Trojaner-Board - Aus Sicherheitsgründen wurde Ihre Windows Version gesperrt + crypt.ulpm.gen

So Chef, hab nun auch Combofix erfolgreich ausgeführt, das Program hat nicht einen Neustart ausgeführt!

Hier die Log:

Combofix Logfile:
Code:
ComboFix 12-03-01.02 - Marian Kasprowski 02.03.2012  13:14:43.3.2 - x86

Microsoft Windows XP Professional  5.1.2600.3.1252.49.1031.18.1022.392 [GMT 1:00]

ausgeführt von:: c:\dokumente und einstellungen\Marian Kasprowski\Eigene Dateien\Downloads\ComboFix.exe

AV: AntiVir Desktop *Enabled/Updated* {AD166499-45F9-482A-A743-FDD3350758C7}

AV: AntiVir PersonalEdition Classic Virenschutz *Disabled/Updated* {846DB3F4-FFA4-00EF-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Disabled/Updated* {86212634-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Disabled/Updated* {8623ADDC-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Disabled/Updated* {86262C1C-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Outdated* {00000000-0000-0000-0000-000000000000}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {84105154-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {84746654-FFA4-00EE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {847545DC-FFA4-00EE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {84780054-FFA4-00EE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {84892B6C-FFA4-00EE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8494DDDC-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {84972BCC-FFA4-00EE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {849D0054-FFA4-00EE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {857AF93C-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {857D0DDC-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {85858DDC-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {85894054-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {85E997DC-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {86188B1C-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8618EDDC-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {861C3054-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {861CE3A4-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {861DC7CC-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {861EACAC-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {861F63FC-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {861F8224-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8620CDB4-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {86225DDC-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {86229364-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8622C7F4-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8622CDDC-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {86230694-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {86233514-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8623B81C-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8623DC64-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {862413BC-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8624298C-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {86242DDC-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {86250DDC-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {862522CC-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {86257DB4-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {86259264-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8625A98C-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8626360C-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8626493C-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8626A3CC-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8626FDDC-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {862743CC-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8627577C-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {86275964-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {86275A5C-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8627D4EC-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8627DDDC-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8628193C-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8628B65C-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8628E4C4-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8628FDDC-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {86291824-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {86291A84-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {86293054-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8629598C-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {86297DDC-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8629E58C-FFA4-00EF-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {862A2C74-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {862A54FC-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {862A553C-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {862AEDDC-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {862AFDDC-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {862B0DDC-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {862B25D4-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {862B7DDC-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {862C03A4-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {862C198C-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {862C468C-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {862CA34C-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {862CE60C-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {862D1BA4-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {862D7634-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {862DEC44-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {862E5824-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {862EAC44-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {862EC4EC-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {862EC8EC-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {862EE964-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {862F53CC-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {862F99DC-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {862FB58C-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {862FD96C-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {863016DC-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {86309534-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {86309964-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {863131B4-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {863135AC-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {86316A5C-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {86317594-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {863177F4-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {86319594-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8631A9BC-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8631CDDC-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8631E674-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8631FDDC-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8632044C-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8632168C-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {863293EC-FFA4-00EF-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {86329624-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {86329824-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8632EDDC-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8632F754-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8632FDDC-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {863396AC-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8633A594-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8633E464-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {86340DDC-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8634458C-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8634F66C-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8634FDDC-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8635FB5C-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {86368DDC-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8636988C-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {86376DDC-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8637BDDC-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {86386DDC-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {86388DDC-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {86399C4C-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8639CB64-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8639CC54-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {863A7614-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {863A7DAC-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {863AFA3C-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {863B0DDC-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {863B2054-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {863B3DDC-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {863C3B64-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {863C59F4-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {863C68BC-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {863C6DDC-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {863D75C4-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {863DB32C-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {863F1DDC-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {86405DDC-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {86406B2C-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {86414054-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8641E95C-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8641F2F4-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8641F614-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8642181C-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {864233A4-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8642693C-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {864534AC-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8645538C-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8645F054-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {864F485C-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {864F76C4-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {865BB2E4-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {865C4AB4-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {865CE744-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {865D258C-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {865D5A2C-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {865DC4B4-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {BADB0D00-FFA4-00DE-0D24-347CA8A3377C}

AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {F78A2540-FFA4-00DE-0D24-347CA8A3377C}

.

.

((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))

.

.

c:\dokumente und einstellungen\All Users\Anwendungsdaten\TEMP

c:\dokumente und einstellungen\Marian Kasprowski\Anwendungsdaten\PriceGong

c:\dokumente und einstellungen\Marian Kasprowski\Anwendungsdaten\PriceGong\Data\1.xml

c:\dokumente und einstellungen\Marian Kasprowski\Anwendungsdaten\PriceGong\Data\a.xml

c:\dokumente und einstellungen\Marian Kasprowski\Anwendungsdaten\PriceGong\Data\b.xml

c:\dokumente und einstellungen\Marian Kasprowski\Anwendungsdaten\PriceGong\Data\c.xml

c:\dokumente und einstellungen\Marian Kasprowski\Anwendungsdaten\PriceGong\Data\d.xml

c:\dokumente und einstellungen\Marian Kasprowski\Anwendungsdaten\PriceGong\Data\e.xml

c:\dokumente und einstellungen\Marian Kasprowski\Anwendungsdaten\PriceGong\Data\f.xml

c:\dokumente und einstellungen\Marian Kasprowski\Anwendungsdaten\PriceGong\Data\g.xml

c:\dokumente und einstellungen\Marian Kasprowski\Anwendungsdaten\PriceGong\Data\h.xml

c:\dokumente und einstellungen\Marian Kasprowski\Anwendungsdaten\PriceGong\Data\i.xml

c:\dokumente und einstellungen\Marian Kasprowski\Anwendungsdaten\PriceGong\Data\j.xml

c:\dokumente und einstellungen\Marian Kasprowski\Anwendungsdaten\PriceGong\Data\k.xml

c:\dokumente und einstellungen\Marian Kasprowski\Anwendungsdaten\PriceGong\Data\l.xml

c:\dokumente und einstellungen\Marian Kasprowski\Anwendungsdaten\PriceGong\Data\m.xml

c:\dokumente und einstellungen\Marian Kasprowski\Anwendungsdaten\PriceGong\Data\mru.xml

c:\dokumente und einstellungen\Marian Kasprowski\Anwendungsdaten\PriceGong\Data\n.xml

c:\dokumente und einstellungen\Marian Kasprowski\Anwendungsdaten\PriceGong\Data\o.xml

c:\dokumente und einstellungen\Marian Kasprowski\Anwendungsdaten\PriceGong\Data\p.xml

c:\dokumente und einstellungen\Marian Kasprowski\Anwendungsdaten\PriceGong\Data\q.xml

c:\dokumente und einstellungen\Marian Kasprowski\Anwendungsdaten\PriceGong\Data\r.xml

c:\dokumente und einstellungen\Marian Kasprowski\Anwendungsdaten\PriceGong\Data\s.xml

c:\dokumente und einstellungen\Marian Kasprowski\Anwendungsdaten\PriceGong\Data\t.xml

c:\dokumente und einstellungen\Marian Kasprowski\Anwendungsdaten\PriceGong\Data\u.xml

c:\dokumente und einstellungen\Marian Kasprowski\Anwendungsdaten\PriceGong\Data\v.xml

c:\dokumente und einstellungen\Marian Kasprowski\Anwendungsdaten\PriceGong\Data\w.xml

c:\dokumente und einstellungen\Marian Kasprowski\Anwendungsdaten\PriceGong\Data\x.xml

c:\dokumente und einstellungen\Marian Kasprowski\Anwendungsdaten\PriceGong\Data\y.xml

c:\dokumente und einstellungen\Marian Kasprowski\Anwendungsdaten\PriceGong\Data\z.xml

c:\programme\Program Files

c:\programme\Program Files\ICQLite\Plugins\Feature\icq.gif

c:\programme\Program Files\ICQLite\Plugins\MIB\test.ico

c:\programme\Program Files\InterActual\Common\bin\drvtable.dat

c:\programme\Program Files\InterActual\Common\bin\IAAgent.dll

c:\programme\Program Files\InterActual\Common\bin\IACommonServices.dll

c:\programme\Program Files\InterActual\Common\bin\IAProvider.dll

c:\programme\Program Files\InterActual\Common\bin\IASystemInfo.dll

c:\programme\Program Files\InterActual\Common\bin\itilog.dll

c:\programme\Program Files\InterActual\Common\profiler\audio.htm

c:\programme\Program Files\InterActual\Common\profiler\dvddecoder.htm

c:\programme\Program Files\InterActual\Common\profiler\images\audio.gif

c:\programme\Program Files\InterActual\Common\profiler\images\audio_rll.gif

c:\programme\Program Files\InterActual\Common\profiler\images\dvd_dec.gif

c:\programme\Program Files\InterActual\Common\profiler\images\dvd_dec_rll.gif

c:\programme\Program Files\InterActual\Common\profiler\images\Hdr.jpg

c:\programme\Program Files\InterActual\Common\profiler\images\misc.gif

c:\programme\Program Files\InterActual\Common\profiler\images\misc_rll.gif

c:\programme\Program Files\InterActual\Common\profiler\images\Side_hdr.gif

c:\programme\Program Files\InterActual\Common\profiler\images\video.gif

c:\programme\Program Files\InterActual\Common\profiler\images\video_rll.gif

c:\programme\Program Files\InterActual\Common\profiler\infoaudio.htm

c:\programme\Program Files\InterActual\Common\profiler\infodvddecoder.htm

c:\programme\Program Files\InterActual\Common\profiler\infomisc.htm

c:\programme\Program Files\InterActual\Common\profiler\infovideo.htm

c:\programme\Program Files\InterActual\Common\profiler\menuaudio.htm

c:\programme\Program Files\InterActual\Common\profiler\menudvddecoder.htm

c:\programme\Program Files\InterActual\Common\profiler\menumisc.htm

c:\programme\Program Files\InterActual\Common\profiler\menuvideo.htm

c:\programme\Program Files\InterActual\Common\profiler\misc.htm

c:\programme\Program Files\InterActual\Common\profiler\top.htm

c:\programme\Program Files\InterActual\Common\profiler\video.htm

c:\programme\Program Files\InterActual\Common\uninst2.ini

c:\programme\Program Files\InterActual\Common\Video\help\help.htm

c:\programme\Program Files\InterActual\Common\Video\help\images\btm_bckg.gif

c:\programme\Program Files\InterActual\Common\Video\help\images\check.gif

c:\programme\Program Files\InterActual\Common\Video\help\images\check_rll.gif

c:\programme\Program Files\InterActual\Common\Video\help\images\head.gif

c:\programme\Program Files\InterActual\Common\Video\help\images\lgo.gif

c:\programme\Program Files\InterActual\Common\Video\help\images\online.gif

c:\programme\Program Files\InterActual\Common\Video\help\images\online_rll.gif

c:\programme\Program Files\InterActual\Common\Video\help\images\side_bckg.gif

c:\programme\Program Files\InterActual\Common\Video\help\images\sprofiler.gif

c:\programme\Program Files\InterActual\Common\Video\help\images\sprofiler_rll.gif

c:\programme\Program Files\InterActual\Common\Video\help\images\top_bckg.gif

c:\programme\Program Files\InterActual\Common\Video\help\images\x.gif

c:\programme\Program Files\InterActual\Common\Video\help\images\x_rll.gif

c:\programme\Program Files\InterActual\Common\Video\IADirectShow.dll

c:\programme\Program Files\InterActual\Common\Video\iamedia.dll

c:\programme\Program Files\InterActual\Common\Video\IAMediamatics.dll

c:\programme\Program Files\InterActual\Common\Video\IARavisent.dll

c:\programme\Program Files\InterActual\Common\Video\IARemote.dll

c:\programme\Program Files\InterActual\Common\Video\IARouter.dll

c:\programme\Program Files\InterActual\Common\Video\IASigma.dll

c:\programme\Program Files\InterActual\Common\Video\IAVidresde.dll

c:\programme\Program Files\InterActual\Common\Video\IAVidresen.dll

c:\programme\Program Files\InterActual\Common\Video\IAVidreses.dll

c:\programme\Program Files\InterActual\Common\Video\IAVidresfr.dll

c:\programme\Program Files\InterActual\Common\Video\IAVidresit.dll

c:\programme\Program Files\InterActual\Common\Video\IAVidresjp.dll

c:\programme\Program Files\InterActual\Common\Video\IAVidresru.dll

c:\programme\Program Files\InterActual\Common\Video\IAWindDVD.dll

c:\programme\Program Files\InterActual\Common\Video\itiimg3.dll

c:\programme\Program Files\InterActual\Common\Video\Video.ocx

c:\programme\Program Files\InterActual\Common\Video\VideoX.ocx

c:\programme\Program Files\InterActual\InterActual Player\bin\IAClientServices.dll

c:\programme\Program Files\InterActual\InterActual Player\bin\IAIExplore.dll

c:\programme\Program Files\InterActual\InterActual Player\bin\IAMime.dll

c:\programme\Program Files\InterActual\InterActual Player\bin\pcfpatch

c:\programme\Program Files\InterActual\InterActual Player\help\help.htm

c:\programme\Program Files\InterActual\InterActual Player\help\IA_help.htm

c:\programme\Program Files\InterActual\InterActual Player\help\ie4.htm

c:\programme\Program Files\InterActual\InterActual Player\help\images\btm_bckg.gif

c:\programme\Program Files\InterActual\InterActual Player\help\images\check.gif

c:\programme\Program Files\InterActual\InterActual Player\help\images\check_rll.gif

c:\programme\Program Files\InterActual\InterActual Player\help\images\head.gif

c:\programme\Program Files\InterActual\InterActual Player\help\images\install\cancel.gif

c:\programme\Program Files\InterActual\InterActual Player\help\images\install\cancel_rll.gif

c:\programme\Program Files\InterActual\InterActual Player\help\images\install\pcf.gif

c:\programme\Program Files\InterActual\InterActual Player\help\images\install\pcf_rll.gif

c:\programme\Program Files\InterActual\InterActual Player\help\images\install\top_bkgrd.gif

c:\programme\Program Files\InterActual\InterActual Player\help\images\lgo.gif

c:\programme\Program Files\InterActual\InterActual Player\help\images\online.gif

c:\programme\Program Files\InterActual\InterActual Player\help\images\online_rll.gif

c:\programme\Program Files\InterActual\InterActual Player\help\images\side_bckg.gif

c:\programme\Program Files\InterActual\InterActual Player\help\images\sprofiler.gif

c:\programme\Program Files\InterActual\InterActual Player\help\images\sprofiler_rll.gif

c:\programme\Program Files\InterActual\InterActual Player\help\images\top_bckg.gif

c:\programme\Program Files\InterActual\InterActual Player\help\images\x.gif

c:\programme\Program Files\InterActual\InterActual Player\help\images\x_rll.gif

c:\programme\Program Files\InterActual\InterActual Player\help\noenhdef.htm

c:\programme\Program Files\InterActual\InterActual Player\help\ns4.htm

c:\programme\Program Files\InterActual\InterActual Player\IAKey.dll

c:\programme\Program Files\InterActual\InterActual Player\IARecord\iarecord.dll

c:\programme\Program Files\InterActual\InterActual Player\IAResDE.dll

c:\programme\Program Files\InterActual\InterActual Player\IAResEn.dll

c:\programme\Program Files\InterActual\InterActual Player\IAResES.dll

c:\programme\Program Files\InterActual\InterActual Player\IAResFR.dll

c:\programme\Program Files\InterActual\InterActual Player\IAResIT.dll

c:\programme\Program Files\InterActual\InterActual Player\IAResJP.dll

c:\programme\Program Files\InterActual\InterActual Player\IAResRU.dll

c:\programme\Program Files\InterActual\InterActual Player\inuninst.exe

c:\programme\Program Files\InterActual\InterActual Player\iPlayer.exe

c:\programme\Program Files\InterActual\InterActual Player\itidib2.dll

c:\programme\Program Files\InterActual\InterActual Player\mfc42.dll

c:\programme\Program Files\InterActual\InterActual Player\skins\earth.iti

c:\programme\Program Files\InterActual\InterActual Player\uninst1.ini

c:\programme\Program Files\InterActual\InterActual Player\weblinks\default\default.htm

c:\programme\Program Files\InterActual\InterActual Player\weblinks\dvdplayer\dvdbar.htm

c:\programme\Program Files\InterActual\InterActual Player\weblinks\dvdplayer\dvdbar2.htm

c:\programme\Program Files\InterActual\InterActual Player\weblinks\dvdplayer\dvdplayer.htm

c:\programme\Program Files\InterActual\InterActual Player\weblinks\dvdplayer\dvdplayer2.htm

c:\programme\Program Files\InterActual\InterActual Player\weblinks\dvdplayer\dvdvideo.htm

c:\programme\Program Files\InterActual\InterActual Player\weblinks\dvdplayer\dvdwebnav.htm

c:\programme\Program Files\InterActual\InterActual Player\weblinks\dvdplayer\dvdwebstudio.htm

c:\programme\Program Files\InterActual\InterActual Player\weblinks\dvdplayer\images\links\cust.gif

c:\programme\Program Files\InterActual\InterActual Player\weblinks\dvdplayer\images\links\cust_rll.gif

c:\programme\Program Files\InterActual\InterActual Player\weblinks\dvdplayer\images\links\stdio.gif

c:\programme\Program Files\InterActual\InterActual Player\weblinks\dvdplayer\images\resizebar\close.gif

c:\programme\Program Files\InterActual\InterActual Player\weblinks\dvdplayer\images\resizebar\open.gif

c:\programme\Program Files\InterActual\InterActual Player\weblinks\dvdplayer\images\resizebar\rel.gif

c:\programme\Program Files\InterActual\InterActual Player\weblinks\dvdplayer\images\resizebar\rel_black.gif

c:\programme\Program Files\InterActual\InterActual Player\weblinks\nodisc\insert.jpg

c:\programme\Program Files\InterActual\InterActual Player\weblinks\nodisc\nodisc.htm

c:\programme\Program Files\InterActual\InterActual Player\weblinks\weblinks.htm

c:\programme\Program Files\Papertrl\Checklist\ace32.dll

c:\programme\Program Files\Papertrl\Checklist\adsloc32.dll

c:\programme\Program Files\Papertrl\Checklist\Checklist.exe

c:\programme\Program Files\Papertrl\Checklist\Docs\license.txt

c:\programme\Program Files\Papertrl\Checklist\Docs\readme.txt

c:\programme\Program Files\Papertrl\Checklist\Help\Checklist.pdf

c:\programme\Program Files\Papertrl\Checklist\Help\ChecklistHelp.chm

c:\programme\Program Files\Papertrl\Checklist\Help\ChecklistHelp.hlp

c:\programme\Program Files\Papertrl\Checklist\unins000.dat

c:\programme\Program Files\Papertrl\Checklist\unins000.exe

c:\programme\Program Files\Washer\washer.ini

c:\windows\kb913800.exe

.

.

(((((((((((((((((((((((   Dateien erstellt von 2012-02-02 bis 2012-03-02  ))))))))))))))))))))))))))))))

.

.

2074-05-18 09:44 . 2008-03-21 06:46        607296        ----a-w-        c:\programme\Microsoft Games\Age of Empires III\deformerdllyD.dll

2012-03-02 11:22 . 2012-03-02 11:22        --------        d-----w-        C:\_OTL

2012-03-01 14:00 . 2012-03-01 14:00        --------        d-----w-        c:\programme\CCleaner

2012-03-01 13:56 . 2012-03-01 13:56        --------        d-----w-        c:\programme\MozBackup

2012-03-01 13:45 . 2012-02-29 13:06        2063920        ----a-w-        C:\TDSSKiller.exe

2012-02-27 14:20 . 2012-02-27 14:19        73728        ----a-w-        c:\windows\system32\javacpl.cpl

2012-02-19 20:16 . 2011-09-08 16:48        1152888        ----a-w-        c:\windows\system32\WacomMT.dll

2012-02-19 19:41 . 2012-02-19 19:41        --------        d-----w-        c:\dokumente und einstellungen\Marian Kasprowski\Anwendungsdaten\wacomid-desktop-launcher.DCFD4B89A63EE70BC162777F06D4B93B6397AEC7.1

2012-02-19 19:41 . 2012-02-19 19:41        --------        d-----w-        c:\dokumente und einstellungen\Marian Kasprowski\Anwendungsdaten\Wacom

2012-02-19 19:41 . 2012-02-19 19:41        --------        d-----w-        c:\dokumente und einstellungen\All Users\Anwendungsdaten\Wacom

2012-02-19 19:40 . 2012-02-19 19:40        --------        d-----w-        c:\programme\Gemeinsame Dateien\Adobe AIR

2012-02-19 19:30 . 2012-02-19 19:41        --------        d-----w-        c:\programme\Bamboo Dock

2012-02-19 19:28 . 2012-02-19 19:28        --------        d-----w-        c:\dokumente und einstellungen\Marian Kasprowski\Anwendungsdaten\WTablet

2012-02-19 19:28 . 2011-09-08 16:48        1107832        ----a-w-        c:\windows\system32\Pen_Touch_Tablet.dll

2012-02-19 19:27 . 2011-09-08 16:49        10752        ----a-w-        c:\windows\system32\drivers\wacmoumonitor.sys

2012-02-19 19:27 . 2010-10-11 19:19        11312        ----a-w-        c:\windows\system32\drivers\wacommousefilter.sys

2012-02-19 19:27 . 2010-10-11 19:19        14120        ----a-w-        c:\windows\system32\drivers\wacomvhid.sys

2012-02-19 19:27 . 2011-09-08 16:48        1156472        ----a-w-        c:\windows\system32\Wintab32.dll

2012-02-19 19:27 . 2011-09-08 16:48        1369464        ----a-w-        c:\windows\system32\Pen_Tablet.dll

2012-02-19 19:27 . 2012-02-19 20:17        --------        d-----w-        c:\programme\Tablet

.

.

.

((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2012-02-27 14:19 . 2011-07-17 16:10        472808        ----a-w-        c:\windows\system32\deployJava1.dll

2012-01-12 17:20 . 2005-12-12 08:23        1860096        ----a-w-        c:\windows\system32\win32k.sys

2011-12-17 19:43 . 2005-12-12 08:23        916992        ----a-w-        c:\windows\system32\wininet.dll

2011-12-17 19:43 . 2005-12-12 08:22        43520        ------w-        c:\windows\system32\licmgr10.dll

2011-12-17 19:43 . 2005-12-12 08:22        1469440        ------w-        c:\windows\system32\inetcpl.cpl

2011-12-16 12:22 . 2005-12-12 08:22        385024        ------w-        c:\windows\system32\html.iec

2011-12-10 14:24 . 2011-07-04 17:20        20464        ----a-w-        c:\windows\system32\drivers\mbam.sys

2007-07-03 14:31 . 2007-01-23 20:51        319        ----a-w-        c:\programme\drmHeader.bin

2012-02-16 14:55 . 2012-03-01 18:42        134104        ----a-w-        c:\programme\mozilla firefox\components\browsercomps.dll

2007-08-03 20:23 . 2007-07-03 14:01        135680        ----a-w-        c:\programme\mozilla firefox\components\GoogleDesktopMozilla.dll

.

.

((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))

.

.

*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 

REGEDIT4

.

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]

"{ba14329e-9550-4989-b3f2-9732e92d17cc}"= "c:\programme\Vuze_Remote\prxtbVuz0.dll" [2011-05-09 176936]

"{90d46c30-9f25-4104-aea9-35c3f84477ff}"= "c:\programme\mipony-plugin\prxtbmip2.dll" [2011-05-09 176936]

.

[HKEY_CLASSES_ROOT\clsid\{ba14329e-9550-4989-b3f2-9732e92d17cc}]

.

[HKEY_CLASSES_ROOT\clsid\{90d46c30-9f25-4104-aea9-35c3f84477ff}]

.

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{90d46c30-9f25-4104-aea9-35c3f84477ff}]

2011-05-09 09:49        176936        ----a-w-        c:\programme\mipony-plugin\prxtbmip2.dll

.

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{ba14329e-9550-4989-b3f2-9732e92d17cc}]

2011-05-09 09:49        176936        ----a-w-        c:\programme\Vuze_Remote\prxtbVuz0.dll

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]

"{ba14329e-9550-4989-b3f2-9732e92d17cc}"= "c:\programme\Vuze_Remote\prxtbVuz0.dll" [2011-05-09 176936]

"{90d46c30-9f25-4104-aea9-35c3f84477ff}"= "c:\programme\mipony-plugin\prxtbmip2.dll" [2011-05-09 176936]

.

[HKEY_CLASSES_ROOT\clsid\{ba14329e-9550-4989-b3f2-9732e92d17cc}]

.

[HKEY_CLASSES_ROOT\clsid\{90d46c30-9f25-4104-aea9-35c3f84477ff}]

.

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]

"{6EDCCE69-14A2-4E9F-826B-DC523B82167E}"= "c:\programme\JetBrains\Omea Reader\IexploreOmeaW.dll" [2007-02-02 591360]

"{BA14329E-9550-4989-B3F2-9732E92D17CC}"= "c:\programme\Vuze_Remote\prxtbVuz0.dll" [2011-05-09 176936]

"{90D46C30-9F25-4104-AEA9-35C3F84477FF}"= "c:\programme\mipony-plugin\prxtbmip2.dll" [2011-05-09 176936]

.

[HKEY_CLASSES_ROOT\clsid\{6edcce69-14a2-4e9f-826b-dc523b82167e}]

[HKEY_CLASSES_ROOT\IexploreOmea.Band.1]

[HKEY_CLASSES_ROOT\TypeLib\{633820F7-C04E-4152-B64F-1147B881F998}]

[HKEY_CLASSES_ROOT\IexploreOmea.Band]

.

[HKEY_CLASSES_ROOT\clsid\{ba14329e-9550-4989-b3f2-9732e92d17cc}]

.

[HKEY_CLASSES_ROOT\clsid\{90d46c30-9f25-4104-aea9-35c3f84477ff}]

.

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"swg"="c:\programme\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-11-13 68856]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2005-12-15 7331840]

"Apoint"="c:\programme\Apoint\Apoint.exe" [2004-11-17 118784]

"Mouse Suite 98 Daemon"="ICO.EXE" [2002-03-14 45056]

"SonyPowerCfg"="c:\programme\Sony\VAIO Power Management\SPMgr.exe" [2005-11-28 217088]

"ISBMgr.exe"="c:\programme\Sony\ISB Utility\ISBMgr.exe" [2004-02-20 32768]

"VAIOCameraUtility"="c:\programme\Sony\VAIO Camera Utility\VCUServe.exe" [2005-12-01 69632]

"SsAAD.exe"="c:\progra~1\Sony\SONICS~1\SsAAD.exe" [2005-09-27 81920]

"ehTray"="c:\windows\ehome\ehtray.exe" [2005-08-05 64512]

"MSPY2002"="c:\windows\system32\IME\PINTLGNT\ImScInst.exe" [2004-08-10 59392]

"PHIME2002ASync"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-10 455168]

"PHIME2002A"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-10 455168]

"VAIO Update 4"="c:\programme\Sony\VAIO Update 4\VAIOUpdt.exe" [2008-08-24 870240]

"QuickTime Task"="c:\programme\QuickTime\QTTask.exe" [2010-03-18 421888]

"TWCU"="c:\programme\TP-LINK\TL-WN821N\TWCU.exe" [2008-10-20 557186]

"Adobe Reader Speed Launcher"="c:\programme\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2012-01-03 37296]

"Adobe ARM"="c:\programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe" [2012-01-02 843712]

"BambooCore"="c:\programme\Bamboo Dock\BambooCore.exe" [2011-09-27 646232]

"SunJavaUpdateSched"="c:\programme\Gemeinsame Dateien\Java\Java Update\jusched.exe" [2012-01-18 254696]

.

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]

"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

"MySpaceIM"="c:\programme\MySpace\IM\MySpaceIM.exe" [2007-01-12 4898816]

.

c:\dokumente und einstellungen\Marian Kasprowski\Startmenü\Programme\Autostart\

ERUNT AutoBackup.lnk - c:\programme\ERUNT\AUTOBACK.EXE [2005-10-20 38912]

Microsoft Office OneNote 2003 Schnellstart.lnk - c:\programme\Microsoft Office\OFFICE11\ONENOTEM.EXE [2007-4-19 64864]

OpenOffice.org 3.3.lnk - c:\programme\OpenOffice.org 3\program\quickstart.exe [2010-12-13 1198592]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\VESWinlogon]

2005-05-20 16:42        73728        ----a-w-        c:\windows\system32\VESWinlogon.dll

.

[HKLM\~\startupfolder\C:^Dokumente und Einstellungen^All Users^Startmenü^Programme^Autostart^HOTSYNCSHORTCUTNAME.lnk]

.

[HKLM\~\startupfolder\C:^Dokumente und Einstellungen^All Users^Startmenü^Programme^Autostart^InterVideo WinCinema Manager.lnk]

.

[HKLM\~\startupfolder\C:^Dokumente und Einstellungen^All Users^Startmenü^Programme^Autostart^Quicken 2006 Zahlungserinnerung.lnk]

.

[HKLM\~\startupfolder\C:^Dokumente und Einstellungen^Marian Kasprowski^Startmenü^Programme^Autostart^Kremlin Sentry.LNK]

.

[HKLM\~\startupfolder\C:^Dokumente und Einstellungen^Marian Kasprowski^Startmenü^Programme^Autostart^Yahoo! Widget Engine.lnk]

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\avgnt]

2011-04-21 05:52        281768        ----a-w-        c:\programme\Avira\AntiVir Desktop\avgnt.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]

2001-07-09 09:50        155648        ----a-w-        c:\windows\system32\NeroCheck.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PPS Accelerator]

2009-07-22 08:14        210312        ----a-w-        c:\programme\PPStream\PPSAP.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]

2010-03-18 14:16        421888        ----a-w-        c:\programme\QuickTime\QTTask.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpybotSD TeaTimer]

2009-03-05 08:07        2260480        ------w-        c:\programme\Spybot - Search & Destroy\TeaTimer.exe

.

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]

"%windir%\\system32\\sessmgr.exe"=

"c:\\Programme\\Yahoo!\\Messenger\\YPager.exe"=

"c:\\Programme\\Yahoo!\\Messenger\\YServer.exe"=

"c:\\Programme\\ICQLite\\ICQLite.exe"=

"c:\\Programme\\Miranda IM\\miranda32.exe"=

"c:\\Programme\\Messenger\\msmsgs.exe"=

"%windir%\\Network Diagnostic\\xpnetdiag.exe"=

"c:\\Programme\\PPStream\\PPStream.exe"=

"c:\\Programme\\PPStream\\PPSAP.exe"=

"c:\\Programme\\Microsoft Games\\Age of Empires III\\age3x.exe"=

"c:\\Programme\\Bonjour\\mDNSResponder.exe"=

"c:\\Programme\\Google\\Google Talk\\googletalk.exe"=

"c:\\Programme\\Windows Live\\Messenger\\msnmsgr.exe"=

"c:\\Programme\\Windows Live\\Sync\\WindowsLiveSync.exe"=

"c:\\Programme\\Skype\\Phone\\Skype.exe"=

.

R2 AntiVirSchedulerService;Avira AntiVir Planer;c:\programme\Avira\AntiVir Desktop\sched.exe [10.07.2011 19:15 136360]

R2 BBUpdate;BBUpdate;c:\programme\Microsoft\BingBar\SeaPort.EXE [13.10.2011 17:21 249648]

R2 Hamachi2Svc;LogMeIn Hamachi 2.0 Tunneling Engine;c:\programme\LogMeIn Hamachi\hamachi-2.exe [28.03.2011 14:41 1242504]

R2 MSSQL$VAIO_VEDB;MSSQL$VAIO_VEDB;c:\programme\Microsoft SQL Server\MSSQL$VAIO_VEDB\Binn\sqlservr.exe -sVAIO_VEDB --> c:\programme\Microsoft SQL Server\MSSQL$VAIO_VEDB\Binn\sqlservr.exe -sVAIO_VEDB [?]

R2 TabletServicePen;TabletServicePen;c:\programme\Tablet\Pen\Pen_Tablet.exe [19.02.2012 20:27 5554552]

R2 TouchServicePen;Wacom Consumer Touch Service;c:\programme\Tablet\Pen\Pen_TouchService.exe [19.02.2012 20:28 451960]

R2 wwEngineSvc;Window Washer Engine;c:\programme\Webroot\Washer\WasherSvc.exe [17.10.2007 16:41 598856]

R3 ti21sony;ti21sony;c:\windows\system32\drivers\ti21sony.sys [12.12.2005 09:24 808448]

S2 BBSvc;Bing Bar Update Service;c:\programme\Microsoft\BingBar\BBSvc.EXE [21.10.2011 15:23 196176]

S2 gupdate;Google Update Service (gupdate);c:\programme\Google\Update\GoogleUpdate.exe [12.07.2010 13:34 135664]

S3 arusb(TP-LINK);Atheros Wireless Network Adapter Service(TP-LINK);c:\windows\system32\drivers\arusb.sys [15.09.2010 14:47 458240]

S3 gupdatem;Google Update-Dienst (gupdatem);c:\programme\Google\Update\GoogleUpdate.exe [12.07.2010 13:34 135664]

S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [04.07.2011 18:20 20464]

S3 PROCEXP151;PROCEXP151;\??\c:\windows\system32\Drivers\PROCEXP151.SYS --> c:\windows\system32\Drivers\PROCEXP151.SYS [?]

S3 SonyImgF;Sony Image Conversion Filter Driver;c:\windows\system32\drivers\SonyImgF.sys [12.12.2005 09:24 28800]

S3 SQLAgent$VAIO_VEDB;SQLAgent$VAIO_VEDB;c:\programme\Microsoft SQL Server\MSSQL$VAIO_VEDB\Binn\sqlagent.EXE -i VAIO_VEDB --> c:\programme\Microsoft SQL Server\MSSQL$VAIO_VEDB\Binn\sqlagent.EXE -i VAIO_VEDB [?]

S3 wacmoumonitor;Wacom Mode Helper;c:\windows\system32\drivers\wacmoumonitor.sys [19.02.2012 20:27 10752]

S3 WDC_SAM;WD SCSI Pass Thru driver;c:\windows\system32\drivers\wdcsam.sys [19.09.2011 13:14 11520]

S4 ASKService;ASKService;c:\programme\AskBarDis\bar\bin\AskService.exe [16.11.2008 05:15 460168]

S4 MBAMService;MBAMService;c:\programme\Malwarebytes' Anti-Malwaren\mbamservice.exe [04.07.2011 21:46 652360]

.

Inhalt des "geplante Tasks" Ordners

.

2012-02-28 c:\windows\Tasks\AppleSoftwareUpdate.job

- c:\programme\Apple Software Update\SoftwareUpdate.exe [2008-07-30 04:34]

.

2012-03-02 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job

- c:\programme\Google\Update\GoogleUpdate.exe [2010-07-12 12:34]

.

2012-03-02 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

- c:\programme\Google\Update\GoogleUpdate.exe [2010-07-12 12:34]

.

.

------- Zusätzlicher Suchlauf -------

.

uInternet Settings,ProxyOverride = *.local

uSearchAssistant = hxxp://www.google.com/ie

uSearchURL,(Default) = hxxp://www.google.com/search?q=%s

IE: ?ertragen mit Image Converter 2 Plus

IE: Clip and Edit - c:\programme\JetBrains\Omea Reader\IexploreOmeaW.dll/1000

IE: Clip and Save - c:\programme\JetBrains\Omea Reader\IexploreOmeaW.dll/1001

IE: Download all with Free Download Manager - file://c:\programme\Free Download Manager\dlall.htm

IE: Download selected with Free Download Manager - file://c:\programme\Free Download Manager\dlselected.htm

IE: Download web site with Free Download Manager - file://c:\programme\Free Download Manager\dlpage.htm

IE: Download with &FileFactory Turbo - c:\programme\FileFactory Turbo\Plugins\IE\FileFactoryIE.html

IE: Download with Free Download Manager - file://c:\programme\Free Download Manager\dllink.htm

IE: Mit Mipony herunterladen - file://c:\programme\MiPony\Browser\IEContext.htm

IE: Nach Microsoft &Excel exportieren - c:\progra~1\MICROS~4\OFFICE11\EXCEL.EXE/3000

IE: Subscribe in Desktop Sidebar - c:\programme\Desktop Sidebar\sbhelp.dll/menuhandler.html

IE: Subscribe to Feed - c:\programme\JetBrains\Omea Reader\IexploreOmeaW.dll/1002

IE: ¨¹bertragen mit Image Converter 2 Plus

IE: Übertragen mit Image Converter 2 Plus - c:\programme\Sony\Image Converter 2\menu.htm

IE: ?ertragen mit Image Converter 2 Plus

Trusted Zone: sony-europe.com

Trusted Zone: sonystyle-europe.com

Trusted Zone: vaio-link.com

Handler: haufereader - {39198710-62F7-42CD-9458-069843FA5D32} - c:\programme\Haufe\HaufeReader\HRInstmon.dll

FF - ProfilePath - c:\dokumente und einstellungen\Marian Kasprowski\Anwendungsdaten\Mozilla\Firefox\Profiles\xnxdts1a.default\

FF - prefs.js: browser.search.defaulturl - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2465030&SearchSource=3&q={searchTerms}

FF - prefs.js: browser.search.selectedEngine - Google

FF - prefs.js: browser.startup.homepage - hxxp://www.stratfor.com/

FF - prefs.js: keyword.URL - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2465030&q=

 

.

.

**************************************************************************

.

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, hxxp://www.gmer.net

Rootkit scan 2012-03-02 13:29

Windows 5.1.2600 Service Pack 3 NTFS

.

Scanne versteckte Prozesse... 

.

Scanne versteckte Autostarteinträge... 

.

Scanne versteckte Dateien... 

.

Scan erfolgreich abgeschlossen

versteckte Dateien: 0

.

**************************************************************************

.

--------------------- Gesperrte Registrierungsschluessel ---------------------

.

[HKEY_USERS\S-1-5-21-1145596925-3625438031-3511041855-1006\Software\Skype\Phone\UI]

@DACL=(02 0000)

"Version"=dword:01040054

"ChromeInstallInfo"="google-chrome:notoffered;disabled"

.

[HKEY_LOCAL_MACHINE\software\Intel\Wireless\Folders\E„;*]

"Path"="c:\\WINDOWS\\system32\\config\\systemprofile\\Anwendungsdaten\\Intel\\Wireless\\"

.

[HKEY_LOCAL_MACHINE\software\Microsoft\Advanced INF Setup\IEHomePageInfo\RegBackup]

@DACL=(02 0000)

@SACL=

.

[HKEY_LOCAL_MACHINE\software\Microsoft\MediaPlayer\MLS]

@DACL=(02 0000)

.

[HKEY_LOCAL_MACHINE\software\Microsoft\MediaPlayer\services]

@DACL=(02 0000)

@SACL=

"NoServices"=dword:00000000

.

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\h–€|ÿÿÿÿ¤•€|ù•6~*]

"7040110900063D11C8EF10054038389C"="C?\\WINDOWS\\system32\\FM20ENU.DLL"

.

[HKEY_LOCAL_MACHINE\software\Sony\DVA]

@DACL=(02 0000)

.

--------------------- Durch laufende Prozesse gestartete DLLs ---------------------

.

- - - - - - - > 'winlogon.exe'(212)

c:\windows\system32\VESWinlogon.dll

.

Zeit der Fertigstellung: 2012-03-02  13:36:05

ComboFix-quarantined-files.txt  2012-03-02 12:36

ComboFix2.txt  2011-07-08 16:48

ComboFix3.txt  2011-07-08 00:04

.

Vor Suchlauf: 16 Verzeichnis(se), 11.552.264.192 Bytes frei

Nach Suchlauf: 17 Verzeichnis(se), 11.558.424.576 Bytes frei

.

- - End Of File - - 4FB9A547B79DC569FC7B3B11509532B4
--- --- ---

Warte gespannt auf deine Analyse! :daumenhoc