so hier das comboFix Log:
"Klopfer" - 2007-06-26 16:41:10 - ComboFix 07-06-26.8 - Service Pack 2
((((((((((((((((((((((((( Files Created from 2007-05-26 to 2007-06-26 )))))))))))))))))))))))))))))))
2007-06-26 14:48 49,152 --a------ C:\WINDOWS\nircmd.exe
2007-06-23 11:55 <DIR> d-------- C:\Programme\GSpot
2007-06-20 13:04 <DIR> d--hs---- C:\FOUND.009
2007-06-19 20:06 <DIR> d-------- C:\Programme\MSXML 4.0
2007-06-19 19:59 221,184 --a------ C:\WINDOWS\system32\wmpns.dll
2007-06-19 19:52 <DIR> d-------- C:\DOKUME~1\ALLUSE~1\ANWEND~1\Windows Genuine Advantage
2007-06-19 19:48 <DIR> d---s---- C:\DOKUME~1\Klopfer\UserData
2007-06-19 18:34 12,365,605 --------- C:\avg7qt.dat
2007-06-19 17:55 3,594 --a------ C:\WINDOWS\system32\tmp.reg
2007-06-19 17:00 <DIR> d-------- C:\WINDOWS\system32\ActiveScan
2007-06-15 17:33 <DIR> d-------- C:\VundoFix Backups
2007-06-08 18:14 <DIR> d-------- C:\WINDOWS\pss
2007-06-08 17:24 <DIR> d-------- C:\Programme\XPcleanv5
2007-06-08 17:23 <DIR> d-------- C:\Programme\TuneUpUtilities2006
2007-06-08 17:23 <DIR> d-------- C:\DOKUME~1\Klopfer\ANWEND~1\TuneUp Software
2007-06-08 17:23 <DIR> d-------- C:\DOKUME~1\ALLUSE~1\ANWEND~1\TuneUp Software
2007-06-06 09:05 <DIR> d--hs---- C:\FOUND.008
2007-06-05 20:14 <DIR> d-------- C:\DOKUME~1\Klopfer\ANWEND~1\Canon
2007-06-05 18:21 98,304 --a------ C:\WINDOWS\system32\CNCLSU23.DLL
2007-06-05 18:21 77,824 --a------ C:\WINDOWS\system32\CNCLSC23.DLL
2007-06-05 18:21 73,728 --a------ C:\WINDOWS\system32\CNCL4100.DLL
2007-06-05 18:21 69,632 --a------ C:\WINDOWS\system32\CNCI4100.DLL
2007-06-05 18:21 53,248 --a------ C:\WINDOWS\system32\CNAS0MMK.DLL
2007-06-05 18:21 49,152 --a------ C:\WINDOWS\system32\cncilsc.dll
2007-06-05 18:21 25,856 --a------ C:\WINDOWS\system32\drivers\usbprint.sys
2007-06-05 18:21 200,704 --a------ C:\WINDOWS\system32\CNCC4100.DLL
2007-06-05 18:21 15,104 --a------ C:\WINDOWS\system32\drivers\usbscan.sys
2007-06-05 18:21 131,072 --a------ C:\WINDOWS\system32\CNCLSD23.DLL
2007-06-05 18:21 110,592 --a------ C:\WINDOWS\system32\CNCLST23.DLL
2007-06-05 18:21 110,592 --a------ C:\WINDOWS\system32\CNCLSI23.DLL
2007-06-05 18:12 <DIR> d-------- C:\Programme\Canon
2007-06-05 18:11 <DIR> d--h----- C:\WINDOWS\system32\CanonMF Uninstaller Information
2007-06-05 18:11 <DIR> d--h----- C:\CanonMF
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
2007-06-20 11:25:58 664 ----a-w C:\WINDOWS\system32\d3d9caps.dat
2007-05-16 15:11:44 683,520 ----a-w C:\WINDOWS\system32\inetcomm.dll
2007-05-15 19:02:16 4,212 ---h--w C:\WINDOWS\system32\zllictbl.dat
2007-05-15 19:00:04 -------- d-----w C:\Programme\ZoneAlarm
2007-04-25 14:22:28 144,896 ----a-w C:\WINDOWS\system32\schannel.dll
2007-04-18 16:13:24 2,854,400 ----a-w C:\WINDOWS\system32\msi.dll
2007-04-16 20:47:36 33,624 ----a-w C:\WINDOWS\system32\wups.dll
2007-04-16 20:45:54 1,710,936 ----a-w C:\WINDOWS\system32\wuaueng.dll
2007-04-16 20:45:48 549,720 ----a-w C:\WINDOWS\system32\wuapi.dll
2007-04-16 20:45:42 325,976 ----a-w C:\WINDOWS\system32\wucltui.dll
2007-04-16 20:45:28 92,504 ----a-w C:\WINDOWS\system32\cdm.dll
2007-04-16 20:45:20 53,080 ----a-w C:\WINDOWS\system32\wuauclt.exe
2007-04-16 20:45:20 43,352 ----a-w C:\WINDOWS\system32\wups2.dll
2007-04-09 11:52:24 50,442 ----a-w C:\WINDOWS\system32\perfc007.dat
2007-04-09 11:52:24 322,180 ----a-w C:\WINDOWS\system32\perfh007.dat
2007-04-03 19:10:56 3,725 ----a-w C:\WINDOWS\mozver.dat
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
*Note* empty entries & legit default entries are not shown
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects]
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}=c:\Programme\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll [2004-12-14 01:56]
{53707962-6F74-2D53-2644-206D7942484F}=C:\PROGRA~1\SPYBOT~1\SDHelper.dll [2005-05-31 01:04]
{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}=C:\Programme\Java\jre1.5.0_11\bin\ssv.dll [2006-12-15 03:23]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"nwiz"="nwiz.exe" [2006-04-28 04:47 C:\WINDOWS\system32\nwiz.exe]
"RemoteControl"="C:\Programme\ASUSTek\ASUSDVD\PDVDServ.exe" [2005-01-12 03:01]
"RTHDCPL"="RTHDCPL.EXE" [2006-09-12 12:58 C:\WINDOWS\RTHDCPL.exe]
"SkyTel"="SkyTel.EXE" [2006-05-16 14:04 C:\WINDOWS\SkyTel.exe]
"Alcmtr"="ALCMTR.EXE" [2005-05-03 14:43 C:\WINDOWS\Alcmtr.exe]
"ASUS Live Update"="C:\Programme\ASUS\ASUS Live Update\ALU.exe" [2006-02-21 15:20]
"Wireless Console 2"="C:\Programme\Wireless Console 2\wcourier.exe" [2005-10-17 17:09]
"SynTPEnh"="C:\Programme\Synaptics\SynTP\SynTPEnh.exe" [2005-10-21 18:26]
"Power_Gear"="C:\Programme\ASUS\Power4 Gear\BatteryLife.exe" [2006-07-26 18:01]
"SunJavaUpdateSched"="C:\Programme\Java\jre1.5.0_11\bin\jusched.exe" [2006-12-15 03:23]
"AVG7_CC"="C:\PROGRA~1\Grisoft\AVG7\avgcc.exe" [2007-05-15 20:28]
"ZoneAlarm Client"="C:\Programme\ZoneAlarm\zlclient.exe" [2007-03-09 00:02]
"SMSERIAL"="sm56hlpr.exe" [2006-01-20 15:34 C:\WINDOWS\sm56hlpr.exe]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 14:00]
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\runonce]
"ICQ Lite"=C:\Programme\ICQLite\ICQLite.exe -trayboot
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"ClearRecentDocsOnExit"=1 (0x1)
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\j8231132]
rundll32 C:\WINDOWS\system32\j8231132.dll sook
Contents of the 'Scheduled Tasks' folder
2007-06-15 15:16:00 C:\WINDOWS\tasks\1-Klick-Wartung.job
**************************************************************************
catchme 0.3.721 W2K/XP/Vista - userland rootkit detector by Gmer,
http://www.gmer.net
Rootkit scan 2007-06-26 16:42:13
Windows 5.1.2600 Service Pack 2 FAT NTAPI
scanning hidden processes ...
scanning hidden autostart entries ...
scanning hidden files ...
scan completed successfully
hidden files: 0
**************************************************************************
Files hidden from API:
C:\WINDOWS\Pr„riewind.bmp
C:\WINDOWS\F„cher.bmp
Completion time: 2007-06-26 16:43:22
C:\ComboFix-quarantined-files.txt ... 2007-06-26 16:42
C:\ComboFix2.txt ... 2007-06-26 14:53
--- E O F ---
