Trojaner-Board - links werden umgeleitet und werbe-links öffnen sich von allein (firefox)

moins,

hört sich gefärlich an was ich hier machen soll :) naja aber du weißt sicherlicht was du da machst (oder besser gesagt von mir verlangst^^)

hier das log

Zitat:

ComboFix 10-04-06.04 - RedNoak 07.04.2010 16:27:30.1.2 - x86
Microsoft Windows 7 Professional 6.1.7600.0.1252.49.1031.18.2046.1286 [GMT 2:00]
ausgeführt von:: c:\users\RedNoak\Desktop\cofi.exe
.

(((((((((((((((((((((((((((((((((((( Weitere Löschungen ))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\install.exe
c:\program files\StormII
c:\windows\system32\404Fix.exe
c:\windows\system32\Agent.OMZ.Fix.exe
c:\windows\system32\dumphive.exe
c:\windows\system32\IEDFix.C.exe
c:\windows\system32\IEDFix.exe
c:\windows\system32\o4Patch.exe
c:\windows\system32\Process.exe
c:\windows\system32\SrchSTS.exe
c:\windows\system32\tmp.reg
c:\windows\system32\VACFix.exe
c:\windows\system32\VCCLSID.exe
c:\windows\system32\WS2Fix.exe

.
((((((((((((((((((((((( Dateien erstellt von 2010-03-07 bis 2010-04-07 ))))))))))))))))))))))))))))))
.

2010-04-07 15:17 . 2010-04-07 13:11 21584 ----a-w- c:\windows\system32\drivers\atapi.sys
2010-04-07 14:32 . 2010-04-07 14:32 -------- d-----w- c:\users\RedNoak\AppData\Local\temp
2010-04-07 14:32 . 2010-04-07 14:32 -------- d-----w- c:\users\Default\AppData\Local\temp
2010-04-07 13:12 . 2010-04-07 13:11 21584 ----a-w- C:\atapi.sys
2010-04-05 12:31 . 2010-04-05 12:33 -------- d-----w- c:\program files\Google
2010-04-05 12:31 . 2010-04-05 12:33 -------- d-----w- c:\users\RedNoak\AppData\Local\Google
2010-04-05 11:24 . 2010-04-05 11:24 -------- d-----w- c:\program files\Common Files\Steam
2010-04-04 16:26 . 2010-04-04 16:26 1 ----a-w- c:\windows\system32\SI.bin
2010-04-04 11:16 . 2010-04-04 11:16 -------- d-----w- c:\users\RedNoak\AppData\Local\SKIDROW
2010-04-04 11:15 . 2010-04-04 11:15 -------- d-----w- c:\users\RedNoak\AppData\Local\Sidhe
2010-04-02 16:22 . 2010-04-02 16:22 -------- d-----w- c:\program files\Sonata
2010-03-31 11:34 . 2010-02-23 07:56 977920 ----a-w- c:\windows\system32\wininet.dll
2010-03-29 23:45 . 2010-03-29 23:45 -------- d-----w- c:\users\RedNoak\AppData\Roaming\NVIDIA
2010-03-29 23:04 . 2010-03-29 23:04 -------- d-----w- c:\users\RedNoak\AppData\Local\4A Games
2010-03-24 15:58 . 2010-03-25 02:11 -------- d-----w- C:\rsit
2010-03-24 15:58 . 2010-03-25 02:11 -------- d-----w- c:\program files\trend micro
2010-03-23 20:02 . 2010-03-23 20:02 -------- d-----w- c:\windows\Sun
2010-03-22 16:43 . 2010-03-22 16:43 -------- d-----w- c:\users\RedNoak\AppData\Roaming\Malwarebytes
2010-03-22 16:43 . 2010-01-07 15:07 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-03-22 16:43 . 2010-03-22 16:43 -------- d-----w- c:\programdata\Malwarebytes
2010-03-22 16:43 . 2010-03-22 16:43 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-03-22 16:43 . 2010-01-07 15:07 19160 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-03-22 02:54 . 2010-03-22 02:54 388096 ----a-r- c:\users\RedNoak\AppData\Roaming\Microsoft\Installer\{0761C9A8-8F3A-4216-B4A7-B7AFBF24A24A}\HiJackThis.exe
2010-03-22 02:54 . 2010-03-22 02:54 -------- d-----w- c:\program files\TrendMicro
2010-03-22 02:21 . 2010-04-07 13:58 -------- d-----w- c:\program files\CCleaner
2010-03-22 01:23 . 2010-03-22 01:23 -------- d-----w- c:\windows\1C4551A64743409391E41477CD655043.TMP
2010-03-22 01:12 . 2010-03-22 01:23 -------- d-----w- c:\program files\Common Files\BioWare
2010-03-16 00:15 . 2010-03-16 00:15 985704 ----a-w- c:\windows\system32\nvsvc.dll
2010-03-16 00:15 . 2010-03-16 00:15 1515624 ----a-w- c:\windows\system32\nvsvcr.dll
2010-03-16 00:15 . 2010-03-16 00:15 129640 ----a-w- c:\windows\system32\nvvsvc.exe
2010-03-16 00:14 . 2010-03-16 00:14 13683816 ----a-w- c:\windows\system32\nvcpl.dll
2010-03-16 00:14 . 2010-03-16 00:14 110696 ----a-w- c:\windows\system32\nvmctray.dll
2010-03-14 12:49 . 2010-03-14 12:49 -------- d-----w- c:\programdata\ALM
2010-03-14 12:24 . 2009-11-25 10:19 56816 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2010-03-14 12:24 . 2009-03-30 08:33 96104 ----a-w- c:\windows\system32\drivers\avipbb.sys
2010-03-14 12:24 . 2010-03-14 12:24 -------- d-----w- c:\programdata\Avira
2010-03-14 12:24 . 2010-03-14 12:24 -------- d-----w- c:\program files\Avira
2010-03-12 20:30 . 2010-03-22 16:52 -------- d-----w- c:\users\RedNoak\AppData\Local\Microsoft Games
2010-03-12 20:29 . 2010-03-12 20:29 -------- d-----w- c:\program files\Microsoft Games
2010-03-12 15:28 . 2010-03-16 13:48 -------- d-----w- c:\program files\OpenAL
2010-03-12 15:28 . 2010-03-12 15:28 444952 ----a-w- c:\windows\system32\wrap_oal.dll
2010-03-12 15:28 . 2010-03-12 15:28 109080 ----a-w- c:\windows\system32\OpenAL32.dll

.
(((((((((((((((((((((((((((((((((((( Find3M Bericht ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-04-07 14:32 . 2009-07-14 08:47 677940 ----a-w- c:\windows\system32\perfc007.dat
2010-04-07 14:32 . 2009-07-14 08:47 2424012 ----a-w- c:\windows\system32\perfh007.dat
2010-04-07 14:26 . 2010-01-07 02:14 -------- d-----w- c:\programdata\NVIDIA
2010-04-07 13:12 . 2010-01-06 18:36 -------- d-----w- c:\users\RedNoak\AppData\Roaming\uTorrent
2010-04-06 01:44 . 2010-04-06 01:43 116 ----a-w- c:\windows\wininit.tmp
2010-04-06 00:00 . 2010-01-07 02:23 -------- d--h--w- c:\program files\InstallShield Installation Information
2010-04-04 15:46 . 2010-01-20 04:57 -------- d-----w- c:\users\RedNoak\AppData\Roaming\vlc
2010-04-02 15:33 . 2010-01-07 03:17 -------- d-----w- c:\program files\Common Files\Java
2010-04-02 15:32 . 2010-01-07 03:17 -------- d-----w- c:\program files\Java
2010-03-31 21:49 . 2010-01-07 01:52 -------- d-----w- c:\program files\Common Files\Wise Installation Wizard
2010-03-31 17:58 . 2009-07-13 23:11 21584 ----a-w- c:\windows\system32\drivers\atapi.bad
2010-03-30 00:18 . 2010-01-07 02:13 -------- d-----w- c:\program files\NVIDIA Corporation
2010-03-27 19:41 . 2010-01-15 22:54 -------- d-----w- c:\users\RedNoak\AppData\Roaming\Winamp
2010-03-22 01:23 . 2010-01-07 01:52 -------- d-----w- c:\programdata\Media Center Programs
2010-03-22 01:10 . 2010-01-07 01:57 -------- d-----w- c:\programdata\BioWare
2010-03-12 12:51 . 2010-01-21 18:34 -------- d-----w- c:\users\RedNoak\AppData\Roaming\Canon
2010-03-09 02:28 . 2010-01-14 16:25 411368 ----a-w- c:\windows\system32\deploytk.dll
2010-03-03 17:32 . 2010-01-08 16:41 138576 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2010-03-03 17:31 . 2010-01-08 16:41 215104 ----a-w- c:\windows\system32\PnkBstrB.exe
2010-03-02 01:55 . 2010-01-12 16:30 -------- d-----w- c:\program files\Paint.NET
2010-03-02 00:34 . 2010-01-06 18:58 69016 ----a-w- c:\users\RedNoak\AppData\Local\GDIPFONTCACHEV1.DAT
2010-03-01 02:39 . 2010-01-07 01:17 -------- d-----w- c:\program files\Common Files\Adobe
2010-03-01 02:38 . 2010-03-01 02:38 -------- d-----w- c:\program files\Bonjour
2010-02-27 02:57 . 2010-02-27 01:47 -------- d-----w- c:\users\RedNoak\AppData\Roaming\My Battle for Middle-earth Files
2010-02-26 06:24 . 2010-02-26 06:21 -------- d-----w- c:\program files\Driver Cleaner Pro
2010-02-26 06:06 . 2010-02-26 06:06 2626360 ----a-w- c:\users\RedNoak\AppData\Roaming\Mozilla\Firefox\Profiles\se1rq0sk.default\extensions\firefox@tvunetworks.com\plugins\npTVUAx.dll
2010-02-26 06:02 . 2010-01-07 02:35 -------- d--h--w- c:\program files\Temp
2010-02-25 02:20 . 2010-02-25 02:20 -------- d-----w- c:\users\RedNoak\AppData\Roaming\DivX
2010-02-24 09:16 . 2010-01-06 18:38 181632 ------w- c:\windows\system32\MpSigStub.exe
2010-02-22 17:50 . 2010-02-15 13:53 -------- d-----w- c:\users\RedNoak\AppData\Roaming\Bioshock2
2010-02-20 22:02 . 2010-01-23 13:31 -------- d-----w- c:\programdata\AA3DeployClient
2010-02-19 04:08 . 2010-02-19 04:08 -------- d-----w- c:\users\RedNoak\AppData\Roaming\UDC Profiles
2010-02-19 03:58 . 2010-02-19 03:58 -------- d-----w- c:\programdata\FLEXnet
2010-02-19 03:52 . 2010-02-19 03:52 -------- d-----w- c:\program files\Common Files\Macrovision Shared
2010-02-15 13:50 . 2010-02-15 13:50 -------- d-sh--w- c:\programdata\SecuROM
2010-02-15 13:43 . 2010-02-15 13:43 -------- d-----w- c:\program files\Microsoft Games for Windows - LIVE
2010-02-13 03:31 . 2010-02-13 03:31 -------- d-----w- c:\users\RedNoak\AppData\Roaming\Ubisoft
2010-02-13 03:13 . 2010-02-13 03:13 281760 ----a-w- c:\windows\system32\drivers\atksgt.sys
2010-02-13 03:13 . 2010-02-13 03:13 25888 ----a-w- c:\windows\system32\drivers\lirsgt.sys
2010-02-11 07:10 . 2010-03-08 02:00 293376 ----a-w- c:\windows\system32\browserchoice.exe
2010-02-11 03:26 . 2010-02-11 03:26 -------- d-----w- c:\programdata\IsolatedStorage
2010-02-08 17:46 . 2010-02-26 06:01 57376 ----a-w- c:\windows\system32\RtkCoInst.dll
2010-02-08 17:46 . 2010-02-26 06:01 1695264 ----a-w- c:\windows\system32\RtkPgExt.dll
2010-02-08 17:46 . 2010-02-26 06:01 371232 ----a-w- c:\windows\system32\RtkApoApi.dll
2010-02-08 17:46 . 2010-02-26 06:01 2624544 ----a-w- c:\windows\system32\RtkAPO.dll
2010-02-08 17:17 . 2010-02-26 06:01 3019232 ----a-w- c:\windows\system32\drivers\RTKVHDA.sys
2010-02-07 18:41 . 2010-02-07 18:41 -------- d-----w- c:\program files\Veoh Networks
2010-02-06 17:51 . 2010-01-22 19:28 -------- d-----w- c:\program files\Veetle
2010-02-04 09:01 . 2010-02-22 18:34 74072 ----a-w- c:\windows\system32\XAPOFX1_4.dll
2010-02-04 09:01 . 2010-02-22 18:34 528216 ----a-w- c:\windows\system32\XAudio2_6.dll
2010-02-04 09:01 . 2010-02-22 18:34 238936 ----a-w- c:\windows\system32\xactengine3_6.dll
2010-02-04 09:01 . 2010-02-22 18:34 22360 ----a-w- c:\windows\system32\X3DAudio1_7.dll
2010-02-02 07:45 . 2010-02-24 17:03 2048 ----a-w- c:\windows\system32\tzres.dll
2010-02-01 21:26 . 2010-01-08 16:41 139152 ----a-w- c:\users\RedNoak\AppData\Roaming\PnkBstrK.sys
2010-02-01 21:26 . 2010-01-08 16:41 139152 ----a-w- c:\users\RedNoak\AppData\Roaming\PnkBstrK.sys
2010-02-01 15:14 . 2010-02-26 06:01 1247776 ----a-w- c:\windows\RtlExUpd.dll
2010-01-26 10:38 . 2010-02-26 06:01 145760 ----a-w- c:\windows\system32\AERTACap.dll
2010-01-25 18:12 . 2010-02-26 06:01 291232 ----a-w- c:\windows\system32\FMAPO.dll
2010-01-24 14:47 . 2010-01-24 14:47 794408 ----a-w- c:\windows\system32\pbsvc.exe
2010-01-24 14:47 . 2010-01-08 16:41 75064 ----a-w- c:\windows\system32\PnkBstrA.exe
2010-01-18 23:29 . 2010-02-10 17:44 85504 ----a-w- c:\windows\system32\secproc_ssp_isv.dll
2010-01-18 23:29 . 2010-02-10 17:44 85504 ----a-w- c:\windows\system32\secproc_ssp.dll
2010-01-18 23:29 . 2010-02-10 17:44 365568 ----a-w- c:\windows\system32\secproc_isv.dll
2010-01-18 23:29 . 2010-02-10 17:44 369152 ----a-w- c:\windows\system32\secproc.dll
2010-01-18 23:28 . 2010-02-10 17:44 324608 ----a-w- c:\windows\system32\RMActivate_isv.exe
2010-01-18 23:28 . 2010-02-10 17:44 277504 ----a-w- c:\windows\system32\RMActivate_ssp_isv.exe
2010-01-18 23:28 . 2010-02-10 17:44 320512 ----a-w- c:\windows\system32\RMActivate.exe
2010-01-18 23:28 . 2010-02-10 17:44 280064 ----a-w- c:\windows\system32\RMActivate_ssp.exe
2010-01-14 16:38 . 2010-01-14 16:38 766 ----a-r- c:\users\RedNoak\AppData\Roaming\Microsoft\Installer\{8B9852AF-B0B0-47B7-9BC5-89A95D77B6C9}\_6FEFF9B68218417F98F549.exe
2010-01-14 16:38 . 2010-01-14 16:38 2550 ----a-r- c:\users\RedNoak\AppData\Roaming\Microsoft\Installer\{8B9852AF-B0B0-47B7-9BC5-89A95D77B6C9}\_BEBC7E9B550B807D255107.exe
2010-01-14 16:38 . 2010-01-14 16:38 1518 ----a-r- c:\users\RedNoak\AppData\Roaming\Microsoft\Installer\{8B9852AF-B0B0-47B7-9BC5-89A95D77B6C9}\_0D3558C4434A1C598D6FAA.exe
2010-01-14 16:38 . 2010-01-14 16:38 1078 ----a-r- c:\users\RedNoak\AppData\Roaming\Microsoft\Installer\{8B9852AF-B0B0-47B7-9BC5-89A95D77B6C9}\_C86848DD3D088397791DA0.exe
2010-01-14 16:38 . 2010-01-14 16:38 1078 ----a-r- c:\users\RedNoak\AppData\Roaming\Microsoft\Installer\{8B9852AF-B0B0-47B7-9BC5-89A95D77B6C9}\_12C4F2192E2964FB6B5B2C.exe
2010-01-14 16:38 . 2010-01-14 16:38 10134 ----a-r- c:\users\RedNoak\AppData\Roaming\Microsoft\Installer\{8B9852AF-B0B0-47B7-9BC5-89A95D77B6C9}\_0BE142F207011DCE1557E8.exe
2010-01-12 04:03 . 2010-02-26 06:32 182888 ----a-w- c:\windows\system32\nvcod189.dll
2010-01-08 03:18 . 2010-02-10 17:44 221184 ----a-w- c:\windows\system32\drivers\mrxsmb10.sys
2010-01-08 03:17 . 2010-02-10 17:44 123392 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
2009-06-10 21:26 . 2009-07-14 02:04 9633792 --sha-r- c:\windows\Fonts\StaticCache.dat
2009-07-14 01:14 . 2009-07-13 23:42 396800 --sha-w- c:\windows\winsxs\x86_microsoft-windows-mail-app_31bf3856ad364e35_6.1.7600.16385_none_f12e83abb108c86c\WinMail.exe
.

(((((((((((((((((((((((((((( Autostartpunkte der Registrierung ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2009-10-30 369200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-02-18 248040]
"CanonSolutionMenu"="c:\program files\Canon\SolutionMenu\CNSLMAIN.exe" [2008-03-10 689488]
"CanonMyPrinter"="c:\program files\Canon\MyPrinter\BJMyPrt.exe" [2008-03-03 1848648]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-12-22 35760]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2009-12-11 948672]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RtHDVCpl.exe" [2010-02-08 8505888]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2009-03-02 209153]
"Malwarebytes Anti-Malware (reboot)"="c:\program files\Malwarebytes' Anti-Malware\mbam.exe" [2010-01-07 1394000]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MSIServer]
@="Service"

[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^VPN Client.lnk]
path=c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\VPN Client.lnk
backup=c:\windows\pss\VPN Client.lnk.CommonStartup
backupExtension=.CommonStartup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}]
2007-06-27 18:03 152872 ----a-w- c:\program files\Common Files\Ahead\Lib\NMBgMonitor.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Malwarebytes Anti-Malware (reboot)]
2010-01-07 15:07 1394000 ----a-w- c:\program files\Malwarebytes' Anti-Malware\mbam.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
2007-03-01 14:57 153136 ----a-w- c:\program files\Common Files\Ahead\Lib\NeroCheck.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PWRISOVM.EXE]
2007-08-07 00:05 200704 ----a-w- d:\programme\PowerISO\PWRISOVM.EXE

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinampAgent]
2009-12-21 05:45 39424 ----a-w- c:\program files\Winamp\winampa.exe

R0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [2010-01-07 691696]
R2 gupdate;Google Update Service (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2010-04-05 136176]
R3 DAUpdaterSvc;Dragon Age: Origins - Content Updater;e:\spiele\Dragon Age\bin_ship\DAUpdaterSvc.Service.exe [2009-12-15 25832]
R3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt86win7.sys [2009-08-20 189440]
S2 AntiVirSchedulerService;Avira AntiVir Planer;c:\program files\Avira\AntiVir Desktop\sched.exe [2009-05-13 108289]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2010-03-16 240232]

.
Inhalt des "geplante Tasks" Ordners

2010-04-07 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-04-05 12:31]

2010-04-07 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-04-05 12:31]
.
.
------- Zusätzlicher Suchlauf -------
.
uInternet Settings,ProxyOverride = local
IE: Add to AMV Converter... - e:\mp3 player utilities 4.18\AMVConverter\grab.html
IE: Nach Microsoft E&xel exportieren - e:\micros~1\Office12\EXCEL.EXE/3000
FF - ProfilePath - c:\users\RedNoak\AppData\Roaming\Mozilla\Firefox\Profiles\se1rq0sk.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.google.de/firefox?client=firefox-a&rls=org.mozilla:de:official
FF - plugin: c:\program files\DivX\DivX Plus Web Player\npdivx32.dll
FF - plugin: c:\program files\Google\Google Earth\plugin\npgeplugin.dll
FF - plugin: c:\program files\Google\Update\1.2.183.23\npGoogleOneClick8.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npwachk.dll
FF - plugin: c:\program files\NVIDIA Corporation\3D Vision\npnv3dv.dll
FF - plugin: c:\program files\Veetle\Player\npvlc.dll
FF - plugin: c:\program files\Veetle\plugins\npVeetle.dll
FF - plugin: c:\program files\Veetle\VLCBroadcast\npvbp.dll
FF - plugin: c:\program files\Veoh Networks\VeohWebPlayer\NPVeohTVPlugin.dll
FF - plugin: c:\program files\Veoh Networks\VeohWebPlayer\npWebPlayerVideoPluginATL.dll
FF - plugin: c:\users\RedNoak\AppData\Roaming\Mozilla\Firefox\Profiles\se1rq0sk.default\extensions\firefox@tvunetworks.com\plugins\npTVUAx.dll

---- FIREFOX Richtlinien ----
FF - user.js: yahoo.homepage.dontask - truec:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_colors", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_popup_windows", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.enable_click_image_resizing", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("accessibility.browsewithcaret_shortcut.enabled", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("javascript.options.mem.high_water_mark", 32);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("javascript.options.mem.gc_frequency", 1600);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("svg.smil.enabled", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.trackpoint_hack.enabled", -1);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.debug", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.agedWeight", 2);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.bucketSize", 1);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.maxTimeGroupings", 25);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.timeGroupingSize", 604800);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.boundaryWeight", 25);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.prefixWeight", 5);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("html5.enable", false);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.allow_unrestricted_renego_everywhere__temporarily_available_pref", true);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.renego_unrestricted_hosts", "");
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.treat_unsafe_negotiation_as_broken", false);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.require_safe_negotiation", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("app.update.download.backgroundInterval", 600);
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("app.update.url.manual", "hxxp://www.firefox.com");
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-ja", "mozff");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add", "addons.mozilla.org");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add.36", "getpersonas.com");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("lightweightThemes.update.enabled", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.allTabs.previews", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.hide_infobar_for_outdated_plugin", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("toolbar.customization.usesheet", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.enable", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.max", 20);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.cachetime", 20);
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2010-04-07 16:33:42
ComboFix-quarantined-files.txt 2010-04-07 14:33

Vor Suchlauf: 12 Verzeichnis(se), 55.071.649.792 Bytes frei
Nach Suchlauf: 17 Verzeichnis(se), 54.586.490.880 Bytes frei

- - End Of File - - D362E4FBA537189E67AF9E6BC1DCA394

mfg

red