TR/Vundo.Gen

Piggedy

ComboFix 07-12-09.1 - User 2007-12-09 12:16:15.1 - NTFSx86
ausgeführt von:: C:\Dokumente und Einstellungen\User\Desktop\ComboFix.exe
* Neuer Wiederherstellungspunkt wurde erstellt
.

(((((((((((((((((((((((((((((((((((( Weitere L”schungen ))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Dokumente und Einstellungen\User\Anwendungsdaten\setup_de[1].exe
C:\Programme\MyWebSearch
C:\Programme\MyWebSearch\bar\1.bin\F3HTMLMU.DLL
C:\Programme\MyWebSearch\bar\1.bin\F3REPROX.DLL
C:\Programme\MyWebSearch\bar\1.bin\MWSBAR.DLL
C:\Programme\MyWebSearch\bar\1.bin\MWSOEMON.EXE
C:\Programme\MyWebSearch\bar\1.bin\MWSOEPLG.DLL
C:\Programme\MyWebSearch\bar\1.bin\MWSOESTB.DLL
C:\Programme\MyWebSearch\bar\History\search2
C:\Programme\MyWebSearch\SrchAstt\1.bin\MWSSRCAS.DLL
C:\WINDOWS\cookies.ini
C:\WINDOWS\system32\afxuhylk.dll
C:\WINDOWS\system32\aoiejyqq.ini
C:\WINDOWS\system32\arbxxrih.dll
C:\WINDOWS\system32\bnxgygvl.ini
C:\WINDOWS\system32\bppvcaas.dll
C:\WINDOWS\system32\byxywtt.dll
C:\WINDOWS\system32\cbxutqq.dll
C:\WINDOWS\system32\cdchyrjx.dll
C:\WINDOWS\system32\clqppkos.dll
C:\WINDOWS\system32\crevioxu.ini
C:\WINDOWS\system32\cwgxbqpt.dll
C:\WINDOWS\system32\dbpsxrey.dll
C:\WINDOWS\system32\dhwiibuk.ini
C:\WINDOWS\system32\difaftoj.ini
C:\WINDOWS\system32\djuoilgx.dll
C:\WINDOWS\system32\ehcfpiwr.dll
C:\WINDOWS\system32\ewnkwdps.ini
C:\WINDOWS\system32\fwhtpgyh.ini
C:\WINDOWS\system32\gjfpuwpt.ini
C:\WINDOWS\system32\guyuwihl.dll
C:\WINDOWS\system32\gxjswnah.ini
C:\WINDOWS\system32\hadmoipr.dll
C:\WINDOWS\system32\hanwsjxg.dll
C:\WINDOWS\system32\hirxxbra.ini
C:\WINDOWS\system32\hsikypeo.dll
C:\WINDOWS\system32\hygpthwf.dll
C:\WINDOWS\system32\jjllm.ini
C:\WINDOWS\system32\jjllm.ini2
C:\WINDOWS\system32\jlbjncxo.ini
C:\WINDOWS\system32\jornkdrk.dll
C:\WINDOWS\system32\jotfafid.dll
C:\WINDOWS\system32\jspwrwem.dll
C:\WINDOWS\system32\jyfkrlgv.ini
C:\WINDOWS\system32\kcqlgauy.dll
C:\WINDOWS\system32\kikjnxdq.dll
C:\WINDOWS\system32\kiyyqqgv.ini
C:\WINDOWS\system32\klyhuxfa.ini
C:\WINDOWS\system32\krdknroj.ini
C:\WINDOWS\system32\kubiiwhd.dll
C:\WINDOWS\system32\kvkaewku.ini
C:\WINDOWS\system32\lhiwuyug.ini
C:\WINDOWS\system32\lvgygxnb.dll
C:\WINDOWS\system32\lvvtobqo.ini
C:\WINDOWS\system32\mewrwpsj.ini
C:\WINDOWS\system32\mlljj.dll
C:\WINDOWS\system32\motxbacs.ini
C:\WINDOWS\system32\mtschlat.ini
C:\WINDOWS\system32\ncsmehww.ini
C:\WINDOWS\system32\npamislx.dll
C:\WINDOWS\system32\oepykish.ini
C:\WINDOWS\system32\ofysamwr.ini
C:\WINDOWS\system32\oqbotvvl.dll
C:\WINDOWS\system32\ovgvtnvx.dll
C:\WINDOWS\system32\oxcnjblj.dll
C:\WINDOWS\system32\qdxnjkik.ini
C:\WINDOWS\system32\qmeirqex.ini
C:\WINDOWS\system32\qqyjeioa.dll
C:\WINDOWS\system32\rpiomdah.ini
C:\WINDOWS\system32\rwipfche.ini
C:\WINDOWS\system32\rwljnfcw.ini
C:\WINDOWS\system32\rwmasyfo.dll
C:\WINDOWS\system32\saacvppb.ini
C:\WINDOWS\system32\scabxtom.dll
C:\WINDOWS\system32\sokppqlc.ini
C:\WINDOWS\system32\spdwknwe.dll
C:\WINDOWS\system32\svobercx.ini
C:\WINDOWS\system32\talhcstm.dll
C:\WINDOWS\system32\tpqbxgwc.ini
C:\WINDOWS\system32\tpwupfjg.dll
C:\WINDOWS\system32\ukweakvk.dll
C:\WINDOWS\system32\uxoiverc.dll
C:\WINDOWS\system32\vglrkfyj.dll
C:\WINDOWS\system32\vgqqyyik.dll
C:\WINDOWS\system32\vjtfqlqy.ini
C:\WINDOWS\system32\vyrwtnny.ini
C:\WINDOWS\system32\wcfnjlwr.dll
C:\WINDOWS\system32\wwhemscn.dll
C:\WINDOWS\system32\xcrebovs.dll
C:\WINDOWS\system32\xeqriemq.dll
C:\WINDOWS\system32\xglioujd.ini
C:\WINDOWS\system32\xjryhcdc.ini
C:\WINDOWS\system32\xlsimapn.ini
C:\WINDOWS\system32\xvntvgvo.ini
C:\WINDOWS\system32\yerxspbd.ini
C:\WINDOWS\system32\ynntwryv.dll
C:\WINDOWS\system32\yqlqftjv.dll
C:\WINDOWS\system32\yuaglqck.ini

.
((((((((((((((((((((((( Dateien erstellt von 2007-11-09 bis 2007-12-09 ))))))))))))))))))))))))))))))
.

2007-12-09 11:18 . 2006-04-23 22:39 290,816 --a------ C:\Programme\Uninstall My Web Search.dll
2007-12-09 10:50 . 2007-12-09 10:54 <DIR> d-------- C:\HiJackThis
2007-12-08 06:38 . 2007-12-08 06:38 834,100 ---hs---- C:\WINDOWS\system32\hlfxcshi.ini
2007-12-08 03:32 . 2007-12-08 03:32 834,100 ---hs---- C:\WINDOWS\system32\aspdwdvx.ini
2007-12-08 00:25 . 2007-12-08 00:49 834,460 ---hs---- C:\WINDOWS\system32\yulhbxcv.ini
2007-12-07 22:36 . 2007-12-07 22:36 12 --a------ C:\WINDOWS\system32\a871a5c6
2007-12-07 18:44 . 2007-12-07 22:34 834,340 ---hs---- C:\WINDOWS\system32\cqovxpne.ini
2007-12-07 17:44 . 2007-12-07 17:44 834,160 ---hs---- C:\WINDOWS\system32\nmojfnie.ini
2007-12-07 17:42 . 2007-12-07 17:43 834,100 ---hs---- C:\WINDOWS\system32\bcydxsxj.ini
2007-12-07 15:41 . 2007-12-07 16:42 834,460 ---hs---- C:\WINDOWS\system32\wvrqiurw.ini
2007-12-07 15:38 . 2007-12-07 15:38 834,400 ---hs---- C:\WINDOWS\system32\askgsupn.ini
2007-12-07 14:38 . 2007-12-07 14:38 834,340 ---hs---- C:\WINDOWS\system32\grmvprcs.ini
2007-12-07 13:38 . 2007-12-07 13:38 834,280 ---hs---- C:\WINDOWS\system32\dvfhvbis.ini
2007-12-07 13:35 . 2007-12-07 13:35 834,220 ---hs---- C:\WINDOWS\system32\hpvkhxnn.ini
2007-12-07 12:35 . 2007-12-07 12:35 833,164 ---hs---- C:\WINDOWS\system32\bbeoncct.ini
2007-12-07 11:35 . 2007-12-07 11:35 832,071 ---hs---- C:\WINDOWS\system32\jhdldgkp.ini
2007-12-07 06:33 . 2007-12-07 10:31 354 ---hs---- C:\WINDOWS\system32\kryaxjhi.ini
2007-12-07 04:31 . 2007-12-07 04:31 831,417 ---hs---- C:\WINDOWS\system32\vdywvjqm.ini
2007-12-07 02:42 . 2007-06-20 14:47 143,360 --a------ C:\WINDOWS\system32\ConTest.dll
2007-12-07 02:42 . 2003-04-22 15:41 36,864 --a------ C:\WINDOWS\system32\ascbalon.dll
2007-12-07 02:42 . 2007-02-13 11:05 20,480 --a------ C:\WINDOWS\system32\SysRestore.dll
2007-12-07 01:29 . 2007-12-07 02:27 831,486 ---hs---- C:\WINDOWS\system32\qjmbsufd.ini
2007-12-07 01:26 . 2007-12-07 01:27 831,417 ---hs---- C:\WINDOWS\system32\fnybghtf.ini
2007-12-07 00:24 . 2007-12-07 00:24 832,437 ---hs---- C:\WINDOWS\system32\skkododw.ini
2007-12-06 23:24 . 2007-12-06 23:24 832,377 ---hs---- C:\WINDOWS\system32\bharnlfj.ini
2007-12-06 18:12 . 2007-12-06 22:21 816,620 ---hs---- C:\WINDOWS\system32\ntieahhs.ini
2007-12-06 17:12 . 2007-12-06 17:12 808,248 ---hs---- C:\WINDOWS\system32\cqcrdcad.ini
2007-12-06 16:12 . 2007-12-06 16:12 808,188 ---hs---- C:\WINDOWS\system32\lftcbafh.ini
2007-12-06 16:09 . 2007-12-06 16:09 808,128 ---hs---- C:\WINDOWS\system32\gjdkblba.ini
2007-12-06 15:09 . 2007-12-06 15:09 808,068 ---hs---- C:\WINDOWS\system32\nycxltiu.ini
2007-12-06 14:09 . 2007-12-06 14:09 808,008 ---hs---- C:\WINDOWS\system32\hxkellfi.ini
2007-12-06 14:06 . 2007-12-06 14:06 807,948 ---hs---- C:\WINDOWS\system32\pfttvcwv.ini
2007-12-06 13:06 . 2007-12-06 13:07 807,888 ---hs---- C:\WINDOWS\system32\rxhohgew.ini
2007-12-06 12:06 . 2007-12-06 12:07 807,828 ---hs---- C:\WINDOWS\system32\lwjgtrol.ini
2007-12-06 11:06 . 2007-12-06 12:06 807,768 ---hs---- C:\WINDOWS\system32\ouupwskb.ini
2007-12-06 11:03 . 2007-12-06 11:04 807,708 ---hs---- C:\WINDOWS\system32\muynmroh.ini
2007-12-06 10:03 . 2007-12-06 10:03 807,648 ---hs---- C:\WINDOWS\system32\jotuqwpo.ini
2007-12-06 09:03 . 2007-12-06 09:04 807,588 ---hs---- C:\WINDOWS\system32\wowdtinw.ini
2007-12-06 08:03 . 2007-12-06 08:03 807,528 ---hs---- C:\WINDOWS\system32\aartikqn.ini
2007-12-06 08:00 . 2007-12-06 08:00 807,468 ---hs---- C:\WINDOWS\system32\htfpugvx.ini
2007-12-06 05:58 . 2007-12-06 05:58 807,828 ---hs---- C:\WINDOWS\system32\bmolccpy.ini
2007-12-06 05:57 . 2007-12-06 05:58 807,768 ---hs---- C:\WINDOWS\system32\qpcwqidp.ini
2007-12-06 04:59 . 2007-12-06 05:01 807,708 ---hs---- C:\WINDOWS\system32\nrreorgi.ini
2007-12-06 03:55 . 2007-12-06 03:56 807,648 ---hs---- C:\WINDOWS\system32\tjahcyln.ini
2007-12-06 02:52 . 2007-12-06 02:54 807,597 ---hs---- C:\WINDOWS\system32\uaudvkul.ini
2007-12-06 01:49 . 2007-12-06 01:49 807,528 ---hs---- C:\WINDOWS\system32\climkqkj.ini
2007-12-06 01:47 . 2007-12-06 01:47 807,468 ---hs---- C:\WINDOWS\system32\yiyuyboc.ini
2007-12-05 23:41 . 2007-12-06 00:20 808,437 ---hs---- C:\WINDOWS\system32\qupjcfgt.ini
2007-12-05 23:38 . 2007-12-05 23:38 808,368 ---hs---- C:\WINDOWS\system32\hgotsfwn.ini
2007-12-05 22:38 . 2007-12-05 22:38 808,308 ---hs---- C:\WINDOWS\system32\bocwdgud.ini
2007-12-05 21:38 . 2007-12-05 21:38 808,248 ---hs---- C:\WINDOWS\system32\vaesseva.ini
2007-12-05 20:38 . 2007-12-05 20:38 808,188 ---hs---- C:\WINDOWS\system32\phhnkmhs.ini
2007-12-05 20:35 . 2007-12-05 20:35 808,128 ---hs---- C:\WINDOWS\system32\achusdoj.ini
2007-12-05 19:35 . 2007-12-05 19:35 808,068 ---hs---- C:\WINDOWS\system32\iplgouhp.ini
2007-12-05 18:35 . 2007-12-05 19:35 808,008 ---hs---- C:\WINDOWS\system32\cqtujyus.ini
2007-12-05 18:32 . 2007-12-05 18:33 807,948 ---hs---- C:\WINDOWS\system32\csgaisbi.ini
2007-12-05 17:29 . 2007-12-05 17:29 807,888 ---hs---- C:\WINDOWS\system32\dgqmtjfe.ini
2007-12-05 17:26 . 2007-12-05 17:26 807,828 ---hs---- C:\WINDOWS\system32\icgayrjc.ini
2007-12-05 16:59 . 2007-12-05 16:59 807,768 ---hs---- C:\WINDOWS\system32\ceprejij.ini
2007-12-05 15:56 . 2007-12-05 15:56 807,708 ---hs---- C:\WINDOWS\system32\eomehmfd.ini
2007-12-05 14:56 . 2007-12-05 14:56 807,648 ---hs---- C:\WINDOWS\system32\xdmgcyqw.ini
2007-12-05 13:56 . 2007-12-05 13:56 807,588 ---hs---- C:\WINDOWS\system32\bhynngdx.ini
2007-12-05 13:53 . 2007-12-05 13:53 807,528 ---hs---- C:\WINDOWS\system32\jdbdxado.ini
2007-12-05 12:53 . 2007-12-05 12:53 806,301 ---hs---- C:\WINDOWS\system32\kmtgceqg.ini
2007-12-05 07:23 . 2007-12-05 07:23 668,992 ---hs---- C:\WINDOWS\system32\achgaibj.ini
2007-12-05 06:20 . 2007-12-05 06:20 294 ---hs---- C:\WINDOWS\system32\autopdnk.ini
2007-12-05 05:18 . 2007-12-05 05:18 805,501 ---hs---- C:\WINDOWS\system32\vinvckqr.ini
2007-12-05 04:18 . 2007-12-05 04:18 805,441 ---hs---- C:\WINDOWS\system32\dsehneup.ini
2007-12-05 03:18 . 2007-12-05 03:41 805,390 ---hs---- C:\WINDOWS\system32\odajwuxy.ini
2007-12-05 03:15 . 2007-12-05 03:15 805,321 ---hs---- C:\WINDOWS\system32\dksqilbe.ini
2007-12-05 01:15 . 2007-12-05 01:15 294 ---hs---- C:\WINDOWS\system32\ifhddgob.tmp
2007-12-05 00:12 . 2007-12-05 01:13 802,574 ---hs---- C:\WINDOWS\system32\fiflmqna.ini
2007-12-04 23:12 . 2007-12-04 23:12 802,514 ---hs---- C:\WINDOWS\system32\svmnhnmk.ini
2007-12-04 23:12 . 2007-12-04 23:12 802,454 ---hs---- C:\WINDOWS\system32\ctdaufhb.tmp
2007-12-04 23:09 . 2007-12-04 23:10 802,454 ---hs---- C:\WINDOWS\system32\ctdaufhb.ini
2007-12-04 22:09 . 2007-12-04 23:10 802,394 ---hs---- C:\WINDOWS\system32\xrjuinuk.ini
2007-12-04 21:09 . 2007-12-04 21:09 802,334 ---hs---- C:\WINDOWS\system32\gworenqe.ini
2007-12-04 21:06 . 2007-12-04 21:06 802,274 ---hs---- C:\WINDOWS\system32\qaypwqiv.ini
2007-12-04 20:06 . 2007-12-04 20:06 802,214 ---hs---- C:\WINDOWS\system32\kkbsdbkc.ini
2007-12-04 19:06 . 2007-12-04 20:06 802,154 ---hs---- C:\WINDOWS\system32\gufqekwk.ini
2007-12-04 18:06 . 2007-12-04 19:06 805,441 ---hs---- C:\WINDOWS\system32\xuvsvkot.ini
2007-12-04 18:03 . 2007-12-04 18:03 802,034 ---hs---- C:\WINDOWS\system32\qnkniqse.ini
2007-12-04 17:03 . 2007-12-04 17:03 801,974 ---hs---- C:\WINDOWS\system32\kabjscud.ini
2007-12-04 03:53 . 2007-12-04 03:55 793,980 ---hs---- C:\WINDOWS\system32\sefqrhho.ini
2007-12-04 01:52 . 2007-12-04 01:52 793,980 ---hs---- C:\WINDOWS\system32\dldvqkxb.ini
2007-12-04 00:49 . 2007-12-04 00:49 793,980 ---hs---- C:\WINDOWS\system32\owqmswtj.ini
2007-12-03 23:42 . 2007-12-03 23:42 794,040 ---hs---- C:\WINDOWS\system32\xgonghws.ini
2007-12-03 22:41 . 2007-12-03 22:41 793,980 ---hs---- C:\WINDOWS\system32\vpsxapom.ini
2007-12-03 20:39 . 2007-12-03 21:40 794,520 ---hs---- C:\WINDOWS\system32\vlmxghrk.ini
2007-12-03 19:39 . 2007-12-03 19:39 794,460 ---hs---- C:\WINDOWS\system32\axypfatv.ini
2007-12-03 19:36 . 2007-12-03 19:36 794,400 ---hs---- C:\WINDOWS\system32\ymsqmxui.ini
2007-12-03 18:36 . 2007-12-03 18:36 792,889 ---hs---- C:\WINDOWS\system32\cagmokdk.ini
2007-12-03 17:36 . 2007-12-03 17:36 792,829 ---hs---- C:\WINDOWS\system32\gbkdcavw.ini
2007-12-03 16:36 . 2007-12-03 16:36 792,720 ---hs---- C:\WINDOWS\system32\hedwofoa.ini
2007-12-03 16:33 . 2007-12-03 16:33 792,660 ---hs---- C:\WINDOWS\system32\nlpylxwk.ini
2007-12-03 15:33 . 2007-12-03 15:33 792,522 ---hs---- C:\WINDOWS\system32\gwtrkuel.ini
2007-12-03 14:33 . 2007-12-03 14:33 792,252 ---hs---- C:\WINDOWS\system32\afjrwoei.ini
2007-12-03 14:30 . 2007-12-03 14:30 294 ---hs---- C:\WINDOWS\system32\rlyltohl.ini
2007-12-02 16:13 . 2007-12-03 13:29 793,724 ---hs---- C:\WINDOWS\system32\yvnvplcb.ini
2007-11-26 12:32 . 2007-11-27 12:33 783,723 ---hs---- C:\WINDOWS\system32\hdaasmfi.ini

.
(((((((((((((((((((((((((((((((((((( Find3M Bericht ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2007-12-09 10:23 --------- d--h--w C:\Programme\InstallShield Installation Information
2007-12-08 01:04 --------- d-----w C:\Programme\StarOffice7
2007-12-07 22:31 --------- d-----w C:\Programme\Java
2007-11-16 16:17 --------- d-----w C:\Programme\PokerStars.NET
2007-11-11 01:41 --------- d-----w C:\Programme\PokerOffice
2007-11-06 01:52 --------- d-----w C:\Programme\PartyGaming
2007-10-22 07:43 --------- d-----w C:\Programme\DATA BECKER
2007-10-22 04:22 --------- d-----w C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\AntiVir PersonalEdition Classic
2007-10-22 04:05 --------- d-----w C:\Programme\Antivir
2007-10-22 03:23 --------- d-----w C:\Programme\UNNÜTZE
2007-10-20 03:48 --------- d-----w C:\Dokumente und Einstellungen\User\Anwendungsdaten\Tobit
2007-10-20 03:47 --------- d-----w C:\Programme\Gemeinsame Dateien\Tobit
2007-01-04 18:52 92,064 ----a-w C:\Dokumente und Einstellungen\User\mqdmmdm.sys
2007-01-04 18:52 9,232 ----a-w C:\Dokumente und Einstellungen\User\mqdmmdfl.sys
2007-01-04 18:52 79,328 ----a-w C:\Dokumente und Einstellungen\User\mqdmserd.sys
2007-01-04 18:52 66,656 ----a-w C:\Dokumente und Einstellungen\User\mqdmbus.sys
2007-01-04 18:52 6,208 ----a-w C:\Dokumente und Einstellungen\User\mqdmcmnt.sys
2007-01-04 18:52 5,936 ----a-w C:\Dokumente und Einstellungen\User\mqdmwhnt.sys
2007-01-04 18:52 4,048 ----a-w C:\Dokumente und Einstellungen\User\mqdmcr.sys
2007-01-04 18:52 25,600 ----a-w C:\Dokumente und Einstellungen\User\usbsermptxp.sys
2007-01-04 18:52 22,768 ----a-w C:\Dokumente und Einstellungen\User\usbsermpt.sys
2005-05-11 14:30 774,144 ----a-w C:\Programme\RngInterstitial.dll
2005-03-23 11:28 284 ----a-w C:\Dokumente und Einstellungen\User\Anwendungsdaten\ViewerApp.dat
.

(((((((((((((((((((((((((((( Autostart Punkte der Registrierung ))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Hinweis* leere Eintrage & legitime Standardeintrage werden nicht angezeigt.

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{1B7F7A9D-0B21-455B-B6F6-5537A01B76D6}]
2006-01-28 02:53 25704 --a------ C:\WINDOWS\system32\msi32.dll

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 13:00]
"BTCLiveUpdate"="C:\Programme\LiveUpdate\LiveUpdate.exe" [2004-03-08 12:50]
"Yahoo! Pager"="C:\Programme\Yahoo!\Messenger\ypager.exe" [2004-08-06 15:33]
"MsnMsgr"="C:\Programme\MSN Messenger\MsnMsgr.exe" [2006-06-16 13:38]
"swg"="C:\Programme\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-08-01 15:37]
"Performance Center"="C:\Programme\Ascentive\Performance Center\APCMain.exe" []
"PC SpeedScan Pro"="C:\Dokumente und Einstellungen\User\Desktop\einfach ma n ordner\PCSpeedScan.exe" []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"PSDrvCheck"="C:\WINDOWS\system32\PSDrvCheck.exe" [2003-08-28 09:47]
"SunJavaUpdateSched"="C:\Programme\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 01:11]
"QuickTime Task"="C:\Programme\QuickTime\qttask.exe" [2006-10-25 18:58]
"iTunesHelper"="C:\Programme\iTunes\iTunesHelper.exe" [2006-10-30 09:36]
"avgnt"="C:\Programme\AntiVir PersonalEdition Classic\avgnt.exe" [2007-10-24 12:27]
"POEngine"="" []
"ICQ Lite"="C:\Programme\ICQLite\ICQLite.exe" [2006-07-11 11:15]
"TkBellExe"="C:\Programme\Gemeinsame Dateien\Real\Update_OB\realsched.exe" [2007-08-18 18:43]
"ClipIncSrvTray"="J:\Tobit ClipInc\Player\ClipIncTray.exe" [2007-10-24 15:05]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-04 13:00]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoFavoritesMenu"= 1 (0x1)

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Dokumente und Einstellungen^User^Startmenü^Programme^Autostart^StarOffice 7.lnk]
backup=C:\WINDOWS\pss\StarOffice 7.lnkStartup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ATIPTA]
2004-08-03 21:10 339968 --a------ C:\Programme\ATI Technologies\ATI Control Panel\atiptaxx.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Cmaudio]
RunDll32 cmicnfg.cpl,CMICtrlWnd

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTFMON.EXE]
2004-08-04 13:00 15360 --a------ C:\WINDOWS\system32\ctfmon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroCheck]
2001-07-09 10:50 155648 --a------ C:\WINDOWS\system32\NeroCheck.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SiSUSBRG]
2002-07-12 11:15 106496 --a------ C:\WINDOWS\SiSUSBrg.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"Yahoo! Pager"=C:\PROGRA~1\Yahoo!\MESSEN~1\ypager.exe -quiet

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"LVCOMS"=C:\Programme\Gemeinsame Dateien\Logitech\QCDriver3\LVCOMS.EXE
"NeroFilterCheck"=C:\WINDOWS\system32\NeroCheck.exe

R1 cdrbsvsd;cdrbsvsd;C:\WINDOWS\system32\drivers\cdrbsvsd.sys
R2 ClipInc001;ClipInc 001;J:\Tobit ClipInc\Server\ClipInc-Server.exe 001
R2 ClipInc002;ClipInc 002;J:\Tobit ClipInc\Server\ClipInc-Server.exe 002
R2 ClipInc003;ClipInc 003;J:\Tobit ClipInc\Server\ClipInc-Server.exe 003
S3 C-Dilla;C-Dilla;\??\C:\WINDOWS\system32\drivers\CDANT.SYS
S3 CxUSB;Logitech QuickCam VC USB;C:\WINDOWS\system32\DRIVERS\CxUSB.sys

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\E]
\Shell\AutoRun\command - E:\autoplay.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\M]
\Shell\AutoRun\command - M:\RunGame.exe

.
Inhalt des "geplante Tasks" Ordners
"2007-12-07 16:15:02 C:\WINDOWS\Tasks\1-Klick-Wartung.job"
- C:\Programme\TuneUp Utilities 2004\SystemOptimizer.exe
"2007-12-06 06:59:12 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job"
- C:\Programme\Apple Software Update\SoftwareUpdate.exe
"2007-12-07 20:22:59 C:\WINDOWS\Tasks\Norton Security Scan.job"
- C:\Programme\Norton Security Scan\Nss.exe
.
--------------------- DLLs Loaded Under Running Processes ---------------------

PROCESS: C:\WINDOWS\Explorer.EXE [6.00.2900.2180]
-> C:\DOKUME~1\User\LOKALE~1\Temp\krfgehsnEC18160.dll
.
**************************************************************************

catchme 0.3.1331 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-12-09 12:42:55
Windows 5.1.2600 Service Pack 2 NTFS

Scanne versteckte Prozesse...

Scanne versteckte Autostart Eintr„ge...

Scanne versteckte Dateien...

**************************************************************************
.
Zeit der Fertigstellung: 2007-12-09 12:46:27 - machine was rebooted
.
--- E O F ---