Trojaner-Board - WOW Akkount geknackt, seitdem Firefox sehr langam

Erledigt

Combofix Logfile:
Code:
ComboFix 11-02-22.05 - Moggi 23.02.2011  15:48:58.1.4 - x64

Microsoft Windows 7 Professional   6.1.7600.0.1252.49.1031.18.2999.1272 [GMT 1:00]

ausgeführt von:: c:\users\Moggi\Downloads\ComboFix.exe

AV: AntiVir Desktop *Disabled/Updated* {090F9C29-64CE-6C6F-379C-5901B49A85B7}

SP: AntiVir Desktop *Disabled/Updated* {B26E7DCD-42F4-63E1-0D2C-6273CF1DCF0A}

SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

 * Neuer Wiederherstellungspunkt wurde erstellt

.
 

((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))

.
 

c:\users\Moggi\AppData\Roaming\Local

c:\users\Moggi\AppData\Roaming\Local\Temp\DDM\Settings\0.ddi

c:\users\Moggi\AppData\Roaming\Local\Temp\DDM\Settings\862b687e1cc888e2a07eddda9dd4c0ec.avi.ddr

c:\users\Moggi\AppData\Roaming\Local\Temp\DDM\Settings\settings.ddi

c:\users\Moggi\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\862b687e1cc888e2a07eddda9dd4c0ec.avi.ddp

c:\users\Moggi\AppData\Roaming\Microsoft\Windows\Recent\Thumbs.db
 

.

(((((((((((((((((((((((((((((((((((((((   Treiber/Dienste   )))))))))))))))))))))))))))))))))))))))))))))))))

.
 

-------\Legacy_FAD

-------\Service_FAD
 
 

(((((((((((((((((((((((   Dateien erstellt von 2011-01-23 bis 2011-02-23  ))))))))))))))))))))))))))))))

.
 

2011-02-23 14:52 . 2011-02-23 14:52        --------        d-----w-        c:\users\Default\AppData\Local\temp

2011-02-23 12:01 . 2011-02-23 12:01        --------        d-----w-        c:\users\Moggi\AppData\Roaming\Malwarebytes

2011-02-23 12:01 . 2010-12-20 17:09        38224        ----a-w-        c:\windows\SysWow64\drivers\mbamswissarmy.sys

2011-02-23 12:01 . 2011-02-23 12:01        --------        d-----w-        c:\programdata\Malwarebytes

2011-02-23 12:01 . 2011-02-23 12:01        --------        d-----w-        c:\program files (x86)\Malwarebytes' Anti-Malware

2011-02-23 12:01 . 2010-12-20 17:08        24152        ----a-w-        c:\windows\system32\drivers\mbam.sys

2011-02-23 11:03 . 2011-02-23 11:03        388096        ----a-r-        c:\users\Moggi\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe

2011-02-23 11:03 . 2011-02-23 11:03        --------        d-----w-        c:\program files (x86)\Trend Micro

2011-02-23 09:08 . 2011-02-23 09:15        --------        d-----w-        C:\inetpub

2011-02-23 08:58 . 2010-09-14 06:45        367104        ----a-w-        c:\windows\system32\wcncsvc.dll

2011-02-23 08:58 . 2010-09-14 06:07        276992        ----a-w-        c:\windows\SysWow64\wcncsvc.dll

2011-02-23 08:00 . 2011-01-07 08:07        662528        ----a-w-        c:\windows\system32\XpsPrint.dll

2011-02-23 08:00 . 2011-01-07 08:07        475648        ----a-w-        c:\windows\system32\XpsGdiConverter.dll

2011-02-23 08:00 . 2011-01-07 07:31        442880        ----a-w-        c:\windows\SysWow64\XpsPrint.dll

2011-02-23 08:00 . 2011-01-07 07:31        288256        ----a-w-        c:\windows\SysWow64\XpsGdiConverter.dll

2011-02-22 12:02 . 2011-02-22 12:03        --------        d-----w-        C:\Lop SD

2011-02-22 11:22 . 2011-01-13 10:20        7844688        ----a-w-        c:\programdata\Microsoft\Windows Defender\Definition Updates\{6C93F9BE-92E5-4EBF-892D-AC6D7B17EE35}\mpengine.dll

2011-02-22 11:22 . 2011-02-22 11:22        --------        d-----w-        c:\program files (x86)\Common Files\Java

2011-02-21 12:53 . 2011-02-23 09:02        --------        d-----w-        c:\program files\Babylon

2011-02-20 07:26 . 2011-02-20 07:26        --------        d-----w-        c:\program files (x86)\Common Files\Skype

2011-02-13 13:04 . 2011-02-13 18:44        --------        d-----w-        c:\users\Moggi\AppData\Roaming\.minecraft

2011-02-13 10:27 . 2011-02-13 10:27        --------        d-----w-        c:\users\Moggi\AppData\Roaming\MobMapUpdater

2011-02-13 10:27 . 2011-02-13 10:27        --------        d-----w-        c:\program files (x86)\MobMapUpdater

2011-02-12 17:11 . 2011-02-23 09:11        --------        d-----w-        c:\program files\Defraggler

2011-02-12 17:09 . 2011-02-23 09:10        --------        d-----w-        c:\program files\CCleaner

2011-02-09 13:48 . 2011-01-05 06:20        612352        ----a-w-        c:\windows\system32\vbscript.dll

2011-02-09 13:48 . 2011-01-05 05:37        428032        ----a-w-        c:\windows\SysWow64\vbscript.dll

2011-02-09 13:44 . 2011-02-10 14:58        --------        d-----w-        c:\users\Moggi\.freemind

2011-02-09 13:44 . 2011-02-09 13:44        --------        d-----w-        c:\users\AppData

2011-02-09 13:44 . 2011-02-09 13:44        --------        d-----w-        c:\program files (x86)\Softonic_Deutsch

2011-02-09 13:44 . 2011-02-09 13:44        --------        d-----w-        c:\program files (x86)\Conduit

2011-02-09 13:44 . 2011-02-09 13:44        --------        d-----w-        c:\program files (x86)\FreeMind

2011-02-09 13:43 . 2010-12-18 06:11        714752        ----a-w-        c:\windows\system32\kerberos.dll

2011-02-09 13:43 . 2010-12-18 05:29        541184        ----a-w-        c:\windows\SysWow64\kerberos.dll

2011-02-09 13:43 . 2011-01-05 04:00        3127808        ----a-w-        c:\windows\system32\win32k.sys

2011-02-07 09:14 . 2011-02-07 09:29        --------        d-----w-        c:\programdata\Protexis

2011-02-07 09:14 . 2011-02-07 09:16        --------        d-----w-        c:\users\Moggi\AppData\Roaming\Corel

2011-02-07 09:14 . 2011-02-07 09:14        --------        d-----w-        c:\programdata\Bitstream

2011-02-07 09:05 . 2011-02-07 09:05        --------        d-----w-        c:\program files (x86)\Microsoft SDKs

2011-02-07 09:05 . 2011-02-07 09:07        --------        d-----w-        c:\program files (x86)\Microsoft Visual Studio 9.0

2011-02-07 09:04 . 2011-02-07 09:04        --------        d-----w-        c:\program files (x86)\Common Files\Corel

2011-02-07 09:04 . 2011-02-07 09:04        --------        d-----w-        c:\program files (x86)\Common Files\Protexis

2011-02-07 09:04 . 2011-02-07 09:04        --------        d-----w-        c:\programdata\Corel

2011-02-07 09:02 . 2011-02-07 09:02        --------        d-----w-        c:\program files (x86)\Corel

2011-02-07 08:07 . 2011-02-07 09:00        607091504        ----a-w-        c:\users\Public\CorelDRAWGraphicsSuiteX5Installer_DE.exe

2011-02-07 08:06 . 2011-02-23 14:53        --------        d-----w-        c:\program files (x86)\Common Files\Akamai

2011-02-07 07:46 . 2011-02-13 10:10        --------        d-----w-        c:\users\Moggi\AppData\Roaming\DivX

2011-02-07 07:46 . 2011-02-07 07:46        --------        d-----w-        c:\program files\DivX

2011-02-07 07:46 . 2011-02-07 07:46        --------        d-----w-        c:\program files (x86)\Common Files\DivX Shared

2011-02-07 07:43 . 2011-02-07 07:47        --------        d-----w-        c:\program files (x86)\DivX

2011-02-07 07:42 . 2011-02-07 07:47        --------        d-----w-        c:\programdata\DivX

2011-02-07 07:41 . 2011-02-07 07:41        51200        ----a-w-        c:\windows\system32\iassdo32.dll

2011-01-30 13:57 . 2011-01-30 13:57        103864        ----a-w-        c:\program files (x86)\Mozilla Firefox\plugins\nppdf32.dll

2011-01-30 13:57 . 2011-01-30 13:57        103864        ----a-w-        c:\program files (x86)\Internet Explorer\Plugins\nppdf32.dll
 

.

((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2011-02-02 20:40 . 2010-07-13 15:10        472808        ----a-w-        c:\windows\SysWow64\deployJava1.dll

2010-12-30 08:49 . 2010-08-08 08:59        2300696        ----a-w-        c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup\markup.dll

2010-12-30 08:48 . 2010-08-08 08:58        42776        ----a-w-        c:\programdata\Microsoft\eHome\Packages\MCEClientUX\dSM\StartResources.dll

2010-12-30 08:48 . 2010-08-08 08:58        1220416        ----a-w-        c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight\SpotlightResources.dll

2010-12-23 10:13 . 2010-09-06 06:17        1220416        ----a-w-        c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight-2\SpotlightResources.dll

2010-12-11 07:10 . 2010-12-11 07:10        2300696        ----a-w-        c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup-2\markup.dll

2010-12-11 07:10 . 2010-12-11 07:10        42776        ----a-w-        c:\programdata\Microsoft\eHome\Packages\MCEClientUX\dSM-2\StartResources.dll

2010-11-26 12:41 . 2010-07-13 15:33        83120        ----a-w-        c:\windows\system32\drivers\avgntflt.sys

2006-05-03 10:06        163328        --sh--r-        c:\windows\SysWOW64\flvDX.dll

2007-02-21 11:47        31232        --sh--r-        c:\windows\SysWOW64\msfDX.dll

2008-03-16 13:30        216064        --sh--r-        c:\windows\SysWOW64\nbDX.dll

.
 

((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))

.

.

*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 

REGEDIT4
 

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]

"{8dbb6d8e-e4a6-4e3b-9753-af78b226441c}"= "c:\program files (x86)\Softonic_Deutsch\tbSoft.dll" [2008-09-15 1784856]
 

[HKEY_CLASSES_ROOT\clsid\{8dbb6d8e-e4a6-4e3b-9753-af78b226441c}]
 

[HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{8dbb6d8e-e4a6-4e3b-9753-af78b226441c}]

2008-09-15 05:47        1784856        ----a-w-        c:\program files (x86)\Softonic_Deutsch\tbSoft.dll
 

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar]

"{8dbb6d8e-e4a6-4e3b-9753-af78b226441c}"= "c:\program files (x86)\Softonic_Deutsch\tbSoft.dll" [2008-09-15 1784856]
 

[HKEY_CLASSES_ROOT\clsid\{8dbb6d8e-e4a6-4e3b-9753-af78b226441c}]
 

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-07-14 1475072]

"BitTorrent DNA"="c:\users\Moggi\Program Files (x86)\DNA\btdna.exe" [2010-08-24 323392]

"Pando Media Booster"="c:\program files (x86)\Pando Networks\Media Booster\PMB.exe" [2010-10-06 2937528]

"AVMUSBFernanschluss"="c:\users\Moggi\AppData\Local\Apps\2.0\VQKXER6E.ZQT\L1LNLM93.ZK8\frit..tion_8488884cfbcefd60_0002.0002_8541bf1f4a1c673d\AVMAutoStart.exe" [2010-11-23 147456]

"Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2011-01-26 15026056]
 

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]

"avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2010-11-04 281768]

"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2010-09-08 421888]

"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2011-01-31 35760]

"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-09-20 932288]

"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2010-10-29 249064]
 

c:\users\Moggi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\

CurseClientStartup.ccip [2011-2-13 0]
 

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"ConsentPromptBehaviorAdmin"= 5 (0x5)

"ConsentPromptBehaviorUser"= 3 (0x3)

"EnableUIADesktopToggle"= 0 (0x0)
 

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]

"mixer4"=wdmaud.drv
 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]

Security Packages        REG_MULTI_SZ           kerberos msv1_0 schannel wdigest tspkg pku2u livessp
 

R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]

R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]

R2 gupdate;Google Update Service (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-07-13 135664]

R3 massfilter;ZTE Mass Storage Filter Driver;c:\windows\system32\DRIVERS\massfilter.sys [2009-04-09 11776]

R3 nmwcdcx64;Nokia USB Generic;c:\windows\system32\drivers\ccdcmbox64.sys [2008-05-02 23552]

R3 nmwcdx64;Nokia USB Phone Parent;c:\windows\system32\drivers\ccdcmbx64.sys [2008-05-02 18432]

R3 ZTEusbnet;ZTE USB-NDIS miniport;c:\windows\system32\DRIVERS\ZTEusbnet.sys [2009-04-09 167424]

R3 ZTEusbvoice;ZTE VoUSB Port;c:\windows\system32\DRIVERS\ZTEusbvoice.sys [2009-04-09 150784]

R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 57184]

S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys [2010-07-12 55856]

S2 AERTFilters;Andrea RT Filters Service;c:\program files\Realtek\Audio\HDA\AERTSr64.exe [2009-03-31 92160]

S2 Akamai;Akamai NetSession Interface;c:\windows\System32\svchost.exe [2009-07-14 27136]

S2 AntiVirSchedulerService;Avira AntiVir Planer;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [2010-11-04 135336]

S2 BPowMon;Broadcom Power monitoring service;c:\program files\Broadcom\BPowMon\BPowMon.exe [2009-08-17 117568]

S3 avmaudio;AVM Audio;c:\windows\system32\DRIVERS\avmaudio.sys [2010-11-08 116096]

S3 HECIx64;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys [2009-09-17 56344]

S3 k57nd60a;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0;c:\windows\system32\DRIVERS\k57nd60a.sys [2009-08-21 320040]

S3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda64v.sys [2009-08-21 84512]
 
 

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost]

Akamai        REG_MULTI_SZ           Akamai

.

Inhalt des "geplante Tasks" Ordners
 

2011-02-23 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job

- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-07-13 12:13]
 

2011-02-23 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-07-13 12:13]

.
 

--------- x86-64 -----------
 
 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"combofix"="c:\combofix\CF19487.cfxxe" [X]

"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2009-08-19 8067616]

"DBRMTray"="c:\dell\DBRM\Reminder\DbrmTrayIcon.exe" [2009-11-12 203776]
 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]

"LoadAppInit_DLLs"=0x0

.

------- Zusätzlicher Suchlauf -------

.

uLocal Page = c:\windows\system32\blank.htm

uStart Page = hxxp://search.babylon.com/home?AF=14444

mLocal Page = c:\windows\SysWOW64\blank.htm

uInternet Settings,ProxyOverride = *.local

IE: Google Sidewiki... - c:\program files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll/cmsidewiki.html

IE: Nach Microsoft E&xel exportieren - c:\progra~2\MICROS~2\Office12\EXCEL.EXE/3000

FF - ProfilePath - c:\users\Moggi\AppData\Roaming\Mozilla\Firefox\Profiles\l838llsn.default\

FF - prefs.js: browser.search.defaulturl - hxxp://search.babylon.com/web/{searchTerms}?babsrc=browsersearch&AF=14444

FF - prefs.js: browser.search.selectedEngine - Google

FF - prefs.js: browser.startup.homepage - hxxp://www.google.de/

FF - prefs.js: keyword.URL - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2843456&q=

FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files (x86)\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

FF - Ext: Java Console: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} - c:\program files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}

FF - Ext: Java Console: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} - c:\program files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}

FF - Ext: Java Console: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} - c:\program files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}

FF - Ext: Java Console: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} - c:\program files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}

FF - Ext: Java Console: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} - c:\program files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}

FF - Ext: Conduit Engine : engine@conduit.com - %profile%\extensions\engine@conduit.com

FF - Ext: Bigpoint Games DE Community Toolbar: {0e3dbc69-a682-48da-84e1-82c63a5d678e} - %profile%\extensions\{0e3dbc69-a682-48da-84e1-82c63a5d678e}

FF - Ext: Babylon: ffxtlbr@babylon.com - %profile%\extensions\ffxtlbr@babylon.com

FF - Ext: DivX Plus Web Player HTML5 &lt;video&gt;: {23fcfd51-4958-4f00-80a3-ae97e717ed8b} - c:\program files (x86)\DivX\DivX Plus Web Player\firefox\html5video

FF - Ext: DivX HiQ: {6904342A-8307-11DF-A508-4AE2DFD72085} - c:\program files (x86)\DivX\DivX Plus Web Player\firefox\wpa

.

- - - - Entfernte verwaiste Registrierungseinträge - - - -
 

Toolbar-Locked - (no file)

Toolbar-Locked - (no file)

WebBrowser-{8DBB6D8E-E4A6-4E3B-9753-AF78B226441C} - (no file)
 
 
 

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Akamai]

"ServiceDll"="C:/Program Files (x86)/Common Files/Akamai/netsession_win_dbc0250.dll"
 

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Akamai]

"ServiceDll"="C:/Program Files (x86)/Common Files/Akamai/netsession_win_dbc0250.dll"

.

--------------------- Gesperrte Registrierungsschluessel ---------------------
 

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}]

@Denied: (A 2) (Everyone)

@="FlashBroker"

"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil10d.exe,-101"
 

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\Elevation]

"Enabled"=dword:00000001
 

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\LocalServer32]

@="c:\\Windows\\SysWow64\\Macromed\\Flash\\FlashUtil10d.exe"
 

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
 

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Shockwave Flash Object"
 

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10d.ocx"

"ThreadingModel"="Apartment"
 

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]

@="0"
 

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]

@="ShockwaveFlash.ShockwaveFlash.10"
 

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10d.ocx, 1"
 

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
 

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"
 

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="ShockwaveFlash.ShockwaveFlash"
 

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Macromedia Flash Factory Object"
 

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10d.ocx"

"ThreadingModel"="Apartment"
 

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]

@="FlashFactory.FlashFactory.1"
 

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10d.ocx, 1"
 

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
 

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"
 

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="FlashFactory.FlashFactory"
 

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}]

@Denied: (A 2) (Everyone)

@="IFlashBroker3"
 

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\ProxyStubClsid32]

@="{00020424-0000-0000-C000-000000000046}"
 

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

"Version"="1.0"
 

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

"BlindDial"=dword:00000001
 

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

"BlindDial"=dword:00000000
 

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]

@Denied: (Full) (Everyone)

.

------------------------ Weitere laufende Prozesse ------------------------

.

c:\program files (x86)\Avira\AntiVir Desktop\avguard.exe

c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

c:\program files (x86)\Bonjour\mDNSResponder.exe

c:\program files (x86)\Common Files\Protexis\License Service\PsiService_2.exe

c:\program files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe

c:\program files (x86)\Skype\Plugin Manager\skypePM.exe

.

**************************************************************************

.

Zeit der Fertigstellung: 2011-02-23  15:56:07 - PC wurde neu gestartet

ComboFix-quarantined-files.txt  2011-02-23 14:56
 

Vor Suchlauf: 17 Verzeichnis(se), 368.861.495.296 Bytes frei

Nach Suchlauf: 20 Verzeichnis(se), 368.538.374.144 Bytes frei
 

- - End Of File - - 2B385F4F696A3E3951DB491FEDEA99D6
--- --- ---