Your Computer is infected!

#16 REGEDIT4

; Registry Search 2.0 by Bobbi Flekman © 2005
; Version: 2.0.0.1

; Results at 06.04.2005 13:47:48 for strings:
; 'msdndr'
; Strings excluded from search:
; (None)
; Search in:
; Registry Keys Registry Values Registry Data
; HKEY_LOCAL_MACHINE HKEY_USERS


[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_MSDNDR]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_MSDNDR\0000]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_MSDNDR\0000]
"Service"="msdndr"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\MSDNDDrv]
; Contents of value:
; \??\C:\WINDOWS\system32\msdndr.sys
"ImagePath"=hex(2):5c,3f,3f,5c,43,3a,5c,57,49,4e,44,4f,57,53,5c,73,79,73,74,65,\
6d,33,32,5c,6d,73,64,6e,64,72,2e,73,79,73,00

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\msdndr]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\msdndr]
; Contents of value:
; C:\WINDOWS\system32\msdndr.pif
"ImagePath"=hex(2):43,3a,5c,57,49,4e,44,4f,57,53,5c,73,79,73,74,65,6d,33,32,5c,\
6d,73,64,6e,64,72,2e,70,69,66,00

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\msdndr\Security]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\msdndr\Enum]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\msdndr\Enum]
"0"="Root\\LEGACY_MSDNDR\\0000"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_MSDNDR]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_MSDNDR\0000]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_MSDNDR\0000]
"Service"="msdndr"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\MSDNDDrv]
; Contents of value:
; \??\C:\WINDOWS\system32\msdndr.sys
"ImagePath"=hex(2):5c,3f,3f,5c,43,3a,5c,57,49,4e,44,4f,57,53,5c,73,79,73,74,65,\
6d,33,32,5c,6d,73,64,6e,64,72,2e,73,79,73,00

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\msdndr]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\msdndr]
; Contents of value:
; C:\WINDOWS\system32\msdndr.pif
"ImagePath"=hex(2):43,3a,5c,57,49,4e,44,4f,57,53,5c,73,79,73,74,65,6d,33,32,5c,\
6d,73,64,6e,64,72,2e,70,69,66,00

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\msdndr\Security]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MSDNDR]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MSDNDR\0000]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MSDNDR\0000]
"Service"="msdndr"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MSDNDDrv]
; Contents of value:
; \??\C:\WINDOWS\system32\msdndr.sys
"ImagePath"=hex(2):5c,3f,3f,5c,43,3a,5c,57,49,4e,44,4f,57,53,5c,73,79,73,74,65,\
6d,33,32,5c,6d,73,64,6e,64,72,2e,73,79,73,00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\msdndr]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\msdndr]
; Contents of value:
; C:\WINDOWS\system32\msdndr.pif
"ImagePath"=hex(2):43,3a,5c,57,49,4e,44,4f,57,53,5c,73,79,73,74,65,6d,33,32,5c,\
6d,73,64,6e,64,72,2e,70,69,66,00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\msdndr\Security]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\msdndr\Enum]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\msdndr\Enum]
"0"="Root\\LEGACY_MSDNDR\\0000"

; End Of The Log...

#17 Start -- Ausführen -- regedit (reinschreiben)

Sollte man Probleme haben, die Einträge zu löschen,
Legacy_ .....kann nicht gelöscht werden. Fehler beim Löschen des Schlüssels,
dann gehe mit Rechtsklick im Kontextmenü auf: "Berechtigungen" Setze das Häkchen bei "Vollzugriff zulassen"
Übernehmen, OK
Danach sollte(n) sich der(die) betreffenden Schlüssel löschen lassen.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_MSDNDR\0000
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\msdndr
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_MSDNDR\0000
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\msdndr
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MSDNDR\0000
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\msdndr

PC neustarten
__________
MfG Sabina

rund um die PC-Sicherheit