Trojaner-Board - GVU 2.07 auf Windows 7 64 Bit

Es hat alles so geklappt wie Du es beschrieben hast, hier die
Logfiles:

Code:

2012-08-07 17:00:56 . 2012-08-07 17:00:56               80 ----a-w-  C:\Qoobox\Quarantine\Registry_backups\HKLM-Run-SynTPEnh.reg.dat

2012-08-07 16:53:11 . 2012-08-07 16:53:11              153 ----a-w-  C:\Qoobox\Quarantine\Registry_backups\Wow6432Node-HKCU-Run-KiesHelper.reg.dat

2012-08-07 16:43:32 . 2012-08-07 16:43:32        1,545,016 ----a-w-  C:\Qoobox\Quarantine\C\Users\*****\AppData\Local\Temp\SimpleTap\assembly\dl3\78bc80c8\00cf9436_af32cd01\DefaultTheme.dll.vir

2012-08-07 16:43:32 . 2012-08-07 16:43:32           33,592 ----a-w-  C:\Qoobox\Quarantine\C\Users\*****\AppData\Local\Temp\SimpleTap\assembly\dl3\26735453\00809d4f_af32cd01\Skype.dll.vir

2012-08-07 16:43:32 . 2012-08-07 16:43:32          114,488 ----a-w-  C:\Qoobox\Quarantine\C\Users\*****\AppData\Local\Temp\SimpleTap\assembly\dl3\84fa94a6\00727648_af32cd01\LenovoSolutionCenter.dll.vir

2012-08-07 16:43:32 . 2012-08-07 16:43:32          113,976 ----a-w-  C:\Qoobox\Quarantine\C\Users\*****\AppData\Local\Temp\SimpleTap\assembly\dl3\251c0004\00809d4f_af32cd01\Wikipedia.dll.vir

2012-08-07 16:43:32 . 2012-08-07 16:43:32           14,136 ----a-w-  C:\Qoobox\Quarantine\C\Users\*****\AppData\Local\Temp\SimpleTap\assembly\dl3\4a766f0b\00e07729_af32cd01\DisplayBrightnessApi.dll.vir

2012-08-07 16:43:32 . 2012-08-07 16:43:32           88,888 ----a-w-  C:\Qoobox\Quarantine\C\Users\*****\AppData\Local\Temp\SimpleTap\assembly\dl3\69593782\005ef94f_24c0cc01\KeyboardLightApi.dll.vir

2012-08-07 16:43:32 . 2012-08-07 16:43:32           40,760 ----a-w-  C:\Qoobox\Quarantine\C\Users\*****\AppData\Local\Temp\SimpleTap\assembly\dl3\739e91f5\00480133_af32cd01\ScreenRotate.dll.vir

2012-08-07 16:43:32 . 2012-08-07 16:43:32           63,288 ----a-w-  C:\Qoobox\Quarantine\C\Users\*****\AppData\Local\Temp\SimpleTap\assembly\dl3\76000c66\00263b4d_af32cd01\MessageCenterPlus.dll.vir

2012-08-07 16:43:32 . 2012-08-07 16:43:32            8,704 ----a-w-  C:\Qoobox\Quarantine\C\Users\*****\AppData\Local\Temp\SimpleTap\assembly\dl3\77c866c9\00e169d7_ea00cd01\SugarSync.SimpleTapAddons.FileManager.dll.vir

2012-08-07 16:43:32 . 2012-08-07 16:43:32           88,888 ----a-w-  C:\Qoobox\Quarantine\C\Users\*****\AppData\Local\Temp\SimpleTap\assembly\dl3\7900ff59\00b08a3c_af32cd01\SimpleTapAppStoreAddon.dll.vir

2012-08-07 16:43:32 . 2012-08-07 16:43:32           27,448 ----a-w-  C:\Qoobox\Quarantine\C\Users\*****\AppData\Local\Temp\SimpleTap\assembly\dl3\8f423f74\00b34628_af32cd01\CoreAudioApi.dll.vir

2012-08-07 16:43:32 . 2012-08-07 16:43:32          253,752 ----a-w-  C:\Qoobox\Quarantine\C\Users\*****\AppData\Local\Temp\SimpleTap\assembly\dl3\a56956f7\00ebe244_af32cd01\LenovoMusic.dll.vir

2012-08-07 16:43:32 . 2012-08-07 16:43:32           18,232 ----a-w-  C:\Qoobox\Quarantine\C\Users\*****\AppData\Local\Temp\SimpleTap\assembly\dl3\bf29edbf\003ada2b_af32cd01\WirelessApi.dll.vir

2012-08-07 16:43:32 . 2012-08-07 16:43:32           69,944 ----a-w-  C:\Qoobox\Quarantine\C\Users\*****\AppData\Local\Temp\SimpleTap\assembly\dl3\e2fb8c95\0083593b_af32cd01\PriceGrabber.dll.vir

2012-08-07 16:43:32 . 2012-08-07 16:43:32          318,264 ----a-w-  C:\Qoobox\Quarantine\C\Users\*****\AppData\Local\Temp\SimpleTap\assembly\dl3\ed27e201\00ccd84a_af32cd01\LenovoTV.dll.vir

2012-08-07 16:43:32 . 2012-08-07 16:43:32           82,744 ----a-w-  C:\Qoobox\Quarantine\C\Users\*****\AppData\Local\Temp\SimpleTap\assembly\dl3\f870cc59\00536c4e_af32cd01\MSOffice.dll.vir

2012-08-07 16:14:03 . 2012-08-07 16:14:03           11,882 ----a-w-  C:\Qoobox\Quarantine\Registry_backups\tcpip.reg

2012-08-07 16:09:02 . 2012-08-07 16:09:02               51 ----a-w-  C:\Qoobox\Quarantine\catchme.log

2012-08-02 07:20:40 . 2012-08-02 07:20:40          115,137 ----a-w-  C:\Qoobox\Quarantine\C\Users\*****\AppData\Local\Temp\26b4a1dd-e07b-48af-be4e-9642b273284b\CliSecureRT.dll.vir

2012-02-09 07:21:51 . 2012-08-06 11:43:21               72 ----a-w-  C:\Qoobox\Quarantine\C\ProgramData\SYS\zyyusb.ini.vir

2011-12-20 20:24:44 . 2010-06-30 09:29:28            7,680 ----a-w-  C:\Qoobox\Quarantine\C\root\wpfdot.exe.vir

Code:

ComboFix 12-08-07.02 - ***** 07.08.2012  18:10:13.1.4 - x64

Microsoft Windows 7 Professional   6.1.7601.1.1252.49.1031.18.3979.1980 [GMT 2:00]

ausgeführt von:: c:\users\*****\Desktop\ComboFix.exe

AV: McAfee VirusScan Enterprise *Disabled/Updated* {86355677-4064-3EA7-ABB3-1B136EB04637}

SP: McAfee VirusScan Enterprise Antispyware Module *Disabled/Updated* {3D54B793-665E-3129-9103-206115370C8A}

SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

.

.

((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))

.

.

c:\programdata\Roaming

c:\programdata\sys

c:\programdata\sys\zyyusb.ini

C:\root

c:\root\wpfdot.exe

c:\users\*****\4.0

c:\users\*****\AppData\Local\Temp\26b4a1dd-e07b-48af-be4e-9642b273284b\CliSecureRT.dll

c:\users\*****\AppData\Local\Temp\SimpleTap\assembly\dl3\251c0004\00809d4f_af32cd01\Wikipedia.dll

c:\users\*****\AppData\Local\Temp\SimpleTap\assembly\dl3\26735453\00809d4f_af32cd01\Skype.dll

c:\users\*****\AppData\Local\Temp\SimpleTap\assembly\dl3\4a766f0b\00e07729_af32cd01\DisplayBrightnessApi.dll

c:\users\*****\AppData\Local\Temp\SimpleTap\assembly\dl3\69593782\005ef94f_24c0cc01\KeyboardLightApi.dll

c:\users\*****\AppData\Local\Temp\SimpleTap\assembly\dl3\739e91f5\00480133_af32cd01\ScreenRotate.dll

c:\users\*****\AppData\Local\Temp\SimpleTap\assembly\dl3\76000c66\00263b4d_af32cd01\MessageCenterPlus.dll

c:\users\*****\AppData\Local\Temp\SimpleTap\assembly\dl3\77c866c9\00e169d7_ea00cd01\SugarSync.SimpleTapAddons.FileManager.dll

c:\users\*****\AppData\Local\Temp\SimpleTap\assembly\dl3\78bc80c8\00cf9436_af32cd01\DefaultTheme.dll

c:\users\*****\AppData\Local\Temp\SimpleTap\assembly\dl3\7900ff59\00b08a3c_af32cd01\SimpleTapAppStoreAddon.dll

c:\users\*****\AppData\Local\Temp\SimpleTap\assembly\dl3\84fa94a6\00727648_af32cd01\LenovoSolutionCenter.dll

c:\users\*****\AppData\Local\Temp\SimpleTap\assembly\dl3\8f423f74\00b34628_af32cd01\CoreAudioApi.dll

c:\users\*****\AppData\Local\Temp\SimpleTap\assembly\dl3\a56956f7\00ebe244_af32cd01\LenovoMusic.dll

c:\users\*****\AppData\Local\Temp\SimpleTap\assembly\dl3\bf29edbf\003ada2b_af32cd01\WirelessApi.dll

c:\users\*****\AppData\Local\Temp\SimpleTap\assembly\dl3\e2fb8c95\0083593b_af32cd01\PriceGrabber.dll

c:\users\*****\AppData\Local\Temp\SimpleTap\assembly\dl3\ed27e201\00ccd84a_af32cd01\LenovoTV.dll

c:\users\*****\AppData\Local\Temp\SimpleTap\assembly\dl3\f870cc59\00536c4e_af32cd01\MSOffice.dll

.

.

(((((((((((((((((((((((   Dateien erstellt von 2012-07-07 bis 2012-08-07  ))))))))))))))))))))))))))))))

.

.

2012-08-07 16:33 . 2012-08-07 16:33        --------        d-----w-        c:\users\Default\AppData\Local\temp

2012-08-07 14:22 . 2012-08-07 14:22        --------        d-----w-        c:\program files (x86)\Microsoft Silverlight

2012-08-07 05:52 . 2012-06-29 10:04        9133488        ----a-w-        c:\programdata\Microsoft\Windows Defender\Definition Updates\{C70DAD88-0CAD-4217-91A6-33FC146FDE0D}\mpengine.dll

2012-08-06 06:28 . 2012-08-06 06:26        476976        ----a-w-        c:\windows\SysWow64\npdeployJava1.dll

2012-08-06 06:26 . 2012-08-06 06:26        --------        d-----w-        c:\program files (x86)\Java

2012-08-04 12:30 . 2012-08-04 12:30        --------        d-----w-        c:\program files (x86)\ESET

2012-08-03 09:06 . 2012-08-03 09:06        --------        d-----w-        C:\DRIVERS

2012-08-03 06:18 . 2012-08-03 06:18        --------        d-----w-        c:\programdata\ftw

2012-08-03 06:18 . 2012-08-03 06:18        --------        d-----w-        C:\archive_db

2012-08-03 06:18 . 2012-08-03 06:18        --------        d-----w-        c:\programdata\backup

2012-08-03 06:11 . 2012-08-03 06:11        --------        d-----w-        c:\programdata\explauncher

2012-08-03 06:11 . 2012-08-03 06:11        --------        d-----w-        c:\programdata\launcher

2012-08-02 17:51 . 2012-08-03 13:02        --------        d-----w-        c:\program files (x86)\Emsisoft Anti-Malware

2012-08-02 10:55 . 2012-08-02 10:55        --------        d-----w-        c:\users\*****\AppData\Roaming\Ulead Systems

2012-08-02 10:40 . 2012-08-02 10:40        --------        d-----w-        c:\program files (x86)\Paragon Software

2012-08-02 07:12 . 2012-08-02 07:12        --------        d-----w-        C:\_OTL

2012-08-01 14:49 . 2012-03-20 03:01        2871808        ----a-w-        c:\windows\explorer.exe

2012-08-01 13:28 . 2012-08-01 13:28        --------        d-----w-        c:\programdata\Kaspersky Lab

2012-08-01 13:15 . 2012-08-01 13:15        --------        d-----w-        c:\users\*****\AppData\Roaming\Malwarebytes

2012-08-01 13:15 . 2012-08-01 13:15        --------        d-----w-        c:\programdata\Malwarebytes

2012-08-01 13:15 . 2012-07-03 11:46        24904        ----a-w-        c:\windows\system32\drivers\mbam.sys

2012-08-01 13:15 . 2012-08-01 13:15        --------        d-----w-        c:\program files (x86)\Malwarebytes' Anti-Malware

2012-08-01 12:39 . 2012-08-01 12:39        --------        d-----w-        c:\users\Gast

2012-07-31 10:27 . 2012-08-03 08:49        --------        d-----w-        c:\users\*****\AppData\Local\Windows Live

2012-07-29 17:36 . 2012-07-29 17:36        70344        ----a-w-        c:\windows\SysWow64\FlashPlayerCPLApp.cpl

2012-07-29 17:36 . 2012-07-29 17:36        426184        ----a-w-        c:\windows\SysWow64\FlashPlayerApp.exe

2012-07-27 08:16 . 2012-07-27 08:16        --------        d-----w-        c:\users\*****\AppData\Roaming\NVIDIA

2012-07-27 06:53 . 2012-08-07 10:59        --------        d-----w-        c:\users\UpdatusUser

2012-07-27 06:34 . 2012-01-17 12:46        31040        ----a-w-        c:\windows\system32\nvhdap64.dll

2012-07-27 06:34 . 2012-01-17 12:45        188224        ----a-w-        c:\windows\system32\drivers\nvhda64v.sys

2012-07-27 06:34 . 2012-01-17 12:45        1451840        ----a-w-        c:\windows\system32\nvhdagenco6420103.dll

2012-07-26 14:30 . 2012-07-26 14:28        189424        ----a-w-        c:\windows\system32\javaw.exe

2012-07-26 14:30 . 2012-07-26 14:28        188912        ----a-w-        c:\windows\system32\java.exe

2012-07-26 14:28 . 2012-07-26 14:28        --------        d-----w-        c:\program files\Java

2012-07-23 10:48 . 2012-02-03 01:07        99520        ----a-w-        c:\windows\system32\NicInstC.dll

2012-07-23 10:48 . 2012-03-15 18:57        514736        ----a-w-        c:\windows\system32\drivers\e1c62x64.sys

2012-07-23 10:48 . 2012-02-17 00:52        72360        ----a-w-        c:\windows\system32\e1cmsg.dll

2012-07-23 10:45 . 2012-07-23 10:45        --------        d-----w-        c:\program files (x86)\SystemRequirementsLab

2012-07-23 07:35 . 2012-07-23 07:35        --------        d-----w-        c:\program files\Common Files\SPBA

2012-07-23 07:18 . 2012-04-08 22:18        429328        ----a-w-        c:\windows\system32\drivers\SynTP.sys

2012-07-23 07:18 . 2012-04-08 22:18        113936        ----a-w-        c:\windows\SysWow64\SynTPCOM.dll

2012-07-23 07:18 . 2012-04-08 22:18        249104        ----a-w-        c:\windows\SysWow64\SynCtrl.dll

2012-07-23 07:18 . 2012-04-08 22:18        307984        ----a-w-        c:\windows\system32\SynCtrl.dll

2012-07-23 07:18 . 2011-09-14 16:11        1048576        ----a-w-        c:\windows\system32\syndata.bin

2012-07-23 07:13 . 2012-05-30 11:42        569152        ----a-w-        c:\windows\system32\drivers\iaStor.sys

2012-07-21 14:04 . 2012-01-14 04:41        68864        ----a-w-        c:\windows\system32\drivers\stream.sys

2012-07-21 13:44 . 2012-07-27 06:26        --------        d-----w-        C:\NVIDIA

2012-07-21 13:43 . 2011-07-08 06:21        1452648        ----a-w-        c:\windows\system32\nvhdagenco6420102.dll

2012-07-21 13:43 . 2012-05-31 20:18        7745896        ----a-w-        c:\windows\SysWow64\nvwgf2um.dll

2012-07-21 13:43 . 2012-03-05 04:09        328000        ----a-w-        c:\windows\SysWow64\nvoptimusmft.dll

2012-07-21 13:43 . 2012-03-05 04:09        368448        ----a-w-        c:\windows\system32\nvoptimusmft.dll

2012-07-21 13:42 . 2012-03-05 04:09        1683264        ----a-w-        c:\windows\system32\nvdispco6420155.dll

2012-07-21 13:42 . 2012-03-05 04:09        1454400        ----a-w-        c:\windows\system32\nvgenco6420103.dll

2012-07-21 13:42 . 2012-05-31 20:18        15039848        ----a-w-        c:\windows\SysWow64\nvd3dum.dll

2012-07-21 13:42 . 2012-05-31 20:18        68968        ----a-w-        c:\windows\system32\OpenCL.dll

2012-07-21 13:42 . 2012-05-31 20:18        61288        ----a-w-        c:\windows\SysWow64\OpenCL.dll

2012-07-21 13:36 . 2012-07-21 13:36        53248        ----a-r-        c:\users\*****\AppData\Roaming\Microsoft\Installer\{0369F866-2CE0-4EB9-B426-88FA122C6E82}\ARPPRODUCTICON.exe

2012-07-21 13:35 . 2012-07-21 13:35        53248        ----a-r-        c:\users\*****\AppData\Roaming\Microsoft\Installer\{6E6E7725-C7BC-4C39-8B3F-14B67331A120}\ARPPRODUCTICON.exe

2012-07-21 13:29 . 2012-07-21 13:29        --------        d-----w-        c:\users\Public\Lenovo

2012-07-20 11:36 . 2010-02-23 08:16        294912        ----a-w-        c:\windows\system32\browserchoice.exe

2012-07-16 09:00 . 2012-06-12 03:08        3148800        ----a-w-        c:\windows\system32\win32k.sys

2012-07-16 08:47 . 2012-06-02 08:25        1427968        ----a-w-        c:\windows\SysWow64\inetcpl.cpl

2012-07-15 16:14 . 2012-06-06 06:06        2004480        ----a-w-        c:\windows\system32\msxml6.dll

2012-07-15 16:13 . 2012-06-06 06:05        1499136        ----a-w-        c:\program files\Common Files\System\ado\msado15.dll

2012-07-15 16:13 . 2012-06-06 05:05        1019904        ----a-w-        c:\program files (x86)\Common Files\System\ado\msado15.dll

2012-07-15 16:13 . 2012-06-06 06:05        466944        ----a-w-        c:\program files\Common Files\System\ado\msadomd.dll

2012-07-15 16:13 . 2012-06-06 06:05        258048        ----a-w-        c:\program files\Common Files\System\msadc\msadco.dll

2012-07-15 16:13 . 2012-06-06 06:05        495616        ----a-w-        c:\program files\Common Files\System\ado\msadox.dll

2012-07-15 16:13 . 2012-06-06 05:03        805376        ----a-w-        c:\windows\SysWow64\cdosys.dll

2012-07-15 16:13 . 2012-06-06 05:05        352256        ----a-w-        c:\program files (x86)\Common Files\System\ado\msadomd.dll

2012-07-15 16:13 . 2012-06-06 06:05        61440        ----a-w-        c:\program files\Common Files\System\ado\msador15.dll

2012-07-15 16:13 . 2012-06-06 05:05        57344        ----a-w-        c:\program files (x86)\Common Files\System\ado\msador15.dll

2012-07-15 16:13 . 2012-06-06 05:05        143360        ----a-w-        c:\program files (x86)\Common Files\System\ado\msjro.dll

2012-07-15 16:13 . 2012-06-06 05:05        212992        ----a-w-        c:\program files (x86)\Common Files\System\msadc\msadco.dll

2012-07-15 16:13 . 2012-06-06 06:02        1133568        ----a-w-        c:\windows\system32\cdosys.dll

2012-07-15 16:13 . 2012-06-06 05:05        372736        ----a-w-        c:\program files (x86)\Common Files\System\ado\msadox.dll

.

.

.

((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2012-08-06 06:26 . 2012-03-29 20:40        472880        ----a-w-        c:\windows\SysWow64\deployJava1.dll

2012-07-16 08:50 . 2012-02-15 07:43        59701280        ----a-w-        c:\windows\system32\MRT.exe

2012-06-21 13:30 . 2012-06-21 13:30        122368        ----a-w-        c:\windows\system32\TpShEvUI.exe

2012-06-21 13:29 . 2012-06-21 13:29        260608        ----a-w-        c:\windows\system32\TpShCPL.cpl

2012-06-21 13:29 . 2012-06-21 13:29        478208        ----a-w-        c:\windows\system32\TpShCPL.dll

2012-06-21 13:29 . 2012-06-21 13:29        222720        ----a-w-        c:\windows\system32\TpShocks.exe

2012-06-19 06:33 . 2012-06-19 06:37        118520        ------w-        c:\windows\SysWow64\pxinsi64.exe

2012-06-19 06:33 . 2012-06-19 06:37        116472        ------w-        c:\windows\SysWow64\pxcpyi64.exe

2012-06-19 06:33 . 2012-06-19 06:37        129784        ------w-        c:\windows\SysWow64\pxafs.dll

2012-06-07 15:35 . 2012-06-07 15:35        10744        ----a-w-        c:\windows\SysWow64\vpncategories.dll

2012-06-07 15:35 . 2012-06-07 15:35        33272        ----a-w-        c:\windows\SysWow64\vpnevents.dll

2012-06-07 15:25 . 2012-06-07 15:25        27048        ----a-w-        c:\windows\system32\drivers\vpnva64.sys

2012-06-07 15:24 . 2011-01-11 12:53        107432        ----a-r-        c:\windows\system32\drivers\acsock64.sys

2012-06-02 22:19 . 2012-06-21 06:09        38424        ----a-w-        c:\windows\system32\wups.dll

2012-06-02 22:19 . 2012-06-21 06:09        2428952        ----a-w-        c:\windows\system32\wuaueng.dll

2012-06-02 22:19 . 2012-06-21 06:09        57880        ----a-w-        c:\windows\system32\wuauclt.exe

2012-06-02 22:19 . 2012-06-21 06:09        44056        ----a-w-        c:\windows\system32\wups2.dll

2012-06-02 22:19 . 2012-06-21 06:09        701976        ----a-w-        c:\windows\system32\wuapi.dll

2012-06-02 22:15 . 2012-06-21 06:09        2622464        ----a-w-        c:\windows\system32\wucltux.dll

2012-06-02 22:15 . 2012-06-21 06:09        99840        ----a-w-        c:\windows\system32\wudriver.dll

2012-06-02 13:19 . 2012-06-21 06:09        186752        ----a-w-        c:\windows\system32\wuwebv.dll

2012-06-02 13:15 . 2012-06-21 06:09        36864        ----a-w-        c:\windows\system32\wuapp.exe

2012-05-31 20:18 . 2011-12-20 20:32        9752936        ----a-w-        c:\windows\system32\nvwgf2umx.dll

2012-05-31 20:18 . 2011-12-20 20:32        963944        ----a-w-        c:\windows\system32\nvumdshimx.dll

2012-05-31 20:18 . 2011-12-20 20:32        813928        ----a-w-        c:\windows\SysWow64\nvumdshim.dll

2012-05-31 20:18 . 2011-12-20 20:32        2688360        ----a-w-        c:\windows\system32\nvapi64.dll

2012-05-31 20:18 . 2011-12-20 20:32        260968        ----a-w-        c:\windows\system32\nvinitx.dll

2012-05-31 20:18 . 2011-12-20 20:32        2327400        ----a-w-        c:\windows\SysWow64\nvapi.dll

2012-05-31 20:18 . 2011-12-20 20:32        215400        ----a-w-        c:\windows\SysWow64\nvinit.dll

2012-05-31 18:31 . 2011-05-25 18:58        3106152        ----a-w-        c:\windows\system32\nvsvc64.dll

2012-05-31 18:30 . 2011-05-25 18:58        6105960        ----a-w-        c:\windows\system32\nvcpl.dll

2012-05-31 18:30 . 2011-05-25 18:58        2641323        ----a-w-        c:\windows\system32\nvcoproc.bin

2012-05-31 18:30 . 2011-05-25 18:59        118120        ----a-w-        c:\windows\system32\nvmctray.dll

2012-05-31 18:30 . 2011-05-25 18:59        63336        ----a-w-        c:\windows\system32\nvshext.dll

2012-05-31 18:30 . 2011-05-25 18:59        55656        ----a-w-        c:\windows\system32\nv3dappshextr.dll

2012-05-31 18:30 . 2011-05-25 18:59        2561896        ----a-w-        c:\windows\system32\nvsvcr.dll

2012-05-31 18:30 . 2011-05-25 18:59        890216        ----a-w-        c:\windows\system32\nvvsvc.exe

2012-05-31 18:30 . 2011-05-25 18:59        851816        ----a-w-        c:\windows\system32\nv3dappshext.dll

2012-05-31 18:30 . 2011-05-25 18:59        427880        ----a-w-        c:\windows\SysWow64\oemdspif.dll

2012-05-31 10:27 . 2012-05-31 10:27        418152        ----a-w-        c:\windows\SysWow64\nvStreaming.exe

2012-05-31 10:25 . 2010-11-21 03:27        279656        ------w-        c:\windows\system32\MpSigStub.exe

2012-05-29 07:38 . 2011-12-23 19:58        330240        ----a-w-        c:\windows\MASetupCaller.dll

2012-05-22 13:47 . 2012-06-06 18:37        405176        ----a-w-        c:\windows\SysWow64\Newtonsoft.Json.Net20.dll

2012-05-17 05:24 . 2010-12-23 11:47        499712        ----a-w-        c:\windows\SysWow64\msvcp71.dll

2012-05-17 05:24 . 2010-12-23 11:47        348160        ----a-w-        c:\windows\SysWow64\msvcr71.dll

2012-05-16 04:32 . 2011-12-20 20:34        2693728        ------w-        c:\windows\PWMBTHLV.EXE

2012-05-16 04:32 . 2011-12-20 20:34        29512        ----a-w-        c:\windows\system32\drivers\DZHDD64.SYS

2012-05-16 04:32 . 2011-12-20 20:34        2806880        ----a-w-        c:\windows\system32\PWMCP64V.cpl

2012-05-16 04:32 . 2011-12-20 20:34        19784        ----a-w-        c:\windows\system32\drivers\TPPWR64V.SYS

.

.

((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))

.

.

*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 

REGEDIT4

.

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"LTT"="c:\program files\PC-Doctor\EnableToolbarW32.exe" [2011-06-27 23120]

"KiesPDLR"="c:\program files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe" [2012-06-08 21432]

"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-21 1475584]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]

"RotateImage"="c:\program files (x86)\Integrated Camera Driver\X64\RCIMGDIR.exe" [2008-10-30 55808]

"IMSS"="c:\program files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe" [2011-01-17 112152]

"Lenovo Registration"="c:\program files (x86)\Lenovo Registration\LenovoReg.exe" [2011-07-13 4351712]

"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-01-03 843712]

"McAfeeUpdaterUI"="c:\program files (x86)\McAfee\Common Framework\udaterui.exe" [2009-09-25 136512]

"AutoProfileRepair"="c:\program files (x86)\Oracle\Outlook Connector\profilerepair.exe" [2010-10-05 73728]

"ShStatEXE"="c:\program files (x86)\McAfee\VirusScan Enterprise\SHSTAT.EXE" [2011-01-12 215360]

"KiesTrayAgent"="c:\program files (x86)\Samsung\Kies\KiesTrayAgent.exe" [2012-06-08 3521464]

"TkBellExe"="c:\program files (x86)\Real\RealPlayer\Update\realsched.exe" [2012-05-17 296056]

"Cisco AnyConnect Secure Mobility Agent for Windows"="c:\program files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe" [2012-06-07 522744]

"PWMTRV"="c:\progra~2\ThinkPad\UTILIT~1\PWMTR64V.DLL" [2012-05-16 5941344]

"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2012-01-18 254696]

.

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\

Bluetooth.lnk - c:\program files\ThinkPad\Bluetooth Software\BTTray.exe [2011-10-17 1213216]

Digital Line Detect.lnk - c:\program files (x86)\Digital Line Detect\DLG.exe [2011-12-20 50688]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"EnableUIADesktopToggle"= 0 (0x0)

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]

"AppInit_DLLs"=c:\windows\SysWOW64\nvinit.dll

.

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]

Notification Packages        REG_MULTI_SZ           scecli c:\program files\ThinkVantage Fingerprint Software\psqlpwd.dll

Security Packages        REG_MULTI_SZ           kerberos msv1_0 schannel wdigest tspkg pku2u livessp

.

R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]

R2 HyperW7Svc;HyperW7 Service;c:\program files\Lenovo\RapidBoot\HyperW7Svc64.exe [2011-07-08 144232]

R3 acsock;acsock;c:\windows\system32\DRIVERS\acsock64.sys [2012-06-07 107432]

R3 androidusb;SAMSUNG Android Composite ADB Interface Driver;c:\windows\system32\Drivers\ssadadb.sys [2011-12-08 36328]

R3 BTWAMPFL;BTWAMPFL;c:\windows\system32\DRIVERS\btwampfl.sys [2011-10-17 437288]

R3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys [2011-10-17 39976]

R3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudbus.sys [2012-02-24 99384]

R3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys [2010-11-21 71168]

R3 DozeSvc;Lenovo Doze Mode Service;c:\program files (x86)\ThinkPad\Utilities\DZSVC64.EXE [2012-05-16 320576]

R3 intaud_WaveExtensible;Intel WiDi Audio Device;c:\windows\system32\drivers\intelaud.sys [2012-04-19 35256]

R3 mferkdet;McAfee Inc. mferkdet;c:\windows\system32\drivers\mferkdet.sys [2012-04-20 100904]

R3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda64v.sys [2012-01-17 188224]

R3 Power Manager DBC Service;Power Manager DBC Service;c:\program files (x86)\ThinkPad\Utilities\PWMDBSVC.EXE [2012-05-16 1662560]

R3 PwmEWSvc;Cisco EnergyWise Enabler;c:\program files (x86)\ThinkPad\Utilities\PWMEWSVC.EXE [2012-05-16 1665120]

R3 SrvHsfHDA;SrvHsfHDA;c:\windows\system32\DRIVERS\VSTAZL6.SYS [2009-06-10 292864]

R3 SrvHsfV92;SrvHsfV92;c:\windows\system32\DRIVERS\VSTDPV6.SYS [2009-06-10 1485312]

R3 SrvHsfWinac;SrvHsfWinac;c:\windows\system32\DRIVERS\VSTCNXT6.SYS [2009-06-10 740864]

R3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM);c:\windows\system32\DRIVERS\ssadbus.sys [2011-12-08 157672]

R3 ssadmdfl;SAMSUNG Android USB Modem (Filter);c:\windows\system32\DRIVERS\ssadmdfl.sys [2011-12-08 16872]

R3 ssadmdm;SAMSUNG Android USB Modem Drivers;c:\windows\system32\DRIVERS\ssadmdm.sys [2011-12-08 177640]

R3 ssadserd;SAMSUNG Android USB Diagnostic Serial Port (WDM);c:\windows\system32\DRIVERS\ssadserd.sys [2011-12-08 146920]

R3 ssudmdm;SAMSUNG  Mobile USB Modem Drivers (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudmdm.sys [2012-02-24 203320]

R3 ssudobex;SAMSUNG Mobile USB OBEX Serial Port(DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudobex.sys [2012-02-24 203320]

R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]

R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]

R3 WatAdminSvc;Windows-Aktivierungstechnologieservice;c:\windows\system32\Wat\WatAdminSvc.exe [2012-03-11 1255736]

R3 WSDPrintDevice;WSD-Druckunterstützung durch UMB;c:\windows\system32\DRIVERS\WSDPrint.sys [2009-07-14 23040]

R3 WSDScan;WSD-Scanunterstützung durch UMB;c:\windows\system32\DRIVERS\WSDScan.sys [2009-07-14 25088]

R4 MSSQLServerADHelper100;SQL Server Hilfsdienst für Active Directory;c:\program files\Microsoft SQL Server\100\Shared\SQLADHLP.EXE [2009-07-21 61976]

R4 RsFx0105;RsFx0105 Driver;c:\windows\system32\DRIVERS\RsFx0105.sys [2011-09-22 311144]

R4 SQLAgent$SQLEXPRESS;SQL Server-Agent (SQLEXPRESS);c:\program files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [2011-09-22 431464]

R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 57184]

S0 DzHDD64;DzHDD64;c:\windows\System32\DRIVERS\DzHDD64.sys [2012-05-16 29512]

S0 mfewfpk;McAfee Inc. mfewfpk;c:\windows\system32\drivers\mfewfpk.sys [2012-04-20 283744]

S0 nvpciflt;nvpciflt;c:\windows\system32\DRIVERS\nvpciflt.sys [2012-05-31 29032]

S0 TPDIGIMN;TPDIGIMN;c:\windows\System32\DRIVERS\ApsHM64.sys [2011-12-28 25416]

S1 lenovo.smi;Lenovo System Interface Driver;c:\windows\system32\DRIVERS\smiifx64.sys [2010-09-07 15472]

S1 nvkflt;nvkflt;c:\windows\system32\DRIVERS\nvkflt.sys [2012-05-31 249192]

S1 PHCORE;PHCORE;c:\program files\Lenovo\RapidBoot\PHCORE64.SYS [2011-07-08 32104]

S1 Uim_VIM;UIM Virtual Image Plugin;c:\windows\system32\Drivers\uim_vimx64.sys [2011-11-17 352816]

S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]

S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-01-03 63928]

S2 CxAudMsg;Conexant Audio Message Service;c:\windows\system32\CxAudMsg64.exe [2010-12-16 198784]

S2 FirebirdServerDefaultInstance;Firebird Server - DefaultInstance;c:\program files (x86)\Firebird\Firebird_2_5\bin\fb_inet_server.exe [2011-10-03 3756032]

S2 HsfXAudioService;HsfXAudioService;c:\windows\system32\svchost.exe [2009-07-14 27136]

S2 Intel(R) PROSet Monitoring Service;Intel(R) PROSet Monitoring Service;c:\windows\system32\IProsetMonitor.exe [2012-03-12 190120]

S2 jhi_service;Intel(R) Identity Protection Technology Host Interface Service;c:\program files (x86)\Intel\Services\IPT\jhi_service.exe [2011-02-23 212944]

S2 LENOVO.CAMMUTE;Lenovo Camera Mute;c:\program files\Lenovo\Communications Utility\CAMMUTE.exe [2011-05-31 41320]

S2 LENOVO.MICMUTE;Lenovo Microphone Mute;c:\program files\LENOVO\HOTKEY\MICMUTE.exe [2011-07-12 101736]

S2 LENOVO.TPKNRSVC;Lenovo Keyboard Noise Reduction;c:\program files\Lenovo\Communications Utility\TPKNRSVC.exe [2011-05-31 59240]

S2 Lenovo.VIRTSCRLSVC;Lenovo Auto Scroll;c:\program files\LENOVO\VIRTSCRL\lvvsst.exe [2011-07-12 133992]

S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2012-07-03 655944]

S2 mfevtp;McAfee Validation Trust Protection Service;c:\windows\system32\mfevtps.exe [2012-04-20 158832]

S2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2012-05-31 2458984]

S2 ocautoupds;Oracle Connector-Dienst für automatische Updates;c:\program files (x86)\Oracle\Outlook Connector\ocautoupds.exe [2010-10-05 75152]

S2 risdxc;risdxc;c:\windows\system32\DRIVERS\risdxc64.sys [2011-05-25 101888]

S2 SAService;Conexant SmartAudio service;c:\windows\system32\SAsrv.exe [x]

S2 smihlp2;SMI Helper Driver (smihlp2);c:\program files\ThinkVantage Fingerprint Software\smihlp.sys [2011-05-30 13128]

S2 SROSVC;Screen Reading Optimizer Service Program;c:\program files (x86)\Lenovo\Screen Reading Optimizer\SROSVC.exe [2012-03-05 446800]

S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2012-05-31 382312]

S2 TPHKLOAD;Lenovo Hotkey Client Loader;c:\program files\LENOVO\HOTKEY\TPHKLOAD.exe [2011-07-12 145256]

S2 TPHKSVC;Anzeige am Bildschirm;c:\program files\LENOVO\HOTKEY\TPHKSVC.exe [2011-07-12 142696]

S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2011-01-17 2656280]

S2 vpnagent;Cisco AnyConnect Secure Mobility Agent;c:\program files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe [2012-06-07 478712]

S2 ZeroConfigService;Intel(R) PROSet/Wireless Zero Configuration Service;c:\program files\Intel\WiFi\bin\ZeroConfigService.exe [2012-02-26 2669840]

S3 5U877;USB Video Device;c:\windows\system32\DRIVERS\5U877.sys [2011-03-04 166016]

S3 CAXHWAZL;CAXHWAZL;c:\windows\system32\DRIVERS\CAXHWAZL.sys [2009-06-30 292864]

S3 e1cexpress;Intel(R) PRO/1000 PCI Express Network Connection Driver C;c:\windows\system32\DRIVERS\e1c62x64.sys [2012-03-15 514736]

S3 iwdbus;IWD Bus Enumerator;c:\windows\system32\DRIVERS\iwdbus.sys [2012-04-19 25528]

S3 LenovoRd;LenovoRd;c:\windows\system32\Drivers\LenovoRd.sys [2009-05-11 118016]

S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2012-07-03 24904]

S3 MEIx64;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys [2010-10-19 56344]

S3 NETwNs64;___ Intel(R) Wireless WiFi Link der Serie 5000 Adaptertreiber für Windows 7 64-Bit;c:\windows\system32\DRIVERS\Netwsw00.sys [2012-02-20 11471872]

S3 TVTI2C;Lenovo SM bus driver;c:\windows\system32\DRIVERS\Tvti2c.sys [2011-05-30 40248]

S3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]

S3 wdkmd;Intel WiDi KMD;c:\windows\system32\DRIVERS\WDKMD.sys [2012-04-19 42392]

.

.

--- Andere Dienste/Treiber im Speicher ---

.

*NewlyCreated* - WS2IFSL

*Deregistered* - mfeavfk01

.

Inhalt des "geplante Tasks" Ordners

.

2012-08-07 c:\windows\Tasks\SystemToolsDailyTest.job

- c:\program files\PC-Doctor\uaclauncher.exe [2011-06-27 15:06]

.

.

--------- X64 Entries -----------

.

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"TpShocks"="TpShocks.exe" [2012-06-21 222720]

"ForteConfig"="c:\program files\Conexant\ForteConfig\fmapp.exe" [2010-10-26 49056]

"SmartAudio"="c:\program files\CONEXANT\SAII\SAIICpl.exe" [2011-03-14 316032]

"LENOVO.TPKNRRES"="c:\program files\Lenovo\Communications Utility\TPKNRRES.exe" [2011-05-31 40808]

"ALCKRESI.EXE"="c:\program files\Lenovo\AutoLock\ALCKRESI.EXE" [2011-05-25 281960]

"AcWin7Hlpr"="c:\program files (x86)\Lenovo\Access Connections\AcTBenabler.exe" [2011-10-20 33344]

"IgfxTray"="c:\windows\system32\igfxtray.exe" [2011-10-13 167704]

"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2011-10-13 392472]

"Persistence"="c:\windows\system32\igfxpers.exe" [2011-10-13 416024]

"nwiz"="c:\program files\NVIDIA Corporation\nview\nwiz.exe" [2012-05-31 1694016]

"combofix"="c:\combofix\CF7389.3XE" [2010-11-21 345088]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]

"LoadAppInit_DLLs"=0x1

"AppInit_DLLs"=c:\windows\System32\nvinitx.dll

.

------- Zusätzlicher Suchlauf -------

.

uStart Page = hxxp://www.****.de/

uLocal Page = c:\windows\system32\blank.htm

mLocal Page = c:\windows\SysWOW64\blank.htm

IE: Bild an &Bluetooth-Gerät senden... - c:\program files\ThinkPad\Bluetooth Software\btsendto_ie_ctx.htm

IE: Free YouTube Download - c:\users\*****\AppData\Roaming\DVDVideoSoftIEHelpers\freeytvdownloader.htm

IE: Free YouTube to MP3 Converter - c:\users\*****\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm

IE: Seite an &Bluetooth-Gerät senden... - c:\program files\ThinkPad\Bluetooth Software\btsendto_ie.htm

FF - ProfilePath - c:\users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\81muj1q5.default\

FF - prefs.js: browser.startup.homepage - hxxp://****.de/

.

- - - - Entfernte verwaiste Registrierungseinträge - - - -

.

Wow6432Node-HKCU-Run-KiesHelper - c:\program files (x86)\Samsung\Kies\KiesHelper.exe

HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe

.

.

.

--------------------- Gesperrte Registrierungsschluessel ---------------------

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

"BlindDial"=dword:00000000

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

"BlindDial"=dword:00000000

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

"BlindDial"=dword:00000000

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

"BlindDial"=dword:00000000

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]

@Denied: (Full) (Everyone)

.

------------------------ Weitere laufende Prozesse ------------------------

.

c:\program files (x86)\Lenovo\Access Connections\AcPrfMgrSvc.exe

c:\program files (x86)\McAfee\Common Framework\FrameworkService.exe

c:\program files (x86)\McAfee\VirusScan Enterprise\VsTskMgr.exe

c:\program files (x86)\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe

c:\program files (x86)\McAfee\VirusScan Enterprise\mfeann.exe

c:\program files (x86)\McAfee\Common Framework\naPrdMgr.exe

c:\program files (x86)\Common Files\Protexis\License Service\PsiService_2.exe

c:\windows\SysWOW64\SAsrv.exe

c:\program files (x86)\Common Files\Ulead Systems\DVD\ULCDRSvr.exe

c:\program files (x86)\Lenovo\Access Connections\AcSvc.exe

c:\program files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

c:\program files (x86)\Lenovo\System Update\SUService.exe

c:\program files (x86)\Common Files\Lenovo\tvt_reg_monitor_svc.exe

c:\progra~1\Lenovo\Zoom\TPSCREX.EXE

c:\progra~1\Lenovo\HOTKEY\TPONSCR.EXE

c:\program files (x86)\Lenovo\Access Connections\AcDeskBandHlpr.exe

c:\program files\Lenovo\SimpleTap\SimpleTap.exe

c:\program files (x86)\LENOVO\Message Center Plus\MCPLaunch.exe

c:\program files\lenovo\lenovo solution center\lsc.exe

.

**************************************************************************

.

Zeit der Fertigstellung: 2012-08-07  19:02:34 - PC wurde neu gestartet

ComboFix-quarantined-files.txt  2012-08-07 17:02

.

Vor Suchlauf: 22 Verzeichnis(se), 392.735.789.056 Bytes frei

Nach Suchlauf: 27 Verzeichnis(se), 392.524.312.576 Bytes frei

.

- - End Of File - - 707DBA1E291C948638E8A33233084800

Gruß Bio