Backdoor.Agent in HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|Shell

ComboFix 12-01-23.02 - Tuan 24.01.2012  22:46:16.1.4 - x86
Microsoft® Windows Vista™ Home Premium   6.0.6002.2.1252.49.1031.18.3070.1623 [GMT 1:00]
ausgeführt von:: c:\users\Tuan\Desktop\ComboFix.exe
AV: Avira Desktop *Disabled/Updated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
SP: Avira Desktop *Disabled/Updated* {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\bwUnin-8.1.1.50-8876480SL.exe
c:\windows\IsUn0407.exe
c:\windows\system32\SETAD92.tmp
.
.
(((((((((((((((((((((((   Dateien erstellt von 2011-12-24 bis 2012-01-24  ))))))))))))))))))))))))))))))
.
.
2012-01-24 21:56 . 2012-01-24 21:56	--------	d-----w-	c:\users\Tuan\AppData\Local\temp
2012-01-24 20:16 . 2011-11-17 06:48	440192	----a-w-	c:\windows\system32\drivers\ksecdd.sys
2012-01-24 20:16 . 2011-11-16 16:23	377344	----a-w-	c:\windows\system32\winhttp.dll
2012-01-24 20:16 . 2011-11-16 16:23	278528	----a-w-	c:\windows\system32\schannel.dll
2012-01-24 20:16 . 2011-11-16 16:21	1259008	----a-w-	c:\windows\system32\lsasrv.dll
2012-01-24 20:16 . 2011-11-16 16:23	72704	----a-w-	c:\windows\system32\secur32.dll
2012-01-24 20:16 . 2011-11-16 14:12	9728	----a-w-	c:\windows\system32\lsass.exe
2012-01-24 17:55 . 2012-01-24 17:55	--------	d-----w-	c:\program files\iPod
2012-01-24 17:55 . 2012-01-24 17:56	--------	d-----w-	c:\program files\iTunes
2012-01-24 16:41 . 2012-01-06 04:19	6557240	----a-w-	c:\programdata\Microsoft\Windows Defender\Definition Updates\{9E961E58-F8C7-4211-AECF-431CB556CE82}\mpengine.dll
2012-01-23 20:39 . 2012-01-23 20:39	--------	d-----w-	c:\users\Tuan\AppData\Roaming\Malwarebytes
2012-01-23 20:39 . 2012-01-23 20:39	--------	d-----w-	c:\programdata\Malwarebytes
2012-01-23 20:39 . 2012-01-23 20:39	--------	d-----w-	c:\program files\Malwarebytes' Anti-Malware
2012-01-23 20:39 . 2011-12-10 14:24	20464	----a-w-	c:\windows\system32\drivers\mbam.sys
2012-01-11 17:25 . 2011-10-25 15:58	1314816	----a-w-	c:\windows\system32\quartz.dll
2012-01-11 17:25 . 2011-10-25 15:58	497152	----a-w-	c:\windows\system32\qdvd.dll
2012-01-11 17:25 . 2011-12-01 15:21	2409784	----a-w-	c:\program files\Windows Mail\OESpamFilter.dat
2012-01-11 17:24 . 2011-11-18 17:47	66560	----a-w-	c:\windows\system32\packager.dll
2012-01-11 17:23 . 2011-10-14 16:03	189952	----a-w-	c:\windows\system32\winmm.dll
2012-01-11 17:23 . 2011-10-14 16:00	23552	----a-w-	c:\windows\system32\mciseq.dll
2012-01-11 17:23 . 2011-11-18 20:23	1205064	----a-w-	c:\windows\system32\ntdll.dll
2012-01-11 17:23 . 2011-11-25 15:59	376320	----a-w-	c:\windows\system32\winsrv.dll
2012-01-06 14:28 . 2012-01-06 14:28	1207568	----a-w-	c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight\SpotlightResources.dll
2012-01-02 16:32 . 2012-01-02 16:32	626688	----a-w-	c:\program files\Mozilla Firefox\msvcr80.dll
2012-01-02 16:32 . 2012-01-02 16:32	548864	----a-w-	c:\program files\Mozilla Firefox\msvcp80.dll
2012-01-02 16:32 . 2012-01-02 16:32	479232	----a-w-	c:\program files\Mozilla Firefox\msvcm80.dll
2012-01-02 16:32 . 2012-01-02 16:32	43992	----a-w-	c:\program files\Mozilla Firefox\mozutils.dll
2011-12-31 22:11 . 2011-12-31 22:11	--------	d-----w-	c:\users\Tuan\AppData\Local\DDMSettings
2011-12-29 14:21 . 2011-12-29 14:21	--------	d-----w-	c:\users\Tuan\AppData\Roaming\LucasArts
2011-12-29 13:53 . 2011-12-29 13:53	239	----a-w-	C:\user.js
2011-12-29 13:53 . 2011-12-29 13:53	--------	d-----w-	c:\program files\BabylonToolbar
2011-12-29 13:53 . 2011-12-29 13:53	--------	d-----w-	c:\programdata\Babylon
2011-12-29 13:53 . 2011-12-29 13:55	--------	d-----w-	c:\program files\ExpressFiles
2011-12-29 13:32 . 2010-06-02 03:55	74072	----a-w-	c:\windows\system32\XAPOFX1_5.dll
2011-12-29 13:32 . 2010-06-02 03:55	527192	----a-w-	c:\windows\system32\XAudio2_7.dll
2011-12-29 13:32 . 2010-06-02 03:55	239960	----a-w-	c:\windows\system32\xactengine3_7.dll
2011-12-29 13:32 . 2010-05-26 10:41	248672	----a-w-	c:\windows\system32\d3dx11_43.dll
2011-12-29 13:32 . 2010-05-26 10:41	2106216	----a-w-	c:\windows\system32\D3DCompiler_43.dll
2011-12-29 13:32 . 2010-05-26 10:41	1868128	----a-w-	c:\windows\system32\d3dcsx_43.dll
2011-12-29 13:32 . 2010-05-26 10:41	470880	----a-w-	c:\windows\system32\d3dx10_43.dll
2011-12-29 13:32 . 2010-05-26 10:41	1998168	----a-w-	c:\windows\system32\D3DX9_43.dll
2011-12-29 13:23 . 2011-12-29 13:23	--------	d-----w-	c:\program files\LucasArts
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-01-21 14:25 . 2009-04-01 15:24	140496	----a-w-	c:\windows\system32\drivers\PnkBstrK.sys
2012-01-21 14:25 . 2009-04-01 15:28	280736	----a-w-	c:\windows\system32\PnkBstrB.xtr
2012-01-21 14:25 . 2009-04-01 15:24	280736	----a-w-	c:\windows\system32\PnkBstrB.exe
2012-01-20 14:28 . 2009-04-01 15:24	280736	----a-w-	c:\windows\system32\PnkBstrB.ex0
2011-12-21 12:47 . 2009-04-01 15:24	139152	----a-w-	c:\users\Tuan\AppData\Roaming\PnkBstrK.sys
2011-12-08 16:47 . 2011-10-14 17:02	134856	----a-w-	c:\windows\system32\drivers\avipbb.sys
2011-11-23 13:37 . 2011-12-14 16:25	2043904	----a-w-	c:\windows\system32\win32k.sys
2011-11-21 19:46 . 2011-05-15 13:37	414368	----a-w-	c:\windows\system32\FlashPlayerCPLApp.cpl
2011-11-15 13:29 . 2009-10-03 12:26	222080	------w-	c:\windows\system32\MpSigStub.exe
2011-11-10 03:44 . 2011-11-10 03:44	8913920	----a-w-	c:\windows\system32\drivers\atikmdag.sys
2011-11-10 03:17 . 2011-11-10 03:17	159744	----a-w-	c:\windows\system32\atiapfxx.exe
2011-11-10 03:16 . 2010-09-17 10:04	774656	----a-w-	c:\windows\system32\aticfx32.dll
2011-11-10 03:12 . 2011-11-10 03:12	466944	----a-w-	c:\windows\system32\ATIDEMGX.dll
2011-11-10 03:11 . 2011-11-10 03:11	417792	----a-w-	c:\windows\system32\atieclxx.exe
2011-11-10 03:11 . 2011-11-10 03:11	176128	----a-w-	c:\windows\system32\atiesrxx.exe
2011-11-10 03:10 . 2011-11-10 03:10	163840	----a-w-	c:\windows\system32\atitmmxx.dll
2011-11-10 03:09 . 2011-11-10 03:09	360448	----a-w-	c:\windows\system32\atipdlxx.dll
2011-11-10 03:09 . 2011-11-10 03:09	278528	----a-w-	c:\windows\system32\Oemdspif.dll
2011-11-10 03:09 . 2011-11-10 03:09	20992	----a-w-	c:\windows\system32\atimuixx.dll
2011-11-10 03:09 . 2011-11-10 03:09	43520	----a-w-	c:\windows\system32\ati2edxx.dll
2011-11-10 03:06 . 2011-11-10 03:06	6077952	----a-w-	c:\windows\system32\atidxx32.dll
2011-11-10 02:58 . 2011-11-10 02:58	18996224	----a-w-	c:\windows\system32\atioglxx.dll
2011-11-10 02:40 . 2011-11-10 02:40	1828864	----a-w-	c:\windows\system32\atiumdmv.dll
2011-11-10 02:34 . 2011-11-10 02:34	46080	----a-w-	c:\windows\system32\aticalrt.dll
2011-11-10 02:34 . 2011-11-10 02:34	44032	----a-w-	c:\windows\system32\aticalcl.dll
2011-11-10 02:33 . 2008-10-28 00:21	5852672	----a-w-	c:\windows\system32\atiumdag.dll
2011-11-10 02:29 . 2011-11-10 02:29	11300864	----a-w-	c:\windows\system32\aticaldd.dll
2011-11-10 02:29 . 2011-09-08 17:08	4200960	----a-w-	c:\windows\system32\atiumdva.dll
2011-11-10 02:18 . 2010-09-17 10:05	51200	----a-w-	c:\windows\system32\coinst.dll
2011-11-10 02:13 . 2011-11-10 02:13	348160	----a-w-	c:\windows\system32\atiadlxx.dll
2011-11-10 02:13 . 2011-11-10 02:13	14336	----a-w-	c:\windows\system32\atiglpxx.dll
2011-11-10 02:12 . 2011-11-10 02:12	32768	----a-w-	c:\windows\system32\atigktxx.dll
2011-11-10 02:12 . 2011-11-10 02:12	263680	----a-w-	c:\windows\system32\drivers\atikmpag.sys
2011-11-10 02:11 . 2011-11-10 02:11	32256	----a-w-	c:\windows\system32\atiuxpag.dll
2011-11-10 02:11 . 2010-09-17 10:05	29184	----a-w-	c:\windows\system32\atiu9pag.dll
2011-11-10 02:11 . 2011-11-10 02:11	53760	----a-w-	c:\windows\system32\atimpc32.dll
2011-11-10 02:11 . 2011-11-10 02:11	53760	----a-w-	c:\windows\system32\amdpcom32.dll
2011-11-10 02:11 . 2010-09-17 10:05	37376	----a-w-	c:\windows\system32\atitmpxx.dll
2011-11-10 02:10 . 2011-11-10 02:10	53248	----a-w-	c:\windows\system32\drivers\ati2erec.dll
2011-11-09 21:39 . 2011-11-09 21:39	59904	----a-w-	c:\windows\system32\OpenVideo.dll
2011-11-09 21:39 . 2011-11-09 21:39	54784	----a-w-	c:\windows\system32\OVDecode.dll
2011-11-09 21:38 . 2011-11-09 21:38	14375936	----a-w-	c:\windows\system32\amdocl.dll
2011-11-09 21:37 . 2011-11-09 21:37	44032	----a-w-	c:\windows\system32\OpenCL.dll
2011-11-08 14:42 . 2011-12-14 16:25	2048	----a-w-	c:\windows\system32\tzres.dll
2011-11-03 22:47 . 2011-12-14 17:58	1798144	----a-w-	c:\windows\system32\jscript9.dll
2011-11-03 22:40 . 2011-12-14 17:58	1427456	----a-w-	c:\windows\system32\inetcpl.cpl
2011-11-03 22:39 . 2011-12-14 17:58	1127424	----a-w-	c:\windows\system32\wininet.dll
2011-11-03 22:31 . 2011-12-14 17:58	2382848	----a-w-	c:\windows\system32\mshtml.tlb
2011-10-27 08:01 . 2011-12-14 16:25	3602816	----a-w-	c:\windows\system32\ntkrnlpa.exe
2011-10-27 08:01 . 2011-12-14 16:25	3550080	----a-w-	c:\windows\system32\ntoskrnl.exe
2012-01-02 16:32 . 2011-04-25 11:52	121816	----a-w-	c:\program files\mozilla firefox\components\browsercomps.dll
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-21 125952]
"Pando Media Booster"="c:\program files\Pando Networks\Media Booster\PMB.exe" [2010-06-13 2937528]
"Search Protection"="c:\program files\Yahoo!\Search Protection\SearchProtection.exe" [2009-02-23 111856]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"VX3000"="c:\windows\vVX3000.exe" [2009-06-26 757248]
"Logitech Hardware Abstraction Layer"="KHALMNPR.EXE" [2008-02-29 76304]
"Kernel and Hardware Abstraction Layer"="KHALMNPR.EXE" [2008-02-29 76304]
"KBD"="c:\hp\KBD\KbdStub.EXE" [2006-12-08 65536]
"hpsysdrv"="c:\hp\support\hpsysdrv.exe" [2007-04-18 65536]
"HP Health Check Scheduler"="c:\program files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe" [2008-06-02 75008]
"LifeCam"="c:\program files\Microsoft LifeCam\LifeExp.exe" [2009-07-24 118640]
"YSearchProtection"="c:\program files\Yahoo!\Search Protection\SearchProtection.exe" [2009-02-23 111856]
"ATICustomerCare"="c:\program files\ATI\ATICustomerCare\ATICustomerCare.exe" [2010-03-04 311296]
"VirtualCloneDrive"="c:\program files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" [2011-03-07 89456]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-06-06 937920]
"DivXUpdate"="c:\program files\DivX\DivX Update\DivXUpdate.exe" [2011-07-28 1259376]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2011-10-11 258512]
"APSDaemon"="c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2011-11-01 59240]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2011-11-09 343168]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2011-10-24 421888]
"Malwarebytes' Anti-Malware"="c:\program files\Malwarebytes' Anti-Malware\mbamgui.exe" [2011-12-24 460872]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2012-01-16 421736]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Logitech SetPoint.lnk - c:\program files\Logitech\SetPoint\SetPoint.exe [2009-4-4 805392]
Microsoft Office.lnk - c:\program files\Microsoft Office\Office10\OSA.EXE [2001-2-13 83360]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKLM\~\startupfolder\C:^Users^Tuan^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OpenOffice.org 3.2.lnk]
path=c:\users\Tuan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.2.lnk
backup=c:\windows\pss\OpenOffice.org 3.2.lnk.Startup
backupExtension=.Startup
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DivXUpdate]
2011-07-28 23:08	1259376	----a-w-	c:\program files\DivX\DivX Update\DivXUpdate.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc\S-1-5-21-449065279-793341504-1815772316-1000]
"EnableNotificationsRef"=dword:00000001
.
S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files\Common Files\Adobe\ARM\1.0\armsvc.exe [2011-06-06 64952]
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalServiceAndNoImpersonation	REG_MULTI_SZ   	FontCache
HPZ12	REG_MULTI_SZ   	Pml Driver HPZ12 Net Driver HPZ12
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost  - NetSvcs
ezSharedSvc
.
Inhalt des "geplante Tasks" Ordners
.
2012-01-24 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-02-08 18:36]
.
2012-01-24 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-02-08 18:36]
.
2011-12-27 c:\windows\Tasks\HPCeeScheduleForTuan.job
- c:\program files\Hewlett-Packard\SDP\Ceement\HPCEE.exe [2008-10-27 19:03]
.
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = hxxp://de.yahoo.com/?p=us
mStart Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=de_de&c=84&bd=Pavilion&pf=cndt
uInternet Settings,ProxyOverride = *.local
IE: &Download by Orbit - c:\program files\Orbitdownloader\orbitmxt.dll/201
IE: &Grab video by Orbit - c:\program files\Orbitdownloader\orbitmxt.dll/204
IE: Do&wnload selected by Orbit - c:\program files\Orbitdownloader\orbitmxt.dll/203
IE: Down&load all by Orbit - c:\program files\Orbitdownloader\orbitmxt.dll/202
IE: Free YouTube Download - c:\users\Tuan\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubedownload.htm
IE: Free YouTube to iPhone Converter - c:\users\Tuan\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetoiphoneconverter.htm
IE: Free YouTube to MP3 Converter - c:\users\Tuan\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm
IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_7461B1589E8B4FB7.dll/cmsidewiki.html
IE: Nach Microsoft &Excel exportieren - c:\progra~1\MICROS~3\Office10\EXCEL.EXE/3000
IE: Save YouTube Video
IE: Save YouTube Video as MP3
TCP: DhcpNameServer = 192.168.0.1
FF - ProfilePath - c:\users\Tuan\AppData\Roaming\Mozilla\Firefox\Profiles\w97yn8xt.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2475029&SearchSource=3&q={searchTerms}
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://de.yahoo.com/
FF - prefs.js: keyword.URL - hxxp://search.babylon.com/?AF=109130&tt=261211_ctrl&babsrc=adbartrp&mntrId=5e90e91800000000000000ff9250e086&q=
FF - prefs.js: network.proxy.type - 0
FF - user.js: network.cookie.cookieBehavior - 0
FF - user.js: privacy.clearOnShutdown.cookies - false
FF - user.js: security.warn_viewing_mixed - false
FF - user.js: security.warn_viewing_mixed.show_once - false
FF - user.js: security.warn_submit_insecure - false
FF - user.js: security.warn_submit_insecure.show_once - false
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
URLSearchHooks-{a1e75a0e-4397-4ba8-bb50-e19fb66890f4} - (no file)
BHO-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
Toolbar-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
HKCU-Run-{E9C6CB31-E94C-2F72-2100-5C481A11A900} - c:\users\Tuan\AppData\Roaming\Pauhuw\efdayme.exe
HKLM-Run-hpqSRMon - (no file)
HKLM-Run-SunJavaUpdateSched - c:\program files\Java\jre6\bin\jusched.exe
AddRemove-Delphi5 - c:\windows\IsUn0407.exe
AddRemove-Free Audio Dub_is1 - c:\program files\DVDVideoSoft\Free Audio Dub\unins000.exe
AddRemove-sp44626 - c:\hp\Softpaq\sp44626\sp44626.exe
AddRemove-Steam - c:\progra~1\Steam\UNWISE.EXE
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, hxxp://www.gmer.net
Rootkit scan 2012-01-24 22:56
Windows 6.0.6002 Service Pack 2 NTFS
.
Scanne versteckte Prozesse... 
.
Scanne versteckte Autostarteinträge... 
.
Scanne versteckte Dateien... 
.
Scan erfolgreich abgeschlossen
versteckte Dateien: 0
.
**************************************************************************
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\{22D78859-9CE9-4B77-BF18-AC83E81A9263}]
"ImagePath"="\??\c:\program files\HP\DVDPlay\000.fcl"
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_USERS\S-1-5-21-449065279-793341504-1815772316-1000\Software\SecuROM\License information*]
"datasecu"=hex:52,56,3d,c6,d7,d5,93,74,ba,a6,f6,e0,5f,08,79,62,29,8c,dc,eb,5e,
   eb,a0,21,1c,5d,56,7d,3e,57,68,0f,d0,45,be,32,e0,6d,51,69,5a,d2,94,74,aa,20,\
"rkeysecu"=hex:66,d5,3f,d0,e1,ce,5a,a9,17,2e,78,dc,1a,8f,57,7c
.
--------------------- Durch laufende Prozesse gestartete DLLs ---------------------
.
- - - - - - - > 'Explorer.exe'(2376)
c:\program files\Logitech\SetPoint\GameHook.dll
c:\program files\Logitech\SetPoint\lgscroll.dll
.
Zeit der Fertigstellung: 2012-01-24  22:59:50
ComboFix-quarantined-files.txt  2012-01-24 21:59
.
Vor Suchlauf: 9 Verzeichnis(se), 418.243.428.352 Bytes frei
Nach Suchlauf: 15 Verzeichnis(se), 418.165.915.648 Bytes frei
.
- - End Of File - - B646718E462D1E44C6E1C665DCD69C43