Trojaner-Board - serchqu

Combofix Logfile:
Code:
ComboFix 11-07-03.04 - MaPa 04.07.2011  20:11:00.1.4 - x64

Microsoft Windows 7 Home Premium   6.1.7601.1.1252.49.1031.18.6143.5067 [GMT 2:00]

ausgeführt von:: c:\users\MaPa\Desktop\ComboFix.exe

AV: G Data InternetSecurity 2012 *Disabled/Updated* {39B780B4-63C2-05B0-3B40-8F7A21E4F496}

FW: G Data Personal Firewall *Enabled* {018C0191-29AD-04E8-101F-264FDF37B3ED}

SP: G Data InternetSecurity 2012 *Disabled/Updated* {82D66150-45F8-0A3E-01F0-B4085A63BE2B}

SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

.

.

((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))

.

.

c:\users\Samantha\AppData\Roaming\.#

c:\windows\IsUn0407.exe

.

.

(((((((((((((((((((((((   Dateien erstellt von 2011-06-04 bis 2011-07-04  ))))))))))))))))))))))))))))))

.

.

2011-07-04 18:25 . 2011-07-04 18:25        --------        d-----w-        c:\users\Samantha\AppData\Local\temp

2011-07-04 18:25 . 2011-07-04 18:25        --------        d-----w-        c:\users\Default\AppData\Local\temp

2011-07-03 15:56 . 2011-07-03 15:56        --------        d-----w-        C:\_OTL

2011-07-03 14:39 . 2011-07-03 14:39        --------        d-----w-        c:\program files (x86)\7-Zip

2011-07-02 06:26 . 2011-06-07 17:10        8873296        ----a-w-        c:\programdata\Microsoft\Windows Defender\Definition Updates\{EA2DD552-7693-4655-A376-011DD93A98C5}\mpengine.dll

2011-06-30 15:31 . 2011-06-30 15:31        --------        d-----w-        c:\users\MaPa\AppData\Roaming\Bandoo

2011-06-29 17:17 . 2011-06-29 17:17        --------        d-----w-        c:\program files (x86)\Common Files\Java

2011-06-29 04:58 . 2011-05-24 11:42        404480        ----a-w-        c:\windows\system32\umpnpmgr.dll

2011-06-29 04:58 . 2011-05-24 10:40        64512        ----a-w-        c:\windows\SysWow64\devobj.dll

2011-06-29 04:58 . 2011-05-24 10:40        44544        ----a-w-        c:\windows\SysWow64\devrtl.dll

2011-06-29 04:58 . 2011-05-24 10:39        145920        ----a-w-        c:\windows\SysWow64\cfgmgr32.dll

2011-06-29 04:58 . 2011-05-24 10:37        252928        ----a-w-        c:\windows\SysWow64\drvinst.exe

2011-06-28 05:19 . 2011-06-28 05:19        --------        d-----w-        c:\programdata\boost_interprocess

2011-06-26 09:29 . 2011-06-26 09:29        --------        d-----w-        c:\users\MaPa\AppData\Local\Ilivid Player

2011-06-26 09:28 . 2011-06-26 09:28        --------        d-----w-        c:\programdata\Bandoo

2011-06-26 09:28 . 2011-06-26 09:28        --------        d-----w-        c:\program files (x86)\Bandoo

2011-06-26 09:28 . 2011-05-25 14:55        1524112        ----a-w-        c:\windows\SysWow64\bandoolmx.dll

2011-06-26 09:25 . 2011-06-26 09:26        --------        d-----w-        c:\program files (x86)\Windows iLivid Toolbar

2011-06-26 09:25 . 2011-06-26 09:25        --------        d-----w-        c:\users\MaPa\AppData\Local\PackageAware

2011-06-23 18:59 . 2011-06-23 18:59        --------        d-----w-        c:\users\MaPa\AppData\Roaming\DVDVideoSoft

2011-06-22 18:57 . 2011-07-04 13:10        334630        ----a-w-        c:\windows\SysWow64\sig.bin

2011-06-22 16:49 . 2011-03-04 18:57        1941512        ----a-w-        c:\windows\SysWow64\GdScrSv.scr

2011-06-22 16:49 . 2011-06-22 16:49        31448        ----a-w-        c:\windows\system32\drivers\GdNetMon64.sys

2011-06-22 16:49 . 2011-03-29 09:12        138232        ----a-w-        c:\program files (x86)\Mozilla Firefox\extensions\{9AA46F4F-4DC7-4c06-97AF-5035170633FE}\Components\AvkWebFilterFF2.dll

2011-06-22 15:44 . 2011-06-22 15:44        --------        d-----w-        c:\windows\system32\SPReview

2011-06-22 15:42 . 2011-06-22 15:42        --------        d-----w-        c:\windows\system32\EventProviders

2011-06-22 15:42 . 2011-04-22 22:15        27520        ----a-w-        c:\windows\system32\drivers\Diskdump.sys

2011-06-22 13:33 . 2011-06-22 13:33        2106216        ----a-w-        c:\program files (x86)\Mozilla Firefox\D3DCompiler_43.dll

2011-06-22 13:33 . 2011-06-22 13:33        1998168        ----a-w-        c:\program files (x86)\Mozilla Firefox\d3dx9_43.dll

2011-06-21 10:58 . 2011-06-21 10:58        --------        d-----w-        c:\program files (x86)\VirtualDJ

2011-06-21 05:06 . 2010-11-05 01:57        48976        ----a-w-        c:\windows\system32\netfxperf.dll

2011-06-21 05:06 . 2010-11-05 01:57        1942856        ----a-w-        c:\windows\system32\dfshim.dll

2011-06-21 05:06 . 2010-11-05 01:58        1130824        ----a-w-        c:\windows\SysWow64\dfshim.dll

2011-06-21 05:06 . 2010-11-20 13:27        12288        ----a-w-        c:\windows\system32\TsUsbRedirectionGroupPolicyExtension.dll

2011-06-21 05:06 . 2010-11-20 13:27        3715584        ----a-w-        c:\windows\system32\mstscax.dll

2011-06-21 05:06 . 2010-11-20 11:07        59392        ----a-w-        c:\windows\system32\drivers\TsUsbFlt.sys

2011-06-21 05:06 . 2010-11-20 13:27        14967808        ----a-w-        c:\program files\DVD Maker\OmdBase.dll

2011-06-21 05:06 . 2010-11-20 13:26        1838080        ----a-w-        c:\windows\system32\d3d10warp.dll

2011-06-21 05:04 . 2010-11-20 13:27        63488        ----a-w-        c:\windows\system32\wscapi.dll

2011-06-21 05:03 . 2010-11-20 12:21        363008        ----a-w-        c:\windows\SysWow64\wbemcomn.dll

2011-06-21 05:03 . 2010-11-20 12:19        606208        ----a-w-        c:\windows\SysWow64\wbem\fastprox.dll

2011-06-21 05:02 . 2010-11-20 13:27        524288        ----a-w-        c:\windows\system32\wmicmiplugin.dll

2011-06-21 05:02 . 2010-11-20 13:27        529408        ----a-w-        c:\windows\system32\wbemcomn.dll

2011-06-21 05:02 . 2010-11-20 13:27        1225216        ----a-w-        c:\windows\system32\wbem\wbemcore.dll

2011-06-21 05:02 . 2010-11-20 13:27        933376        ----a-w-        c:\windows\system32\SmiEngine.dll

2011-06-21 05:02 . 2010-11-20 13:25        199168        ----a-w-        c:\windows\system32\PkgMgr.exe

2011-06-21 05:02 . 2010-11-20 13:26        422912        ----a-w-        c:\windows\system32\drvstore.dll

2011-06-21 05:02 . 2010-11-20 13:26        399872        ----a-w-        c:\windows\system32\dpx.dll

2011-06-15 06:20 . 2011-05-03 05:29        976896        ----a-w-        c:\windows\system32\inetcomm.dll

2011-06-15 06:20 . 2011-05-03 04:30        741376        ----a-w-        c:\windows\SysWow64\inetcomm.dll

2011-06-15 06:19 . 2011-04-25 05:33        1923968        ----a-w-        c:\windows\system32\drivers\tcpip.sys

2011-06-15 06:19 . 2011-04-25 02:34        499200        ----a-w-        c:\windows\system32\drivers\afd.sys

2011-06-15 06:19 . 2010-11-20 13:33        288640        ----a-w-        c:\windows\system32\drivers\FWPKCLNT.SYS

2011-06-15 06:19 . 2011-04-27 02:40        158208        ----a-w-        c:\windows\system32\drivers\mrxsmb.sys

2011-06-15 06:19 . 2011-04-27 02:39        289280        ----a-w-        c:\windows\system32\drivers\mrxsmb10.sys

2011-06-15 06:19 . 2011-04-27 02:39        128000        ----a-w-        c:\windows\system32\drivers\mrxsmb20.sys

2011-06-15 06:19 . 2011-05-28 03:06        3135488        ----a-w-        c:\windows\system32\win32k.sys

2011-06-15 06:19 . 2011-04-29 03:06        467456        ----a-w-        c:\windows\system32\drivers\srv.sys

2011-06-15 06:19 . 2011-04-29 03:05        410112        ----a-w-        c:\windows\system32\drivers\srv2.sys

2011-06-15 06:19 . 2011-04-29 03:05        168448        ----a-w-        c:\windows\system32\drivers\srvnet.sys

2011-06-15 06:09 . 2011-02-25 06:22        861696        ----a-w-        c:\windows\system32\oleaut32.dll

2011-06-15 06:09 . 2011-02-25 05:34        571904        ----a-w-        c:\windows\SysWow64\oleaut32.dll

2011-06-07 10:35 . 2011-06-07 10:35        103864        ----a-w-        c:\program files (x86)\Mozilla Firefox\plugins\nppdf32.dll

.

.

.

((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2011-06-24 18:58 . 2010-07-14 13:35        106488        ----a-w-        c:\windows\system32\drivers\GRD.sys

2011-06-22 16:49 . 2010-06-19 16:04        51576        ----a-w-        c:\windows\system32\drivers\HookCentre.sys

2011-06-22 16:49 . 2010-06-19 16:05        50040        ----a-w-        c:\windows\system32\drivers\GDBehave.sys

2011-06-22 16:49 . 2010-06-19 16:04        110456        ----a-w-        c:\windows\system32\drivers\MiniIcpt.sys

2011-06-22 16:49 . 2010-06-19 16:04        63864        ----a-w-        c:\windows\system32\drivers\gdwfpcd64.sys

2011-06-22 15:54 . 2009-07-14 02:36        175616        ----a-w-        c:\windows\system32\msclmd.dll

2011-06-22 15:54 . 2009-07-14 02:36        152576        ----a-w-        c:\windows\SysWow64\msclmd.dll

2011-05-24 17:14 . 2010-06-16 06:34        270720        ------w-        c:\windows\system32\MpSigStub.exe

2011-05-05 17:19 . 2011-05-05 17:19        74752        ----a-w-        c:\windows\SysWow64\RegisterIEPKEYs.exe

2011-05-05 17:19 . 2011-05-05 17:19        161792        ----a-w-        c:\windows\SysWow64\msls31.dll

2011-05-05 17:19 . 2011-05-05 17:19        1126912        ----a-w-        c:\windows\SysWow64\wininet.dll

2011-05-05 17:19 . 2011-05-05 17:19        86528        ----a-w-        c:\windows\SysWow64\iesysprep.dll

2011-05-05 17:19 . 2011-05-05 17:19        76800        ----a-w-        c:\windows\SysWow64\SetIEInstalledDate.exe

2011-05-05 17:19 . 2011-05-05 17:19        48640        ----a-w-        c:\windows\SysWow64\mshtmler.dll

2011-05-05 17:19 . 2011-05-05 17:19        110592        ----a-w-        c:\windows\SysWow64\IEAdvpack.dll

2011-05-05 17:19 . 2011-05-05 17:19        74752        ----a-w-        c:\windows\SysWow64\iesetup.dll

2011-05-05 17:19 . 2011-05-05 17:19        63488        ----a-w-        c:\windows\SysWow64\tdc.ocx

2011-05-05 17:19 . 2011-05-05 17:19        367104        ----a-w-        c:\windows\SysWow64\html.iec

2011-05-05 17:19 . 2011-05-05 17:19        23552        ----a-w-        c:\windows\SysWow64\licmgr10.dll

2011-05-05 17:19 . 2011-05-05 17:19        152064        ----a-w-        c:\windows\SysWow64\wextract.exe

2011-05-05 17:19 . 2011-05-05 17:19        150528        ----a-w-        c:\windows\SysWow64\iexpress.exe

2011-05-05 17:19 . 2011-05-05 17:19        1427456        ----a-w-        c:\windows\SysWow64\inetcpl.cpl

2011-05-05 17:19 . 2011-05-05 17:19        420864        ----a-w-        c:\windows\SysWow64\vbscript.dll

2011-05-05 17:19 . 2011-05-05 17:19        35840        ----a-w-        c:\windows\SysWow64\imgutil.dll

2011-05-05 17:19 . 2011-05-05 17:19        142848        ----a-w-        c:\windows\SysWow64\ieUnatt.exe

2011-05-05 17:19 . 2011-05-05 17:19        11776        ----a-w-        c:\windows\SysWow64\mshta.exe

2011-05-05 17:19 . 2011-05-05 17:19        101888        ----a-w-        c:\windows\SysWow64\admparse.dll

2011-05-05 17:19 . 2011-05-05 17:19        89088        ----a-w-        c:\windows\system32\RegisterIEPKEYs.exe

2011-05-05 17:19 . 2011-05-05 17:19        222208        ----a-w-        c:\windows\system32\msls31.dll

2011-05-05 17:19 . 2011-05-05 17:19        173056        ----a-w-        c:\windows\system32\ieUnatt.exe

2011-05-05 17:19 . 2011-05-05 17:19        1389056        ----a-w-        c:\windows\system32\wininet.dll

2011-05-05 17:19 . 2011-05-05 17:19        12288        ----a-w-        c:\windows\system32\mshta.exe

2011-05-05 17:19 . 2011-05-05 17:19        114176        ----a-w-        c:\windows\system32\admparse.dll

2011-05-05 17:19 . 2011-05-05 17:19        91648        ----a-w-        c:\windows\system32\SetIEInstalledDate.exe

2011-05-05 17:19 . 2011-05-05 17:19        76800        ----a-w-        c:\windows\system32\tdc.ocx

2011-05-05 17:19 . 2011-05-05 17:19        49664        ----a-w-        c:\windows\system32\imgutil.dll

2011-05-05 17:19 . 2011-05-05 17:19        48640        ----a-w-        c:\windows\system32\mshtmler.dll

2011-05-05 17:19 . 2011-05-05 17:19        135168        ----a-w-        c:\windows\system32\IEAdvpack.dll

2011-05-05 17:19 . 2011-05-05 17:19        111616        ----a-w-        c:\windows\system32\iesysprep.dll

2011-05-05 17:19 . 2011-05-05 17:19        448512        ----a-w-        c:\windows\system32\html.iec

2011-05-05 17:19 . 2011-05-05 17:19        85504        ----a-w-        c:\windows\system32\iesetup.dll

2011-05-05 17:19 . 2011-05-05 17:19        30720        ----a-w-        c:\windows\system32\licmgr10.dll

2011-05-05 17:19 . 2011-05-05 17:19        165888        ----a-w-        c:\windows\system32\iexpress.exe

2011-05-05 17:19 . 2011-05-05 17:19        160256        ----a-w-        c:\windows\system32\wextract.exe

2011-05-05 17:19 . 2011-05-05 17:19        1492992        ----a-w-        c:\windows\system32\inetcpl.cpl

2011-05-05 17:19 . 2011-05-05 17:19        603648        ----a-w-        c:\windows\system32\vbscript.dll

2011-05-04 02:52 . 2010-07-25 07:42        472808        ----a-w-        c:\windows\SysWow64\deployJava1.dll

2011-04-09 07:02 . 2011-05-12 06:04        5562240        ----a-w-        c:\windows\system32\ntoskrnl.exe

2011-04-09 06:58 . 2011-05-24 14:31        142336        ----a-w-        c:\windows\system32\poqexec.exe

2011-04-09 06:02 . 2011-05-12 06:04        3967872        ----a-w-        c:\windows\SysWow64\ntkrnlpa.exe

2011-04-09 06:02 . 2011-05-12 06:04        3912576        ----a-w-        c:\windows\SysWow64\ntoskrnl.exe

2011-04-09 05:56 . 2011-05-24 14:31        123904        ----a-w-        c:\windows\SysWow64\poqexec.exe

.

.

((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))

.

.

*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 

REGEDIT4

.

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]

"{872b5b88-9db5-4310-bdd0-ac189557e5f5}"= "c:\program files (x86)\DVDVideoSoftTB\tbDVDV.dll" [2010-04-27 2393184]

.

[HKEY_CLASSES_ROOT\clsid\{872b5b88-9db5-4310-bdd0-ac189557e5f5}]

.

[HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{872b5b88-9db5-4310-bdd0-ac189557e5f5}]

2010-04-27 08:08        2393184        ----a-w-        c:\program files (x86)\DVDVideoSoftTB\tbDVDV.dll

.

[HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{BA3295CF-17ED-4F49-9E95-D999A0ADBFDC}]

2011-03-24 07:28        229880        ----a-w-        c:\program files (x86)\Common Files\G Data\AVKProxy\BanksafeBHO.dll

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar]

"{872b5b88-9db5-4310-bdd0-ac189557e5f5}"= "c:\program files (x86)\DVDVideoSoftTB\tbDVDV.dll" [2010-04-27 2393184]

.

[HKEY_CLASSES_ROOT\clsid\{872b5b88-9db5-4310-bdd0-ac189557e5f5}]

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP]

@="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}"

[HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}]

2009-09-10 13:41        120104        ----a-w-        c:\program files (x86)\EgisTec\MyWinLocker 3\x86\PSDProtect.dll

.

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"ccleaner"="c:\program files (x86)\CCleaner\CCleaner.exe" [2010-03-29 1654584]

"GMX_GMX MultiMessenger"="c:\program files (x86)\GMX\GMX MultiMessenger\MESSENGR.EXE" [2009-10-16 5031336]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]

"BackupManagerTray"="c:\program files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe" [2009-08-12 261888]

"Hotkey Utility"="c:\program files (x86)\Acer\Hotkey Utility\HotkeyUtility.exe" [2009-08-18 629280]

"EgisTecLiveUpdate"="c:\program files (x86)\EgisTec Egis Software Update\EgisUpdate.exe" [2009-08-04 199464]

"ArcadeDeluxeAgent"="c:\program files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe" [2009-09-29 128296]

"PlayMovie"="c:\program files (x86)\Acer Arcade Deluxe\PlayMovie\PMVService.exe" [2009-09-29 181480]

"G Data AntiVirus Tray Application"="c:\program files (x86)\G Data\InternetSecurity\AVKTray\AVKTray.exe" [2011-05-11 923144]

"GDFirewallTray"="c:\program files (x86)\G Data\InternetSecurity\Firewall\GDFirewallTray.exe" [2011-05-20 1540616]

"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2011-06-08 37296]

"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-03-30 937920]

"ContentTransferWMDetector.exe"="c:\program files (x86)\Sony\Content Transfer\ContentTransferWMDetector.exe" [2009-11-19 583016]

"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2011-04-08 254696]

.

c:\users\MaPa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\

OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk - c:\program files (x86)\Microsoft Office\Office12\ONENOTEM.EXE [2009-2-26 97680]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"ConsentPromptBehaviorAdmin"= 0 (0x0)

"ConsentPromptBehaviorUser"= 3 (0x3)

"EnableLUA"= 0 (0x0)

"EnableUIADesktopToggle"= 0 (0x0)

"PromptOnSecureDesktop"= 0 (0x0)

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]

"AppInit_DLLs"=c:\progra~2\WI3C8A~1\Datamngr\datamngr.dll c:\progra~2\WI3C8A~1\Datamngr\IEBHO.dll c:\progra~2\Bandoo\BndHook.dll

.

R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]

R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]

R3 GdNetMon;G Data Network Monitor;c:\windows\system32\drivers\GdNetMon64.sys [x]

R3 MWLService;MyWinLocker Service;c:\program files (x86)\EgisTec\MyWinLocker 3\x86\\MWLService.exe [2009-09-10 305448]

R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]

S0 GDBehave;GDBehave;c:\windows\system32\drivers\GDBehave.sys [x]

S1 GDMnIcpt;GDMnIcpt;c:\windows\system32\drivers\MiniIcpt.sys [x]

S1 gdwfpcd;G DATA WFP CD;c:\windows\system32\drivers\gdwfpcd64.sys [x]

S1 GRD;G Data Rootkit Detector Driver;c:\windows\system32\drivers\GRD.sys [2011-06-24 106488]

S1 HookCentre;HookCentre;c:\windows\system32\drivers\HookCentre.sys [x]

S1 mwlPSDFilter;mwlPSDFilter;c:\windows\system32\DRIVERS\mwlPSDFilter.sys [x]

S1 mwlPSDNServ;mwlPSDNServ;c:\windows\system32\DRIVERS\mwlPSDNServ.sys [x]

S1 mwlPSDVDisk;mwlPSDVDisk;c:\windows\system32\DRIVERS\mwlPSDVDisk.sys [x]

S2 AAV UpdateService;AAV UpdateService;c:\program files (x86)\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe [2008-10-24 128296]

S2 acedrv11;acedrv11;c:\windows\system32\drivers\acedrv11.sys [x]

S2 AVKProxy;G Data AntiVirus Proxy;c:\program files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe [2011-05-25 1434632]

S2 AVKService;G Data Scheduler;c:\program files (x86)\G Data\InternetSecurity\AVK\AVKService.exe [2011-03-04 381448]

S2 AVKWCtl;G Data Dateisystem Wächter;c:\program files (x86)\G Data\InternetSecurity\AVK\AVKWCtlX64.exe [2011-05-26 1929104]

S2 DBService;DATA BECKER Update Service;c:\program files (x86)\Common Files\DATA BECKER Shared\DBService.exe [2010-05-28 2650112]

S2 Greg_Service;GRegService;c:\program files (x86)\Acer\Registration\GregHSRW.exe [2009-08-28 1150496]

S2 NTI IScheduleSvc;NTI IScheduleSvc;c:\program files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe [2009-08-12 62208]

S2 Updater Service;Updater Service;c:\program files\Acer\Acer Updater\UpdaterService.exe [2009-07-04 240160]

S3 GDFwSvc;G Data Personal Firewall;c:\program files (x86)\G Data\InternetSecurity\Firewall\GDFwSvcx64.exe [2011-05-27 1557816]

S3 GDPkIcpt;GDPkIcpt;c:\windows\system32\drivers\PktIcpt.sys [x]

S3 GDScan;G Data Scanner;c:\program files (x86)\Common Files\G Data\GDScan\GDScan.exe [2011-05-20 368136]

S3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda64v.sys [x]

.

.

--- Andere Dienste/Treiber im Speicher ---

.

*NewlyCreated* - 04459474

*Deregistered* - 04459474

.

Inhalt des "geplante Tasks" Ordners

.

2011-07-03 c:\windows\Tasks\Norton Security Scan for MaPa.job

- c:\program files (x86)\Norton Security Scan\Engine\2.7.6.13\Nss.exe [2011-03-12 00:27]

.

.

--------- x86-64 -----------

.

.

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{A40DC6C5-79D0-4ca8-A185-8FF989AF1115}]

2011-06-01 20:44        1793432        ----a-w-        c:\progra~2\WI3C8A~1\Datamngr\x64\IEBHO.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP]

@="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}"

[HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}]

2009-09-10 13:44        137512        ----a-w-        c:\program files (x86)\EgisTec\MyWinLocker 3\x64\PSDProtect.dll

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2009-07-20 7981088]

"mwlDaemon"="c:\program files (x86)\EgisTec\MyWinLocker 3\x86\mwlDaemon.exe" [2009-09-10 349480]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]

"LoadAppInit_DLLs"=0x1

"AppInit_DLLs"=c:\progra~2\WI3C8A~1\Datamngr\x64\datamngr.dll c:\progra~2\WI3C8A~1\Datamngr\x64\IEBHO.dll

.

------- Zusätzlicher Suchlauf -------

.

uStart Page = hxxp://www.searchqu.com/406

uLocal Page = c:\windows\system32\blank.htm

mStart Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&m=aspire_x3300&r=17360610cn07973480k35nh9l18325

mLocal Page = c:\windows\SysWOW64\blank.htm

IE: Free YouTube to Mp3 Converter - c:\users\MaPa\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm

IE: Nach Microsoft E&xel exportieren - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000

LSP: %SYSTEMROOT%\system32\nvLsp.dll

TCP: Interfaces\{D89C332B-5F8B-4006-97A5-EE5501D5C27F}: NameServer = 194.25.2.129

FF - ProfilePath - c:\users\MaPa\AppData\Roaming\Mozilla\Firefox\Profiles\1sbehpu5.default\

FF - prefs.js: browser.search.defaulturl - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2269050&SearchSource=3&q={searchTerms}

FF - prefs.js: browser.search.selectedEngine - Ask.com

FF - prefs.js: browser.startup.homepage - hxxp://www.searchqu.com/406

FF - prefs.js: keyword.URL - hxxp://dts.search-results.com/sr?src=ffb&appid=119&systemid=406&q=

FF - user.js: yahoo.homepage.dontask - true

.

- - - - Entfernte verwaiste Registrierungseinträge - - - -

.

Toolbar-Locked - (no file)

Toolbar-10 - (no file)

SafeBoot-mcmscsvc

SafeBoot-MCODS

Toolbar-Locked - (no file)

Toolbar-10 - (no file)

WebBrowser-{872B5B88-9DB5-4310-BDD0-AC189557E5F5} - (no file)

WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)

AddRemove-Abenteuer auf dem Reiterhof 2 - c:\windows\IsUn0407.exe

AddRemove-Adobe Shockwave Player - c:\windows\system32\Adobe\Shockwave 11\uninstaller.exe

.

.

.

--------------------- Gesperrte Registrierungsschluessel ---------------------

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}]

@Denied: (A 2) (Everyone)

@="FlashBroker"

"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil10c.exe,-101"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\Elevation]

"Enabled"=dword:00000001

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\LocalServer32]

@="c:\\Windows\\SysWow64\\Macromed\\Flash\\FlashUtil10c.exe"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Shockwave Flash Object"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10c.ocx"

"ThreadingModel"="Apartment"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]

@="0"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]

@="ShockwaveFlash.ShockwaveFlash.10"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10c.ocx, 1"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="ShockwaveFlash.ShockwaveFlash"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Macromedia Flash Factory Object"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10c.ocx"

"ThreadingModel"="Apartment"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]

@="FlashFactory.FlashFactory.1"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10c.ocx, 1"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="FlashFactory.FlashFactory"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}]

@Denied: (A 2) (Everyone)

@="IFlashBroker3"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\ProxyStubClsid32]

@="{00020424-0000-0000-C000-000000000046}"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

"Version"="1.0"

.

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]

@Denied: (Full) (Everyone)

.

Zeit der Fertigstellung: 2011-07-04  20:58:35

ComboFix-quarantined-files.txt  2011-07-04 18:58

.

Vor Suchlauf: 14 Verzeichnis(se), 420.635.340.800 Bytes frei

Nach Suchlauf: 19 Verzeichnis(se), 420.793.184.256 Bytes frei

.

- - End Of File - - F9C31C173C935756BA857D397F07B275
--- --- ---