Unerwünschte Googleweiterleitung

ComboFix 11-03-15.02 - Stefan 16.03.2011  10:53:13.1.2 - x86
Microsoft Windows 7 Home Premium   6.1.7600.0.1252.49.1031.18.2038.1188 [GMT 1:00]
ausgeführt von:: c:\users\Stefan\Downloads\cofi.exe.exe
AV: AntiVir Desktop *Enabled/Updated* {090F9C29-64CE-6C6F-379C-5901B49A85B7}
SP: AntiVir Desktop *Enabled/Updated* {B26E7DCD-42F4-63E1-0D2C-6273CF1DCF0A}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
C:\Install.exe
.
.
(((((((((((((((((((((((   Dateien erstellt von 2011-02-16 bis 2011-03-16  ))))))))))))))))))))))))))))))
.
.
2011-03-16 10:02 . 2011-03-16 10:02	--------	d-----w-	c:\users\Default\AppData\Local\temp
2011-03-16 09:32 . 2011-03-16 09:32	--------	d-----w-	c:\program files\CCleaner
2011-03-15 20:45 . 2011-03-15 20:45	--------	d-----w-	C:\_OTL
2011-03-14 13:57 . 2011-03-14 13:57	--------	d-----w-	c:\programdata\Malwarebytes
2011-03-13 21:18 . 2011-03-13 21:24	--------	d-----w-	c:\program files\PakkISO
2011-03-13 20:16 . 2011-03-13 20:16	--------	d-----w-	c:\program files\Mozilla Thunderbird
2011-03-13 18:18 . 2011-03-13 18:21	--------	d-----w-	C:\ASUS.000
2011-03-13 18:17 . 2011-03-13 18:18	--------	d-----w-	C:\ASUS.SYS
2011-03-13 16:52 . 2011-03-13 16:52	--------	d-----w-	c:\program files\Common Files\Java
2011-03-13 16:48 . 2011-03-13 16:48	--------	d-----w-	c:\program files\Glary Utilities
2011-03-13 16:40 . 2011-03-13 16:44	--------	d-----w-	C:\aws
2011-03-13 16:40 . 2011-03-13 16:44	--------	d-----w-	C:\ASUS WebStorage
2011-03-13 14:38 . 2009-09-11 12:25	33768	----a-w-	c:\windows\system32\AsusSender.exe
2011-03-13 14:38 . 2009-08-18 16:35	219136	----a-w-	c:\windows\system32\AsusService.exe
2011-03-12 17:37 . 2011-03-12 17:37	--------	d--h--w-	c:\programdata\Common Files
2011-03-12 17:36 . 2011-03-16 09:39	--------	d-----w-	c:\programdata\AVG10
2011-03-12 17:18 . 2011-03-16 09:45	--------	d-----w-	c:\programdata\AVAST Software
2011-03-12 17:18 . 2011-03-12 17:18	--------	d-----w-	c:\program files\AVAST Software
2011-03-12 17:17 . 2011-03-12 17:36	--------	d-----w-	c:\programdata\MFAData
2011-03-12 17:15 . 2011-03-12 17:15	--------	d-----w-	c:\program files\Microsoft Synchronization Services
2011-03-12 17:13 . 2011-03-12 17:13	--------	d-----w-	c:\program files\Microsoft Sync Framework
2011-03-12 17:13 . 2011-03-12 17:13	--------	d-----w-	c:\program files\Microsoft SQL Server Compact Edition
2011-03-12 17:09 . 2011-03-12 17:09	--------	d-----w-	c:\program files\Microsoft Visual Studio 8
2011-03-12 17:08 . 2011-03-12 17:08	--------	d-----w-	c:\program files\Microsoft Analysis Services
2011-03-12 17:07 . 2011-03-12 17:30	--------	d-----w-	c:\programdata\Microsoft Help
2011-03-12 17:07 . 2011-03-12 17:07	--------	d-----r-	C:\MSOCache
2011-03-11 22:26 . 2011-03-11 22:26	--------	d-----w-	c:\programdata\Applications
2011-03-11 22:25 . 2008-05-30 13:19	507400	----a-w-	c:\windows\system32\XAudio2_1.dll
2011-03-11 22:25 . 2008-05-30 13:17	65032	----a-w-	c:\windows\system32\XAPOFX1_0.dll
2011-03-11 22:25 . 2008-05-30 13:17	25608	----a-w-	c:\windows\system32\X3DAudio1_4.dll
2011-03-11 22:25 . 2007-07-19 23:57	267112	----a-w-	c:\windows\system32\xactengine2_9.dll
2011-03-11 22:25 . 2007-07-19 23:54	18280	----a-w-	c:\windows\system32\x3daudio1_2.dll
2011-03-11 22:25 . 2007-04-04 17:53	81768	----a-w-	c:\windows\system32\xinput1_3.dll
2011-03-11 22:25 . 2007-03-12 15:42	3495784	----a-w-	c:\windows\system32\d3dx9_33.dll
2011-03-11 22:25 . 2011-03-11 22:25	--------	d-----w-	c:\program files\Microsoft XNA
2011-03-11 22:04 . 2011-02-02 20:40	472808	----a-w-	c:\windows\system32\deployJava1.dll
2011-03-11 22:03 . 2011-03-13 16:51	--------	d-----w-	c:\program files\Java
2011-03-11 19:14 . 2011-03-11 19:14	96256	--sha-r-	c:\windows\system32\AuthFWGPE.dll
2011-03-11 18:52 . 2011-03-11 18:52	--------	dc----w-	c:\windows\system32\DRVSTORE
2011-03-11 18:52 . 2009-05-18 12:17	26600	----a-w-	c:\windows\system32\drivers\GEARAspiWDM.sys
2011-03-11 18:52 . 2008-04-17 11:12	107368	----a-w-	c:\windows\system32\GEARAspi.dll
2011-03-11 18:51 . 2011-03-11 18:51	--------	d-----w-	c:\program files\iPod
2011-03-11 18:51 . 2011-03-11 18:52	--------	d-----w-	c:\programdata\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
2011-03-11 18:51 . 2011-03-11 18:52	--------	d-----w-	c:\program files\iTunes
2011-03-11 10:36 . 2011-02-23 08:35	5943120	----a-w-	c:\programdata\Microsoft\Windows Defender\Definition Updates\{88AB1B6C-4988-4719-8664-0F76FBB0A081}\mpengine.dll
2011-03-10 13:16 . 2009-01-09 16:18	27136	----a-w-	c:\windows\system32\drivers\RimSerial.sys
2011-03-10 13:16 . 2011-03-10 13:16	--------	d-----w-	c:\programdata\Research In Motion
2011-03-10 13:15 . 2011-03-10 13:16	--------	d-----w-	c:\program files\Common Files\Research In Motion
2011-03-10 13:15 . 2011-03-10 13:15	--------	d-----w-	c:\program files\Research In Motion
2011-03-10 13:12 . 2011-03-10 13:12	--------	d-----w-	c:\program files\Common Files\Adobe AIR
2011-03-10 11:08 . 2011-03-10 11:08	--------	d-----w-	c:\program files\Microsoft IntelliPoint
2011-03-10 11:08 . 2011-03-10 11:08	--------	d-----w-	c:\windows\PCHEALTH
2011-03-10 10:58 . 2011-03-10 10:58	159744	----a-w-	c:\program files\Internet Explorer\Plugins\npqtplugin7.dll
2011-03-10 10:58 . 2011-03-10 10:58	159744	----a-w-	c:\program files\Internet Explorer\Plugins\npqtplugin6.dll
2011-03-10 10:58 . 2011-03-10 10:58	159744	----a-w-	c:\program files\Internet Explorer\Plugins\npqtplugin5.dll
2011-03-10 10:58 . 2011-03-10 10:58	159744	----a-w-	c:\program files\Internet Explorer\Plugins\npqtplugin4.dll
2011-03-10 10:58 . 2011-03-10 10:58	159744	----a-w-	c:\program files\Internet Explorer\Plugins\npqtplugin3.dll
2011-03-10 10:58 . 2011-03-10 10:58	159744	----a-w-	c:\program files\Internet Explorer\Plugins\npqtplugin2.dll
2011-03-10 10:58 . 2011-03-10 10:58	159744	----a-w-	c:\program files\Internet Explorer\Plugins\npqtplugin.dll
2011-03-10 10:57 . 2011-03-11 18:51	--------	d-----w-	c:\programdata\Apple Computer
2011-03-10 10:57 . 2011-03-10 10:58	--------	d-----w-	c:\program files\QuickTime
2011-03-10 10:57 . 2011-03-10 10:57	--------	d-----w-	c:\program files\Apple Software Update
2011-03-10 10:56 . 2011-03-12 11:32	--------	d-----w-	c:\program files\Common Files\Apple
2011-03-10 10:56 . 2011-03-10 10:56	--------	d-----w-	c:\programdata\Apple
2011-03-09 22:06 . 2011-02-19 05:32	1074176	----a-w-	c:\windows\system32\DWrite.dll
2011-03-09 22:06 . 2011-02-19 05:33	802304	----a-w-	c:\windows\system32\FntCache.dll
2011-03-09 22:06 . 2011-02-19 05:32	739840	----a-w-	c:\windows\system32\d2d1.dll
2011-03-09 22:06 . 2010-12-23 05:28	850432	----a-w-	c:\windows\system32\sbe.dll
2011-03-09 22:06 . 2010-12-23 05:28	642048	----a-w-	c:\windows\system32\CPFilters.dll
2011-03-09 22:06 . 2010-12-23 05:28	534528	----a-w-	c:\windows\system32\EncDec.dll
2011-03-09 22:06 . 2010-12-23 05:24	199680	----a-w-	c:\windows\system32\mpg2splt.ax
2011-03-09 22:06 . 2010-12-18 05:30	2690560	----a-w-	c:\windows\system32\mstscax.dll
2011-03-09 22:06 . 2010-12-18 05:26	1034240	----a-w-	c:\windows\system32\mstsc.exe
2011-03-06 02:45 . 2011-03-12 17:13	--------	d-----w-	c:\program files\Microsoft.NET
2011-03-05 23:08 . 2011-03-05 23:08	--------	d-----w-	C:\Intel
2011-03-05 23:08 . 2010-06-08 09:23	435736	----a-w-	c:\windows\system32\drivers\iaStor.sys
2011-03-05 23:08 . 2011-03-05 23:09	--------	d-----w-	c:\program files\Intel
2011-03-05 23:03 . 2011-03-05 23:03	--------	d-----w-	c:\windows\smFile
2011-03-05 23:03 . 2011-03-05 23:03	--------	d-----w-	c:\program files\Azurewave, SMI371L
2011-03-05 23:03 . 2009-12-25 01:10	937984	----a-w-	c:\windows\system32\RemoveSM37X.exe
2011-03-05 23:03 . 2009-12-25 01:10	2532864	----a-w-	c:\windows\system32\drivers\SMIexp.sys
2011-03-05 23:03 . 2009-12-25 01:10	181760	----a-w-	c:\windows\system32\drivers\SMIksdrv.sys
2011-03-05 23:03 . 2009-12-25 01:10	163840	----a-w-	c:\windows\system32\SM37XCoInst.dll
2011-03-05 23:03 . 2009-12-25 01:09	274432	----a-w-	c:\windows\system32\370prop.ax
2011-03-05 23:01 . 2011-03-05 23:01	--------	d-----w-	c:\windows\system32\x64
2011-03-05 23:01 . 2010-10-25 03:20	1006104	----a-w-	c:\windows\system32\igxpun.exe
2011-03-05 22:50 . 2011-03-05 22:50	--------	d-----w-	c:\program files\Synaptics
2011-03-05 14:12 . 2011-03-12 11:26	--------	d-----w-	c:\windows\system32\SupportAppCB
2011-03-04 11:14 . 2009-09-10 05:52	257024	----a-w-	c:\windows\system32\msv1_0.dll
2011-03-04 11:11 . 2009-11-25 11:47	99176	----a-w-	c:\windows\system32\PresentationHostProxy.dll
2011-03-04 11:11 . 2009-11-25 11:47	49472	----a-w-	c:\windows\system32\netfxperf.dll
2011-03-04 11:11 . 2009-11-25 11:47	297808	----a-w-	c:\windows\system32\mscoree.dll
2011-03-04 11:11 . 2009-11-25 11:47	295264	----a-w-	c:\windows\system32\PresentationHost.exe
2011-03-04 11:11 . 2009-11-25 11:47	1130824	----a-w-	c:\windows\system32\dfshim.dll
2011-02-28 14:22 . 2010-02-11 07:10	293376	----a-w-	c:\windows\system32\browserchoice.exe
2011-02-28 14:20 . 2010-03-04 04:04	146304	----a-w-	c:\windows\system32\drivers\usbvideo.sys
2011-02-28 14:20 . 2010-03-04 03:57	190976	----a-w-	c:\windows\system32\drivers\ks.sys
2011-02-28 14:19 . 2011-02-28 14:19	--------	d-----w-	c:\program files\MSXML 4.0
2011-02-28 14:18 . 2010-09-14 06:07	276992	----a-w-	c:\windows\system32\wcncsvc.dll
2011-02-26 07:09 . 2011-02-26 07:20	--------	d-----w-	C:\Casino
2011-02-26 06:17 . 2009-09-03 07:04	1320960	----a-w-	c:\windows\system32\CertEnroll.dll
2011-02-26 06:16 . 2010-11-02 04:35	218624	----a-w-	c:\windows\system32\d3d10_1core.dll
2011-02-26 06:13 . 2010-10-19 08:10	7680	----a-w-	c:\program files\Internet Explorer\iecompat.dll
2011-02-26 06:13 . 2010-02-27 07:32	221696	----a-w-	c:\windows\system32\drivers\mrxsmb10.sys
2011-02-26 06:13 . 2010-02-27 07:32	95744	----a-w-	c:\windows\system32\drivers\mrxsmb20.sys
2011-02-26 06:13 . 2010-02-27 07:32	123392	----a-w-	c:\windows\system32\drivers\mrxsmb.sys
2011-02-26 06:12 . 2011-02-03 05:45	219008	----a-w-	c:\windows\system32\drivers\dxgmms1.sys
2011-02-26 06:12 . 2010-11-02 04:46	728448	----a-w-	c:\windows\system32\drivers\dxgkrnl.sys
2011-02-26 06:12 . 2010-11-02 04:23	107520	----a-w-	c:\windows\system32\cdd.dll
2011-02-25 22:24 . 2011-02-25 22:24	--------	d-----w-	c:\program files\Elantech
2011-02-25 22:24 . 2011-02-25 22:24	16896	----a-w-	c:\windows\AsTaskSched.dll
2011-02-25 16:41 . 2011-02-25 16:41	--------	d-----w-	c:\program files\Common Files\InterVideo
2011-02-25 16:39 . 2011-02-25 16:41	--------	d-----w-	c:\program files\InterVideo
2011-02-25 16:25 . 2011-02-25 16:25	--------	d-----w-	c:\program files\E-Cam
2011-02-25 16:24 . 2011-02-25 16:24	--------	d-----w-	c:\programdata\RSMR
2011-02-25 16:24 . 2011-02-25 16:24	--------	d-----w-	c:\programdata\EBI
2011-02-25 16:21 . 2011-03-16 09:39	--------	d-sh--w-	c:\windows\Installer
2011-02-25 16:18 . 2011-02-09 14:03	11832	----a-w-	c:\windows\system32\drivers\AsUpIO.sys
2011-02-25 16:18 . 2011-02-09 14:03	28672	----a-w-	c:\windows\system32\AsIO.dll
2011-02-25 16:18 . 2011-02-09 14:03	11456	----a-w-	c:\windows\system32\drivers\AsIO.sys
2011-02-25 16:18 . 2011-02-25 16:18	--------	d-----w-	c:\program files\Common Files\InstallShield
2011-02-25 16:16 . 2011-03-13 14:37	--------	d-----w-	c:\program files\ASUS
2011-02-25 16:13 . 2011-03-13 14:38	--------	d-----w-	c:\program files\EeePC
2011-02-25 16:13 . 2011-03-13 14:38	--------	d--h--w-	c:\program files\InstallShield Installation Information
2011-02-25 16:09 . 2011-02-02 16:11	222080	------w-	c:\windows\system32\MpSigStub.exe
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-01-07 14:55 . 2011-01-07 14:55	40800	----a-w-	c:\windows\system32\drivers\point32.sys
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\AsusWSShellExt_B]
@="{CC5FC992-B0AA-47CD-9DC2-83445083CBB8}"
[HKEY_CLASSES_ROOT\CLSID\{CC5FC992-B0AA-47CD-9DC2-83445083CBB8}]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\AsusWSShellExt_O]
@="{618A47A2-528B-4D9A-AFC8-97D3233511E2}"
[HKEY_CLASSES_ROOT\CLSID\{618A47A2-528B-4D9A-AFC8-97D3233511E2}]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"LiveUpdate"="AsusSender.exe" [2009-09-11 33768]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2010-10-25 141848]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2010-10-25 173592]
"Persistence"="c:\windows\system32\igfxpers.exe" [2010-10-25 150552]
"IAStorIcon"="c:\program files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" [2010-06-08 284696]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2010-11-29 421888]
"IntelliPoint"="c:\program files\Microsoft IntelliPoint\ipoint.exe" [2011-01-07 1797488]
"PenWrite"="c:\program files\ASUS\PenWrite\PenWrite.exe" [2010-01-19 543920]
"TouchHomeKey"="c:\program files\asus\TouchHomeKey\TouchHomeKey.exe" [2009-08-12 248496]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2011-03-07 421160]
"BCSSync"="c:\program files\Microsoft Office\Office14\BCSSync.exe" [2010-03-13 91520]
"CapsHook"="AsusSender.exe" [2009-09-11 33768]
"HotkeyMon"="AsusSender.exe" [2009-09-11 33768]
"HotkeyService"="AsusSender.exe" [2009-09-11 33768]
"ASUSWebStorage"="c:\program files\ASUS\ASUS WebStorage\3.0.88.169\AsusWSPanel.exe" [2011-03-04 734544]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-10-29 249064]
.
c:\users\Stefan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk - c:\program files\Microsoft Office\Office14\ONENOTEM.EXE [2010-3-29 227712]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
R2 AsusService;Asus Launcher Service;c:\windows\System32\AsusService.exe [2009-08-18 219136]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R3 ETD;ELAN PS/2 Port Input Device;c:\windows\system32\DRIVERS\ETD.sys [2010-07-21 102912]
R3 massfilter;ZTE Mass Storage Filter Driver;c:\windows\system32\drivers\massfilter.sys [x]
R3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service;c:\program files\Microsoft Office\Office14\GROOVE.EXE [2010-03-25 30969208]
R3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4640000]
S1 AsUpIO;AsUpIO;c:\windows\system32\drivers\AsUpIO.sys [2011-02-09 11832]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [2009-07-13 48128]
S2 AsusUacSvc;Asus process privilege adjust service;c:\program files\asus\2DoorWayTouchSuite\AsusUacSvc.exe [2009-10-15 28848]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2010-06-08 13336]
S2 regi;regi;c:\windows\system32\drivers\regi.sys [2007-04-17 11032]
S3 L1C;NDIS Miniport Driver for Atheros AR8131/AR8132 PCI-E Ethernet Controller (NDIS 6.20);c:\windows\system32\DRIVERS\L1C62x86.sys [2009-07-13 50688]
S3 usbsmi;USB2.0 UVC WebCam ;c:\windows\system32\DRIVERS\SMIksdrv.sys [2009-12-25 181760]
S3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\system32\DRIVERS\vwifimp.sys [2009-07-13 14336]
.
.
Inhalt des "geplante Tasks" Ordners
.
2011-03-16 c:\windows\Tasks\GlaryInitialize.job
- c:\program files\Glary Utilities\initialize.exe [2011-03-13 16:24]
.
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = hxxp://start.facemoods.com/?a=ddr
IE: An OneNote s&enden - c:\progra~1\MIF5BA~1\Office14\ONBttnIE.dll/105
IE: Nach Microsoft E&xcel exportieren - c:\progra~1\MIF5BA~1\Office14\EXCEL.EXE/3000
TCP: {4323EB34-1ACD-4F58-9C91-D75AB5193DC3} = 193.189.244.225 193.189.244.206
Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - c:\program files\Common Files\microsoft shared\OFFICE14\MSOXMLMF.DLL
FF - ProfilePath - c:\users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\3or8qltr.default\
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
HKLM-Run-ETDWare - %ProgramFiles%\Elantech\ETDCtrl.exe
HKLM-Run-SynTPEnh - %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
HKLM-Run-SynAsusAcpi - %ProgramFiles%\Synaptics\SynTP\SynAsusAcpi.exe
HKLM-Run-Malwarebytes' Anti-Malware (reboot) - c:\program files\Malwarebytes' Anti-Malware\mbam.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil10m_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil10m_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2011-03-16  11:06:57
ComboFix-quarantined-files.txt  2011-03-16 10:06
.
Vor Suchlauf: 9 Verzeichnis(se), 293.128.077.312 Bytes frei
Nach Suchlauf: 17 Verzeichnis(se), 293.044.547.584 Bytes frei
.
- - End Of File - - B4CEF4C489B104EE3DFE7A1D1A613DD1