mcfCC4.dll - mcfdrv.sys - Goldrun

mcfCC4.dll

W32.Starimp - WORM_GOLDUN.A

HijackThis

O20 - Winlogon Notify: mcfCC4 - mcfCC4.dll

%System%\mcfCC4.dll
%System%\mcfdrv.sys

datfindbat

Verzeichnis von C:\WINDOWS\system32
13.09.2005 13:40 0 1lo.exe
13.09.2005 13:37 0 02.exe
13.09.2005 13:37 0 unix.exe
13.09.2005 13:37 0 backup.exe
13.09.2005 13:37 11.213 ipwf.exe

REGEDIT4 [-HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\mcfdrv] [-HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\ENUM\ROOT\LEGACY_MCFDRV] [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\mcfCC4]

http://board.protecus.de/t18796.htm