Code:
ComboFix 11-03-06.06 - ****** 07.03.2011 16:14:00.1.4 - x86
Microsoft Windows 7 Ultimate 6.1.7600.0.1252.49.1031.18.3575.2494 [GMT 1:00]
ausgeführt von:: c:\users\******\Desktop\ComboFix.exe
AV: AntiVir Desktop *Enabled/Updated* {090F9C29-64CE-6C6F-379C-5901B49A85B7}
SP: AntiVir Desktop *Enabled/Updated* {B26E7DCD-42F4-63E1-0D2C-6273CF1DCF0A}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Neuer Wiederherstellungspunkt wurde erstellt
.
.
(((((((((((((((((((((((((((((((((((( Weitere Löschungen ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\******\76561201696194287
c:\users\******\76561201696194287\profile.dat
c:\users\******\76561201696194287\sav1.dat
c:\users\******\76561201696194287\sav100.dat
c:\users\******\76561201696194287\sav1000.dat
c:\users\******\76561201696194287\sav1100.dat
c:\users\******\76561201696194287\sav1200.dat
c:\users\******\76561201696194287\sav1300.dat
c:\users\******\76561201696194287\sav1400.dat
c:\users\******\76561201696194287\sav1500.dat
c:\users\******\76561201696194287\sav2.dat
c:\users\******\76561201696194287\sav200.dat
c:\users\******\76561201696194287\sav300.dat
c:\users\******\76561201696194287\sav400.dat
c:\users\******\76561201696194287\sav500.dat
c:\users\******\76561201696194287\sav600.dat
c:\users\******\76561201696194287\sav700.dat
c:\users\******\76561201696194287\sav800.dat
c:\users\******\76561201696194287\sav900.dat
c:\windows\system32\LogFiles\AIT\AitEventLog.etl.001
c:\windows\system32\LogFiles\AIT\AitEventLog.etl.002
c:\windows\system32\LogFiles\AIT\AitEventLog.etl.003
c:\windows\system32\LogFiles\AIT\AitEventLog.etl.004
c:\windows\system32\LogFiles\AIT\AitEventLog.etl.005
c:\windows\system32\LogFiles\Scm\02274e12-0161-43e3-8027-f9c1fac365b6
c:\windows\system32\LogFiles\Scm\05ee699f-ab25-42d8-8781-558c5d1d2fad
c:\windows\system32\LogFiles\Scm\071d41b6-8806-4eb0-b661-6cb67be6e86e
c:\windows\system32\LogFiles\Scm\0ab44259-d375-4415-b556-495fa30eb7ed
c:\windows\system32\LogFiles\Scm\0d9b5d92-3a22-486d-a887-3aa21597cf27
c:\windows\system32\LogFiles\Scm\0e12083c-0335-49db-9542-ba1ec6d83ecc
c:\windows\system32\LogFiles\Scm\125cf7c3-8112-40dc-9cff-a4869768d13c
c:\windows\system32\LogFiles\Scm\18e6d428-d26c-4169-bedf-3b5bddc952f6
c:\windows\system32\LogFiles\Scm\1a34a9c0-1c67-4f5c-88a1-fe0a345904f2
c:\windows\system32\LogFiles\Scm\1ec9510d-a439-4950-9399-b6399edf9ea7
c:\windows\system32\LogFiles\Scm\2375f586-1009-41fb-b54e-30d8af2b781d
c:\windows\system32\LogFiles\Scm\24fa84a0-e087-48ec-bc51-2b9c4c815d78
c:\windows\system32\LogFiles\Scm\254b1942-83aa-4327-82f7-65c73d59401e
c:\windows\system32\LogFiles\Scm\2bd05ba6-988d-4bd3-a9cd-9a39f80af524
c:\windows\system32\LogFiles\Scm\2c59ecaf-3a27-4640-9f4b-519b05bdd70f
c:\windows\system32\LogFiles\Scm\31e72d3a-64e3-404b-84e4-1bd4a94b0b97
c:\windows\system32\LogFiles\Scm\367f930a-a3db-4112-b1f1-50e92a171c88
c:\windows\system32\LogFiles\Scm\39e244ba-43a7-4cc9-b896-291feafc8bc0
c:\windows\system32\LogFiles\Scm\4040e761-8758-4007-b2fe-142b24bf4b16
c:\windows\system32\LogFiles\Scm\473d20be-f782-4f4d-86d3-ceb57baf6970
c:\windows\system32\LogFiles\Scm\4991877e-eae5-44c0-8d42-8dcc3f49f852
c:\windows\system32\LogFiles\Scm\4b6d1409-05f3-4443-9086-a94cc7f93c50
c:\windows\system32\LogFiles\Scm\50fb5a03-0e1e-48de-b8a1-bee9d7d2cd0f
c:\windows\system32\LogFiles\Scm\5b184694-64c3-4633-94c5-945b3fa561d6
c:\windows\system32\LogFiles\Scm\5c2c622f-70e9-4194-a7da-033e827365ad
c:\windows\system32\LogFiles\Scm\60158c7a-6808-42cd-95ee-afd9a57925db
c:\windows\system32\LogFiles\Scm\631e5598-5a9b-4fa7-a049-3acabe9a3e16
c:\windows\system32\LogFiles\Scm\6375cc1c-d975-48d2-9cd5-63db19b10d4a
c:\windows\system32\LogFiles\Scm\6aef0c98-2cb4-4b67-8c70-4c977c7355cc
c:\windows\system32\LogFiles\Scm\6b7ac694-8d6d-481b-9dd8-2a3a741ada6d
c:\windows\system32\LogFiles\Scm\6f8b4bba-e267-4bec-ac0c-3440391f819a
c:\windows\system32\LogFiles\Scm\71d13eef-c8a5-4cb1-a582-fe7e2759298b
c:\windows\system32\LogFiles\Scm\731e9c62-95b5-4c8c-ab64-4cc591c9ff5b
c:\windows\system32\LogFiles\Scm\73259f86-29d6-42ff-b1e7-634f6e40d4f8
c:\windows\system32\LogFiles\Scm\7d3c7871-a917-4ef0-82e8-5f0a96423051
c:\windows\system32\LogFiles\Scm\82928824-63c5-4ba6-9148-71d2c5607cb2
c:\windows\system32\LogFiles\Scm\83e9ecfa-c0fb-4ddb-b93a-b6a7db7a1c53
c:\windows\system32\LogFiles\Scm\8905ecd8-016f-4dc2-90e6-a5f1fa6a841a
c:\windows\system32\LogFiles\Scm\9334c323-f100-4656-9ba0-e4aa69c0f9c2
c:\windows\system32\LogFiles\Scm\9b75c702-ea13-406a-badb-6c588ee4375b
c:\windows\system32\LogFiles\Scm\9efacbe6-a797-4905-a0c6-014cd3000dbb
c:\windows\system32\LogFiles\Scm\9f332b2d-4704-4583-b530-67e7fcbd0a69
c:\windows\system32\LogFiles\Scm\9f54b95f-5096-4803-ae61-e9b3ac5b616d
c:\windows\system32\LogFiles\Scm\a1cfa52f-06f2-418d-addb-cd6456d66f43
c:\windows\system32\LogFiles\Scm\a2cfb6f3-b3ae-4971-8e29-c415be22d2e5
c:\windows\system32\LogFiles\Scm\a316e645-1c56-45a6-bd6a-7dca79778090
c:\windows\system32\LogFiles\Scm\a41ec5a1-8b46-4879-97f8-c87f73b34fa5
c:\windows\system32\LogFiles\Scm\a486a59d-1c1a-4650-b6cb-c9ae8769cb14
c:\windows\system32\LogFiles\Scm\a6394592-54ce-4e93-8d64-1a068f462632
c:\windows\system32\LogFiles\Scm\aa0fd919-195c-48cf-ae73-2f78a8a51b8c
c:\windows\system32\LogFiles\Scm\ab771a9f-fb0f-4fa1-8b5f-48186615901e
c:\windows\system32\LogFiles\Scm\abfbbbc8-f019-45e7-8c26-68e4125023ea
c:\windows\system32\LogFiles\Scm\b8dd6e0e-37f1-40de-8f4d-2ea6e71509f8
c:\windows\system32\LogFiles\Scm\bb6592a1-62e9-4f1a-a705-bb170d7b1696
c:\windows\system32\LogFiles\Scm\bba67ad0-4ba0-4b44-827b-ff419b70c057
c:\windows\system32\LogFiles\Scm\c8795fa0-c618-497d-83ec-bd88294c394c
c:\windows\system32\LogFiles\Scm\c90440a0-6d8f-423f-8f42-83eef05ce708
c:\windows\system32\LogFiles\Scm\cc76f254-6573-4d4f-86e5-c2ea61b4f742
c:\windows\system32\LogFiles\Scm\ce694c4a-d962-4bfb-9ef1-7e1c181a4cf2
c:\windows\system32\LogFiles\Scm\cf475db7-5bc8-457e-8528-d2cdc238c36b
c:\windows\system32\LogFiles\Scm\d202a3c0-b7ce-4ff4-8bf9-54e17cc9bb01
c:\windows\system32\LogFiles\Scm\d21f6024-191f-4454-bbbc-09a650da2549
c:\windows\system32\LogFiles\Scm\d622195c-d680-4fea-9c56-59660c7c9e94
c:\windows\system32\LogFiles\Scm\d8bb5b7f-d0ca-4f67-a3d7-73e1d05f63da
c:\windows\system32\LogFiles\Scm\de8699d2-8a05-42f7-8a85-5162af47d26a
c:\windows\system32\LogFiles\Scm\de8bae53-2809-4f75-85ef-427d364b9b2c
c:\windows\system32\LogFiles\Scm\e35da5fe-20af-482d-86ba-71b2c0d83f6c
c:\windows\system32\LogFiles\Scm\e40bfc3b-a840-4eb2-9b58-6d86510ee608
c:\windows\system32\LogFiles\Scm\e6f3a527-8b0b-43fa-94eb-584032761924
c:\windows\system32\LogFiles\Scm\e79b2998-8f63-451a-a56d-26edc0a5098a
c:\windows\system32\LogFiles\Scm\e8164c0d-216c-4b6b-9eb8-31bf958b8014
c:\windows\system32\LogFiles\Scm\eb3cdad9-5f96-4aec-b57f-1b4e9f3d53e2
c:\windows\system32\LogFiles\Scm\ec1a8c35-fad0-4969-af3e-ed3bb1301301
c:\windows\system32\LogFiles\Scm\f1369a11-e983-4458-b390-712efa1cba44
c:\windows\system32\LogFiles\Scm\f681bbdb-efff-4d08-9a96-e5cefc0cf370
c:\windows\system32\LogFiles\Scm\f93c7104-998a-4a38-b935-775a3138b3c3
c:\windows\system32\LogFiles\Scm\ffb8486a-9861-4b82-be38-c7f8fb1b6605
c:\windows\system32\LogFiles\Scm\SCM.EVM
c:\windows\system32\LogFiles\Scm\SCM.EVM.1
c:\windows\system32\LogFiles\Scm\SCM.EVM.2
c:\windows\system32\LogFiles\Scm\SCM.EVM.3
c:\windows\system32\LogFiles\Scm\SCM.EVM.4
c:\windows\system32\LogFiles\Scm\SCM.EVM.5
c:\windows\system32\LogFiles\WMI\Terminal-Services-Core.etl
c:\windows\system32\LogFiles\WMI\Terminal-Services-IP-Virtualization.etl
c:\windows\system32\LogFiles\WMI\Terminal-Services-RPC-Client.etl
c:\windows\system32\LogFiles\WMI\Terminal-Services-Unified-APIs.etl
.
.
((((((((((((((((((((((( Dateien erstellt von 2011-02-07 bis 2011-03-07 ))))))))))))))))))))))))))))))
.
.
2011-03-07 15:16 . 2011-03-07 15:16 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-03-07 13:33 . 2011-03-07 13:33 -------- d-----w- c:\programdata\Avira
2011-03-07 13:33 . 2011-03-07 13:33 -------- d-----w- c:\program files\Avira
2011-03-07 13:33 . 2011-01-10 13:23 135096 ----a-w- c:\windows\system32\drivers\avipbb.sys
2011-03-07 13:33 . 2011-01-10 13:23 61960 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2011-03-07 07:00 . 2011-03-07 07:00 -------- d-----w- c:\program files\CCleaner
2011-03-07 06:59 . 2011-03-07 07:00 -------- d-----w- c:\program files\Google
2011-03-06 15:02 . 2011-03-06 15:02 -------- d-----w- c:\programdata\Electronic Arts
2011-03-06 15:02 . 2011-03-06 15:02 -------- d-----w- c:\programdata\EA Core
2011-03-06 04:34 . 2010-06-02 03:55 74072 ----a-w- c:\windows\system32\XAPOFX1_5.dll
2011-03-06 04:34 . 2010-06-02 03:55 527192 ----a-w- c:\windows\system32\XAudio2_7.dll
2011-03-06 04:34 . 2010-06-02 03:55 239960 ----a-w- c:\windows\system32\xactengine3_7.dll
2011-03-06 04:34 . 2010-05-26 10:41 470880 ----a-w- c:\windows\system32\d3dx10_43.dll
2011-03-06 04:34 . 2010-05-26 10:41 248672 ----a-w- c:\windows\system32\d3dx11_43.dll
2011-03-06 04:34 . 2010-05-26 10:41 2106216 ----a-w- c:\windows\system32\D3DCompiler_43.dll
2011-03-06 04:34 . 2010-05-26 10:41 1998168 ----a-w- c:\windows\system32\D3DX9_43.dll
2011-03-06 04:34 . 2010-05-26 10:41 1868128 ----a-w- c:\windows\system32\d3dcsx_43.dll
2011-02-27 22:22 . 1998-10-29 15:45 306688 ----a-w- c:\windows\IsUninst.exe
2011-02-27 19:37 . 2011-02-27 19:37 -------- d-----w- c:\programdata\Pamela
2011-02-27 19:37 . 2011-02-27 19:37 162304 ----a-w- c:\windows\system32\RemoteControl.dll
2011-02-25 20:31 . 2011-02-25 20:31 -------- d-----w- c:\program files\directx
2011-02-24 18:07 . 1998-10-21 17:43 328704 ----a-w- c:\windows\IsUn0407.exe
2011-02-23 20:58 . 2011-02-23 20:58 -------- d-----w- c:\program files\Common Files\Java
2011-02-23 20:57 . 2011-02-23 20:57 472808 ----a-w- c:\windows\system32\deployJava1.dll
2011-02-23 16:42 . 2011-02-23 16:42 709456 ----a-w- c:\windows\isRS-000.tmp
2011-02-22 17:03 . 2010-08-19 18:24 61984 ----a-w- c:\windows\system32\drivers\xusb21.sys
2011-02-22 17:03 . 2010-08-19 18:24 255496 ----a-w- c:\windows\system32\MijFrc.dll
2011-02-22 17:03 . 2010-08-19 18:24 1461992 ----a-w- c:\windows\system32\WdfCoInstaller01009.dll
2011-02-22 17:03 . 2011-01-01 09:12 81168 ----a-w- c:\windows\system32\drivers\MijXfilt.sys
2011-02-22 16:44 . 2011-02-02 16:10 5890896 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{4DED0EA0-1D21-48D0-BC5E-3C629511BE45}\mpengine.dll
2011-02-22 15:06 . 2008-07-12 07:18 3851784 ----a-w- c:\windows\system32\D3DX9_39.dll
2011-02-22 14:51 . 2011-02-22 14:51 -------- d-----w- c:\program files\Microsoft Silverlight
2011-02-22 13:47 . 2011-02-22 13:47 -------- d-----w- c:\program files\NVIDIA Corporation
2011-02-22 13:46 . 2009-09-04 16:29 453456 ----a-w- c:\windows\system32\d3dx10_42.dll
2011-02-22 13:46 . 2009-09-04 16:29 1892184 ----a-w- c:\windows\system32\D3DX9_42.dll
2011-02-22 13:42 . 2011-02-22 13:42 218688 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys
2011-02-22 13:39 . 2011-02-22 13:41 -------- d-----w- c:\programdata\DAEMON Tools Lite
2011-02-22 13:29 . 2010-12-20 17:09 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2011-02-22 13:29 . 2011-02-22 13:29 -------- d-----w- c:\programdata\Malwarebytes
2011-02-22 13:29 . 2010-12-20 17:08 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-02-22 12:58 . 2011-03-07 07:03 -------- d-----w- c:\programdata\Spybot - Search & Destroy
2011-02-22 12:47 . 2011-02-22 12:47 -------- d-----w- c:\program files\Vstplugins
2011-02-22 12:46 . 2011-02-22 12:46 -------- d-----w- c:\programdata\Sony
2011-02-22 06:38 . 2011-02-22 06:38 86016 ----a-w- c:\windows\system32\frapsvid.dll
2011-02-22 02:32 . 2009-11-25 11:47 99176 ----a-w- c:\windows\system32\PresentationHostProxy.dll
2011-02-22 02:32 . 2009-11-25 11:47 49472 ----a-w- c:\windows\system32\netfxperf.dll
2011-02-22 02:32 . 2009-11-25 11:47 297808 ----a-w- c:\windows\system32\mscoree.dll
2011-02-22 02:32 . 2009-11-25 11:47 295264 ----a-w- c:\windows\system32\PresentationHost.exe
2011-02-22 02:32 . 2009-11-25 11:47 1130824 ----a-w- c:\windows\system32\dfshim.dll
2011-02-22 02:28 . 2010-02-11 07:10 293376 ----a-w- c:\windows\system32\browserchoice.exe
2011-02-22 02:10 . 2010-06-29 05:02 1413632 ----a-w- c:\windows\system32\ole32.dll
2011-02-22 02:10 . 2010-06-29 04:57 4247040 ----a-w- c:\program files\Windows NT\Accessories\wordpad.exe
2011-02-22 02:10 . 2010-06-14 06:12 1286016 ----a-w- c:\windows\system32\drivers\tcpip.sys
2011-02-22 02:09 . 2010-08-21 05:32 316928 ----a-w- c:\windows\system32\spoolsv.exe
2011-02-22 02:09 . 2010-07-29 06:30 82944 ----a-w- c:\windows\system32\iccvid.dll
2011-02-22 02:09 . 2010-07-29 06:30 197632 ----a-w- c:\windows\system32\ir32_32.dll
2011-02-22 02:09 . 2009-10-31 05:45 2614272 ----a-w- c:\windows\explorer.exe
2011-02-22 02:09 . 2009-10-28 06:17 285696 ----a-w- c:\windows\system32\winlogon.exe
2011-02-22 02:09 . 2010-08-26 04:39 109056 ----a-w- c:\windows\system32\t2embed.dll
2011-02-22 02:09 . 2010-10-12 04:25 516096 ----a-w- c:\program files\Windows Mail\wab.exe
2011-02-22 02:09 . 2010-10-27 04:32 2048 ----a-w- c:\windows\system32\tzres.dll
2011-02-22 02:09 . 2010-08-21 05:36 224256 ----a-w- c:\windows\system32\schannel.dll
2011-02-22 02:09 . 2011-01-05 03:37 2329088 ----a-w- c:\windows\system32\win32k.sys
2011-02-22 02:07 . 2010-08-31 04:32 954752 ----a-w- c:\windows\system32\mfc40.dll
2011-02-22 02:06 . 2010-08-27 05:46 168448 ----a-w- c:\windows\system32\srvsvc.dll
2011-02-22 02:06 . 2010-08-27 03:31 310784 ----a-w- c:\windows\system32\drivers\srv.sys
2011-02-22 02:06 . 2010-08-27 03:30 308736 ----a-w- c:\windows\system32\drivers\srv2.sys
2011-02-22 02:06 . 2010-08-27 03:30 113664 ----a-w- c:\windows\system32\drivers\srvnet.sys
2011-02-22 02:06 . 2010-10-27 04:43 3901824 ----a-w- c:\windows\system32\ntoskrnl.exe
2011-02-22 02:06 . 2010-10-27 04:43 3957120 ----a-w- c:\windows\system32\ntkrnlpa.exe
2011-02-22 02:06 . 2010-10-27 04:40 1289536 ----a-w- c:\windows\system32\ntdll.dll
2011-02-22 02:06 . 2010-08-21 05:36 738816 ----a-w- c:\windows\system32\wmpmde.dll
2011-02-22 02:06 . 2010-10-16 04:41 101760 ----a-w- c:\windows\system32\consent.exe
2011-02-22 02:06 . 2010-05-05 06:46 363520 ----a-w- c:\windows\system32\StructuredQuery.dll
2011-02-22 02:06 . 2010-02-27 07:32 221696 ----a-w- c:\windows\system32\drivers\mrxsmb10.sys
2011-02-22 02:06 . 2010-02-27 07:32 95744 ----a-w- c:\windows\system32\drivers\mrxsmb20.sys
2011-02-22 02:06 . 2010-02-27 07:32 123392 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
2011-02-22 01:33 . 2011-02-23 15:39 -------- d-----w- c:\programdata\Alwil Software
2011-02-22 01:33 . 2011-02-22 01:33 -------- d-----w- c:\program files\Alwil Software
2011-02-22 00:55 . 2011-02-22 00:55 -------- d-----w- c:\programdata\ATI
2011-02-22 00:54 . 2011-02-22 00:54 -------- d-----w- c:\program files\Common Files\ATI Technologies
2011-02-22 00:54 . 2011-02-22 00:54 -------- d-----w- c:\program files\ATI Stream
2011-02-22 00:53 . 2011-02-22 00:54 -------- d-----w- c:\program files\ATI Technologies
2011-02-22 00:53 . 2011-02-22 00:54 -------- d-----w- c:\program files\ATI
2011-02-22 00:52 . 2010-08-04 20:17 518768 ----a-w- c:\windows\system32\VIASysFx.dll
2011-02-22 00:52 . 2010-08-04 20:17 892016 ----a-w- c:\windows\system32\VIAPropPageExt.dll
2011-02-22 00:52 . 2010-08-04 20:17 75376 ----a-w- c:\windows\system32\ViaMicArrayPropPageExt.dll
2011-02-22 00:52 . 2010-08-04 20:17 187504 ----a-w- c:\windows\system32\ViaMicArrayAPO.dll
2011-02-22 00:52 . 2010-08-04 20:17 1143920 ----a-w- c:\windows\system32\drivers\viahduaa.sys
2011-02-22 00:52 . 2010-08-04 20:16 82544 ----a-w- c:\windows\system32\Dts2PropPageExt.dll
2011-02-22 00:52 . 2010-08-04 20:16 218224 ----a-w- c:\windows\system32\Dts2APO.dll
2011-02-22 00:52 . 2007-12-04 10:28 76288 ----a-w- c:\windows\system32\nQPropPageExt.dll
2011-02-22 00:52 . 2007-12-04 10:28 71680 ----a-w- c:\windows\system32\nQAPO.dll
2011-02-22 00:52 . 2011-02-22 00:52 -------- d-----w- c:\program files\VIA
2011-02-22 00:52 . 2011-02-22 00:52 -------- d-----w- c:\program files\Common Files\InstallShield
2011-02-22 00:48 . 2011-02-25 19:34 -------- d--h--w- c:\program files\InstallShield Installation Information
2011-02-22 00:47 . 2011-02-22 00:48 -------- d-----w- c:\program files\Intel
2011-02-22 00:47 . 2011-02-22 00:46 53248 ----a-w- c:\windows\system32\CSVer.dll
2011-02-22 00:11 . 2011-02-22 14:55 -------- d-----w- c:\program files\Microsoft Games for Windows - LIVE
2011-02-22 00:11 . 2011-02-22 00:11 -------- d-----w- c:\windows\system32\xlive
2011-02-22 00:05 . 2011-02-22 00:05 -------- d-----w- c:\program files\Common Files\Skype
2011-02-22 00:04 . 2011-02-22 00:05 -------- d-----w- c:\programdata\Skype
2011-02-21 23:57 . 2011-03-06 01:24 -------- d-----w- c:\program files\Common Files\Steam
2011-02-21 23:41 . 2011-02-21 23:41 -------- d-----w- c:\windows\system32\Macromed
2011-02-21 23:37 . 2011-03-07 15:16 -------- d-----w- c:\users\******
2011-02-21 23:35 . 2010-01-09 06:52 132608 ----a-w- c:\windows\system32\cabview.dll
2011-02-21 23:35 . 2009-12-29 06:55 172032 ----a-w- c:\windows\system32\wintrust.dll
2011-02-16 16:08 . 2011-02-16 16:08 -------- d-----w- C:\VivoxLogs
2011-02-16 08:27 . 2011-02-16 08:27 -------- d-----w- C:\ATI
.
.
(((((((((((((((((((((((((((((((((((( Find3M Bericht ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-02-22 14:56 . 2009-08-18 10:30 564632 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\wlidui.dll
2011-02-22 14:56 . 2009-08-18 10:24 18328 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2011-02-02 16:11 . 2009-10-14 02:21 222080 ------w- c:\windows\system32\MpSigStub.exe
2011-01-26 23:36 . 2011-01-26 23:36 7566848 ----a-w- c:\windows\system32\drivers\atikmdag.sys
2011-01-26 23:00 . 2011-01-26 23:00 143360 ----a-w- c:\windows\system32\atiapfxx.exe
2011-01-26 23:00 . 2011-01-26 23:00 596480 ----a-w- c:\windows\system32\aticfx32.dll
2011-01-26 22:59 . 2011-01-26 22:59 17204736 ----a-w- c:\windows\system32\atioglxx.dll
2011-01-26 22:56 . 2011-01-26 22:56 462848 ----a-w- c:\windows\system32\ATIDEMGX.dll
2011-01-26 22:55 . 2011-01-26 22:55 393216 ----a-w- c:\windows\system32\atieclxx.exe
2011-01-26 22:55 . 2011-01-26 22:55 176128 ----a-w- c:\windows\system32\atiesrxx.exe
2011-01-26 22:54 . 2011-01-26 22:54 159744 ----a-w- c:\windows\system32\atitmmxx.dll
2011-01-26 22:53 . 2011-01-26 22:53 356352 ----a-w- c:\windows\system32\atipdlxx.dll
2011-01-26 22:53 . 2011-01-26 22:53 278528 ----a-w- c:\windows\system32\Oemdspif.dll
2011-01-26 22:53 . 2011-01-26 22:53 15872 ----a-w- c:\windows\system32\atimuixx.dll
2011-01-26 22:53 . 2011-01-26 22:53 43520 ----a-w- c:\windows\system32\ati2edxx.dll
2011-01-26 22:49 . 2009-07-13 22:09 4105728 ----a-w- c:\windows\system32\atidxx32.dll
2011-01-26 22:32 . 2011-01-26 22:32 1912832 ----a-w- c:\windows\system32\atiumdmv.dll
2011-01-26 22:28 . 2011-01-26 22:28 4170752 ----a-w- c:\windows\system32\atiumdag.dll
2011-01-26 22:27 . 2011-01-26 22:27 46080 ----a-w- c:\windows\system32\aticalrt.dll
2011-01-26 22:27 . 2011-01-26 22:27 44032 ----a-w- c:\windows\system32\aticalcl.dll
2011-01-26 22:25 . 2011-01-26 22:25 5580800 ----a-w- c:\windows\system32\aticaldd.dll
2011-01-26 22:24 . 2011-01-26 22:24 3463680 ----a-w- c:\windows\system32\atiumdva.dll
2011-01-26 22:20 . 2011-01-26 22:20 52736 ----a-w- c:\windows\system32\coinst.dll
2011-01-26 22:14 . 2009-08-18 00:52 249856 ----a-w- c:\windows\system32\atiadlxx.dll
2011-01-26 22:13 . 2011-01-26 22:13 12800 ----a-w- c:\windows\system32\atiglpxx.dll
2011-01-26 22:13 . 2011-01-26 22:13 32768 ----a-w- c:\windows\system32\atigktxx.dll
2011-01-26 22:13 . 2011-01-26 22:13 238592 ----a-w- c:\windows\system32\drivers\atikmpag.sys
2011-01-26 22:12 . 2011-01-26 22:12 30720 ----a-w- c:\windows\system32\atiuxpag.dll
2011-01-26 22:12 . 2011-01-26 22:12 28672 ----a-w- c:\windows\system32\atiu9pag.dll
2011-01-26 22:11 . 2011-01-26 22:11 53248 ----a-w- c:\windows\system32\drivers\ati2erec.dll
2011-01-26 22:08 . 2011-01-26 22:08 52736 ----a-w- c:\windows\system32\atimpc32.dll
2011-01-26 22:08 . 2011-01-26 22:08 52736 ----a-w- c:\windows\system32\amdpcom32.dll
.
.
(((((((((((((((((((((((((((( Autostartpunkte der Registrierung ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2010-10-06 23:36 94208 ----a-w- c:\users\******\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2010-10-06 23:36 94208 ----a-w- c:\users\******\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2010-10-06 23:36 94208 ----a-w- c:\users\******\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"HDAudDeck"="c:\program files\VIA\VIAudioi\VDeck\VDeck.exe" [2010-08-11 1690224]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2011-01-26 336384]
"Malwarebytes' Anti-Malware (reboot)"="d:\program files\Malwarebytes' Anti-Malware\mbam.exe" [2010-12-20 963976]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2011-01-10 281768]
.
c:\users\******\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Dropbox.lnk - c:\users\******\AppData\Roaming\Dropbox\bin\Dropbox.exe [2011-1-27 23361424]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux1"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ATICustomerCare]
2010-05-04 15:05 311296 ----a-r- c:\program files\ATI\ATICustomerCare\ATICustomerCare.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
2011-01-20 09:20 1305408 ----a-w- d:\program files\DAEMON Tools Lite\DTLite.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Malwarebytes' Anti-Malware]
2010-12-20 17:08 443728 ----a-w- d:\program files\Malwarebytes' Anti-Malware\mbamgui.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Malwarebytes' Anti-Malware (reboot)]
2010-12-20 17:08 963976 ----a-w- d:\program files\Malwarebytes' Anti-Malware\mbam.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
2010-10-29 13:49 249064 ----a-w- c:\program files\Common Files\Java\Java Update\jusched.exe
.
R2 gupdate;Google Update Service (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2011-03-07 136176]
R3 MotioninJoyXFilter;MotioninJoy Virtual Xinput device Filter Driver;c:\windows\system32\DRIVERS\MijXfilt.sys [2011-01-01 81168]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [2011-02-22 218688]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [2009-07-13 48128]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2011-01-26 176128]
S2 AntiVirSchedulerService;Avira AntiVir Planer;c:\program files\Avira\AntiVir Desktop\sched.exe [2011-01-10 135336]
S2 MBAMService;MBAMService;d:\program files\Malwarebytes' Anti-Malware\mbamservice.exe [2010-12-20 363344]
S3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atikmdag.sys [2011-01-26 7566848]
S3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [2011-01-26 238592]
S3 AtiHDAudioService;ATI Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW73.sys [2010-11-17 101392]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2010-12-20 20952]
S3 RTL8167;Realtek 8167 NT-Treiber;c:\windows\system32\DRIVERS\Rt86win7.sys [2009-07-13 139776]
S3 VIAHdAudAddService;VIA High Definition Audio Driver Service;c:\windows\system32\drivers\viahduaa.sys [2010-08-04 1143920]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*NewlyCreated* - SSMDRV
.
Inhalt des "geplante Tasks" Ordners
.
2011-03-07 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2011-03-07 06:59]
.
2011-03-07 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2011-03-07 06:59]
.
.
------- Zusätzlicher Suchlauf -------
.
Trusted Zone: clonewarsadventures.com
Trusted Zone: freerealms.com
Trusted Zone: soe.com
Trusted Zone: sony.com
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
MSConfigStartUp-LogMeIn Hamachi Ui - d:\program files\LogMeIn Hamachi\hamachi-2-ui.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_USERS\S-1-5-21-1477582012-3531645068-1850276836-1000\Software\SecuROM\License information*]
"datasecu"=hex:4d,e3,79,23,0c,8b,a7,ab,8a,3f,30,22,4b,e4,36,2c,6b,4d,7f,b9,40,
20,55,ce,71,71,08,dd,15,8c,18,74,c7,b7,36,8d,61,96,e1,29,62,99,70,28,de,2a,\
"rkeysecu"=hex:11,4e,ff,62,c5,27,cc,2e,03,c3,3c,59,5a,80,fe,60
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2011-03-07 16:17:44
ComboFix-quarantined-files.txt 2011-03-07 15:17
.
Vor Suchlauf: 11 Verzeichnis(se), 21.032.132.608 Bytes frei
Nach Suchlauf: 14 Verzeichnis(se), 20.942.954.496 Bytes frei
.
- - End Of File - - D873278F2A3105A9D87DC0797E9F9AED |