Dialer, Weiterleitung auf andere Homepages & Blockierung von Homepages

Sarah108

Protokoll Combofix, Teil 3 (letzter Teil):

c:\programme\Gemeinsame Dateien\Symantec Shared\SymSetup\{77FFBA7E-0973-4F39-BBDB-AC2F537578D2}_15_0_0_58\Setup.exe
26.08.2007 19:18 2059624 \RP838\A0171744.exe

c:\programme\Gemeinsame Dateien\Symantec Shared\SymSetup\{77FFBA7E-0973-4F39-BBDB-AC2F537578D2}_15_0_0_58\Support\Remover\Remover.exe
26.08.2007 18:04 142192 \RP838\A0171745.exe

c:\programme\Gemeinsame Dateien\Symantec Shared\SymSetup\{77FFBA7E-0973-4F39-BBDB-AC2F537578D2}_15_0_0_58\Support\Reporter\Reporter.exe
26.08.2007 18:04 985448 \RP838\A0171746.exe

c:\programme\Gemeinsame Dateien\Symantec Shared\SymSetup\{77FFBA7E-0973-4F39-BBDB-AC2F537578D2}_15_0_0_58\Support\VCRedist\redist32.exe
12.02.2007 20:10 2682880 \RP838\A0171747.exe

c:\programme\Gemeinsame Dateien\Symantec Shared\SymSetup\{77FFBA7E-0973-4F39-BBDB-AC2F537578D2}_15_0_0_58\SymHTML.dll
15.08.2007 19:03 1592664 \RP838\A0171748.dll

c:\programme\Gemeinsame Dateien\Symantec Shared\SymSetup\{77FFBA7E-0973-4F39-BBDB-AC2F537578D2}_15_0_0_58\SymTheme.dll
06.08.2007 12:34 572760 \RP838\A0171749.dll

c:\programme\Gemeinsame Dateien\Symantec Shared\SymTheme\1.0\SymTheme.dll
06.08.2007 12:34 372568 \RP838\A0171816.dll

c:\programme\Gemeinsame Dateien\Symantec Shared\SymTheme\sthmbase.dll
06.08.2007 12:34 42840 \RP838\A0171815.dll

c:\programme\Gemeinsame Dateien\Symantec Shared\VirusDefs\20070820.048\CCERASER.DLL
20.08.2007 02:00 2454576 \RP838\A0171713.DLL

c:\programme\Gemeinsame Dateien\Symantec Shared\VirusDefs\20070820.048\ECMSVR32.DLL
20.08.2007 02:00 284016 \RP838\A0171715.DLL

c:\programme\Gemeinsame Dateien\Symantec Shared\VirusDefs\20070820.048\EECTRL.SYS
20.08.2007 02:00 395312 \RP838\A0171716.SYS

c:\programme\Gemeinsame Dateien\Symantec Shared\VirusDefs\20070820.048\ERASER.SYS
20.08.2007 02:00 112688 \RP838\A0171718.SYS

c:\programme\Gemeinsame Dateien\Symantec Shared\VirusDefs\20070820.048\NAVENG.SYS
20.08.2007 02:00 81232 \RP838\A0171719.SYS

c:\programme\Gemeinsame Dateien\Symantec Shared\VirusDefs\20070820.048\NAVENG32.DLL
20.08.2007 02:00 124272 \RP838\A0171721.DLL

c:\programme\Gemeinsame Dateien\Symantec Shared\VirusDefs\20070820.048\NAVEX15.SYS
20.08.2007 02:00 865904 \RP838\A0171722.SYS

c:\programme\Gemeinsame Dateien\Symantec Shared\VirusDefs\20070820.048\NAVEX32A.DLL
20.08.2007 02:00 914800 \RP838\A0171724.DLL

c:\programme\Gemeinsame Dateien\Symantec Shared\VirusDefs\BinHub\cceraser.dll
20.08.2007 02:00 2454576 \RP838\A0171730.dll

c:\programme\Gemeinsame Dateien\Symantec Shared\VirusDefs\BinHub\ecmsvr32.dll
20.08.2007 02:00 284016 \RP838\A0171731.dll

c:\programme\Gemeinsame Dateien\Symantec Shared\VirusDefs\BinHub\eeCtrl.sys
20.08.2007 02:00 395312 \RP838\A0171732.sys

c:\programme\Gemeinsame Dateien\Symantec Shared\VirusDefs\BinHub\ERASER.sys
20.08.2007 02:00 112688 \RP838\A0171734.sys

c:\programme\Gemeinsame Dateien\Symantec Shared\VirusDefs\BinHub\naveng.sys
20.08.2007 02:00 81232 \RP838\A0171735.sys

c:\programme\Gemeinsame Dateien\Symantec Shared\VirusDefs\BinHub\naveng32.dll
20.08.2007 02:00 124272 \RP838\A0171736.dll

c:\programme\Gemeinsame Dateien\Symantec Shared\VirusDefs\BinHub\navex15.sys
20.08.2007 02:00 865904 \RP838\A0171737.sys

c:\programme\Gemeinsame Dateien\Symantec Shared\VirusDefs\BinHub\navex32a.dll
20.08.2007 02:00 914800 \RP838\A0171738.dll

c:\programme\Lavasoft\Ad-Aware\AAWService.exe
09.03.2009 21:06 951632 \RP838\A0171897.exe

c:\programme\Lavasoft\Ad-Aware\AAWTray.exe
09.03.2009 21:06 515416 \RP838\A0171898.exe

c:\programme\Lavasoft\Ad-Aware\AAWWSC.exe
09.03.2009 17:38 444416 \RP838\A0171899.exe

c:\programme\Lavasoft\Ad-Aware\Ad-Aware.exe
09.03.2009 21:06 2121544 \RP838\A0171900.exe

c:\programme\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe
09.03.2009 21:06 542568 \RP838\A0171901.exe

c:\programme\Lavasoft\Ad-Aware\Ad-AwareCommand.exe
09.03.2009 21:06 472440 \RP838\A0171902.exe

c:\programme\Lavasoft\Ad-Aware\CEAPI.dll
09.03.2009 21:06 632168 \RP838\A0171903.dll

c:\programme\Lavasoft\Ad-Aware\dbghelp.dll
11.03.2009 10:11 1045128 \RP838\A0171904.dll

c:\programme\Lavasoft\Ad-Aware\drivers\32\AAWDriverTool.exe
09.03.2009 21:06 73064 \RP838\A0171905.exe

c:\programme\Lavasoft\Ad-Aware\drivers\32\DIFxAPI.dll
02.12.2008 16:00 319456 \RP838\A0171906.dll

c:\programme\Lavasoft\Ad-Aware\drivers\32\lbd.sys
09.03.2009 21:06 64160 \RP838\A0171909.sys

c:\programme\Lavasoft\Ad-Aware\drivers\64\AAWDriverTool.exe
09.03.2009 21:06 274792 \RP838\A0171910.exe

c:\programme\Lavasoft\Ad-Aware\drivers\64\DIFxAPI.dll
02.12.2008 16:00 525792 \RP838\A0171911.dll

c:\programme\Lavasoft\Ad-Aware\drivers\64\lbd.sys
09.03.2009 21:06 69664 \RP838\A0171914.sys

c:\programme\Lavasoft\Ad-Aware\drivers\AAWDriverTool.exe
09.03.2009 17:38 67584 \RP838\A0171915.exe

c:\programme\Lavasoft\Ad-Aware\drivers\DIFxAPI.dll
09.03.2009 17:38 319456 \RP838\A0171916.dll

c:\programme\Lavasoft\Ad-Aware\drivers\lbd.sys
09.03.2009 17:38 64160 \RP838\A0171919.sys

c:\programme\Lavasoft\Ad-Aware\lavalicense.dll
09.03.2009 21:06 343376 \RP838\A0171920.dll

c:\programme\Lavasoft\Ad-Aware\lavamessage.dll
09.03.2009 21:06 165216 \RP838\A0171921.dll

c:\programme\Lavasoft\Ad-Aware\lsdelete.exe
09.03.2009 21:06 15688 \RP838\A0171922.exe

c:\programme\Lavasoft\Ad-Aware\PrivacyClean.dll
09.03.2009 21:06 40288 \RP838\A0171923.dll

c:\programme\Lavasoft\Ad-Aware\Resources.dll
09.03.2009 21:06 1626976 \RP838\A0171924.dll

c:\programme\Lavasoft\Ad-Aware\RPAPI.dll
09.03.2009 21:06 212848 \RP838\A0171925.dll

c:\programme\Lavasoft\Ad-Aware\savapibridge.dll
09.03.2009 21:06 25440 \RP838\A0171926.dll

c:\programme\Lavasoft\Ad-Aware\ShellExt.dll
09.03.2009 21:06 82272 \RP838\A0171927.dll

c:\programme\Lavasoft\Ad-Aware\ThreatWork.exe
09.03.2009 21:06 299352 \RP838\A0171928.exe

c:\programme\Lavasoft\Ad-Aware\Toolbox\AutoStart Manager\AutoStart Manager.exe
25.02.2009 15:22 432472 \RP838\A0171929.exe

c:\programme\Lavasoft\Ad-Aware\Toolbox\AutoStart Manager\SO.dll
25.02.2009 15:22 109920 \RP838\A0171930.dll

c:\programme\Lavasoft\Ad-Aware\Toolbox\LT\HostFileEditor.exe
11.03.2009 10:12 2133360 \RP838\A0171931.exe

c:\programme\Lavasoft\Ad-Aware\Toolbox\LT\ProcessWatch.dll
11.03.2009 10:12 139632 \RP838\A0171932.dll

c:\programme\Lavasoft\Ad-Aware\Toolbox\LT\ProcessWatch.exe
11.03.2009 10:12 1865064 \RP838\A0171933.exe

c:\programme\Lavasoft\Ad-Aware\unrar.dll
11.09.2008 00:00 168960 \RP838\A0171934.dll

c:\programme\Lavasoft\Ad-Aware\UpdateManager.dll
09.03.2009 21:06 289632 \RP838\A0171935.dll

c:\windows\brastk.exe
\RP833\A0165981.exe
\RP833\A0166981.exe

c:\windows\E80F62FF5D3C4A1984099721F2928206.TMP\WiseCustomCall.dll
04.07.2009 12:37 22016 \RP838\A0171592.dll

c:\windows\eagle1.exe
04.07.2009 14:32 53248 \RP838\A0171936.exe

c:\windows\Installer\{E80F62FF-5D3C-4A19-8409-9721F2928206}\IconE80F62FF.exe
03.07.2009 15:13 7406 \RP838\A0171594.exe

c:\windows\LastGood.Tmp\system32\DRIVERS\SymIM.sys
09.08.2007 18:27 31280 \RP838\A0171864.sys

c:\windows\system32\brastk.exe
\RP833\A0164981.exe
02.02.2009 18:04 144792 \RP834\A0171119.exe

c:\windows\system32\delself.bat
30.10.2008 23:27 114 \RP833\A0170021.bat

c:\windows\system32\drivers\srtsp.sys
31.07.2007 00:43 278576 \RP838\A0171809.sys

c:\windows\system32\drivers\srtspl.sys
31.07.2007 00:43 317616 \RP838\A0171806.sys

c:\windows\system32\drivers\srtspx.sys
31.07.2007 00:43 43696 \RP838\A0171803.sys

c:\windows\system32\drivers\symdns.sys
13.08.2007 14:50 13616 \RP838\A0171802.sys

c:\windows\system32\drivers\SYMEVENT.SYS
03.07.2009 15:15 123952 \RP838\A0171661.SYS

c:\windows\system32\drivers\symfw.sys
13.08.2007 14:50 96432 \RP838\A0171801.sys

c:\windows\system32\drivers\symids.sys
13.08.2007 14:50 38576 \RP838\A0171800.sys

c:\windows\system32\drivers\SymIM.sys
09.08.2007 18:27 31280 \RP838\A0171663.sys

c:\windows\system32\drivers\symndis.sys
13.08.2007 14:50 37424 \RP838\A0171799.sys

c:\windows\system32\drivers\symndisv.sys
13.08.2007 14:50 41008 \RP838\A0171798.sys

c:\windows\system32\drivers\symredrv.sys
13.08.2007 14:50 22320 \RP838\A0171795.sys

c:\windows\system32\drivers\symtdi.sys
13.08.2007 14:50 188464 \RP838\A0171794.sys

c:\windows\system32\java.exe
10.06.2008 01:21 135168 \RP835\A0171223.exe
10.06.2008 01:21 135168 \RP837\A0171451.exe

c:\windows\system32\javaw.exe
02.02.2009 18:04 144792 \RP834\A0171120.exe
10.06.2008 01:21 135168 \RP837\A0171452.exe

c:\windows\system32\javaws.exe
02.02.2009 18:04 148888 \RP836\A0171329.exe
10.06.2008 02:32 139264 \RP837\A0171453.exe

c:\windows\system32\Macromed\Common\SwSupport.dll
09.09.2004 00:09 53248 \RP838\A0171598.dll

c:\windows\system32\Macromed\Director\M5drvr32.exe
08.09.2004 22:35 330 \RP838\A0171610.exe

c:\windows\system32\Macromed\Director\M5if32.dll
08.09.2004 22:35 330 \RP838\A0171611.dll

c:\windows\system32\Macromed\Director\SwDir.dll
09.09.2004 15:49 54488 \RP838\A0171599.dll

c:\windows\system32\Macromed\Flash\NPSWF32.dll
05.10.2008 05:24 3695008 \RP838\A0171628.dll

c:\windows\system32\Macromed\Flash\NPSWF32_FlashUtil.exe
05.10.2008 05:24 235936 \RP838\A0171629.exe

c:\windows\system32\Macromed\Flash\uninstall_activeX.exe
10.03.2008 21:50 74649 \RP838\A0171630.exe

c:\windows\system32\Macromed\Flash\uninstall_plugin.exe
14.11.2008 15:56 84661 \RP838\A0171631.exe

c:\windows\system32\Macromed\Shockwave 10\Control.dll
09.09.2004 00:05 503808 \RP838\A0171600.dll

c:\windows\system32\Macromed\Shockwave 10\dirapi.dll
08.09.2004 23:03 1495040 \RP838\A0171601.dll

c:\windows\system32\Macromed\Shockwave 10\Download.dll
09.09.2004 16:36 79048 \RP838\A0171612.dll

c:\windows\system32\Macromed\Shockwave 10\Download.exe
09.09.2004 16:36 58568 \RP838\A0171613.exe

c:\windows\system32\Macromed\Shockwave 10\DynaPlayer.dll
09.09.2004 00:05 24576 \RP838\A0171602.dll

c:\windows\system32\Macromed\Shockwave 10\iml32.dll
08.09.2004 22:52 630784 \RP838\A0171603.dll

c:\windows\system32\Macromed\Shockwave 10\Plugin.dll
09.09.2004 00:03 253952 \RP838\A0171604.dll

c:\windows\system32\Macromed\Shockwave 10\PluginPing.dll
09.09.2004 00:03 401408 \RP838\A0171605.dll

c:\windows\system32\Macromed\Shockwave 10\Proj.dll
08.09.2004 23:46 151552 \RP838\A0171606.dll

c:\windows\system32\Macromed\Shockwave 10\SwInit.exe
09.09.2004 00:09 77824 \RP838\A0171607.exe

c:\windows\system32\Macromed\Shockwave 10\SwMenu.dll
09.09.2004 00:02 86016 \RP838\A0171608.dll

c:\windows\system32\Macromed\Shockwave 10\SwOnce.dll
09.09.2004 00:09 98304 \RP838\A0171609.dll

c:\windows\system32\Macromed\Shockwave 10\UNWISE.EXE
25.06.1999 10:55 149504 \RP838\A0171615.EXE

c:\windows\system32\Macromed\Shockwave 8\Control.dll
16.01.2002 13:36 483328 \RP838\A0171618.dll

c:\windows\system32\Macromed\Shockwave 8\dirapi.dll
09.01.2002 02:54 1097728 \RP838\A0171619.dll

c:\windows\system32\Macromed\Shockwave 8\DynaPlayer.dll
09.01.2002 03:28 24576 \RP838\A0171620.dll

c:\windows\system32\Macromed\Shockwave 8\iml32.dll
09.01.2002 02:50 561152 \RP838\A0171621.dll

c:\windows\system32\Macromed\Shockwave 8\Plugin.dll
09.01.2002 03:26 245760 \RP838\A0171622.dll

c:\windows\system32\Macromed\Shockwave 8\PluginPing.dll
16.01.2002 16:35 380928 \RP838\A0171623.dll

c:\windows\system32\Macromed\Shockwave 8\Proj.dll
09.01.2002 03:13 151552 \RP838\A0171624.dll

c:\windows\system32\Macromed\Shockwave 8\QuitRemote.exe
01.03.2002 12:20 49152 \RP838\A0171617.exe

c:\windows\system32\Macromed\Shockwave 8\SwInit.exe
09.01.2002 03:38 77824 \RP838\A0171625.exe

c:\windows\system32\Macromed\Shockwave 8\SwMenu.dll
09.01.2002 03:25 90112 \RP838\A0171626.dll

c:\windows\system32\Macromed\Shockwave 8\SwOnce.dll
09.01.2002 03:38 94208 \RP838\A0171627.dll

c:\windows\system32\Macromed\Shockwave 8\UNWISE.EXE
01.03.2002 14:24 151040 \RP838\A0171632.EXE

c:\windows\system32\S32EVNT1.DLL
03.07.2009 15:15 60808 \RP838\A0171793.DLL

c:\windows\system32\sdra64.exe
04.08.2004 14:00 510464 \RP833\A0170037.exe

c:\windows\system32\SymNeti.dll
23.08.2007 17:57 577928 \RP838\A0171792.dll

c:\windows\system32\SymRedir.dll
23.08.2007 17:57 207240 \RP838\A0171791.dll

c:\windows\system32\TDSSarxx.dll
13.01.2009 15:07 29696 \RP833\A0169982.dll

c:\windows\system32\TDSScfbv.dll
13.01.2009 15:07 61440 \RP833\A0169984.dll

c:\windows\system32\TDSSdxcp.dll
03.07.2009 21:26 3727 \RP833\A0169985.dll

c:\windows\system32\TDSSoity.dll
13.01.2009 15:07 35840 \RP833\A0169981.dll

c:\windows\system32\TDSSvoql.dll
13.01.2009 15:07 31232 \RP833\A0169983.dll

c:\windows\system32\wini10801.exe
30.10.2008 23:15 80812 \RP833\A0170022.exe
.
(((((((((((((((((((((((((( Pontos de Carregamento do Registro )))))))))))))))))))))))))))))))))))))))
.
.
*Nota* entradas vazias e legítimas por defeito não são mostradas.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ISUSPM"="c:\dokumente und einstellungen\All Users\Anwendungsdaten\Macrovision\FLEXnet Connect\6\ISUSPM.exe" [2007-03-29 222128]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2004-08-04 15360]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"LaunchAp"="c:\programme\Launch Manager\LaunchAp.exe" [2004-08-06 32768]
"HotkeyApp"="c:\programme\Launch Manager\HotkeyApp.exe" [2004-11-11 49152]
"LMgrOSD"="c:\programme\Launch Manager\OSD.exe" [2004-07-26 204800]
"Wbutton"="c:\programme\Launch Manager\Wbutton.exe" [2004-11-23 73728]
"SynTPLpr"="c:\programme\Synaptics\SynTP\SynTPLpr.exe" [2004-10-05 98394]
"SynTPEnh"="c:\programme\Synaptics\SynTP\SynTPEnh.exe" [2004-10-05 688218]
"avgnt"="c:\programme\AntiVir PersonalEdition Classic\avgnt.exe" [2008-08-04 266497]
"CtrlVol"="c:\programme\Launch Manager\CtrlVol.exe" [BU]
"AGRSMMSG"="AGRSMMSG.exe" - c:\windows\AGRSMMSG.exe [2004-07-22 88361]

c:\dokumente und einstellungen\All Users\Startmen�\Programme\Autostart\
BTTray.lnk - c:\programme\WIDCOMM\Bluetooth Software\BTTray.exe [2004-11-29 569405]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"ForceClassicControlPanel"= 1 (0x1)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%WinDir%\\system32\\fxsclnt.exe"=
"%ProgramFiles%\\WIDCOMM\\Bluetooth Software\\BTTray.exe"=
"c:\\Programme\\Home Cinema\\PowerCinema\\PowerCinema.exe"=
"c:\\Programme\\Messenger\\msmsgs.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Programme\\MSN Messenger\\msnmsgr.exe"=
"c:\\Programme\\MSN Messenger\\livecall.exe"=
"c:\\Programme\\Skype\\Phone\\Skype.exe"=

S3 3xHybrid;3xHybrid service;c:\windows\system32\drivers\3xHybrid.sys [02.01.2005 17:43 945152]
.
.
------- Scan Suplementar -------
.
uStart Page = hxxp://search.conduit.com?SearchSource=10&ctid=CT1854633
mStart Page = hxxp://www.google.com
IE: Senden an &Bluetooth - c:\programme\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
FF - ProfilePath - c:\dokumente und einstellungen\Sarah\Anwendungsdaten\Mozilla\Firefox\Profiles\46nmkgvr.default\
FF - HiddenExtension: Java Console: No Registry Reference - c:\programme\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}

---- FIREFOX POLICIES ----
FF - user.js: yahoo.homepage.dontask - true.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-07-04 14:39
Windows 5.1.2600 Service Pack 2 NTFS

Procurando processos ocultos ...

Procurando entradas auto inicializáveis ocultas ...

HKLM\Software\Microsoft\Windows\CurrentVersion\Run
CtrlVol = c:\programme\Launch Manager\CtrlVol.exe?????H???X??????|x??|????q??|?j?wQj?w????????(??? ???????????????`??????|????????l?????@????????????????s???????s???sx??s@??????????????|h??sp??????????s?????????????????C?sc"?sx??s??????7~??@?N'?s,o? ?=5@?8o?????????

Procurando ficheiros/arquivos ocultos ...

Varredura completada com sucesso
arquivos/ficheiros ocultos: 0

**************************************************************************
.
--------------------- CHAVES DO REGISTRO BLOQUEADAS ---------------------

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\System*]
"OODEFRAG08.00.00.01WORKSTATION"="0ECF926B93905B0C05F07010F93F864C565895D4286EB4BB7BE476464547211678EF541360BF670C418D2563EC3BAA40C0868184447AD01CDC34 A8DBBDCD50701F1F9535552E065F5C7B9B56638F2526F7E29EECDE91A827ADF2D1C0B97EEACB73AA90C1C113B3376824B4DC1D9C69434F1596A749664AD322A48653B877B6772C9263FD76 1A8CD4BA26B9415B3D0FEEDD77FBA3551F64B132023FC9404A9E55408A1183C8615590EFD15622E5BBD2147F9743A4DB524D5F1A755A29D87CAE5CEEFB7F3D13FBF3D563ACFEBC9E127BEC C74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74C8EDD5E5BE2F6E6678EDD5E5BE2F6E6675D575E7D6A3B9808A6171C11EC38DE3DF9 7F18DDFEADF2CBAC57F94DF73A66A03BC917B3A62C2ACBF006A2458D97A9A692661ADC8E853B48EFB57284C5E4D50180CF4D5BED4D4C1C9C823A36E30A9B73BD4913A5AA01CAD54FD55FBB 08DD573A14E84BADAE16B7C518F7AFBDF9B9E29FAD29A576B60E77130A9B31BCFD8762875FFC73A22001A3449374749FA0521703FE5AF502BC3159D54340DEC50BD8AEDBACCCACA61F188A C5A35C00154D1814292C04ABEEEBFD4E2601D0600B355E3CDB2CE6E119AAFCAC2C4065CE4C18DC7B5119A07354959F76402CADB433A7364D616F33824E67E38D0EC69A61E33E8CAFEE0982 00432F55B815958ADCD8B194E7F86FEA7F0F1D15F23776DA39F2A023D8A927CB82BB53EF3DC9EDF1DE0C46BFD4E5861B4F15376C692574D7DF03C432645D8074B7353F57F0B6CCBFC3CE7B 14A21DF5A76E14C559BE8BC91BDF10535F829A06C85919550484E62AA59B990E00A447DEC3DA2C7CE107CE617C498A18E227220D68A8451B06EE1C672774555A86F0C2C97A9678B31D1A0B 0D2CAFD7060B086D4FC56A0BBA7E68CAC51DE562E5416021A2A92903E638110F7FAC2BD1AFB825A7E92B68B20224ED1CEB360A94D457122738839C4CB7734C5B535456C4CFE13C305E326D F3E340C06A64F0FCB0740CE7CFBC0C7FC967A1EF29834FD271C10FD21B12CB4BFDF3B365C81C22E173B13108474A1FE561DE2C60E0EF9A410E88DCAF2F4EBA56F2EE6D26FAE6745E8CA12D 5CEE5A6964702B8F4CA25E0ACBC1477DDE6942186768AFF58FF87AE39A1CF9FB93DD4C6C16C67ADB20BF76C49DAC4637B276FBCE5AE73B6772EE724045BB952D205B64FE9B2822358F3F45 45E5DBF4E03C3CF39E11F0B46E643E4B2F8F7573643767C849944C995392DA3AD858D7E2E957D2011CEF74E7CF3F7BE9A9304936D752B187CAAAE07B8464032A25AD9744531D82632EDE58 425F9F6E91FBDF2925D2B2A00D55860489A60358CD1E9F0973B0ED4E39914AF755096514EFC6DCFBAA35D74DAD0DD64A272FB133C010EE0CEBAC6F680BD42520D5CA"
.
--------------------- DLLs Carregadas Sob os Processos em Execução ---------------------

- - - - - - - > 'winlogon.exe'(492)
c:\windows\system32\Ati2evxx.dll

- - - - - - - > 'explorer.exe'(3436)
c:\windows\system32\IEFRAME.dll
c:\windows\system32\mshtml.dll
c:\windows\system32\msls31.dll
.
------------------------ Outros Processos em Execução ------------------------
.
c:\windows\system32\ati2evxx.exe
c:\programme\AntiVir PersonalEdition Classic\sched.exe
c:\programme\AntiVir PersonalEdition Classic\avguard.exe
c:\programme\WIDCOMM\Bluetooth Software\bin\btwdins.exe
c:\programme\Home Cinema\PowerCinema\Kernel\TV\CLCapSvc.exe
c:\programme\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
c:\programme\CyberLink\Shared Files\CLML_NTService\CLMLService.exe
c:\programme\Java\jre6\bin\jqs.exe
c:\programme\Gemeinsame Dateien\LightScribe\LSSrvc.exe
c:\programme\Gemeinsame Dateien\Protexis\License Service\PsiService_2.exe
c:\windows\system32\wdfmgr.exe
c:\programme\Home Cinema\PowerCinema\Kernel\TV\CLSched.exe
c:\windows\system32\wbem\wmiapsrv.exe
c:\windows\system32\ati2evxx.exe
.
**************************************************************************
.
Tempo para conclusão: 2009-07-04 14:44 - Máquina reiniciou
ComboFix-quarantined-files.txt 2009-07-04 12:44
ComboFix2.txt 2009-07-03 20:07

Pré-execução: 12 Verzeichnis(se), 29.887.455.232 Bytes frei
Pós execução: 12 Verzeichnis(se), 29.794.557.952 Bytes frei

981 --- E O F --- 2008-09-10 10:59