Trojaner-Board - Windows Blockiert 50 Euro Zahlungsaufforderung Ukash

okay hier ist die Combofix log :
Code:
ComboFix 12-02-08.01 - Lukas 08.02.2012  16:04:12.1.2 - x86

Microsoft® Windows Vista™ Home Premium   6.0.6002.2.1252.49.1031.18.3070.2372 [GMT 1:00]

ausgeführt von:: c:\users\Lukas\Desktop\ComboFix.exe

AV: Avira Desktop *Enabled/Updated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}

SP: Avira Desktop *Enabled/Updated* {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}

SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

.

.

((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))

.

.

c:\users\Lukas\AppData\Local\assembly\tmp

c:\windows\IsUn0407.exe

.

.

(((((((((((((((((((((((   Dateien erstellt von 2012-01-08 bis 2012-02-08  ))))))))))))))))))))))))))))))

.

.

2012-02-07 20:44 . 2012-02-07 20:44        --------        d-----w-        C:\_OTL

2012-02-07 14:28 . 2012-01-06 04:19        6557240        ----a-w-        c:\programdata\Microsoft\Windows Defender\Definition Updates\{02830396-828C-4B01-81C4-4A6FEE264298}\mpengine.dll

2012-02-06 18:27 . 2012-02-06 18:27        --------        d-----w-        c:\program files\ESET

2012-02-06 17:05 . 2012-02-06 17:05        --------        d-----w-        c:\users\Lukas\AppData\Roaming\Malwarebytes

2012-02-06 17:05 . 2012-02-06 17:05        --------        d-----w-        c:\program files\Malwarebytes' Anti-Malware

2012-02-06 17:05 . 2012-02-06 17:05        --------        d-----w-        c:\programdata\Malwarebytes

2012-02-06 17:05 . 2011-12-10 14:24        20464        ----a-w-        c:\windows\system32\drivers\mbam.sys

2012-02-01 19:13 . 2012-02-01 19:15        --------        d-----w-        c:\users\Lukas\AppData\Local\jZip

2012-02-01 19:13 . 2012-02-01 19:13        --------        d-----w-        c:\program files\jZip

.

.

.

((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2012-01-26 23:21 . 2009-10-05 20:43        237072        ------w-        c:\windows\system32\MpSigStub.exe

2011-12-26 11:50 . 2011-05-26 16:06        414368        ----a-w-        c:\windows\system32\FlashPlayerCPLApp.cpl

2011-12-10 17:59 . 2011-12-02 17:50        134856        ----a-w-        c:\windows\system32\drivers\avipbb.sys

2011-11-23 13:37 . 2012-01-07 17:14        2043904        ----a-w-        c:\windows\system32\win32k.sys

2011-11-10 19:18 . 2011-11-10 19:18        2829        ----a-w-        c:\windows\War3Unin.pif

2011-11-10 19:18 . 2011-11-10 19:18        126976        ----a-w-        c:\windows\War3Unin.exe

2012-02-04 12:11 . 2011-04-30 23:56        134104        ----a-w-        c:\program files\mozilla firefox\components\browsercomps.dll

.

.

((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))

.

.

*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 

REGEDIT4

.

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-04-11 1233920]

"RocketDock"="c:\program files\RocketDock\RocketDock.exe" [2007-09-02 495616]

"Pando Media Booster"="c:\program files\Pando Networks\Media Booster\PMB.exe" [2010-08-08 2937528]

"EPLTarget\P0000000000000000"="c:\windows\system32\spool\DRIVERS\W32X86\3\E_TATIHVE.EXE" [2011-04-24 219008]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"LanguageShortcut"="c:\program files\CyberLink\PowerDVD\Language\Language.exe" [2006-12-05 54832]

"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2011-10-19 258512]

"VolPanel"="c:\program files\USB Headsets\Volume Panel\VolPanlu.exe" [2008-05-05 221300]

"SecurDisc"="c:\program files\Nero\Nero 7\InCD\NBHGui.exe" [2007-05-15 1628208]

"RemoteControl"="c:\program files\CyberLink\PowerDVD\PDVDServ.exe" [2006-11-23 56928]

"NeroFilterCheck"="c:\program files\Common Files\Ahead\Lib\NeroCheck.exe" [2007-03-01 153136]

"LGODDFU"="c:\program files\lg_fwupdate\fwupdate.exe" [2008-08-05 249856]

"InCD"="c:\program files\Nero\Nero 7\InCD\InCD.exe" [2007-05-15 1057328]

.

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\

Bluetooth Manager.lnk - c:\program files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe [2007-1-18 2752512]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"EnableUIADesktopToggle"= 0 (0x0)

.

[HKLM\~\startupfolder\C:^Users^Lukas^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OpenOffice.org 2.4.lnk]

path=c:\users\Lukas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 2.4.lnk

backup=c:\windows\pss\OpenOffice.org 2.4.lnk.Startup

backupExtension=.Startup

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]

2008-06-12 00:38        34672        ----a-w-        c:\program files\Adobe\Reader 9.0\Reader\reader_sl.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]

2010-11-29 15:38        421888        ----a-w-        c:\program files\QuickTime\QTTask.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]

2011-06-09 12:06        254696        ----a-w-        c:\program files\Common Files\Java\Java Update\jusched.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Windows Defender]

2008-01-19 07:38        1008184        ----a-w-        c:\program files\Windows Defender\MSASCui.exe

.

--- Andere Dienste/Treiber im Speicher ---

.

*NewlyCreated* - 45247663

*Deregistered* - 45247663

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]

LocalServiceAndNoImpersonation        REG_MULTI_SZ           FontCache

.

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{A8D647C8-65AC-409F-B7B2-3C0FEE1A32F2}]

2010-02-16 18:02        114688        ----a-w-        c:\program files\PixiePack Codec Pack\InstallerHelper.exe

.

Inhalt des "geplante Tasks" Ordners

.

2012-01-27 c:\windows\Tasks\Google Software Updater.job

- c:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-05-30 17:24]

.

2012-02-08 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job

- c:\program files\Google\Update\GoogleUpdate.exe [2009-05-30 08:37]

.

2012-02-08 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

- c:\program files\Google\Update\GoogleUpdate.exe [2009-05-30 08:37]

.

.

------- Zusätzlicher Suchlauf -------

.

uStart Page = hxxp://www.google.de/

uInternet Settings,ProxyOverride = *.local

IE: {{73C6DCFB-B606-47F3-BDFA-9A4FBF931E37} - c:\program files\ICQ7.4\ICQ.exe

TCP: DhcpNameServer = 192.168.1.1

FF - ProfilePath - c:\users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\fwgaeijc.default\

FF - prefs.js: browser.startup.homepage - www.google.de

.

- - - - Entfernte verwaiste Registrierungseinträge - - - -

.

HKCU-Run-NCsoft Launcher - c:\program files\ncsoft\launcher\NCLauncher.exe

HKCU-Run-ICQ - c:\program files\ICQ6.5\ICQ.exe

AddRemove-Heroes of Might and Magic IV - c:\windows\IsUn0407.exe

.

.

.

**************************************************************************

.

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, hxxp://www.gmer.net

Rootkit scan 2012-02-08 16:10

Windows 6.0.6002 Service Pack 2 NTFS

.

Scanne versteckte Prozesse... 

.

Scanne versteckte Autostarteinträge... 

.

Scanne versteckte Dateien... 

.

Scan erfolgreich abgeschlossen

versteckte Dateien: 0

.

**************************************************************************

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\npggsvc]

"ImagePath"="c:\windows\system32\GameMon.des -service"

.

--------------------- Gesperrte Registrierungsschluessel ---------------------

.

[HKEY_USERS\S-1-5-21-2855818782-257505807-4062626904-1000\Software\SecuROM\License information*]

@Allowed: (Read) (RestrictedCode)

.

Zeit der Fertigstellung: 2012-02-08  16:13:06

ComboFix-quarantined-files.txt  2012-02-08 15:12

.

Vor Suchlauf: 10 Verzeichnis(se), 177.080.352.768 Bytes frei

Nach Suchlauf: 13 Verzeichnis(se), 177.351.163.904 Bytes frei

.

- - End Of File - - EB89938DC2DF76A25C1E685E1E5AD10A