTrace.etl
c:\windows\system32\ui
c:\windows\system32\ui\BANNER\LOADINGEVENT1.SOR
c:\windows\system32\ui\BANNER\LOADINGEVENT2.SOR
c:\windows\system32\ui\BANNER\LOADINGEVENT3.SOR
c:\windows\system32\ui\BANNER\LOADINGEVENT4.SOR
c:\windows\system32\ui\BANNER\LOADINGEVENT5.SOR
c:\windows\system32\ui\BANNER\LOADINGIMGOPT.SOR
c:\windows\system32\ui\BANNER\NOTICE_BANNER1.SOR
c:\windows\system32\ui\BANNER\NOTICE_BANNER2.SOR
c:\windows\system32\ui\BANNER\NOTICE_BANNER3.SOR
c:\windows\system32\ui\BANNER\NOTICE_BANNER4.SOR
c:\windows\system32\ui\BANNER\NOTICE_BANNER5.SOR
.
----- BITS: Eventuell infizierte Webseiten -----
.
hxxp://ads1.msads.net
.
(((((((((((((((((((((((   Dateien erstellt von 2011-02-07 bis 2011-03-07  ))))))))))))))))))))))))))))))
.
.
2011-03-07 12:57 . 2011-03-07 12:57	--------	d-----w-	c:\users\Klemens\AppData\Local\temp
2011-03-07 12:57 . 2011-03-07 12:57	--------	d-----w-	c:\users\Default\AppData\Local\temp
2011-03-07 12:22 . 2011-03-07 12:22	--------	d-----w-	c:\program files\Common Files\Java
2011-03-05 21:26 . 2011-02-02 20:40	472808	----a-w-	c:\program files\Mozilla Firefox\plugins\npdeployJava1.dll
2011-03-05 21:26 . 2011-02-02 20:40	472808	----a-w-	c:\windows\system32\deployJava1.dll
2011-03-05 21:13 . 2011-03-05 21:13	--------	d-----w-	c:\program files\Microsoft Silverlight
2011-03-05 17:04 . 2010-12-20 17:09	38224	----a-w-	c:\windows\system32\drivers\mbamswissarmy.sys
2011-03-05 17:04 . 2010-12-20 17:08	20952	----a-w-	c:\windows\system32\drivers\mbam.sys
2011-03-05 16:28 . 2011-03-06 10:18	--------	d-----w-	c:\program files\ShotOnline
2011-03-05 14:32 . 2011-03-05 14:41	--------	d-----w-	c:\users\Klemens\AppData\Local\PMB Files
2011-03-05 14:32 . 2011-03-05 14:34	--------	d-----w-	c:\programdata\PMB Files
2011-03-05 14:32 . 2011-02-11 06:54	5943120	----a-w-	c:\programdata\Microsoft\Windows Defender\Definition Updates\{36B51978-321C-426F-8190-E0BE373805A7}\mpengine.dll
2011-02-28 16:59 . 2011-02-28 16:59	--------	d-----w-	c:\users\Klemens\AppData\Roaming\Malwarebytes
2011-02-28 16:57 . 2011-02-28 16:57	--------	d-----w-	c:\programdata\Malwarebytes
2011-02-28 16:57 . 2011-03-05 17:07	--------	d-----w-	c:\program files\Malwarebytes' Anti-Malware
2011-02-27 22:53 . 2011-02-27 22:53	--------	d-----w-	c:\windows\Java
2011-02-27 22:53 . 2010-08-22 13:48	114176	----a-w-	c:\windows\system32\PCWizard.cpl
2011-02-27 22:53 . 2011-02-27 22:53	--------	d-----w-	c:\program files\CPUID
2011-02-27 22:43 . 2011-02-27 22:43	--------	d-----w-	c:\program files\Winload
2011-02-27 21:17 . 2011-02-27 21:17	--------	d-----w-	c:\programdata\WindowsSearch
2011-02-27 20:56 . 2011-02-27 20:56	--------	d-----w-	c:\program files\GeCAD
2011-02-27 20:32 . 2011-03-03 17:59	--------	d-----w-	c:\users\Klemens\AppData\Roaming\QuickScan
2011-02-27 19:56 . 2011-02-27 21:50	--------	d-----w-	c:\programdata\AntiSpyInfo
2011-02-27 19:53 . 2011-02-27 19:55	--------	d-----w-	c:\programdata\PrevxCSI
2011-02-27 19:22 . 2011-02-27 19:22	--------	d-----w-	c:\users\Klemens\AppData\Roaming\Uniblue
2011-02-27 19:21 . 2011-02-27 19:21	--------	d-----w-	c:\users\Klemens\AppData\Local\PackageAware
2011-02-27 18:17 . 2011-02-23 14:56	371544	----a-w-	c:\windows\system32\drivers\aswSnx.sys
2011-02-22 22:04 . 2009-10-09 21:56	2048	----a-w-	c:\windows\system32\winrsmgr.dll
2011-02-22 22:04 . 2009-10-09 21:56	12800	----a-w-	c:\windows\system32\wsmprovhost.exe
2011-02-22 22:04 . 2009-10-09 21:56	20480	----a-w-	c:\windows\system32\winrshost.exe
2011-02-22 22:04 . 2009-10-09 21:56	40448	----a-w-	c:\windows\system32\winrs.exe
2011-02-22 22:04 . 2009-10-09 21:56	10240	----a-w-	c:\windows\system32\wsmplpxy.dll
2011-02-22 22:04 . 2009-10-09 21:56	10240	----a-w-	c:\windows\system32\winrssrv.dll
2011-02-22 22:04 . 2009-10-09 21:56	41472	----a-w-	c:\windows\system32\pwrshplugin.dll
2011-02-22 22:04 . 2009-10-09 21:55	79872	----a-w-	c:\windows\system32\wecutil.exe
2011-02-22 22:04 . 2009-10-09 21:55	54272	----a-w-	c:\windows\system32\WsmRes.dll
2011-02-22 22:04 . 2009-10-09 21:55	146944	----a-w-	c:\windows\system32\wecsvc.dll
2011-02-22 22:04 . 2009-10-09 21:55	81408	----a-w-	c:\windows\system32\wevtfwd.dll
2011-02-22 22:04 . 2009-10-09 21:55	56320	----a-w-	c:\windows\system32\wecapi.dll
2011-02-22 22:03 . 2009-10-09 21:56	145408	----a-w-	c:\windows\system32\WsmAuto.dll
2011-02-22 22:03 . 2009-08-01 06:27	201184	----a-w-	c:\windows\system32\winrm.vbs
2011-02-22 22:03 . 2009-10-09 21:56	214016	----a-w-	c:\windows\system32\WsmWmiPl.dll
2011-02-22 22:03 . 2009-10-09 21:56	241152	----a-w-	c:\windows\system32\winrscmd.dll
2011-02-22 22:03 . 2009-10-09 21:56	246272	----a-w-	c:\windows\system32\WSManHTTPConfig.exe
2011-02-22 22:03 . 2009-10-09 21:55	252416	----a-w-	c:\windows\system32\WSManMigrationPlugin.dll
2011-02-22 22:03 . 2009-10-09 21:56	1181696	----a-w-	c:\windows\system32\WsmSvc.dll
2011-02-22 19:42 . 2011-02-22 21:37	--------	d-----w-	c:\users\Klemens\AppData\Roaming\Zyywgo
2011-02-16 14:23 . 2011-02-16 14:23	--------	d-----w-	c:\program files\Common Files\Skype
2011-02-13 23:06 . 2011-02-13 23:06	--------	d-----w-	c:\program files\Windows Portable Devices
2011-02-13 23:03 . 2009-10-08 21:08	555520	----a-w-	c:\windows\system32\UIAutomationCore.dll
2011-02-13 23:03 . 2009-10-08 21:08	234496	----a-w-	c:\windows\system32\oleacc.dll
2011-02-13 23:03 . 2009-10-08 21:07	4096	----a-w-	c:\windows\system32\oleaccrc.dll
2011-02-13 21:39 . 2011-02-13 21:40	--------	d-----w-	c:\windows\system32\ca-ES
2011-02-13 21:39 . 2011-02-13 21:40	--------	d-----w-	c:\windows\system32\eu-ES
2011-02-13 21:39 . 2011-02-13 21:40	--------	d-----w-	c:\windows\system32\vi-VN
2011-02-13 21:19 . 2011-02-13 21:19	--------	d-----w-	c:\windows\system32\EventProviders
2011-02-12 15:59 . 2011-02-12 15:59	--------	d-----w-	c:\program files\CCleaner
2011-02-12 15:17 . 2011-02-23 14:56	301528	----a-w-	c:\windows\system32\drivers\aswSP.sys
2011-02-12 15:17 . 2011-02-23 14:55	25432	----a-w-	c:\windows\system32\drivers\aswRdr.sys
2011-02-12 15:17 . 2011-02-23 14:54	19544	----a-w-	c:\windows\system32\drivers\aswFsBlk.sys
2011-02-12 15:17 . 2011-02-23 14:55	49240	----a-w-	c:\windows\system32\drivers\aswTdi.sys
2011-02-12 15:17 . 2011-02-23 14:55	53592	----a-w-	c:\windows\system32\drivers\aswMonFlt.sys
2011-02-12 15:16 . 2011-02-23 15:04	40648	----a-w-	c:\windows\avastSS.scr
2011-02-12 15:16 . 2011-02-23 15:04	190016	----a-w-	c:\windows\system32\aswBoot.exe
2011-02-12 15:15 . 2011-02-12 15:15	--------	d-----w-	c:\programdata\Alwil Software
2011-02-12 15:15 . 2011-02-12 15:15	--------	d-----w-	c:\program files\Alwil Software
2011-02-12 15:00 . 2011-01-08 06:28	292352	----a-w-	c:\windows\system32\atmfd.dll
2011-02-12 15:00 . 2011-01-08 08:47	34304	----a-w-	c:\windows\system32\atmlib.dll
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-02-02 16:11 . 2009-10-03 10:00	222080	------w-	c:\windows\system32\MpSigStub.exe
2010-12-28 15:55 . 2011-01-12 19:06	413696	----a-w-	c:\windows\system32\odbc32.dll
2010-12-24 11:13 . 2010-12-24 11:13	1222408	----a-w-	c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight\SpotlightResources.dll
2010-12-14 14:49 . 2011-01-12 19:06	1169408	----a-w-	c:\windows\system32\sdclt.exe
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{40c3cc16-7269-4b32-9531-17f2950fb06f}"= "c:\program files\Winload\tbWinl.dll" [2010-03-17 2355224]
.
[HKEY_CLASSES_ROOT\clsid\{40c3cc16-7269-4b32-9531-17f2950fb06f}]
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{40c3cc16-7269-4b32-9531-17f2950fb06f}]
2010-03-17 14:45	2355224	----a-w-	c:\program files\Winload\tbWinl.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{40c3cc16-7269-4b32-9531-17f2950fb06f}"= "c:\program files\Winload\tbWinl.dll" [2010-03-17 2355224]
.
[HKEY_CLASSES_ROOT\clsid\{40c3cc16-7269-4b32-9531-17f2950fb06f}]
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{40C3CC16-7269-4B32-9531-17F2950FB06F}"= "c:\program files\Winload\tbWinl.dll" [2010-03-17 2355224]
.
[HKEY_CLASSES_ROOT\clsid\{40c3cc16-7269-4b32-9531-17f2950fb06f}]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2011-02-23 15:04	122512	----a-w-	c:\program files\Alwil Software\Avast5\ashShell.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SmpcSys"="c:\program files\Packard Bell\SetupMyPC\SmpSys.exe" [2009-03-18 1160736]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-21 125952]
"WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-21 202240]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2009-02-06 1430824]
"PDVD8LanguageShortcut"="c:\program files\CyberLink\PowerDVD8\Language\Language.exe" [2007-12-14 50472]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2009-06-22 13785632]
"LManager"="c:\program files\Launch Manager\LManager.exe" [2009-02-19 866824]
"cAudioFilterAgent"="c:\program files\Conexant\cAudioFilterAgent\cAudioFilterAgent.exe" [2008-11-06 474168]
"BDRegion"="c:\program files\Cyberlink\Shared Files\brs.exe" [2009-03-06 75048]
"Acer ePower Management"="c:\program files\Packard Bell\Packard Bell PowerSave Solution\ePowerTrayLauncher.exe" [2009-06-23 440864]
"avast5"="c:\program files\Alwil Software\Avast5\avastUI.exe" [2011-02-23 3451496]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-10-29 249064]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
2008-06-12 01:38	34672	----a-w-	c:\program files\Adobe\Reader 9.0\Reader\reader_sl.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BackupManagerTray]
2009-05-26 13:26	254720	----a-w-	c:\program files\NewTech Infosystems\Packard Bell MyBackup\BackupManagerTray.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RemoteControl8]
2008-10-17 08:44	91432	------w-	c:\program files\CyberLink\PowerDVD8\PDVD8Serv.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VideoWebCamera]
2009-04-02 06:31	1552497	----a-w-	c:\program files\VideoWebCamera\VideoWebCamera.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinampAgent]
2010-12-09 10:45	74752	----a-w-	c:\program files\Winamp\winampa.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc\S-1-5-21-4159498174-1952915503-1396403433-1000]
"EnableNotificationsRef"=dword:00000002
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 gupdate;Google Update Service (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2009-09-16 133104]
R3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\system32\DRIVERS\b57nd60x.sys [2008-01-21 179712]
R3 npggsvc;nProtect GameGuard Service;c:\windows\system32\GameMon.des [2010-09-29 4032992]
R3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S1 aswSnx;aswSnx; [x]
S1 aswSP;aswSP; [x]
S2 {FE4C91E7-22C2-4D0C-9F6B-82F1B7742054};Power Control [2009/07/31 17:24];c:\program files\CyberLink\PowerDVD8\000.fcl [2009-03-06 12:48 87536]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2011-02-23 53592]
S2 ePowerSvc;Acer ePower Service;c:\program files\Packard Bell\Packard Bell PowerSave Solution\ePowerSvc.exe [2009-06-23 707104]
S2 NTI IScheduleSvc;NTI IScheduleSvc;c:\program files\NewTech Infosystems\Packard Bell MyBackup\IScheduleSvc.exe [2009-05-26 62208]
S3 k57nd60x;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0;c:\windows\system32\DRIVERS\k57nd60x.sys [2008-09-04 223232]
S3 NETw5v32;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 32 Bit;c:\windows\system32\DRIVERS\NETw5v32.sys [2008-12-29 3715072]
S3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda32v.sys [2009-05-01 64032]
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalServiceAndNoImpersonation	REG_MULTI_SZ   	FontCache
.
Inhalt des "geplante Tasks" Ordners
.
2011-03-07 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-09-16 18:33]
.
2011-03-06 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-09-16 18:33]
.
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = hxxp://google.de/
mStart Page = hxxp://homepage.packardbell.com/rdr.aspx?b=ACPW&l=0407&s=2&o=vp32&d=0709&m=easynote_tj65
uSearchURL,(Default) = hxxp://www.google.com/search/?q=%s
IE: Free YouTube to Mp3 Converter - c:\users\Klemens\AppData\Roaming\DVDVideoSoftIEHelpers\youtubetomp3.htm
IE: Nach Microsoft E&xel exportieren - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
FF - ProfilePath - c:\users\Klemens\AppData\Roaming\Mozilla\Firefox\Profiles\j25cexvw.default\
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA}
FF - Ext: QuickStores-Toolbar: quickstores@quickstores.de - c:\program files\Mozilla Firefox\extensions\quickstores@quickstores.de
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - %profile%\extensions\{20a82645-c095-46ed-80e3-08825760534b}
FF - Ext: DVDVideoSoftTB Toolbar: {872b5b88-9db5-4310-bdd0-ac189557e5f5} - %profile%\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}
FF - Ext: DVDVideoSoft Menu: {ACAA314B-EEBA-48e4-AD47-84E31C44796C} - %profile%\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}
FF - Ext: BitDefender QuickScan: {e001c731-5e37-4538-a5cb-8168736a2360} - %profile%\extensions\{e001c731-5e37-4538-a5cb-8168736a2360}
FF - Ext: Mein Gutscheincode Finder: finder@meingutscheincode.de - %profile%\extensions\finder@meingutscheincode.de
FF - Ext: Winload Toolbar: {40c3cc16-7269-4b32-9531-17f2950fb06f} - %profile%\extensions\{40c3cc16-7269-4b32-9531-17f2950fb06f}
FF - user.js: network.cookie.cookieBehavior - 0
FF - user.js: privacy.clearOnShutdown.cookies - false
FF - user.js: security.warn_viewing_mixed - false
FF - user.js: security.warn_viewing_mixed.show_once - false
FF - user.js: security.warn_submit_insecure - false
FF - user.js: security.warn_submit_insecure.show_once - false
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
URLSearchHooks-{22e03916-85c5-44b0-8dc9-1830c11238d9} - (no file)
BHO-{ee1babcf-cbe2-4c07-8e18-dfe6fc08c30a}  - (no file)
WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
WebBrowser-{22E03916-85C5-44B0-8DC9-1830C11238D9} - (no file)
MSConfigStartUp-Google Desktop Search - c:\program files\Google\Google Desktop Search\GoogleDesktop.exe
MSConfigStartUp-swg - c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, GMER - Rootkit Detector and Remover
Rootkit scan 2011-03-07 13:57
Windows 6.0.6002 Service Pack 2 NTFS
.
Scanne versteckte Prozesse... 
.
Scanne versteckte Autostarteinträge... 
.
Scanne versteckte Dateien... 
.
Scan erfolgreich abgeschlossen
versteckte Dateien: 0
.
**************************************************************************
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Services\npggsvc]
"ImagePath"="c:\windows\system32\GameMon.des -service"
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Services\{FE4C91E7-22C2-4D0C-9F6B-82F1B7742054}]
"ImagePath"="\??\c:\program files\CyberLink\PowerDVD8\000.fcl"
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
Zeit der Fertigstellung: 2011-03-07  14:00:00
ComboFix-quarantined-files.txt  2011-03-07 12:59
.
Vor Suchlauf: 8 Verzeichnis(se), 97.610.436.608 Bytes frei
Nach Suchlauf: 14 Verzeichnis(se), 97.520.021.504 Bytes frei
.
Current=1 Default=1 Failed=0 LastKnownGood=11 Sets=1,2,3,4,5,6,7,8,9,11
- - End Of File - - 5F8393A7E3D8C62319EDF83C726B6F32