Unknown Malware found csdiv.dll

[Sven Carstens <sven.carstens () blinker-links de>]

Hi list,

a friend of mine caught some really pain in the ass piece of malware.
As I didn't find any references to it via google, I'm posting a link, so
the real experts out there have a new toy to play with.

Malware http://www.demoserver.de/csdiv.dll_malware

The file itself is not found by AdAware. But it seems after getting
started it drops some well known other parts which are recognized and
removed by AdAware.

The csdiv.dll is started on starting IE via an url like 
res://csdiv.dll/index.html#

Anyway I didn't find the injection point in the registry and searching all
files on disk for the dll name brought nothing at all.
What it found was some logfiles, dated on 2004-06-28 (same date as the dll).
These seem to be some installer logfiles.

Logfile http://www.demoserver.de/logfile_malware

CU Sven