Trojaner-Board - Google-Umleitungen in IE und Firefox (goingonearth), Sicherheitscenter nicht aktivierbar

Hallo nochmals,

habe Combofix nun den Anweisungen entsprechend ausgeführt.

Das Log dazu:

Combofix Logfile:
Code:
ComboFix 11-07-29.01 - ASUS 29.07.2011  16:55:50.1.4 - x64

Microsoft Windows 7 Home Premium   6.1.7601.1.1252.49.1031.18.3884.2375 [GMT 2:00]

ausgeführt von:: c:\users\ASUS\Desktop\ComboFix.exe

AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}

SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}

SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

 * Neuer Wiederherstellungspunkt wurde erstellt

.

.

((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))

.

.

c:\esupport\eDriver\Software\ASUS\MultiFrame\XP32_Vista32_Vista64_Win7_32_Win7_64_1.0.0021\Desktop_.ini

c:\programdata\FullRemove.exe

c:\users\ASUS\AppData\Local\uninst.tmp

.

.

(((((((((((((((((((((((   Dateien erstellt von 2011-06-28 bis 2011-07-29  ))))))))))))))))))))))))))))))

.

.

2011-07-29 15:01 . 2011-07-29 15:01        --------        d-----w-        c:\users\UpdatusUser\AppData\Local\temp

2011-07-29 15:01 . 2011-07-29 15:01        --------        d-----w-        c:\users\Default\AppData\Local\temp

2011-07-27 18:31 . 2011-07-27 18:31        --------        d-----w-        C:\_OTL

2011-07-23 21:32 . 2011-07-23 22:35        --------        d-----w-        c:\program files (x86)\PC Tools Security

2011-07-23 21:32 . 2011-07-23 22:35        --------        d-----w-        c:\program files (x86)\Common Files\PC Tools

2011-07-23 21:29 . 2011-07-23 21:43        --------        d-----w-        c:\programdata\PC Tools

2011-07-23 21:29 . 2011-07-23 21:29        512992        ----a-w-        C:\sdsetup.exe

2011-07-23 20:35 . 2011-07-23 20:35        --------        d-----w-        c:\programdata\Kaspersky Lab

2011-07-23 20:30 . 2011-07-23 20:33        99415536        ----a-w-        C:\setup_11.0.0.1245.x01_2011_07_23_23_20.exe

2011-07-23 18:50 . 2011-07-28 08:59        --------        d-----w-        c:\programdata\Spybot - Search & Destroy

2011-07-23 18:50 . 2011-07-24 12:11        --------        d-----w-        c:\program files (x86)\Spybot - Search & Destroy

2011-07-23 18:34 . 2011-07-23 18:34        302592        ----a-w-        C:\74s089ie.exe

2011-07-23 14:29 . 2011-07-23 14:29        --------        d-----w-        c:\users\ASUS\AppData\Roaming\SUPERAntiSpyware.com

2011-07-23 14:29 . 2011-07-23 14:29        --------        d-----w-        c:\programdata\SUPERAntiSpyware.com

2011-07-23 14:29 . 2011-07-23 14:29        --------        d-----w-        c:\programdata\!SASCORE

2011-07-23 14:29 . 2011-07-23 14:29        --------        d-----w-        c:\program files\SUPERAntiSpyware

2011-07-23 14:23 . 2011-07-23 14:23        11645704        ----a-w-        C:\SUPERAntiSpyware.exe

2011-07-23 14:20 . 2011-07-23 14:21        1915904        ----a-w-        C:\aswMBR.exe

2011-07-23 11:47 . 2011-07-23 11:47        --------        d-----w-        c:\users\ASUS\AppData\Roaming\Malwarebytes

2011-07-23 11:46 . 2011-07-23 11:46        --------        d-----w-        c:\programdata\Malwarebytes

2011-07-23 11:46 . 2011-07-06 17:52        41272        ----a-w-        c:\windows\SysWow64\drivers\mbamswissarmy.sys

2011-07-23 11:46 . 2011-07-23 11:50        --------        d-----w-        c:\program files (x86)\Malwarebytes' Anti-Malware

2011-07-23 11:46 . 2011-07-06 17:52        25912        ----a-w-        c:\windows\system32\drivers\mbam.sys

2011-07-23 03:30 . 2011-07-23 03:30        --------        d-----w-        c:\program files (x86)\ESET

2011-07-15 23:39 . 2011-07-15 23:39        --------        d-----w-        c:\users\ASUS\AppData\Roaming\Leadertech

2011-07-13 18:36 . 2011-06-03 06:57        362496        ----a-w-        c:\windows\system32\wow64win.dll

2011-07-13 18:36 . 2011-06-03 06:57        214528        ----a-w-        c:\windows\system32\winsrv.dll

2011-07-13 18:36 . 2011-06-03 06:53        338944        ----a-w-        c:\windows\system32\conhost.exe

2011-07-13 18:36 . 2011-06-03 06:57        243200        ----a-w-        c:\windows\system32\wow64.dll

2011-07-13 18:36 . 2011-06-03 06:57        13312        ----a-w-        c:\windows\system32\wow64cpu.dll

2011-07-13 18:36 . 2011-06-03 06:57        16384        ----a-w-        c:\windows\system32\ntvdm64.dll

2011-07-13 18:36 . 2011-06-03 06:00        14336        ----a-w-        c:\windows\SysWow64\ntvdm64.dll

2011-07-13 18:36 . 2011-06-03 05:57        25600        ----a-w-        c:\windows\SysWow64\setup16.exe

2011-07-13 18:36 . 2011-06-03 05:56        5120        ----a-w-        c:\windows\SysWow64\wow32.dll

2011-07-13 18:36 . 2011-06-03 03:53        7680        ----a-w-        c:\windows\SysWow64\instnm.exe

2011-07-13 18:36 . 2011-06-03 03:53        2048        ----a-w-        c:\windows\SysWow64\user.exe

2011-07-12 19:02 . 2011-02-19 12:05        1139200        ----a-w-        c:\windows\system32\FntCache.dll

2011-07-12 19:02 . 2011-02-19 12:04        902656        ----a-w-        c:\windows\system32\d2d1.dll

2011-07-12 19:02 . 2011-02-19 06:30        1076736        ----a-w-        c:\windows\SysWow64\DWrite.dll

2011-07-12 19:02 . 2011-02-19 12:04        1544192        ----a-w-        c:\windows\system32\DWrite.dll

2011-07-12 19:02 . 2011-02-19 06:30        739840        ----a-w-        c:\windows\SysWow64\d2d1.dll

2011-07-11 22:02 . 2011-07-11 22:02        --------        d-----w-        c:\windows\system32\SPReview

2011-07-11 22:01 . 2011-07-11 22:01        --------        d-----w-        c:\windows\system32\EventProviders

2011-07-11 20:16 . 2011-07-11 23:05        --------        d-----w-        c:\programdata\VirtualizedApplications

2011-07-11 18:05 . 2011-07-15 18:58        --------        d-----w-        c:\users\ASUS\AppData\Roaming\SoftGrid Client

2011-07-11 18:05 . 2011-07-11 18:05        --------        d-----w-        c:\users\ASUS\AppData\Local\SoftGrid Client

2011-07-11 18:05 . 2011-07-14 09:00        --------        d-----w-        c:\program files (x86)\Microsoft Application Virtualization Client

2011-07-11 18:04 . 2011-07-11 18:05        --------        d-----w-        c:\users\ASUS\AppData\Roaming\TP

2011-07-10 17:58 . 2010-11-05 01:57        48976        ----a-w-        c:\windows\system32\netfxperf.dll

2011-07-10 17:58 . 2010-11-05 01:57        1942856        ----a-w-        c:\windows\system32\dfshim.dll

2011-07-10 17:56 . 2010-11-20 13:26        777728        ----a-w-        c:\windows\system32\gpsvc.dll

2011-07-10 17:55 . 2010-11-20 13:33        31104        ----a-w-        c:\windows\system32\drivers\msahci.sys

2011-07-10 17:54 . 2010-11-20 13:27        392192        ----a-w-        c:\windows\system32\WMPhoto.dll

2011-07-10 17:53 . 2010-11-20 12:21        363008        ----a-w-        c:\windows\SysWow64\wbemcomn.dll

2011-07-10 17:53 . 2010-11-20 12:19        606208        ----a-w-        c:\windows\SysWow64\wbem\fastprox.dll

2011-07-10 17:51 . 2010-11-20 13:27        529408        ----a-w-        c:\windows\system32\wbemcomn.dll

2011-07-10 14:59 . 2011-07-10 14:59        --------        d-----w-        c:\program files (x86)\Common Files\Adobe

2011-07-09 21:48 . 2011-07-09 21:50        --------        d-----w-        c:\users\ASUS\AppData\Local\Axialis

2011-07-08 19:53 . 2011-07-08 19:53        --------        d-----w-        c:\users\ASUS\AppData\Local\Microsoft Games

2011-07-08 18:38 . 2011-07-12 21:56        --------        d-----w-        c:\users\ASUS\AppData\Roaming\AOL

2011-07-08 18:37 . 2011-07-08 18:37        --------        d-----w-        c:\program files (x86)\Common Files\Nullsoft

2011-07-08 18:37 . 2011-07-08 18:37        --------        d-----w-        c:\programdata\Viewpoint

2011-07-08 18:37 . 2011-07-08 18:37        --------        d-----w-        c:\program files (x86)\Viewpoint

2011-07-08 18:37 . 2011-07-08 18:37        --------        d-----w-        c:\users\ASUS\AppData\Local\AOL

2011-07-08 18:37 . 2006-11-29 22:24        24064        ----a-w-        c:\windows\system32\drivers\wanatw64.sys

2011-07-08 18:36 . 2011-07-11 09:35        --------        d-----w-        c:\program files (x86)\AOL 9.0 VR

2011-07-08 18:36 . 2011-07-08 18:37        --------        d-----w-        c:\programdata\AOL

2011-07-08 18:36 . 2011-07-08 18:37        --------        d-----w-        c:\program files (x86)\Common Files\aol

2011-07-08 18:28 . 2011-07-08 18:35        --------        d-----w-        c:\programdata\AOL Downloads

2011-07-08 17:11 . 2011-07-15 17:47        --------        d-----w-        c:\users\ASUS\AppData\Local\ElevatedDiagnostics

2011-07-08 16:37 . 2011-07-08 16:37        --------        d-----w-        c:\users\ASUS\AppData\Roaming\Stellarium

2011-07-08 16:37 . 2011-07-08 16:37        --------        d-----w-        c:\program files (x86)\Stellarium

2011-07-05 23:06 . 2011-07-05 23:06        --------        d-----w-        c:\program files (x86)\xp-AntiSpy

2011-07-05 23:02 . 2011-07-28 08:59        --------        d-----w-        c:\program files\CCleaner

2011-07-05 22:49 . 2011-07-05 22:49        --------        d-----w-        c:\programdata\ASUS

2011-07-05 18:33 . 2011-07-23 00:55        --------        d-----w-        c:\users\ASUS\AppData\Roaming\TV-Browser

2011-07-05 18:33 . 2011-07-05 18:33        --------        d-----w-        c:\program files (x86)\Common Files\Java

2011-07-05 18:33 . 2011-07-05 18:33        472808        ----a-w-        c:\windows\SysWow64\deployJava1.dll

2011-07-05 18:33 . 2011-07-05 18:33        --------        d-----w-        c:\program files (x86)\Java

2011-07-05 18:31 . 2011-07-05 18:31        --------        d-----w-        c:\program files (x86)\TV-Browser

2011-07-04 10:29 . 2009-03-09 13:27        5425496        ----a-w-        c:\windows\system32\D3DX9_41.dll

.

.

.

((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2011-07-11 22:10 . 2009-07-14 02:36        152576        ----a-w-        c:\windows\SysWow64\msclmd.dll

2011-07-11 22:10 . 2009-07-14 02:36        175616        ----a-w-        c:\windows\system32\msclmd.dll

2011-07-04 11:43 . 2011-06-25 19:09        40112        ----a-w-        c:\windows\avastSS.scr

2011-07-04 11:43 . 2011-06-25 19:09        199304        ----a-w-        c:\windows\SysWow64\aswBoot.exe

2011-07-04 11:43 . 2011-06-25 19:10        253888        ----a-w-        c:\windows\system32\aswBoot.exe

2011-07-04 11:36 . 2011-06-25 19:10        600920        ----a-w-        c:\windows\system32\drivers\aswSnx.sys

2011-07-04 11:36 . 2011-06-25 19:10        288088        ----a-w-        c:\windows\system32\drivers\aswSP.sys

2011-07-04 11:35 . 2011-06-25 19:10        45400        ----a-w-        c:\windows\system32\drivers\aswTdi.sys

2011-07-04 11:32 . 2011-06-25 19:10        31064        ----a-w-        c:\windows\system32\drivers\aswRdr.sys

2011-07-04 11:32 . 2011-06-25 19:10        64856        ----a-w-        c:\windows\system32\drivers\aswMonFlt.sys

2011-07-04 11:32 . 2011-06-25 19:10        22360        ----a-w-        c:\windows\system32\drivers\aswFsBlk.sys

2011-06-03 05:57 . 2011-07-13 18:36        44032        ----a-w-        c:\windows\apppatch\acwow64.dll

2011-05-28 03:30 . 2011-06-26 00:11        1638912        ----a-w-        c:\windows\system32\mshtml.tlb

2011-05-28 02:53 . 2011-06-26 00:11        1638912        ----a-w-        c:\windows\SysWow64\mshtml.tlb

2011-05-03 05:29 . 2011-06-26 00:10        976896        ----a-w-        c:\windows\system32\inetcomm.dll

2011-05-03 04:30 . 2011-06-26 00:10        741376        ----a-w-        c:\windows\SysWow64\inetcomm.dll

.

.

((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))

.

.

*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 

REGEDIT4

.

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1475584]

"SUPERAntiSpyware"="c:\program files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2011-06-30 2988928]

"SpybotSD TeaTimer"="c:\program files (x86)\Spybot - Search & Destroy\TeaTimer.exe" [2009-03-05 2260480]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]

"UpdateP2GoShortCut"="c:\program files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe" [2009-05-20 222504]

"NUSB3MON"="c:\program files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe" [2010-04-27 113288]

"ATKOSD2"="c:\program files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe" [2010-02-04 7350912]

"ATKMEDIA"="c:\program files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe" [2010-01-05 170624]

"HControlUser"="c:\program files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe" [2009-06-19 105016]

"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2011-07-04 3493720]

"Malwarebytes' Anti-Malware"="c:\program files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" [2011-07-06 449584]

.

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\

Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2010-3-12 1083680]

SRS Premium Sound.lnk - c:\windows\Installer\{E5CF6B9C-3ABE-43C9-9413-AD5FFC98F049}\NewShortcut5_21C7B668029A47458B27645FE6E4A715.exe [2010-11-9 156952]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"ConsentPromptBehaviorAdmin"= 0 (0x0)

"ConsentPromptBehaviorUser"= 0 (0x0)

"EnableUIADesktopToggle"= 0 (0x0)

"PromptOnSecureDesktop"= 0 (0x0)

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]

"AppInit_DLLs"=c:\windows\SysWOW64\nvinit.dll

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]

"mixer2"=wdmaud.drv

.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE]

@=""

.

R2 {B154377D-700F-42cc-9474-23858FBDF4BD};Power Control [2010/11/09 03:38];c:\program files (x86)\CyberLink\PowerDVD9\000.fcl [x]

R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]

R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]

R3 AmUStor;AM USB Stroage Driver;c:\windows\system32\drivers\AmUStor.SYS [x]

R3 btusbflt;Bluetooth USB Filter;c:\windows\system32\drivers\btusbflt.sys [x]

R3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys [x]

R3 cpuz135;cpuz135;c:\users\ASUS\AppData\Local\Temp\cpuz135\cpuz135_x64.sys [x]

R3 MyWiFiDHCPDNS;Wireless PAN DHCP Server;c:\program files\Intel\WiFi\bin\PanDhcpDns.exe [2010-03-05 340240]

R3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]

R3 SiSGbeLH;SiS191/SiS190 Ethernet Device NDIS 6.0 Driver;c:\windows\system32\DRIVERS\SiSG664.sys [x]

R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]

R3 TurboBoost;TurboBoost;c:\program files\Intel\TurboBoost\TurboBoost.exe [2009-08-06 118672]

S1 aswSnx;aswSnx; [x]

S1 aswSP;aswSP; [x]

S1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\SASDIFSV64.SYS [2011-07-12 14928]

S1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL64.SYS [2011-07-12 12368]

S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x]

S2 !SASCORE;SAS Core Service;c:\program files\SUPERAntiSpyware\SASCORE64.EXE [2011-05-04 128384]

S2 {329F96B6-DF1E-4328-BFDA-39EA953C1312};Power Control [2011/06/25 19:59];c:\program files (x86)\CyberLink\PowerDVD11\Common\NavFilter\000.fcl [2011-04-12 09:16 148976]

S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2011-06-06 64952]

S2 AFBAgent;AFBAgent;c:\windows\system32\FBAgent.exe [x]

S2 ASMMAP64;ASMMAP64;c:\program files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys [2009-07-03 15416]

S2 aswFsBlk;aswFsBlk; [x]

S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [x]

S2 CLHNServiceForPowerDVD;CLHNServiceForPowerDVD;c:\program files (x86)\CyberLink\PowerDVD11\Kernel\DMP\CLHNServiceForPowerDVD.exe [2011-04-20 83240]

S2 cvhsvc;Client Virtualization Handler;c:\program files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [2010-02-28 821664]

S2 CyberLink PowerDVD 11.0 Monitor Service;CyberLink PowerDVD 11.0 Monitor Service;c:\program files (x86)\CyberLink\PowerDVD11\Common\MediaServer\CLMSMonitorService.exe [2011-03-31 70952]

S2 CyberLink PowerDVD 11.0 Service;CyberLink PowerDVD 11.0 Service;c:\program files (x86)\CyberLink\PowerDVD11\Common\MediaServer\CLMSServer.exe [2011-03-31 312616]

S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2011-07-06 366640]

S2 ntk_PowerDVD;ntk_PowerDVD;c:\program files (x86)\CyberLink\PowerDVD11\Kernel\DMP\ntk_PowerDVD_64.sys [2011-04-20 75248]

S2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2010-03-27 1800808]

S2 SBSDWSCService;SBSD Security Center Service;c:\program files (x86)\Spybot - Search & Destroy\SDWinSec.exe [2009-01-26 1153368]

S2 sftlist;Application Virtualization Client;c:\program files (x86)\Microsoft Application Virtualization Client\sftlist.exe [2010-04-23 483688]

S2 TurboB;Turbo Boost UI Monitor driver;c:\windows\system32\DRIVERS\TurboB.sys [x]

S2 UNS;Intel(R) Management & Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2009-10-01 2314240]

S3 ETD;ELAN PS/2 Port Input Device;c:\windows\system32\DRIVERS\ETD.sys [x]

S3 HECIx64;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys [x]

S3 Impcd;Impcd;c:\windows\system32\DRIVERS\Impcd.sys [x]

S3 IntcDAud;Intel(R) Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys [x]

S3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C62x64.sys [x]

S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [x]

S3 NETw5s64;Intel(R) Wireless WiFi Link der Serie 5000 Adaptertreiber für Windows 7 64-Bit;c:\windows\system32\DRIVERS\NETw5s64.sys [x]

S3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\nusb3hub.sys [x]

S3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\nusb3xhc.sys [x]

S3 Sftfs;Sftfs;c:\windows\system32\DRIVERS\Sftfslh.sys [x]

S3 Sftplay;Sftplay;c:\windows\system32\DRIVERS\Sftplaylh.sys [x]

S3 Sftredir;Sftredir;c:\windows\system32\DRIVERS\Sftredirlh.sys [x]

S3 Sftvol;Sftvol;c:\windows\system32\DRIVERS\Sftvollh.sys [x]

S3 sftvsa;Application Virtualization Service Agent;c:\program files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [2010-04-23 209768]

S3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\system32\DRIVERS\vwifimp.sys [x]

S3 wdkmd;Intel WiDi KMD;c:\windows\system32\DRIVERS\WDKMD.sys [x]

.

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{2D46B6DC-2207-486B-B523-A557E6D54B47}]

2010-11-20 12:17        302592        ----a-w-        c:\windows\System32\cmd.exe

.

.

--------- x86-64 -----------

.

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]

@="{472083B0-C522-11CF-8763-00608CC02F24}"

[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]

2011-07-04 11:43        134384        ----a-w-        c:\program files\AVAST Software\Avast\ashShA64.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\AsusWSShellExt_B]

@="{6D4133E5-0742-4ADC-8A8C-9303440F7190}"

[HKEY_CLASSES_ROOT\CLSID\{6D4133E5-0742-4ADC-8A8C-9303440F7190}]

2009-11-26 05:49        70656        ----a-w-        c:\program files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSShellExt64.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\AsusWSShellExt_O]

@="{64174815-8D98-4CE6-8646-4C039977D808}"

[HKEY_CLASSES_ROOT\CLSID\{64174815-8D98-4CE6-8646-4C039977D808}]

2009-11-26 05:49        70656        ----a-w-        c:\program files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSShellExt64.dll

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"ETDWare"="c:\program files\Elantech\ETDCtrl.exe" [2009-09-30 621440]

"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2010-03-27 17412200]

"AmIcoSinglun64"="c:\program files (x86)\AmIcoSingLun\AmIcoSinglun64.exe" [2009-09-01 323584]

"IgfxTray"="c:\windows\system32\igfxtray.exe" [2011-02-11 162328]

"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2011-02-11 386584]

"Persistence"="c:\windows\system32\igfxpers.exe" [2011-02-11 417304]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]

"LoadAppInit_DLLs"=0x1

"AppInit_DLLs"=c:\windows\System32\nvinitx.dll

.

------- Zusätzlicher Suchlauf -------

.

uLocal Page = c:\windows\system32\blank.htm

uStart Page = hxxp://www.google.de/

mLocal Page = c:\windows\SysWOW64\blank.htm

TCP: DhcpNameServer = 192.168.1.1

FF - ProfilePath - c:\users\ASUS\AppData\Roaming\Mozilla\Firefox\Profiles\4gwa5rnw.default\

FF - prefs.js: browser.search.selectedEngine - Wikipedia (de)

FF - prefs.js: browser.startup.homepage - www.google.de/firefox

.

- - - - Entfernte verwaiste Registrierungseinträge - - - -

.

Toolbar-Locked - (no file)

Toolbar-Locked - (no file)

AddRemove-Active WebCam - c:\program files\Active WebCam\PY_UNINSTAL.EXE SOFTWARE\PySoft\Act_WebCam

.

.

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\{329F96B6-DF1E-4328-BFDA-39EA953C1312}]

"ImagePath"="\??\c:\program files (x86)\CyberLink\PowerDVD11\Common\NavFilter\000.fcl"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\{B154377D-700F-42cc-9474-23858FBDF4BD}]

"ImagePath"="\??\c:\program files (x86)\CyberLink\PowerDVD9\000.fcl"

.

--------------------- Gesperrte Registrierungsschluessel ---------------------

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}]

@Denied: (A 2) (Everyone)

@="FlashBroker"

"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil10d.exe,-101"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\Elevation]

"Enabled"=dword:00000001

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\LocalServer32]

@="c:\\Windows\\SysWow64\\Macromed\\Flash\\FlashUtil10d.exe"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Shockwave Flash Object"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10d.ocx"

"ThreadingModel"="Apartment"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]

@="0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]

@="ShockwaveFlash.ShockwaveFlash.10"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10d.ocx, 1"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="ShockwaveFlash.ShockwaveFlash"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Macromedia Flash Factory Object"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10d.ocx"

"ThreadingModel"="Apartment"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]

@="FlashFactory.FlashFactory.1"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10d.ocx, 1"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="FlashFactory.FlashFactory"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}]

@Denied: (A 2) (Everyone)

@="IFlashBroker3"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\ProxyStubClsid32]

@="{00020424-0000-0000-C000-000000000046}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

"Version"="1.0"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

"BlindDial"=dword:00000000

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]

@Denied: (Full) (Everyone)

.

Zeit der Fertigstellung: 2011-07-29  17:04:05

ComboFix-quarantined-files.txt  2011-07-29 15:04

.

Vor Suchlauf: 9 Verzeichnis(se), 88.986.939.392 Bytes frei

Nach Suchlauf: 14 Verzeichnis(se), 88.858.968.064 Bytes frei

.

- - End Of File - - 98BD981977403F098DF1DD8721BC9062
--- --- ---

Gibt es nun noch etwas zu tun?

Danke!