Code:
Alles auswählen Aufklappen ATTFilter
ComboFix 12-04-04.02 - Bad Weezy 04.04.2012 23:55:01.1.8 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.49.1031.18.8163.6877 [GMT 2:00]
ausgeführt von:: c:\users\Bad Weezy\Desktop\ComboFix.exe
AV: Avira Desktop *Disabled/Outdated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
SP: Avira Desktop *Disabled/Outdated* {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Neuer Wiederherstellungspunkt wurde erstellt
.
.
(((((((((((((((((((((((((((((((((((( Weitere Löschungen ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\Bad Weezy\AppData\Local\bloson.bmp
c:\users\Bad Weezy\AppData\Local\Bloson.exe
c:\users\Bad Weezy\AppData\Local\ConduitInstaller.exe
c:\users\Bad Weezy\AppData\Local\lateral1.bmp
c:\users\Bad Weezy\AppData\Local\lateral2.bmp
c:\users\Bad Weezy\AppData\Local\lateral3.bmp
c:\users\Bad Weezy\AppData\Local\toolbar3.bmp
c:\users\Bad Weezy\AppData\Roaming\toolplugin\toolbar.dll
c:\windows\SysWow64\muzapp.exe
.
.
((((((((((((((((((((((((((((((((((((((( Treiber/Dienste )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Service_Boonty Games
.
.
((((((((((((((((((((((( Dateien erstellt von 2012-03-04 bis 2012-04-04 ))))))))))))))))))))))))))))))
.
.
2012-04-04 21:56 . 2012-04-04 21:56 -------- d-----w- c:\users\UpdatusUser.BadWeezy-PC\AppData\Local\temp
2012-04-04 21:56 . 2012-04-04 21:56 -------- d-----w- c:\users\Default\AppData\Local\temp
2012-04-04 07:47 . 2012-03-14 03:27 8669240 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{11507107-55A5-446B-B4F9-46F03093ADCF}\mpengine.dll
2012-04-03 05:01 . 2012-04-03 05:01 -------- d-----w- C:\_OTL
2012-04-02 01:00 . 2012-04-02 01:00 -------- d-----w- c:\program files (x86)\MSXML 4.0
2012-04-01 21:34 . 2012-04-01 21:34 418464 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2012-03-30 19:42 . 2012-03-30 19:42 -------- d-----w- c:\program files (x86)\ESET
2012-03-28 23:51 . 2012-03-28 23:51 -------- d-----w- c:\program files (x86)\Common Files\Java
2012-03-28 20:54 . 2012-03-13 04:38 97208 ----a-w- c:\program files (x86)\Mozilla Firefox\components\browsercomps.dll
2012-03-28 20:54 . 2012-03-13 04:36 44472 ----a-w- c:\program files (x86)\Mozilla Firefox\mozglue.dll
2012-03-28 20:54 . 2012-03-13 04:36 592824 ----a-w- c:\program files (x86)\Mozilla Firefox\gkmedias.dll
2012-03-28 20:54 . 2012-03-13 04:35 626688 ----a-w- c:\program files (x86)\Mozilla Firefox\msvcr80.dll
2012-03-28 20:54 . 2012-03-13 04:35 548864 ----a-w- c:\program files (x86)\Mozilla Firefox\msvcp80.dll
2012-03-28 20:54 . 2012-03-13 04:35 479232 ----a-w- c:\program files (x86)\Mozilla Firefox\msvcm80.dll
2012-03-28 20:25 . 2012-03-28 20:25 -------- d-----w- c:\users\Bad Weezy\AppData\Roaming\Malwarebytes
2012-03-28 20:25 . 2012-03-28 20:25 -------- d-----w- c:\programdata\Malwarebytes
2012-03-28 20:25 . 2012-03-28 20:25 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
2012-03-28 20:25 . 2011-12-10 13:24 23152 ----a-w- c:\windows\system32\drivers\mbam.sys
2012-03-18 02:00 . 2011-11-19 15:20 5559152 ----a-w- c:\windows\system32\ntoskrnl.exe
2012-03-18 02:00 . 2011-11-19 14:50 3968368 ----a-w- c:\windows\SysWow64\ntkrnlpa.exe
2012-03-18 02:00 . 2011-11-19 14:50 3913584 ----a-w- c:\windows\SysWow64\ntoskrnl.exe
2012-03-17 10:13 . 2012-02-03 04:34 3145728 ----a-w- c:\windows\system32\win32k.sys
2012-03-17 10:13 . 2012-02-10 06:36 1544192 ----a-w- c:\windows\system32\DWrite.dll
2012-03-17 10:13 . 2012-02-10 05:38 1077248 ----a-w- c:\windows\SysWow64\DWrite.dll
2012-03-17 10:10 . 2012-02-17 06:38 1031680 ----a-w- c:\windows\system32\rdpcore.dll
2012-03-17 10:10 . 2012-02-17 05:34 826880 ----a-w- c:\windows\SysWow64\rdpcore.dll
2012-03-17 10:10 . 2012-02-17 04:58 210944 ----a-w- c:\windows\system32\drivers\rdpwd.sys
2012-03-17 10:10 . 2012-02-17 04:57 23552 ----a-w- c:\windows\system32\drivers\tdtcp.sys
2012-03-17 10:10 . 2012-01-25 06:38 77312 ----a-w- c:\windows\system32\rdpwsx.dll
2012-03-17 10:10 . 2012-01-25 06:38 149504 ----a-w- c:\windows\system32\rdpcorekmts.dll
2012-03-17 10:10 . 2012-01-25 06:33 9216 ----a-w- c:\windows\system32\rdrmemptylst.exe
.
.
.
(((((((((((((((((((((((((((((((((((( Find3M Bericht ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-04-01 21:34 . 2011-06-20 12:48 70304 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2012-03-28 23:51 . 2011-06-21 04:34 472808 ----a-w- c:\windows\SysWow64\deployJava1.dll
2012-02-27 01:06 . 2012-02-27 01:06 2300696 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup\markup.dll
2012-02-27 01:06 . 2012-02-27 01:06 42776 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\dSM\StartResources.dll
2012-02-27 01:05 . 2012-02-27 01:05 1236816 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight\SpotlightResources.dll
2012-02-23 08:18 . 2010-11-21 03:27 279656 ------w- c:\windows\system32\MpSigStub.exe
2012-02-18 14:28 . 2011-10-20 08:46 132320 ----a-w- c:\windows\system32\drivers\avipbb.sys
2012-01-31 23:02 . 2012-01-31 23:02 74752 ----a-w- c:\windows\SysWow64\RegisterIEPKEYs.exe
2012-01-31 23:02 . 2012-01-31 23:02 161792 ----a-w- c:\windows\SysWow64\msls31.dll
2012-01-31 23:02 . 2012-01-31 23:02 110592 ----a-w- c:\windows\SysWow64\IEAdvpack.dll
2012-01-31 23:02 . 2012-01-31 23:02 91648 ----a-w- c:\windows\system32\SetIEInstalledDate.exe
2012-01-31 23:02 . 2012-01-31 23:02 89088 ----a-w- c:\windows\system32\RegisterIEPKEYs.exe
2012-01-31 23:02 . 2012-01-31 23:02 86528 ----a-w- c:\windows\SysWow64\iesysprep.dll
2012-01-31 23:02 . 2012-01-31 23:02 85504 ----a-w- c:\windows\system32\iesetup.dll
2012-01-31 23:02 . 2012-01-31 23:02 76800 ----a-w- c:\windows\SysWow64\SetIEInstalledDate.exe
2012-01-31 23:02 . 2012-01-31 23:02 76800 ----a-w- c:\windows\system32\tdc.ocx
2012-01-31 23:02 . 2012-01-31 23:02 74752 ----a-w- c:\windows\SysWow64\iesetup.dll
2012-01-31 23:02 . 2012-01-31 23:02 63488 ----a-w- c:\windows\SysWow64\tdc.ocx
2012-01-31 23:02 . 2012-01-31 23:02 603648 ----a-w- c:\windows\system32\vbscript.dll
2012-01-31 23:02 . 2012-01-31 23:02 49664 ----a-w- c:\windows\system32\imgutil.dll
2012-01-31 23:02 . 2012-01-31 23:02 48640 ----a-w- c:\windows\SysWow64\mshtmler.dll
2012-01-31 23:02 . 2012-01-31 23:02 48640 ----a-w- c:\windows\system32\mshtmler.dll
2012-01-31 23:02 . 2012-01-31 23:02 448512 ----a-w- c:\windows\system32\html.iec
2012-01-31 23:02 . 2012-01-31 23:02 420864 ----a-w- c:\windows\SysWow64\vbscript.dll
2012-01-31 23:02 . 2012-01-31 23:02 367104 ----a-w- c:\windows\SysWow64\html.iec
2012-01-31 23:02 . 2012-01-31 23:02 35840 ----a-w- c:\windows\SysWow64\imgutil.dll
2012-01-31 23:02 . 2012-01-31 23:02 30720 ----a-w- c:\windows\system32\licmgr10.dll
2012-01-31 23:02 . 2012-01-31 23:02 23552 ----a-w- c:\windows\SysWow64\licmgr10.dll
2012-01-31 23:02 . 2012-01-31 23:02 222208 ----a-w- c:\windows\system32\msls31.dll
2012-01-31 23:02 . 2012-01-31 23:02 173056 ----a-w- c:\windows\system32\ieUnatt.exe
2012-01-31 23:02 . 2012-01-31 23:02 165888 ----a-w- c:\windows\system32\iexpress.exe
2012-01-31 23:02 . 2012-01-31 23:02 160256 ----a-w- c:\windows\system32\wextract.exe
2012-01-31 23:02 . 2012-01-31 23:02 152064 ----a-w- c:\windows\SysWow64\wextract.exe
2012-01-31 23:02 . 2012-01-31 23:02 150528 ----a-w- c:\windows\SysWow64\iexpress.exe
2012-01-31 23:02 . 2012-01-31 23:02 142848 ----a-w- c:\windows\SysWow64\ieUnatt.exe
2012-01-31 23:02 . 2012-01-31 23:02 135168 ----a-w- c:\windows\system32\IEAdvpack.dll
2012-01-31 23:02 . 2012-01-31 23:02 12288 ----a-w- c:\windows\system32\mshta.exe
2012-01-31 23:02 . 2012-01-31 23:02 11776 ----a-w- c:\windows\SysWow64\mshta.exe
2012-01-31 23:02 . 2012-01-31 23:02 114176 ----a-w- c:\windows\system32\admparse.dll
2012-01-31 23:02 . 2012-01-31 23:02 111616 ----a-w- c:\windows\system32\iesysprep.dll
2012-01-31 23:02 . 2012-01-31 23:02 101888 ----a-w- c:\windows\SysWow64\admparse.dll
2012-01-25 11:58 . 2012-01-25 11:58 27136 ----a-w- c:\windows\system32\drivers\Motousbnet.sys
2012-01-25 11:57 . 2012-01-25 11:57 30720 ----a-w- c:\windows\system32\drivers\motmodem.sys
2012-01-25 11:57 . 2012-01-25 11:57 9728 ----a-w- c:\windows\system32\drivers\motccgpfl.sys
2012-01-25 11:57 . 2012-01-25 11:57 22016 ----a-w- c:\windows\system32\drivers\motccgp.sys
.
.
(((((((((((((((((((((((((((( Autostartpunkte der Registrierung ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Password Safe Standard"="c:\program files (x86)\Password Safe and Repository 6\psr.exe" [2011-11-04 4727352]
"MotoCast"="c:\program files (x86)\Motorola Mobility\MotoCast\MotoLauncher.lnk" [2012-03-31 2051]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"NUSB3MON"="c:\program files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe" [2010-11-17 113288]
"AVMWlanClient"="c:\program files (x86)\avmwlanstick\wlangui.exe" [2010-10-22 2105344]
"WinampAgent"="c:\programme (x86)\Winamp\winampa.exe" [2011-07-11 74752]
"Razer Naga Driver"="c:\program files (x86)\Razer\Naga\RazerNagaSysTray.exe" [2011-04-12 953232]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-01-03 843712]
"avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2011-10-11 258512]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2012-01-18 254696]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Rainmeter.lnk - c:\program files\Rainmeter\Rainmeter.exe [2011-9-11 102912]
winamp - Verknüpfung.lnk - c:\programme (x86)\Winamp\winamp.exe [2011-7-11 1595520]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2011-12-17 2348864]
R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-01 253600]
R3 androidusb;SAMSUNG Android Composite ADB Interface Driver;c:\windows\system32\Drivers\ssadadb.sys [x]
R3 avmeject;AVM Eject;c:\windows\system32\drivers\avmeject.sys [x]
R3 BTCFilterService;USB Networking Driver Filter Service;c:\windows\system32\DRIVERS\motfilt.sys [x]
R3 fwlanusbn;FRITZ!WLAN N;c:\windows\system32\DRIVERS\fwlanusbn.sys [x]
R3 motccgp;Motorola USB Composite Device Driver;c:\windows\system32\DRIVERS\motccgp.sys [x]
R3 motccgpfl;MotCcgpFlService;c:\windows\system32\DRIVERS\motccgpfl.sys [x]
R3 MotioninJoyXFilter;MotioninJoy Virtual Xinput device Filter Driver;c:\windows\system32\DRIVERS\MijXfilt.sys [x]
R3 Motousbnet;Motorola USB Networking Driver Service;c:\windows\system32\DRIVERS\Motousbnet.sys [x]
R3 motusbdevice;Motorola USB Dev Driver;c:\windows\system32\DRIVERS\motusbdevice.sys [x]
R3 MSI_MSIBIOS_010507;MSI_MSIBIOS_010507;c:\program files (x86)\MSI\Live Update 5\msibios64_100507.sys [x]
R3 MSICDSetup;MSICDSetup;E:\CDriver64.sys [x]
R3 NTIOLib_1_0_4;NTIOLib_1_0_4;c:\program files (x86)\MSI\Live Update 5\NTIOLib_X64.sys [x]
R3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM);c:\windows\system32\DRIVERS\ssadbus.sys [x]
R3 ssadmdfl;SAMSUNG Android USB Modem (Filter);c:\windows\system32\DRIVERS\ssadmdfl.sys [x]
R3 ssadmdm;SAMSUNG Android USB Modem Drivers;c:\windows\system32\DRIVERS\ssadmdm.sys [x]
R3 ssadserd;SAMSUNG Android USB Diagnostic Serial Port (WDM);c:\windows\system32\DRIVERS\ssadserd.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [x]
S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys [x]
S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-01-03 63928]
S2 AntiVirSchedulerService;Avira Planer;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [2011-10-11 86224]
S2 DeviceMonitorService;DeviceMonitorService;c:\program files (x86)\Motorola Media Link\Lite\NServiceEntry.exe [2012-02-16 87368]
S2 MotoHelper;MotoHelper Service;c:\program files (x86)\Motorola\MotoHelper\MotoHelperService.exe [2012-02-01 214896]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2011-12-17 381248]
S3 LGBusEnum;Logitech GamePanel Virtual Bus Enumerator Driver;c:\windows\system32\drivers\LGBusEnum.sys [x]
S3 LGPBTDD;LGPBTDD.sys Display Driver;c:\windows\system32\Drivers\LGPBTDD.sys [x]
S3 MBfilt;MBfilt;c:\windows\system32\drivers\MBfilt64.sys [x]
S3 MEIx64;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys [x]
S3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\nusb3hub.sys [x]
S3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\nusb3xhc.sys [x]
S3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda64v.sys [x]
S3 NvStUSB;NVIDIA Stereoscopic 3D USB driver;c:\windows\system32\DRIVERS\nvstusb.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [x]
S3 RzSynapse;Razer Driver;c:\windows\system32\DRIVERS\RzSynapse.sys [x]
.
.
Inhalt des "geplante Tasks" Ordners
.
2012-04-04 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-01 21:34]
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RtkNGUI64.exe" [2011-01-17 6602856]
"Launch LgDeviceAgent"="c:\program files\Logitech\GamePanel Software\LgDevAgt.exe" [2009-08-13 415752]
"Launch LCDMon"="c:\program files\Logitech\GamePanel Software\LCD Manager\LCDMon.exe" [2009-08-13 2093064]
"Launch LGDCore"="c:\program files\Logitech\GamePanel Software\G-series Software\LGDCore.exe" [2009-08-13 4195848]
"combofix"="c:\combofix\CF32445.3XE" [2010-11-21 345088]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"LoadAppInit_DLLs"=0x0
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: Free YouTube to MP3 Converter - c:\users\Bad Weezy\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm
TCP: DhcpNameServer = 192.168.178.1
FF - ProfilePath - c:\users\Bad Weezy\AppData\Roaming\Mozilla\Firefox\Profiles\1sv1wk8c.default\
FF - prefs.js: browser.search.selectedEngine -
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Wow6432Node-HKLM-Run-Super-Charger - c:\program files (x86)\MSI\Super-Charger\StartSuperCharger.exe
BHO-{F9E4A054-E9B1-4BC3-83A3-76A1AE736170} - c:\program files (x86)\Hotspot Shield\HssIE\HssIE_64.dll
WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
AddRemove-Adobe Shockwave Player - c:\windows\system32\Adobe\Shockwave 11\uninstaller.exe
AddRemove-ESN Sonar-0.70.0 - c:\program files (x86)\Battlelog Web Plugins\Sonar\esnsonar_uninstall.exe
AddRemove-ESN Sonar-0.70.4 - c:\program files (x86)\Battlelog Web Plugins\Sonar\esnsonar_uninstall.exe
AddRemove-toolplugin - c:\users\BADWEE~1\AppData\Local\Temp\WZSE0.TMP\setup.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\User Preferences]
@Denied: (2) (LocalSystem)
"88D7D0879DAB32E14DE5B3A805A34F98AFF34F5977"=hex:01,00,00,00,d0,8c,9d,df,01,15,
d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,84,c7,a8,b8,38,ab,e3,4a,9c,8c,00,\
"2D53CFFC5C1A3DD2E97B7979AC2A92BD59BC839E81"=hex:01,00,00,00,d0,8c,9d,df,01,15,
d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,84,c7,a8,b8,38,ab,e3,4a,9c,8c,00,\
.
[HKEY_USERS\S-1-5-21-192102404-974623874-4118770486-1000\Software\SecuROM\License information*]
"datasecu"=hex:2c,78,3b,d2,4b,47,04,af,b9,f2,b2,5a,e0,d2,ef,7b,88,fa,0f,47,dd,
25,df,88,43,7e,27,76,d5,b9,34,1c,dc,7c,98,36,5c,05,5c,fd,8d,71,c3,a6,de,4c,\
"rkeysecu"=hex:3a,41,18,80,6d,68,a1,2c,db,0d,29,6e,c7,73,b7,c2
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\program files (x86)\Avira\AntiVir Desktop\avguard.exe
c:\program files (x86)\avmwlanstick\WlanNetService.exe
c:\windows\SysWOW64\PnkBstrA.exe
c:\program files (x86)\Motorola\MotoHelper\MotoHelperAgent.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2012-04-04 23:58:11 - PC wurde neu gestartet
ComboFix-quarantined-files.txt 2012-04-04 21:58
.
Vor Suchlauf: 13 Verzeichnis(se), 65.672.052.736 Bytes frei
Nach Suchlauf: 17 Verzeichnis(se), 65.195.163.648 Bytes frei
.
- - End Of File - - 7845E6CB7636117A689F445CC179FFC6