Trojaner-Board - google öffnet falschen links, System gescant mit malwarebytes

Combofix Logfile:
Code:
ComboFix 10-09-14.05 - Administrator 15.09.2010  20:58:32.3.2 - x86 NETWORK

Microsoft Windows XP Professional  5.1.2600.3.1252.49.1031.18.2937.2650 [GMT 2:00]

ausgeführt von:: C:\ComboFix.exe

AV: Kaspersky PURE *On-access scanning disabled* (Updated) {2C4D4BC6-0793-4956-A9F9-E252435469C0}

AV: Lavasoft Ad-Watch Live! Virenschutz *On-access scanning disabled* (Updated) {A1C4F2E0-7FDE-4917-AFAE-013EFC3EDE33}

FW: Kaspersky PURE *disabled* {2C4D4BC6-0793-4956-A9F9-E252435469C0}

.
 

((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))

.
 

c:\windows\system32\winlogon.exe . . . ist infiziert!!
 

c:\windows\explorer.exe . . . ist infiziert!!
 

.

(((((((((((((((((((((((   Dateien erstellt von 2010-08-15 bis 2010-09-15  ))))))))))))))))))))))))))))))

.
 

2010-09-15 18:47 . 2010-09-15 16:31        3845259        ----a-r-        C:\ComboFix.exe

2010-09-15 13:54 . 2010-09-15 13:54        --------        d-----w-        C:\_OTL

2010-09-15 11:09 . 2010-09-08 12:59        15880        ----a-w-        c:\windows\system32\lsdelete.exe

2010-09-15 10:08 . 2010-09-08 12:59        64288        ----a-w-        c:\windows\system32\drivers\Lbd.sys

2010-09-15 09:59 . 2010-09-15 09:59        --------        dc-h--w-        c:\dokumente und einstellungen\All Users\Anwendungsdaten\{437292BE-95BD-4B12-B699-6D217A03ACAF}

2010-09-15 09:59 . 2010-09-08 13:00        2985688        -c--a-w-        c:\dokumente und einstellungen\All Users\Anwendungsdaten\{437292BE-95BD-4B12-B699-6D217A03ACAF}\Ad-AwareInstall.exe

2010-09-15 09:59 . 2010-09-15 09:59        --------        d-----w-        c:\programme\Lavasoft

2010-09-15 05:58 . 2010-09-15 05:58        --------        d-----w-        C:\TDSSKiller_Quarantine

2010-09-14 16:33 . 2010-09-15 08:12        --------        d-----w-        c:\dokumente und einstellungen\All Users\Anwendungsdaten\Spybot - Search & Destroy

2010-09-14 15:32 . 2010-09-14 15:32        95024        ----a-w-        c:\windows\system32\drivers\SBREDrv.sys

2010-09-14 15:24 . 2010-09-15 09:59        --------        d-----w-        c:\dokumente und einstellungen\All Users\Anwendungsdaten\Lavasoft

2010-09-14 08:57 . 2010-04-29 10:19        38224        ----a-w-        c:\windows\system32\drivers\mbamswissarmy.sys

2010-09-14 08:57 . 2010-09-14 08:57        --------        d-----w-        c:\programme\Malwarebytes' Anti-Malware

2010-09-14 08:57 . 2010-04-29 10:19        20952        ----a-w-        c:\windows\system32\drivers\mbam.sys

2010-09-13 15:54 . 2010-09-13 15:54        932368        ----a-w-        c:\dokumente und einstellungen\All Users\Anwendungsdaten\Kaspersky Lab\AVP9\Data\KasFlt\Plugins\profiles-1-6.dll

2010-09-13 15:54 . 2010-09-13 15:54        678416        ----a-w-        c:\dokumente und einstellungen\All Users\Anwendungsdaten\Kaspersky Lab\AVP9\Data\KasFlt\Plugins\content_interpreter-1-1.dll

2010-09-13 15:54 . 2010-09-13 15:54        604688        ----a-w-        c:\dokumente und einstellungen\All Users\Anwendungsdaten\Kaspersky Lab\AVP9\Data\KasFlt\Plugins\gsg-3-9.dll

2010-09-13 15:54 . 2010-09-13 15:54        1096208        ----a-w-        c:\dokumente und einstellungen\All Users\Anwendungsdaten\Kaspersky Lab\AVP9\Data\KasFlt\Plugins\filtration-4-6.dll

2010-09-13 15:54 . 2010-09-13 15:54        522768        ----a-w-        c:\dokumente und einstellungen\All Users\Anwendungsdaten\Kaspersky Lab\AVP9\Data\KasFlt\Plugins\database-1-5.dll

2010-09-13 15:41 . 2010-09-13 15:53        97549        ----a-w-        c:\windows\system32\drivers\klick.dat

2010-09-13 15:41 . 2010-09-13 15:53        113933        ----a-w-        c:\windows\system32\drivers\klin.dat

2010-09-13 15:40 . 2009-12-14 10:44        88632        ----a-w-        c:\windows\system32\drivers\CSCrySec.sys

2010-09-13 15:40 . 2009-12-14 10:44        39352        ----a-w-        c:\windows\system32\drivers\CSVirtualDiskDrv.sys

2010-09-13 15:39 . 2010-09-13 15:39        --------        d-----w-        c:\programme\Gemeinsame Dateien\InfoWatch

2010-09-13 15:39 . 2010-09-15 16:29        --------        d-----w-        c:\dokumente und einstellungen\All Users\Anwendungsdaten\Kaspersky Lab

2010-09-13 15:39 . 2010-09-13 15:39        --------        d-----w-        c:\programme\Kaspersky Lab

2010-09-13 12:19 . 2010-09-13 12:19        --------        d-----w-        c:\dokumente und einstellungen\All Users\Anwendungsdaten\Kaspersky Lab Setup Files

2010-09-13 08:37 . 2010-09-13 16:51        --------        d---a-w-        C:\Kaspersky Rescue Disk 10.0

2010-09-10 11:02 . 2010-09-10 11:02        --------        d-----w-        c:\windows\system32\wbem\Repository

2010-09-10 10:23 . 2010-09-10 11:01        --------        d-----w-        c:\programme\Malwarebytes' Anti-Malware(2)

2010-09-10 10:03 . 2010-09-10 10:03        --------        d-sh--w-        c:\dokumente und einstellungen\NetworkService\IETldCache

2010-09-10 09:18 . 2010-09-10 11:01        --------        d-----w-        c:\programme\Malwarebytes' Anti-Malware(3)

2010-09-10 07:55 . 2010-09-10 07:55        --------        d-----w-        c:\dokumente und einstellungen\Administrator\Anwendungsdaten\Malwarebytes

2010-09-10 07:55 . 2010-09-10 07:55        --------        d-----w-        c:\dokumente und einstellungen\All Users\Anwendungsdaten\Malwarebytes

2010-09-10 07:46 . 2010-09-10 07:46        --------        d-----w-        c:\dokumente und einstellungen\Administrator\PrivacIE

2010-09-10 07:46 . 2010-09-10 07:46        --------        d-----w-        c:\dokumente und einstellungen\Administrator\IETldCache

2010-09-07 12:27 . 2010-09-07 12:27        --------        d-----w-        c:\programme\iPod

2010-09-07 12:27 . 2010-09-07 12:27        --------        d-----w-        c:\programme\iTunes

2010-09-07 12:25 . 2010-09-07 12:25        --------        d-----w-        c:\programme\QuickTime

2010-09-07 12:20 . 2010-09-07 12:20        73000        ----a-w-        c:\dokumente und einstellungen\All Users\Anwendungsdaten\Apple Computer\Installer Cache\iTunes 10.0.0.68\SetupAdmin.exe

2010-08-25 07:43 . 2010-08-25 07:43        --------        d-----w-        c:\programme\Signamus

2010-08-25 07:43 . 2009-12-11 13:57        151640        ----a-w-        c:\windows\system32\authentidate.dll

2010-08-25 07:43 . 2006-04-03 08:28        45126        ----a-w-        c:\windows\system32\wdfsResNl.dll

2010-08-25 07:43 . 2006-03-15 12:13        45126        ----a-w-        c:\windows\system32\wdfsResEn.dll

2010-08-25 07:43 . 2006-01-11 11:36        53248        ----a-w-        c:\windows\system32\webdavnp.dll

2010-08-25 07:43 . 2005-11-28 09:03        177408        ----a-w-        c:\windows\system32\drivers\webdavfs.sys

2010-08-25 07:43 . 2005-10-27 14:14        184320        ----a-w-        c:\windows\system32\bigint.dll
 

.

((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2010-09-15 15:57 . 2008-07-23 08:31        40840        ----a-w-        c:\windows\system32\drivers\termdd.sys

2010-09-15 09:45 . 2008-07-23 09:36        --------        d-----w-        c:\programme\Gemeinsame Dateien\Adobe

2010-09-15 09:32 . 2008-07-23 09:03        --------        d--h--w-        c:\programme\InstallShield Installation Information

2010-09-14 08:42 . 2009-12-07 16:47        --------        d-----w-        c:\programme\Microsoft Silverlight

2010-09-13 10:36 . 2008-07-23 08:24        4224        ----a-w-        c:\windows\system32\drivers\rdpcdd.sys

2010-09-13 08:43 . 2008-07-23 08:24        96406        ----a-w-        c:\windows\system32\perfc007.dat

2010-09-13 08:43 . 2008-07-23 08:24        489350        ----a-w-        c:\windows\system32\perfh007.dat

2010-09-07 12:27 . 2009-02-09 15:56        --------        d-----w-        c:\programme\Gemeinsame Dateien\Apple

2010-08-23 15:08 . 2008-12-07 10:36        --------        d-----w-        c:\dokumente und einstellungen\All Users\Anwendungsdaten\NOS

2010-08-16 08:01 . 2008-07-23 09:37        --------        d-----w-        c:\dokumente und einstellungen\All Users\Anwendungsdaten\Microsoft Help

2010-07-27 12:06 . 2009-03-16 16:00        --------        d-----w-        c:\programme\Safari

2010-07-27 12:04 . 2010-07-27 12:04        71992        ----a-w-        c:\dokumente und einstellungen\All Users\Anwendungsdaten\Apple Computer\Installer Cache\Safari 5.33.16.0\SetupAdmin.exe

2010-06-30 12:28 . 2008-07-23 08:24        149504        ----a-w-        c:\windows\system32\schannel.dll

2010-06-24 12:22 . 2008-07-23 08:24        916480        ----a-w-        c:\windows\system32\wininet.dll

2010-06-24 09:02 . 2008-07-23 08:24        1852032        ----a-w-        c:\windows\system32\win32k.sys

2010-06-21 15:27 . 2008-07-23 08:24        354304        ----a-w-        c:\windows\system32\drivers\srv.sys

2008-12-08 14:08 . 2008-12-08 13:52        7770        ------w-        c:\programme\sqlnet.log

.
 

------- Sigcheck -------
 

[-] 2008-04-14 . 2C04E155045BEA4C475E76D6914B11AC . 513024 . . [5.1.2600.5512] . . c:\windows\system32\winlogon.exe
 

[-] 2008-04-14 . F397BD26256C6BB3FEC8C33F3A8CCBB4 . 1036800 . . [6.00.2900.5512] . . c:\windows\explorer.exe

.

((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))

.

.

*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 

REGEDIT4
 

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\KAVOverlayIcon]

@="{dd230880-495a-11d1-b064-008048ec2fc5}"

[HKEY_CLASSES_ROOT\CLSID\{dd230880-495a-11d1-b064-008048ec2fc5}]

2009-12-25 14:42        129552        ----a-w-        c:\programme\Kaspersky Lab\Kaspersky PURE\shellex.dll
 

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"TOSCDSPD"="c:\programme\TOSHIBA\TOSCDSPD\toscdspd.exe" [2005-04-12 65536]
 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"ITSecMng"="c:\programme\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe" [2007-09-28 75136]

"Toshiba Hotkey Utility"="c:\programme\Toshiba\Windows Utilities\Hotkey.exe" [2008-05-09 1773568]

"TPSMain"="TPSMain.exe" [2005-08-03 266240]

"SmoothView"="c:\programme\TOSHIBA\TOSHIBA Zoom-Dienstprogramm\SmoothView.exe" [2007-05-11 143360]

"DDWMon"="c:\programme\TOSHIBA\TOSHIBA Direct Disc Writer\\ddwmon.exe" [2007-04-26 495616]

"topi"="c:\programme\TOSHIBA\Toshiba Online Product Information\topi.exe" [2007-07-10 581632]

"IgfxTray"="c:\windows\system32\igfxtray.exe" [2008-07-03 150040]

"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2008-07-03 170520]

"Persistence"="c:\windows\system32\igfxpers.exe" [2008-07-03 141848]

"SynTPEnh"="c:\programme\Synaptics\SynTP\SynTPEnh.exe" [2007-11-29 1024000]

"Camera Assistant Software"="c:\program files\Camera Assistant Software for Toshiba\traybar.exe" [2008-04-29 417792]

"Toshiba Controls Utility"="c:\programme\TOSHIBA\Controls\VolumeIndicator.exe" [2008-02-01 77824]

"Acrobat Assistant 8.0"="c:\programme\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe" [2006-10-22 620152]

"TOSUSBSvr"="c:\programme\TOSHIBA\dynadock Utility\TOSUSBSvr.exe" [2007-12-28 274432]

"SSBkgdUpdate"="c:\programme\Gemeinsame Dateien\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" [2003-10-14 155648]

"PaperPort PTD"="c:\programme\ScanSoft\PaperPort\pptd40nt.exe" [2004-03-09 57393]

"IndexSearch"="c:\programme\ScanSoft\PaperPort\IndexSearch.exe" [2004-03-09 40960]

"SetDefPrt"="c:\programme\Brother\Brmfl04e\BrStDvPt.exe" [2004-05-25 49152]

"ControlCenter2.0"="c:\programme\Brother\ControlCenter2\brctrcen.exe" [2004-07-20 851968]

"AppleSyncNotifier"="c:\programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleSyncNotifier.exe" [2010-03-16 47392]

"Adobe Reader Speed Launcher"="c:\programme\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2010-06-20 35760]

"Adobe ARM"="c:\programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe" [2010-06-09 976832]

"QuickTime Task"="c:\programme\QuickTime\qttask.exe" [2010-08-10 421888]

"iTunesHelper"="c:\programme\iTunes\iTunesHelper.exe" [2010-09-01 421160]
 

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]

"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
 

c:\dokumente und einstellungen\All Users\Startmen\Programme\Autostart\

Adobe Acrobat - Schnellstart.lnk - c:\windows\Installer\{AC76BA86-1033-F400-7760-000000000003}\_SC_Acrobat.exe [2008-12-7 295606]

Adobe Reader Synchronizer.lnk - c:\programme\Adobe\Acrobat 8.0\Acrobat\AdobeCollabSync.exe [2006-10-23 734872]

Flashcard-Tray-Icon.lnk - c:\programme\DeTeWe\OC1000ST\ExtFatTool.exe [2006-9-7 49152]

Windows Search.lnk - c:\programme\Windows Desktop Search\WindowsSearch.exe [2008-5-26 123904]
 

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]

"{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "c:\programme\Windows Desktop Search\MSNLNamespaceMgr.dll" [2009-05-24 304128]
 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]

@="Service"
 

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus]

"DisableMonitoring"=dword:00000001
 

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]

"%windir%\\Network Diagnostic\\xpnetdiag.exe"=

"%windir%\\system32\\sessmgr.exe"=

"c:\\Programme\\Microsoft Office\\Office12\\OUTLOOK.EXE"=

"c:\\Programme\\Messenger\\msmsgs.exe"=

"c:\\Programme\\Windows Live\\Messenger\\wlcsdk.exe"=

"c:\\Programme\\Windows Live\\Messenger\\msnmsgr.exe"=

"c:\\Programme\\QuickTime\\QuickTimePlayer.exe"=

"c:\\WINDOWS\\pchealth\\helpctr\\binaries\\HelpCtr.exe"=

"c:\\Programme\\LaCie\\Ethernet Agent\\LaCie Ethernet Agent.exe"=

"c:\\Programme\\Skype\\Plugin Manager\\skypePM.exe"=

"c:\\Programme\\Bonjour\\mDNSResponder.exe"=

"c:\\Programme\\Skype\\Phone\\Skype.exe"=

"c:\\Programme\\iTunes\\iTunes.exe"=
 

R0 CSCrySec;InfoWatch Encrypt Sector Library driver;c:\windows\system32\drivers\CSCrySec.sys [13.09.2010 17:40 88632]

R0 ExtFat;ExtFat;c:\windows\system32\drivers\extfat.sys [30.10.2003 08:48 38016]

R0 KLBG;Kaspersky Lab Boot Guard Driver;c:\windows\system32\drivers\klbg.sys [14.10.2009 20:18 36880]

R0 Lbd;Lbd;c:\windows\system32\drivers\Lbd.sys [15.09.2010 12:08 64288]

R3 O2MDRDR;O2MDRDR;c:\windows\system32\drivers\o2media.sys [23.07.2008 11:03 51160]

R3 QIOMem;Generic IO & Memory Access;c:\windows\system32\drivers\QIOMem.sys [29.05.2007 10:01 6912]

S1 CSVirtualDiskDrv;InfoWatch Virtual Disk driver;c:\windows\system32\drivers\CSVirtualDiskDrv.sys [13.09.2010 17:40 39352]

S2 CSObjectsSrv;Verwaltungsservice vom CryproStorage-System;c:\programme\Gemeinsame Dateien\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe [21.12.2009 17:34 743992]

S2 DisplayLinkService;DisplayLink Service;c:\programme\DisplayLink Core Software\DisplayLinkService.exe [13.12.2007 11:28 439656]

S2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;c:\programme\Lavasoft\Ad-Aware\AAWService.exe [08.09.2010 14:59 1355928]

S2 tdudf;TOSHIBA UDF File System Driver;c:\windows\system32\drivers\tdudf.sys [26.03.2007 12:22 105856]

S2 trudf;TOSHIBA DVD-RAM UDF File System Driver;c:\windows\system32\drivers\trudf.sys [19.02.2007 12:15 134016]

S2 webdavfs;WebDAV File System;c:\windows\system32\drivers\webdavfs.sys [25.08.2010 09:43 177408]

S3 brfilt;Brother MFC-Filtertreiber;c:\windows\system32\drivers\BrFilt.sys [08.12.2008 14:09 2944]

S3 BrSerWDM;Brother WDM-Treiber (seriell);c:\windows\system32\drivers\BrSerWdm.sys [08.12.2008 14:08 61952]

S3 BrUsbMdm;Brother MFC-nur-Fax-Modem (USB);c:\windows\system32\drivers\BrUsbMdm.sys [08.12.2008 14:09 11008]

S3 BrUsbScn;Brother MFC-Scannertreiber (USB);c:\windows\system32\drivers\BrUsbScn.sys [08.12.2008 14:09 10368]

S3 CM1063264;C-Media CM106 Like Sound UDAX Interface;c:\windows\system32\drivers\CM106.sys [08.12.2008 12:47 1306112]

S3 CnxtHdAudAddService;Microsoft UAA Function Driver for High Definition Audio Service;c:\windows\system32\drivers\CHDAud.sys [23.07.2008 10:40 732160]

S3 DisplayLinkGA;DisplayLinkGA;c:\windows\system32\drivers\DisplayLinkGAport.sys [09.03.2007 13:09 25704]

S3 DisplayLinkmirror;DisplayLinkmirror;c:\windows\system32\drivers\DisplayLinkmirrorport.sys [09.03.2007 13:16 23400]

S3 DisplayLinkUsbPort;DisplayLink USB Device;c:\windows\system32\drivers\DisplayLinkUsbPort.sys [08.12.2008 12:42 20992]

S3 IntcHdmiAddService;Intel(R) High Definition Audio HDMI Service;c:\windows\system32\drivers\IntcHdmi.sys [04.12.2008 23:32 110080]

S3 klim5;Kaspersky Anti-Virus NDIS Filter;c:\windows\system32\drivers\klim5.sys [14.09.2009 13:42 32272]

S3 klmouflt;Kaspersky Lab KLMOUFLT;c:\windows\system32\drivers\klmouflt.sys [02.10.2009 18:39 19472]

S3 nosGetPlusHelper;getPlus(R) Helper 3004;c:\windows\System32\svchost.exe -k nosGetPlusHelper [23.07.2008 10:24 14336]
 

--- Andere Dienste/Treiber im Speicher ---
 

*NewlyCreated* - MDMXSDK
 

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]

getPlusHelper        REG_MULTI_SZ           getPlusHelper

nosGetPlusHelper        REG_MULTI_SZ           nosGetPlusHelper

.

Inhalt des "geplante Tasks" Ordners
 

2010-09-15 c:\windows\Tasks\Ad-Aware Update (Weekly).job

- c:\programme\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2010-09-08 12:59]
 

2010-09-14 c:\windows\Tasks\AppleSoftwareUpdate.job

- c:\programme\Apple Software Update\SoftwareUpdate.exe [2008-07-30 11:34]
 

2008-12-04 c:\windows\Tasks\Registrierungserinnerung 1.job

- c:\windows\system32\OOBE\oobebaln.exe [2008-07-23 12:00]
 

2008-12-04 c:\windows\Tasks\Registrierungserinnerung 3.job

- c:\windows\system32\OOBE\oobebaln.exe [2008-07-23 12:00]

.

.

------- Zusätzlicher Suchlauf -------

.

mStart Page = about:blank

.
 

**************************************************************************
 

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, h**p://www.gmer.net

Rootkit scan 2010-09-15 21:01

Windows 5.1.2600 Service Pack 3 NTFS
 

Scanne versteckte Prozesse... 
 

Scanne versteckte Autostarteinträge... 
 

Scanne versteckte Dateien... 
 

Scan erfolgreich abgeschlossen

versteckte Dateien: 0
 

**************************************************************************

.

--------------------- Gesperrte Registrierungsschluessel ---------------------
 

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]

@Denied: (A 2) (Everyone)

@="FlashBroker"

"LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10i_ActiveX.exe,-101"
 

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]

"Enabled"=dword:00000001
 

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]

@="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10i_ActiveX.exe"
 

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
 

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]

@Denied: (A 2) (Everyone)

@="IFlashBroker4"
 

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]

@="{00020424-0000-0000-C000-000000000046}"
 

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

"Version"="1.0"

.

Zeit der Fertigstellung: 2010-09-15  21:02:26

ComboFix-quarantined-files.txt  2010-09-15 19:02

ComboFix2.txt  2010-09-15 16:44

ComboFix3.txt  2010-09-15 15:44
 

Vor Suchlauf: 17 Verzeichnis(se), 80.884.838.400 Bytes frei

Nach Suchlauf: 18 Verzeichnis(se), 80.869.982.208 Bytes frei
 

- - End Of File - - AB8D3700AA037D6DEEC196997F83FCC0
--- --- ---