Trojaner-Board - Word Datei verschlüsselt oder kann Sie nicht öffnen

Combofix Logfile:
Code:
ComboFix 13-05-25.02 - Herrmann 26.05.2013  10:45:13.1.4 - x86

Microsoft® Windows Vista™ Home Premium   6.0.6002.2.1252.49.1031.18.3070.1958 [GMT 2:00]

ausgeführt von:: c:\users\Herrmann\Downloads\ComboFix.exe

AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}

AV: Microsoft Security Essentials *Enabled/Updated* {B140BF4E-23BB-4198-90AB-A51A4C60A69C}

SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}

SP: Microsoft Security Essentials *Enabled/Updated* {0A215EAA-0581-4E16-AA1B-9E6837E7EC21}

SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

.

.

((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))

.

.

C:\DFR1609.tmp

c:\users\Herrmann\AppData\Local\assembly\tmp

c:\users\Herrmann\AppData\Roaming\Microsoft\Windows\Templates\install_flashplayer11x64_mssd_aih_de.exe

c:\windows\IsUn0407.exe

.

.

(((((((((((((((((((((((   Dateien erstellt von 2013-04-26 bis 2013-05-26  ))))))))))))))))))))))))))))))

.

.

2013-05-26 08:54 . 2013-05-26 08:54        --------        d-----w-        c:\users\Herrmann\AppData\Local\temp

2013-05-26 08:54 . 2013-05-26 08:54        --------        d-----w-        c:\users\Default\AppData\Local\temp

2013-05-26 08:24 . 2013-05-26 08:24        29904        ----a-w-        c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{F1325FF4-079A-4EDA-836F-450DE2B8EE15}\MpKslcc06e6b5.sys

2013-05-25 15:47 . 2013-05-25 15:47        60872        ----a-w-        c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{F1325FF4-079A-4EDA-836F-450DE2B8EE15}\offreg.dll

2013-05-25 15:29 . 2013-05-25 15:29        29904        ----a-w-        c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{F1325FF4-079A-4EDA-836F-450DE2B8EE15}\MpKsl6bbeb732.sys

2013-05-25 13:40 . 2013-05-25 13:40        --------        d-----w-        c:\users\Herrmann\AppData\Roaming\Malwarebytes

2013-05-25 13:40 . 2013-05-25 13:40        --------        d-----w-        c:\programdata\Malwarebytes

2013-05-25 13:40 . 2013-04-04 12:50        22856        ----a-w-        c:\windows\system32\drivers\mbam.sys

2013-05-25 13:40 . 2013-05-25 14:23        --------        d-----w-        c:\program files\Malwarebytes' Anti-Malware

2013-05-25 13:30 . 2013-05-13 06:19        7016152        ----a-w-        c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{F1325FF4-079A-4EDA-836F-450DE2B8EE15}\mpengine.dll

2013-05-25 11:16 . 2013-05-25 11:16        --------        d-----w-        c:\users\Herrmann\AppData\Roaming\PimeroUninstallCloser

2013-05-25 10:41 . 2013-05-13 06:19        7016152        ----a-w-        c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll

2013-05-25 10:29 . 2013-05-25 16:58        --------        d-----w-        C:\_OTL

2013-05-23 15:02 . 2013-05-25 12:48        9216        ----a-w-        c:\windows\system32\Native.exe

2013-05-23 15:02 . 2013-05-25 12:48        --------        d-----w-        C:\ReimageUndo

2013-05-23 14:38 . 2013-05-23 14:38        37664        ----a-w-        c:\windows\system32\drivers\avgtpx86.sys

2013-05-23 14:38 . 2013-05-23 14:38        --------        d-----w-        c:\program files\AVG SafeGuard toolbar

2013-05-23 14:06 . 2013-05-23 14:06        --------        d-----w-        c:\users\Herrmann\AppData\Local\WinZip

2013-05-23 14:05 . 2013-05-23 14:06        --------        d-----w-        c:\programdata\WinZip

2013-05-23 13:22 . 2013-05-23 13:22        --------        d-----w-        c:\programdata\RapidSolution

2013-05-23 13:17 . 2013-05-23 13:17        --------        d-----w-        c:\users\Herrmann\AppData\Local\CrashRpt

2013-05-23 13:11 . 2013-05-09 08:59        368944        ----a-w-        c:\windows\system32\drivers\aswSP.sys

2013-05-23 13:11 . 2013-05-09 08:59        29816        ----a-w-        c:\windows\system32\drivers\aswFsBlk.sys

2013-05-23 13:11 . 2013-05-09 08:59        56080        ----a-w-        c:\windows\system32\drivers\aswTdi.sys

2013-05-23 13:11 . 2013-05-09 08:59        49760        ----a-w-        c:\windows\system32\drivers\aswRdr.sys

2013-05-23 13:11 . 2013-05-09 08:59        765736        ----a-w-        c:\windows\system32\drivers\aswSnx.sys

2013-05-23 13:11 . 2013-05-09 08:59        49376        ----a-w-        c:\windows\system32\drivers\aswRvrt.sys

2013-05-23 13:11 . 2013-05-09 08:59        174664        ----a-w-        c:\windows\system32\drivers\aswVmm.sys

2013-05-23 13:11 . 2013-05-09 08:59        66336        ----a-w-        c:\windows\system32\drivers\aswMonFlt.sys

2013-05-23 13:11 . 2013-05-09 08:58        229648        ----a-w-        c:\windows\system32\aswBoot.exe

2013-05-23 13:10 . 2013-05-09 08:58        41664        ----a-w-        c:\windows\avastSS.scr

2013-05-23 13:08 . 2013-05-23 13:08        --------        d-----w-        c:\program files\iPod

2013-05-23 13:08 . 2013-05-23 13:09        --------        d-----w-        c:\program files\iTunes

2013-05-23 12:55 . 2013-05-23 12:52        724464        ----a-w-        c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{79B1EB55-D936-418A-B15D-AE115372588B}\gapaengine.dll

2013-05-23 12:34 . 2013-05-23 13:15        --------        d-----w-        c:\users\Herrmann\AppData\Local\RapidSolution

2013-05-23 11:37 . 2013-05-23 11:42        --------        d-----w-        c:\users\Herrmann\AppData\Local\iLivid

2013-05-22 17:40 . 2013-05-25 17:19        --------        d-----w-        C:\rei

2013-05-22 17:39 . 2013-05-22 17:39        --------        d-----w-        c:\users\Herrmann\AppData\Local\AVG SafeGuard toolbar

2013-05-22 17:39 . 2013-05-22 17:39        --------        d-----w-        c:\program files\Reimage

2013-05-22 17:39 . 2013-05-22 17:39        --------        d-----w-        c:\programdata\AVG SafeGuard toolbar

2013-05-22 17:39 . 2013-05-23 14:38        --------        d-----w-        c:\program files\Common Files\AVG Secure Search

2013-05-22 17:39 . 2013-05-22 17:39        --------        d--h--w-        c:\programdata\Common Files

2013-05-22 15:56 . 2013-05-22 16:17        --------        d-----w-        c:\programdata\Kaspersky Lab

2013-05-22 15:56 . 2013-05-22 15:56        --------        d-----w-        c:\program files\Kaspersky Lab

2013-05-22 14:53 . 2013-05-23 13:09        --------        d-----w-        c:\program files\AVAST Software

2013-05-22 14:52 . 2013-05-23 13:09        --------        d-----w-        c:\programdata\AVAST Software

2013-05-22 14:52 . 2013-05-22 14:52        --------        d-----w-        c:\users\Herrmann\AppData\Roaming\Simply Super Software

2013-05-22 14:52 . 2013-05-22 14:52        --------        d-----w-        c:\program files\Trojan Remover

2013-05-22 14:52 . 2013-05-22 14:52        --------        d-----w-        c:\programdata\Simply Super Software

2013-05-22 14:39 . 2013-05-22 14:39        --------        d-----w-        C:\sh4ldr

2013-05-22 14:39 . 2013-05-22 14:39        --------        d-----w-        c:\program files\Enigma Software Group

2013-05-21 11:26 . 2013-05-21 11:26        --------        d-----w-        c:\users\Herrmann\AppData\Roaming\fEJnNdCk

2013-05-18 15:58 . 2013-05-18 21:50        --------        d---a-w-        C:\Kaspersky Rescue Disk 10.0

2013-05-17 16:58 . 2013-05-17 16:58        --------        d-----w-        c:\users\Herrmann\AppData\Local\WinZip Courier

2013-05-17 16:58 . 2013-05-26 08:54        --------        d-----w-        c:\users\Herrmann\AppData\Local\assembly

2013-05-17 15:34 . 2013-05-17 15:34        --------        d-----w-        c:\program files\Common Files\Skype

2013-05-01 09:34 . 2013-05-17 15:34        --------        d-----r-        c:\program files\Skype

.

.

.

((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2013-05-23 13:42 . 2012-04-18 05:03        692104        ----a-w-        c:\windows\system32\FlashPlayerApp.exe

2013-05-23 13:42 . 2011-05-22 09:02        71048        ----a-w-        c:\windows\system32\FlashPlayerCPLApp.cpl

2013-05-23 12:17 . 2011-03-28 16:36        22240        ----a-w-        c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll

2013-05-02 15:28 . 2010-05-04 15:04        238872        ------w-        c:\windows\system32\MpSigStub.exe

2013-04-25 05:02 . 2011-03-25 06:07        706640        ----a-w-        c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\NISBackup\gapaengine.dll

2013-03-18 16:39 . 2013-03-18 16:39        94112        ----a-w-        c:\windows\system32\WindowsAccessBridge.dll

2013-03-18 16:39 . 2012-07-02 12:24        861088        ----a-w-        c:\windows\system32\npDeployJava1.dll

2013-03-18 16:39 . 2010-05-02 15:12        782240        ----a-w-        c:\windows\system32\deployJava1.dll

2011-07-08 07:31 . 2011-08-13 16:32        142296        ----a-w-        c:\program files\mozilla firefox\components\browsercomps.dll

.

.

((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))

.

.

*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 

REGEDIT4

.

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]

"{00000000-6E41-4FD3-8538-502F5495E5FC}"= "c:\program files\Ask.com\GenericAskToolbar.dll" [2013-02-08 1520776]

"{5786d022-540e-4699-b350-b4be0ae94b79}"= "c:\program files\Ashampoo_DE\prxtbAsha.dll" [2011-01-17 175912]

.

[HKEY_CLASSES_ROOT\clsid\{00000000-6e41-4fd3-8538-502f5495e5fc}]

.

[HKEY_CLASSES_ROOT\clsid\{5786d022-540e-4699-b350-b4be0ae94b79}]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\~\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}]

2011-01-17 14:54        175912        ----a-w-        c:\program files\ConduitEngine\prxConduitEngine.dll

.

[HKEY_LOCAL_MACHINE\SOFTWARE\~\Browser Helper Objects\{5786d022-540e-4699-b350-b4be0ae94b79}]

2011-01-17 14:54        175912        ----a-w-        c:\program files\Ashampoo_DE\prxtbAsha.dll

.

[HKEY_LOCAL_MACHINE\SOFTWARE\~\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}]

2013-05-23 14:38        1991344        ----a-w-        c:\program files\AVG SafeGuard toolbar\15.2.0.5\AVG SafeGuard toolbar_toolbar.dll

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]

"{5786d022-540e-4699-b350-b4be0ae94b79}"= "c:\program files\Ashampoo_DE\prxtbAsha.dll" [2011-01-17 175912]

"{30F9B915-B755-4826-820B-08FBA6BD249D}"= "c:\program files\ConduitEngine\prxConduitEngine.dll" [2011-01-17 175912]

"{95B7759C-8C7F-4BF1-B163-73684A933233}"= "c:\program files\AVG SafeGuard toolbar\15.2.0.5\AVG SafeGuard toolbar_toolbar.dll" [2013-05-23 1991344]

.

[HKEY_CLASSES_ROOT\clsid\{5786d022-540e-4699-b350-b4be0ae94b79}]

.

[HKEY_CLASSES_ROOT\clsid\{30f9b915-b755-4826-820b-08fba6bd249d}]

.

[HKEY_CLASSES_ROOT\clsid\{95b7759c-8c7f-4bf1-b163-73684a933233}]

[HKEY_CLASSES_ROOT\AVG SafeGuard toolbar.PugiObj.1]

[HKEY_CLASSES_ROOT\AVG SafeGuard toolbar.PugiObj]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]

@="{472083B0-C522-11CF-8763-00608CC02F24}"

[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]

2013-05-09 08:58        121968        ----a-w-        c:\program files\AVAST Software\Avast\ashShell.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveBlacklistedOverlay]

@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}"

[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}]

2013-04-16 14:10        576976        ----a-w-        c:\program files\Google\Drive\googledrivesync32.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedOverlay]

@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}"

[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}]

2013-04-16 14:10        576976        ----a-w-        c:\program files\Google\Drive\googledrivesync32.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncedOverlay]

@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}"

[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}]

2013-04-16 14:10        576976        ----a-w-        c:\program files\Google\Drive\googledrivesync32.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncingOverlay]

@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}"

[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}]

2013-04-16 14:10        576976        ----a-w-        c:\program files\Google\Drive\googledrivesync32.dll

.

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-04-11 1233920]

"DriverScanner"="c:\program files\Uniblue\DriverScanner\launcher.exe" [2011-05-16 338296]

"Skype"="c:\program files\Skype\Phone\Skype.exe" [2013-03-01 18643560]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"FineReader7NewsReaderPro"="c:\program files\ABBYY FineReader 7.0 Professional Edition\AbbyyNewsReader.exe" [2004-01-18 278528]

"lxbtmon.exe"="c:\program files\Lexmark 5200 Series\lxbtmon.exe" [2007-05-03 230320]

"EzPrint"="c:\program files\Lexmark 5200 Series\ezprint.exe" [2007-05-03 103344]

"MedionVFD"="c:\program files\Medion Info Display\MdionLCMLH.exe" [2006-12-29 208896]

"AppleSyncNotifier"="c:\program files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe" [2011-10-05 59240]

"APSDaemon"="c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2013-04-21 59720]

"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2012-09-12 947176]

"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2012-10-25 421888]

"ApnUpdater"="c:\program files\Ask.com\Updater\Updater.exe" [2013-02-08 1644680]

"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2012-07-03 252848]

"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2013-05-15 152392]

"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2013-05-09 4858968]

"vProt"="c:\program files\AVG SafeGuard toolbar\vprot.exe" [2013-05-23 1226928]

.

c:\users\Herrmann\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\

A Note.lnk - c:\program files\A Note\A Note.exe [2010-5-1 815104]

.

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\

ISDNWatch.lnk - c:\program files\FRITZ!\IWatch.exe [2012-9-25 341304]

McAfee Security Scan Plus.lnk - c:\program files\McAfee Security Scan\3.0.318\SSScheduler.exe [2013-2-5 272248]

WinZip Quick Pick.lnk - c:\program files\WinZip\WZQKPICK32.EXE [2013-5-1 685936]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"EnableUIADesktopToggle"= 0 (0x0)

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]

"aux"=wdmaud.drv

.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

@="Service"

.

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]

"WindowsWelcomeCenter"=rundll32.exe oobefldr.dll,ShowWelcomeCenter

"Google Update"="c:\users\Herrmann\AppData\Local\Google\Update\GoogleUpdate.exe" /c

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]

"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe"

"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" -atboottime

"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe"

"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe"

.

--- Andere Dienste/Treiber im Speicher ---

.

*NewlyCreated* - MPKSLCC06E6B5

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]

LocalServiceAndNoImpersonation        REG_MULTI_SZ           FontCache

.

Inhalt des "geplante Tasks" Ordners

.

2013-05-26 c:\windows\Tasks\Adobe Flash Player Updater.job

- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-18 13:42]

.

2013-05-26 c:\windows\Tasks\DriverScanner.job

- c:\program files\Uniblue\DriverScanner\dsmonitor.exe [2011-08-14 09:22]

.

2013-05-26 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job

- c:\program files\Google\Update\GoogleUpdate.exe [2010-06-24 13:35]

.

2013-05-26 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

- c:\program files\Google\Update\GoogleUpdate.exe [2010-06-24 13:35]

.

2013-05-25 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1242251762-901191055-1999500024-1000Core.job

- c:\users\Herrmann\AppData\Local\Google\Update\GoogleUpdate.exe [2010-09-17 14:54]

.

2013-05-26 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1242251762-901191055-1999500024-1000UA.job

- c:\users\Herrmann\AppData\Local\Google\Update\GoogleUpdate.exe [2010-09-17 14:54]

.

.

------- Zusätzlicher Suchlauf -------

.

uStart Page = hxxp://search.babylon.com/?affID=109958&tt=280612_5_&babsrc=HP_ss&mntrId=c802f32b000000000000406186023767

mStart Page = hxxp://www.google.com

uInternet Settings,ProxyOverride = *.local

IE: Nach Microsoft &Excel exportieren - c:\progra~1\MICROS~4\OFFICE11\EXCEL.EXE/3000

TCP: DhcpNameServer = 192.168.2.1

TCP: Interfaces\{9792E88B-7975-493F-8C0D-6FC5CE5ED023}: NameServer = 192.168.120.252,192.168.120.253

Handler: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - c:\program files\Common Files\AVG Secure Search\ViProtocolInstaller\15.2.0\ViProtocol.dll

FF - ProfilePath - c:\users\Herrmann\AppData\Roaming\Mozilla\Firefox\Profiles\ogtykz1t.default\

FF - prefs.js: browser.search.defaulturl - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2481020&SearchSource=3&q={searchTerms}

FF - prefs.js: browser.search.selectedEngine - AVG Secure Search

FF - prefs.js: browser.startup.homepage - hxxp://mysearch.avg.com?pid=safeguard&sg=2&cid=%7B9b6e6f1f-5b86-409f-8c79-c122289816f6%7D&mid=ab83d13bf51d47d39ae5d14e3180e0c1-22282c4dc3b02cc32352678eedd9dd0af5242b0f&ds=re011&v=15.2.0.5&lang=en&pr=sa&d=2013-05-23%2016%3A38%3A17&sap=hp

FF - prefs.js: keyword.URL - hxxp://mysearch.avg.com/search?pid=safeguard&sg=2&cid=%7B9b6e6f1f-5b86-409f-8c79-c122289816f6%7D&mid=ab83d13bf51d47d39ae5d14e3180e0c1-22282c4dc3b02cc32352678eedd9dd0af5242b0f&ds=re011&v=15.2.0.5&lang=en&pr=sa&d=2013-05-23%2016%3A38%3A17&sap=ku&q=

FF - ExtSQL: 2013-04-11 13:41; plugin@yontoo.com; c:\users\Herrmann\AppData\Roaming\Mozilla\Firefox\Profiles\ogtykz1t.default\extensions\plugin@yontoo.com

FF - ExtSQL: 2013-05-22 16:53; wrc@avast.com; c:\program files\AVAST Software\Avast\WebRep\FF

FF - ExtSQL: 2013-05-23 16:38; avg@toolbar; c:\programdata\AVG SafeGuard toolbar\FireFoxExt\15.2.0.5

FF - ExtSQL: 2013-05-25 12:38; {4ED1F68A-5463-4931-9384-8FFF5ED91D92}; c:\program files\McAfee\SiteAdvisor

FF - ExtSQL: !HIDDEN! 2010-05-08 14:03; {20a82645-c095-46ed-80e3-08825760534b}; c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension

FF - user.js: yahoo.homepage.dontask - true

FF - user.js: network.http.max-connections-per-server - 6

FF - user.js: network.http.max-persistent-connections-per-server - 3

FF - user.js: extensions.BabylonToolbar_i.id - c802f32b000000000000406186023767

FF - user.js: extensions.BabylonToolbar_i.hardId - c802f32b000000000000406186023767

FF - user.js: extensions.BabylonToolbar_i.instlDay - 15519

FF - user.js: extensions.BabylonToolbar_i.vrsn - 1.5.3.17

FF - user.js: extensions.BabylonToolbar_i.vrsni - 1.5.3.17

FF - user.js: extensions.BabylonToolbar_i.vrsnTs - 1.5.3.1713:17

FF - user.js: extensions.BabylonToolbar_i.prtnrId - babylon

FF - user.js: extensions.BabylonToolbar_i.prdct - BabylonToolbar

FF - user.js: extensions.BabylonToolbar_i.aflt - babsst

FF - user.js: extensions.BabylonToolbar_i.smplGrp - none

FF - user.js: extensions.BabylonToolbar_i.tlbrId - base

FF - user.js: extensions.BabylonToolbar_i.newTab - false

FF - user.js: extensions.BabylonToolbar_i.babTrack - affID=109958&tt=280612_5_

FF - user.js: extensions.BabylonToolbar_i.babExt - 

FF - user.js: extensions.BabylonToolbar_i.srcExt - ss

FF - user.js: extensions.BabylonToolbar_i.instlRef - sst

.

- - - - Entfernte verwaiste Registrierungseinträge - - - -

.

AddRemove-FRITZ! 2.0 - c:\windows\IsUn0407.exe

.

.

.

**************************************************************************

.

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, GMER - Rootkit Detector and Remover

Rootkit scan 2013-05-26 10:54

Windows 6.0.6002 Service Pack 2 NTFS

.

Scanne versteckte Prozesse... 

.

Scanne versteckte Autostarteinträge... 

.

Scanne versteckte Dateien... 

.

Scan erfolgreich abgeschlossen

versteckte Dateien: 0

.

**************************************************************************

.

Zeit der Fertigstellung: 2013-05-26  10:57:32

ComboFix-quarantined-files.txt  2013-05-26 08:57

.

Vor Suchlauf: 24 Verzeichnis(se), 461.546.930.176 Bytes frei

Nach Suchlauf: 29 Verzeichnis(se), 461.524.557.824 Bytes frei

.

- - End Of File - - 9002262AD7635FFA8F66B26FE3C1D4E3
--- --- ---