Erledigt. x) Code:
ComboFix 14-02-20.01 - Mistbock 21.02.2014 19:51:32.2.8 - x64
Microsoft Windows 7 Enterprise 6.1.7601.1.1252.49.1031.18.16277.13187 [GMT 1:00]
ausgeführt von:: c:\users\Mistbock\Desktop\ComboFix.exe
SP: Spybot - Search and Destroy *Enabled/Outdated* {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
(((((((((((((((((((((((((((((((((((( Weitere Löschungen ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\wininit.ini
.
.
((((((((((((((((((((((( Dateien erstellt von 2014-01-21 bis 2014-02-21 ))))))))))))))))))))))))))))))
.
.
2014-02-21 18:56 . 2014-02-21 18:56 -------- d-----w- c:\users\Public\AppData\Local\temp
2014-02-21 18:56 . 2014-02-21 18:56 -------- d-----w- c:\users\Default\AppData\Local\temp
2014-02-21 13:59 . 2014-02-06 09:01 10536864 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{C33818AD-3D71-47AF-8918-990B2AF5E856}\mpengine.dll
2014-02-20 16:54 . 2014-02-20 16:54 -------- d-----w- c:\program files (x86)\AGEIA Technologies
2014-02-20 16:54 . 2014-02-20 16:54 -------- d-----w- c:\windows\SysWow64\NV
2014-02-20 16:54 . 2014-02-20 16:54 -------- d-----w- c:\windows\system32\NV
2014-02-20 16:50 . 2014-02-20 16:50 -------- d-----w- C:\NVIDIA
2014-02-13 07:42 . 2013-12-21 09:53 548864 ----a-w- c:\windows\system32\vbscript.dll
2014-02-13 07:42 . 2013-12-21 08:56 454656 ----a-w- c:\windows\SysWow64\vbscript.dll
2014-02-12 08:26 . 2013-12-04 02:27 485888 ----a-w- c:\windows\system32\secproc_isv.dll
2014-02-12 08:14 . 2014-02-12 08:14 -------- d-----w- c:\users\Mistbock\AppData\Local\Targem
2014-02-12 08:11 . 2013-12-06 02:30 2048 ----a-w- c:\windows\system32\msxml3r.dll
2014-02-12 08:11 . 2013-12-06 02:30 1882112 ----a-w- c:\windows\system32\msxml3.dll
2014-02-12 08:11 . 2013-12-06 02:02 2048 ----a-w- c:\windows\SysWow64\msxml3r.dll
2014-02-12 08:11 . 2013-12-06 02:02 1237504 ----a-w- c:\windows\SysWow64\msxml3.dll
2014-02-12 07:56 . 2013-12-24 23:09 1987584 ----a-w- c:\windows\SysWow64\d3d10warp.dll
2014-02-12 07:56 . 2013-12-24 22:48 2565120 ----a-w- c:\windows\system32\d3d10warp.dll
2014-02-12 07:56 . 2013-11-26 08:16 3419136 ----a-w- c:\windows\SysWow64\d2d1.dll
2014-02-12 07:56 . 2013-11-22 22:48 3928064 ----a-w- c:\windows\system32\d2d1.dll
2014-02-11 18:51 . 2014-02-11 18:51 -------- d-----w- c:\users\Mistbock\AppData\Local\Blizzard Entertainment
2014-02-11 18:10 . 2014-02-11 18:10 -------- d-----w- c:\program files (x86)\Common Files\Blizzard Entertainment
2014-02-11 18:10 . 2014-02-11 18:10 -------- d-----w- c:\programdata\Blizzard Entertainment
2014-02-11 18:08 . 2014-02-11 18:08 -------- d-----w- c:\programdata\Battle.net
2014-02-11 16:53 . 2014-02-11 17:20 -------- d-----w- c:\users\Mistbock\AppData\Roaming\RIFT
2014-02-11 15:31 . 2014-02-11 15:31 -------- d-----w- c:\users\Mistbock\AppData\Roaming\steamvr
2014-02-10 13:38 . 2014-02-10 13:38 -------- d-----w- c:\users\Mistbock\AppData\Local\EdgeOfReality
2014-02-10 13:05 . 2014-02-11 08:58 -------- d-----w- c:\users\Mistbock\AppData\Roaming\Awesomium
2014-02-02 19:46 . 2014-02-02 19:48 -------- d-----w- c:\users\Mistbock\AppData\Roaming\com.bwsf.DragonAgeLegends
2014-02-02 19:09 . 2014-02-02 19:09 -------- d-----w- c:\users\Mistbock\AppData\Roaming\FunnyGames
2014-02-02 19:09 . 2014-02-02 19:09 -------- d-----w- c:\users\Mistbock\AppData\Local\FunnyGames
2014-02-02 18:05 . 2014-02-02 18:05 -------- d-----w- c:\users\Mistbock\AppData\Roaming\WizardWars
2014-02-02 12:23 . 2014-02-02 12:23 -------- d-----w- c:\users\Mistbock\AppData\Local\Avg2014
.
.
.
(((((((((((((((((((((((((((((((((((( Find3M Bericht ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-02-21 14:37 . 2013-03-23 10:23 71048 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2014-02-21 14:37 . 2013-03-23 10:23 692616 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2014-02-21 14:37 . 2013-12-15 16:34 17858952 ----a-w- c:\windows\SysWow64\FlashPlayerInstaller.exe
2014-02-17 05:56 . 2011-07-28 19:13 88567024 ----a-w- c:\windows\system32\MRT.exe
2014-02-08 18:34 . 2013-11-03 17:53 832424 ----a-w- c:\windows\SysWow64\nvumdshim.dll
2014-02-08 18:34 . 2013-11-03 17:53 2713728 ----a-w- c:\windows\SysWow64\nvapi.dll
2014-02-08 18:34 . 2013-11-03 17:53 148528 ----a-w- c:\windows\SysWow64\nvinit.dll
2014-02-08 18:34 . 2013-02-05 19:36 947296 ----a-w- c:\windows\system32\nvumdshimx.dll
2014-02-08 18:34 . 2013-02-05 19:36 3090184 ----a-w- c:\windows\system32\nvapi64.dll
2014-02-08 17:42 . 2013-02-05 19:37 6712608 ----a-w- c:\windows\system32\nvcpl.dll
2014-02-08 17:42 . 2013-02-05 19:37 3498272 ----a-w- c:\windows\system32\nvsvc64.dll
2014-02-08 17:42 . 2013-02-05 19:37 923936 ----a-w- c:\windows\system32\nvvsvc.exe
2014-02-08 17:42 . 2013-02-05 19:37 67072 ----a-w- c:\windows\system32\nv3dappshextr.dll
2014-02-08 17:42 . 2013-02-05 19:37 63776 ----a-w- c:\windows\system32\nvshext.dll
2014-02-08 17:42 . 2013-02-05 19:37 386336 ----a-w- c:\windows\system32\nvmctray.dll
2014-02-08 17:42 . 2013-02-05 19:37 2559776 ----a-w- c:\windows\system32\nvsvcr.dll
2014-02-08 17:42 . 2013-02-05 19:37 1075488 ----a-w- c:\windows\system32\nv3dappshext.dll
2014-02-05 17:52 . 2013-02-05 19:37 3573739 ----a-w- c:\windows\system32\nvcoproc.bin
2014-02-05 09:31 . 2013-11-03 17:55 1048152 ----a-w- c:\windows\SysWow64\nvspcap.dll
2014-02-05 09:30 . 2013-11-03 17:55 1179576 ----a-w- c:\windows\system32\nvspcap64.dll
2014-01-12 09:29 . 2014-01-02 17:40 281688 ----a-w- c:\windows\SysWow64\PnkBstrB.xtr
2014-01-05 02:26 . 2014-01-02 17:31 281688 ----a-w- c:\windows\SysWow64\PnkBstrB.ex0
2014-01-02 17:31 . 2014-01-02 17:31 76888 ----a-w- c:\windows\SysWow64\PnkBstrA.exe
2013-12-31 07:50 . 2009-08-18 11:49 564632 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\wlidui.dll
2013-12-31 07:50 . 2009-08-18 10:24 22240 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2013-12-31 07:11 . 2013-12-31 07:11 178800 ----a-w- c:\windows\SysWow64\CmdLineExt_x64.dll
2013-12-27 18:42 . 2013-11-03 17:53 35104 ----a-w- c:\windows\system32\nvaudcap64v.dll
2013-12-18 16:21 . 2013-05-02 08:45 84720 ----a-w- c:\windows\system32\drivers\avnetflt.sys
2013-12-18 16:21 . 2013-03-28 09:39 131576 ----a-w- c:\windows\system32\drivers\avipbb.sys
2013-12-18 16:21 . 2013-03-28 09:39 108440 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2013-12-18 09:01 . 2014-01-21 16:56 40760 ----a-w- c:\windows\system32\TURegOpt.exe
2013-12-18 09:01 . 2014-01-21 16:56 29496 ----a-w- c:\windows\system32\authuitu.dll
2013-12-18 09:01 . 2014-01-21 16:56 25400 ----a-w- c:\windows\SysWow64\authuitu.dll
2013-12-18 05:13 . 2010-11-21 03:27 270496 ------w- c:\windows\system32\MpSigStub.exe
2013-12-04 03:52 . 2013-12-04 03:52 940032 ----a-w- c:\windows\system32\MsSpellCheckingFacility.exe
2013-12-04 03:52 . 2013-12-04 03:52 194048 ----a-w- c:\windows\SysWow64\elshyph.dll
2013-12-04 03:51 . 2013-12-04 03:51 71680 ----a-w- c:\windows\SysWow64\RegisterIEPKEYs.exe
2013-12-04 03:51 . 2013-12-04 03:51 645120 ----a-w- c:\windows\SysWow64\jsIntl.dll
2013-12-04 03:51 . 2013-12-04 03:51 62464 ----a-w- c:\windows\SysWow64\tdc.ocx
2013-12-04 03:51 . 2013-12-04 03:51 34816 ----a-w- c:\windows\SysWow64\JavaScriptCollectionAgent.dll
2013-12-04 03:51 . 2013-12-04 03:51 337408 ----a-w- c:\windows\SysWow64\html.iec
2013-12-04 03:51 . 2013-12-04 03:51 24576 ----a-w- c:\windows\SysWow64\licmgr10.dll
2013-12-04 03:51 . 2013-12-04 03:51 235008 ----a-w- c:\windows\system32\elshyph.dll
2013-12-04 03:51 . 2013-12-04 03:51 182272 ----a-w- c:\windows\SysWow64\msls31.dll
2013-12-04 03:51 . 2013-12-04 03:51 151552 ----a-w- c:\windows\SysWow64\iexpress.exe
2013-12-04 03:51 . 2013-12-04 03:51 139264 ----a-w- c:\windows\SysWow64\wextract.exe
2013-12-04 03:51 . 2013-12-04 03:51 1051136 ----a-w- c:\windows\SysWow64\mshtmlmedia.dll
2013-12-04 03:51 . 2013-12-04 03:51 942592 ----a-w- c:\windows\system32\jsIntl.dll
2013-12-04 03:51 . 2013-12-04 03:51 90112 ----a-w- c:\windows\system32\SetIEInstalledDate.exe
2013-12-04 03:51 . 2013-12-04 03:51 86016 ----a-w- c:\windows\SysWow64\iesysprep.dll
2013-12-04 03:51 . 2013-12-04 03:51 86016 ----a-w- c:\windows\system32\RegisterIEPKEYs.exe
2013-12-04 03:51 . 2013-12-04 03:51 74240 ----a-w- c:\windows\SysWow64\SetIEInstalledDate.exe
2013-12-04 03:51 . 2013-12-04 03:51 61952 ----a-w- c:\windows\SysWow64\MshtmlDac.dll
2013-12-04 03:51 . 2013-12-04 03:51 52224 ----a-w- c:\windows\system32\msfeedsbs.dll
2013-12-04 03:51 . 2013-12-04 03:51 48640 ----a-w- c:\windows\SysWow64\mshtmler.dll
2013-12-04 03:51 . 2013-12-04 03:51 48640 ----a-w- c:\windows\system32\mshtmler.dll
2013-12-04 03:51 . 2013-12-04 03:51 36352 ----a-w- c:\windows\SysWow64\imgutil.dll
2013-12-04 03:51 . 2013-12-04 03:51 247808 ----a-w- c:\windows\system32\msls31.dll
2013-12-04 03:51 . 2013-12-04 03:51 13312 ----a-w- c:\windows\SysWow64\mshta.exe
2013-12-04 03:51 . 2013-12-04 03:51 13312 ----a-w- c:\windows\system32\msfeedssync.exe
2013-12-04 03:51 . 2013-12-04 03:51 131072 ----a-w- c:\windows\system32\IEAdvpack.dll
2013-12-04 03:51 . 2013-12-04 03:51 111616 ----a-w- c:\windows\SysWow64\IEAdvpack.dll
2013-12-04 03:51 . 2013-12-04 03:51 105984 ----a-w- c:\windows\system32\iesysprep.dll
2013-12-04 03:51 . 2013-12-04 03:51 84992 ----a-w- c:\windows\system32\mshtmled.dll
2013-12-04 03:51 . 2013-12-04 03:51 81408 ----a-w- c:\windows\system32\icardie.dll
2013-12-04 03:51 . 2013-12-04 03:51 77312 ----a-w- c:\windows\system32\tdc.ocx
2013-12-04 03:51 . 2013-12-04 03:51 616104 ----a-w- c:\windows\system32\ieapfltr.dat
2013-12-04 03:51 . 2013-12-04 03:51 453120 ----a-w- c:\windows\system32\dxtmsft.dll
2013-12-04 03:51 . 2013-12-04 03:51 413696 ----a-w- c:\windows\system32\html.iec
2013-12-04 03:51 . 2013-12-04 03:51 40448 ----a-w- c:\windows\system32\JavaScriptCollectionAgent.dll
2013-12-04 03:51 . 2013-12-04 03:51 30208 ----a-w- c:\windows\system32\licmgr10.dll
2013-12-04 03:51 . 2013-12-04 03:51 296960 ----a-w- c:\windows\system32\dxtrans.dll
2013-12-04 03:51 . 2013-12-04 03:51 263376 ----a-w- c:\windows\system32\iedkcs32.dll
2013-12-04 03:51 . 2013-12-04 03:51 243200 ----a-w- c:\windows\system32\webcheck.dll
2013-12-04 03:51 . 2013-12-04 03:51 235520 ----a-w- c:\windows\system32\url.dll
2013-12-04 03:51 . 2013-12-04 03:51 167424 ----a-w- c:\windows\system32\iexpress.exe
2013-12-04 03:51 . 2013-12-04 03:51 147968 ----a-w- c:\windows\system32\occache.dll
2013-12-04 03:51 . 2013-12-04 03:51 143872 ----a-w- c:\windows\system32\wextract.exe
2013-12-04 03:51 . 2013-12-04 03:51 1228800 ----a-w- c:\windows\system32\mshtmlmedia.dll
2013-12-04 03:51 . 2013-12-04 03:51 101376 ----a-w- c:\windows\system32\inseng.dll
2013-12-04 03:51 . 2013-12-04 03:51 83968 ----a-w- c:\windows\system32\MshtmlDac.dll
2013-12-04 03:51 . 2013-12-04 03:51 774144 ----a-w- c:\windows\system32\jscript.dll
2013-12-04 03:51 . 2013-12-04 03:51 62464 ----a-w- c:\windows\system32\pngfilt.dll
2013-12-04 03:51 . 2013-12-04 03:51 48128 ----a-w- c:\windows\system32\imgutil.dll
2013-12-04 03:51 . 2013-12-04 03:51 13824 ----a-w- c:\windows\system32\mshta.exe
2013-12-04 03:51 . 2013-12-04 03:51 135680 ----a-w- c:\windows\system32\iepeers.dll
2013-11-27 01:41 . 2014-01-15 16:35 343040 ----a-w- c:\windows\system32\drivers\usbhub.sys
2013-11-27 01:41 . 2014-01-15 16:35 99840 ----a-w- c:\windows\system32\drivers\usbccgp.sys
2013-11-27 01:41 . 2014-01-15 16:35 53248 ----a-w- c:\windows\system32\drivers\usbehci.sys
2013-11-27 01:41 . 2014-01-15 16:35 325120 ----a-w- c:\windows\system32\drivers\usbport.sys
2013-11-27 01:41 . 2014-01-15 16:35 25600 ----a-w- c:\windows\system32\drivers\usbohci.sys
2013-11-27 01:41 . 2014-01-15 16:35 30720 ----a-w- c:\windows\system32\drivers\usbuhci.sys
2013-11-27 01:41 . 2014-01-15 16:35 7808 ----a-w- c:\windows\system32\drivers\usbd.sys
2013-11-26 16:21 . 2013-03-28 09:39 28600 ----a-w- c:\windows\system32\drivers\avkmgr.sys
2013-11-26 11:40 . 2014-01-15 16:35 376768 ----a-w- c:\windows\system32\drivers\netio.sys
2013-11-26 10:32 . 2014-01-15 16:35 3156480 ----a-w- c:\windows\system32\win32k.sys
.
.
(((((((((((((((((((((((((((( Autostartpunkte der Registrierung ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NextLive"="c:\users\Mistbock\AppData\Roaming\newnext.me\nengine.dll" [2013-11-14 1283584]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"IAStorIcon"="c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe" [2012-09-12 56128]
"avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2014-02-20 689744]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Qualcomm Atheros Killer Network Manager.lnk - c:\program files\Qualcomm Atheros\Killer Network Manager\KillerNetManager.exe -minimized [2012-9-24 553984]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon]
"Userinit"="userinit.exe"
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
"AppInit_DLLs"=c:\windows\SysWOW64\nvinit.dll
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0sdnclean64.exe
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\run-]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe"
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R3 AMPPALP;Intel® Centrino® Wireless Bluetooth® + High Speed Protokoll;c:\windows\system32\DRIVERS\amppal.sys;c:\windows\SYSNATIVE\DRIVERS\amppal.sys [x]
R3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys;c:\windows\SYSNATIVE\drivers\dmvsc.sys [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 MyWiFiDHCPDNS;Wireless PAN DHCP Server;c:\program files\Intel\WiFi\bin\PanDhcpDns.exe;c:\program files\Intel\WiFi\bin\PanDhcpDns.exe [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 Synth3dVsc;Microsoft Virtual 3D Video Transport Driver;c:\windows\system32\drivers\Synth3dVsc.sys;c:\windows\SYSNATIVE\drivers\Synth3dVsc.sys [x]
R3 terminpt;Microsoft Remote Desktop Input Driver;c:\windows\system32\drivers\terminpt.sys;c:\windows\SYSNATIVE\drivers\terminpt.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;%TsUsbGD.DeviceDesc.Generic%;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 tsusbhub;Remote Deskotop USB Hub;c:\windows\system32\drivers\tsusbhub.sys;c:\windows\SYSNATIVE\drivers\tsusbhub.sys [x]
R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys;c:\windows\SYSNATIVE\drivers\rdvgkmd.sys [x]
R4 Qualcomm Atheros Killer Service;Qualcomm Atheros Killer Service;c:\program files\Qualcomm Atheros\Killer Network Manager\BFNService.exe;c:\program files\Qualcomm Atheros\Killer Network Manager\BFNService.exe [x]
S0 iaStorA;iaStorA;c:\windows\system32\DRIVERS\iaStorA.sys;c:\windows\SYSNATIVE\DRIVERS\iaStorA.sys [x]
S0 iaStorF;iaStorF;c:\windows\system32\DRIVERS\iaStorF.sys;c:\windows\SYSNATIVE\DRIVERS\iaStorF.sys [x]
S0 nvpciflt;nvpciflt;c:\windows\system32\DRIVERS\nvpciflt.sys;c:\windows\SYSNATIVE\DRIVERS\nvpciflt.sys [x]
S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys;c:\windows\SYSNATIVE\DRIVERS\avkmgr.sys [x]
S1 BfLwf;Qualcomm Atheros Bandwidth Control;c:\windows\system32\DRIVERS\bflwfx64.sys;c:\windows\SYSNATIVE\DRIVERS\bflwfx64.sys [x]
S2 AMPPALR3;Intel® Centrino® Wireless Bluetooth® + High Speed Service;c:\program files\Intel\BluetoothHS\BTHSAmpPalService.exe;c:\program files\Intel\BluetoothHS\BTHSAmpPalService.exe [x]
S2 AntiVirSchedulerService;Avira Planer;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [x]
S2 BTHSSecurityMgr;Intel(R) Centrino(R) Wireless Bluetooth(R) + High Speed Security Service;c:\program files\Intel\BluetoothHS\BTHSSecurityMgr.exe;c:\program files\Intel\BluetoothHS\BTHSSecurityMgr.exe [x]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage-Technologie;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [x]
S2 NvNetworkService;NVIDIA Network Service;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [x]
S2 NvStreamSvc;NVIDIA Streamer Service;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [x]
S2 TuneUp.UtilitiesSvc;TuneUp Utilities Service;c:\program files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe;c:\program files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe [x]
S2 ZeroConfigService;Intel(R) PROSet/Wireless Zero Configuration Service;c:\program files\Intel\WiFi\bin\ZeroConfigService.exe;c:\program files\Intel\WiFi\bin\ZeroConfigService.exe [x]
S3 AMPPAL;Intel® Centrino® Wireless Bluetooth® + High Speed - Virtueller Adapter;c:\windows\system32\DRIVERS\AMPPAL.sys;c:\windows\SYSNATIVE\DRIVERS\AMPPAL.sys [x]
S3 L1C;NDIS Miniport Driver for the Killer e2200 PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\e22w7x64.sys;c:\windows\SYSNATIVE\DRIVERS\e22w7x64.sys [x]
S3 MBfilt;MBfilt;c:\windows\system32\drivers\MBfilt64.sys;c:\windows\SYSNATIVE\drivers\MBfilt64.sys [x]
S3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);c:\windows\system32\drivers\nvvad64v.sys;c:\windows\SYSNATIVE\drivers\nvvad64v.sys [x]
S3 RSPCIESTOR;Realtek PCIE CardReader Driver;c:\windows\system32\DRIVERS\RtsPStor.sys;c:\windows\SYSNATIVE\DRIVERS\RtsPStor.sys [x]
S3 SaiK1713;SaiK1713;c:\windows\system32\DRIVERS\SaiK1713.sys;c:\windows\SYSNATIVE\DRIVERS\SaiK1713.sys [x]
S3 SaiU1713;SaiU1713;c:\windows\system32\DRIVERS\SaiU1713.sys;c:\windows\SYSNATIVE\DRIVERS\SaiU1713.sys [x]
S3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesDriver64.sys;c:\program files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesDriver64.sys [x]
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{2D46B6DC-2207-486B-B523-A557E6D54B47}]
start [BU]
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2014-02-06 16:54 1211720 ----a-w- c:\program files (x86)\Google\Chrome\Application\32.0.1700.107\Installer\chrmstp.exe
.
Inhalt des "geplante Tasks" Ordners
.
2014-02-21 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-03-23 14:37]
.
2014-02-21 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-09-24 13:15]
.
2014-02-21 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-09-24 13:15]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IntelPROSet"="c:\program files\Common Files\Intel\WirelessCommon\iFrmewrk.exe" [2012-08-23 4805936]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2012-09-07 170304]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2012-09-07 398656]
"Persistence"="c:\windows\system32\igfxpers.exe" [2012-09-07 441152]
"SynTPEnh"="c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe" [BU]
"ProfilerU"="c:\program files\SmartTechnology\Software\ProfilerU.exe" [2012-10-15 454144]
"SaiMfd"="c:\program files\SmartTechnology\Software\SaiMfd.exe" [2012-10-15 158208]
"RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2012-07-13 12936848]
"ShadowPlay"="c:\windows\system32\nvspcap64.dll" [2014-02-05 1179576]
"NvBackend"="c:\program files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe" [2014-02-05 2234144]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=c:\windows\System32\nvinitx.dll c:\windows\System32\nvinitx.dll c:\windows\System32\nvinitx.dll
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://feed.snapdo.com/?publisher=SnapdoGOblidooYB&dpid=GOB1&co=DE&userid=e493f8e2-54b5-0665-75e6-b2712c00c35f&searchtype=hp&installDate=09/11/2013
mLocal Page = c:\windows\SysWOW64\blank.htm
uSearchAssistant = hxxp://feed.snapdo.com/?publisher=SnapdoGOblidooYB&dpid=GOB1&co=DE&userid=e493f8e2-54b5-0665-75e6-b2712c00c35f&searchtype=ds&q={searchTerms}&installDate=09/11/2013
LSP: %SYSTEMROOT%\system32\BfLLR.dll
TCP: DhcpNameServer = 62.109.121.1 192.168.0.1
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
BHO-{1631550F-191D-4826-B069-D9439253D926} - (no file)
HKLM-Run-Nvtmru - c:\program files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_USERS\S-1-5-21-2766162317-1668784963-1924048694-1000\Software\SecuROM\License information*]
"datasecu"=hex:bd,ad,1d,a2,50,5e,7a,e5,ac,f0,42,e3,b7,a4,e9,93,05,53,cb,52,5c,
62,1c,0a,db,e8,ec,0e,69,ba,cd,4a,7f,f8,cf,23,0a,b0,2e,dd,7a,35,f9,c1,6b,bb,\
"rkeysecu"=hex:da,04,22,a1,89,d6,53,59,c4,3d,0f,95,03,e8,17,a1
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_12_0_0_70_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_12_0_0_70_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_12_0_0_70_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_12_0_0_70_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_70.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.12"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_70.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_70.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_70.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*1*]
@="?????????????????? v1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*1*\CLSID]
@="{E23FE9C6-778E-49D4-B537-38FCDE4887D8}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*2*]
@="?????????????????? v2"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*2*\CLSID]
@="{9BE31822-FDAD-461B-AD51-BE1D1C159921}"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2014-02-21 19:58:56
ComboFix-quarantined-files.txt 2014-02-21 18:58
.
Vor Suchlauf: 11 Verzeichnis(se), 100.643.966.976 Bytes frei
Nach Suchlauf: 12 Verzeichnis(se), 100.685.299.712 Bytes frei
.
- - End Of File - - 081FC72CFF2D4B5F85D2607022435D08 |