| tomtom333 | 26.09.2015 20:46 |
Guten Abend,
hab mal ne Frage , kann man schon ungefähr so sagen wie das ausmass ist ?
Mein Vater hat es glaube noch schlimmer erwischt, da wollt ich dich mal fragen ob eine neue Festplatte allgemein ein Viren, Trojaner o.ä. Problem lösen kann ,der können die Viecher auch sonst wo sitzen ?
Was uns momentan noch Angst macht ist das wir ziemlich sicher sind das Handy´s und Tablet auch befallen sind :(((
Wie ist sowas möglich, huscht der Virus so durch WLAN Funknetz oder wie ??
So hier die Log Datei
Mit freundlichen Grüßen Code:
ComboFix 15-09-25.01 - tOOm 26.09.2015 21:33:00.2.4 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.49.1031.18.3764.2374 [GMT 2:00]
ausgeführt von:: c:\users\tOOm\Desktop\ComboFix.exe
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
(((((((((((((((((((((((((((((((((((( Weitere Löschungen ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\security\logs\scecomp.log
.
.
((((((((((((((((((((((( Dateien erstellt von 2015-08-26 bis 2015-09-26 ))))))))))))))))))))))))))))))
.
.
2015-09-26 19:36 . 2015-09-26 19:36 -------- d-----w- c:\users\Lappi\AppData\Local\temp
2015-09-26 19:36 . 2015-09-26 19:36 -------- d-----w- c:\users\Default\AppData\Local\temp
2015-09-26 19:31 . 2015-09-26 19:31 70 ----a-w- c:\windows\RAVTC.TMP
2015-09-26 19:18 . 2014-04-11 20:39 869568 ----a-w- c:\windows\system32\TBDC54.tmp
2015-09-26 16:54 . 2015-09-26 16:54 75888 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{70285FD8-46E6-42AB-AEE4-C82C510F59E2}\offreg.3896.dll
2015-09-26 16:05 . 2015-09-26 16:07 -------- d-----w- C:\4c6984432486112d4382cb6c26
2015-09-26 15:51 . 2015-09-26 15:51 -------- d-s---w- c:\windows\system32\CompatTel
2015-09-26 15:51 . 2015-09-26 15:51 -------- d-----w- c:\windows\system32\appraiser
2015-09-26 15:51 . 2015-09-26 15:51 -------- d-----w- c:\windows\Migration
2015-09-26 15:51 . 2015-09-26 15:51 -------- d-----w- c:\windows\SysWow64\wbem\en-US
2015-09-26 15:51 . 2015-09-26 15:51 -------- d-----w- c:\windows\system32\wbem\en-US
2015-09-26 15:10 . 2015-07-30 13:13 103120 ----a-w- c:\windows\SysWow64\PresentationCFFRasterizerNative_v0300.dll
2015-09-26 15:10 . 2015-07-30 13:13 124624 ----a-w- c:\windows\system32\PresentationCFFRasterizerNative_v0300.dll
2015-09-26 15:07 . 2013-10-14 16:00 28368 ----a-w- c:\windows\system32\IEUDINIT.EXE
2015-09-26 14:45 . 2015-09-26 14:45 9728 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2015-09-26 13:59 . 2012-07-26 07:46 2560 ----a-w- c:\windows\system32\drivers\de-DE\wdf01000.sys.mui
2015-09-26 11:54 . 2012-07-26 03:08 229888 ----a-w- c:\windows\system32\WUDFHost.exe
2015-09-26 11:54 . 2012-07-26 03:08 84992 ----a-w- c:\windows\system32\WUDFSvc.dll
2015-09-26 11:54 . 2012-07-26 03:08 744448 ----a-w- c:\windows\system32\WUDFx.dll
2015-09-26 11:54 . 2012-07-26 03:08 45056 ----a-w- c:\windows\system32\WUDFCoinstaller.dll
2015-09-26 11:54 . 2012-07-26 03:08 194048 ----a-w- c:\windows\system32\WUDFPlatform.dll
2015-09-26 11:54 . 2012-07-26 02:26 87040 ----a-w- c:\windows\system32\drivers\WUDFPf.sys
2015-09-26 11:54 . 2012-07-26 02:26 198656 ----a-w- c:\windows\system32\drivers\WUDFRd.sys
2015-09-26 11:39 . 2012-03-01 06:46 23408 ----a-w- c:\windows\system32\drivers\fs_rec.sys
2015-09-26 11:39 . 2012-03-01 06:28 5120 ----a-w- c:\windows\system32\wmi.dll
2015-09-26 11:39 . 2012-03-01 05:29 5120 ----a-w- c:\windows\SysWow64\wmi.dll
2015-09-26 11:28 . 2014-03-09 21:48 171160 ----a-w- c:\windows\system32\infocardapi.dll
2015-09-26 11:28 . 2014-03-09 21:48 1389208 ----a-w- c:\windows\system32\icardagt.exe
2015-09-26 11:28 . 2014-03-09 21:47 99480 ----a-w- c:\windows\SysWow64\infocardapi.dll
2015-09-26 11:28 . 2014-03-09 21:47 619672 ----a-w- c:\windows\SysWow64\icardagt.exe
2015-09-26 11:28 . 2014-06-30 22:24 8856 ----a-w- c:\windows\system32\icardres.dll
2015-09-26 11:28 . 2014-06-30 22:14 8856 ----a-w- c:\windows\SysWow64\icardres.dll
2015-09-26 11:27 . 2014-06-06 06:16 35480 ----a-w- c:\windows\SysWow64\TsWpfWrp.exe
2015-09-26 11:27 . 2014-06-06 06:12 35480 ----a-w- c:\windows\system32\TsWpfWrp.exe
2015-09-26 11:24 . 2015-09-26 11:24 -------- d-----w- c:\program files\Broadcom
2015-09-26 11:22 . 2015-09-26 11:22 75888 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{70285FD8-46E6-42AB-AEE4-C82C510F59E2}\offreg.752.dll
2015-09-26 11:19 . 2015-09-16 03:43 11062400 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{70285FD8-46E6-42AB-AEE4-C82C510F59E2}\mpengine.dll
2015-09-26 11:09 . 2015-01-09 03:14 91136 ----a-w- c:\windows\system32\wdi.dll
2015-09-26 11:09 . 2015-01-09 03:14 950272 ----a-w- c:\windows\system32\perftrack.dll
2015-09-26 11:09 . 2015-01-09 03:14 29696 ----a-w- c:\windows\system32\powertracker.dll
2015-09-26 11:09 . 2015-01-09 02:48 76800 ----a-w- c:\windows\SysWow64\wdi.dll
2015-09-26 11:06 . 2015-04-29 18:19 12625920 ----a-w- c:\windows\system32\wmploc.DLL
2015-09-26 11:05 . 2015-05-25 18:19 113664 ----a-w- c:\windows\system32\sechost.dll
2015-09-26 11:04 . 2014-04-25 02:34 801280 ----a-w- c:\windows\system32\usp10.dll
2015-09-26 11:03 . 2014-12-19 03:06 210432 ----a-w- c:\windows\system32\profsvc.dll
2015-09-26 11:02 . 2014-10-14 02:13 683520 ----a-w- c:\windows\system32\termsrv.dll
2015-09-26 11:02 . 2015-07-15 03:19 52736 ----a-w- c:\windows\system32\basesrv.dll
2015-09-26 11:02 . 2011-12-30 06:26 515584 ----a-w- c:\windows\system32\timedate.cpl
2015-09-26 11:02 . 2011-12-30 05:27 478720 ----a-w- c:\windows\SysWow64\timedate.cpl
2015-09-26 11:02 . 2014-12-06 04:17 303616 ----a-w- c:\windows\system32\nlasvc.dll
2015-09-26 11:02 . 2014-12-06 03:50 52224 ----a-w- c:\windows\SysWow64\nlaapi.dll
2015-09-26 11:02 . 2014-12-06 03:50 156672 ----a-w- c:\windows\SysWow64\ncsi.dll
2015-09-26 11:00 . 2013-07-12 10:41 185344 ----a-w- c:\windows\system32\drivers\usbvideo.sys
2015-09-26 10:59 . 2015-06-15 21:44 128000 ----a-w- c:\windows\system32\msiexec.exe
2015-09-26 10:58 . 2015-07-23 00:02 879104 ----a-w- c:\windows\system32\tdh.dll
2015-09-26 10:57 . 2012-12-07 11:20 23552 ----a-w- c:\windows\system32\oflc.rs
2015-09-26 10:56 . 2015-02-18 07:06 123904 ----a-w- c:\windows\SysWow64\poqexec.exe
2015-09-26 10:56 . 2015-02-18 07:04 142336 ----a-w- c:\windows\system32\poqexec.exe
2015-09-26 10:56 . 2014-11-11 03:08 241152 ----a-w- c:\windows\system32\pku2u.dll
2015-09-26 10:56 . 2014-11-11 02:44 186880 ----a-w- c:\windows\SysWow64\pku2u.dll
2015-09-26 10:56 . 2015-04-11 03:19 69888 ----a-w- c:\windows\system32\drivers\stream.sys
2015-09-26 10:56 . 2015-02-25 03:18 754688 ----a-w- c:\windows\system32\drivers\http.sys
2015-09-26 10:56 . 2014-02-04 02:35 190912 ----a-w- c:\windows\system32\drivers\storport.sys
2015-09-26 10:56 . 2014-02-04 02:35 274880 ----a-w- c:\windows\system32\drivers\msiscsi.sys
2015-09-26 10:56 . 2014-02-04 02:35 27584 ----a-w- c:\windows\system32\drivers\Diskdump.sys
2015-09-26 10:56 . 2014-02-04 02:28 2048 ----a-w- c:\windows\system32\iologmsg.dll
2015-09-26 10:56 . 2014-02-04 02:00 2048 ----a-w- c:\windows\SysWow64\iologmsg.dll
2015-09-26 10:54 . 2013-05-10 05:49 30720 ----a-w- c:\windows\system32\cryptdlg.dll
2015-09-26 10:53 . 2012-07-04 22:16 73216 ----a-w- c:\windows\system32\netapi32.dll
2015-09-26 10:52 . 2013-10-12 02:32 150016 ----a-w- c:\windows\system32\wshom.ocx
2015-09-26 10:51 . 2012-06-06 06:05 1499136 ----a-w- c:\program files\Common Files\System\ado\msado15.dll
2015-09-26 10:51 . 2012-06-06 06:05 495616 ----a-w- c:\program files\Common Files\System\ado\msadox.dll
2015-09-26 10:51 . 2012-06-06 06:05 466944 ----a-w- c:\program files\Common Files\System\ado\msadomd.dll
2015-09-26 10:51 . 2012-06-06 06:05 258048 ----a-w- c:\program files\Common Files\System\msadc\msadco.dll
2015-09-26 10:51 . 2012-06-06 05:05 57344 ----a-w- c:\program files (x86)\Common Files\System\ado\msador15.dll
2015-09-26 10:51 . 2012-06-06 05:05 352256 ----a-w- c:\program files (x86)\Common Files\System\ado\msadomd.dll
2015-09-26 10:51 . 2012-06-06 05:05 1019904 ----a-w- c:\program files (x86)\Common Files\System\ado\msado15.dll
2015-09-26 10:51 . 2012-06-06 05:03 805376 ----a-w- c:\windows\SysWow64\cdosys.dll
2015-09-26 10:51 . 2012-06-06 06:05 61440 ----a-w- c:\program files\Common Files\System\ado\msador15.dll
2015-09-26 10:51 . 2012-06-06 06:02 1133568 ----a-w- c:\windows\system32\cdosys.dll
2015-09-26 10:51 . 2012-06-06 05:05 143360 ----a-w- c:\program files (x86)\Common Files\System\ado\msjro.dll
2015-09-26 10:51 . 2012-06-06 05:05 372736 ----a-w- c:\program files (x86)\Common Files\System\ado\msadox.dll
2015-09-26 10:51 . 2012-06-06 05:05 212992 ----a-w- c:\program files (x86)\Common Files\System\msadc\msadco.dll
2015-09-26 10:16 . 2012-02-17 06:38 1031680 ----a-w- c:\windows\system32\rdpcore.dll
2015-09-26 10:16 . 2012-02-17 05:34 826880 ----a-w- c:\windows\SysWow64\rdpcore.dll
2015-09-26 10:16 . 2012-02-17 04:57 23552 ----a-w- c:\windows\system32\drivers\tdtcp.sys
2015-09-26 10:10 . 2015-09-26 19:27 -------- d-----w- c:\programdata\panda_url_filtering
2015-09-26 10:09 . 2015-09-26 19:31 -------- d-----w- c:\program files (x86)\Panda Security
2015-09-26 10:08 . 2015-09-26 19:31 -------- d-----w- c:\programdata\Panda Security
2015-09-26 09:13 . 2015-09-26 19:19 -------- d-----w- c:\program files (x86)\Yahoo!
2015-09-26 09:12 . 2015-09-26 09:12 -------- d-----w- c:\programdata\HP Product Assistant
2015-09-26 09:12 . 2015-09-26 09:12 -------- d-----w- c:\windows\SysWow64\spool
2015-09-26 09:12 . 2015-09-26 09:12 -------- d-----w- c:\windows\SysWow64\Macromed
2015-09-26 09:11 . 2015-09-26 09:11 -------- d-----w- c:\program files (x86)\Common Files\Hewlett-Packard
2015-09-26 09:11 . 2015-09-26 09:11 -------- d-----w- c:\program files (x86)\Common Files\HP
2015-09-26 09:10 . 2015-09-26 19:19 -------- d-----w- c:\program files (x86)\HP
2015-09-26 09:10 . 2015-09-26 09:10 -------- d-----w- c:\program files\HP
2015-09-26 09:07 . 2015-09-26 09:12 -------- d-----w- c:\programdata\HP
2015-09-26 09:07 . 2009-07-08 10:51 642360 ----a-w- c:\windows\system32\hpzids40.dll
2015-09-26 08:49 . 2015-09-26 08:49 -------- d-----w- C:\Spacekace
2015-09-26 08:39 . 2015-09-26 08:39 -------- d-----w- c:\program files (x86)\Hewlett-Packard
2015-09-26 08:12 . 2015-09-26 07:23 -------- d-----w- c:\windows\Panther
2015-09-26 08:12 . 2015-09-26 15:57 -------- d-----w- C:\Boot
2015-09-26 07:59 . 2015-09-26 07:59 -------- d-----w- c:\program files\Common Files\Intel
2015-09-26 07:59 . 2015-09-26 07:59 -------- d-----w- c:\program files (x86)\Common Files\Intel
2015-09-26 07:57 . 2015-09-26 07:57 -------- d-----w- c:\program files (x86)\Common Files\Atheros
2015-09-26 07:57 . 2015-09-26 07:59 -------- d-----w- c:\program files (x86)\Bluetooth Suite
2015-09-26 07:54 . 2015-09-26 07:54 -------- d-----w- c:\program files (x86)\Common Files\postureAgent
2015-09-26 07:52 . 2015-09-26 07:58 -------- d-----w- C:\Intel
2015-09-26 07:52 . 2009-12-17 08:42 538136 ----a-w- c:\windows\system32\drivers\iaStor.sys
2015-09-26 07:52 . 2015-09-26 07:59 -------- d-----w- c:\program files (x86)\Intel
2015-09-26 07:43 . 2015-09-26 19:31 -------- d-sh--w- c:\windows\Installer
2015-09-26 07:38 . 2015-09-26 07:39 -------- d-----w- c:\program files (x86)\Google
2015-09-26 07:34 . 2015-09-26 07:34 -------- d-----w- c:\windows\Options
2015-09-26 07:34 . 2015-09-26 07:34 -------- d-----w- c:\program files (x86)\Atheros
2015-09-26 07:34 . 2009-10-05 07:34 1542656 ----a-w- c:\windows\system32\drivers\athrx.sys
2015-09-26 07:34 . 2009-10-05 07:34 1542656 ----a-w- c:\windows\system32\athrx.sys
2015-09-26 07:34 . 2015-09-26 19:18 -------- d--h--w- c:\program files (x86)\InstallShield Installation Information
2015-09-26 07:34 . 2015-09-26 07:34 -------- d-----w- c:\programdata\Atheros
.
.
.
(((((((((((((((((((((((((((((((((((( Find3M Bericht ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2015-07-22 17:53 . 2015-09-26 10:58 44032 ----a-w- c:\windows\apppatch\acwow64.dll
.
.
(((((((((((((((((((((((((((( Autostartpunkte der Registrierung ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"IAStorIcon"="c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" [2009-12-23 284696]
"HP Software Update"="c:\program files (x86)\HP\HP Software Update\HPWuSchd2.exe" [2007-05-08 54840]
"hpqSRMon"="c:\program files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe" [2008-07-22 150528]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
HP Digital Imaging Monitor.lnk - c:\program files (x86)\HP\Digital Imaging\bin\hpqtra08.exe [2009-9-20 270336]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
S2 DiagTrack;Diagnostics Tracking Service;c:\windows\System32\svchost.exe;c:\windows\SYSNATIVE\svchost.exe [x]
S2 HPSupportSolutionsFrameworkService;HP Support Solutions Framework Service;c:\program files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe;c:\program files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [x]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [x]
S2 UNS;Intel(R) Management & Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]
S3 HECIx64;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys;c:\windows\SYSNATIVE\DRIVERS\HECIx64.sys [x]
S3 Impcd;Impcd;c:\windows\system32\DRIVERS\Impcd.sys;c:\windows\SYSNATIVE\DRIVERS\Impcd.sys [x]
S3 IntcDAud;Intel(R) Display-Audio;c:\windows\system32\DRIVERS\IntcDAud.sys;c:\windows\SYSNATIVE\DRIVERS\IntcDAud.sys [x]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*NewlyCreated* - 56239701
*Deregistered* - 56239701
*Deregistered* - NNSALPC
*Deregistered* - NNSHTTP
*Deregistered* - NNSHTTPS
*Deregistered* - NNSIDS
*Deregistered* - NNSNAHSL
*Deregistered* - NNSPICC
*Deregistered* - NNSPIHSW
*Deregistered* - NNSPOP3
*Deregistered* - NNSPROT
*Deregistered* - NNSPRV
*Deregistered* - NNSSMTP
*Deregistered* - NNSSTRM
*Deregistered* - NNSTLSC
*Deregistered* - panda_url_filteringd
*Deregistered* - PSINAflt
*Deregistered* - PSINKNC
*Deregistered* - PSINProt
*Deregistered* - PSINReg
*Deregistered* - PSKMAD
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost]
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2015-09-26 07:39 997704 ----a-w- c:\program files (x86)\Google\Chrome\Application\45.0.2454.101\Installer\chrmstp.exe
.
Inhalt des "geplante Tasks" Ordners
.
2015-09-26 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2015-09-26 07:38]
.
2015-09-26 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2015-09-26 07:38]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2009-12-10 9643552]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2010-09-16 161304]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2010-09-16 386584]
"Persistence"="c:\windows\system32\igfxpers.exe" [2010-09-16 415256]
"AtherosBtStack"="c:\program files (x86)\Bluetooth Suite\BtvStack.exe" [2011-01-20 615584]
"AthBtTray"="c:\program files (x86)\Bluetooth Suite\AthBtTray.exe" [2011-01-20 379552]
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
TCP: DhcpNameServer = 192.168.178.1
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil10c.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\LocalServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\FlashUtil10c.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10c.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10c.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10c.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10c.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}]
@Denied: (A 2) (Everyone)
@="IFlashBroker3"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2015-09-26 21:38:28
ComboFix-quarantined-files.txt 2015-09-26 19:38
.
Vor Suchlauf: 13 Verzeichnis(se), 602.778.816.512 Bytes frei
Nach Suchlauf: 14 Verzeichnis(se), 603.191.136.256 Bytes frei
.
- - End Of File - - ABD5E448F2A4CF21E662A8FB357CAE53
| 
Malwarebytes Anti-Malware 
AdwCleaner auf deinen Desktop.
WARNUNG an die MITLESER: 