Trojaner-Board - Binaries C:\Programme\Gemeinsame Dateien\MSSoap

C:\WINDOWS\PCHealth\UploadLB
C:\WINDOWS\PCHealth\HelpCtr
C:\Programme\Gemeinsame Dateien\MSSoap
Alles in einem Binaries Ordner
Wind XP Professional

Hallo
mein Rechner wird immer langsammer. bekomme jede Menge Spam.
Habe vor 3 Wochen alles neu Aufgespielt wegen Trojahner in Root Datei, der sich nicht entfernen lies.
Habe heute Combofix laufen lassen, wie im Forum beschrieben
Dies ist das Ergebnis.
Kann mir jemand sagen ob dort was faul ist?
Bin Dankbar für Eure Hilfe
"UHSER" - 2007-07-09 14:57:06 - ComboFix 07-07-09.3 - Service Pack 2

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))

C:\DOKUME~1\UHSER\Desktop.\internet explorer.lnk

((((((((((((((((((((((((( Files Created from 2007-06-09 to 2007-07-09 )))))))))))))))))))))))))))))))

2007-07-09 14:55 51,200 --a------ C:\WINDOWS\nircmd.exe
2007-07-09 13:37 29,704 --a------ C:\WINDOWS\system32\uxtuneup.dll
2007-07-09 13:36 <DIR> d-------- C:\Programme\TuneUp Utilities 2007
2007-07-09 13:36 <DIR> d-------- C:\Programme\Gemeinsame Dateien\Wise Installation Wizard
2007-07-09 13:36 <DIR> d-------- C:\DOKUME~1\UHSER\ANWEND~1\TuneUp Software
2007-07-09 13:36 <DIR> d-------- C:\DOKUME~1\ALLUSE~1\ANWEND~1\TuneUp Software
2007-07-09 12:06 <DIR> d-------- C:\Programme\MSXML 4.0
2007-07-08 16:54 51,072 --a------ C:\WINDOWS\system32\drivers\ikhlayer.sys
2007-07-08 16:54 30,592 --a------ C:\WINDOWS\system32\drivers\ikhfile.sys
2007-07-08 16:54 <DIR> d-------- C:\Programme\Spyware Doctor
2007-07-08 12:15 82,432 --a------ C:\WINDOWS\system32\msxml4r.dll
2007-07-08 12:15 44,544 --a------ C:\WINDOWS\system32\msxml4a.dll
2007-07-08 12:15 120,200 --a------ C:\WINDOWS\system32\DLLDEV32i.dll
2007-07-08 12:15 <DIR> d-------- C:\Programme\Gemeinsame Dateien\MAGIX Shared
2007-07-08 12:15 <DIR> d-------- C:\DOKUME~1\ALLUSE~1\ANWEND~1\MAGIX
2007-07-08 12:14 667,648 --a------ C:\WINDOWS\system32\mgxoschk.dll
2007-07-08 12:14 <DIR> d-------- C:\WINDOWS\system32\MAGIX
2007-07-07 19:37 <DIR> d-------- C:\DOKUME~1\UHSER\ANWEND~1\Talkback
2007-07-07 18:08 <DIR> d-------- C:\Programme\Mozilla Thunderbird
2007-07-07 17:29 <DIR> d-------- C:\Programme\Windows Live Safety Center
2007-07-07 14:46 <DIR> d-------- C:\DOKUME~1\UHSER\ANWEND~1\Thunderbird
2007-07-07 14:01 <DIR> d-------- C:\DOKUME~1\UHSER\ANWEND~1\SPAMfighter
2007-07-06 18:01 43,520 --a------ C:\WINDOWS\system32\CmdLineExt03.dll
2007-07-04 23:45 <DIR> d--h----- C:\WINDOWS\system32\GroupPolicy
2007-07-04 23:19 <DIR> d-------- C:\DOKUME~1\UHSER\ANWEND~1\MSN6
2007-07-04 23:19 <DIR> d-------- C:\DOKUME~1\ALLUSE~1\ANWEND~1\MSN6
2007-07-04 20:49 <DIR> d-------- C:\CompChecker
2007-07-04 14:22 1,184,400 --a------ C:\WINDOWS\system32\FreeImage.dll
2007-07-01 18:02 17,920 --a------ C:\DOKUME~1\UHSER\ANWEND~1\GDIPFONTCACHEV1.DAT
2007-07-01 17:39 <DIR> d-------- C:\DOKUME~1\UHSER\ANWEND~1\U3
2007-06-28 23:05 1,140 --a------ C:\WINDOWS\mozver.dat
2007-06-27 22:44 <DIR> d-------- C:\DOKUME~1\UHSER\ANWEND~1\WinRAR
2007-06-26 12:35 <DIR> d-------- C:\Programme\Privacy Guardian
2007-06-25 21:34 271,224 --a------ C:\WINDOWS\system32\mucltui.dll
2007-06-25 17:17 <DIR> d-------- C:\Programme\Windows Media Connect 2
2007-06-25 17:15 <DIR> d-------- C:\WINDOWS\system32\LogFiles
2007-06-25 17:15 <DIR> d-------- C:\WINDOWS\system32\drivers\UMDF
2007-06-25 15:54 0 --a------ C:\WINDOWS\nsreg.dat
2007-06-25 14:53 <DIR> d-------- C:\DOKUME~1\UHSER\ANWEND~1\XnView
2007-06-25 13:38 <DIR> d-------- C:\Programme\XnView
2007-06-25 12:48 <DIR> d-------- C:\DOKUME~1\UHSER\ANWEND~1\Google
2007-06-25 12:46 499,712 --a------ C:\WINDOWS\system32\msvcp71.dll
2007-06-25 12:46 348,160 --a------ C:\WINDOWS\system32\msvcr71.dll
2007-06-25 12:46 <DIR> d-a------ C:\DOKUME~1\ALLUSE~1\ANWEND~1\TEMP
2007-06-25 12:46 <DIR> d-------- C:\Programme\Google
2007-06-25 12:46 <DIR> d-------- C:\DOKUME~1\UHSER\ANWEND~1\PC Tools
2007-06-25 12:46 <DIR> d-------- C:\DOKUME~1\ALLUSE~1\ANWEND~1\Google
2007-06-25 12:32 <DIR> d-------- C:\DOKUME~1\UHSER\ANWEND~1\Hewlett-Packard
2007-06-25 12:31 31,616 --a------ C:\WINDOWS\system32\drivers\usbccgp.sys
2007-06-25 12:31 25,856 --a------ C:\WINDOWS\system32\drivers\usbprint.sys
2007-06-25 12:31 15,104 --a------ C:\WINDOWS\system32\drivers\usbscan.sys
2007-06-25 12:30 <DIR> d-------- C:\Programme\Hewlett-Packard
2007-06-25 12:30 <DIR> d-------- C:\Programme\Gemeinsame Dateien\Hewlett-Packard
2007-06-25 12:28 19,554 --a------ C:\WINDOWS\hpoins01.dat
2007-06-25 12:28 16,606 --------- C:\WINDOWS\hpomdl01.dat
2007-06-25 12:26 <DIR> d-------- C:\temp\HP All-in-One Series Web Release
2007-06-25 12:26 <DIR> d-------- C:\temp
2007-06-25 12:23 5,504 --------- C:\WINDOWS\system32\drivers\imagedrv.sys
2007-06-25 12:23 125,184 --------- C:\WINDOWS\system32\drivers\imagesrv.sys
2007-06-25 12:22 476,320 --------- C:\WINDOWS\system32\ImagXpr7.dll
2007-06-25 12:22 471,040 --------- C:\WINDOWS\system32\ImagXRA7.dll
2007-06-25 12:22 38,912 --------- C:\WINDOWS\system32\picn20.dll
2007-06-25 12:22 364,544 --------- C:\WINDOWS\system32\TwnLib4.dll
2007-06-25 12:22 262,144 --------- C:\WINDOWS\system32\ImagXR7.dll
2007-06-25 12:22 155,648 --a------ C:\WINDOWS\system32\NeroCheck.exe
2007-06-25 12:22 106,496 --a------ C:\WINDOWS\system32\TwnLib20.dll
2007-06-25 12:22 1,568,768 --------- C:\WINDOWS\system32\ImagX7.dll
2007-06-25 12:22 <DIR> d-------- C:\Programme\Gemeinsame Dateien\Ahead
2007-06-25 12:22 <DIR> d-------- C:\Programme\Ahead
2007-06-25 12:04 <DIR> d--hs---- C:\RECYCLER
2007-06-25 03:04 <DIR> d-------- C:\Programme\Kaspersky Lab
2007-06-25 03:04 <DIR> d-------- C:\DOKUME~1\ALLUSE~1\ANWEND~1\Kaspersky Anti-Virus Personal Pro
2007-06-25 02:42 <DIR> d-------- C:\WINDOWS\ShellNew
2007-06-25 02:38 155,648 --a------ C:\WINDOWS\system32\igfxres.dll
2007-06-25 02:37 <DIR> dr-hsc--- C:\WINDOWS\system32\dllcache
2007-06-25 02:37 <DIR> dr--s---- C:\WINDOWS\Fonts
2007-06-25 02:37 <DIR> dr------- C:\WINDOWS\Web
2007-06-25 02:37 <DIR> d--h----- C:\WINDOWS\inf
2007-06-25 02:37 <DIR> d-------- C:\WINDOWS\WinSxS
2007-06-25 02:37 <DIR> d-------- C:\WINDOWS\twain_32
2007-06-25 02:37 <DIR> d-------- C:\WINDOWS\system32\wins
2007-06-25 02:37 <DIR> d-------- C:\WINDOWS\system32\wbem
2007-06-25 02:37 <DIR> d-------- C:\WINDOWS\system32\usmt
2007-06-25 02:37 <DIR> d-------- C:\WINDOWS\system32\spool
2007-06-25 02:37 <DIR> d-------- C:\WINDOWS\system32\ShellExt
2007-06-25 02:37 <DIR> d-------- C:\WINDOWS\system32\Setup
2007-06-25 02:37 <DIR> d-------- C:\WINDOWS\system32\ras
2007-06-25 02:37 <DIR> d-------- C:\WINDOWS\system32\oobe
2007-06-25 02:37 <DIR> d-------- C:\WINDOWS\system32\npp
2007-06-25 02:37 <DIR> d-------- C:\WINDOWS\system32\mui
2007-06-25 02:37 <DIR> d-------- C:\WINDOWS\system32\inetsrv
2007-06-25 02:37 <DIR> d-------- C:\WINDOWS\system32\IME
2007-06-25 02:37 <DIR> d-------- C:\WINDOWS\system32\icsxml
2007-06-25 02:37 <DIR> d-------- C:\WINDOWS\system32\ias
2007-06-25 02:37 <DIR> d-------- C:\WINDOWS\system32\export
2007-06-25 02:37 <DIR> d-------- C:\WINDOWS\system32\drivers\etc
2007-06-25 02:37 <DIR> d-------- C:\WINDOWS\system32\drivers\disdn
2007-06-25 02:37 <DIR> d-------- C:\WINDOWS\system32\drivers
2007-06-25 02:37 <DIR> d-------- C:\WINDOWS\system32\dhcp
2007-06-25 02:37 <DIR> d-------- C:\WINDOWS\system32\config

(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))

2007-06-25 00:09:18 48,156 ----a-w C:\WINDOWS\system32\perfc007.dat
2007-06-25 00:09:18 316,594 ----a-w C:\WINDOWS\system32\perfh007.dat
2007-04-25 14:22:27 144,896 ----a-w C:\WINDOWS\system32\schannel.dll
2007-04-18 16:13:24 2,854,400 ----a-w C:\WINDOWS\system32\msi.dll
2007-04-16 20:45:28 92,504 ----a-w C:\WINDOWS\system32\cdm.dll
2007-04-16 20:43:44 203,096 ----a-w C:\WINDOWS\system32\wuweb.dll
2007-04-16 20:43:40 208,248 ----a-w C:\WINDOWS\system32\muweb.dll

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))

*Note* empty entries & legit default entries are not shown

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
2006-10-22 23:08 62080 --a------ C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelper.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB}]
2006-08-01 15:27 825528 --a------ C:\PROGRA~1\SPYWAR~1\tools\iesdsg.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
2007-01-19 23:55 2427968 -ra------ c:\programme\google\googletoolbar2.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{B56A7D7D-6927-48C8-A975-17DF180C71AC}]
2006-08-01 15:23 850104 --a------ C:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Adobe Reader Speed Launcher"="C:\Programme\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2007-05-11 03:06]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"swg"="C:\Programme\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe" [2007-06-25 12:48]
"Spyware Doctor"="C:\Programme\Spyware Doctor\swdoctor.exe" [2006-12-11 15:35]
"TuneUp MemOptimizer"="C:\Programme\TuneUp Utilities 2007\MemOptimizer.exe" [2007-04-26 20:08]

[HKEY_USERS\.default\software\microsoft\windows\currentversion\run]
"Spyware Doctor"="C:\Programme\Spyware Doctor\swdoctor.exe" /Q

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoLowDiskSpaceChecks"=1 (0x1)

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"MSMSGS"="C:\Programme\Messenger\MSMSGS.EXE" /background
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"SoundMan"=SOUNDMAN.EXE
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe
"ASUS Probe"=C:\Program Files\ASUS\Probe\AsusProb.exe
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Svchost - netsvcs
UxTuneUp

Contents of the 'Scheduled Tasks' folder
2007-07-09 12:02:10 C:\WINDOWS\tasks\1-Klick-Wartung.job
2007-06-25 10:32:28 C:\WINDOWS\tasks\FRU Task #Hewlett-Packard#hp officejet 6100 series#1182767517.job
2007-06-25 10:33:24 C:\WINDOWS\tasks\WebReg 20070625123324.job

**************************************************************************

catchme 0.3.915 W2K/XP/Vista - rootkit detector by Gmer, http://www.gmer.net
Rootkit scan 2007-07-09 15:01:03
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

**************************************************************************

Completion time: 2007-07-09 15:03:34
C:\ComboFix-quarantined-files.txt ... 2007-07-09 15:02

--- E O F ---