2011/05/19 20:46:26.0145 5084 TDSS rootkit removing tool 2.5.1.0 May 13 2011 13:20:29
2011/05/19 20:46:26.0269 5084 ================================================================================
2011/05/19 20:46:26.0269 5084 SystemInfo:
2011/05/19 20:46:26.0269 5084
2011/05/19 20:46:26.0269 5084 OS Version: 6.0.6002 ServicePack: 2.0
2011/05/19 20:46:26.0269 5084 Product type: Workstation
2011/05/19 20:46:26.0269 5084 ComputerName: BENEDIKT-PC
2011/05/19 20:46:26.0270 5084 UserName: Benedikt
2011/05/19 20:46:26.0270 5084 Windows directory: C:\Windows
2011/05/19 20:46:26.0270 5084 System windows directory: C:\Windows
2011/05/19 20:46:26.0270 5084 Running under WOW64
2011/05/19 20:46:26.0270 5084 Processor architecture: Intel x64
2011/05/19 20:46:26.0270 5084 Number of processors: 2
2011/05/19 20:46:26.0270 5084 Page size: 0x1000
2011/05/19 20:46:26.0270 5084 Boot type: Normal boot
2011/05/19 20:46:26.0270 5084 ================================================================================
2011/05/19 20:46:26.0954 5084 Initialize success
2011/05/19 20:46:45.0594 1116 ================================================================================
2011/05/19 20:46:45.0594 1116 Scan started
2011/05/19 20:46:45.0594 1116 Mode: Manual;
2011/05/19 20:46:45.0594 1116 ================================================================================
2011/05/19 20:46:46.0257 1116 acedrv11 (84da132e969484f581c550de69bd1727) C:\Windows\system32\drivers\acedrv11.sys
2011/05/19 20:46:46.0306 1116 ACPI (1965aaffab07e3fb03c77f81beba3547) C:\Windows\system32\drivers\acpi.sys
2011/05/19 20:46:46.0347 1116 adp94xx (f14215e37cf124104575073f782111d2) C:\Windows\system32\drivers\adp94xx.sys
2011/05/19 20:46:46.0400 1116 adpahci (7d05a75e3066861a6610f7ee04ff085c) C:\Windows\system32\drivers\adpahci.sys
2011/05/19 20:46:46.0418 1116 adpu160m (820a201fe08a0c345b3bedbc30e1a77c) C:\Windows\system32\drivers\adpu160m.sys
2011/05/19 20:46:46.0435 1116 adpu320 (9b4ab6854559dc168fbb4c24fc52e794) C:\Windows\system32\drivers\adpu320.sys
2011/05/19 20:46:46.0489 1116 AFD (12415ccfd3e7cec55b5184e67b039fe4) C:\Windows\system32\drivers\afd.sys
2011/05/19 20:46:46.0521 1116 agp440 (f6f6793b7f17b550ecfdbd3b229173f7) C:\Windows\system32\drivers\agp440.sys
2011/05/19 20:46:46.0535 1116 aic78xx (222cb641b4b8a1d1126f8033f9fd6a00) C:\Windows\system32\drivers\djsvs.sys
2011/05/19 20:46:46.0559 1116 aliide (157d0898d4b73f075ce9fa26b482df98) C:\Windows\system32\drivers\aliide.sys
2011/05/19 20:46:46.0571 1116 amdide (970fa5059e61e30d25307b99903e991e) C:\Windows\system32\drivers\amdide.sys
2011/05/19 20:46:46.0596 1116 AmdK8 (cdc3632a3a5ea4dbb83e46076a3165a1) C:\Windows\system32\drivers\amdk8.sys
2011/05/19 20:46:46.0632 1116 arc (ba8417d4765f3988ff921f30f630e303) C:\Windows\system32\drivers\arc.sys
2011/05/19 20:46:46.0645 1116 arcsas (9d41c435619733b34cc16a511e644b11) C:\Windows\system32\drivers\arcsas.sys
2011/05/19 20:46:46.0675 1116 AsyncMac (22d13ff3dafec2a80634752b1eaa2de6) C:\Windows\system32\DRIVERS\asyncmac.sys
2011/05/19 20:46:46.0687 1116 atapi (e68d9b3a3905619732f7fe039466a623) C:\Windows\system32\drivers\atapi.sys
2011/05/19 20:46:46.0764 1116 avmeject (1dc2f715792cf33428ad7993acbd224d) C:\Windows\system32\drivers\avmeject.sys
2011/05/19 20:46:46.0935 1116 BHDrvx64 (3b9b31981894123f78c4ef0d97184319) C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.5.0.125\Definitions\BASHDefs\20110518.001\BHDrvx64.sys
2011/05/19 20:46:46.0990 1116 blbdrive (79feeb40056683f8f61398d81dda65d2) C:\Windows\system32\drivers\blbdrive.sys
2011/05/19 20:46:47.0047 1116 bowser (2348447a80920b2493a9b582a23e81e1) C:\Windows\system32\DRIVERS\bowser.sys
2011/05/19 20:46:47.0093 1116 BrFiltLo (f09eee9edc320b5e1501f749fde686c8) C:\Windows\system32\drivers\brfiltlo.sys
2011/05/19 20:46:47.0128 1116 BrFiltUp (b114d3098e9bdb8bea8b053685831be6) C:\Windows\system32\drivers\brfiltup.sys
2011/05/19 20:46:47.0177 1116 Brserid (f0f0ba4d815be446aa6a4583ca3bca9b) C:\Windows\system32\drivers\brserid.sys
2011/05/19 20:46:47.0206 1116 BrSerWdm (a6eca2151b08a09caceca35c07f05b42) C:\Windows\system32\drivers\brserwdm.sys
2011/05/19 20:46:47.0241 1116 BrUsbMdm (b79968002c277e869cf38bd22cd61524) C:\Windows\system32\drivers\brusbmdm.sys
2011/05/19 20:46:47.0271 1116 BrUsbSer (a87528880231c54e75ea7a44943b38bf) C:\Windows\system32\drivers\brusbser.sys
2011/05/19 20:46:47.0311 1116 BTHMODEM (e0777b34e05f8a82a21856efc900c29f) C:\Windows\system32\drivers\bthmodem.sys
2011/05/19 20:46:47.0354 1116 cdfs (b4d787db8d30793a4d4df9feed18f136) C:\Windows\system32\DRIVERS\cdfs.sys
2011/05/19 20:46:47.0392 1116 cdrom (c025aa69be3d0d25c7a2e746ef6f94fc) C:\Windows\system32\DRIVERS\cdrom.sys
2011/05/19 20:46:47.0410 1116 circlass (02ea568d498bbdd4ba55bf3fce34d456) C:\Windows\system32\drivers\circlass.sys
2011/05/19 20:46:47.0451 1116 CLFS (3dca9a18b204939cfb24bea53e31eb48) C:\Windows\system32\CLFS.sys
2011/05/19 20:46:47.0506 1116 CmBatt (b52d9a14ce4101577900a364ba86f3df) C:\Windows\system32\DRIVERS\CmBatt.sys
2011/05/19 20:46:47.0520 1116 cmdide (e5d5499a1c50a54b5161296b6afe6192) C:\Windows\system32\drivers\cmdide.sys
2011/05/19 20:46:47.0535 1116 Compbatt (7fb8ad01db0eabe60c8a861531a8f431) C:\Windows\system32\DRIVERS\compbatt.sys
2011/05/19 20:46:47.0554 1116 crcdisk (a8585b6412253803ce8efcbd6d6dc15c) C:\Windows\system32\drivers\crcdisk.sys
2011/05/19 20:46:47.0611 1116 DfsC (36cd31121f228e7e79bae60aa45764c6) C:\Windows\system32\Drivers\dfsc.sys
2011/05/19 20:46:47.0670 1116 disk (b0107e40ecdb5fa692ebf832f295d905) C:\Windows\system32\drivers\disk.sys
2011/05/19 20:46:47.0711 1116 drmkaud (f1a78a98cfc2ee02144c6bec945447e6) C:\Windows\system32\drivers\drmkaud.sys
2011/05/19 20:46:47.0778 1116 DXGKrnl (b8e554e502d5123bc111f99d6a2181b4) C:\Windows\System32\drivers\dxgkrnl.sys
2011/05/19 20:46:47.0811 1116 E1G60 (264cee7b031a9d6c827f3d0cb031f2fe) C:\Windows\system32\DRIVERS\E1G6032E.sys
2011/05/19 20:46:47.0859 1116 Ecache (5f94962be5a62db6e447ff6470c4f48a) C:\Windows\system32\drivers\ecache.sys
2011/05/19 20:46:47.0949 1116 eeCtrl (eb0883462ac43829e47929d705d40933) C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys
2011/05/19 20:46:48.0001 1116 elxstor (c4636d6e10469404ab5308d9fd45ed07) C:\Windows\system32\drivers\elxstor.sys
2011/05/19 20:46:48.0053 1116 EraserUtilRebootDrv (86fc0d272f6bb43e7214d4ba955a41e7) C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys
2011/05/19 20:46:48.0075 1116 ErrDev (bc3a58e938bb277e46bf4b3003b01abd) C:\Windows\system32\drivers\errdev.sys
2011/05/19 20:46:48.0125 1116 exfat (486844f47b6636044a42454614ed4523) C:\Windows\system32\drivers\exfat.sys
2011/05/19 20:46:48.0173 1116 fastfat (1a4bee34277784619ddaf0422c0c6e23) C:\Windows\system32\drivers\fastfat.sys
2011/05/19 20:46:48.0204 1116 fdc (81b79b6df71fa1d2c6d688d830616e39) C:\Windows\system32\DRIVERS\fdc.sys
2011/05/19 20:46:48.0237 1116 FileInfo (457b7d1d533e4bd62a99aed9c7bb4c59) C:\Windows\system32\drivers\fileinfo.sys
2011/05/19 20:46:48.0278 1116 Filetrace (d421327fd6efccaf884a54c58e1b0d7f) C:\Windows\system32\drivers\filetrace.sys
2011/05/19 20:46:48.0301 1116 flpydisk (230923ea2b80f79b0f88d90f87b87ebd) C:\Windows\system32\DRIVERS\flpydisk.sys
2011/05/19 20:46:48.0357 1116 FltMgr (e3041bc26d6930d61f42aedb79c91720) C:\Windows\system32\drivers\fltmgr.sys
2011/05/19 20:46:48.0420 1116 fssfltr (6c06701bf1db05405804d7eb610991ce) C:\Windows\system32\DRIVERS\fssfltr.sys
2011/05/19 20:46:48.0447 1116 Fs_Rec (29d99e860a1ca0a03c6a733fdd0da703) C:\Windows\system32\drivers\Fs_Rec.sys
2011/05/19 20:46:48.0499 1116 FWLANUSB (444534cba693dd23c1cc589681e01656) C:\Windows\system32\DRIVERS\fwlanusb.sys
2011/05/19 20:46:48.0527 1116 gagp30kx (c8e416668d3dc2be3d4fe4c79224997f) C:\Windows\system32\drivers\gagp30kx.sys
2011/05/19 20:46:48.0564 1116 gdrv (4412705f7fd88aacb1dad2ed321c3328) C:\Windows\gdrv.sys
2011/05/19 20:46:48.0616 1116 GearAspiWDM (e403aacf8c7bb11375122d2464560311) C:\Windows\system32\drivers\GEARAspiWDM.sys
2011/05/19 20:46:48.0680 1116 HdAudAddService (df45f8142dc6df9d18c39b3effbd0409) C:\Windows\system32\drivers\HdAudio.sys
2011/05/19 20:46:48.0736 1116 HDAudBus (f942c5820205f2fb453243edfec82a3d) C:\Windows\system32\DRIVERS\HDAudBus.sys
2011/05/19 20:46:48.0783 1116 HidBth (b4881c84a180e75b8c25dc1d726c375f) C:\Windows\system32\drivers\hidbth.sys
2011/05/19 20:46:48.0826 1116 HidIr (4e77a77e2c986e8f88f996bb3e1ad829) C:\Windows\system32\drivers\hidir.sys
2011/05/19 20:46:48.0871 1116 HidUsb (443bdd2d30bb4f00795c797e2cf99edf) C:\Windows\system32\DRIVERS\hidusb.sys
2011/05/19 20:46:48.0901 1116 HpCISSs (d7109a1e6bd2dfdbcba72a6bc626a13b) C:\Windows\system32\drivers\hpcisss.sys
2011/05/19 20:46:48.0948 1116 HTTP (098f1e4e5c9cb5b0063a959063631610) C:\Windows\system32\drivers\HTTP.sys
2011/05/19 20:46:48.0984 1116 i2omp (da94c854cea5fac549d4e1f6e88349e8) C:\Windows\system32\drivers\i2omp.sys
2011/05/19 20:46:49.0013 1116 i8042prt (cbb597659a2713ce0c9cc20c88c7591f) C:\Windows\system32\DRIVERS\i8042prt.sys
2011/05/19 20:46:49.0036 1116 iaStorV (3e3bf3627d886736d0b4e90054f929f6) C:\Windows\system32\drivers\iastorv.sys
2011/05/19 20:46:49.0176 1116 IDSVia64 (8f9faa4583e634a1505bad8d0c04c5c9) C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.5.0.125\Definitions\IPSDefs\20110518.001\IDSvia64.sys
2011/05/19 20:46:49.0204 1116 iirsp (8c3951ad2fe886ef76c7b5027c3125d3) C:\Windows\system32\drivers\iirsp.sys
2011/05/19 20:46:49.0272 1116 IntcAzAudAddService (3a3bb4869d04b72f7f54b746066550c6) C:\Windows\system32\drivers\RTKVHD64.sys
2011/05/19 20:46:49.0318 1116 intelide (df797a12176f11b2d301c5b234bb200e) C:\Windows\system32\drivers\intelide.sys
2011/05/19 20:46:49.0338 1116 intelppm (bfd84af32fa1bad6231c4585cb469630) C:\Windows\system32\DRIVERS\intelppm.sys
2011/05/19 20:46:49.0391 1116 IpFilterDriver (d8aabc341311e4780d6fce8c73c0ad81) C:\Windows\system32\DRIVERS\ipfltdrv.sys
2011/05/19 20:46:49.0464 1116 IPMIDRV (9c2ee2e6e5a7203bfae15c299475ec67) C:\Windows\system32\drivers\ipmidrv.sys
2011/05/19 20:46:49.0494 1116 IPNAT (b7e6212f581ea5f6ab0c3a6ceeeb89be) C:\Windows\system32\DRIVERS\ipnat.sys
2011/05/19 20:46:49.0548 1116 IRENUM (8c42ca155343a2f11d29feca67faa88d) C:\Windows\system32\drivers\irenum.sys
2011/05/19 20:46:49.0570 1116 isapnp (0672bfcedc6fc468a2b0500d81437f4f) C:\Windows\system32\drivers\isapnp.sys
2011/05/19 20:46:49.0611 1116 iScsiPrt (e4fdf99599f27ec25d2cf6d754243520) C:\Windows\system32\DRIVERS\msiscsi.sys
2011/05/19 20:46:49.0634 1116 iteatapi (63c766cdc609ff8206cb447a65abba4a) C:\Windows\system32\drivers\iteatapi.sys
2011/05/19 20:46:49.0647 1116 iteraid (1281fe73b17664631d12f643cbea3f59) C:\Windows\system32\drivers\iteraid.sys
2011/05/19 20:46:49.0668 1116 kbdclass (423696f3ba6472dd17699209b933bc26) C:\Windows\system32\DRIVERS\kbdclass.sys
2011/05/19 20:46:49.0702 1116 kbdhid (dbdf75d51464fbc47d0104ec3d572c05) C:\Windows\system32\DRIVERS\kbdhid.sys
2011/05/19 20:46:49.0749 1116 KSecDD (476e2c1dcea45895994bef11c2a98715) C:\Windows\system32\Drivers\ksecdd.sys
2011/05/19 20:46:49.0785 1116 ksthunk (1d419cf43db29396ecd7113d129d94eb) C:\Windows\system32\drivers\ksthunk.sys
2011/05/19 20:46:49.0819 1116 lltdio (96ece2659b6654c10a0c310ae3a6d02c) C:\Windows\system32\DRIVERS\lltdio.sys
2011/05/19 20:46:49.0855 1116 LSI_FC (acbe1af32d3123e330a07bfbc5ec4a9b) C:\Windows\system32\drivers\lsi_fc.sys
2011/05/19 20:46:49.0870 1116 LSI_SAS (799ffb2fc4729fa46d2157c0065b3525) C:\Windows\system32\drivers\lsi_sas.sys
2011/05/19 20:46:49.0896 1116 LSI_SCSI (f445ff1daad8a226366bfaf42551226b) C:\Windows\system32\drivers\lsi_scsi.sys
2011/05/19 20:46:49.0920 1116 luafv (52f87b9cc8932c2a7375c3b2a9be5e3e) C:\Windows\system32\drivers\luafv.sys
2011/05/19 20:46:49.0958 1116 LVPr2M64 (ded333dbdbbcc3555a6e6244522e2f1a) C:\Windows\system32\DRIVERS\LVPr2M64.sys
2011/05/19 20:46:49.0970 1116 LVPr2Mon (ded333dbdbbcc3555a6e6244522e2f1a) C:\Windows\system32\DRIVERS\LVPr2M64.sys
2011/05/19 20:46:50.0013 1116 LVRS64 (986c1cb787a007baa5f74e7d316d7246) C:\Windows\system32\DRIVERS\lvrs64.sys
2011/05/19 20:46:50.0137 1116 LVUVC64 (5747bc465abea2858c5d037252aed84e) C:\Windows\system32\DRIVERS\lvuvc64.sys
2011/05/19 20:46:50.0262 1116 megasas (5c5cd6aaced32fb26c3fb34b3dcf972f) C:\Windows\system32\drivers\megasas.sys
2011/05/19 20:46:50.0307 1116 MegaSR (859bc2436b076c77c159ed694acfe8f8) C:\Windows\system32\drivers\megasr.sys
2011/05/19 20:46:50.0342 1116 Modem (59848d5cc74606f0ee7557983bb73c2e) C:\Windows\system32\drivers\modem.sys
2011/05/19 20:46:50.0379 1116 monitor (c247cc2a57e0a0c8c6dccf7807b3e9e5) C:\Windows\system32\DRIVERS\monitor.sys
2011/05/19 20:46:50.0398 1116 mouclass (9367304e5e412b120cf5f4ea14e4e4f1) C:\Windows\system32\DRIVERS\mouclass.sys
2011/05/19 20:46:50.0414 1116 mouhid (c2c2bd5c5ce5aaf786ddd74b75d2ac69) C:\Windows\system32\DRIVERS\mouhid.sys
2011/05/19 20:46:50.0427 1116 MountMgr (11bc9b1e8801b01f7f6adb9ead30019b) C:\Windows\system32\drivers\mountmgr.sys
2011/05/19 20:46:50.0447 1116 mpio (f8276eb8698142884498a528dfea8478) C:\Windows\system32\drivers\mpio.sys
2011/05/19 20:46:50.0466 1116 mpsdrv (c92b9abdb65a5991e00c28f13491dba2) C:\Windows\system32\drivers\mpsdrv.sys
2011/05/19 20:46:50.0480 1116 Mraid35x (3c200630a89ef2c0864d515b7a75802e) C:\Windows\system32\drivers\mraid35x.sys
2011/05/19 20:46:50.0510 1116 MRxDAV (7c1de4aa96dc0c071611f9e7de02a68d) C:\Windows\system32\drivers\mrxdav.sys
2011/05/19 20:46:50.0551 1116 mrxsmb (dc434b4769e18da09ce1b7755d4c64e9) C:\Windows\system32\DRIVERS\mrxsmb.sys
2011/05/19 20:46:50.0582 1116 mrxsmb10 (64713fcfe3de8881d62f8f3f2f794241) C:\Windows\system32\DRIVERS\mrxsmb10.sys
2011/05/19 20:46:50.0621 1116 mrxsmb20 (0005c599a2abf767a815afcd32e523e3) C:\Windows\system32\DRIVERS\mrxsmb20.sys
2011/05/19 20:46:50.0646 1116 msahci (1ac860612b85d8e85ee257d372e39f4d) C:\Windows\system32\drivers\msahci.sys
2011/05/19 20:46:50.0668 1116 msdsm (264bbb4aaf312a485f0e44b65a6b7202) C:\Windows\system32\drivers\msdsm.sys
2011/05/19 20:46:50.0701 1116 Msfs (704f59bfc4512d2bb0146aec31b10a7c) C:\Windows\system32\drivers\Msfs.sys
2011/05/19 20:46:50.0723 1116 msisadrv (00ebc952961664780d43dca157e79b27) C:\Windows\system32\drivers\msisadrv.sys
2011/05/19 20:46:50.0784 1116 MSKSSRV (0ea73e498f53b96d83dbfca074ad4cf8) C:\Windows\system32\drivers\MSKSSRV.sys
2011/05/19 20:46:50.0806 1116 MSPCLOCK (52e59b7e992a58e740aa63f57edbae8b) C:\Windows\system32\drivers\MSPCLOCK.sys
2011/05/19 20:46:50.0883 1116 MSPQM (49084a75bae043ae02d5b44d02991bb2) C:\Windows\system32\drivers\MSPQM.sys
2011/05/19 20:46:50.0940 1116 MsRPC (dc6ccf440cdede4293db41c37a5060a5) C:\Windows\system32\drivers\MsRPC.sys
2011/05/19 20:46:50.0961 1116 mssmbios (855796e59df77ea93af46f20155bf55b) C:\Windows\system32\DRIVERS\mssmbios.sys
2011/05/19 20:46:50.0988 1116 MSTEE (86d632d75d05d5b7c7c043fa3564ae86) C:\Windows\system32\drivers\MSTEE.sys
2011/05/19 20:46:51.0002 1116 Mup (0cc49f78d8aca0877d885f149084e543) C:\Windows\system32\Drivers\mup.sys
2011/05/19 20:46:51.0053 1116 NativeWifiP (2007b826c4acd94ae32232b41f0842b9) C:\Windows\system32\DRIVERS\nwifi.sys
2011/05/19 20:46:51.0173 1116 NAVENG (f594e1acbbb3ba48586b5dd69b3a6bc2) C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.5.0.125\Definitions\VirusDefs\20110518.036\ENG64.SYS
2011/05/19 20:46:51.0243 1116 NAVEX15 (cfe00b55488acf0cd9f62b0401297864) C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.5.0.125\Definitions\VirusDefs\20110518.036\EX64.SYS
2011/05/19 20:46:51.0344 1116 NDIS (65950e07329fcee8e6516b17c8d0abb6) C:\Windows\system32\drivers\ndis.sys
2011/05/19 20:46:51.0390 1116 NdisTapi (64df698a425478e321981431ac171334) C:\Windows\system32\DRIVERS\ndistapi.sys
2011/05/19 20:46:51.0412 1116 Ndisuio (8baa43196d7b5bb972c9a6b2bbf61a19) C:\Windows\system32\DRIVERS\ndisuio.sys
2011/05/19 20:46:51.0448 1116 NdisWan (f8158771905260982ce724076419ef19) C:\Windows\system32\DRIVERS\ndiswan.sys
2011/05/19 20:46:51.0480 1116 NDProxy (9cb77ed7cb72850253e973a2d6afdf49) C:\Windows\system32\drivers\NDProxy.sys
2011/05/19 20:46:51.0509 1116 NetBIOS (a499294f5029a7862adc115bda7371ce) C:\Windows\system32\DRIVERS\netbios.sys
2011/05/19 20:46:51.0555 1116 netbt (fc2c792ebddc8e28df939d6a92c83d61) C:\Windows\system32\DRIVERS\netbt.sys
2011/05/19 20:46:51.0586 1116 nfrd960 (4ac08bd6af2df42e0c3196d826c8aea7) C:\Windows\system32\drivers\nfrd960.sys
2011/05/19 20:46:51.0657 1116 Npfs (b298874f8e0ea93f06ec40aa8d146478) C:\Windows\system32\drivers\Npfs.sys
2011/05/19 20:46:51.0705 1116 nsiproxy (1523af19ee8b030ba682f7a53537eaeb) C:\Windows\system32\drivers\nsiproxy.sys
2011/05/19 20:46:51.0768 1116 Ntfs (bac869dfb98e499ba4d9bb1fb43270e1) C:\Windows\system32\drivers\Ntfs.sys
2011/05/19 20:46:51.0803 1116 Null (dd5d684975352b85b52e3fd5347c20cb) C:\Windows\system32\drivers\Null.sys
2011/05/19 20:46:52.0046 1116 nvlddmkm (30d38d5b168617d22da6d6118d71cce3) C:\Windows\system32\DRIVERS\nvlddmkm.sys
2011/05/19 20:46:52.0179 1116 nvraid (2c040b7ada5b06f6facadac8514aa034) C:\Windows\system32\drivers\nvraid.sys
2011/05/19 20:46:52.0194 1116 nvstor (f7ea0fe82842d05eda3efdd376dbfdba) C:\Windows\system32\drivers\nvstor.sys
2011/05/19 20:46:52.0222 1116 nv_agp (19067ca93075ef4823e3938a686f532f) C:\Windows\system32\drivers\nv_agp.sys
2011/05/19 20:46:52.0302 1116 ohci1394 (7b58953e2f263421fdbb09a192712a85) C:\Windows\system32\drivers\ohci1394.sys
2011/05/19 20:46:52.0345 1116 Parport (4c6a7fd04ddf4db88791048382e3edb1) C:\Windows\system32\DRIVERS\parport.sys
2011/05/19 20:46:52.0384 1116 partmgr (f9b5eda4c17a2be7663f064dbf0fe254) C:\Windows\system32\drivers\partmgr.sys
2011/05/19 20:46:52.0426 1116 pci (47ab1e0fc9d0e12bb53ba246e3a0906d) C:\Windows\system32\drivers\pci.sys
2011/05/19 20:46:52.0445 1116 pciide (8d618c829034479985a9ed56106cc732) C:\Windows\system32\drivers\pciide.sys
2011/05/19 20:46:52.0468 1116 pcmcia (037661f3d7c507c9993b7010ceee6288) C:\Windows\system32\drivers\pcmcia.sys
2011/05/19 20:46:52.0500 1116 PEAUTH (58865916f53592a61549b04941bfd80d) C:\Windows\system32\drivers\peauth.sys
2011/05/19 20:46:52.0595 1116 PptpMiniport (23386e9952025f5f21c368971e2e7301) C:\Windows\system32\DRIVERS\raspptp.sys
2011/05/19 20:46:52.0617 1116 Processor (5080e59ecee0bc923f14018803aa7a01) C:\Windows\system32\drivers\processr.sys
2011/05/19 20:46:52.0655 1116 PSched (c5ab7f0809392d0da027f4a2a81bfa31) C:\Windows\system32\DRIVERS\pacer.sys
2011/05/19 20:46:52.0685 1116 ql2300 (0b83f4e681062f3839be2ec1d98fd94a) C:\Windows\system32\drivers\ql2300.sys
2011/05/19 20:46:52.0720 1116 ql40xx (e1c80f8d4d1e39ef9595809c1369bf2a) C:\Windows\system32\drivers\ql40xx.sys
2011/05/19 20:46:52.0739 1116 QWAVEdrv (e8d76edab77ec9c634c27b8eac33adc5) C:\Windows\system32\drivers\qwavedrv.sys
2011/05/19 20:46:52.0751 1116 RasAcd (1013b3b663a56d3ddd784f581c1bd005) C:\Windows\system32\DRIVERS\rasacd.sys
2011/05/19 20:46:52.0836 1116 Rasl2tp (ac7bc4d42a7e558718dfdec599bbfc2c) C:\Windows\system32\DRIVERS\rasl2tp.sys
2011/05/19 20:46:52.0879 1116 RasPppoe (4517fbf8b42524afe4ede1de102aae3e) C:\Windows\system32\DRIVERS\raspppoe.sys
2011/05/19 20:46:52.0912 1116 RasSstp (c6a593b51f34c33e5474539544072527) C:\Windows\system32\DRIVERS\rassstp.sys
2011/05/19 20:46:52.0950 1116 rdbss (322db5c6b55e8d8ee8d6f358b2aaabb1) C:\Windows\system32\DRIVERS\rdbss.sys
2011/05/19 20:46:52.0968 1116 RDPCDD (603900cc05f6be65ccbf373800af3716) C:\Windows\system32\DRIVERS\RDPCDD.sys
2011/05/19 20:46:53.0004 1116 rdpdr (c045d1fb111c28df0d1be8d4bda22c06) C:\Windows\system32\drivers\rdpdr.sys
2011/05/19 20:46:53.0018 1116 RDPENCDD (cab9421daf3d97b33d0d055858e2c3ab) C:\Windows\system32\drivers\rdpencdd.sys
2011/05/19 20:46:53.0054 1116 RDPWD (b1d741c87cea8d7282146366cc9c3f81) C:\Windows\system32\drivers\RDPWD.sys
2011/05/19 20:46:53.0099 1116 rspndr (22a9cb08b1a6707c1550c6bf099aae73) C:\Windows\system32\DRIVERS\rspndr.sys
2011/05/19 20:46:53.0135 1116 RTL8169 (390482953c63e81bae52f20386394421) C:\Windows\system32\DRIVERS\Rtlh64.sys
2011/05/19 20:46:53.0167 1116 sbp2port (cd9c693589c60ad59bbbcfb0e524e01b) C:\Windows\system32\drivers\sbp2port.sys
2011/05/19 20:46:53.0209 1116 secdrv (3ea8a16169c26afbeb544e0e48421186) C:\Windows\system32\drivers\secdrv.sys
2011/05/19 20:46:53.0248 1116 Serenum (2449316316411d65bd2c761a6ffb2ce2) C:\Windows\system32\DRIVERS\serenum.sys
2011/05/19 20:46:53.0270 1116 Serial (4b438170be2fc8e0bd35ee87a960f84f) C:\Windows\system32\DRIVERS\serial.sys
2011/05/19 20:46:53.0305 1116 sermouse (a842f04833684bceea7336211be478df) C:\Windows\system32\drivers\sermouse.sys
2011/05/19 20:46:53.0339 1116 sffdisk (14d4b4465193a87c127933978e8c4106) C:\Windows\system32\drivers\sffdisk.sys
2011/05/19 20:46:53.0355 1116 sffp_mmc (7073aee3f82f3d598e3825962aa98ab2) C:\Windows\system32\drivers\sffp_mmc.sys
2011/05/19 20:46:53.0381 1116 sffp_sd (35e59ebe4a01a0532ed67975161c7b82) C:\Windows\system32\drivers\sffp_sd.sys
2011/05/19 20:46:53.0403 1116 sfloppy (6b7838c94135768bd455cbdc23e39e5f) C:\Windows\system32\drivers\sfloppy.sys
2011/05/19 20:46:53.0436 1116 SiSRaid2 (7a5de502aeb719d4594c6471060a78b3) C:\Windows\system32\drivers\sisraid2.sys
2011/05/19 20:46:53.0447 1116 SiSRaid4 (3a2f769fab9582bc720e11ea1dfb184d) C:\Windows\system32\drivers\sisraid4.sys
2011/05/19 20:46:53.0493 1116 Smb (290b6f6a0ec4fcdfc90f5cb6d7020473) C:\Windows\system32\DRIVERS\smb.sys
2011/05/19 20:46:53.0546 1116 spldr (386c3c63f00a7040c7ec5e384217e89d) C:\Windows\system32\drivers\spldr.sys
2011/05/19 20:46:53.0649 1116 SRTSP (90ef30c3867bcde4579c01a6d6e75a7a) C:\Windows\System32\Drivers\NISx64\1206000.01D\SRTSP64.SYS
2011/05/19 20:46:53.0705 1116 SRTSPX (c513e8a5e7978da49077f5484344ee1b) C:\Windows\system32\drivers\NISx64\1206000.01D\SRTSPX64.SYS
2011/05/19 20:46:53.0745 1116 srv (880a57fccb571ebd063d4dd50e93e46d) C:\Windows\system32\DRIVERS\srv.sys
2011/05/19 20:46:53.0902 1116 srv2 (fa36d119249bf27bc4c0079734e1f33b) C:\Windows\system32\DRIVERS\srv2.sys
2011/05/19 20:46:53.0970 1116 srvnet (cfe7bc92d52c7e79427545909a0182f8) C:\Windows\system32\DRIVERS\srvnet.sys
2011/05/19 20:46:54.0016 1116 swenum (8a851ca908b8b974f89c50d2e18d4f0c) C:\Windows\system32\DRIVERS\swenum.sys
2011/05/19 20:46:54.0035 1116 Symc8xx (2f26a2c6fc96b29beff5d8ed74e6625b) C:\Windows\system32\drivers\symc8xx.sys
2011/05/19 20:46:54.0190 1116 SymDS (6160145c7a87fc7672e8e3b886888176) C:\Windows\system32\drivers\NISx64\1206000.01D\SYMDS64.SYS
2011/05/19 20:46:54.0423 1116 SymEFA (96aeed40d4d3521568b42027687e69e0) C:\Windows\system32\drivers\NISx64\1206000.01D\SYMEFA64.SYS
2011/05/19 20:46:54.0519 1116 SymEvent (21a1c2d694c3cf962d31f5e873ab3d6f) C:\Windows\system32\Drivers\SYMEVENT64x86.SYS
2011/05/19 20:46:54.0589 1116 SymIRON (bd0d711d8cbfcaa19ca123306eaf53a5) C:\Windows\system32\drivers\NISx64\1206000.01D\Ironx64.SYS
2011/05/19 20:46:54.0673 1116 SYMTDIv (6cb70a5d30e4322bab4ad52866b0a4b8) C:\Windows\System32\Drivers\NISx64\1206000.01D\SYMTDIV.SYS
2011/05/19 20:46:54.0690 1116 Sym_hi (a909667976d3bccd1df813fed517d837) C:\Windows\system32\drivers\sym_hi.sys
2011/05/19 20:46:54.0723 1116 Sym_u3 (36887b56ec2d98b9c362f6ae4de5b7b0) C:\Windows\system32\drivers\sym_u3.sys
2011/05/19 20:46:54.0789 1116 Tcpip (973658a2ea9c06b2976884b9046dfc6c) C:\Windows\system32\drivers\tcpip.sys
2011/05/19 20:46:54.0911 1116 Tcpip6 (973658a2ea9c06b2976884b9046dfc6c) C:\Windows\system32\DRIVERS\tcpip.sys
2011/05/19 20:46:54.0952 1116 tcpipreg (c7e72a4071ee0200e3c075dacfb2b334) C:\Windows\system32\drivers\tcpipreg.sys
2011/05/19 20:46:54.0977 1116 TDPIPE (1d8bf4aaa5fb7a2761475781dc1195bc) C:\Windows\system32\drivers\tdpipe.sys
2011/05/19 20:46:55.0012 1116 TDTCP (7f7e00cdf609df657f4cda02dd1c9bb1) C:\Windows\system32\drivers\tdtcp.sys
2011/05/19 20:46:55.0058 1116 tdx (458919c8c42e398dc4802178d5ffee27) C:\Windows\system32\DRIVERS\tdx.sys
2011/05/19 20:46:55.0089 1116 TermDD (8c19678d22649ec002ef2282eae92f98) C:\Windows\system32\DRIVERS\termdd.sys
2011/05/19 20:46:55.0136 1116 tssecsrv (9e5409cd17c8bef193aad498f3bc2cb8) C:\Windows\system32\DRIVERS\tssecsrv.sys
2011/05/19 20:46:55.0147 1116 tunmp (89ec74a9e602d16a75a4170511029b3c) C:\Windows\system32\DRIVERS\tunmp.sys
2011/05/19 20:46:55.0192 1116 tunnel (30a9b3f45ad081bffc3bcaa9c812b609) C:\Windows\system32\DRIVERS\tunnel.sys
2011/05/19 20:46:55.0220 1116 uagp35 (fec266ef401966311744bd0f359f7f56) C:\Windows\system32\drivers\uagp35.sys
2011/05/19 20:46:55.0270 1116 udfs (faf2640a2a76ed03d449e443194c4c34) C:\Windows\system32\DRIVERS\udfs.sys
2011/05/19 20:46:55.0320 1116 uliagpkx (4ec9447ac3ab462647f60e547208ca00) C:\Windows\system32\drivers\uliagpkx.sys
2011/05/19 20:46:55.0348 1116 uliahci (697f0446134cdc8f99e69306184fbbb4) C:\Windows\system32\drivers\uliahci.sys
2011/05/19 20:46:55.0369 1116 UlSata (31707f09846056651ea2c37858f5ddb0) C:\Windows\system32\drivers\ulsata.sys
2011/05/19 20:46:55.0392 1116 ulsata2 (85e5e43ed5b48c8376281bab519271b7) C:\Windows\system32\drivers\ulsata2.sys
2011/05/19 20:46:55.0413 1116 umbus (46e9a994c4fed537dd951f60b86ad3f4) C:\Windows\system32\DRIVERS\umbus.sys
2011/05/19 20:46:55.0465 1116 USBAAPL64 (54d4b48d443e7228bf64cf7cdc3118ac) C:\Windows\system32\Drivers\usbaapl64.sys
2011/05/19 20:46:55.0514 1116 usbaudio (c6ba890de6e41857fbe84175519cae7d) C:\Windows\system32\drivers\usbaudio.sys
2011/05/19 20:46:55.0551 1116 usbccgp (07e3498fc60834219d2356293da0fecc) C:\Windows\system32\DRIVERS\usbccgp.sys
2011/05/19 20:46:55.0582 1116 usbcir (9247f7e0b65852c1f6631480984d6ed2) C:\Windows\system32\drivers\usbcir.sys
2011/05/19 20:46:55.0615 1116 usbehci (827e44de934a736ea31e91d353eb126f) C:\Windows\system32\DRIVERS\usbehci.sys
2011/05/19 20:46:55.0637 1116 usbhub (bb35cd80a2ececfadc73569b3d70c7d1) C:\Windows\system32\DRIVERS\usbhub.sys
2011/05/19 20:46:55.0664 1116 usbohci (eba14ef0c07cec233f1529c698d0d154) C:\Windows\system32\drivers\usbohci.sys
2011/05/19 20:46:55.0691 1116 usbprint (acfee697af477021bb3ec78c5431fed2) C:\Windows\system32\drivers\usbprint.sys
2011/05/19 20:46:55.0733 1116 USBSTOR (b854c1558fca0c269a38663e8b59b581) C:\Windows\system32\DRIVERS\USBSTOR.SYS
2011/05/19 20:46:55.0748 1116 usbuhci (b2872cbf9f47316abd0e0c74a1aba507) C:\Windows\system32\DRIVERS\usbuhci.sys
2011/05/19 20:46:55.0788 1116 usbvideo (fc33099877790d51b0927b7039059855) C:\Windows\system32\Drivers\usbvideo.sys
2011/05/19 20:46:55.0853 1116 vga (916b94bcf1e09873fff2d5fb11767bbc) C:\Windows\system32\DRIVERS\vgapnp.sys
2011/05/19 20:46:55.0896 1116 VgaSave (b83ab16b51feda65dd81b8c59d114d63) C:\Windows\System32\drivers\vga.sys
2011/05/19 20:46:55.0917 1116 viaide (8294b6c3fdb6c33f24e150de647ecdaa) C:\Windows\system32\drivers\viaide.sys
2011/05/19 20:46:55.0936 1116 volmgr (2b7e885ed951519a12c450d24535dfca) C:\Windows\system32\drivers\volmgr.sys
2011/05/19 20:46:55.0977 1116 volmgrx (cec5ac15277d75d9e5dec2e1c6eaf877) C:\Windows\system32\drivers\volmgrx.sys
2011/05/19 20:46:56.0004 1116 volsnap (5280aada24ab36b01a84a6424c475c8d) C:\Windows\system32\drivers\volsnap.sys
2011/05/19 20:46:56.0030 1116 vsmraid (a68f455ed2673835209318dd61bfbb0e) C:\Windows\system32\drivers\vsmraid.sys
2011/05/19 20:46:56.0061 1116 WacomPen (fef8fe5923fead2cee4dfabfce3393a7) C:\Windows\system32\drivers\wacompen.sys
2011/05/19 20:46:56.0100 1116 Wanarp (b8e7049622300d20ba6d8be0c47c0cfd) C:\Windows\system32\DRIVERS\wanarp.sys
2011/05/19 20:46:56.0108 1116 Wanarpv6 (b8e7049622300d20ba6d8be0c47c0cfd) C:\Windows\system32\DRIVERS\wanarp.sys
2011/05/19 20:46:56.0134 1116 Wd (0c17a0816f65b89e362e682ad5e7266e) C:\Windows\system32\drivers\wd.sys
2011/05/19 20:46:56.0158 1116 Wdf01000 (d02e7e4567da1e7582fbf6a91144b0df) C:\Windows\system32\drivers\Wdf01000.sys
2011/05/19 20:46:56.0256 1116 WmiAcpi (e18aebaaa5a773fe11aa2c70f65320f5) C:\Windows\system32\drivers\wmiacpi.sys
2011/05/19 20:46:56.0332 1116 WpdUsb (5e2401b3fc1089c90e081291357371a9) C:\Windows\system32\DRIVERS\wpdusb.sys
2011/05/19 20:46:56.0367 1116 ws2ifsl (8a900348370e359b6bff6a550e4649e1) C:\Windows\system32\drivers\ws2ifsl.sys
2011/05/19 20:46:56.0404 1116 WUDFRd (501a65252617b495c0f1832f908d54d8) C:\Windows\system32\DRIVERS\WUDFRd.sys
2011/05/19 20:46:56.0443 1116 ================================================================================
2011/05/19 20:46:56.0443 1116 Scan finished
2011/05/19 20:46:56.0443 1116 ================================================================================

Dann bitte jetzt CF ausführen:

ComboFix

Ein Leitfaden und Tutorium zur Nutzung von ComboFix

• Lade dir ComboFix hier herunter auf deinen Desktop. Benenne es beim Runterladen um in cofi.exe.

• Schliesse alle Programme, vor allem dein Antivirenprogramm und andere Hintergrundwächter sowie deinen Internetbrowser.

• Starte cofi.exe von deinem Desktop aus, bestätige die Warnmeldungen, führe die Updates durch (falls vorgeschlagen), installiere die Wiederherstellungskonsole (falls vorgeschlagen) und lass dein System durchsuchen.
  Vermeide es auch während Combofix läuft die Maus und Tastatur zu benutzen.

• Im Anschluss öffnet sich automatisch eine combofix.txt, diesen Inhalt bitte kopieren ([Strg]a, [Strg]c) und in deinen Beitrag einfügen ([Strg]v). Die Datei findest du außerdem unter: C:\ComboFix.txt.

Wichtiger Hinweis:

Combofix darf ausschließlich ausgeführt werden, wenn ein Kompetenzler dies ausdrücklich empfohlen hat!
Es sollte nie auf eigene Initiative hin ausgeführt werden! Eine falsche Benutzung kann ernsthafte Computerprobleme nach sich ziehen und eine Bereinigung der Infektion noch erschweren.

so ...alles erledigt

Combofix Logfile:

ComboFix 11-05-18.04 - Benedikt 19.05.2011  21:03:20.1.2 - x64
Microsoft® Windows Vista™ Home Premium   6.0.6002.2.1252.49.1031.18.4094.2264 [GMT 2:00]
ausgeführt von:: c:\users\Benedikt\Desktop\ComboFix.exe
AV: Norton Internet Security *Disabled/Updated* {63DF5164-9100-186D-2187-8DC619EFD8BF}
FW: Norton Internet Security *Enabled* {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}
SP: Norton Internet Security *Enabled/Updated* {D8BEB080-B73A-17E3-1B37-B6B462689202}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\Benedikt\AppData\Roaming\SQLite3.dll
c:\windows\TEMP\logishrd\LVPrcInj01.dll . . . . Nicht in der Lage zu löschen
c:\windows\TEMP\logishrd\LVPrcInj02.dll . . . . Nicht in der Lage zu löschen
.
.
(((((((((((((((((((((((   Dateien erstellt von 2011-04-19 bis 2011-05-19  ))))))))))))))))))))))))))))))
.
.
2011-05-19 19:11 . 2011-05-19 19:11	--------	d-----w-	c:\users\Default\AppData\Local\temp
2011-05-19 18:05 . 2011-05-19 18:05	--------	d-----w-	C:\_OTL
2011-05-18 20:40 . 2011-05-18 20:40	--------	d-----w-	c:\users\Benedikt\AppData\Roaming\Malwarebytes
2011-05-18 20:40 . 2011-05-18 20:40	--------	d-----w-	c:\programdata\Malwarebytes
2011-05-18 20:40 . 2010-12-20 16:09	38224	----a-w-	c:\windows\SysWow64\drivers\mbamswissarmy.sys
2011-05-18 20:40 . 2011-05-18 20:40	--------	d-----w-	c:\program files (x86)\Malwarebytes' Anti-Malware
2011-05-18 20:40 . 2010-12-20 16:08	24152	----a-w-	c:\windows\system32\drivers\mbam.sys
2011-05-18 19:04 . 2011-05-18 19:04	--------	d-----w-	c:\program files\Enigma Software Group
2011-05-18 19:02 . 2011-05-18 19:29	--------	d-----w-	c:\windows\1226A4C56F274C4EAE372B5512DE125A.TMP
2011-05-11 09:56 . 2011-04-07 12:02	2409784	----a-w-	c:\program files\Windows Mail\OESpamFilter.dat
2011-05-11 09:56 . 2011-04-07 12:01	2409784	----a-w-	c:\program files (x86)\Windows Mail\OESpamFilter.dat
2011-05-10 08:48 . 2011-05-12 10:37	--------	d-----w-	c:\windows\system32\drivers\NISx64\1206000.01D
2011-04-27 11:13 . 2011-03-03 15:59	32256	----a-w-	c:\windows\system32\Apphlpdm.dll
2011-04-27 11:13 . 2011-03-03 15:40	28672	----a-w-	c:\windows\SysWow64\Apphlpdm.dll
2011-04-27 11:13 . 2011-03-03 14:00	4240384	----a-w-	c:\windows\system32\GameUXLegacyGDFs.dll
2011-04-27 11:13 . 2011-03-03 13:35	4240384	----a-w-	c:\windows\SysWow64\GameUXLegacyGDFs.dll
2011-04-27 11:13 . 2011-03-12 22:52	1653760	----a-w-	c:\windows\system32\XpsPrint.dll
2011-04-27 11:13 . 2011-03-12 21:55	876032	----a-w-	c:\windows\SysWow64\XpsPrint.dll
2011-04-23 19:06 . 2011-04-23 19:06	--------	d-----w-	c:\program files\iPod
2011-04-23 19:06 . 2011-04-23 19:07	--------	d-----w-	c:\program files\iTunes
2011-04-23 19:06 . 2011-04-23 19:07	--------	d-----w-	c:\program files (x86)\iTunes
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-05-11 18:36 . 2009-07-05 16:08	174200	----a-w-	c:\windows\system32\drivers\SYMEVENT64x86.SYS
2011-03-10 17:18 . 2011-04-15 08:57	1360384	----a-w-	c:\windows\system32\mfc42u.dll
2011-03-10 17:18 . 2011-04-15 08:57	1398784	----a-w-	c:\windows\system32\mfc42.dll
2011-03-10 17:03 . 2011-04-15 08:57	1162240	----a-w-	c:\windows\SysWow64\mfc42u.dll
2011-03-10 17:03 . 2011-04-15 08:57	1136640	----a-w-	c:\windows\SysWow64\mfc42.dll
2011-03-10 14:11 . 2010-06-24 10:33	18328	----a-w-	c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2011-03-03 16:02 . 2011-04-15 08:58	975872	----a-w-	c:\windows\system32\inetcomm.dll
2011-03-03 15:59 . 2011-04-27 11:13	100352	----a-w-	c:\windows\apppatch\AppPatch64\acspecfc.dll
2011-03-03 15:59 . 2011-04-27 11:13	331776	----a-w-	c:\windows\apppatch\AppPatch64\AcLayers.dll
2011-03-03 15:59 . 2011-04-27 11:13	284672	----a-w-	c:\windows\apppatch\AppPatch64\AcGenral.dll
2011-03-03 15:42 . 2011-04-15 08:58	739328	----a-w-	c:\windows\SysWow64\inetcomm.dll
2011-03-03 15:40 . 2011-04-27 11:13	173056	----a-w-	c:\windows\apppatch\AcXtrnal.dll
2011-03-03 15:40 . 2011-04-27 11:13	542720	----a-w-	c:\windows\apppatch\AcLayers.dll
2011-03-03 15:40 . 2011-04-27 11:13	458752	----a-w-	c:\windows\apppatch\AcSpecfc.dll
2011-03-03 15:40 . 2011-04-27 11:13	2159616	----a-w-	c:\windows\apppatch\AcGenral.dll
2011-03-03 13:46 . 2011-04-15 08:58	2762240	----a-w-	c:\windows\system32\win32k.sys
2011-03-02 16:12 . 2011-04-15 08:57	117760	----a-w-	c:\windows\system32\dnsrslvr.dll
2011-02-24 16:38 . 2011-04-15 08:58	991104	----a-w-	c:\windows\system32\winresume.efi
2011-02-24 16:38 . 2011-04-15 08:58	979840	----a-w-	c:\windows\system32\winresume.exe
2011-02-24 16:37 . 2011-04-15 08:58	1076608	----a-w-	c:\windows\system32\winload.efi
2011-02-24 16:37 . 2011-04-15 08:58	1063296	----a-w-	c:\windows\system32\winload.exe
2011-02-24 16:37 . 2011-04-15 08:58	20864	----a-w-	c:\windows\system32\kdusb.dll
2011-02-24 16:37 . 2011-04-15 08:58	18816	----a-w-	c:\windows\system32\kd1394.dll
2011-02-24 16:37 . 2011-04-15 08:58	17792	----a-w-	c:\windows\system32\kdcom.dll
2011-02-22 14:47 . 2011-03-23 11:34	479744	----a-w-	c:\windows\system32\XpsGdiConverter.dll
2011-02-22 14:13 . 2011-03-23 11:34	288768	----a-w-	c:\windows\SysWow64\XpsGdiConverter.dll
2011-02-22 13:53 . 2011-03-23 11:34	1555968	----a-w-	c:\windows\system32\DWrite.dll
2011-02-22 13:53 . 2011-03-23 11:34	1149440	----a-w-	c:\windows\system32\FntCache.dll
2011-02-22 13:33 . 2011-03-23 11:34	1068544	----a-w-	c:\windows\SysWow64\DWrite.dll
2011-02-22 06:50 . 2011-04-15 08:58	1147904	----a-w-	c:\windows\system32\wininet.dll
2011-02-22 06:46 . 2011-04-15 08:57	56832	----a-w-	c:\windows\system32\licmgr10.dll
2011-02-22 06:46 . 2011-04-15 08:57	1538560	----a-w-	c:\windows\system32\inetcpl.cpl
2011-02-22 06:46 . 2011-04-15 08:57	132096	----a-w-	c:\windows\system32\iesysprep.dll
2011-02-22 06:46 . 2011-04-15 08:57	77312	----a-w-	c:\windows\system32\iesetup.dll
2011-02-22 06:21 . 2011-04-15 08:58	916480	----a-w-	c:\windows\SysWow64\wininet.dll
2011-02-22 06:17 . 2011-04-15 08:57	43520	----a-w-	c:\windows\SysWow64\licmgr10.dll
2011-02-22 06:16 . 2011-04-15 08:57	1469440	----a-w-	c:\windows\SysWow64\inetcpl.cpl
2011-02-22 06:16 . 2011-04-15 08:57	71680	----a-w-	c:\windows\SysWow64\iesetup.dll
2011-02-22 06:16 . 2011-04-15 08:57	109056	----a-w-	c:\windows\SysWow64\iesysprep.dll
2011-02-22 05:56 . 2011-04-15 08:57	479232	----a-w-	c:\windows\system32\html.iec
2011-02-22 05:20 . 2011-04-15 08:57	385024	----a-w-	c:\windows\SysWow64\html.iec
2011-02-22 05:15 . 2011-04-15 08:57	162816	----a-w-	c:\windows\system32\ieUnatt.exe
2011-02-22 05:14 . 2011-04-15 08:57	1638912	----a-w-	c:\windows\system32\mshtml.tlb
2011-02-22 04:43 . 2011-04-15 08:57	133632	----a-w-	c:\windows\SysWow64\ieUnatt.exe
2011-02-22 04:42 . 2011-04-15 08:57	1638912	----a-w-	c:\windows\SysWow64\mshtml.tlb
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-04-11 1555968]
"BLASC"="c:\program files (x86)\buffed\BLASC.exe" [2009-07-04 2247168]
"Steam"="c:\program files (x86)\Steam\steam.exe" [2010-11-17 1242448]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-21 138240]
"Logitech Vid"="c:\program files (x86)\Logitech\Logitech Vid\vid.exe" [2010-02-12 5933912]
"Pando Media Booster"="c:\program files (x86)\Pando Networks\Media Booster\PMB.exe" [2010-05-04 2937528]
"RayV"="c:\program files (x86)\RayV\RayV\RayV.exe" [2010-10-21 2839848]
"ICQ"="c:\program files (x86)\ICQ7.2\ICQ.exe" [2011-01-05 133432]
"Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2011-03-01 16949128]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"AVMWlanClient"="c:\program files (x86)\avmwlanstick\wlangui.exe" [2009-03-20 1904640]
"LogitechQuickCamRibbon"="c:\program files\Logitech\Logitech WebCam Software\LWS.exe" [2009-10-14 2793304]
"AppleSyncNotifier"="c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe" [2010-04-13 47392]
"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2010-11-29 421888]
"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2011-04-14 421160]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"aux1"=wdmaud.drv
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 gupdate;Google Update Service (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-04-06 136176]
R3 avmeject;AVM Eject;c:\windows\system32\drivers\avmeject.sys [x]
R3 BBSvc;Bing Bar Update Service;c:\program files (x86)\Microsoft\BingBar\BBSvc.EXE [2011-02-28 183560]
R3 dump_wmimmc;dump_wmimmc;c:\gpotato.eu\Dragonica\Release\GameGuard\dump_wmimmc.sys [x]
R3 FWLANUSB;AVM FRITZ!WLAN;c:\windows\system32\DRIVERS\fwlanusb.sys [x]
R3 gupdatem;Google Update-Dienst (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-04-06 136176]
R3 McComponentHostService;McAfee Security Scan Component Host Service;c:\program files (x86)\McAfee Security Scan\2.0.189\McCHSvc.exe [x]
R3 SYMNDISV;Symantec Network Filter Driver;c:\windows\System32\Drivers\NISx64\1008000.029\SYMNDISV.SYS [x]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys [x]
R3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework64\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 1020768]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 57184]
S0 SymDS;Symantec Data Store;c:\windows\system32\drivers\NISx64\1206000.01D\SYMDS64.SYS [x]
S0 SymEFA;Symantec Extended File Attributes;c:\windows\system32\drivers\NISx64\1206000.01D\SYMEFA64.SYS [x]
S1 BHDrvx64;BHDrvx64;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.5.0.125\Definitions\BASHDefs\20110518.001\BHDrvx64.sys [2011-04-15 1127032]
S1 IDSVia64;IDSVia64;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.5.0.125\Definitions\IPSDefs\20110518.001\IDSvia64.sys [2011-03-14 476792]
S1 SymIRON;Symantec Iron Driver;c:\windows\system32\drivers\NISx64\1206000.01D\Ironx64.SYS [x]
S1 SYMTDIv;Symantec Vista Network Dispatch Driver;c:\windows\System32\Drivers\NISx64\1206000.01D\SYMTDIV.SYS [x]
S2 AccWLSvc;AccSys WiFi Server;c:\program files (x86)\Common Files\AccSys\AccWLSvc.exe [2005-03-15 180224]
S2 acedrv11;acedrv11;c:\windows\system32\drivers\acedrv11.sys [x]
S2 LVPrcS64;Process Monitor;c:\program files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe [2009-10-07 191000]
S2 NIS;Norton Internet Security;c:\program files (x86)\Norton Internet Security\Engine\18.6.0.29\ccSvcHst.exe [2011-04-17 130008]
S2 SearchAnonymizer;SearchAnonymizer;c:\users\Benedikt\AppData\Roaming\OCS\SM\SearchAnonymizerHelper.exe [2011-01-10 40960]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\windows\SysWOW64\nvSCPAPISvr.exe [2009-06-10 232960]
S2 TeamViewer4;TeamViewer 4;c:\program files (x86)\TeamViewer\Version4\TeamViewer_Service.exe [2009-06-25 185640]
S3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2011-05-10 136824]
S3 LVPr2M64;Logitech LVPr2M64 Driver;c:\windows\system32\DRIVERS\LVPr2M64.sys [x]
S3 LVRS64;Logitech RightSound Filter Driver;c:\windows\system32\DRIVERS\lvrs64.sys [x]
S3 LVUVC64;Logitech Webcam Pro 9000(UVC);c:\windows\system32\DRIVERS\lvuvc64.sys [x]
.
.
Inhalt des "geplante Tasks" Ordners
.
2011-05-19 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-04-06 15:49]
.
2011-05-19 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-04-06 15:49]
.
2011-05-19 c:\windows\Tasks\User_Feed_Synchronization-{1689147B-B362-4FBC-A05F-76671F67081D}.job
- c:\windows\system32\msfeedssync.exe [2011-04-15 04:43]
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2009-05-06 7751712]
"Skytel"="c:\program files\Realtek\Audio\HDA\Skytel.exe" [2009-05-06 1833504]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2009-06-10 16315424]
"WrtMon.exe"="c:\windows\system32\spool\drivers\x64\3\WrtMon.exe" [2006-09-20 20480]
"Ocs_SM"="c:\users\Benedikt\AppData\Roaming\OCS\SM\SearchAnonymizer.exe" [2011-01-10 106496]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"LoadAppInit_DLLs"=0x0
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = 
mStart Page = hxxp://www.arcor.de
mLocal Page = c:\windows\SysWOW64\blank.htm
mWindow Title = Arcor AG & Co. KG
IE: Free YouTube to MP3 Converter - c:\users\Benedikt\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm
IE: Nach Microsoft &Excel exportieren - c:\progra~2\MICROS~1\OFFICE11\EXCEL.EXE/3000
IE: Nach Microsoft E&xel exportieren - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
FF - ProfilePath - c:\users\Benedikt\AppData\Roaming\Mozilla\Firefox\Profiles\g9q8ziwh.default\
FF - prefs.js: browser.search.defaulturl - 
FF - prefs.js: browser.search.selectedEngine - 
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files (x86)\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - %profile%\extensions\{20a82645-c095-46ed-80e3-08825760534b}
FF - Ext: YouTube Downloader for Facebook: {2122962a-1424-fffe-19af-bba2ef3eff4a} - %profile%\extensions\{2122962a-1424-fffe-19af-bba2ef3eff4a}
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF - Ext: Symantec IPS: {BBDA0591-3099-440a-AA10-41764D9DB4DB} - c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.5.0.125\IPSFFPlgn
FF - Ext: Norton Toolbar: {2D3F3651-74B9-4795-BDEC-6DA2F431CB62} - c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.5.0.125\coFFPlgn
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Wow6432Node-HKCU-Run-PlayNC Launcher - (no file)
Wow6432Node-HKCU-Run-WMPNSCFG - c:\program files (x86)\Windows Media Player\WMPNSCFG.exe
WebBrowser-{EEE6C35B-6118-11DC-9C72-001320C79847} - (no file)
WebBrowser-{872B5B88-9DB5-4310-BDD0-AC189557E5F5} - (no file)
WebBrowser-{9D81AF43-DE53-48D0-A199-42C2A226B24C} - (no file)
HKLM-Run-Windows Defender - c:\program files (x86)\Windows Defender\MSASCui.exe
AddRemove-Free Audio CD Burner_is1 - c:\program files (x86)\DVDVideoSoft\Free Audio CD Burner\unins000.exe
AddRemove-Free Video to MP3 Converter_is1 - c:\program files (x86)\DVDVideoSoft\Free Video to MP3 Converter\unins000.exe
AddRemove-Free YouTube to iPod Converter_is1 - c:\program files (x86)\DVDVideoSoft\Free YouTube to iPod Converter\unins000.exe
AddRemove-Free YouTube to MP3 Converter_is1 - c:\program files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\unins000.exe
AddRemove-Intel® Integrated Performance Primitives 1.1 - c:\windows\system32\UninstIPP.isu
AddRemove-Xfire - c:\program files (x86)\Xfire\uninst.exe
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\NIS]
"ImagePath"="\"c:\program files (x86)\Norton Internet Security\Engine\18.6.0.29\ccSvcHst.exe\" /s \"NIS\" /m \"c:\program files (x86)\Norton Internet Security\Engine\18.6.0.29\diMaster.dll\" /prefetch:1"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\npggsvc]
"ImagePath"="c:\windows\system32\GameMon.des -service"
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_USERS\S-1-5-21-1544613816-4030612606-2687718983-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*æ]
@Class="Shell"
.
[HKEY_USERS\S-1-5-21-1544613816-4030612606-2687718983-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*æ\OpenWithList]
@Class="Shell"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil10c.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\LocalServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\FlashUtil10c.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10c.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10c.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10c.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10c.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}]
@Denied: (A 2) (Everyone)
@="IFlashBroker3"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{D27CDB6B-AE6D-11CF-96B8-444553540000}]
@Denied: (A 2) (Everyone)
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{D27CDB6B-AE6D-11CF-96B8-444553540000}\1.0]
@="Shockwave Flash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{FAB3E735-69C7-453B-A446-B6823C6DF1C9}]
@Denied: (A 2) (Everyone)
@=""
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{FAB3E735-69C7-453B-A446-B6823C6DF1C9}\1.0]
@="FlashBroker"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes]
"SymbolicLinkValue"=hex(6):5c,00,52,00,45,00,47,00,49,00,53,00,54,00,52,00,59,
   00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,4f,00,46,00,\
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\program files (x86)\avmwlanstick\WlanNetService.exe
c:\program files (x86)\Common Files\LogiShrd\LVMVFM\LVPrS64H.exe
c:\program files (x86)\Microsoft\BingBar\SeaPort.EXE
c:\windows\SysWOW64\DllHost.exe
c:\program files (x86)\Common Files\Logishrd\LQCVFX\COCIManager.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2011-05-19  21:23:16 - PC wurde neu gestartet
ComboFix-quarantined-files.txt  2011-05-19 19:23
.
Vor Suchlauf: 13 Verzeichnis(se), 311.827.300.352 Bytes frei
Nach Suchlauf: 19 Verzeichnis(se), 311.671.586.816 Bytes frei
.
- - End Of File - - 1DA559FDE234DCAB8663351B7EB5443B
         

--- --- ---

oh ich habe vergessen es umzubenennen beim runterladen ...schlimmer fehler ?

Ist schon ok.

Bitte nun Logs mit GMER und mbrcheck erstellen und posten.
GMER stürzt häufiger ab, wenn das Tool auch beim 2. Mal nicht will, lass es einfach weg

Anleitung zu mbrcheck:
Downloade Dir MBRCheck (by a_d_13) und speichere die Datei auf dem Desktop.

• Doppelklick auf die MBRCheck.exe.
  Vista und Win7 User mit Rechtsklick "als Administrator starten"
• Das Tool braucht nur wenige Sekunden.
• Danach solltest du eine MBRCheck_<Datum>_<Uhrzeit>.txt auf dem Desktop finden.

Poste mir bitte den Inhalt des .txt Dokumentes

Also: GMER habe ich gemacht ist auch einwandfrei gelaufen dennoch als ich auf copy gedrückt habe ist nichts passiert ...es kam eine nachricht davor "hasnt found ..."
zu MBRcheck:

MBRCheck, version 1.2.3
(c) 2010, AD

Command-line:
Windows Version: Windows Vista Home Premium Edition
Windows Information: Service Pack 2 (build 6002), 64-bit
Base Board Manufacturer: Gigabyte Technology Co., Ltd.
BIOS Manufacturer: Award Software International, Inc.
System Manufacturer: Gigabyte Technology Co., Ltd.
System Product Name: EP31-DS3L
Logical Drives Mask: 0x000000fc

Kernel Drivers (total 202):
0x02064000 \SystemRoot\system32\ntoskrnl.exe
0x0201E000 \SystemRoot\system32\hal.dll
0x00601000 \SystemRoot\system32\kdcom.dll
0x0060B000 \SystemRoot\system32\mcupdate_GenuineIntel.dll
0x00646000 \SystemRoot\system32\PSHED.dll
0x0065A000 \SystemRoot\system32\CLFS.SYS
0x006B7000 \SystemRoot\system32\CI.dll
0x00800000 \SystemRoot\system32\drivers\Wdf01000.sys
0x008DA000 \SystemRoot\system32\drivers\WDFLDR.SYS
0x008E8000 \SystemRoot\system32\drivers\acpi.sys
0x0093E000 \SystemRoot\system32\drivers\WMILIB.SYS
0x00947000 \SystemRoot\system32\drivers\msisadrv.sys
0x00951000 \SystemRoot\system32\drivers\pci.sys
0x00981000 \SystemRoot\system32\drivers\isapnp.sys
0x0098A000 \SystemRoot\system32\drivers\mpio.sys
0x009AC000 \SystemRoot\System32\drivers\partmgr.sys
0x009C1000 \SystemRoot\system32\DRIVERS\compbatt.sys
0x009C5000 \SystemRoot\system32\DRIVERS\BATTC.SYS
0x009D1000 \SystemRoot\system32\drivers\volmgr.sys
0x00769000 \SystemRoot\System32\drivers\volmgrx.sys
0x009E5000 \SystemRoot\system32\drivers\intelide.sys
0x009ED000 \SystemRoot\system32\drivers\PCIIDEX.SYS
0x007CF000 \SystemRoot\system32\drivers\aliide.sys
0x007D6000 \SystemRoot\system32\drivers\amdide.sys
0x007DD000 \SystemRoot\system32\drivers\cmdide.sys
0x007E5000 \SystemRoot\System32\drivers\mountmgr.sys
0x00A06000 \SystemRoot\system32\drivers\msdsm.sys
0x00A24000 \SystemRoot\system32\drivers\nvraid.sys
0x00A47000 \SystemRoot\system32\drivers\CLASSPNP.SYS
0x00A73000 \SystemRoot\system32\drivers\pciide.sys
0x00A7A000 \SystemRoot\system32\drivers\viaide.sys
0x00A82000 \SystemRoot\system32\drivers\iastorv.sys
0x00B49000 \SystemRoot\system32\drivers\atapi.sys
0x00B51000 \SystemRoot\system32\drivers\ataport.SYS
0x00B75000 \SystemRoot\system32\drivers\lsi_scsi.sys
0x00B93000 \SystemRoot\system32\drivers\storport.sys
0x00BF0000 \SystemRoot\system32\drivers\hpcisss.sys
0x00C0E000 \SystemRoot\system32\drivers\adp94xx.sys
0x00C87000 \SystemRoot\system32\drivers\adpahci.sys
0x00CDD000 \SystemRoot\system32\drivers\adpu160m.sys
0x00CFE000 \SystemRoot\system32\drivers\SCSIPORT.SYS
0x00D2C000 \SystemRoot\system32\drivers\adpu320.sys
0x00D5B000 \SystemRoot\system32\drivers\djsvs.sys
0x00D73000 \SystemRoot\system32\drivers\arc.sys
0x00D8C000 \SystemRoot\system32\drivers\arcsas.sys
0x00E02000 \SystemRoot\system32\drivers\elxstor.sys
0x00EA5000 \SystemRoot\system32\drivers\i2omp.sys
0x00EB0000 \SystemRoot\system32\drivers\iirsp.sys
0x00EC1000 \SystemRoot\system32\drivers\iteatapi.sys
0x00ECE000 \SystemRoot\system32\drivers\iteraid.sys
0x00EDB000 \SystemRoot\system32\drivers\lsi_fc.sys
0x00EF9000 \SystemRoot\system32\drivers\lsi_sas.sys
0x00F15000 \SystemRoot\system32\drivers\megasas.sys
0x00F21000 \SystemRoot\system32\drivers\megasr.sys
0x00FE8000 \SystemRoot\system32\drivers\mraid35x.sys
0x00FF5000 \SystemRoot\system32\drivers\msahci.sys
0x00DA5000 \SystemRoot\system32\drivers\nfrd960.sys
0x00DB5000 \SystemRoot\system32\drivers\nvstor.sys
0x01007000 \SystemRoot\system32\drivers\ql2300.sys
0x01159000 \SystemRoot\system32\drivers\ql40xx.sys
0x011B7000 \SystemRoot\system32\drivers\sisraid2.sys
0x011C5000 \SystemRoot\system32\drivers\sisraid4.sys
0x011DB000 \SystemRoot\system32\drivers\symc8xx.sys
0x011E9000 \SystemRoot\system32\drivers\sym_hi.sys
0x00DC5000 \SystemRoot\system32\drivers\sym_u3.sys
0x01208000 \SystemRoot\system32\drivers\uliahci.sys
0x01251000 \SystemRoot\system32\drivers\ulsata.sys
0x01280000 \SystemRoot\system32\drivers\ulsata2.sys
0x012C2000 \SystemRoot\system32\drivers\vsmraid.sys
0x012E9000 \SystemRoot\system32\drivers\fltmgr.sys
0x01330000 \SystemRoot\system32\drivers\NISx64\1206000.01D\SYMDS64.SYS
0x013A1000 \SystemRoot\system32\drivers\fileinfo.sys
0x01404000 \SystemRoot\system32\drivers\NISx64\1206000.01D\SYMEFA64.SYS
0x014E8000 \SystemRoot\System32\Drivers\ksecdd.sys
0x0160B000 \SystemRoot\system32\drivers\ndis.sys
0x0156F000 \SystemRoot\system32\drivers\msrpc.sys
0x01808000 \SystemRoot\system32\drivers\NETIO.SYS
0x01861000 \SystemRoot\System32\drivers\tcpip.sys
0x017CE000 \SystemRoot\System32\drivers\fwpkclnt.sys
0x01A0F000 \SystemRoot\System32\Drivers\Ntfs.sys
0x01B8F000 \SystemRoot\system32\drivers\wd.sys
0x01B97000 \SystemRoot\system32\drivers\volsnap.sys
0x01BDB000 \SystemRoot\System32\Drivers\spldr.sys
0x01BE3000 \SystemRoot\system32\drivers\sbp2port.sys
0x019D7000 \SystemRoot\System32\Drivers\mup.sys
0x015BF000 \SystemRoot\System32\drivers\ecache.sys
0x019E9000 \SystemRoot\system32\drivers\disk.sys
0x01A00000 \SystemRoot\system32\drivers\crcdisk.sys
0x013C1000 \SystemRoot\system32\DRIVERS\tunnel.sys
0x01600000 \SystemRoot\system32\DRIVERS\tunmp.sys
0x013CE000 \SystemRoot\system32\DRIVERS\intelppm.sys
0x02A0B000 \SystemRoot\system32\DRIVERS\nvlddmkm.sys
0x03522000 \SystemRoot\system32\DRIVERS\nvBridge.kmd
0x0380B000 \SystemRoot\System32\drivers\dxgkrnl.sys
0x038EE000 \SystemRoot\System32\drivers\watchdog.sys
0x038FE000 \SystemRoot\system32\DRIVERS\HDAudBus.sys
0x03524000 \SystemRoot\system32\DRIVERS\Rtlh64.sys
0x039EB000 \SystemRoot\system32\DRIVERS\usbuhci.sys
0x03555000 \SystemRoot\system32\DRIVERS\USBPORT.SYS
0x0359B000 \SystemRoot\system32\DRIVERS\usbehci.sys
0x035AC000 \SystemRoot\system32\DRIVERS\serial.sys
0x035C9000 \SystemRoot\system32\DRIVERS\serenum.sys
0x035D5000 \SystemRoot\system32\DRIVERS\parport.sys
0x013E1000 \SystemRoot\system32\DRIVERS\cdrom.sys
0x035F1000 \SystemRoot\System32\drivers\GEARAspiWDM.sys
0x0360C000 \SystemRoot\system32\DRIVERS\msiscsi.sys
0x03645000 \SystemRoot\system32\DRIVERS\TDI.SYS
0x03652000 \SystemRoot\system32\DRIVERS\rasl2tp.sys
0x03675000 \SystemRoot\system32\DRIVERS\ndistapi.sys
0x03681000 \SystemRoot\system32\DRIVERS\ndiswan.sys
0x036B2000 \SystemRoot\system32\DRIVERS\raspppoe.sys
0x036C2000 \SystemRoot\system32\DRIVERS\raspptp.sys
0x036E0000 \SystemRoot\system32\DRIVERS\rassstp.sys
0x036F8000 \SystemRoot\system32\DRIVERS\termdd.sys
0x0370B000 \SystemRoot\system32\DRIVERS\kbdclass.sys
0x03719000 \SystemRoot\system32\DRIVERS\mouclass.sys
0x03725000 \SystemRoot\system32\DRIVERS\swenum.sys
0x03727000 \SystemRoot\system32\DRIVERS\ks.sys
0x0375B000 \SystemRoot\system32\DRIVERS\mssmbios.sys
0x03766000 \SystemRoot\system32\DRIVERS\umbus.sys
0x03776000 \SystemRoot\system32\DRIVERS\usbhub.sys
0x037BE000 \SystemRoot\System32\Drivers\NDProxy.SYS
0x04A06000 \SystemRoot\system32\drivers\RTKVHD64.sys
0x04BB4000 \SystemRoot\system32\drivers\portcls.sys
0x037D2000 \SystemRoot\system32\drivers\drmk.sys
0x04BEF000 \SystemRoot\system32\drivers\ksthunk.sys
0x04BF5000 \SystemRoot\System32\Drivers\Fs_Rec.SYS
0x037F5000 \SystemRoot\System32\Drivers\Null.SYS
0x039F7000 \SystemRoot\system32\DRIVERS\HIDPARSE.SYS
0x00DE9000 \SystemRoot\System32\drivers\vga.sys
0x04807000 \SystemRoot\System32\drivers\VIDEOPRT.SYS
0x0482C000 \SystemRoot\System32\DRIVERS\RDPCDD.sys
0x04835000 \SystemRoot\system32\drivers\rdpencdd.sys
0x0483E000 \SystemRoot\System32\Drivers\Msfs.SYS
0x04849000 \SystemRoot\System32\Drivers\Npfs.SYS
0x0485A000 \SystemRoot\System32\DRIVERS\rasacd.sys
0x04863000 \SystemRoot\system32\DRIVERS\tdx.sys
0x04880000 \SystemRoot\System32\Drivers\NISx64\1206000.01D\SYMTDIV.SYS
0x048F3000 \??\C:\Windows\system32\Drivers\SYMEVENT64x86.SYS
0x04929000 \SystemRoot\system32\DRIVERS\USBSTOR.SYS
0x04941000 \SystemRoot\system32\DRIVERS\USBD.SYS
0x04943000 \SystemRoot\system32\DRIVERS\smb.sys
0x0495E000 \SystemRoot\system32\drivers\afd.sys
0x04E0A000 \SystemRoot\System32\DRIVERS\netbt.sys
0x04E4E000 \SystemRoot\system32\DRIVERS\pacer.sys
0x04E6C000 \SystemRoot\system32\DRIVERS\netbios.sys
0x04E7B000 \SystemRoot\system32\DRIVERS\wanarp.sys
0x04E96000 \SystemRoot\system32\drivers\NISx64\1206000.01D\Ironx64.SYS
0x04EC3000 \SystemRoot\system32\DRIVERS\usbccgp.sys
0x04EDF000 \SystemRoot\system32\drivers\NISx64\1206000.01D\SRTSPX64.SYS
0x05006000 \SystemRoot\system32\DRIVERS\lvuvc64.sys
0x0561A000 \SystemRoot\system32\DRIVERS\rdbss.sys
0x05667000 \SystemRoot\system32\drivers\usbaudio.sys
0x05680000 \SystemRoot\system32\drivers\nsiproxy.sys
0x0568C000 \SystemRoot\system32\DRIVERS\lvrs64.sys
0x056DB000 \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.5.0.125\Definitions\IPSDefs\20110518.001\IDSvia64.sys
0x05756000 \??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys
0x057CF000 \??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys
0x04EF5000 \SystemRoot\System32\Drivers\dfsc.sys
0x05803000 \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.5.0.125\Definitions\BASHDefs\20110518.001\BHDrvx64.sys
0x0591B000 \SystemRoot\system32\DRIVERS\hidusb.sys
0x05924000 \SystemRoot\system32\DRIVERS\HIDCLASS.SYS
0x05936000 \SystemRoot\system32\DRIVERS\kbdhid.sys
0x05941000 \SystemRoot\system32\DRIVERS\mouhid.sys
0x0594C000 \SystemRoot\System32\Drivers\crashdmp.sys
0x0595A000 \SystemRoot\System32\Drivers\dump_dumpata.sys
0x05966000 \SystemRoot\System32\Drivers\dump_atapi.sys
0x00020000 \SystemRoot\System32\win32k.sys
0x0596E000 \SystemRoot\System32\drivers\Dxapi.sys
0x0597A000 \SystemRoot\system32\DRIVERS\monitor.sys
0x00410000 \SystemRoot\System32\TSDDD.dll
0x00640000 \SystemRoot\System32\cdd.dll
0x0598D000 \SystemRoot\system32\drivers\luafv.sys
0x04F12000 \SystemRoot\system32\drivers\spsys.sys
0x059AF000 \SystemRoot\system32\DRIVERS\lltdio.sys
0x059C3000 \SystemRoot\system32\DRIVERS\nwifi.sys
0x057F5000 \SystemRoot\system32\DRIVERS\ndisuio.sys
0x04FAC000 \SystemRoot\system32\DRIVERS\rspndr.sys
0x04FC4000 \SystemRoot\system32\DRIVERS\asyncmac.sys
0x09C02000 \SystemRoot\system32\drivers\HTTP.sys
0x09CA5000 \SystemRoot\System32\DRIVERS\srvnet.sys
0x09CCE000 \SystemRoot\system32\DRIVERS\bowser.sys
0x09CEC000 \SystemRoot\System32\drivers\mpsdrv.sys
0x09D06000 \SystemRoot\system32\drivers\mrxdav.sys
0x09D2D000 \SystemRoot\system32\DRIVERS\mrxsmb.sys
0x09D56000 \SystemRoot\system32\DRIVERS\mrxsmb10.sys
0x09D9F000 \SystemRoot\system32\DRIVERS\mrxsmb20.sys
0x09DBE000 \SystemRoot\System32\DRIVERS\srv2.sys
0x0A008000 \SystemRoot\System32\DRIVERS\srv.sys
0x0A09B000 \??\C:\Windows\system32\drivers\acedrv11.sys
0x0A0F1000 \SystemRoot\system32\drivers\peauth.sys
0x0A1A7000 \SystemRoot\System32\Drivers\secdrv.SYS
0x0A1B2000 \SystemRoot\System32\drivers\tcpipreg.sys
0x0A1C2000 \SystemRoot\system32\DRIVERS\WUDFRd.sys
0x0A1E2000 \SystemRoot\system32\DRIVERS\WUDFPf.sys
0x09DF0000 \SystemRoot\system32\DRIVERS\LVPr2M64.sys
0x04FCF000 \SystemRoot\system32\DRIVERS\cdfs.sys
0x0B804000 \SystemRoot\System32\Drivers\NISx64\1206000.01D\SRTSP64.SYS
0x0BA02000 \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.5.0.125\Definitions\VirusDefs\20110518.036\EX64.SYS
0x0B8C4000 \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.5.0.125\Definitions\VirusDefs\20110518.036\ENG64.SYS
0x0BBF1000 \??\C:\Windows\system32\Drivers\PROCEXP113.SYS
0x77330000 \Windows\System32\ntdll.dll

Processes (total 65):
0 System Idle Process
4 System
444 C:\Windows\System32\smss.exe
512 csrss.exe
564 C:\Windows\System32\wininit.exe
572 csrss.exe
612 C:\Windows\System32\services.exe
640 C:\Windows\System32\winlogon.exe
656 C:\Windows\System32\lsass.exe
664 C:\Windows\System32\lsm.exe
824 C:\Windows\System32\svchost.exe
868 C:\Windows\System32\nvvsvc.exe
896 C:\Windows\System32\svchost.exe
308 C:\Windows\System32\svchost.exe
284 C:\Windows\System32\svchost.exe
456 C:\Windows\System32\svchost.exe
604 C:\Windows\System32\audiodg.exe
880 C:\Windows\System32\svchost.exe
272 C:\Windows\System32\SLsvc.exe
1052 C:\Windows\System32\svchost.exe
1208 C:\Windows\System32\svchost.exe
1284 C:\Windows\System32\nvvsvc.exe
1524 C:\Windows\System32\spoolsv.exe
1548 C:\Windows\System32\svchost.exe
1752 C:\Windows\System32\dwm.exe
1780 C:\Windows\System32\taskeng.exe
1812 C:\Windows\explorer.exe
1860 C:\Windows\System32\taskeng.exe
1772 C:\Program Files (x86)\Common Files\AccSys\AccWLSvc.exe
1972 C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
2036 C:\Program Files (x86)\avmwlanstick\WLanNetService.exe
2120 C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
2184 LVPrS64H.exe
2216 C:\Program Files (x86)\Norton Internet Security\Engine\18.6.0.29\ccsvchst.exe
2256 C:\Windows\System32\svchost.exe
2268 C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE
2348 C:\Users\Benedikt\AppData\Roaming\OCS\SM\SearchAnonymizerHelper.exe
2536 C:\Windows\SysWOW64\nvSCPAPISvr.exe
2564 C:\Windows\System32\svchost.exe
2584 C:\Program Files (x86)\TeamViewer\Version4\TeamViewer_Service.exe
2632 C:\Windows\System32\svchost.exe
2696 C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
2752 C:\Windows\System32\SearchIndexer.exe
2768 C:\Program Files (x86)\Norton Internet Security\Engine\18.6.0.29\ccsvchst.exe
2916 C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
3068 WUDFHost.exe
3176 dllhost.exe
1828 C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
2032 C:\Program Files\Windows Sidebar\sidebar.exe
1328 C:\Program Files (x86)\buffed\BLASC.exe
3800 C:\Windows\ehome\ehtray.exe
3884 C:\Program Files (x86)\Logitech\Logitech Vid\Vid.exe
4012 C:\Program Files (x86)\RayV\RayV\RayV.exe
4060 C:\Program Files (x86)\ICQ7.2\ICQ.exe
560 C:\Windows\ehome\ehmsas.exe
3204 C:\Program Files (x86)\Skype\Phone\Skype.exe
1144 C:\Program Files (x86)\avmwlanstick\WLanGUI.exe
3772 C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe
4520 C:\Program Files\Windows Sidebar\sidebar.exe
4176 C:\Program Files (x86)\Common Files\LogiShrd\LQCVFX\COCIManager.exe
1028 C:\Windows\System32\svchost.exe
1944 C:\Program Files (x86)\Mozilla Firefox\firefox.exe
4264 C:\Windows\System32\SearchProtocolHost.exe
4128 C:\Windows\System32\SearchFilterHost.exe
1080 C:\Users\Benedikt\Desktop\MBRCheck.exe

\\.\C: --> \\.\PhysicalDrive0 at offset 0x00000000`00007e00 (NTFS)

PhysicalDrive0 Model Number: WDCWD6400AAKS-65A7B2, Rev: 01.03B01

Size Device Name MBR Status
--------------------------------------------
596 GB \\.\PhysicalDrive0 Windows 2008 MBR code detected
SHA1: 8DF43F2BDE2D9451948FA14B5279969C777A7979


Done!

Sieht ok aus. Mach bitte zur Kontrolle Vollscans mit Malwarebytes und SUPERAntiSpyware und poste die Logs.
Denk dran beide Tools zu updaten vor dem Scan!!

Malwarebytes' Anti-Malware 1.50.1.1100
Malwarebytes : Free anti-malware, anti-virus and spyware removal download

Datenbank Version: 6611

Windows 6.0.6002 Service Pack 2
Internet Explorer 8.0.6001.19048

20.05.2011 13:30:25
mbam-log-2011-05-20 (13-30-25).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|)
Durchsuchte Objekte: 448151
Laufzeit: 2 Stunde(n), 0 Minute(n), 19 Sekunde(n)

Infizierte Speicherprozesse: 0
Infizierte Speichermodule: 0
Infizierte Registrierungsschlüssel: 0
Infizierte Registrierungswerte: 0
Infizierte Dateiobjekte der Registrierung: 0
Infizierte Verzeichnisse: 0
Infizierte Dateien: 0

Infizierte Speicherprozesse:
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte:
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung:
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse:
(Keine bösartigen Objekte gefunden)

Infizierte Dateien:
(Keine bösartigen Objekte gefunden)

Datenbank Version: 6611

Malwarebytes sollte vorher aktualisiert werden, hab ich extra drauf hingewiesen!

oh ..sorry , also hier ist erst mal der andere log ...der neue Malwarebytes log folgt in kürze


SUPERAntiSpyware Scan Log
SUPERAntiSpyware.com | Remove Malware | Remove Spyware - AntiMalware, AntiSpyware, AntiAdware!

Generated 05/20/2011 at 04:35 PM

Application Version : 4.52.1000

Core Rules Database Version : 7096
Trace Rules Database Version: 4908

Scan type : Complete Scan
Total Scan Time : 02:54:10

Memory items scanned : 549
Memory threats detected : 0
Registry items scanned : 13288
Registry threats detected : 0
File items scanned : 309572
File threats detected : 2

Adware.Tracking Cookie
C:\Users\Benedikt\AppData\Roaming\Microsoft\Windows\Cookies\benedikt@doubleclick[2].txt

Trojan.Agent/Gen
C:\USERS\BENEDIKT\DESKTOP\KP.EXE

C:\USERS\BENEDIKT\DESKTOP\KP.EXE

kp.exe auf dem Desktop sagt dir was?

ja im nachhinein ...hatt mir mal nen freund geschikt irgent sonen dreck habs schon gelöscht ...jezt der Malwarebytes log


Malwarebytes' Anti-Malware 1.50.1.1100
Malwarebytes : Free anti-malware, anti-virus and spyware removal download

Datenbank Version: 6627

Windows 6.0.6002 Service Pack 2
Internet Explorer 8.0.6001.19048

20.05.2011 18:40:48
mbam-log-2011-05-20 (18-40-48).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|)
Durchsuchte Objekte: 448545
Laufzeit: 1 Stunde(n), 54 Minute(n), 54 Sekunde(n)

Infizierte Speicherprozesse: 0
Infizierte Speichermodule: 0
Infizierte Registrierungsschlüssel: 0
Infizierte Registrierungswerte: 0
Infizierte Dateiobjekte der Registrierung: 0
Infizierte Verzeichnisse: 0
Infizierte Dateien: 0

Infizierte Speicherprozesse:
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte:
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung:
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse:
(Keine bösartigen Objekte gefunden)

Infizierte Dateien:
(Keine bösartigen Objekte gefunden)

Gut. Behandeln wir kp.xe als einen Überrest
Sonst nur Cookies.

Ist der Rechner nun wieder im Lot?

ja also es läuft wieder alles einwandfrei ist jezt alles sauber nichts mehr "infected" ? :P