ok ... hier ist die neue log con combofix
Code:
Alles auswählen Aufklappen ATTFilter
ComboFix 08-05-08.1 - Sylvia 2008-05-09 19:49:16.2 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1031.18.647 [GMT 2:00]
ausgeführt von:: C:\Dokumente und Einstellungen\Sylvia\Desktop\ComboFix.exe
Command switches used :: C:\Dokumente und Einstellungen\Sylvia\Desktop\CFScript.txt
* Neuer Wiederherstellungspunkt wurde erstellt
WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.
((((((((((((((((((((((( Dateien erstellt von 2008-04-09 bis 2008-05-09 ))))))))))))))))))))))))))))))
.
2008-05-09 18:25 . 2008-05-09 18:25 <DIR> d-------- C:\Programme\Trend Micro
2008-05-09 13:03 . 2008-05-09 13:02 161,272 -r-hs---- C:\vl.com
2008-05-08 12:58 . 2008-05-08 12:58 <DIR> d-------- C:\Programme\Malwarebytes' Anti-Malware
2008-05-08 12:58 . 2008-05-08 12:58 <DIR> d-------- C:\Dokumente und Einstellungen\Sylvia\Anwendungsdaten\Malwarebytes
2008-05-08 12:58 . 2008-05-08 12:58 <DIR> d-------- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Malwarebytes
2008-05-08 12:58 . 2008-05-05 20:46 27,048 --a------ C:\WINDOWS\system32\drivers\mbamcatchme.sys
2008-05-08 12:58 . 2008-05-05 20:46 15,864 --a------ C:\WINDOWS\system32\drivers\mbam.sys
2008-05-08 12:41 . 2008-05-08 12:41 21,164 --a------ C:\WINDOWS\system32\drivers\CIADRVNT.SYS
2008-05-08 12:41 . 2008-05-08 12:41 67 --a------ C:\WINDOWS\drivenet.INI
2008-05-08 12:40 . 2008-05-08 12:56 <DIR> d-------- C:\Programme\Avira
2008-05-06 20:18 . 2008-05-06 20:18 <DIR> d-------- C:\WINDOWS\McAfee.com
2008-04-26 12:16 . 2008-04-25 15:45 158,467 -r-hs---- C:\e2u.exe
2008-04-22 19:16 . 2008-04-22 19:16 <DIR> d-------- C:\Programme\MDI
2008-04-22 19:16 . 1999-07-16 13:17 54,796 --a------ C:\WINDOWS\system32\bel_zahl.TTF
2008-04-22 19:16 . 1999-08-15 17:04 13,404 --a------ C:\WINDOWS\system32\bel_spec.TTF
.
(((((((((((((((((((((((((((((((((((( Find3M Bericht ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-05-09 17:46 --------- d-----w C:\Dokumente und Einstellungen\Sylvia\Anwendungsdaten\DNA
2008-05-08 17:32 --------- d-----w C:\Dokumente und Einstellungen\Sylvia\Anwendungsdaten\MSN6
2008-05-08 15:24 --------- d-----w C:\Programme\McAfee
2008-05-08 00:46 --------- d-----w C:\Dokumente und Einstellungen\Sylvia\Anwendungsdaten\Canon
2008-05-06 17:22 --------- d-----w C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\McAfee
2008-05-02 08:55 --------- d-----w C:\Dokumente und Einstellungen\Sylvia\Anwendungsdaten\BitTorrent
2008-05-02 08:39 --------- d-----w C:\Programme\eMue X
2008-05-01 18:33 --------- d-----w C:\Dokumente und Einstellungen\Sylvia\Anwendungsdaten\SiteAdvisor
2008-04-29 11:28 --------- d-----w C:\Programme\ICQ6
2008-04-27 15:44 --------- d-----w C:\Programme\DNA
2008-04-12 11:46 --------- d-----w C:\Programme\OXXOGames
2008-04-08 13:22 --------- d-----w C:\Programme\ICQToolbar
2008-03-20 12:49 --------- d-----w C:\Dokumente und Einstellungen\Sylvia\Anwendungsdaten\DivX
2008-03-20 08:03 1,845,376 ----a-w C:\WINDOWS\system32\win32k.sys
2008-03-20 08:03 1,845,376 ------w C:\WINDOWS\system32\dllcache\win32k.sys
2008-03-18 12:21 --------- d-----w C:\Programme\DivX
2008-03-17 13:19 --------- d-----w C:\Programme\Java
2008-03-01 16:24 3,591,680 ----a-w C:\WINDOWS\system32\dllcache\mshtml.dll
2008-03-01 12:54 826,368 ----a-w C:\WINDOWS\system32\wininet.dll
2008-03-01 12:54 826,368 ----a-w C:\WINDOWS\system32\dllcache\wininet.dll
2008-03-01 12:54 671,232 ----a-w C:\WINDOWS\system32\dllcache\mstime.dll
2008-03-01 12:54 478,208 ----a-w C:\WINDOWS\system32\dllcache\mshtmled.dll
2008-03-01 12:54 44,544 ----a-w C:\WINDOWS\system32\dllcache\pngfilt.dll
2008-03-01 12:54 233,472 ------w C:\WINDOWS\system32\dllcache\webcheck.dll
2008-03-01 12:54 193,024 ----a-w C:\WINDOWS\system32\dllcache\msrating.dll
2008-03-01 12:54 105,984 ------w C:\WINDOWS\system32\dllcache\url.dll
2008-03-01 12:54 102,912 ------w C:\WINDOWS\system32\dllcache\occache.dll
2008-03-01 12:54 1,159,680 ----a-w C:\WINDOWS\system32\dllcache\urlmon.dll
2008-02-29 08:55 625,664 ------w C:\WINDOWS\system32\dllcache\iexplore.exe
2008-02-29 08:54 70,656 ----a-w C:\WINDOWS\system32\dllcache\ie4uinit.exe
2008-02-22 10:00 13,824 ------w C:\WINDOWS\system32\dllcache\ieudinit.exe
2008-02-21 02:05 524,288 ----a-w C:\WINDOWS\system32\DivXsm.exe
2008-02-21 02:05 3,596,288 ----a-w C:\WINDOWS\system32\qt-dx331.dll
2008-02-21 02:05 200,704 ----a-w C:\WINDOWS\system32\ssldivx.dll
2008-02-21 02:05 129,784 ------w C:\WINDOWS\system32\pxafs.dll
2008-02-21 02:05 120,056 -c----w C:\WINDOWS\system32\pxcpyi64.exe
2008-02-21 02:05 118,520 -c----w C:\WINDOWS\system32\pxinsi64.exe
2008-02-21 02:05 1,044,480 ----a-w C:\WINDOWS\system32\libdivx.dll
2008-02-21 02:04 823,296 ----a-w C:\WINDOWS\system32\divx_xx0c.dll
2008-02-21 02:04 823,296 ----a-w C:\WINDOWS\system32\divx_xx07.dll
2008-02-21 02:04 81,920 ----a-w C:\WINDOWS\system32\dpl100.dll
2008-02-21 02:04 802,816 ----a-w C:\WINDOWS\system32\divx_xx11.dll
2008-02-21 02:04 682,496 ----a-w C:\WINDOWS\system32\DivX.dll
2008-02-21 02:04 593,920 -c--a-w C:\WINDOWS\system32\dpuGUI11.dll
2008-02-21 02:04 57,344 ----a-w C:\WINDOWS\system32\dpv11.dll
2008-02-21 02:04 53,248 -c--a-w C:\WINDOWS\system32\dpuGUI10.dll
2008-02-21 02:04 344,064 -c--a-w C:\WINDOWS\system32\dpus11.dll
2008-02-21 02:04 294,912 -c--a-w C:\WINDOWS\system32\dpu10.dll
2008-02-21 02:04 294,912 ----a-w C:\WINDOWS\system32\dpu11.dll
2008-02-21 02:04 196,608 ----a-w C:\WINDOWS\system32\dtu100.dll
2008-02-21 02:03 156,992 ----a-w C:\WINDOWS\system32\DivXCodecVersionChecker.exe
2008-02-21 02:03 12,288 -c--a-w C:\WINDOWS\system32\DivXWMPExtType.dll
2008-02-20 06:50 282,624 ----a-w C:\WINDOWS\system32\gdi32.dll
2008-02-20 06:50 282,624 ------w C:\WINDOWS\system32\dllcache\gdi32.dll
2008-02-20 05:33 45,568 ----a-w C:\WINDOWS\system32\dnsrslvr.dll
2008-02-20 05:33 45,568 ------w C:\WINDOWS\system32\dllcache\dnsrslvr.dll
2008-02-20 05:33 148,992 ------w C:\WINDOWS\system32\dllcache\dnsapi.dll
2008-02-15 05:44 161,792 ----a-w C:\WINDOWS\system32\dllcache\ieakui.dll
2007-05-10 14:41 802 -c--a-w C:\Programme\LOGMES.nse
2007-05-10 14:41 5 -c--a-w C:\Programme\CHANNEL.nse
2007-05-10 14:27 0 -c--a-w C:\Programme\DBASE.nse
2006-06-29 22:26 1,710 -c--a-w C:\Programme\3dsmax.ini
2006-06-29 17:29 64 -c--a-w C:\Programme\maxscrpt.dsk
2006-06-29 17:11 106 -c--a-w C:\Programme\plugin.ini
2005-12-31 16:17 2,044 -c-h--w C:\Programme\cache.dmx
2005-01-30 17:14 215,308 -c--a-w C:\Programme\Readme.rtf
2004-03-11 12:27 40,960 ----a-w C:\Programme\Uninstall_CDS.exe
2004-02-14 11:22 205 -c--a-w C:\Programme\_SEC.nse
2003-02-12 15:53 437 -c--a-w C:\Programme\info.001
1999-04-06 21:05 41 -c--a-w C:\Programme\1000322.knr
.
((((((((((((((((((((((((((((( snapshot@2008-05-09_16.43.50.43 )))))))))))))))))))))))))))))))))))))))))
.
- 2008-05-09 14:35:09 2,048 --s-a-w C:\WINDOWS\bootstat.dat
+ 2008-05-09 17:54:19 2,048 --s-a-w C:\WINDOWS\bootstat.dat
+ 2008-05-09 17:54:39 16,384 ----atw C:\WINDOWS\Temp\Perflib_Perfdata_2c4.dat
.
(((((((((((((((((((((((((((( Autostart Punkte der Registrierung ))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Hinweis* leere Eintrage & legitime Standardeintrage werden nicht angezeigt.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 16:00 15360]
"BitTorrent DNA"="C:\Programme\DNA\btdna.exe" [2008-05-08 08:00 289088]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Apoint"="C:\Programme\Apoint\Apoint.exe" [2004-09-13 18:33 155648]
"ATIPTA"="C:\Programme\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2005-08-05 23:05 344064]
"ISUSPM Startup"="C:\PROGRA~1\GEMEIN~1\INSTAL~1\UPDATE~1\ISUSPM.exe" [2004-07-27 18:50 221184]
"dla"="C:\WINDOWS\system32\dla\tfswctrl.exe" [2005-05-31 06:33 122941]
"Microsoft Works Update Detection"="C:\Programme\Gemeinsame Dateien\Microsoft Shared\Works Shared\WkUFind.exe" [2003-06-17 17:14 50688]
"IMJPMIG8.1"="C:\WINDOWS\IME\imjp8_1\IMJPMIG.exe" [2004-08-04 16:00 208952]
"IMEKRMIG6.1"="C:\WINDOWS\ime\imkr6_1\IMEKRMIG.EXE" [2004-08-04 16:00 44032]
"MSPY2002"="C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe" [2004-08-04 16:00 59392]
"PHIME2002ASync"="C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.exe" [2004-08-04 16:00 455168]
"PHIME2002A"="C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.exe" [2004-08-04 16:00 455168]
"SiteAdvisor"="C:\Programme\SiteAdvisor\6172\SiteAdv.exe" [2007-03-05 21:10 36904]
"mcagent_exe"="C:\Programme\McAfee.com\Agent\mcagent.exe" [2007-08-03 23:33 582992]
"Acrobat Assistant 8.0"="C:\Programme\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe" [2006-10-22 23:24 620152]
"HPDJ Taskbar Utility"="C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe" [2003-09-01 23:42 176128]
"Adobe_ID0EYTHM"="C:\PROGRA~1\GEMEIN~1\Adobe\ADOBEV~1\Server\bin\VERSIO~2.EXE" [2007-03-20 16:40 1884160]
"MSConfig"="C:\WINDOWS\pchealth\helpctr\binaries\msconfig.exe" [2004-08-04 16:00 160768]
"TkBellExe"="C:\Programme\Gemeinsame Dateien\Real\Update_OB\realsched.exe" [2007-06-13 13:21 185896]
"QuickTime Task"="C:\Programme\QuickTime\qttask.exe" [2006-11-29 01:02 98304]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"Nokia.PCSync"="C:\Programme\Nokia\Nokia PC Suite 6\PcSync2.exe" [2007-06-19 11:17 1241088]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\IntelWireless]
C:\Programme\Intel\Wireless\Bin\LgNotify.dll 2004-09-07 18:08 110592 C:\Programme\Intel\Wireless\Bin\LgNotify.dll
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"vidc.ffds"= C:\PROGRA~1\COMBIN~1\Filters\FFDShow\ff_vfw.dll
"vidc.wmv3"= C:\PROGRA~1\COMBIN~1\Filters\wmv9vcm.dll
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Acrobat Assistant 7.0]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Photo Downloader]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
--a------ 2007-05-11 03:06 40048 C:\Programme\Adobe\Reader 8.0\Reader\Reader_sl.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools]
--a------ 2005-11-09 00:00 128920 C:\Programme\DAEMON Tools\daemon.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools-1033]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DeviceDiscovery]
--a--c--- 2003-05-21 19:37 229437 C:\Programme\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DMXLauncher]
--a------ 2005-01-27 03:02 86016 C:\Programme\Dell\Media Experience\DMXLauncher.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IntelWireless]
--a------ 2004-10-30 16:59 385024 C:\Programme\Intel\Wireless\Bin\ifrmewrk.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSScheduler]
--a------ 2004-07-27 18:50 81920 C:\Programme\Gemeinsame Dateien\InstallShield\UpdateService\issch.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
--a--c--- 2001-07-09 11:50 155648 C:\WINDOWS\system32\NeroCheck.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PCSuiteTrayApplication]
--a------ 2007-06-18 16:10 271360 C:\Programme\Nokia\Nokia PC Suite 6\LaunchApplication.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
--a------ 2006-11-29 01:02 98304 C:\Programme\QuickTime\qttask.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RemoteControl]
--a--c--- 2003-12-08 18:35 32768 C:\Programme\CyberLink DVD Solution\PowerDVD\PDVDServ.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
--a------ 2008-02-22 05:25 144784 C:\Programme\Java\jre1.6.0_05\bin\jusched.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]
--a------ 2007-06-13 13:21 185896 C:\Programme\Gemeinsame Dateien\Real\Update_OB\realsched.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\updateMgr]
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"PhonostarAgent"=C:\Programme\phonostar\ps_agent.exe
"PhonostarTimer"=C:\Programme\phonostar\ps_timer.exe
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"WinampAgent"=C:\Programme\Winamp\winampa.exe
"MCUpdateExe"=c:\PROGRA~1\mcafee.com\agent\mcupdate.exe
"LWBMOUSE"=C:\Programme\Browser Mouse\Browser Mouse\1.0\lwbwheel.exe
"QuickTime Task"="C:\Programme\QuickTime\qttask.exe" -atboottime
"MCAgentExe"=c:\PROGRA~1\mcafee.com\agent\mcagent.exe
"HP Component Manager"="C:\Programme\HP\hpcoretech\hpcmpmgr.exe"
"HP Software Update"=C:\Programme\Hewlett-Packard\HP Software Update\HPWuSchd2.exe
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusDisableNotify"=dword:00000001
"AntiVirusOverride"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeAntiVirus]
"DisableMonitoring"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeFirewall]
"DisableMonitoring"=dword:00000001
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"C:\\Programme\\eMule\\emule.exe"=
"C:\\Programme\\@Last Software\\Sketchup 5\\SketchUp.exe"=
"C:\\Programme\\eMue X\\emule.exe"=
"C:\\Programme\\Hewlett-Packard\\HP Software Update\\HPWUCli.exe"=
"C:\\WINDOWS\\system32\\LEXPPS.EXE"=
"C:\\Programme\\3dsmax\\3dsmax.exe"=
"C:\\Programme\\Bonjour\\mDNSResponder.exe"=
"C:\\Programme\\Gemeinsame Dateien\\Adobe\\Adobe Version Cue CS3\\Server\\bin\\VersionCueCS3.exe"=
"C:\\Programme\\MSN Messenger\\msnmsgr.exe"=
"C:\\Programme\\MSN Messenger\\livecall.exe"=
"C:\\Programme\\ICQ6\\ICQ.exe"=
"C:\\Programme\\Gemeinsame Dateien\\McAfee\\MNA\\McNASvc.exe"=
"C:\\Programme\\DNA\\btdna.exe"=
"C:\\Programme\\BitTorrent\\bittorrent.exe"=
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"3703:TCP"= 3703:TCP:Adobe Version Cue CS3 Server
"3704:TCP"= 3704:TCP:Adobe Version Cue CS3 Server
"50900:TCP"= 50900:TCP:Adobe Version Cue CS3 Server
"50901:TCP"= 50901:TCP:Adobe Version Cue CS3 Server
S3 BDA_Capture_225;USB Digital-TV receiver Driver 2.0.1.8;C:\WINDOWS\system32\Drivers\BDA_Capture_225.sys [2006-05-16 12:02]
S3 BDA_Loader_225;USB Digital-TV Receiver Firmware Loader 6.4.11.0;C:\WINDOWS\system32\Drivers\BDA_Loader_225.sys [2006-05-16 12:02]
S3 DTV_Capture_2X0;Digital TV Receiver;C:\WINDOWS\system32\Drivers\DTV_Capture_2X0.sys [2005-06-22 13:55]
S3 DTV_Loader_2X1;Digital TV Loader;C:\WINDOWS\system32\Drivers\DTV_Loader_2X1.sys [2005-06-29 11:21]
S3 WDM_Capture_225;Digital-TV Receiver.;C:\WINDOWS\system32\Drivers\WDM_Capture_225.sys [2006-05-11 14:22]
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{ec4ec070-9819-11db-ba49-bd7c399c63bb}]
\Shell\Auto\command - bittorrent.exe e
\Shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL bittorrent.exe e
.
Inhalt des "geplante Tasks" Ordners
"2005-12-14 22:30:12 C:\WINDOWS\Tasks\ISP-Anmeldungserinnerung 1.job"
- C:\WINDOWS\system32\OOBE\oobebaln.exe
"2007-04-12 09:16:27 C:\WINDOWS\Tasks\McDefragTask.job"
- c:\programme\mcafee\mqc\QcConsol.exe'
"2007-04-12 09:16:26 C:\WINDOWS\Tasks\McQcTask.job"
- c:\programme\mcafee\mqc\QcConsol.exe
.
**************************************************************************
catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-05-09 19:55:47
Windows 5.1.2600 Service Pack 2 NTFS
Scanne versteckte Prozesse...
Scanne versteckte Autostart Eintr„ge...
Scanne versteckte Dateien...
Scan erfolgreich abgeschlossen
versteckte Dateien: 0
**************************************************************************
.
--------------------- DLLs Loaded Under Running Processes ---------------------
PROCESS: C:\WINDOWS\explorer.exe
-> C:\Programme\SiteAdvisor\6172\saHook.dll
-> ?:\WINDOWS\system32\MLANG.dll
-> ?:\WINDOWS\system32\MLANG.dll
.
------------------------ Other Running Processes ------------------------
.
C:\WINDOWS\system32\ati2evxx.exe
C:\Programme\Intel\Wireless\Bin\EvtEng.exe
C:\Programme\Intel\Wireless\Bin\S24EvMon.exe
C:\Programme\Intel\Wireless\Bin\WLKEEPER.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\LEXPPS.EXE
C:\Programme\Intel\Wireless\Bin\ZCfgSvc.exe
C:\WINDOWS\system32\ati2evxx.exe
C:\Programme\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\drivers\CDAC11BA.EXE
C:\WINDOWS\system32\sesinetd.exe
C:\WINDOWS\system32\hserver.exe
C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
C:\Programme\Gemeinsame Dateien\McAfee\MNA\McNASvc.exe
C:\PROGRA~1\GEMEIN~1\McAfee\McProxy\McProxy.exe
C:\PROGRA~1\McAfee\VIRUSS~1\Mcshield.exe
C:\Programme\McAfee\MPF\MpfSrv.exe
C:\Programme\McAfee\MSK\msksrver.exe
C:\Programme\Dell\NicConfigSvc\NicConfigSvc.exe
C:\Programme\Intel\Wireless\Bin\RegSrvc.exe
C:\Programme\Apoint\ApntEx.exe
C:\Programme\Digital Line Detect\DLG.exe
C:\Programme\Dell Photo Printer 720\dlbcserv.exe
C:\Programme\Gemeinsame Dateien\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Programme\McAfee\MSC\mcuimgr.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2008-05-09 20:04:21 - machine was rebooted
ComboFix-quarantined-files.txt 2008-05-09 18:03:47
ComboFix2.txt 2008-05-09 14:44:45
13 Verzeichnis(se), 22,347,161,600 Bytes frei
17 Verzeichnis(se), 22,324,781,056 Bytes frei
278 --- E O F --- 2008-05-06 17:11:04
und jetzt mache ich das mit dem Flashdisinfector ... hoffe das ist die richtige reihenfolge, weil nach Flashdisinfector hast du nochmal geschrieben das ich die log von combofix hier posten soll