so combofix Log-Datei hier:
Combofix Logfile:
Code:
Alles auswählen Aufklappen ATTFilter
ComboFix 11-07-23.01 - Zoran 23.07.2011 13:47:34.1.4 - x64
Microsoft Windows 7 Ultimate 6.1.7601.1.1252.49.1031.18.8191.6297 [GMT 2:00]
ausgeführt von:: c:\users\I n t e r n e t\Desktop\ComboFix.exe
AV: AntiVir Desktop *Disabled/Outdated* {090F9C29-64CE-6C6F-379C-5901B49A85B7}
SP: AntiVir Desktop *Disabled/Outdated* {B26E7DCD-42F4-63E1-0D2C-6273CF1DCF0A}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
(((((((((((((((((((((((((((((((((((( Weitere Löschungen ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\programdata\data.dll
c:\users\Zoran\AppData\Roaming\Desktopicon
c:\users\Zoran\AppData\Roaming\inst.exe
.
.
((((((((((((((((((((((( Dateien erstellt von 2011-06-23 bis 2011-07-23 ))))))))))))))))))))))))))))))
.
.
2011-07-23 11:52 . 2011-07-23 12:13 -------- d-----w- c:\users\Zoran\AppData\Local\temp
2011-07-23 11:52 . 2011-07-23 11:52 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-07-23 11:46 . 2011-07-23 11:46 -------- d-----w- C:\32788R22FWJFW
2011-07-22 14:02 . 2011-07-22 14:02 -------- d-----w- C:\_OTL
2011-07-22 10:38 . 2011-07-13 04:53 8578896 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{59FE05AF-7089-4789-AC92-5281A12E17AD}\mpengine.dll
2011-07-21 19:40 . 2011-07-21 19:40 -------- d-----w- c:\program files\CCleaner
2011-07-21 14:32 . 2011-07-21 14:32 -------- d-----w- c:\program files\Microsoft Sync Framework
2011-07-20 07:00 . 2011-07-20 07:00 -------- d-----w- c:\users\I n t e r n e t\AppData\Local\Karen's Power Tools
2011-07-20 07:00 . 2011-07-20 07:00 -------- d-----w- c:\programdata\Karen's Power Tools
2011-07-19 16:03 . 2011-07-19 16:03 -------- d-----w- c:\program files (x86)\Renesas Electronics
2011-07-19 14:09 . 2011-07-19 14:09 -------- d-----w- c:\programdata\FNET
2011-07-19 13:40 . 2011-07-19 13:40 -------- d-----w- c:\programdata\Downloaded Installations
2011-07-13 14:10 . 2011-07-13 14:10 -------- d-----w- c:\windows\SysWow64\Adobe
2011-07-13 12:30 . 2011-06-03 06:57 362496 ----a-w- c:\windows\system32\wow64win.dll
2011-07-13 12:30 . 2011-06-03 06:57 214528 ----a-w- c:\windows\system32\winsrv.dll
2011-07-13 12:30 . 2011-06-03 06:53 338944 ----a-w- c:\windows\system32\conhost.exe
2011-07-13 12:30 . 2011-06-03 06:57 243200 ----a-w- c:\windows\system32\wow64.dll
2011-07-13 12:30 . 2011-06-03 06:57 13312 ----a-w- c:\windows\system32\wow64cpu.dll
2011-07-13 12:30 . 2011-06-03 06:57 16384 ----a-w- c:\windows\system32\ntvdm64.dll
2011-07-13 12:30 . 2011-06-03 06:00 14336 ----a-w- c:\windows\SysWow64\ntvdm64.dll
2011-07-13 12:30 . 2011-06-03 05:57 25600 ----a-w- c:\windows\SysWow64\setup16.exe
2011-07-13 12:30 . 2011-06-03 05:56 5120 ----a-w- c:\windows\SysWow64\wow32.dll
2011-07-13 12:30 . 2011-06-03 03:53 7680 ----a-w- c:\windows\SysWow64\instnm.exe
2011-07-13 12:30 . 2011-06-03 03:53 2048 ----a-w- c:\windows\SysWow64\user.exe
2011-07-11 12:46 . 2011-07-11 12:46 -------- d-----w- c:\users\Zoran\AppData\Local\Downloaded Installations
2011-07-11 12:45 . 2011-07-11 12:45 -------- d-----w- c:\users\I n t e r n e t\AppData\Local\Downloaded Installations
.
.
.
(((((((((((((((((((((((((((((((((((( Find3M Bericht ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-07-09 05:44 . 2010-12-29 17:48 88288 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2011-07-09 05:44 . 2010-12-29 17:48 123784 ----a-w- c:\windows\system32\drivers\avipbb.sys
2011-07-06 17:52 . 2011-01-03 12:24 41272 ----a-w- c:\windows\SysWow64\drivers\mbamswissarmy.sys
2011-07-06 17:52 . 2010-12-29 16:57 25912 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-06-03 05:57 . 2011-07-13 12:30 44032 ----a-w- c:\windows\apppatch\acwow64.dll
2011-05-24 17:14 . 2009-10-14 05:13 270720 ------w- c:\windows\system32\MpSigStub.exe
2011-05-22 10:10 . 2011-05-22 10:10 89088 ----a-w- c:\windows\system32\RegisterIEPKEYs.exe
2011-05-22 10:10 . 2011-05-22 10:10 86528 ----a-w- c:\windows\SysWow64\iesysprep.dll
2011-05-22 10:10 . 2011-05-22 10:10 76800 ----a-w- c:\windows\SysWow64\SetIEInstalledDate.exe
2011-05-22 10:10 . 2011-05-22 10:10 74752 ----a-w- c:\windows\SysWow64\RegisterIEPKEYs.exe
2011-05-22 10:10 . 2011-05-22 10:10 74752 ----a-w- c:\windows\SysWow64\iesetup.dll
2011-05-22 10:10 . 2011-05-22 10:10 63488 ----a-w- c:\windows\SysWow64\tdc.ocx
2011-05-22 10:10 . 2011-05-22 10:10 48640 ----a-w- c:\windows\SysWow64\mshtmler.dll
2011-05-22 10:10 . 2011-05-22 10:10 420864 ----a-w- c:\windows\SysWow64\vbscript.dll
2011-05-22 10:10 . 2011-05-22 10:10 367104 ----a-w- c:\windows\SysWow64\html.iec
2011-05-22 10:10 . 2011-05-22 10:10 35840 ----a-w- c:\windows\SysWow64\imgutil.dll
2011-05-22 10:10 . 2011-05-22 10:10 23552 ----a-w- c:\windows\SysWow64\licmgr10.dll
2011-05-22 10:10 . 2011-05-22 10:10 222208 ----a-w- c:\windows\system32\msls31.dll
2011-05-22 10:10 . 2011-05-22 10:10 161792 ----a-w- c:\windows\SysWow64\msls31.dll
2011-05-22 10:10 . 2011-05-22 10:10 152064 ----a-w- c:\windows\SysWow64\wextract.exe
2011-05-22 10:10 . 2011-05-22 10:10 150528 ----a-w- c:\windows\SysWow64\iexpress.exe
2011-05-22 10:10 . 2011-05-22 10:10 142848 ----a-w- c:\windows\SysWow64\ieUnatt.exe
2011-05-22 10:10 . 2011-05-22 10:10 1427456 ----a-w- c:\windows\SysWow64\inetcpl.cpl
2011-05-22 10:10 . 2011-05-22 10:10 1389056 ----a-w- c:\windows\system32\wininet.dll
2011-05-22 10:10 . 2011-05-22 10:10 11776 ----a-w- c:\windows\SysWow64\mshta.exe
2011-05-22 10:10 . 2011-05-22 10:10 1126912 ----a-w- c:\windows\SysWow64\wininet.dll
2011-05-22 10:10 . 2011-05-22 10:10 110592 ----a-w- c:\windows\SysWow64\IEAdvpack.dll
2011-05-22 10:10 . 2011-05-22 10:10 101888 ----a-w- c:\windows\SysWow64\admparse.dll
2011-05-22 10:10 . 2011-05-22 10:10 173056 ----a-w- c:\windows\system32\ieUnatt.exe
2011-05-22 10:10 . 2011-05-22 10:10 91648 ----a-w- c:\windows\system32\SetIEInstalledDate.exe
2011-05-22 10:10 . 2011-05-22 10:10 85504 ----a-w- c:\windows\system32\iesetup.dll
2011-05-22 10:10 . 2011-05-22 10:10 76800 ----a-w- c:\windows\system32\tdc.ocx
2011-05-22 10:10 . 2011-05-22 10:10 603648 ----a-w- c:\windows\system32\vbscript.dll
2011-05-22 10:10 . 2011-05-22 10:10 49664 ----a-w- c:\windows\system32\imgutil.dll
2011-05-22 10:10 . 2011-05-22 10:10 48640 ----a-w- c:\windows\system32\mshtmler.dll
2011-05-22 10:10 . 2011-05-22 10:10 448512 ----a-w- c:\windows\system32\html.iec
2011-05-22 10:10 . 2011-05-22 10:10 30720 ----a-w- c:\windows\system32\licmgr10.dll
2011-05-22 10:10 . 2011-05-22 10:10 165888 ----a-w- c:\windows\system32\iexpress.exe
2011-05-22 10:10 . 2011-05-22 10:10 160256 ----a-w- c:\windows\system32\wextract.exe
2011-05-22 10:10 . 2011-05-22 10:10 1492992 ----a-w- c:\windows\system32\inetcpl.cpl
2011-05-22 10:10 . 2011-05-22 10:10 135168 ----a-w- c:\windows\system32\IEAdvpack.dll
2011-05-22 10:10 . 2011-05-22 10:10 12288 ----a-w- c:\windows\system32\mshta.exe
2011-05-22 10:10 . 2011-05-22 10:10 114176 ----a-w- c:\windows\system32\admparse.dll
2011-05-22 10:10 . 2011-05-22 10:10 111616 ----a-w- c:\windows\system32\iesysprep.dll
2011-05-03 05:29 . 2011-06-16 05:27 976896 ----a-w- c:\windows\system32\inetcomm.dll
2011-05-03 04:30 . 2011-06-16 05:27 741376 ----a-w- c:\windows\SysWow64\inetcomm.dll
2011-04-29 03:06 . 2011-06-16 05:26 467456 ----a-w- c:\windows\system32\drivers\srv.sys
2011-04-29 03:05 . 2011-06-16 05:26 410112 ----a-w- c:\windows\system32\drivers\srv2.sys
2011-04-29 03:05 . 2011-06-16 05:26 168448 ----a-w- c:\windows\system32\drivers\srvnet.sys
2011-04-27 02:40 . 2011-06-16 05:27 158208 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
2011-04-27 02:39 . 2011-06-16 05:27 289280 ----a-w- c:\windows\system32\drivers\mrxsmb10.sys
2011-04-27 02:39 . 2011-06-16 05:27 128000 ----a-w- c:\windows\system32\drivers\mrxsmb20.sys
2011-04-25 05:33 . 2011-06-16 05:27 1923968 ----a-w- c:\windows\system32\drivers\tcpip.sys
2011-04-25 02:34 . 2011-06-16 05:27 499200 ----a-w- c:\windows\system32\drivers\afd.sys
.
.
(((((((((((((((((((((((((((( Autostartpunkte der Registrierung ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"EVEREST AutoStart"="h:\everest ultimate edition\everest_start.exe" [2009-03-29 334928]
"DAEMON Tools Lite"="h:\daemon tools lite\DTLite.exe" [2009-10-30 369200]
"RocketDock"="c:\program files (x86)\RocketDock\RocketDock.exe" [2007-09-02 495616]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"VolPanel"="h:\creative\VolPanlu.exe" [2008-08-06 233576]
"UnlockerAssistant"="h:\unlocker\UnlockerAssistant.exe" [2008-05-02 15872]
"avgnt"="h:\avira\AntiVir Desktop\avgnt.exe" [2010-12-13 281768]
"NUSB3MON"="c:\program files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe" [2011-04-14 113288]
"Malwarebytes' Anti-Malware"="h:\malwarebytes' anti-malware\mbamgui.exe" [2011-07-06 449584]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Rainmeter.lnk - c:\program files\Rainmeter\Rainmeter.exe [2011-1-9 117248]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R3 Creative ALchemy AL6 Licensing Service;Creative ALchemy AL6 Licensing Service;c:\program files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [2009-11-11 79360]
R3 Creative Audio Engine Licensing Service;Creative Audio Engine Licensing Service;c:\program files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [2009-11-11 79360]
R3 Creative Media Toolbox 6 Licensing Service;Creative Media Toolbox 6 Licensing Service;c:\program files (x86)\Common Files\Creative Labs Shared\Service\MT6Licensing.exe [2009-11-11 79360]
R3 CT20XUT;CT20XUT;c:\windows\system32\drivers\CT20XUT.SYS [x]
R3 CTEXFIFX;CTEXFIFX;c:\windows\system32\drivers\CTEXFIFX.SYS [x]
R3 CTHWIUT;CTHWIUT;c:\windows\system32\drivers\CTHWIUT.SYS [x]
R3 EverestDriver;Lavalys EVEREST Kernel Driver;h:\everest ultimate edition\kerneld.amd64 [2009-03-29 24192]
R3 ivusb;Initio Driver for USB Default Controller;c:\windows\system32\DRIVERS\ivusb.sys [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [x]
R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys [x]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys [x]
R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys [x]
S0 hotcore3;hc3ServiceName;c:\windows\system32\DRIVERS\hotcore3.sys [x]
S0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [x]
S2 acedrv11;acedrv11;c:\windows\system32\drivers\acedrv11.sys [x]
S2 AntiVirSchedulerService;Avira AntiVir Planer;h:\avira\AntiVir Desktop\sched.exe [2011-04-27 136360]
S2 DevoloNetworkService;devolo Network Service;h:\devolo\dlan\devolonetsvc.exe [2010-12-23 3304768]
S2 MBAMService;MBAMService;h:\malwarebytes' anti-malware\mbamservice.exe [2011-07-06 366640]
S2 NPF_devolo;NetGroup Packet Filter Driver (devolo);c:\windows\sysWOW64\drivers\npf_devolo.sys [2010-06-10 34048]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2011-01-07 378984]
S3 CT20XUT.SYS;CT20XUT.SYS;c:\windows\System32\drivers\CT20XUT.SYS [x]
S3 CTEXFIFX.SYS;CTEXFIFX.SYS;c:\windows\System32\drivers\CTEXFIFX.SYS [x]
S3 CTHWIUT.SYS;CTHWIUT.SYS;c:\windows\System32\drivers\CTHWIUT.SYS [x]
S3 ha20x22k;Creative 20X2 HAL Driver;c:\windows\system32\drivers\ha20x22k.sys [x]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [x]
S3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\nusb3hub.sys [x]
S3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\nusb3xhc.sys [x]
S3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda64v.sys [x]
.
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CanonSolutionMenu"="c:\program files (x86)\Canon\SolutionMenu\CNSLMAIN.exe" [2007-05-14 644696]
"CanonMyPrinter"="h:\canon mp610\BJMyPrt.exe" [2009-07-27 2184520]
"Kernel and Hardware Abstraction Layer"="KHALMNPR.EXE" [2009-06-17 130576]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"LoadAppInit_DLLs"=0x0
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.google.de/
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = *.local
IE: Nach Microsoft E&xel exportieren - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 192.168.3.1
DPF: {888078C6-70B2-4F88-8EE7-1F50DDEA6120} - hxxps://as.photoprintit.de/ips-opdata/activex/ImageUploader6.cab
FF - ProfilePath -
.
.
------- Dateityp-Verknüpfung -------
.
.txt=
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Wow6432Node-HKU-Default-RunOnce-SPReview - c:\windows\System32\SPReview\SPReview.exe
.
.
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\services\EverestDriver]
"ImagePath"="\??\h:\everest ultimate edition\kerneld.amd64"
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.alb\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="FotoManager10Deluxe.8.alb"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil10d.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\LocalServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\FlashUtil10d.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10d.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10d.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10d.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10d.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}]
@Denied: (A 2) (Everyone)
@="IFlashBroker3"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\program files (x86)\Creative\Shared Files\CTAudSvc.exe
h:\avira\AntiVir Desktop\avguard.exe
c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\program files (x86)\Bonjour\mDNSResponder.exe
c:\program files (x86)\Canon\IJPLM\IJPLMSVC.EXE
h:\nero\Nero 8\Nero BackItUp\NBService.exe
c:\program files (x86)\Internet Explorer\IELowutil.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2011-07-23 14:17:56 - PC wurde neu gestartet
ComboFix-quarantined-files.txt 2011-07-23 12:17
.
Vor Suchlauf: 11 Verzeichnis(se), 21.197.053.952 Bytes frei
Nach Suchlauf: 16 Verzeichnis(se), 21.031.706.624 Bytes frei
.
- - End Of File - - 1A4B22B3EAD9572A86A43CD27A223C61
--- --- ---