ACHTUNG! Aus Sicherheitsgründen wurde Ihr Windowssystem blockier (Roter Text, schwarzer Hintergrund)

 Malwarebytes Anti-Malware  (Trial) 1.60.1.1000
www.malwarebytes.org

Database version: v2012.02.12.02

Windows 7 x64 NTFS (Safe Mode/Networking)
Internet Explorer 8.0.7600.16385
maffelaura :: MAFFELAURA-PC [administrator]

Protection: Disabled

12.02.2012 16:38:17
mbam-log-2012-02-12 (17-34-30).txt

Scan type: Full scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 382009
Time elapsed: 55 minute(s), 29 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 1
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|panel (Trojan.Zbot.CBCGen) -> Data: C:\Users\maffelaura\AppData\Roaming\panel\panel.exe -b -> No action taken.

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 2
C:\Users\maffelaura\AppData\Roaming\panel\panel.exe (Trojan.Zbot.CBCGen) -> No action taken.
C:\Users\maffelaura\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\41\35f69e29-48f5b6ef (Trojan.Zbot.CBCGen) -> No action taken.

(end)
         

 ESETSmartInstaller@High as downloader log:
all ok
# version=7
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6583
# api_version=3.0.2
# EOSSerial=801a0d543550964c972d5270f4fabdea
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2012-02-12 05:51:13
# local_time=2012-02-12 06:51:13 (+0100, W. Europe Standard Time)
# country="Germany"
# lang=1033
# osver=6.1.7600 NT 
# compatibility_mode=513 16777086 100 97 8849 74827799 0 0
# compatibility_mode=1792 16777215 100 0 5909234 5909234 0 0
# compatibility_mode=5893 16776573 100 94 19036 80694978 0 0
# compatibility_mode=8192 67108863 100 0 3735 3735 0 0
# scanned=194392
# found=1
# cleaned=0
# scan_time=3945
C:\Games\Activision\Empires Dawn of the Modern World\EDMW_ResSet.exe	probably a variant of Win32/Agent.KFOIWYH trojan (unable to clean)	00000000000000000000000000000000	I