Trojaner-Board - System Progressive Protection endgültig entfernen

Code:

ComboFix 12-11-29.02 - Konstantin 29.11.2012  20:31:48.2.4 - x64

Microsoft Windows 7 Home Premium   6.1.7601.1.1252.49.1031.18.3948.2363 [GMT 1:00]

ausgeführt von:: c:\users\Konstantin\Desktop\ComboFix.exe

Benutzte Befehlsschalter :: c:\users\Konstantin\Desktop\CFScript.txt

SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

.

FILE ::

"c:\users\Konstantin\AppData\Local\Razoss\Application\RazossUpdater.exe"

"c:\users\Konstantin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\RazossUpdater.lnk"

"c:\windows\system32\config\systemprofile\AppData\Local\PackSetup.exe"

.

.

((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))

.

.

c:\users\Konstantin\AppData\Local\Razoss

c:\users\Konstantin\AppData\Local\Razoss\Application\EngineUninstall.exe

c:\users\Konstantin\AppData\Local\Razoss\Application\error.html

c:\users\Konstantin\AppData\Local\Razoss\Application\ffextension\chrome.manifest

c:\users\Konstantin\AppData\Local\Razoss\Application\ffextension\chrome\content\delegate.js

c:\users\Konstantin\AppData\Local\Razoss\Application\ffextension\chrome\content\logo32.ico

c:\users\Konstantin\AppData\Local\Razoss\Application\ffextension\chrome\content\logo32.png

c:\users\Konstantin\AppData\Local\Razoss\Application\ffextension\chrome\content\logo32_red.ico

c:\users\Konstantin\AppData\Local\Razoss\Application\ffextension\chrome\content\razoss.js

c:\users\Konstantin\AppData\Local\Razoss\Application\ffextension\chrome\content\razoss.xul

c:\users\Konstantin\AppData\Local\Razoss\Application\ffextension\components\FF.dll

c:\users\Konstantin\AppData\Local\Razoss\Application\ffextension\components\ff4\IRazossExt.xpt

c:\users\Konstantin\AppData\Local\Razoss\Application\ffextension\components\ff4\razossaddon-ff4.dll

c:\users\Konstantin\AppData\Local\Razoss\Application\ffextension\components\IRazossExt.xpt

c:\users\Konstantin\AppData\Local\Razoss\Application\ffextension\defaults\preferences\razoss.js

c:\users\Konstantin\AppData\Local\Razoss\Application\ffextension\install.rdf

c:\users\Konstantin\AppData\Local\Razoss\Application\googlechrome\Razoss.crx

c:\users\Konstantin\AppData\Local\Razoss\Application\IE.dll

c:\users\Konstantin\AppData\Local\Razoss\Application\loader.gif

c:\users\Konstantin\AppData\Local\Razoss\Application\loading.html

c:\users\Konstantin\AppData\Local\Razoss\Application\logo32.ico

c:\users\Konstantin\AppData\Local\Razoss\Application\RazossEngine.exe

c:\users\Konstantin\AppData\Local\Razoss\Application\RazossReporter.exe

c:\users\Konstantin\AppData\Local\Razoss\Application\RazossShadow.dll

c:\users\Konstantin\AppData\Local\Razoss\Application\RazossUpdater.exe

c:\users\Konstantin\AppData\Local\Razoss\Application\Uninstall.exe

c:\users\Konstantin\AppData\Local\Razoss\Bars\sweetpacks\background_image\6926771324011389844.png

c:\users\Konstantin\AppData\Local\Razoss\Bars\sweetpacks\bar_version

c:\users\Konstantin\AppData\Local\Razoss\Bars\sweetpacks\build_commit

c:\users\Konstantin\AppData\Local\Razoss\Bars\sweetpacks\build_version

c:\users\Konstantin\AppData\Local\Razoss\Bars\sweetpacks\elements\classic_dock\media\default_background.gif

c:\users\Konstantin\AppData\Local\Razoss\Bars\sweetpacks\elements\classic_dock\media\transparent-pixel.png

c:\users\Konstantin\AppData\Local\Razoss\Bars\sweetpacks\elements\pin_button\media\__placeholder__

c:\users\Konstantin\AppData\Local\Razoss\Bars\sweetpacks\elements\pin_button\media\pinned.png

c:\users\Konstantin\AppData\Local\Razoss\Bars\sweetpacks\elements\pin_button\media\unpinned.png

c:\users\Konstantin\AppData\Local\Razoss\Bars\sweetpacks\elements\quick_links\media\ui-icons_222222_256x240.png

c:\users\Konstantin\AppData\Local\Razoss\Bars\sweetpacks\elements\razoss_radio\media\default_custom.png

c:\users\Konstantin\AppData\Local\Razoss\Bars\sweetpacks\elements\razoss_radio\media\default_no_flash_message.png

c:\users\Konstantin\AppData\Local\Razoss\Bars\sweetpacks\elements\razoss_radio\media\design_19.png

c:\users\Konstantin\AppData\Local\Razoss\Bars\sweetpacks\elements\razoss_radio\media\design_19_opaque.png

c:\users\Konstantin\AppData\Local\Razoss\Bars\sweetpacks\elements\razoss_radio\media\design_24.png

c:\users\Konstantin\AppData\Local\Razoss\Bars\sweetpacks\elements\razoss_radio\media\design_24_opaque.png

c:\users\Konstantin\AppData\Local\Razoss\Bars\sweetpacks\elements\razoss_radio\media\epplayer\ep_player.swf

c:\users\Konstantin\AppData\Local\Razoss\Bars\sweetpacks\elements\razoss_radio\media\epplayer\expressInstall.swf

c:\users\Konstantin\AppData\Local\Razoss\Bars\sweetpacks\elements\razoss_radio\media\epplayer\js\ep_player.js

c:\users\Konstantin\AppData\Local\Razoss\Bars\sweetpacks\elements\razoss_radio\media\epplayer\js\swfobject.js

c:\users\Konstantin\AppData\Local\Razoss\Bars\sweetpacks\elements\razoss_radio\media\epplayer\playlist.xml

c:\users\Konstantin\AppData\Local\Razoss\Bars\sweetpacks\elements\razoss_radio\media\epplayer\skins\basic_black\anim-loading.png

c:\users\Konstantin\AppData\Local\Razoss\Bars\sweetpacks\elements\razoss_radio\media\epplayer\skins\basic_black\anim-playing.png

c:\users\Konstantin\AppData\Local\Razoss\Bars\sweetpacks\elements\razoss_radio\media\epplayer\skins\basic_black\b-link.gif

c:\users\Konstantin\AppData\Local\Razoss\Bars\sweetpacks\elements\razoss_radio\media\epplayer\skins\basic_black\b-mute.png

c:\users\Konstantin\AppData\Local\Razoss\Bars\sweetpacks\elements\razoss_radio\media\epplayer\skins\basic_black\b-next.png

c:\users\Konstantin\AppData\Local\Razoss\Bars\sweetpacks\elements\razoss_radio\media\epplayer\skins\basic_black\b-play-pause.png

c:\users\Konstantin\AppData\Local\Razoss\Bars\sweetpacks\elements\razoss_radio\media\epplayer\skins\basic_black\b-playlist.png

c:\users\Konstantin\AppData\Local\Razoss\Bars\sweetpacks\elements\razoss_radio\media\epplayer\skins\basic_black\b-prev.png

c:\users\Konstantin\AppData\Local\Razoss\Bars\sweetpacks\elements\razoss_radio\media\epplayer\skins\basic_black\bar-slider-handle-volume.png

c:\users\Konstantin\AppData\Local\Razoss\Bars\sweetpacks\elements\razoss_radio\media\epplayer\skins\basic_black\bar-slider-handle.png

c:\users\Konstantin\AppData\Local\Razoss\Bars\sweetpacks\elements\razoss_radio\media\epplayer\skins\basic_black\bar-slider-indicator.png

c:\users\Konstantin\AppData\Local\Razoss\Bars\sweetpacks\elements\razoss_radio\media\epplayer\skins\basic_black\bar-slider.png

c:\users\Konstantin\AppData\Local\Razoss\Bars\sweetpacks\elements\razoss_radio\media\epplayer\skins\basic_black\bar-timer-bg.png

c:\users\Konstantin\AppData\Local\Razoss\Bars\sweetpacks\elements\razoss_radio\media\epplayer\skins\basic_black\bg.jpg

c:\users\Konstantin\AppData\Local\Razoss\Bars\sweetpacks\elements\razoss_radio\media\epplayer\skins\basic_black\default-albumart.png

c:\users\Konstantin\AppData\Local\Razoss\Bars\sweetpacks\elements\razoss_radio\media\epplayer\skins\basic_black\fft.gif

c:\users\Konstantin\AppData\Local\Razoss\Bars\sweetpacks\elements\razoss_radio\media\epplayer\skins\basic_black\icon-error.gif

c:\users\Konstantin\AppData\Local\Razoss\Bars\sweetpacks\elements\razoss_radio\media\epplayer\skins\basic_black\icon-paused.gif

c:\users\Konstantin\AppData\Local\Razoss\Bars\sweetpacks\elements\razoss_radio\media\epplayer\skins\basic_black\icon-playing.gif

c:\users\Konstantin\AppData\Local\Razoss\Bars\sweetpacks\elements\razoss_radio\media\epplayer\skins\basic_black\icon-stopped.gif

c:\users\Konstantin\AppData\Local\Razoss\Bars\sweetpacks\elements\razoss_radio\media\epplayer\skins\basic_black\pf-tempesta-seven.fla

c:\users\Konstantin\AppData\Local\Razoss\Bars\sweetpacks\elements\razoss_radio\media\epplayer\skins\basic_black\pf-tempesta-seven.swf

c:\users\Konstantin\AppData\Local\Razoss\Bars\sweetpacks\elements\razoss_radio\media\epplayer\skins\basic_black\scope.gif

c:\users\Konstantin\AppData\Local\Razoss\Bars\sweetpacks\elements\razoss_radio\media\epplayer\skins\basic_black\scrollbar-track-handle.png

c:\users\Konstantin\AppData\Local\Razoss\Bars\sweetpacks\elements\razoss_radio\media\epplayer\skins\basic_black\scrollbar-x-bg.png

c:\users\Konstantin\AppData\Local\Razoss\Bars\sweetpacks\elements\razoss_radio\media\epplayer\skins\basic_black\scrollbar-x-handle.png

c:\users\Konstantin\AppData\Local\Razoss\Bars\sweetpacks\elements\razoss_radio\media\epplayer\skins\basic_black\scrollbar-y-bg.png

c:\users\Konstantin\AppData\Local\Razoss\Bars\sweetpacks\elements\razoss_radio\media\epplayer\skins\basic_black\scrollbar-y-handle.png

c:\users\Konstantin\AppData\Local\Razoss\Bars\sweetpacks\elements\razoss_radio\media\epplayer\skins\basic_black\shadow-playlist.png

c:\users\Konstantin\AppData\Local\Razoss\Bars\sweetpacks\elements\razoss_radio\media\epplayer\skins\basic_black\skin-micro.xml

c:\users\Konstantin\AppData\Local\Razoss\Bars\sweetpacks\elements\razoss_radio\media\epplayer\skins\basic_black\skin-trackdisplay.xml

c:\users\Konstantin\AppData\Local\Razoss\Bars\sweetpacks\elements\razoss_radio\media\epplayer\skins\basic_black\skin.xml

c:\users\Konstantin\AppData\Local\Razoss\Bars\sweetpacks\elements\razoss_radio\media\epplayer\skins\basic_black\timer-bg.png

c:\users\Konstantin\AppData\Local\Razoss\Bars\sweetpacks\elements\razoss_radio\media\epplayer\skins\basic_black\track-display-bg.png

c:\users\Konstantin\AppData\Local\Razoss\Bars\sweetpacks\elements\razoss_radio\media\epplayer\skins\basic_black\track-display-fill.png

c:\users\Konstantin\AppData\Local\Razoss\Bars\sweetpacks\elements\razoss_radio\media\epplayer\skins\basic_black\track-display-position.png

c:\users\Konstantin\AppData\Local\Razoss\Bars\sweetpacks\elements\razoss_radio\media\epplayer\skins\basic_black\ui-bg.gif

c:\users\Konstantin\AppData\Local\Razoss\Bars\sweetpacks\elements\razoss_radio\media\epplayer\skins\basic_black\visualization-bg.png

c:\users\Konstantin\AppData\Local\Razoss\Bars\sweetpacks\elements\razoss_radio\media\go-up.png

c:\users\Konstantin\AppData\Local\Razoss\Bars\sweetpacks\elements\razoss_radio\media\menu_background.png

c:\users\Konstantin\AppData\Local\Razoss\Bars\sweetpacks\elements\razoss_radio\media\menu_item_hover_background.png

c:\users\Konstantin\AppData\Local\Razoss\Bars\sweetpacks\elements\razoss_radio\media\razoss_logo.png

c:\users\Konstantin\AppData\Local\Razoss\Bars\sweetpacks\elements\razoss_radio\media\top7.png

c:\users\Konstantin\AppData\Local\Razoss\Bars\sweetpacks\elements\search\media\search_input_background.png

c:\users\Konstantin\AppData\Local\Razoss\Bars\sweetpacks\elements\search\media\search_input_left_background.png

c:\users\Konstantin\AppData\Local\Razoss\Bars\sweetpacks\elements\search\media\search_input_right_background.png

c:\users\Konstantin\AppData\Local\Razoss\Bars\sweetpacks\elements\widget\media\__placeholder__

c:\users\Konstantin\AppData\Local\Razoss\Bars\sweetpacks\elements\widget\media\gallery\categories_icons\advanced-games.gif

c:\users\Konstantin\AppData\Local\Razoss\Bars\sweetpacks\elements\widget\media\gallery\categories_icons\all.png

c:\users\Konstantin\AppData\Local\Razoss\Bars\sweetpacks\elements\widget\media\gallery\categories_icons\arcade-games.jpg

c:\users\Konstantin\AppData\Local\Razoss\Bars\sweetpacks\elements\widget\media\gallery\categories_icons\basic.gif

c:\users\Konstantin\AppData\Local\Razoss\Bars\sweetpacks\elements\widget\media\gallery\categories_icons\casual-games.png

c:\users\Konstantin\AppData\Local\Razoss\Bars\sweetpacks\elements\widget\media\gallery\categories_icons\dice-games.png

c:\users\Konstantin\AppData\Local\Razoss\Bars\sweetpacks\elements\widget\media\gallery\categories_icons\feeds.png

c:\users\Konstantin\AppData\Local\Razoss\Bars\sweetpacks\elements\widget\media\gallery\categories_icons\games.gif

c:\users\Konstantin\AppData\Local\Razoss\Bars\sweetpacks\elements\widget\media\gallery\categories_icons\loader.gif

c:\users\Konstantin\AppData\Local\Razoss\Bars\sweetpacks\elements\widget\media\gallery\categories_icons\music.png

c:\users\Konstantin\AppData\Local\Razoss\Bars\sweetpacks\elements\widget\media\gallery\categories_icons\social.png

c:\users\Konstantin\AppData\Local\Razoss\Bars\sweetpacks\elements\widget\media\gallery\categories_icons\tools.png

c:\users\Konstantin\AppData\Local\Razoss\Bars\sweetpacks\elements\widget\media\gallery\default_widget_info_pic.png

c:\users\Konstantin\AppData\Local\Razoss\Bars\sweetpacks\elements\widget\media\gallery\widgets_loader.gif

c:\users\Konstantin\AppData\Local\Razoss\Bars\sweetpacks\elements\widget\media\global.png

c:\users\Konstantin\AppData\Local\Razoss\Bars\sweetpacks\elements\widget\media\remove.png

c:\users\Konstantin\AppData\Local\Razoss\Bars\sweetpacks\elements\widget\media\replace_widget.png

c:\users\Konstantin\AppData\Local\Razoss\Bars\sweetpacks\elements\widget\media\transparent-pixel.png

c:\users\Konstantin\AppData\Local\Razoss\Bars\sweetpacks\elements\widget\media\ui-bg_highlight-soft_100_dcd9de_1x100.png

c:\users\Konstantin\AppData\Local\Razoss\Bars\sweetpacks\elements\widget\media\ui-bg_highlight-soft_100_eae6ea_1x100.png

c:\users\Konstantin\AppData\Local\Razoss\Bars\sweetpacks\elements\widget\media\widget-dragging-placeholder.png

c:\users\Konstantin\AppData\Local\Razoss\Bars\sweetpacks\elements\widget\media\window_bar_background.png

c:\users\Konstantin\AppData\Local\Razoss\Bars\sweetpacks\last_modified

c:\users\Konstantin\AppData\Local\Razoss\Bars\sweetpacks\mainapp.html

c:\users\Konstantin\AppData\Local\Razoss\Bars\sweetpacks\media_file\sweetpack_facebook_ql.png

c:\users\Konstantin\AppData\Local\Razoss\Bars\sweetpacks\media_file\sweetpacks_logo.png

c:\users\Konstantin\AppData\Local\Razoss\Bars\sweetpacks\widget_icon\sim-close-ahFzfmJyb3dzZXJiYXItcHJvZHIMCxIGV2lkZ2V0GBYM.png

c:\users\Konstantin\AppData\Local\Razoss\Bars\sweetpacks\widget_icon\sim-close-ahFzfmJyb3dzZXJiYXItcHJvZHINCxIGV2lkZ2V0GJUIDA.png

c:\users\Konstantin\AppData\Local\Razoss\Bars\sweetpacks\widget_icon\sim-close-ahFzfmJyb3dzZXJiYXItcHJvZHINCxIGV2lkZ2V0GOc2DA.png

c:\users\Konstantin\AppData\Local\Razoss\Bars\sweetpacks\widget_icon\sim-close-ahFzfmJyb3dzZXJiYXItcHJvZHINCxIGV2lkZ2V0GOoPDA.png

c:\users\Konstantin\AppData\Local\Razoss\Bars\sweetpacks\widget_icon\sim-open-ahFzfmJyb3dzZXJiYXItcHJvZHIMCxIGV2lkZ2V0GBYM.png

c:\users\Konstantin\AppData\Local\Razoss\Bars\sweetpacks\widget_icon\sim-open-ahFzfmJyb3dzZXJiYXItcHJvZHINCxIGV2lkZ2V0GJUIDA.png

c:\users\Konstantin\AppData\Local\Razoss\Bars\sweetpacks\widget_icon\sim-open-ahFzfmJyb3dzZXJiYXItcHJvZHINCxIGV2lkZ2V0GOc2DA.png

c:\users\Konstantin\AppData\Local\Razoss\Bars\sweetpacks\widget_icon\sim-open-ahFzfmJyb3dzZXJiYXItcHJvZHINCxIGV2lkZ2V0GOoPDA.png

c:\users\Konstantin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\RazossUpdater.lnk

.

.

(((((((((((((((((((((((   Dateien erstellt von 2012-10-28 bis 2012-11-29  ))))))))))))))))))))))))))))))

.

.

2012-11-29 19:39 . 2012-11-29 19:39        --------        d-----w-        c:\users\UpdatusUser\AppData\Local\temp

2012-11-29 19:39 . 2012-11-29 19:39        --------        d-----w-        c:\users\Jutta\AppData\Local\temp

2012-11-29 19:39 . 2012-11-29 19:39        --------        d-----w-        c:\users\Default\AppData\Local\temp

2012-11-27 15:43 . 2012-11-19 00:01        9125352        ----a-w-        c:\programdata\Microsoft\Windows Defender\Definition Updates\{E6CC4262-D36B-48DF-AFA6-52BF34090001}\mpengine.dll

2012-11-26 18:53 . 2012-11-29 19:25        --------        d-----w-        c:\programdata\boost_interprocess

2012-11-26 13:35 . 2012-05-31 11:25        279656        ------w-        c:\windows\system32\MpSigStub.exe

2012-11-25 01:30 . 2012-11-25 01:30        --------        d-----w-        c:\users\Konstantin\AppData\Roaming\Malwarebytes

2012-11-25 01:29 . 2012-11-25 01:29        --------        d-----w-        c:\programdata\Malwarebytes

2012-11-25 01:29 . 2012-11-25 01:29        --------        d-----w-        c:\program files (x86)\Malwarebytes' Anti-Malware

2012-11-25 01:29 . 2012-09-29 18:54        25928        ----a-w-        c:\windows\system32\drivers\mbam.sys

2012-11-25 01:18 . 2012-11-25 01:18        --------        d-----w-        c:\users\Konstantin\AppData\Roaming\eSobi

2012-11-25 00:00 . 2012-11-25 00:01        --------        d-----w-        c:\programdata\987CF4B8B7D30AD40000987C5C46148D

2012-11-15 20:44 . 2012-07-26 07:46        2560        ----a-w-        c:\windows\system32\drivers\de-DE\wdf01000.sys.mui

2012-11-15 20:44 . 2012-07-26 04:55        785512        ----a-w-        c:\windows\system32\drivers\Wdf01000.sys

2012-11-15 20:44 . 2012-07-26 04:55        54376        ----a-w-        c:\windows\system32\drivers\WdfLdr.sys

2012-11-15 20:44 . 2012-07-26 02:36        9728        ----a-w-        c:\windows\system32\Wdfres.dll

2012-11-14 21:11 . 2012-10-09 18:17        55296        ----a-w-        c:\windows\system32\dhcpcsvc6.dll

2012-11-14 21:11 . 2012-10-09 18:17        226816        ----a-w-        c:\windows\system32\dhcpcore6.dll

2012-11-14 21:11 . 2012-10-09 17:40        44032        ----a-w-        c:\windows\SysWow64\dhcpcsvc6.dll

2012-11-14 21:11 . 2012-10-09 17:40        193536        ----a-w-        c:\windows\SysWow64\dhcpcore6.dll

2012-11-14 21:08 . 2012-07-26 02:26        87040        ----a-w-        c:\windows\system32\drivers\WUDFPf.sys

2012-11-14 21:08 . 2012-07-26 02:26        198656        ----a-w-        c:\windows\system32\drivers\WUDFRd.sys

2012-11-14 21:08 . 2012-07-26 03:08        84992        ----a-w-        c:\windows\system32\WUDFSvc.dll

2012-11-14 21:08 . 2012-07-26 03:08        194048        ----a-w-        c:\windows\system32\WUDFPlatform.dll

2012-11-14 21:08 . 2012-07-26 03:08        229888        ----a-w-        c:\windows\system32\WUDFHost.exe

2012-11-14 21:08 . 2012-07-26 03:08        744448        ----a-w-        c:\windows\system32\WUDFx.dll

2012-11-14 21:08 . 2012-07-26 03:08        45056        ----a-w-        c:\windows\system32\WUDFCoinstaller.dll

.

.

.

((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2012-11-29 19:24 . 2011-05-04 06:38        17920        ----a-w-        c:\windows\system32\rpcnetp.exe

2012-11-29 19:24 . 2011-06-29 16:04        58288        ----a-w-        c:\windows\SysWow64\rpcnet.dll

2012-11-22 20:54 . 2011-06-29 16:04        58288        ------w-        c:\windows\SysWow64\rpcnet.exe

2012-11-14 21:09 . 2011-07-06 14:35        66395536        ----a-w-        c:\windows\system32\MRT.exe

2012-10-16 08:38 . 2012-11-28 21:46        135168        ----a-w-        c:\windows\apppatch\AppPatch64\AcXtrnal.dll

2012-10-16 08:38 . 2012-11-28 21:46        350208        ----a-w-        c:\windows\apppatch\AppPatch64\AcLayers.dll

2012-10-16 07:39 . 2012-11-28 21:46        561664        ----a-w-        c:\windows\apppatch\AcLayers.dll

2012-10-12 16:49 . 2012-03-31 18:01        696760        ----a-w-        c:\windows\SysWow64\FlashPlayerApp.exe

2012-10-12 16:49 . 2011-06-30 10:32        73656        ----a-w-        c:\windows\SysWow64\FlashPlayerCPLApp.cpl

2012-09-14 19:19 . 2012-10-12 15:14        2048        ----a-w-        c:\windows\system32\tzres.dll

2012-09-14 18:28 . 2012-10-12 15:14        2048        ----a-w-        c:\windows\SysWow64\tzres.dll

2012-09-04 18:30 . 2012-10-01 21:10        38912        ----a-w-        c:\windows\SysWow64\identprv.dll

.

.

((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))

.

.

*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 

REGEDIT4

.

[HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{EEE6C35C-6118-11DC-9C72-001320C79847}]

c:\program files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll [BU]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar]

"{EEE6C35B-6118-11DC-9C72-001320C79847}"= "c:\program files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll" [BU]

.

[HKEY_CLASSES_ROOT\clsid\{eee6c35b-6118-11dc-9c72-001320c79847}]

[HKEY_CLASSES_ROOT\SWEETIE.IEToolbar.1]

[HKEY_CLASSES_ROOT\TypeLib\{EEE6C35E-6118-11DC-9C72-001320C79847}]

[HKEY_CLASSES_ROOT\SWEETIE.IEToolbar]

.

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"DriverScanner"="c:\program files (x86)\Uniblue\DriverScanner\launcher.exe" [2011-10-20 338296]

"Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2012-07-13 17418928]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]

"IAStorIcon"="c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" [2010-09-14 283160]

"Norton Online Backup"="c:\program files (x86)\Symantec\Norton Online Backup\NOBuClient.exe" [2010-06-01 1155928]

"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-02-28 35696]

"BackupManagerTray"="c:\program files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe" [2011-02-15 297280]

"LManager"="c:\program files (x86)\Launch Manager\LManager.exe" [2011-02-14 1077328]

"Microsoft Default Manager"="c:\program files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe" [2010-05-10 439568]

"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2012-08-27 59280]

"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2012-04-18 421888]

"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2012-09-09 421776]

.

c:\users\Konstantin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\

OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk - c:\program files (x86)\Microsoft Office\Office14\ONENOTEM.EXE [2011-9-2 227712]

.

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\

Acer VCM.lnk - c:\program files (x86)\Acer\Acer VCM\AcerVCM.exe [2011-3-16 704104]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"ConsentPromptBehaviorAdmin"= 5 (0x5)

"ConsentPromptBehaviorUser"= 3 (0x3)

"EnableUIADesktopToggle"= 0 (0x0)

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]

"LoadAppInit_DLLs"=1 (0x1)

"AppInit_DLLs"=c:\windows\SysWOW64\nvinit.dll

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]

"aux9"=wdmaud.drv

.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

@=""

.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\rpcnet]

@="Service"

.

[HKEY_LOCAL_MACHINE\software\microsoft\security center]

"AntiVirusOverride"=dword:00000001

"FirewallOverride"=dword:00000001

.

R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]

R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2012-07-03 160944]

R3 AthBTPort;Atheros Virtual Bluetooth Class;c:\windows\system32\DRIVERS\btath_flt.sys [2010-09-27 38248]

R3 BTATH_A2DP;Bluetooth A2DP Audio Driver;c:\windows\system32\drivers\btath_a2dp.sys [2010-09-27 301680]

R3 BTATH_HCRP;Bluetooth HCRP Server driver;c:\windows\system32\DRIVERS\btath_hcrp.sys [2010-09-27 203624]

R3 BTATH_LWFLT;Bluetooth LWFLT Device;c:\windows\system32\DRIVERS\btath_lwflt.sys [2010-09-27 58992]

R3 BTATH_RCP;Bluetooth AVRCP Device;c:\windows\system32\DRIVERS\btath_rcp.sys [2010-09-27 156520]

R3 BtFilter;BtFilter;c:\windows\system32\DRIVERS\btfilter.sys [2010-09-27 278640]

R3 RSPCIESTOR;Realtek PCIE CardReader Driver;c:\windows\system32\DRIVERS\RtsPStor.sys [2011-01-12 333928]

R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]

R3 TurboBoost;Intel(R) Turbo Boost Technology Monitor 2.0;c:\program files\Intel\TurboBoost\TurboBoost.exe [2010-10-08 150016]

R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys [2012-07-09 52736]

R3 WatAdminSvc;Windows-Aktivierungstechnologieservice;c:\windows\system32\Wat\WatAdminSvc.exe [2012-10-20 1255736]

R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 57184]

S0 nvpciflt;nvpciflt;c:\windows\system32\DRIVERS\nvpciflt.sys [2011-01-10 25960]

S1 mwlPSDFilter;mwlPSDFilter;c:\windows\system32\DRIVERS\mwlPSDFilter.sys [2011-05-04 22912]

S1 mwlPSDNServ;mwlPSDNServ;c:\windows\system32\DRIVERS\mwlPSDNServ.sys [2011-05-04 20328]

S1 mwlPSDVDisk;mwlPSDVDisk;c:\windows\system32\DRIVERS\mwlPSDVDisk.sys [2011-05-04 62584]

S2 AtherosSvc;AtherosSvc;c:\program files (x86)\Bluetooth Suite\adminservice.exe [2010-09-27 52896]

S2 cvhsvc;Client Virtualization Handler;c:\program files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [2012-01-04 822624]

S2 CxAudMsg;Conexant Audio Message Service;c:\windows\system32\CxAudMsg64.exe [2010-12-16 198784]

S2 DsiWMIService;Dritek WMI Service;c:\program files (x86)\Launch Manager\dsiwmis.exe [2011-02-14 347216]

S2 EgisTec Ticket Service;EgisTec Ticket Service;c:\program files\Common Files\EgisTec\Services\EgisTicketService.exe [2011-02-17 203312]

S2 ePowerSvc;Acer ePower Service;c:\program files\Acer\Acer ePower Management\ePowerSvc.exe [2011-01-28 868224]

S2 GREGService;GREGService;c:\program files (x86)\Acer\Registration\GREGsvc.exe [2010-01-08 23584]

S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2010-09-14 13336]

S2 IconMan_R;IconMan_R;c:\program files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe [2011-01-13 1751656]

S2 NOBU;Norton Online Backup;c:\program files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe SERVICE [x]

S2 NTI IScheduleSvc;NTI IScheduleSvc;c:\program files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [2011-02-15 257344]

S2 RS_Service;Raw Socket Service;c:\program files (x86)\Acer\Acer VCM\RS_Service.exe [2010-01-29 260640]

S2 sftlist;Application Virtualization Client;c:\program files (x86)\Microsoft Application Virtualization Client\sftlist.exe [2011-10-01 508776]

S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2011-01-09 378984]

S2 TurboB;Turbo Boost UI Monitor driver;c:\windows\system32\DRIVERS\TurboB.sys [2010-10-08 19192]

S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-12-20 2656280]

S2 Updater Service;Updater Service;c:\program files\Acer\Acer Updater\UpdaterService.exe [2010-01-28 243232]

S3 BTATH_BUS;Atheros Bluetooth Bus;c:\windows\system32\DRIVERS\btath_bus.sys [2010-09-27 31080]

S3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C62x64.sys [2010-10-20 76912]

S3 Sftfs;Sftfs;c:\windows\system32\DRIVERS\Sftfslh.sys [2011-10-01 764264]

S3 Sftplay;Sftplay;c:\windows\system32\DRIVERS\Sftplaylh.sys [2011-10-01 268648]

S3 Sftredir;Sftredir;c:\windows\system32\DRIVERS\Sftredirlh.sys [2011-10-01 25960]

S3 Sftvol;Sftvol;c:\windows\system32\DRIVERS\Sftvollh.sys [2011-10-01 22376]

S3 sftvsa;Application Virtualization Service Agent;c:\program files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [2011-10-01 219496]

.

.

Inhalt des "geplante Tasks" Ordners

.

2012-11-29 c:\windows\Tasks\Adobe Flash Player Updater.job

- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-03-31 16:49]

.

2012-11-29 c:\windows\Tasks\DriverScanner.job

- c:\program files (x86)\Uniblue\DriverScanner\dsmonitor.exe [2012-01-02 13:43]

.

2012-11-25 c:\windows\Tasks\update-S-1-5-21-1512621305-3347222099-645738660-1002.job

- c:\program files (x86)\Skillbrains\Updater\Updater.exe [2011-12-09 21:09]

.

2012-11-27 c:\windows\Tasks\update-sys.job

- c:\program files (x86)\Skillbrains\Updater\Updater.exe [2011-12-09 21:09]

.

.

--------- X64 Entries -----------

.

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"IgfxTray"="c:\windows\system32\igfxtray.exe" [2011-02-07 167960]

"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2011-02-07 391704]

"Persistence"="c:\windows\system32\igfxpers.exe" [2011-02-07 418328]

"IntelTBRunOnce"="wscript.exe" [2009-07-14 168960]

"SynTPEnh"="c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe" [BU]

"AtherosBtStack"="c:\program files (x86)\Bluetooth Suite\BtvStack.exe" [2010-09-27 613024]

"AthBtTray"="c:\program files (x86)\Bluetooth Suite\AthBtTray.exe" [2010-09-27 379040]

"ProShieldTSR"="c:\program files\Acer ProShield\EgisTSR.exe" [2011-02-17 165936]

"Acer ePower Management"="c:\program files\Acer\Acer ePower Management\ePowerTray.exe" [2011-01-28 862088]

"XboxStat"="c:\program files\Microsoft Xbox 360 Accessories\XboxStat.exe" [2007-09-26 855608]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]

"AppInit_DLLs"=c:\windows\System32\nvinitx.dll

.

------- Zusätzlicher Suchlauf -------

.

uLocal Page = c:\windows\system32\blank.htm

uStart Page = hxxp://www.google.com

mDefault_Page_URL = hxxp://acer.msn.com

mStart Page = hxxp://www.google.com

mLocal Page = c:\windows\SysWOW64\blank.htm

uInternet Settings,ProxyOverride = *.local

IE: An OneNote s&enden - c:\progra~2\MICROS~3\Office14\ONBttnIE.dll/105

IE: Nach Microsoft E&xcel exportieren - c:\progra~2\MICROS~3\Office14\EXCEL.EXE/3000

TCP: DhcpNameServer = 192.168.2.1

.

- - - - Entfernte verwaiste Registrierungseinträge - - - -

.

Toolbar-Locked - (no file)

AddRemove-Razoss - c:\users\Konstantin\AppData\Local\Razoss\Application\Uninstall.exe

.

.

.

--------------------- Gesperrte Registrierungsschluessel ---------------------

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]

@Denied: (A 2) (Everyone)

@="FlashBroker"

"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_4_402_287_ActiveX.exe,-101"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]

"Enabled"=dword:00000001

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]

@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_4_402_287_ActiveX.exe"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]

@Denied: (A 2) (Everyone)

@="IFlashBroker5"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]

@="{00020424-0000-0000-C000-000000000046}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

"Version"="1.0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]

@Denied: (A 2) (Everyone)

@="FlashBroker"

"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_4_402_287_ActiveX.exe,-101"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]

"Enabled"=dword:00000001

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_4_402_287_ActiveX.exe"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Shockwave Flash Object"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_287.ocx"

"ThreadingModel"="Apartment"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]

@="0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]

@="ShockwaveFlash.ShockwaveFlash.11"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_287.ocx, 1"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="ShockwaveFlash.ShockwaveFlash"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Macromedia Flash Factory Object"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_287.ocx"

"ThreadingModel"="Apartment"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]

@="FlashFactory.FlashFactory.1"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_287.ocx, 1"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="FlashFactory.FlashFactory"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]

@Denied: (A 2) (Everyone)

@="IFlashBroker5"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]

@="{00020424-0000-0000-C000-000000000046}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

"Version"="1.0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]

@Denied: (A) (Everyone)

"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3]

@Denied: (A) (Everyone)

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]

"Key"="ActionsPane3"

"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]

@Denied: (Full) (Everyone)

.

Zeit der Fertigstellung: 2012-11-29  20:41:14

ComboFix-quarantined-files.txt  2012-11-29 19:41

ComboFix2.txt  2012-11-26 19:31

.

Vor Suchlauf: 14 Verzeichnis(se), 481.997.746.176 Bytes frei

Nach Suchlauf: 15 Verzeichnis(se), 481.562.214.400 Bytes frei

.

- - End Of File - - 0134311A4B4B02A317B71BBCBB04B01F

Hier die angeforderten Daten.
Sag mir bitte zeitnah, wie ich den PC sichern kann/ soll.

Nein, seit ich das letzte mal die Naweisung erhielt, habe ich nichts installiert, ich habe in den letzten tagen überhaupt nichts ohne Aufforderung installiert.
Könnte allerdings sein, dass etwas aktualisiert wurde, wenn dann aber (zumindest meines wissens nach) nicht von mir. Apropos aktualisieren: Kann ich meinen Flashplayer aktualisieren? Mein PC liegt mir damit schon Tage in den Ohren.
Wie auch immer, hier die gewünschten Daten:

Code:

ComboFix 12-11-29.02 - Konstantin 29.11.2012  21:19:01.3.4 - x64

Microsoft Windows 7 Home Premium   6.1.7601.1.1252.49.1031.18.3948.2251 [GMT 1:00]

ausgeführt von:: c:\users\Konstantin\Desktop\ComboFix.exe

Benutzte Befehlsschalter :: c:\users\Konstantin\Desktop\CFScript.txt

SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

.

.

(((((((((((((((((((((((   Dateien erstellt von 2012-10-28 bis 2012-11-29  ))))))))))))))))))))))))))))))

.

.

2012-11-29 20:22 . 2012-11-29 20:22        --------        d-----w-        c:\users\UpdatusUser\AppData\Local\temp

2012-11-29 20:22 . 2012-11-29 20:22        --------        d-----w-        c:\users\Jutta\AppData\Local\temp

2012-11-29 20:22 . 2012-11-29 20:22        --------        d-----w-        c:\users\Default\AppData\Local\temp

2012-11-27 15:43 . 2012-11-19 00:01        9125352        ----a-w-        c:\programdata\Microsoft\Windows Defender\Definition Updates\{E6CC4262-D36B-48DF-AFA6-52BF34090001}\mpengine.dll

2012-11-26 18:53 . 2012-11-29 19:25        --------        d-----w-        c:\programdata\boost_interprocess

2012-11-26 13:35 . 2012-05-31 11:25        279656        ------w-        c:\windows\system32\MpSigStub.exe

2012-11-25 01:30 . 2012-11-25 01:30        --------        d-----w-        c:\users\Konstantin\AppData\Roaming\Malwarebytes

2012-11-25 01:29 . 2012-11-25 01:29        --------        d-----w-        c:\programdata\Malwarebytes

2012-11-25 01:29 . 2012-11-25 01:29        --------        d-----w-        c:\program files (x86)\Malwarebytes' Anti-Malware

2012-11-25 01:29 . 2012-09-29 18:54        25928        ----a-w-        c:\windows\system32\drivers\mbam.sys

2012-11-25 01:18 . 2012-11-25 01:18        --------        d-----w-        c:\users\Konstantin\AppData\Roaming\eSobi

2012-11-25 00:00 . 2012-11-25 00:01        --------        d-----w-        c:\programdata\987CF4B8B7D30AD40000987C5C46148D

2012-11-15 20:44 . 2012-07-26 07:46        2560        ----a-w-        c:\windows\system32\drivers\de-DE\wdf01000.sys.mui

2012-11-15 20:44 . 2012-07-26 04:55        785512        ----a-w-        c:\windows\system32\drivers\Wdf01000.sys

2012-11-15 20:44 . 2012-07-26 04:55        54376        ----a-w-        c:\windows\system32\drivers\WdfLdr.sys

2012-11-15 20:44 . 2012-07-26 02:36        9728        ----a-w-        c:\windows\system32\Wdfres.dll

2012-11-14 21:11 . 2012-10-09 18:17        55296        ----a-w-        c:\windows\system32\dhcpcsvc6.dll

2012-11-14 21:11 . 2012-10-09 18:17        226816        ----a-w-        c:\windows\system32\dhcpcore6.dll

2012-11-14 21:11 . 2012-10-09 17:40        44032        ----a-w-        c:\windows\SysWow64\dhcpcsvc6.dll

2012-11-14 21:11 . 2012-10-09 17:40        193536        ----a-w-        c:\windows\SysWow64\dhcpcore6.dll

2012-11-14 21:08 . 2012-07-26 02:26        87040        ----a-w-        c:\windows\system32\drivers\WUDFPf.sys

2012-11-14 21:08 . 2012-07-26 02:26        198656        ----a-w-        c:\windows\system32\drivers\WUDFRd.sys

2012-11-14 21:08 . 2012-07-26 03:08        84992        ----a-w-        c:\windows\system32\WUDFSvc.dll

2012-11-14 21:08 . 2012-07-26 03:08        194048        ----a-w-        c:\windows\system32\WUDFPlatform.dll

2012-11-14 21:08 . 2012-07-26 03:08        229888        ----a-w-        c:\windows\system32\WUDFHost.exe

2012-11-14 21:08 . 2012-07-26 03:08        744448        ----a-w-        c:\windows\system32\WUDFx.dll

2012-11-14 21:08 . 2012-07-26 03:08        45056        ----a-w-        c:\windows\system32\WUDFCoinstaller.dll

.

.

.

((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2012-11-29 19:24 . 2011-05-04 06:38        17920        ----a-w-        c:\windows\system32\rpcnetp.exe

2012-11-29 19:24 . 2011-06-29 16:04        58288        ----a-w-        c:\windows\SysWow64\rpcnet.dll

2012-11-22 20:54 . 2011-06-29 16:04        58288        ------w-        c:\windows\SysWow64\rpcnet.exe

2012-11-14 21:09 . 2011-07-06 14:35        66395536        ----a-w-        c:\windows\system32\MRT.exe

2012-10-16 08:38 . 2012-11-28 21:46        135168        ----a-w-        c:\windows\apppatch\AppPatch64\AcXtrnal.dll

2012-10-16 08:38 . 2012-11-28 21:46        350208        ----a-w-        c:\windows\apppatch\AppPatch64\AcLayers.dll

2012-10-16 07:39 . 2012-11-28 21:46        561664        ----a-w-        c:\windows\apppatch\AcLayers.dll

2012-10-12 16:49 . 2012-03-31 18:01        696760        ----a-w-        c:\windows\SysWow64\FlashPlayerApp.exe

2012-10-12 16:49 . 2011-06-30 10:32        73656        ----a-w-        c:\windows\SysWow64\FlashPlayerCPLApp.cpl

2012-09-14 19:19 . 2012-10-12 15:14        2048        ----a-w-        c:\windows\system32\tzres.dll

2012-09-14 18:28 . 2012-10-12 15:14        2048        ----a-w-        c:\windows\SysWow64\tzres.dll

2012-09-04 18:30 . 2012-10-01 21:10        38912        ----a-w-        c:\windows\SysWow64\identprv.dll

.

.

((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))

.

.

*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 

REGEDIT4

.

[HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{EEE6C35C-6118-11DC-9C72-001320C79847}]

c:\program files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll [BU]

.

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"DriverScanner"="c:\program files (x86)\Uniblue\DriverScanner\launcher.exe" [2011-10-20 338296]

"Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2012-07-13 17418928]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]

"IAStorIcon"="c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" [2010-09-14 283160]

"Norton Online Backup"="c:\program files (x86)\Symantec\Norton Online Backup\NOBuClient.exe" [2010-06-01 1155928]

"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-02-28 35696]

"BackupManagerTray"="c:\program files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe" [2011-02-15 297280]

"LManager"="c:\program files (x86)\Launch Manager\LManager.exe" [2011-02-14 1077328]

"Microsoft Default Manager"="c:\program files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe" [2010-05-10 439568]

"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2012-08-27 59280]

"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2012-04-18 421888]

"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2012-09-09 421776]

.

c:\users\Konstantin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\

OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk - c:\program files (x86)\Microsoft Office\Office14\ONENOTEM.EXE [2011-9-2 227712]

.

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\

Acer VCM.lnk - c:\program files (x86)\Acer\Acer VCM\AcerVCM.exe [2011-3-16 704104]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"ConsentPromptBehaviorAdmin"= 5 (0x5)

"ConsentPromptBehaviorUser"= 3 (0x3)

"EnableUIADesktopToggle"= 0 (0x0)

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]

"LoadAppInit_DLLs"=1 (0x1)

"AppInit_DLLs"=c:\windows\SysWOW64\nvinit.dll

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]

"aux9"=wdmaud.drv

.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

@=""

.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\rpcnet]

@="Service"

.

[HKEY_LOCAL_MACHINE\software\microsoft\security center]

"AntiVirusOverride"=dword:00000001

"FirewallOverride"=dword:00000001

.

R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]

R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2012-07-03 160944]

R3 AthBTPort;Atheros Virtual Bluetooth Class;c:\windows\system32\DRIVERS\btath_flt.sys [2010-09-27 38248]

R3 BTATH_A2DP;Bluetooth A2DP Audio Driver;c:\windows\system32\drivers\btath_a2dp.sys [2010-09-27 301680]

R3 BTATH_HCRP;Bluetooth HCRP Server driver;c:\windows\system32\DRIVERS\btath_hcrp.sys [2010-09-27 203624]

R3 BTATH_LWFLT;Bluetooth LWFLT Device;c:\windows\system32\DRIVERS\btath_lwflt.sys [2010-09-27 58992]

R3 BTATH_RCP;Bluetooth AVRCP Device;c:\windows\system32\DRIVERS\btath_rcp.sys [2010-09-27 156520]

R3 BtFilter;BtFilter;c:\windows\system32\DRIVERS\btfilter.sys [2010-09-27 278640]

R3 RSPCIESTOR;Realtek PCIE CardReader Driver;c:\windows\system32\DRIVERS\RtsPStor.sys [2011-01-12 333928]

R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]

R3 TurboBoost;Intel(R) Turbo Boost Technology Monitor 2.0;c:\program files\Intel\TurboBoost\TurboBoost.exe [2010-10-08 150016]

R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys [2012-07-09 52736]

R3 WatAdminSvc;Windows-Aktivierungstechnologieservice;c:\windows\system32\Wat\WatAdminSvc.exe [2012-10-20 1255736]

R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 57184]

S0 nvpciflt;nvpciflt;c:\windows\system32\DRIVERS\nvpciflt.sys [2011-01-10 25960]

S1 mwlPSDFilter;mwlPSDFilter;c:\windows\system32\DRIVERS\mwlPSDFilter.sys [2011-05-04 22912]

S1 mwlPSDNServ;mwlPSDNServ;c:\windows\system32\DRIVERS\mwlPSDNServ.sys [2011-05-04 20328]

S1 mwlPSDVDisk;mwlPSDVDisk;c:\windows\system32\DRIVERS\mwlPSDVDisk.sys [2011-05-04 62584]

S2 AtherosSvc;AtherosSvc;c:\program files (x86)\Bluetooth Suite\adminservice.exe [2010-09-27 52896]

S2 cvhsvc;Client Virtualization Handler;c:\program files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [2012-01-04 822624]

S2 CxAudMsg;Conexant Audio Message Service;c:\windows\system32\CxAudMsg64.exe [2010-12-16 198784]

S2 DsiWMIService;Dritek WMI Service;c:\program files (x86)\Launch Manager\dsiwmis.exe [2011-02-14 347216]

S2 EgisTec Ticket Service;EgisTec Ticket Service;c:\program files\Common Files\EgisTec\Services\EgisTicketService.exe [2011-02-17 203312]

S2 ePowerSvc;Acer ePower Service;c:\program files\Acer\Acer ePower Management\ePowerSvc.exe [2011-01-28 868224]

S2 GREGService;GREGService;c:\program files (x86)\Acer\Registration\GREGsvc.exe [2010-01-08 23584]

S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2010-09-14 13336]

S2 IconMan_R;IconMan_R;c:\program files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe [2011-01-13 1751656]

S2 NOBU;Norton Online Backup;c:\program files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe SERVICE [x]

S2 NTI IScheduleSvc;NTI IScheduleSvc;c:\program files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [2011-02-15 257344]

S2 RS_Service;Raw Socket Service;c:\program files (x86)\Acer\Acer VCM\RS_Service.exe [2010-01-29 260640]

S2 sftlist;Application Virtualization Client;c:\program files (x86)\Microsoft Application Virtualization Client\sftlist.exe [2011-10-01 508776]

S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2011-01-09 378984]

S2 TurboB;Turbo Boost UI Monitor driver;c:\windows\system32\DRIVERS\TurboB.sys [2010-10-08 19192]

S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-12-20 2656280]

S2 Updater Service;Updater Service;c:\program files\Acer\Acer Updater\UpdaterService.exe [2010-01-28 243232]

S3 BTATH_BUS;Atheros Bluetooth Bus;c:\windows\system32\DRIVERS\btath_bus.sys [2010-09-27 31080]

S3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C62x64.sys [2010-10-20 76912]

S3 Sftfs;Sftfs;c:\windows\system32\DRIVERS\Sftfslh.sys [2011-10-01 764264]

S3 Sftplay;Sftplay;c:\windows\system32\DRIVERS\Sftplaylh.sys [2011-10-01 268648]

S3 Sftredir;Sftredir;c:\windows\system32\DRIVERS\Sftredirlh.sys [2011-10-01 25960]

S3 Sftvol;Sftvol;c:\windows\system32\DRIVERS\Sftvollh.sys [2011-10-01 22376]

S3 sftvsa;Application Virtualization Service Agent;c:\program files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [2011-10-01 219496]

.

.

Inhalt des "geplante Tasks" Ordners

.

2012-11-29 c:\windows\Tasks\Adobe Flash Player Updater.job

- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-03-31 16:49]

.

2012-11-29 c:\windows\Tasks\DriverScanner.job

- c:\program files (x86)\Uniblue\DriverScanner\dsmonitor.exe [2012-01-02 13:43]

.

2012-11-25 c:\windows\Tasks\update-S-1-5-21-1512621305-3347222099-645738660-1002.job

- c:\program files (x86)\Skillbrains\Updater\Updater.exe [2011-12-09 21:09]

.

2012-11-29 c:\windows\Tasks\update-sys.job

- c:\program files (x86)\Skillbrains\Updater\Updater.exe [2011-12-09 21:09]

.

.

--------- X64 Entries -----------

.

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"IgfxTray"="c:\windows\system32\igfxtray.exe" [2011-02-07 167960]

"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2011-02-07 391704]

"Persistence"="c:\windows\system32\igfxpers.exe" [2011-02-07 418328]

"IntelTBRunOnce"="wscript.exe" [2009-07-14 168960]

"SynTPEnh"="c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe" [BU]

"AtherosBtStack"="c:\program files (x86)\Bluetooth Suite\BtvStack.exe" [2010-09-27 613024]

"AthBtTray"="c:\program files (x86)\Bluetooth Suite\AthBtTray.exe" [2010-09-27 379040]

"ProShieldTSR"="c:\program files\Acer ProShield\EgisTSR.exe" [2011-02-17 165936]

"Acer ePower Management"="c:\program files\Acer\Acer ePower Management\ePowerTray.exe" [2011-01-28 862088]

"XboxStat"="c:\program files\Microsoft Xbox 360 Accessories\XboxStat.exe" [2007-09-26 855608]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]

"AppInit_DLLs"=c:\windows\System32\nvinitx.dll

.

------- Zusätzlicher Suchlauf -------

.

uLocal Page = c:\windows\system32\blank.htm

uStart Page = hxxp://www.google.com

mDefault_Page_URL = hxxp://acer.msn.com

mStart Page = hxxp://www.google.com

mLocal Page = c:\windows\SysWOW64\blank.htm

uInternet Settings,ProxyOverride = *.local

IE: An OneNote s&enden - c:\progra~2\MICROS~3\Office14\ONBttnIE.dll/105

IE: Nach Microsoft E&xcel exportieren - c:\progra~2\MICROS~3\Office14\EXCEL.EXE/3000

TCP: DhcpNameServer = 192.168.2.1

.

- - - - Entfernte verwaiste Registrierungseinträge - - - -

.

Toolbar-Locked - (no file)

AddRemove-Razoss - c:\users\Konstantin\AppData\Local\Razoss\Application\Uninstall.exe

.

.

.

--------------------- Gesperrte Registrierungsschluessel ---------------------

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]

@Denied: (A 2) (Everyone)

@="FlashBroker"

"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_4_402_287_ActiveX.exe,-101"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]

"Enabled"=dword:00000001

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]

@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_4_402_287_ActiveX.exe"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]

@Denied: (A 2) (Everyone)

@="IFlashBroker5"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]

@="{00020424-0000-0000-C000-000000000046}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

"Version"="1.0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]

@Denied: (A 2) (Everyone)

@="FlashBroker"

"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_4_402_287_ActiveX.exe,-101"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]

"Enabled"=dword:00000001

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_4_402_287_ActiveX.exe"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Shockwave Flash Object"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_287.ocx"

"ThreadingModel"="Apartment"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]

@="0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]

@="ShockwaveFlash.ShockwaveFlash.11"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_287.ocx, 1"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="ShockwaveFlash.ShockwaveFlash"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Macromedia Flash Factory Object"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_287.ocx"

"ThreadingModel"="Apartment"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]

@="FlashFactory.FlashFactory.1"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_287.ocx, 1"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="FlashFactory.FlashFactory"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]

@Denied: (A 2) (Everyone)

@="IFlashBroker5"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]

@="{00020424-0000-0000-C000-000000000046}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

"Version"="1.0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]

@Denied: (A) (Everyone)

"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3]

@Denied: (A) (Everyone)

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]

"Key"="ActionsPane3"

"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]

@Denied: (Full) (Everyone)

.

Zeit der Fertigstellung: 2012-11-29  21:23:54

ComboFix-quarantined-files.txt  2012-11-29 20:23

ComboFix2.txt  2012-11-29 19:41

ComboFix3.txt  2012-11-26 19:31

.

Vor Suchlauf: 14 Verzeichnis(se), 481.675.177.984 Bytes frei

Nach Suchlauf: 15 Verzeichnis(se), 481.366.642.688 Bytes frei

.

- - End Of File - - EEF6CA622D5A62D41907D8AEC99DCE7E