Plagegeist lässt sich nicht entfernen

ComboFix 10-09-30.05 - Privat 01.10.2010  18:01:05.2.1 - x86
Microsoft Windows XP Professional  5.1.2600.3.1252.49.1031.18.1535.1092 [GMT 2:00]
ausgeführt von:: c:\dokumente und einstellungen\Privat\Desktop\cofi.exe
AV: ESET NOD32 Antivirus 4.0 *On-access scanning disabled* (Updated) {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
.

((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\dokumente und einstellungen\Privat\Anwendungsdaten\explorer

.
(((((((((((((((((((((((   Dateien erstellt von 2010-09-01 bis 2010-10-01  ))))))))))))))))))))))))))))))
.

2010-10-01 08:26 . 2010-10-01 08:26	459310	----a-w-	C:\_OTL.zip
2010-10-01 07:45 . 2010-10-01 07:45	--------	d-----w-	C:\_OTL
2010-09-29 06:55 . 2010-09-29 06:55	--------	d-----w-	c:\programme\Misc. Support Library (Spybot - Search & Destroy)
2010-09-29 06:55 . 2010-09-29 06:55	--------	d-----w-	c:\programme\File Scanner Library (Spybot - Search & Destroy)
2010-09-29 06:44 . 2010-09-29 06:44	--------	d-----w-	c:\programme\TeaTimer (Spybot - Search & Destroy)
2010-09-29 06:44 . 2010-09-29 06:44	--------	d-----w-	c:\programme\SDHelper (Spybot - Search & Destroy)
2010-09-28 17:52 . 2010-09-28 17:52	3430224	----a-w-	c:\programme\ccsetup236.exe
2010-09-28 13:26 . 2010-09-28 13:26	6153352	----a-w-	c:\programme\mbam-setup-1.46.exe
2010-09-22 19:37 . 2010-09-22 19:37	--------	d-----w-	c:\dokumente und einstellungen\All Users\Anwendungsdaten\PPLiveVA
2010-09-22 19:35 . 2010-09-22 19:36	5978184	----a-w-	c:\programme\pplivesetup_2.1.0.exe
2010-09-06 19:59 . 2010-09-17 06:34	--------	d-----w-	C:\Eva
2010-09-06 19:52 . 2010-09-06 19:53	44552856	----a-w-	c:\programme\AdbeRdr934_de_DE.exe
2010-09-01 18:27 . 2010-09-01 18:27	--------	d-----w-	c:\programme\phase6
2010-09-01 18:26 . 2010-09-01 18:26	--------	d-----w-	c:\programme\Phase_6_Lernprogramm

.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-10-01 07:45 . 2010-02-22 09:52	--------	d-----w-	c:\programme\FlashGet
2010-10-01 07:33 . 2009-08-26 08:23	--------	d-----w-	c:\dokumente und einstellungen\Privat\Anwendungsdaten\vlc
2010-09-30 21:57 . 2009-12-02 20:01	664	----a-w-	c:\windows\system32\d3d9caps.dat
2010-09-29 08:34 . 2010-02-17 19:13	1	----a-w-	c:\dokumente und einstellungen\Privat\Anwendungsdaten\OpenOffice.org\3\user\uno_packages\cache\stamp.sys
2010-09-29 06:43 . 2004-09-22 10:17	--------	d-----w-	c:\programme\Spybot - Search & Destroy
2010-09-28 17:53 . 2010-01-25 18:59	--------	d-----w-	c:\programme\CCleaner
2010-09-28 15:00 . 2009-01-10 16:27	--------	d-----w-	c:\programme\Malwarebytes' Anti-Malware
2010-09-28 10:18 . 2010-01-08 21:48	--------	d-----w-	c:\dokumente und einstellungen\All Users\Anwendungsdaten\ecdafb6
2010-09-06 19:56 . 2005-10-17 10:15	--------	d-----w-	c:\programme\Gemeinsame Dateien\Adobe
2010-09-01 18:25 . 2010-09-01 18:21	10411392	----a-w-	c:\programme\Phase_6_Lernprogramm.rar
2010-08-11 00:00 . 2010-08-11 00:00	61440	----a-w-	c:\dokumente und einstellungen\Privat\Anwendungsdaten\Sun\Java\Deployment\SystemCache\6.0\42\4488892a-475007a2-n\decora-sse.dll
2010-08-11 00:00 . 2010-08-11 00:00	503808	----a-w-	c:\dokumente und einstellungen\Privat\Anwendungsdaten\Sun\Java\Deployment\SystemCache\6.0\4\7ec4bf04-73e4307a-n\msvcp71.dll
2010-08-11 00:00 . 2010-08-11 00:00	348160	----a-w-	c:\dokumente und einstellungen\Privat\Anwendungsdaten\Sun\Java\Deployment\SystemCache\6.0\4\7ec4bf04-73e4307a-n\msvcr71.dll
2010-08-11 00:00 . 2010-08-11 00:00	12800	----a-w-	c:\dokumente und einstellungen\Privat\Anwendungsdaten\Sun\Java\Deployment\SystemCache\6.0\42\4488892a-475007a2-n\decora-d3d.dll
2010-08-11 00:00 . 2010-08-11 00:00	499712	----a-w-	c:\dokumente und einstellungen\Privat\Anwendungsdaten\Sun\Java\Deployment\SystemCache\6.0\4\7ec4bf04-73e4307a-n\jmc.dll
2010-07-20 20:38 . 2010-07-20 20:38	33850672	----a-w-	c:\programme\QuickTimeInstaller.exe
2010-07-06 19:25 . 2010-07-06 19:25	2742931	----a-w-	c:\programme\tsMuxeR-1.10.6.zip
2010-06-26 20:33 . 2010-06-26 20:32	67108864	----a-w-	c:\programme\xpud-0.9.2.iso
2010-06-19 15:51 . 2010-06-19 15:50	6244399	----a-w-	c:\programme\MediaServer.rar
2010-06-16 19:28 . 2010-06-16 19:27	19399750	----a-w-	c:\programme\pms-setup-windows-1.20.410.exe
2010-06-13 20:01 . 2010-06-13 20:01	8192000	----a-w-	c:\programme\mkv2vob.exe
2010-06-13 19:54 . 2010-06-13 19:54	5532619	----a-w-	c:\programme\DrDivX_2_0_0_OSS.exe
2010-05-01 20:07 . 2010-05-01 20:06	41538328	----a-w-	c:\programme\TrainingCenter_353.exe
2010-04-22 20:18 . 2010-04-22 20:18	11312	----a-w-	c:\programme\SASASRWPscrshare.dlc
2010-04-21 18:44 . 2010-04-21 18:43	4044900	----a-w-	c:\programme\tipp10_win_v2-0-3.exe
2010-04-11 09:07 . 2010-04-11 09:07	5436202	----a-w-	c:\programme\WBFSManager3.0.1-RTW-x86-x64.rar
2010-04-08 19:23 . 2010-04-08 19:23	2540872	----a-w-	c:\programme\mypwin230de.exe
2010-03-02 14:26 . 2010-03-02 14:20	11746873	----a-w-	c:\programme\epm.zip
2010-02-23 10:59 . 2010-02-23 10:57	21603248	----a-w-	c:\programme\DivXInstaller721.exe
2010-02-22 09:52 . 2010-02-22 09:50	4653240	----a-w-	c:\programme\flashget196en.exe
2010-02-17 18:37 . 2010-02-17 18:23	167555440	----a-w-	c:\programme\OOo_3.2.0_Win32Intel_install_wJRE_de.exe
2010-02-03 19:35 . 2010-02-03 19:34	919840	----a-w-	c:\programme\jre-6u18-windows-i586-iftw-rv.exe
2010-02-03 19:30 . 2009-09-19 20:06	1924200	----a-w-	c:\programme\install_flash_player.exe
2010-02-03 19:17 . 2010-02-03 19:17	3738880	----a-w-	c:\programme\FoxitReader30_enu_Setup.exe
2010-01-30 16:34 . 2010-01-30 16:34	724952	----a-w-	c:\programme\avenger.zip
2010-01-30 08:10 . 2010-01-30 08:10	1401344	----a-w-	c:\programme\HijackThis.msi
2010-01-27 19:41 . 2010-01-20 22:44	22	----a-w-	c:\programme\stinger.opt
2010-01-27 19:02 . 2010-01-27 19:02	9733960	----a-w-	c:\programme\eraser-5.8.7_setup.exe
2010-01-27 18:59 . 2010-01-27 18:59	487	----a-w-	c:\programme\Verknüpfung mit RSIT.exe.lnk
2010-01-27 18:59 . 2010-01-27 18:59	781909	----a-w-	c:\programme\RSIT.exe
2010-01-25 18:58 . 2010-01-25 18:58	1115064	----a-w-	c:\programme\ccsetup227_slim.exe
2010-01-20 22:40 . 2010-01-20 22:40	10038728	----a-w-	c:\programme\windows-kb890830-v3.3.exe
2010-01-20 21:03 . 2010-01-20 21:02	4129799	----a-w-	c:\programme\stinger.exe
2010-01-10 14:44 . 2010-01-10 14:44	35782492	----a-w-	c:\programme\esetnod32antivirus_32bit.zip
2009-12-14 20:05 . 2009-12-14 20:04	14702386	----a-w-	c:\programme\AudioBookConverter_018_Setup.exe
2009-12-12 15:05 . 2009-12-12 15:05	963710	----a-w-	c:\programme\undercoverxp122.zip
2009-12-05 09:31 . 2009-12-05 09:31	27997176	----a-w-	c:\programme\AVSMediaPlayer311.exe
2009-12-02 21:02 . 2009-12-02 21:02	1235950	----a-w-	c:\programme\cuesplitter_setup.exe
2009-11-20 07:40 . 2009-11-20 07:40	28253422	----a-w-	c:\programme\JDownloader095Setup.exe
2009-10-28 09:15 . 2009-10-28 09:15	7918224	----a-w-	c:\programme\Firefox Setup 3.5.4.exe
2009-10-04 08:00 . 2009-10-04 08:00	630421	----a-w-	c:\programme\USB-Fehlerbehebung.zip
2009-09-15 19:46 . 2009-09-15 19:43	6832108	----a-w-	c:\programme\1.0-hidpi_PRIVAT.rar
2009-09-15 18:43 . 2009-09-15 18:40	6315084	----a-w-	c:\programme\trireset_PRIVAT.rar
2009-08-27 17:34 . 2009-08-27 18:57	7704380	----a-w-	c:\programme\Monkey_in_Zoo__Privatbilder_.rar
2009-08-26 18:36 . 2009-08-26 18:21	4135664	----a-w-	c:\programme\InstallSnapfishPluginV3.exe
2009-08-26 08:30 . 2009-08-26 08:28	13072080	----a-w-	c:\programme\010-kainse.part2.rar
2009-08-26 07:58 . 2009-08-26 07:51	52428800	----a-w-	c:\programme\010-kainse.part1.rar
2009-08-26 07:51 . 2009-08-26 07:51	18015723	----a-w-	c:\programme\vlc-1.0.1-win32.exe
2009-08-26 07:47 . 2009-08-26 07:47	3942048	----a-w-	c:\programme\mbam-setup14.exe
2009-06-01 18:34 . 2009-06-01 18:34	897920	----a-w-	c:\programme\WGAPluginInstall.exe
2009-03-19 22:18 . 2010-02-13 13:39	1690	----a-w-	c:\programme\readme.txt
2009-02-04 19:46 . 2009-02-04 19:46	7567355	----a-w-	c:\programme\NAVIGON_Fresh_setup.exe
2009-02-01 12:31 . 2009-02-01 12:31	9341888	----a-w-	c:\programme\winamp5541_full_emusic-7plus_de-de.exe
2009-01-10 16:33 . 2009-01-10 16:32	1533440	----a-w-	c:\programme\MSPF10ENU.msi
2008-12-23 20:11 . 2008-12-23 20:11	41887008	----a-w-	c:\programme\TrainingCenterForWindows_343.exe
2008-12-23 20:08 . 2008-12-23 20:05	22102584	----a-w-	c:\programme\antivir_workstation_winu_de_h337.exe
2008-02-13 21:12 . 2008-02-13 21:12	798	----a-w-	c:\programme\DownSizer.lnk
2007-02-19 13:27 . 2007-02-19 13:27	524	----a-w-	c:\programme\WinZip.lnk
.

((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"HTpatch"="c:\windows\htpatch.exe" [2002-10-30 28672]
"SiSUSBRG"="c:\windows\SiSUSBrg.exe" [2002-07-12 106496]
"ATIPTA"="c:\programme\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2003-06-05 335872]
"PaperPort PTD"="c:\programme\Scansoft\PaperPort\pptd40nt.exe" [2003-05-20 45108]
"IndexSearch"="c:\programme\Scansoft\PaperPort\IndexSearch.exe" [2003-05-20 36864]
"egui"="c:\programme\ESET\ESET NOD32 Antivirus\egui.exe" [2009-11-16 2054360]
"SunJavaUpdateSched"="c:\programme\Gemeinsame Dateien\Java\Java Update\jusched.exe" [2010-01-11 246504]
"DivXUpdate"="c:\programme\DivX\DivX Update\DivXUpdate.exe" [2010-04-12 1135912]

c:\dokumente und einstellungen\All Users\Startmen�\Programme\Autostart\
p6_19_erinnerung.lnk - c:\programme\phase6\phase6_19\WinStart\WinStart.exe [2007-2-11 49152]

[HKLM\~\startupfolder\C:^Dokumente und Einstellungen^All Users^Startmenü^Programme^Autostart^Adobe Reader - Schnellstart.lnk]
path=c:\dokumente und einstellungen\All Users\Startmenü\Programme\Autostart\Adobe Reader - Schnellstart.lnk
backup=c:\windows\pss\Adobe Reader - Schnellstart.lnkCommon Startup

[HKLM\~\startupfolder\C:^Dokumente und Einstellungen^All Users^Startmenü^Programme^Autostart^InterVideo WinCinema Manager.lnk]
path=c:\dokumente und einstellungen\All Users\Startmenü\Programme\Autostart\InterVideo WinCinema Manager.lnk
backup=c:\windows\pss\InterVideo WinCinema Manager.lnkCommon Startup

[HKLM\~\startupfolder\C:^Dokumente und Einstellungen^All Users^Startmenü^Programme^Autostart^Microsoft Office.lnk]
path=c:\dokumente und einstellungen\All Users\Startmenü\Programme\Autostart\Microsoft Office.lnk
backup=c:\windows\pss\Microsoft Office.lnkCommon Startup

[HKLM\~\startupfolder\C:^Dokumente und Einstellungen^Privat^Startmenü^Programme^Autostart^OpenOffice.org 3.2.lnk]
path=c:\dokumente und einstellungen\Privat\Startmenü\Programme\Autostart\OpenOffice.org 3.2.lnk
backup=c:\windows\pss\OpenOffice.org 3.2.lnkStartup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
2010-06-09 08:06	976832	----a-r-	c:\programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
2010-06-20 02:04	35760	----a-w-	c:\programme\Adobe\Reader 9.0\Reader\reader_sl.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CanonMyPrinter]
2009-11-02 00:30	2508104	----a-w-	c:\programme\Canon\MyPrinter\BJMYPRT.EXE

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\gStart]
2008-08-13 13:34	1891416	----a-w-	c:\garmin\gStart.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LexwareInfoService]
2008-11-03 12:21	339240	----a-w-	c:\programme\Gemeinsame Dateien\Lexware\Update Manager\LxUpdateManager.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
2008-04-14 02:22	1695232	------w-	c:\programme\Messenger\msmsgs.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroCheck]
2001-07-09 09:50	155648	----a-w-	c:\windows\system32\NeroCheck.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
2010-03-17 19:53	421888	----a-w-	c:\programme\QuickTime\QTTask.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RealTray]
2004-10-06 17:23	26112	----a-w-	c:\programme\Real\RealPlayer\realplay.exe

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Programme\\Java\\jre6\\bin\\javaw.exe"=
"c:\\Programme\\FlashGet\\flashget.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=

R1 ehdrv;ehdrv;c:\windows\system32\drivers\ehdrv.sys [16.11.2009 10:03 108792]
R1 epfwtdir;epfwtdir;c:\windows\system32\drivers\epfwtdir.sys [16.11.2009 10:06 96408]
R2 ekrn;ESET Service;c:\programme\ESET\ESET NOD32 Antivirus\ekrn.exe [16.11.2009 10:04 735960]
S3 AVMUNET;AVM FRITZ!Box;c:\windows\system32\drivers\avmunet.sys [15.11.2005 21:40 15104]
S3 epmntdrv;epmntdrv;c:\windows\system32\epmntdrv.sys [02.03.2010 16:36 13192]
S3 EuGdiDrv;EuGdiDrv;c:\windows\system32\EuGdiDrv.sys [02.03.2010 16:36 8456]
S3 HRService;Haufe iDesk-Service in c:\programme\Haufe\iDesk\iDeskService\Zope;c:\programme\Haufe\iDesk\iDeskService\ideskservice.exe [20.08.2008 07:08 70336]
S3 HSFHWCD2;HSFHWCD2;c:\windows\system32\drivers\HSFHWCD2.sys [06.10.2004 19:19 162164]

--- Andere Dienste/Treiber im Speicher ---

*NewlyCreated* - SISPORT
*Deregistered* - SiSPort
.
Inhalt des "geplante Tasks" Ordners

2010-02-07 c:\windows\Tasks\WGASetup.job
- c:\windows\system32\KB905474\wgasetup.exe [2010-02-07 21:18]
.
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = hxxp://www.google.com
mWindow Title = Microsoft Internet Explorer
mSearch Bar = hxxp://www.google.com
uInternet Connection Wizard,ShellNext = iexplore
uSearchURL,(Default) = hxxp://www.google.com/keyword/%s
IE: &Alles mit FlashGet laden - c:\programme\FlashGet\jc_all.htm
IE: &Google Search - c:\programme\google\GoogleToolbar1.dll/cmsearch.html
IE: &Mit FlashGet laden - c:\programme\FlashGet\jc_link.htm
IE: &Translate English Word - c:\programme\google\GoogleToolbar1.dll/cmwordtrans.html
IE: Backward Links - c:\programme\google\GoogleToolbar1.dll/cmbacklinks.html
IE: Cached Snapshot of Page - c:\programme\google\GoogleToolbar1.dll/cmcache.html
IE: Nach Microsoft &Excel exportieren - c:\progra~1\MICROS~2\Office10\EXCEL.EXE/3000
IE: Similar Pages - c:\programme\google\GoogleToolbar1.dll/cmsimilar.html
IE: Translate Page into English - c:\programme\google\GoogleToolbar1.dll/cmtrans.html
DPF: DirectAnimation Java Classes - file://c:\windows\Java\classes\dajava.cab
DPF: Microsoft XML Parser for Java - file://c:\windows\Java\classes\xmldso.cab
FF - ProfilePath - c:\dokumente und einstellungen\Privat\Anwendungsdaten\Mozilla\Firefox\Profiles\j6dy2lrg.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.google.de/
FF - plugin: c:\programme\DivX\DivX Plus Web Player\npdivx32.dll
FF - plugin: c:\programme\Mozilla Firefox\plugins\npFoxitReaderPlugin.dll
FF - plugin: c:\programme\Viewpoint\Viewpoint Experience Technology\npViewpoint.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- FIREFOX Richtlinien ----
c:\programme\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbaam7a8h", true); 
c:\programme\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4ar", true); 
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, hxxp://www.gmer.net
Rootkit scan 2010-10-01 18:06
Windows 5.1.2600 Service Pack 3 NTFS

Scanne versteckte Prozesse... 

Scanne versteckte Autostarteinträge... 

HKLM\Software\Microsoft\Windows\CurrentVersion\Run
  HTpatch = c:\windows\htpatch.exe?ows\CurrentVersion\Run???\??????[????`??[???[`??[???????????????[???[???[???[$??????[???????????????[???????????[???w????(????3?w???w?????3?w ??w???[:???????d???r??[1??[???[d??????[?-?[????z??w8h?[\2?[?1?[htinst.INI?[?u?[????d????????F? 

Scanne versteckte Dateien... 

Scan erfolgreich abgeschlossen
versteckte Dateien: 0

**************************************************************************
.
--------------------- Gesperrte Registrierungsschluessel ---------------------

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10i_ActiveX.exe,-101"

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10i_ActiveX.exe"

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
--------------------- Durch laufende Prozesse gestartete DLLs ---------------------

- - - - - - - > 'winlogon.exe'(404)
c:\windows\system32\Ati2evxx.dll

- - - - - - - > 'explorer.exe'(3052)
c:\windows\system32\webcheck.dll
.
Zeit der Fertigstellung: 2010-10-01  18:08:36
ComboFix-quarantined-files.txt  2010-10-01 16:08
ComboFix2.txt  2010-01-31 06:44

Vor Suchlauf: 14 Verzeichnis(se), 22.537.596.928 Bytes frei
Nach Suchlauf: 16 Verzeichnis(se), 22.542.995.456 Bytes frei

- - End Of File - - 5224868BAF325A47C663F1DA99A7A95A