Trojaner-Board - Internet langsam - Zeitüberschreitungsfehler ?

so combofix Log-Datei hier:
Combofix Logfile:
Code:
ComboFix 11-07-23.01 - Zoran 23.07.2011  13:47:34.1.4 - x64

Microsoft Windows 7 Ultimate   6.1.7601.1.1252.49.1031.18.8191.6297 [GMT 2:00]

ausgeführt von:: c:\users\I n t e r n e t\Desktop\ComboFix.exe

AV: AntiVir Desktop *Disabled/Outdated* {090F9C29-64CE-6C6F-379C-5901B49A85B7}

SP: AntiVir Desktop *Disabled/Outdated* {B26E7DCD-42F4-63E1-0D2C-6273CF1DCF0A}

SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

.

.

((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))

.

.

c:\programdata\data.dll

c:\users\Zoran\AppData\Roaming\Desktopicon

c:\users\Zoran\AppData\Roaming\inst.exe

.

.

(((((((((((((((((((((((   Dateien erstellt von 2011-06-23 bis 2011-07-23  ))))))))))))))))))))))))))))))

.

.

2011-07-23 11:52 . 2011-07-23 12:13        --------        d-----w-        c:\users\Zoran\AppData\Local\temp

2011-07-23 11:52 . 2011-07-23 11:52        --------        d-----w-        c:\users\Default\AppData\Local\temp

2011-07-23 11:46 . 2011-07-23 11:46        --------        d-----w-        C:\32788R22FWJFW

2011-07-22 14:02 . 2011-07-22 14:02        --------        d-----w-        C:\_OTL

2011-07-22 10:38 . 2011-07-13 04:53        8578896        ----a-w-        c:\programdata\Microsoft\Windows Defender\Definition Updates\{59FE05AF-7089-4789-AC92-5281A12E17AD}\mpengine.dll

2011-07-21 19:40 . 2011-07-21 19:40        --------        d-----w-        c:\program files\CCleaner

2011-07-21 14:32 . 2011-07-21 14:32        --------        d-----w-        c:\program files\Microsoft Sync Framework

2011-07-20 07:00 . 2011-07-20 07:00        --------        d-----w-        c:\users\I n t e r n e t\AppData\Local\Karen's Power Tools

2011-07-20 07:00 . 2011-07-20 07:00        --------        d-----w-        c:\programdata\Karen's Power Tools

2011-07-19 16:03 . 2011-07-19 16:03        --------        d-----w-        c:\program files (x86)\Renesas Electronics

2011-07-19 14:09 . 2011-07-19 14:09        --------        d-----w-        c:\programdata\FNET

2011-07-19 13:40 . 2011-07-19 13:40        --------        d-----w-        c:\programdata\Downloaded Installations

2011-07-13 14:10 . 2011-07-13 14:10        --------        d-----w-        c:\windows\SysWow64\Adobe

2011-07-13 12:30 . 2011-06-03 06:57        362496        ----a-w-        c:\windows\system32\wow64win.dll

2011-07-13 12:30 . 2011-06-03 06:57        214528        ----a-w-        c:\windows\system32\winsrv.dll

2011-07-13 12:30 . 2011-06-03 06:53        338944        ----a-w-        c:\windows\system32\conhost.exe

2011-07-13 12:30 . 2011-06-03 06:57        243200        ----a-w-        c:\windows\system32\wow64.dll

2011-07-13 12:30 . 2011-06-03 06:57        13312        ----a-w-        c:\windows\system32\wow64cpu.dll

2011-07-13 12:30 . 2011-06-03 06:57        16384        ----a-w-        c:\windows\system32\ntvdm64.dll

2011-07-13 12:30 . 2011-06-03 06:00        14336        ----a-w-        c:\windows\SysWow64\ntvdm64.dll

2011-07-13 12:30 . 2011-06-03 05:57        25600        ----a-w-        c:\windows\SysWow64\setup16.exe

2011-07-13 12:30 . 2011-06-03 05:56        5120        ----a-w-        c:\windows\SysWow64\wow32.dll

2011-07-13 12:30 . 2011-06-03 03:53        7680        ----a-w-        c:\windows\SysWow64\instnm.exe

2011-07-13 12:30 . 2011-06-03 03:53        2048        ----a-w-        c:\windows\SysWow64\user.exe

2011-07-11 12:46 . 2011-07-11 12:46        --------        d-----w-        c:\users\Zoran\AppData\Local\Downloaded Installations

2011-07-11 12:45 . 2011-07-11 12:45        --------        d-----w-        c:\users\I n t e r n e t\AppData\Local\Downloaded Installations

.

.

.

((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2011-07-09 05:44 . 2010-12-29 17:48        88288        ----a-w-        c:\windows\system32\drivers\avgntflt.sys

2011-07-09 05:44 . 2010-12-29 17:48        123784        ----a-w-        c:\windows\system32\drivers\avipbb.sys

2011-07-06 17:52 . 2011-01-03 12:24        41272        ----a-w-        c:\windows\SysWow64\drivers\mbamswissarmy.sys

2011-07-06 17:52 . 2010-12-29 16:57        25912        ----a-w-        c:\windows\system32\drivers\mbam.sys

2011-06-03 05:57 . 2011-07-13 12:30        44032        ----a-w-        c:\windows\apppatch\acwow64.dll

2011-05-24 17:14 . 2009-10-14 05:13        270720        ------w-        c:\windows\system32\MpSigStub.exe

2011-05-22 10:10 . 2011-05-22 10:10        89088        ----a-w-        c:\windows\system32\RegisterIEPKEYs.exe

2011-05-22 10:10 . 2011-05-22 10:10        86528        ----a-w-        c:\windows\SysWow64\iesysprep.dll

2011-05-22 10:10 . 2011-05-22 10:10        76800        ----a-w-        c:\windows\SysWow64\SetIEInstalledDate.exe

2011-05-22 10:10 . 2011-05-22 10:10        74752        ----a-w-        c:\windows\SysWow64\RegisterIEPKEYs.exe

2011-05-22 10:10 . 2011-05-22 10:10        74752        ----a-w-        c:\windows\SysWow64\iesetup.dll

2011-05-22 10:10 . 2011-05-22 10:10        63488        ----a-w-        c:\windows\SysWow64\tdc.ocx

2011-05-22 10:10 . 2011-05-22 10:10        48640        ----a-w-        c:\windows\SysWow64\mshtmler.dll

2011-05-22 10:10 . 2011-05-22 10:10        420864        ----a-w-        c:\windows\SysWow64\vbscript.dll

2011-05-22 10:10 . 2011-05-22 10:10        367104        ----a-w-        c:\windows\SysWow64\html.iec

2011-05-22 10:10 . 2011-05-22 10:10        35840        ----a-w-        c:\windows\SysWow64\imgutil.dll

2011-05-22 10:10 . 2011-05-22 10:10        23552        ----a-w-        c:\windows\SysWow64\licmgr10.dll

2011-05-22 10:10 . 2011-05-22 10:10        222208        ----a-w-        c:\windows\system32\msls31.dll

2011-05-22 10:10 . 2011-05-22 10:10        161792        ----a-w-        c:\windows\SysWow64\msls31.dll

2011-05-22 10:10 . 2011-05-22 10:10        152064        ----a-w-        c:\windows\SysWow64\wextract.exe

2011-05-22 10:10 . 2011-05-22 10:10        150528        ----a-w-        c:\windows\SysWow64\iexpress.exe

2011-05-22 10:10 . 2011-05-22 10:10        142848        ----a-w-        c:\windows\SysWow64\ieUnatt.exe

2011-05-22 10:10 . 2011-05-22 10:10        1427456        ----a-w-        c:\windows\SysWow64\inetcpl.cpl

2011-05-22 10:10 . 2011-05-22 10:10        1389056        ----a-w-        c:\windows\system32\wininet.dll

2011-05-22 10:10 . 2011-05-22 10:10        11776        ----a-w-        c:\windows\SysWow64\mshta.exe

2011-05-22 10:10 . 2011-05-22 10:10        1126912        ----a-w-        c:\windows\SysWow64\wininet.dll

2011-05-22 10:10 . 2011-05-22 10:10        110592        ----a-w-        c:\windows\SysWow64\IEAdvpack.dll

2011-05-22 10:10 . 2011-05-22 10:10        101888        ----a-w-        c:\windows\SysWow64\admparse.dll

2011-05-22 10:10 . 2011-05-22 10:10        173056        ----a-w-        c:\windows\system32\ieUnatt.exe

2011-05-22 10:10 . 2011-05-22 10:10        91648        ----a-w-        c:\windows\system32\SetIEInstalledDate.exe

2011-05-22 10:10 . 2011-05-22 10:10        85504        ----a-w-        c:\windows\system32\iesetup.dll

2011-05-22 10:10 . 2011-05-22 10:10        76800        ----a-w-        c:\windows\system32\tdc.ocx

2011-05-22 10:10 . 2011-05-22 10:10        603648        ----a-w-        c:\windows\system32\vbscript.dll

2011-05-22 10:10 . 2011-05-22 10:10        49664        ----a-w-        c:\windows\system32\imgutil.dll

2011-05-22 10:10 . 2011-05-22 10:10        48640        ----a-w-        c:\windows\system32\mshtmler.dll

2011-05-22 10:10 . 2011-05-22 10:10        448512        ----a-w-        c:\windows\system32\html.iec

2011-05-22 10:10 . 2011-05-22 10:10        30720        ----a-w-        c:\windows\system32\licmgr10.dll

2011-05-22 10:10 . 2011-05-22 10:10        165888        ----a-w-        c:\windows\system32\iexpress.exe

2011-05-22 10:10 . 2011-05-22 10:10        160256        ----a-w-        c:\windows\system32\wextract.exe

2011-05-22 10:10 . 2011-05-22 10:10        1492992        ----a-w-        c:\windows\system32\inetcpl.cpl

2011-05-22 10:10 . 2011-05-22 10:10        135168        ----a-w-        c:\windows\system32\IEAdvpack.dll

2011-05-22 10:10 . 2011-05-22 10:10        12288        ----a-w-        c:\windows\system32\mshta.exe

2011-05-22 10:10 . 2011-05-22 10:10        114176        ----a-w-        c:\windows\system32\admparse.dll

2011-05-22 10:10 . 2011-05-22 10:10        111616        ----a-w-        c:\windows\system32\iesysprep.dll

2011-05-03 05:29 . 2011-06-16 05:27        976896        ----a-w-        c:\windows\system32\inetcomm.dll

2011-05-03 04:30 . 2011-06-16 05:27        741376        ----a-w-        c:\windows\SysWow64\inetcomm.dll

2011-04-29 03:06 . 2011-06-16 05:26        467456        ----a-w-        c:\windows\system32\drivers\srv.sys

2011-04-29 03:05 . 2011-06-16 05:26        410112        ----a-w-        c:\windows\system32\drivers\srv2.sys

2011-04-29 03:05 . 2011-06-16 05:26        168448        ----a-w-        c:\windows\system32\drivers\srvnet.sys

2011-04-27 02:40 . 2011-06-16 05:27        158208        ----a-w-        c:\windows\system32\drivers\mrxsmb.sys

2011-04-27 02:39 . 2011-06-16 05:27        289280        ----a-w-        c:\windows\system32\drivers\mrxsmb10.sys

2011-04-27 02:39 . 2011-06-16 05:27        128000        ----a-w-        c:\windows\system32\drivers\mrxsmb20.sys

2011-04-25 05:33 . 2011-06-16 05:27        1923968        ----a-w-        c:\windows\system32\drivers\tcpip.sys

2011-04-25 02:34 . 2011-06-16 05:27        499200        ----a-w-        c:\windows\system32\drivers\afd.sys

.

.

((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))

.

.

*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 

REGEDIT4

.

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"EVEREST AutoStart"="h:\everest ultimate edition\everest_start.exe" [2009-03-29 334928]

"DAEMON Tools Lite"="h:\daemon tools lite\DTLite.exe" [2009-10-30 369200]

"RocketDock"="c:\program files (x86)\RocketDock\RocketDock.exe" [2007-09-02 495616]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]

"VolPanel"="h:\creative\VolPanlu.exe" [2008-08-06 233576]

"UnlockerAssistant"="h:\unlocker\UnlockerAssistant.exe" [2008-05-02 15872]

"avgnt"="h:\avira\AntiVir Desktop\avgnt.exe" [2010-12-13 281768]

"NUSB3MON"="c:\program files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe" [2011-04-14 113288]

"Malwarebytes' Anti-Malware"="h:\malwarebytes' anti-malware\mbamgui.exe" [2011-07-06 449584]

.

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\

Rainmeter.lnk - c:\program files\Rainmeter\Rainmeter.exe [2011-1-9 117248]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"EnableUIADesktopToggle"= 0 (0x0)

.

R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]

R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]

R3 Creative ALchemy AL6 Licensing Service;Creative ALchemy AL6 Licensing Service;c:\program files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [2009-11-11 79360]

R3 Creative Audio Engine Licensing Service;Creative Audio Engine Licensing Service;c:\program files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [2009-11-11 79360]

R3 Creative Media Toolbox 6 Licensing Service;Creative Media Toolbox 6 Licensing Service;c:\program files (x86)\Common Files\Creative Labs Shared\Service\MT6Licensing.exe [2009-11-11 79360]

R3 CT20XUT;CT20XUT;c:\windows\system32\drivers\CT20XUT.SYS [x]

R3 CTEXFIFX;CTEXFIFX;c:\windows\system32\drivers\CTEXFIFX.SYS [x]

R3 CTHWIUT;CTHWIUT;c:\windows\system32\drivers\CTHWIUT.SYS [x]

R3 EverestDriver;Lavalys EVEREST Kernel Driver;h:\everest ultimate edition\kerneld.amd64 [2009-03-29 24192]

R3 ivusb;Initio Driver for USB Default Controller;c:\windows\system32\DRIVERS\ivusb.sys [x]

R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [x]

R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys [x]

R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]

R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys [x]

R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys [x]

R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys [x]

S0 hotcore3;hc3ServiceName;c:\windows\system32\DRIVERS\hotcore3.sys [x]

S0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [x]

S2 acedrv11;acedrv11;c:\windows\system32\drivers\acedrv11.sys [x]

S2 AntiVirSchedulerService;Avira AntiVir Planer;h:\avira\AntiVir Desktop\sched.exe [2011-04-27 136360]

S2 DevoloNetworkService;devolo Network Service;h:\devolo\dlan\devolonetsvc.exe [2010-12-23 3304768]

S2 MBAMService;MBAMService;h:\malwarebytes' anti-malware\mbamservice.exe [2011-07-06 366640]

S2 NPF_devolo;NetGroup Packet Filter Driver (devolo);c:\windows\sysWOW64\drivers\npf_devolo.sys [2010-06-10 34048]

S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2011-01-07 378984]

S3 CT20XUT.SYS;CT20XUT.SYS;c:\windows\System32\drivers\CT20XUT.SYS [x]

S3 CTEXFIFX.SYS;CTEXFIFX.SYS;c:\windows\System32\drivers\CTEXFIFX.SYS [x]

S3 CTHWIUT.SYS;CTHWIUT.SYS;c:\windows\System32\drivers\CTHWIUT.SYS [x]

S3 ha20x22k;Creative 20X2 HAL Driver;c:\windows\system32\drivers\ha20x22k.sys [x]

S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [x]

S3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\nusb3hub.sys [x]

S3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\nusb3xhc.sys [x]

S3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda64v.sys [x]

.

.

.

--------- x86-64 -----------

.

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"CanonSolutionMenu"="c:\program files (x86)\Canon\SolutionMenu\CNSLMAIN.exe" [2007-05-14 644696]

"CanonMyPrinter"="h:\canon mp610\BJMyPrt.exe" [2009-07-27 2184520]

"Kernel and Hardware Abstraction Layer"="KHALMNPR.EXE" [2009-06-17 130576]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]

"LoadAppInit_DLLs"=0x0

.

------- Zusätzlicher Suchlauf -------

.

uLocal Page = c:\windows\system32\blank.htm

uStart Page = hxxp://www.google.de/

mLocal Page = c:\windows\SysWOW64\blank.htm

uInternet Settings,ProxyOverride = *.local

IE: Nach Microsoft E&xel exportieren - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000

TCP: DhcpNameServer = 192.168.3.1

DPF: {888078C6-70B2-4F88-8EE7-1F50DDEA6120} - hxxps://as.photoprintit.de/ips-opdata/activex/ImageUploader6.cab

FF - ProfilePath - 

.

.

------- Dateityp-Verknüpfung -------

.

.txt=

.

- - - - Entfernte verwaiste Registrierungseinträge - - - -

.

Wow6432Node-HKU-Default-RunOnce-SPReview - c:\windows\System32\SPReview\SPReview.exe

.

.

.

[HKEY_LOCAL_MACHINE\system\ControlSet001\services\EverestDriver]

"ImagePath"="\??\h:\everest ultimate edition\kerneld.amd64"

.

--------------------- Gesperrte Registrierungsschluessel ---------------------

.

[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.alb\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="FotoManager10Deluxe.8.alb"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}]

@Denied: (A 2) (Everyone)

@="FlashBroker"

"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil10d.exe,-101"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\Elevation]

"Enabled"=dword:00000001

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\LocalServer32]

@="c:\\Windows\\SysWow64\\Macromed\\Flash\\FlashUtil10d.exe"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Shockwave Flash Object"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10d.ocx"

"ThreadingModel"="Apartment"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]

@="0"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]

@="ShockwaveFlash.ShockwaveFlash.10"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10d.ocx, 1"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="ShockwaveFlash.ShockwaveFlash"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Macromedia Flash Factory Object"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10d.ocx"

"ThreadingModel"="Apartment"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]

@="FlashFactory.FlashFactory.1"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10d.ocx, 1"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="FlashFactory.FlashFactory"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}]

@Denied: (A 2) (Everyone)

@="IFlashBroker3"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\ProxyStubClsid32]

@="{00020424-0000-0000-C000-000000000046}"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

"Version"="1.0"

.

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]

@Denied: (Full) (Everyone)

.

------------------------ Weitere laufende Prozesse ------------------------

.

c:\program files (x86)\Creative\Shared Files\CTAudSvc.exe

h:\avira\AntiVir Desktop\avguard.exe

c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

c:\program files (x86)\Bonjour\mDNSResponder.exe

c:\program files (x86)\Canon\IJPLM\IJPLMSVC.EXE

h:\nero\Nero 8\Nero BackItUp\NBService.exe

c:\program files (x86)\Internet Explorer\IELowutil.exe

.

**************************************************************************

.

Zeit der Fertigstellung: 2011-07-23  14:17:56 - PC wurde neu gestartet

ComboFix-quarantined-files.txt  2011-07-23 12:17

.

Vor Suchlauf: 11 Verzeichnis(se), 21.197.053.952 Bytes frei

Nach Suchlauf: 16 Verzeichnis(se), 21.031.706.624 Bytes frei

.

- - End Of File - - 1A4B22B3EAD9572A86A43CD27A223C61
--- --- ---