Hier der Combofix Log: Code:
ComboFix 11-07-15.03 - ***USER*** 16.07.2011 18:32:15.1.2 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.49.1031.18.4095.3037 [GMT 2:00]
ausgeführt von:: c:\users\***USER***\Desktop\ComboFix.exe
AV: AntiVir Desktop *Disabled/Updated* {090F9C29-64CE-6C6F-379C-5901B49A85B7}
SP: AntiVir Desktop *Disabled/Updated* {B26E7DCD-42F4-63E1-0D2C-6273CF1DCF0A}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
(((((((((((((((((((((((((((((((((((( Weitere Löschungen ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files (x86)\Veoh Networks\VeohWebPlayer\ConduitInstaller_veoh.exe
c:\windows\IsUn0407.exe
.
.
((((((((((((((((((((((( Dateien erstellt von 2011-06-16 bis 2011-07-16 ))))))))))))))))))))))))))))))
.
.
2011-07-16 15:13 . 2011-07-16 15:13 -------- d-----w- C:\_OTL
2011-07-15 19:00 . 2011-07-15 19:00 -------- d-----w- c:\users\***USER***\AppData\Roaming\Malwarebytes
2011-07-15 19:00 . 2011-07-06 17:52 41272 ----a-w- c:\windows\SysWow64\drivers\mbamswissarmy.sys
2011-07-15 19:00 . 2011-07-15 19:00 -------- d-----w- c:\programdata\Malwarebytes
2011-07-15 19:00 . 2011-07-06 17:52 25912 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-07-15 11:00 . 2011-06-07 17:10 8873296 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{5AEB424A-BD5A-417B-9E05-5347461345E9}\mpengine.dll
2011-07-13 15:35 . 2011-06-11 03:07 3137536 ----a-w- c:\windows\system32\win32k.sys
2011-07-09 14:37 . 2005-03-24 03:18 692224 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iKernel.dll
2011-07-09 14:37 . 2002-12-05 12:10 155648 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iuser.dll
2011-07-09 14:37 . 2002-12-02 13:22 5632 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\DotNetInstaller.exe
2011-07-09 14:37 . 2002-12-02 11:33 57344 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\ctor.dll
2011-07-09 14:37 . 2002-12-02 11:33 237568 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iscript.dll
2011-07-09 14:37 . 2011-07-09 14:37 163972 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iGdi.dll
2011-07-09 14:37 . 2011-07-09 14:37 282756 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\setup.dll
2011-07-02 12:04 . 2009-12-07 17:53 117504 ----a-w- c:\windows\system32\drivers\ewusbmdm.sys
2011-07-02 12:04 . 2009-12-07 17:36 246224 ----a-w- c:\windows\system32\drivers\ewusbnet.sys
2011-07-02 12:04 . 2009-10-12 13:23 114304 ----a-w- c:\windows\system32\drivers\ewusbdev.sys
2011-07-02 12:04 . 2007-08-09 02:10 29696 ----a-w- c:\windows\system32\drivers\ewdcsc.sys
2011-06-29 06:36 . 2011-05-24 11:42 404480 ----a-w- c:\windows\system32\umpnpmgr.dll
2011-06-29 06:36 . 2011-05-24 10:37 252928 ----a-w- c:\windows\SysWow64\drvinst.exe
2011-06-29 06:36 . 2011-05-24 10:40 64512 ----a-w- c:\windows\SysWow64\devobj.dll
2011-06-29 06:36 . 2011-05-24 10:40 44544 ----a-w- c:\windows\SysWow64\devrtl.dll
2011-06-29 06:36 . 2011-05-24 10:39 145920 ----a-w- c:\windows\SysWow64\cfgmgr32.dll
2011-06-26 22:27 . 2011-07-02 12:11 -------- d-----w- c:\program files (x86)\Giraffic
2011-06-26 22:27 . 2011-06-27 08:48 -------- d-----w- c:\programdata\Giraffic
2011-06-25 00:27 . 2011-06-25 00:27 2106216 ----a-w- c:\program files (x86)\Mozilla Firefox\D3DCompiler_43.dll
2011-06-25 00:27 . 2011-06-25 00:27 1998168 ----a-w- c:\program files (x86)\Mozilla Firefox\d3dx9_43.dll
2011-06-23 16:14 . 2011-04-25 05:33 1923968 ----a-w- c:\windows\system32\drivers\tcpip.sys
2011-06-23 16:14 . 2011-04-25 02:34 499200 ----a-w- c:\windows\system32\drivers\afd.sys
2011-06-23 16:14 . 2011-04-27 02:40 158208 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
2011-06-23 16:14 . 2011-04-27 02:39 289280 ----a-w- c:\windows\system32\drivers\mrxsmb10.sys
2011-06-23 16:14 . 2011-04-27 02:39 128000 ----a-w- c:\windows\system32\drivers\mrxsmb20.sys
2011-06-23 16:14 . 2011-04-29 03:06 467456 ----a-w- c:\windows\system32\drivers\srv.sys
2011-06-23 16:14 . 2011-04-29 03:05 410112 ----a-w- c:\windows\system32\drivers\srv2.sys
2011-06-23 16:14 . 2011-04-29 03:05 168448 ----a-w- c:\windows\system32\drivers\srvnet.sys
2011-06-23 16:14 . 2011-02-25 06:22 861696 ----a-w- c:\windows\system32\oleaut32.dll
2011-06-23 16:14 . 2011-02-25 05:34 571904 ----a-w- c:\windows\SysWow64\oleaut32.dll
2011-06-23 16:14 . 2011-05-03 05:29 976896 ----a-w- c:\windows\system32\inetcomm.dll
2011-06-23 16:14 . 2011-05-03 04:30 741376 ----a-w- c:\windows\SysWow64\inetcomm.dll
.
.
.
(((((((((((((((((((((((((((((((((((( Find3M Bericht ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-07-02 11:36 . 2010-11-06 22:57 88288 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2011-07-02 11:36 . 2010-11-06 22:57 123784 ----a-w- c:\windows\system32\drivers\avipbb.sys
2011-06-24 08:42 . 2011-05-18 14:38 404640 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2011-06-05 20:15 . 2011-06-05 20:15 74752 ----a-w- c:\windows\SysWow64\RegisterIEPKEYs.exe
2011-06-05 20:15 . 2011-06-05 20:15 161792 ----a-w- c:\windows\SysWow64\msls31.dll
2011-06-05 20:15 . 2011-06-05 20:15 1126912 ----a-w- c:\windows\SysWow64\wininet.dll
2011-06-05 20:15 . 2011-06-05 20:15 86528 ----a-w- c:\windows\SysWow64\iesysprep.dll
2011-06-05 20:15 . 2011-06-05 20:15 76800 ----a-w- c:\windows\SysWow64\SetIEInstalledDate.exe
2011-06-05 20:15 . 2011-06-05 20:15 48640 ----a-w- c:\windows\SysWow64\mshtmler.dll
2011-06-05 20:15 . 2011-06-05 20:15 110592 ----a-w- c:\windows\SysWow64\IEAdvpack.dll
2011-06-05 20:15 . 2011-06-05 20:15 74752 ----a-w- c:\windows\SysWow64\iesetup.dll
2011-06-05 20:15 . 2011-06-05 20:15 63488 ----a-w- c:\windows\SysWow64\tdc.ocx
2011-06-05 20:15 . 2011-06-05 20:15 420864 ----a-w- c:\windows\SysWow64\vbscript.dll
2011-06-05 20:15 . 2011-06-05 20:15 367104 ----a-w- c:\windows\SysWow64\html.iec
2011-06-05 20:15 . 2011-06-05 20:15 23552 ----a-w- c:\windows\SysWow64\licmgr10.dll
2011-06-05 20:15 . 2011-06-05 20:15 152064 ----a-w- c:\windows\SysWow64\wextract.exe
2011-06-05 20:15 . 2011-06-05 20:15 150528 ----a-w- c:\windows\SysWow64\iexpress.exe
2011-06-05 20:15 . 2011-06-05 20:15 1427456 ----a-w- c:\windows\SysWow64\inetcpl.cpl
2011-06-05 20:15 . 2011-06-05 20:15 35840 ----a-w- c:\windows\SysWow64\imgutil.dll
2011-06-05 20:15 . 2011-06-05 20:15 142848 ----a-w- c:\windows\SysWow64\ieUnatt.exe
2011-06-05 20:15 . 2011-06-05 20:15 11776 ----a-w- c:\windows\SysWow64\mshta.exe
2011-06-05 20:15 . 2011-06-05 20:15 101888 ----a-w- c:\windows\SysWow64\admparse.dll
2011-06-05 20:14 . 2011-06-05 20:14 89088 ----a-w- c:\windows\system32\RegisterIEPKEYs.exe
2011-06-05 20:14 . 2011-06-05 20:14 222208 ----a-w- c:\windows\system32\msls31.dll
2011-06-05 20:14 . 2011-06-05 20:14 1389056 ----a-w- c:\windows\system32\wininet.dll
2011-06-05 20:14 . 2011-06-05 20:14 91648 ----a-w- c:\windows\system32\SetIEInstalledDate.exe
2011-06-05 20:14 . 2011-06-05 20:14 49664 ----a-w- c:\windows\system32\imgutil.dll
2011-06-05 20:14 . 2011-06-05 20:14 48640 ----a-w- c:\windows\system32\mshtmler.dll
2011-06-05 20:14 . 2011-06-05 20:14 173056 ----a-w- c:\windows\system32\ieUnatt.exe
2011-06-05 20:14 . 2011-06-05 20:14 135168 ----a-w- c:\windows\system32\IEAdvpack.dll
2011-06-05 20:14 . 2011-06-05 20:14 12288 ----a-w- c:\windows\system32\mshta.exe
2011-06-05 20:14 . 2011-06-05 20:14 114176 ----a-w- c:\windows\system32\admparse.dll
2011-06-05 20:14 . 2011-06-05 20:14 85504 ----a-w- c:\windows\system32\iesetup.dll
2011-06-05 20:14 . 2011-06-05 20:14 76800 ----a-w- c:\windows\system32\tdc.ocx
2011-06-05 20:14 . 2011-06-05 20:14 603648 ----a-w- c:\windows\system32\vbscript.dll
2011-06-05 20:14 . 2011-06-05 20:14 448512 ----a-w- c:\windows\system32\html.iec
2011-06-05 20:14 . 2011-06-05 20:14 30720 ----a-w- c:\windows\system32\licmgr10.dll
2011-06-05 20:14 . 2011-06-05 20:14 165888 ----a-w- c:\windows\system32\iexpress.exe
2011-06-05 20:14 . 2011-06-05 20:14 160256 ----a-w- c:\windows\system32\wextract.exe
2011-06-05 20:14 . 2011-06-05 20:14 1492992 ----a-w- c:\windows\system32\inetcpl.cpl
2011-06-05 20:14 . 2011-06-05 20:14 111616 ----a-w- c:\windows\system32\iesysprep.dll
2011-05-24 17:14 . 2010-11-06 23:14 270720 ------w- c:\windows\system32\MpSigStub.exe
2011-05-14 06:24 . 2011-07-13 15:57 44032 ----a-w- c:\windows\apppatch\acwow64.dll
2011-05-04 02:52 . 2010-11-07 20:04 472808 ----a-w- c:\windows\SysWow64\deployJava1.dll
2011-05-01 13:18 . 2011-05-01 13:18 4608 ----a-w- c:\windows\SysWow64\w95inf32.dll
2011-05-01 13:18 . 2011-05-01 13:18 2272 ----a-w- c:\windows\SysWow64\w95inf16.dll
.
.
(((((((((((((((((((((((((((( Autostartpunkte der Registrierung ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"OscarEditor"="c:\program files (x86)\MOUSE Editor\MouseEditor.exe" [2010-07-22 2624512]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2010-08-02 281768]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2011-04-08 254696]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R3 cpuz134;cpuz134;c:\users\***USER***\AppData\Local\Temp\cpuz134\cpuz134_x64.sys [x]
R3 dump_wmimmc;dump_wmimmc;d:\program files (x86)\ijji\Gunz\GameGuard\dump_wmimmc.sys [x]
R3 ewusbnet;HUAWEI USB-NDIS miniport;c:\windows\system32\DRIVERS\ewusbnet.sys [x]
R3 hwusbdev;Huawei DataCard USB PNP Device;c:\windows\system32\DRIVERS\ewusbdev.sys [x]
R3 massfilter;ZTE Mass Storage Filter Driver;c:\windows\system32\drivers\massfilter.sys [x]
R3 netr28ux;RT2870-USB-Drahtlos-LAN-Kartentreiber für Vista;c:\windows\system32\DRIVERS\netr28ux.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
R4 Giraffic;Giraffic Video Accelerator;c:\program files (x86)\Giraffic\GirafficWatchdog.exe [2011-06-27 2211984]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x]
S2 AntiVirSchedulerService;Avira AntiVir Planer;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [2011-04-30 136360]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2010-10-16 369256]
S3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda64v.sys [x]
S3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;c:\windows\system32\DRIVERS\yk62x64.sys [x]
.
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="RAVCpl64.exe" [2007-04-23 5071360]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"LoadAppInit_DLLs"=0x0
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
TCP: Interfaces\{D2EA6C5B-9417-4925-B370-CA65B1CDFDDF}: NameServer = 193.189.244.225 193.189.244.206
FF - ProfilePath - c:\users\***USER***\AppData\Roaming\Mozilla\Firefox\Profiles\lk3f7ihj.default\
FF - prefs.js: browser.startup.homepage - hxxp://google.de
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
SafeBoot-80285507.sys
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\npggsvc]
"ImagePath"="c:\windows\system32\GameMon.des -service"
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_USERS\S-1-5-21-1843212304-3448961189-3793492660-1001\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
"??"=hex:c1,08,dc,c9,f7,16,73,b2,3e,b7,d2,5f,11,6e,8f,fc,e1,8b,8a,e9,46,63,a5,
07,1a,35,9a,b0,98,e0,1d,df,40,0a,6b,ee,21,36,b4,7e,b0,c0,f9,9a,ce,2f,1f,d8,\
"??"=hex:41,e0,42,8c,cf,55,c7,95,2b,14,4d,f8,66,7b,0c,1b
.
[HKEY_USERS\S-1-5-21-1843212304-3448961189-3793492660-1001\Software\SecuROM\License information*]
"datasecu"=hex:2d,d7,d1,d0,d0,b0,30,b4,55,e7,28,24,04,a6,f4,8f,98,9b,7a,5b,a2,
93,c3,3c,8e,0f,87,f3,be,81,d8,77,25,6b,4b,ce,03,56,44,b6,54,26,a8,e2,f4,94,\
"rkeysecu"=hex:7f,d1,5c,a5,bd,8b,0e,33,66,d9,8d,b3,2f,e5,73,29
.
[HKEY_USERS\S-1-5-21-1843212304-3448961189-3793492660-1001\System\CurrentControlSet\Control\MediaProperties\PrivateProperties\DirectInput\VID_0079&PID_0006\Calibration\0\Type\Axes]
@DACL=(02 0000)
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10s_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10s_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10s.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10s.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10s.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10s.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\program files (x86)\Avira\AntiVir Desktop\avguard.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2011-07-16 18:38:34 - PC wurde neu gestartet
ComboFix-quarantined-files.txt 2011-07-16 16:38
.
Vor Suchlauf: 10 Verzeichnis(se), 31.128.178.688 Bytes frei
Nach Suchlauf: 13 Verzeichnis(se), 30.668.742.656 Bytes frei
.
- - End Of File - - 08C82DDC415E0F31206DEB5507BE1F4D
|
