Trojaner-Board - c:\users\***\appdata\local\temp\vcplt.dll

Gesagt, getan.

ComboFix:

Combofix Logfile:
Code:
ComboFix 12-06-03.05 - Creen 04.06.2012  16:52:20.2.4 - x64

Microsoft Windows 7 Home Premium   6.1.7601.1.1252.49.1031.18.4091.2646 [GMT 2:00]

ausgeführt von:: c:\users\Creen\Desktop\ComboFix.exe

Benutzte Befehlsschalter :: c:\users\Creen\Desktop\CFScript.txt

AV: Avira Desktop *Disabled/Updated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}

SP: Avira Desktop *Disabled/Updated* {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}

SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

.

.

(((((((((((((((((((((((   Dateien erstellt von 2012-05-04 bis 2012-06-04  ))))))))))))))))))))))))))))))

.

.

2012-06-04 14:55 . 2012-06-04 14:55        --------        d-----w-        c:\users\Default\AppData\Local\temp

2012-06-01 23:42 . 2012-06-01 23:42        --------        d-----w-        c:\program files (x86)\7-Zip

2012-06-01 23:19 . 2012-06-01 23:19        --------        d-----w-        c:\users\Creen\AppData\Roaming\Malwarebytes

2012-06-01 23:19 . 2012-06-01 23:19        --------        d-----w-        c:\program files (x86)\Malwarebytes' Anti-Malware

2012-06-01 23:19 . 2012-06-01 23:19        --------        d-----w-        c:\programdata\Malwarebytes

2012-06-01 23:19 . 2012-04-04 13:56        24904        ----a-w-        c:\windows\system32\drivers\mbam.sys

2012-06-01 12:20 . 2012-05-08 17:02        8955792        ----a-w-        c:\programdata\Microsoft\Windows Defender\Definition Updates\{3962AF3A-E7F5-476D-9BA1-482CD02641BB}\mpengine.dll

2012-05-31 14:58 . 2012-05-31 14:58        --------        d-----w-        c:\users\Creen\AppData\Roaming\12011

2012-05-28 22:36 . 2012-05-28 22:36        --------        d-----w-        c:\users\Creen\AppData\Roaming\LolClient2

2012-05-24 10:18 . 2012-05-24 10:18        --------        d-----w-        C:\xmldm

2012-05-22 18:39 . 2012-05-22 18:39        --------        d-----w-        c:\users\Creen\AppData\Roaming\12010

2012-05-21 14:40 . 2012-05-21 14:40        --------        d-----w-        c:\users\Creen\AppData\Roaming\12009

2012-05-17 13:03 . 2012-05-17 13:03        --------        d-----w-        c:\users\Creen\AppData\Roaming\12008

2012-05-14 21:33 . 2012-05-26 21:59        --------        d-----w-        c:\users\Creen\AppData\Roaming\UAs

2012-05-14 18:55 . 2012-05-14 18:55        --------        d-----w-        c:\users\Creen\AppData\Roaming\12007

2012-05-14 18:55 . 2012-05-30 16:04        --------        d-----w-        c:\users\Creen\AppData\Roaming\xmldm

2012-05-14 18:55 . 2012-05-14 18:55        --------        d-----w-        c:\users\Creen\AppData\Roaming\kock

.

.

.

((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2012-05-08 17:03 . 2012-01-09 18:12        98848        ----a-w-        c:\windows\system32\drivers\avgntflt.sys

2012-05-08 17:03 . 2012-01-09 18:12        132832        ----a-w-        c:\windows\system32\drivers\avipbb.sys

2012-05-04 21:54 . 2012-03-29 16:07        419488        ----a-w-        c:\windows\SysWow64\FlashPlayerApp.exe

2012-05-04 21:54 . 2012-01-09 20:36        70304        ----a-w-        c:\windows\SysWow64\FlashPlayerCPLApp.cpl

2012-05-04 21:54 . 2012-03-29 16:54        8744608        ----a-w-        c:\windows\SysWow64\FlashPlayerInstaller.exe

2012-04-06 05:22 . 2012-04-06 05:22        11174400        ----a-w-        c:\windows\system32\drivers\atikmdag.sys

2012-04-06 02:22 . 2012-04-06 02:22        159744        ----a-w-        c:\windows\system32\atiapfxx.exe

2012-04-06 02:21 . 2012-04-06 02:21        909312        ----a-w-        c:\windows\SysWow64\aticfx32.dll

2012-04-06 02:20 . 2011-11-10 03:15        1067520        ----a-w-        c:\windows\system32\aticfx64.dll

2012-04-06 02:16 . 2012-04-06 02:16        442368        ----a-w-        c:\windows\system32\ATIDEMGX.dll

2012-04-06 02:16 . 2012-04-06 02:16        503808        ----a-w-        c:\windows\system32\atieclxx.exe

2012-04-06 02:16 . 2012-04-06 02:16        236544        ----a-w-        c:\windows\system32\atiesrxx.exe

2012-04-06 02:14 . 2012-04-06 02:14        120320        ----a-w-        c:\windows\system32\atitmm64.dll

2012-04-06 02:14 . 2012-04-06 02:14        21504        ----a-w-        c:\windows\system32\atimuixx.dll

2012-04-06 02:14 . 2012-04-06 02:14        59392        ----a-w-        c:\windows\system32\atiedu64.dll

2012-04-06 02:14 . 2012-04-06 02:14        43520        ----a-w-        c:\windows\SysWow64\ati2edxx.dll

2012-04-06 02:13 . 2012-04-06 02:13        6800896        ----a-w-        c:\windows\SysWow64\atidxx32.dll

2012-04-06 02:10 . 2012-04-06 02:10        26181632        ----a-w-        c:\windows\system32\atio6axx.dll

2012-04-06 02:00 . 2011-11-10 02:18        64000        ----a-w-        c:\windows\system32\coinst.dll

2012-04-06 01:54 . 2011-11-10 02:51        7479296        ----a-w-        c:\windows\system32\atidxx64.dll

2012-04-06 01:50 . 2012-04-06 01:50        19753984        ----a-w-        c:\windows\SysWow64\atioglxx.dll

2012-04-06 01:35 . 2012-04-06 01:35        1120768        ----a-w-        c:\windows\system32\atiumd6v.dll

2012-04-06 01:34 . 2012-04-06 01:34        1831424        ----a-w-        c:\windows\SysWow64\atiumdmv.dll

2012-04-06 01:34 . 2012-04-06 01:34        4731904        ----a-w-        c:\windows\system32\atiumd6a.dll

2012-04-06 01:34 . 2012-04-06 01:34        6203392        ----a-w-        c:\windows\SysWow64\atiumdag.dll

2012-04-06 01:30 . 2012-04-06 01:30        51200        ----a-w-        c:\windows\system32\aticalrt64.dll

2012-04-06 01:30 . 2012-04-06 01:30        46080        ----a-w-        c:\windows\SysWow64\aticalrt.dll

2012-04-06 01:30 . 2012-04-06 01:30        44544        ----a-w-        c:\windows\system32\aticalcl64.dll

2012-04-06 01:30 . 2012-04-06 01:30        44032        ----a-w-        c:\windows\SysWow64\aticalcl.dll

2012-04-06 01:29 . 2012-04-06 01:29        16090624        ----a-w-        c:\windows\system32\aticaldd64.dll

2012-04-06 01:25 . 2012-04-06 01:25        13764096        ----a-w-        c:\windows\SysWow64\aticaldd.dll

2012-04-06 01:23 . 2012-04-06 01:23        7431680        ----a-w-        c:\windows\system32\atiumd64.dll

2012-04-06 01:22 . 2012-04-06 01:22        4795904        ----a-w-        c:\windows\SysWow64\atiumdva.dll

2012-04-06 01:11 . 2012-04-06 01:11        514560        ----a-w-        c:\windows\system32\atiadlxx.dll

2012-04-06 01:11 . 2012-04-06 01:11        360448        ----a-w-        c:\windows\SysWow64\atiadlxy.dll

2012-04-06 01:11 . 2012-04-06 01:11        17408        ----a-w-        c:\windows\system32\atig6pxx.dll

2012-04-06 01:11 . 2012-04-06 01:11        14848        ----a-w-        c:\windows\SysWow64\atiglpxx.dll

2012-04-06 01:11 . 2012-04-06 01:11        14848        ----a-w-        c:\windows\system32\atiglpxx.dll

2012-04-06 01:11 . 2012-04-06 01:11        41984        ----a-w-        c:\windows\system32\atig6txx.dll

2012-04-06 01:10 . 2012-04-06 01:10        33280        ----a-w-        c:\windows\SysWow64\atigktxx.dll

2012-04-06 01:10 . 2012-04-06 01:10        343040        ----a-w-        c:\windows\system32\drivers\atikmpag.sys

2012-04-06 01:09 . 2011-11-10 02:11        54784        ----a-w-        c:\windows\system32\atiuxp64.dll

2012-04-06 01:09 . 2012-04-06 01:09        41984        ----a-w-        c:\windows\SysWow64\atiuxpag.dll

2012-04-06 01:09 . 2012-04-06 01:09        44544        ----a-w-        c:\windows\system32\atiu9p64.dll

2012-04-06 01:09 . 2012-04-06 01:09        32256        ----a-w-        c:\windows\SysWow64\atiu9pag.dll

2012-04-06 01:09 . 2012-04-06 01:09        53248        ----a-w-        c:\windows\system32\drivers\ati2erec.dll

2012-04-06 01:06 . 2012-04-06 01:06        54784        ----a-w-        c:\windows\system32\atimpc64.dll

2012-04-06 01:06 . 2012-04-06 01:06        54784        ----a-w-        c:\windows\system32\amdpcom64.dll

2012-04-06 01:06 . 2012-04-06 01:06        53760        ----a-w-        c:\windows\SysWow64\atimpc32.dll

2012-04-06 01:06 . 2012-04-06 01:06        53760        ----a-w-        c:\windows\SysWow64\amdpcom32.dll

2012-04-05 20:34 . 2012-04-05 20:34        187392        ----a-w-        c:\windows\system32\clinfo.exe

2012-04-05 20:34 . 2012-04-05 20:34        74752        ----a-w-        c:\windows\system32\OpenVideo64.dll

2012-04-05 20:34 . 2012-04-05 20:34        64512        ----a-w-        c:\windows\SysWow64\OpenVideo.dll

2012-04-05 20:33 . 2012-04-05 20:33        63488        ----a-w-        c:\windows\system32\OVDecode64.dll

2012-04-05 20:33 . 2012-04-05 20:33        56320        ----a-w-        c:\windows\SysWow64\OVDecode.dll

2012-04-05 20:33 . 2012-04-05 20:33        16457216        ----a-w-        c:\windows\system32\amdocl64.dll

2012-04-05 20:32 . 2012-04-05 20:32        13007872        ----a-w-        c:\windows\SysWow64\amdocl.dll

2012-03-08 23:24 . 2012-03-08 23:24        54272        ----a-w-        c:\windows\system32\OpenCL.dll

2012-03-08 23:24 . 2012-03-08 23:24        48128        ----a-w-        c:\windows\SysWow64\OpenCL.dll

.

.

((((((((((((((((((((((((((((((((((((((((((((   Look   )))))))))))))))))))))))))))))))))))))))))))))))))))))))))

.

---- Directory of c:\users\Creen\AppData\Roaming\12007 ----

.

2012-05-14 18:55 . 2012-05-17 09:13        117        ----a-w-        c:\users\Creen\AppData\Roaming\12007\chrome.manifest

2012-05-14 18:55 . 2012-05-17 09:13        537        ----a-w-        c:\users\Creen\AppData\Roaming\12007\install.rdf

2012-05-14 18:55 . 2012-05-14 18:55        78        ----a-w-        c:\users\Creen\AppData\Roaming\12007\components\AcroFF.txt

.

---- Directory of c:\users\Creen\AppData\Roaming\12008 ----

.

2012-05-17 13:03 . 2012-05-21 14:40        120        ----a-w-        c:\users\Creen\AppData\Roaming\12008\chrome.manifest

2012-05-17 13:03 . 2012-05-21 14:40        537        ----a-w-        c:\users\Creen\AppData\Roaming\12008\install.rdf

2012-05-17 13:03 . 2012-05-17 13:03        78        ----a-w-        c:\users\Creen\AppData\Roaming\12008\components\AcroFF.txt

.

---- Directory of c:\users\Creen\AppData\Roaming\12009 ----

.

2012-05-21 14:40 . 2012-05-22 18:39        120        ----a-w-        c:\users\Creen\AppData\Roaming\12009\chrome.manifest

2012-05-21 14:40 . 2012-05-22 18:39        537        ----a-w-        c:\users\Creen\AppData\Roaming\12009\install.rdf

2012-05-21 14:40 . 2012-05-21 14:40        78        ----a-w-        c:\users\Creen\AppData\Roaming\12009\components\AcroFF.txt

.

---- Directory of c:\users\Creen\AppData\Roaming\12010 ----

.

2012-05-22 18:39 . 2012-05-30 14:46        120        ----a-w-        c:\users\Creen\AppData\Roaming\12010\chrome.manifest

2012-05-22 18:39 . 2012-05-30 14:46        537        ----a-w-        c:\users\Creen\AppData\Roaming\12010\install.rdf

2012-05-22 18:39 . 2012-05-31 05:56        78        ----a-w-        c:\users\Creen\AppData\Roaming\12010\components\AcroFF.txt

.

---- Directory of c:\users\Creen\AppData\Roaming\12011 ----

.

2012-05-31 14:58 . 2012-06-01 20:42        120        ----a-w-        c:\users\Creen\AppData\Roaming\12011\chrome.manifest

2012-05-31 14:58 . 2012-06-01 20:42        537        ----a-w-        c:\users\Creen\AppData\Roaming\12011\install.rdf

2012-05-31 14:58 . 2012-06-01 23:42        78        ----a-w-        c:\users\Creen\AppData\Roaming\12011\components\AcroFF.txt

.

---- Directory of c:\users\Creen\AppData\Roaming\kock ----

.

.

---- Directory of c:\users\Creen\AppData\Roaming\LolClient2 ----

.

2012-05-28 22:50 . 2012-05-28 22:50        410        ----a-w-        c:\users\Creen\AppData\Roaming\LolClient2\Local Store\#SharedObjects\analytics.sol

.

---- Directory of c:\users\Creen\AppData\Roaming\UAs ----

.

2012-05-26 21:59 . 2012-05-26 21:59        50        ----a-w-        c:\users\Creen\AppData\Roaming\UAs\firefox.exe_UAs001.dat

2012-05-15 14:34 . 2012-05-15 14:34        168        ----a-w-        c:\users\Creen\AppData\Roaming\UAs\OUTLOOK.EXE_UAs001.dat

2012-05-15 14:32 . 2012-05-15 14:32        168        ----a-w-        c:\users\Creen\AppData\Roaming\UAs\m_UAs003.dat

2012-05-14 21:33 . 2012-05-14 21:33        10        ----a-w-        c:\users\Creen\AppData\Roaming\UAs\m_UAs002.dat

2012-05-14 21:33 . 2012-05-14 21:33        10        ----a-w-        c:\users\Creen\AppData\Roaming\UAs\m_UAs001.dat

.

---- Directory of c:\users\Creen\AppData\Roaming\xmldm ----

.

.

---- Directory of C:\xmldm ----

.

.

.

(((((((((((((((((((((((((((((   SnapShot@2012-06-03_22.56.25   )))))))))))))))))))))))))))))))))))))))))

.

+ 2012-01-09 17:18 . 2012-06-04 14:48        38590              c:\windows\system32\wdi\ShutdownPerformanceDiagnostics_SystemData.bin

+ 2009-07-14 05:10 . 2012-06-04 14:48        30212              c:\windows\system32\wdi\BootPerformanceDiagnostics_SystemData.bin

+ 2012-01-09 16:39 . 2012-06-04 14:48        11148              c:\windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-2090305386-3392036484-1204285206-1001_UserData.bin

+ 2012-01-09 23:52 . 2012-06-04 05:36        3286              c:\windows\system32\wdi\ERCQueuedResolutions.dat

- 2012-01-09 23:52 . 2012-06-03 22:55        3286              c:\windows\system32\wdi\ERCQueuedResolutions.dat

+ 2012-06-04 14:56 . 2012-06-04 14:56        2048              c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat

- 2012-06-03 22:56 . 2012-06-03 22:56        2048              c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat

- 2012-06-03 22:56 . 2012-06-03 22:56        2048              c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat

+ 2012-06-04 14:56 . 2012-06-04 14:56        2048              c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat

- 2012-01-15 02:45 . 2012-06-03 22:55        676544              c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache3.0.0.0.dat

+ 2012-01-15 02:45 . 2012-06-04 14:56        676544              c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache3.0.0.0.dat

- 2009-07-14 05:01 . 2012-06-03 22:55        256752              c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat

+ 2009-07-14 05:01 . 2012-06-04 14:56        256752              c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat

+ 2012-01-09 17:15 . 2012-06-04 14:56        24098908              c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-2090305386-3392036484-1204285206-1001-8192.dat

.

((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))

.

.

*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 

REGEDIT4

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]

"AMD AVT"="start AMD Accelerated Video Transcoding device initialization" [X]

"IAStorIcon"="c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" [2009-10-02 284696]

"JMB36X IDE Setup"="c:\windows\RaidTool\xInsIDE.exe" [2007-03-20 36864]

"avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2012-05-08 348624]

"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2012-04-05 641664]

"Malwarebytes' Anti-Malware"="c:\program files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" [2012-04-04 462408]

.

c:\users\Creen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\

Microsoft Office Outlook 2003.lnk - c:\windows\Installer\{90110407-6000-11D3-8CFE-0150048383C9}\outicon.exe [2012-1-9 794624]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"ConsentPromptBehaviorAdmin"= 5 (0x5)

"ConsentPromptBehaviorUser"= 3 (0x3)

"EnableUIADesktopToggle"= 0 (0x0)

.

R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]

R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]

R2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2012-04-04 654408]

R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2012-01-31 158856]

R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-05-04 257696]

R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [x]

R3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2012-04-27 129976]

R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]

R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys [x]

S1 AppleCharger;AppleCharger;c:\windows\system32\DRIVERS\AppleCharger.sys [x]

S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys [x]

S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x]

S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-01-03 63928]

S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [x]

S2 AntiVirSchedulerService;Avira Planer;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [2012-05-08 86224]

S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2009-10-02 13336]

S2 JMB36X;JMB36X;c:\windows\SysWOW64\XSrvSetup.exe [2009-08-06 65536]

S3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atikmdag.sys [x]

S3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [x]

S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys [x]

S3 nusb3hub;NEC Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\nusb3hub.sys [x]

S3 nusb3xhc;NEC Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\nusb3xhc.sys [x]

S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [x]

S3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\system32\DRIVERS\vwifimp.sys [x]

.

.

Inhalt des "geplante Tasks" Ordners

.

2012-06-04 c:\windows\Tasks\Adobe Flash Player Updater.job

- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-03-29 21:54]

.

.

--------- x86-64 -----------

.

.

------- Zusätzlicher Suchlauf -------

.

uLocal Page = c:\windows\system32\blank.htm

uStart Page = hxxp://start.icq.com/

mLocal Page = c:\windows\SysWOW64\blank.htm

uInternet Settings,ProxyOverride = *.local

IE: Nach Microsoft &Excel exportieren - c:\progra~2\MICROS~1\OFFICE11\EXCEL.EXE/3000

IE: {{77F665FD-3F60-4B0A-AE14-EC124B7A7FCE} - c:\program files (x86)\ICQ7.7\ICQ.exe

TCP: DhcpNameServer = 192.168.1.1

FF - ProfilePath - c:\users\Creen\AppData\Roaming\Mozilla\Firefox\Profiles\giwwbhkj.default\

FF - prefs.js: browser.search.selectedEngine - ICQ Search

FF - prefs.js: browser.startup.homepage - google.de

FF - prefs.js: keyword.URL - hxxp://search.icq.com/search/afe_results.php?ch_id=afex&tb_ver=1.4.3&q=

.

.

--------------------- Gesperrte Registrierungsschluessel ---------------------

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]

@Denied: (A 2) (Everyone)

@="FlashBroker"

"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_2_202_235_ActiveX.exe,-101"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]

"Enabled"=dword:00000001

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_2_202_235_ActiveX.exe"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Shockwave Flash Object"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_2_202_235.ocx"

"ThreadingModel"="Apartment"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]

@="0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]

@="ShockwaveFlash.ShockwaveFlash.11"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_2_202_235.ocx, 1"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="ShockwaveFlash.ShockwaveFlash"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Macromedia Flash Factory Object"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_2_202_235.ocx"

"ThreadingModel"="Apartment"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]

@="FlashFactory.FlashFactory.1"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_2_202_235.ocx, 1"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="FlashFactory.FlashFactory"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]

@Denied: (A 2) (Everyone)

@="IFlashBroker4"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]

@="{00020424-0000-0000-C000-000000000046}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

"Version"="1.0"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]

@Denied: (Full) (Everyone)

.

------------------------ Weitere laufende Prozesse ------------------------

.

c:\program files (x86)\Avira\AntiVir Desktop\avguard.exe

c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

.

**************************************************************************

.

Zeit der Fertigstellung: 2012-06-04  16:59:21 - PC wurde neu gestartet

ComboFix-quarantined-files.txt  2012-06-04 14:59

ComboFix2.txt  2012-06-03 22:58

.

Vor Suchlauf: 14 Verzeichnis(se), 108.079.046.656 Bytes frei

Nach Suchlauf: 15 Verzeichnis(se), 107.996.688.384 Bytes frei

.

- - End Of File - - DDE2A248E407261C0871549047F0A911
--- --- ---

Naja, was heißt ich nutze Malwarebytes.. Hab' es mir eigentlich nur wegen des Problems geladen gehabt und einen Scan vollzogen. Das log befindet sich im Anhang.

Gruß,
Christian