Code:
ComboFix 12-09-16.01 - drea 17.09.2012 20:50:42.1.4 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.43.1031.18.4078.2688 [GMT 2:00]
ausgeführt von:: c:\users\drea\Desktop\ComboFix.exe
AV: McAfee Anti-Virus und Anti-Spyware *Disabled/Updated* {ADA629C7-7F48-5689-624A-3B76997E0892}
FW: McAfee Firewall *Disabled* {959DA8E2-3527-57D1-4915-924367AD4FE9}
SP: McAfee Anti-Virus und Anti-Spyware *Disabled/Updated* {16C7C823-5972-5907-58FA-0004E2F9422F}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Neuer Wiederherstellungspunkt wurde erstellt
.
.
((((((((((((((((((((((( Dateien erstellt von 2012-08-17 bis 2012-09-17 ))))))))))))))))))))))))))))))
.
.
2012-09-17 18:56 . 2012-09-17 18:56 -------- d-----w- c:\users\Default\AppData\Local\temp
2012-09-14 18:52 . 2012-08-27 23:49 9310152 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{98698291-72CF-403A-826B-D5128FA81FA0}\mpengine.dll
2012-09-14 18:50 . 2012-09-14 18:50 -------- d-----w- C:\_OTL
2012-09-12 17:59 . 2012-08-22 18:12 950128 ----a-w- c:\windows\system32\drivers\ndis.sys
2012-09-12 17:59 . 2012-07-04 20:26 41472 ----a-w- c:\windows\system32\drivers\RNDISMP.sys
2012-09-12 17:59 . 2012-08-02 17:58 574464 ----a-w- c:\windows\system32\d3d10level9.dll
2012-09-12 17:59 . 2012-08-02 16:57 490496 ----a-w- c:\windows\SysWow64\d3d10level9.dll
2012-09-12 17:59 . 2012-08-22 18:12 1913200 ----a-w- c:\windows\system32\drivers\tcpip.sys
2012-09-12 17:59 . 2012-08-22 18:12 376688 ----a-w- c:\windows\system32\drivers\netio.sys
2012-09-12 17:59 . 2012-08-22 18:12 288624 ----a-w- c:\windows\system32\drivers\FWPKCLNT.SYS
2012-09-12 01:30 . 2012-04-20 14:40 196440 ----a-w- c:\windows\system32\drivers\HipShieldK.sys
2012-09-10 01:19 . 2012-07-06 20:07 552960 ----a-w- c:\windows\system32\drivers\bthport.sys
2012-09-10 01:11 . 2012-09-10 01:11 -------- d-----w- c:\program files (x86)\Common Files\Skype
2012-09-10 01:11 . 2012-09-10 01:11 -------- d-----r- c:\program files (x86)\Skype
2012-09-09 23:26 . 2011-03-12 12:08 1465344 ----a-w- c:\windows\system32\XpsPrint.dll
2012-09-08 13:43 . 2012-09-08 13:43 -------- d-----w- c:\program files (x86)\VideoLAN
2012-09-07 20:05 . 2012-09-07 20:05 -------- d-----w- c:\program files (x86)\ESET
2012-09-07 19:08 . 2012-09-07 19:08 -------- d-----w- c:\programdata\Malwarebytes
2012-09-07 19:08 . 2012-09-07 19:08 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
2012-09-07 19:08 . 2012-07-03 11:46 24904 ----a-w- c:\windows\system32\drivers\mbam.sys
2012-09-05 03:24 . 2012-09-05 03:24 -------- d-----w- c:\program files (x86)\7-Zip
2012-09-04 23:53 . 2012-09-04 23:53 73416 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2012-09-04 23:53 . 2012-09-04 23:53 696520 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2012-09-04 23:53 . 2012-09-04 23:53 -------- d-----w- c:\windows\system32\Macromed
2012-09-04 23:39 . 2012-09-04 23:39 -------- d-----w- c:\program files (x86)\Common Files\Adobe
2012-09-04 23:34 . 2012-09-04 23:34 -------- d-----w- c:\programdata\Qualcomm Atheros
2012-09-04 23:31 . 2012-09-04 23:31 -------- d-----w- c:\program files\Microsoft Silverlight
2012-09-04 23:31 . 2012-09-04 23:31 -------- d-----w- c:\program files (x86)\Microsoft Silverlight
2012-09-04 23:29 . 2011-06-20 23:03 2753536 ----a-w- c:\windows\system32\drivers\athrx.sys
2012-09-04 23:29 . 2011-06-20 23:03 2753536 ----a-w- c:\windows\system32\athrx.sys
2012-09-04 23:29 . 2012-09-04 23:30 -------- d-----w- c:\program files (x86)\Atheros WiFi Driver Installation
2012-09-04 23:25 . 2012-09-04 23:25 -------- d-----w- C:\SPLASH.SYS
2012-09-04 22:20 . 2011-04-28 03:54 80384 ----a-w- c:\windows\system32\drivers\BTHUSB.SYS
2012-09-04 22:18 . 2012-09-05 23:56 -------- d-----w- C:\Update
2012-09-04 22:17 . 2012-09-04 22:17 -------- d-----w- c:\windows\SysWow64\Wat
2012-09-04 22:17 . 2012-09-04 22:17 -------- d-----w- c:\windows\system32\Wat
2012-09-04 21:55 . 2012-09-10 18:58 -------- d-----w- c:\program files (x86)\Mozilla Maintenance Service
2012-09-04 21:49 . 2012-09-04 21:49 -------- d-----w- c:\windows\SysWow64\wbem\en-US
2012-09-04 21:49 . 2012-09-04 21:49 -------- d-----w- c:\windows\system32\wbem\en-US
2012-09-04 19:25 . 2010-02-23 08:16 294912 ----a-w- c:\windows\system32\browserchoice.exe
2012-09-04 19:10 . 2012-03-01 06:46 23408 ----a-w- c:\windows\system32\drivers\fs_rec.sys
2012-09-04 19:10 . 2012-03-01 06:33 81408 ----a-w- c:\windows\system32\imagehlp.dll
2012-09-04 19:10 . 2012-03-01 05:33 159232 ----a-w- c:\windows\SysWow64\imagehlp.dll
2012-09-04 19:10 . 2012-03-01 06:38 220672 ----a-w- c:\windows\system32\wintrust.dll
2012-09-04 19:10 . 2012-03-01 06:28 5120 ----a-w- c:\windows\system32\wmi.dll
2012-09-04 19:10 . 2012-03-01 05:37 172544 ----a-w- c:\windows\SysWow64\wintrust.dll
2012-09-04 19:10 . 2012-03-01 05:29 5120 ----a-w- c:\windows\SysWow64\wmi.dll
2012-09-04 19:07 . 2012-09-13 01:00 64462936 ----a-w- c:\windows\system32\MRT.exe
2012-09-04 19:05 . 2011-10-15 06:31 723456 ----a-w- c:\windows\system32\EncDec.dll
2012-09-04 19:05 . 2011-10-15 05:38 534528 ----a-w- c:\windows\SysWow64\EncDec.dll
2012-09-04 19:05 . 2011-11-05 05:32 2048 ----a-w- c:\windows\system32\tzres.dll
2012-09-04 19:05 . 2011-11-05 04:26 2048 ----a-w- c:\windows\SysWow64\tzres.dll
2012-09-04 19:03 . 2011-02-12 11:34 267776 ----a-w- c:\windows\system32\FXSCOVER.exe
2012-09-04 19:03 . 2011-11-17 06:41 1731920 ----a-w- c:\windows\system32\ntdll.dll
2012-09-04 19:03 . 2011-11-17 05:38 1292080 ----a-w- c:\windows\SysWow64\ntdll.dll
2012-09-04 18:59 . 2012-03-31 05:42 1732096 ----a-w- c:\program files\Windows Journal\NBDoc.DLL
2012-09-04 18:59 . 2012-03-31 05:40 1367552 ----a-w- c:\program files\Common Files\Microsoft Shared\ink\journal.dll
2012-09-04 18:59 . 2012-03-31 04:29 936960 ----a-w- c:\program files (x86)\Common Files\Microsoft Shared\ink\journal.dll
2012-09-04 18:59 . 2012-03-31 05:40 1402880 ----a-w- c:\program files\Windows Journal\JNWDRV.dll
2012-09-04 18:59 . 2012-03-31 05:40 1393664 ----a-w- c:\program files\Windows Journal\JNTFiltr.dll
2012-09-04 18:59 . 2011-11-19 14:58 77312 ----a-w- c:\windows\system32\packager.dll
2012-09-04 18:59 . 2011-11-19 14:01 67072 ----a-w- c:\windows\SysWow64\packager.dll
2012-09-04 18:35 . 2012-02-17 06:38 1031680 ----a-w- c:\windows\system32\rdpcore.dll
2012-09-04 18:35 . 2012-02-17 05:34 826880 ----a-w- c:\windows\SysWow64\rdpcore.dll
2012-09-04 18:35 . 2012-02-17 04:57 23552 ----a-w- c:\windows\system32\drivers\tdtcp.sys
2012-09-04 18:32 . 2012-06-02 22:19 2428952 ----a-w- c:\windows\system32\wuaueng.dll
2012-09-04 18:32 . 2012-06-02 22:19 57880 ----a-w- c:\windows\system32\wuauclt.exe
2012-09-04 18:32 . 2012-06-02 22:19 44056 ----a-w- c:\windows\system32\wups2.dll
2012-09-04 18:32 . 2012-06-02 22:15 2622464 ----a-w- c:\windows\system32\wucltux.dll
2012-09-04 18:31 . 2012-06-02 22:19 38424 ----a-w- c:\windows\system32\wups.dll
2012-09-04 18:31 . 2012-06-02 22:19 701976 ----a-w- c:\windows\system32\wuapi.dll
2012-09-04 18:31 . 2012-06-02 22:15 99840 ----a-w- c:\windows\system32\wudriver.dll
2012-09-04 18:31 . 2012-06-02 13:19 186752 ----a-w- c:\windows\system32\wuwebv.dll
2012-09-04 18:31 . 2012-06-02 13:15 36864 ----a-w- c:\windows\system32\wuapp.exe
2012-09-04 02:11 . 2012-09-13 23:18 -------- d-----w- c:\program files (x86)\Mozilla Thunderbird
2012-09-04 02:04 . 2012-09-04 22:20 -------- d-----w- c:\program files\Sony
2012-09-04 02:04 . 2011-04-21 01:15 437272 ----a-r- c:\windows\system32\drivers\iaStor.sys
2012-09-04 02:02 . 2012-09-04 02:02 3584 ----a-w- c:\windows\system32\Spool\prtprocs\x64\de-DE\LXKPTPRC.DLL.mui
2012-09-04 01:58 . 2012-09-04 01:58 -------- d-----w- c:\windows\SysWow64\VAIO Startup Setting Tool
2012-09-04 01:58 . 2012-09-10 21:05 -------- d-----w- c:\users\drea
2012-09-04 01:53 . 2012-09-04 23:27 -------- d-----w- c:\programdata\Atheros
2012-09-04 01:49 . 2012-09-04 01:49 -------- d-----w- C:\VAIO Sample Contents
2012-09-04 01:48 . 2012-09-10 01:11 -------- d-----w- c:\programdata\Skype
2012-09-04 01:48 . 2012-09-04 01:48 -------- d-----w- c:\program files (x86)\Nascom
2012-09-04 01:48 . 2012-09-04 01:48 97167020 ----a-w- c:\windows\system32\VAIO Hero Screensaver - Summer 2011.scr
2012-09-04 01:46 . 2009-09-04 15:29 1892184 ----a-w- c:\windows\SysWow64\D3DX9_42.dll
2012-09-04 01:46 . 2009-09-04 15:29 2475352 ----a-w- c:\windows\system32\D3DX9_42.dll
2012-09-04 01:46 . 2012-09-04 01:46 -------- d-----w- C:\SPLASH.000
2012-09-04 01:45 . 2012-09-04 23:25 -------- d-----w- c:\program files (x86)\Downloaded Installations
2012-09-04 01:41 . 2012-09-04 01:41 -------- d-----w- c:\program files (x86)\MSXML 4.0
2012-09-04 01:41 . 2007-07-19 16:14 5073256 ----a-w- c:\windows\system32\d3dx9_35.dll
2012-09-04 01:41 . 2006-03-31 10:41 3927248 ----a-w- c:\windows\system32\d3dx9_30.dll
2012-09-04 01:37 . 2010-06-02 02:55 77656 ----a-w- c:\windows\system32\XAPOFX1_5.dll
2012-09-04 01:36 . 2003-03-18 20:14 499712 ----a-r- c:\windows\SysWow64\msvcp71.dll
2012-09-04 01:36 . 2003-02-21 02:42 348160 ----a-w- c:\windows\SysWow64\msvcr71.dll
2012-09-04 01:36 . 1995-07-31 11:44 212480 ----a-w- c:\windows\SysWow64\PCDLIB32.DLL
2012-09-04 01:36 . 2009-05-26 12:32 19968 ----a-w- c:\windows\system32\drivers\ArcSoftKsUFilter.sys
2012-09-04 01:36 . 2008-09-04 15:06 55808 ----a-w- c:\windows\system\ArcSoftKsUFilter.dll
2012-09-04 01:35 . 2005-04-27 14:36 245408 ----a-w- c:\windows\SysWow64\unicows.dll
2012-09-04 01:35 . 2007-04-17 09:51 14112 ----a-w- c:\windows\system32\drivers\regi.sys
2012-09-04 01:35 . 2012-09-04 01:35 -------- d-----w- c:\program files (x86)\Common Files\InterVideo
2012-09-04 01:35 . 2012-09-04 01:35 -------- d-----w- c:\program files (x86)\Common Files\Protexis
2012-09-04 01:35 . 2012-09-04 01:35 -------- d-----w- c:\programdata\Corel
2012-09-04 01:35 . 2012-09-04 01:35 -------- d-----w- c:\program files (x86)\Corel
2012-09-04 01:34 . 2012-09-16 21:50 -------- d-----w- c:\programdata\ArcSoft
2012-09-04 01:34 . 2012-09-04 01:35 -------- d-----w- c:\program files (x86)\ArcSoft
2012-09-04 01:34 . 2012-09-04 01:34 -------- d-----w- c:\program files (x86)\Common Files\ArcSoft
2012-09-04 01:34 . 2012-09-04 01:34 -------- d-----w- c:\program files (x86)\Common Files\InstallShield
2012-09-04 01:33 . 2012-09-04 01:33 -------- d-----w- c:\windows\SysWow64\Macromed
2012-09-04 01:33 . 2012-09-04 01:33 -------- d-----w- c:\program files (x86)\Common Files\Adobe AIR
2012-09-04 01:32 . 2012-09-04 01:32 -------- d-----w- c:\windows\en
2012-09-04 01:30 . 2012-09-04 01:30 -------- d-----w- c:\windows\nl
2012-09-04 01:30 . 2012-09-04 01:30 -------- d-----w- c:\windows\da
2012-09-04 01:30 . 2012-09-04 01:30 -------- d-----w- c:\windows\cs
2012-09-04 01:30 . 2012-09-04 01:30 -------- d-----w- c:\windows\bg
2012-09-04 01:30 . 2012-09-04 01:30 -------- d-----w- c:\program files (x86)\Microsoft SQL Server Compact Edition
2012-09-04 01:27 . 2012-09-04 01:32 -------- d-----w- c:\program files (x86)\Windows Live
2012-09-04 01:26 . 2012-09-04 01:26 -------- d-----w- c:\windows\PCHEALTH
2012-09-04 01:26 . 2012-09-04 01:26 -------- d-----w- c:\program files\Windows Live
2012-09-04 01:26 . 2009-09-04 15:44 69464 ----a-w- c:\windows\SysWow64\XAPOFX1_3.dll
2012-09-04 01:26 . 2009-09-04 15:44 515416 ----a-w- c:\windows\SysWow64\XAudio2_5.dll
2012-09-04 01:26 . 2009-09-04 15:29 453456 ----a-w- c:\windows\SysWow64\d3dx10_42.dll
2012-09-04 01:26 . 2009-09-04 15:29 523088 ----a-w- c:\windows\system32\d3dx10_42.dll
2012-09-04 01:26 . 2006-11-29 11:06 4398360 ----a-w- c:\windows\system32\d3dx9_32.dll
2012-09-04 01:26 . 2006-11-29 11:06 3426072 ----a-w- c:\windows\SysWow64\d3dx9_32.dll
.
.
(((((((((((((((((((((((((((((((((((( Find3M Bericht ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-09-04 18:29 . 2010-06-24 09:33 19720 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2012-09-04 02:02 . 2012-09-04 02:02 2560 ----a-w- c:\windows\SysWow64\drivers\de-DE\qwavedrv.sys.mui
2012-09-04 02:02 . 2012-09-04 02:02 5632 ----a-w- c:\windows\SysWow64\drivers\de-DE\ndiscap.sys.mui
2012-09-04 02:02 . 2012-09-04 02:02 2560 ----a-w- c:\windows\SysWow64\drivers\de-DE\scfilter.sys.mui
2012-09-04 02:02 . 2012-09-04 02:02 51712 ----a-w- c:\windows\SysWow64\drivers\de-DE\tcpip.sys.mui
2012-09-04 02:02 . 2012-09-04 02:02 29696 ----a-w- c:\windows\SysWow64\drivers\de-DE\bfe.dll.mui
2012-09-04 02:02 . 2012-09-04 02:02 16896 ----a-w- c:\windows\SysWow64\drivers\de-DE\pacer.sys.mui
2012-06-25 14:04 . 2012-06-25 14:04 1394248 ----a-w- c:\windows\SysWow64\msxml4.dll
2012-06-22 05:40 . 2010-10-13 20:28 69672 ----a-w- c:\windows\system32\drivers\cfwids.sys
2012-06-22 05:38 . 2010-10-13 20:28 335784 ----a-w- c:\windows\system32\drivers\mfewfpk.sys
2012-06-22 05:36 . 2010-10-13 20:28 106112 ----a-w- c:\windows\system32\drivers\mferkdet.sys
2012-06-22 05:36 . 2010-10-13 20:28 752672 ----a-w- c:\windows\system32\drivers\mfehidk.sys
2012-06-22 05:35 . 2010-10-13 20:28 513456 ----a-w- c:\windows\system32\drivers\mfefirek.sys
2012-06-22 05:34 . 2010-10-13 20:28 300392 ----a-w- c:\windows\system32\drivers\mfeavfk.sys
2012-06-22 05:34 . 2010-10-13 20:28 169320 ----a-w- c:\windows\system32\drivers\mfeapfk.sys
.
.
(((((((((((((((((((((((((((( Autostartpunkte der Registrierung ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"IAStorIcon"="c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" [2010-09-13 283160]
"mcui_exe"="c:\program files\McAfee.com\Agent\mcagent.exe" [2012-06-21 1527896]
"ISBMgr.exe"="c:\program files (x86)\Sony\ISB Utility\ISBMgr.exe" [2011-02-15 2757312]
"PMBVolumeWatcher"="c:\program files (x86)\Sony\PMB\PMBVolumeWatcher.exe" [2010-11-26 648032]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-07-27 919008]
"Malwarebytes' Anti-Malware"="c:\program files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" [2012-07-03 462920]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
.
R2 0305921347413284mcinstcleanup;McAfee Application Installer Cleanup (0305921347413284);c:\windows\TEMP\030592~1.EXE [x]
R2 BBSvc;Bing Bar Update Service;c:\program files (x86)\Microsoft\BingBar\BBSvc.EXE [2011-10-21 196176]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2012-07-13 160944]
R3 DCDhcpService;DCDhcpService;c:\program files\Sony\VAIO Smart Network\WFDA\DCDhcpService.exe [2011-07-19 104096]
R3 e1yexpress;Intel(R) Gigabit Network Connections Driver;c:\windows\system32\DRIVERS\e1y60x64.sys [2009-06-10 281088]
R3 HipShieldK;McAfee Inc. HipShieldK;c:\windows\system32\drivers\HipShieldK.sys [2012-04-20 196440]
R3 McAWFwk;McAfee Activation Service;c:\progra~1\mcafee\msc\mcawfwk.exe [2010-08-09 220528]
R3 mferkdet;McAfee Inc. mferkdet;c:\windows\system32\drivers\mferkdet.sys [2012-06-22 106112]
R3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2012-09-08 114144]
R3 SOHCImp;VAIO Content Importer;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHCImp.exe [2011-02-21 113824]
R3 SOHDs;VAIO Device Searcher;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHDs.exe [2011-02-21 67232]
R3 SpfService;VAIO Entertainment Common Service;c:\program files\Common Files\Sony Shared\VAIO Entertainment Platform\SPF\SpfService64.exe [2011-01-20 286936]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
R3 VCFw;VAIO Content Folder Watcher;c:\program files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [2011-01-20 887000]
R3 VcmIAlzMgr;VAIO Content Metadata Intelligent Analyzing Manager;c:\program files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe [2011-02-18 546608]
R3 VcmINSMgr;VAIO Content Metadata Intelligent Network Service Manager;c:\program files\Sony\VCM Intelligent Network Service Manager\VcmINSMgr.exe [2011-02-18 385336]
R3 VcmXmlIfHelper;VAIO Content Metadata XML Interface;c:\program files\Common Files\Sony Shared\VcmXml\VcmXmlIfHelper64.exe [2011-02-18 99104]
R3 WatAdminSvc;Windows-Aktivierungstechnologieservice;c:\windows\system32\Wat\WatAdminSvc.exe [2012-09-04 1255736]
R4 McOobeSv;McAfee OOBE Service;c:\program files\Common Files\mcafee\McSvcHost\McSvHost.exe [2012-05-11 200728]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 57184]
S0 mfewfpk;McAfee Inc. mfewfpk;c:\windows\system32\drivers\mfewfpk.sys [2012-06-22 335784]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-07-27 63960]
S2 Atheros Bt&Wlan Coex Agent;Atheros Bt&Wlan Coex Agent;c:\program files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [2011-03-31 146592]
S2 AtherosSvc;AtherosSvc;c:\program files (x86)\Bluetooth Suite\adminservice.exe [2011-03-31 75936]
S2 BBUpdate;BBUpdate;c:\program files (x86)\Microsoft\BingBar\SeaPort.EXE [2011-10-13 249648]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2010-09-13 13336]
S2 IconMan_R;IconMan_R;c:\program files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe [2011-03-29 2361344]
S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2012-07-03 655944]
S2 McMPFSvc;McAfee Personal Firewall Service;c:\program files\Common Files\McAfee\McSvcHost\McSvHost.exe [2012-05-11 200728]
S2 McNaiAnn;McAfee VirusScan Announcer;c:\program files\Common Files\mcafee\McSvcHost\McSvHost.exe [2012-05-11 200728]
S2 mfefire;McAfee Firewall Core Service;c:\program files\Common Files\McAfee\SystemCore\\mfefire.exe [2012-06-22 218320]
S2 mfevtp;McAfee Validation Trust Protection Service;c:\windows\system32\mfevtps.exe [2012-06-22 177144]
S2 PMBDeviceInfoProvider;PMBDeviceInfoProvider;c:\program files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe [2010-11-26 398176]
S2 regi;regi;c:\windows\system32\drivers\regi.sys [2007-04-17 14112]
S2 SampleCollector;VAIO Care Performance Service;c:\program files\Sony\VAIO Care\VCPerfService.exe [2011-01-29 259192]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2011-02-18 378472]
S2 uCamMonitor;CamMonitor;c:\program files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [2011-02-23 105024]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2011-02-01 2656280]
S2 VSNService;VSNService;c:\program files\Sony\VAIO Smart Network\VSNService.exe [2011-02-28 852160]
S3 ArcSoftKsUFilter;ArcSoft Magic-I Visual Effect;c:\windows\system32\DRIVERS\ArcSoftKsUFilter.sys [2009-05-26 19968]
S3 AthBTPort;Atheros Virtual Bluetooth Class;c:\windows\system32\DRIVERS\btath_flt.sys [2011-03-31 36000]
S3 BTATH_A2DP;Bluetooth A2DP Audio Driver;c:\windows\system32\drivers\btath_a2dp.sys [2011-03-31 259232]
S3 btath_avdt;Atheros Bluetooth AVDT Service;c:\windows\system32\drivers\btath_avdt.sys [2011-03-31 109216]
S3 BTATH_BUS;Atheros Bluetooth Bus;c:\windows\system32\DRIVERS\btath_bus.sys [2011-03-31 29344]
S3 BTATH_HCRP;Bluetooth HCRP Server driver;c:\windows\system32\DRIVERS\btath_hcrp.sys [2011-03-31 166048]
S3 BTATH_LWFLT;Bluetooth LWFLT Device;c:\windows\system32\DRIVERS\btath_lwflt.sys [2011-03-31 59040]
S3 BTATH_RCP;Bluetooth AVRCP Device;c:\windows\system32\DRIVERS\btath_rcp.sys [2011-03-31 283296]
S3 BtFilter;BtFilter;c:\windows\system32\DRIVERS\btfilter.sys [2011-03-31 287392]
S3 cfwids;McAfee Inc. cfwids;c:\windows\system32\drivers\cfwids.sys [2012-06-22 69672]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2012-07-03 24904]
S3 MEIx64;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys [2010-10-19 56344]
S3 mfefirek;McAfee Inc. mfefirek;c:\windows\system32\drivers\mfefirek.sys [2012-06-22 513456]
S3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda64v.sys [2011-03-29 173160]
S3 RSPCIESTOR;Realtek PCIE CardReader Driver;c:\windows\system32\DRIVERS\RtsPStor.sys [2011-03-29 335464]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [2011-03-29 425064]
S3 SFEP;Sony Firmware Extension Parser;c:\windows\system32\DRIVERS\SFEP.sys [2010-04-26 12032]
S3 VCService;VCService;c:\program files\Sony\VAIO Care\VCService.exe [2011-02-14 44736]
S3 VUAgent;VUAgent;c:\program files\Sony\VAIO Update Common\VUAgent.exe [2012-01-13 1256040]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*Deregistered* - mfeavfk01
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"cAudioFilterAgent"="c:\program files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe" [2011-03-29 518784]
"AtherosBtStack"="c:\program files (x86)\Bluetooth Suite\BtvStack.exe" [2011-03-31 790176]
"AthBtTray"="c:\program files (x86)\Bluetooth Suite\AthBtTray.exe" [2011-03-31 657056]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"LoadAppInit_DLLs"=0x0
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.startfenster.com
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = <local>
TCP: DhcpNameServer = 10.0.0.138
FF - ProfilePath - c:\users\drea\AppData\Roaming\Mozilla\Firefox\Profiles\70atnn5q.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.google.at/
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
SafeBoot-98902903.sys
HKLM-Run-Apoint - c:\program files (x86)\Apoint\Apoint.exe
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SampleCollector]
"ImagePath"="\"c:\program files\Sony\VAIO Care\VCPerfService.exe\" \"/service\" \"/sstates\" \"/sampleinterval=5000\" \"/procinterval=5\" \"/dllinterval=120\" \"/counter=\Processor(_Total)\% Processor Time:1/counter=\PhysicalDisk(_Total)\Disk Bytes/sec:1\" \"/counter=\Network Interface(*)\Bytes Total/sec:1\" \"/expandcounter=\Processor Information(*)\Processor Frequency:1\" \"/expandcounter=\Processor(*)\% Idle Time:1\" \"/expandcounter=\Processor(*)\% C1 Time:1\" \"/expandcounter=\Processor(*)\% C2 Time:1\" \"/expandcounter=\Processor(*)\% C3 Time:1\" \"/expandcounter=\Processor(*)\% Processor Time:1\" \"/directory=c:\programdata\Sony Corporation\VAIO Care\inteldata\""
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*1*]
@="?????????????????? v1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*1*\CLSID]
@="{E23FE9C6-778E-49D4-B537-38FCDE4887D8}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*2*]
@="?????????????????? v2"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*2*\CLSID]
@="{9BE31822-FDAD-461B-AD51-BE1D1C159921}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee]
"SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
00,5c,00,6d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2012-09-17 20:59:16
ComboFix-quarantined-files.txt 2012-09-17 18:59
.
Vor Suchlauf: 13 Verzeichnis(se), 514.742.919.168 Bytes frei
Nach Suchlauf: 17 Verzeichnis(se), 514.454.839.296 Bytes frei
.
- - End Of File - - E26DCB6180CA38CBD9F6D7F9D491D12F
|
aswMBR.exe und speichere die Datei auf deinem Desktop.