| |
| |||||||
Log-Analyse und Auswertung: Windows Explorer funktioniert nicht mehr / Startet immer wieder euWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML |
 |
28.02.2012, 09:36
| #1 |
 |  Windows Explorer funktioniert nicht mehr / Startet immer wieder eu Hallo zusammen, ich hoffe ich halte mich hier an eure regeln, denn so ganz im computerwesen, bin ich nicht drin  Ich habe jetzt also alles gemacht, was hier verlangt wird. Ich habe auch diese 2 Ordner auf meinem Rechner, die dieses "Backup" oder wie würde man sagen, gemacht hat. Ich glaube "Logfiles". Aber wo soll ich die hier reinstellen? Das versteh ich nicht?! Um aufs problem zu kommen. Ich habe eine email erhalten, die eine "booking reservation" beinhaltete. Und da ich vor 2 wochen mein portmonaie verloren habe, hab ich diese mail geöffnet, auch wenn sie im SPAM_Ordner war. Ich weiss, dass war selten blöde  Ich bin mir zu 99% sicher, dass es an dieser mail liegt aber wissen tu ich es leider nicht.Naja seit heute früh kann man kaum noch was machen. laufend öffnet sich das fenster Windows-Explorer funktioniert nicht / es wird nach einer Lösung gesucht und anschließend öffnet sich das gleiche fenster nur mit dem Text: Windows Explorer wird neu gestartet. Ich hab mir erkundigt und keine konnte mir helfen, woran es liegen könnte. jeder sprach von einem virus oder ähnlichem. Ich habe grundsätzlich "Spybot" und "Anti Vira" auf meinem Laptop aber keines der Programme fand etwas. das dümmste von allem ist jedoch, dass ich keine daten für eine systemwiederherstellung habe ich wollts ja machen aber es habe nie eine sicherung vorgenommen. ich habe es wohl einfach vergessen.Und laufend geht dieses dumme fenster auf. gott sei dank, funktioniert das internet weiter aber sehr sehr langsam. sooo....ich denke, dass das alles war. und hoffe, dass ich mich an eure regeln halte oder gehalten habe. ich danke euch im vorraus. Hier die Berichte: . DDS (Ver_2011-08-26.01) - NTFSAMD64 Internet Explorer: 9.0.8112.16421 BrowserJavaVersion: 1.6.0_29 Run by Richie at 9:09:39 on 2012-02-28 Microsoft Windows 7 Home Premium 6.1.7601.1.1252.49.1031.18.3956.2398 [GMT 1:00] . SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . ============== Running Processes =============== . C:\Windows\system32\wininit.exe C:\Windows\system32\lsm.exe C:\Windows\system32\svchost.exe -k DcomLaunch C:\Windows\system32\svchost.exe -k RPCSS C:\Windows\system32\atiesrxx.exe C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted C:\Windows\system32\svchost.exe -k netsvcs C:\Windows\system32\svchost.exe -k LocalService C:\Windows\system32\svchost.exe -k NetworkService C:\Windows\system32\atieclxx.exe C:\Windows\System32\spoolsv.exe C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork C:\Program Files\LSI SoftModem\agr64svc.exe C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe C:\Program Files (x86)\Application Updater\ApplicationUpdater.exe C:\Windows\system32\Dwm.exe C:\Program Files\Bonjour\mDNSResponder.exe C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation C:\Program Files (x86)\Acer\Registration\GregHSRW.exe C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBService.exe C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe C:\Windows\SysWOW64\IoctlSvc.exe C:\Windows\system32\svchost.exe -k imgsvc C:\Program Files\Acer\Acer Updater\UpdaterService.exe C:\Windows\System32\svchost.exe -k secsvcs C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe C:\Program Files (x86)\Mozilla Firefox\firefox.exe C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe C:\Program Files (x86)\Internet Explorer\iexplore.exe C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe C:\Windows\PLFSetI.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE C:\Program Files\Windows Sidebar\sidebar.exe C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexStoreSvr.exe C:\Windows\system32\SearchIndexer.exe C:\Program Files (x86)\Internet Explorer\iexplore.exe C:\Windows\System32\svchost.exe -k WerSvcGroup C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe C:\Program Files (x86)\Internet Explorer\iexplore.exe C:\Program Files (x86)\Internet Explorer\iexplore.exe C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe C:\Program Files\Synaptics\SynTP\SynTPHelper.exe C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexingService.exe C:\Program Files (x86)\Launch Manager\LManager.exe C:\Program Files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe C:\Program Files (x86)\Acer Arcade Deluxe\PlayMovie\PMVService.exe C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe C:\Program Files (x86)\iTunes\iTunesHelper.exe C:\Program Files (x86)\Canon\Canon IJ Network Scan Utility\CNMNSUT.exe C:\Windows\system32\wbem\unsecapp.exe C:\Windows\system32\wbem\wmiprvse.exe C:\Program Files\iPod\bin\iPodService.exe C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe C:\Program Files\Windows Media Player\wmpnetwk.exe C:\Program Files (x86)\Internet Explorer\iexplore.exe C:\Users\Richie\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\AR1LK43H\Defogger.exe C:\Windows\system32\conhost.exe C:\Windows\explorer.exe C:\Windows\system32\WerFault.exe C:\Windows\system32\DllHost.exe C:\Windows\system32\DllHost.exe C:\Windows\SysWOW64\cmd.exe C:\Windows\system32\conhost.exe C:\Windows\SysWOW64\cscript.exe C:\Windows\system32\wbem\wmiprvse.exe . ============== Pseudo HJT Report =============== . uStart Page = hxxp://www.gmx.de/ uDefault_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&m=aspire_5740dg&r=27360810l206l0408z1h5t5441i29s mDefault_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&m=aspire_5740dg&r=27360810l206l0408z1h5t5441i29s mStart Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&m=aspire_5740dg&r=27360810l206l0408z1h5t5441i29s uInternet Settings,ProxyOverride = *.local uURLSearchHooks: MyPlayCity Toolbar: {4724c5d8-dfa7-417a-a2f5-1eabfee9b4ac} - C:\Program Files (x86)\MyPlayCity\tbMyPl.dll uURLSearchHooks: SearchSettings Class: {e312764e-7706-43f1-8dab-fcdd2b1e416d} - C:\Program Files (x86)\Search Settings\SearchSettings.dll mURLSearchHooks: MyPlayCity Toolbar: {4724c5d8-dfa7-417a-a2f5-1eabfee9b4ac} - C:\Program Files (x86)\MyPlayCity\tbMyPl.dll mWinlogon: Userinit=userinit.exe BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll BHO: Canon Easy-WebPrint EX BHO: {3785d0ad-bfff-47f6-bf5b-a587c162fed9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll BHO: MyPlayCity Toolbar: {4724c5d8-dfa7-417a-a2f5-1eabfee9b4ac} - C:\Program Files (x86)\MyPlayCity\tbMyPl.dll BHO: Spybot-S&D IE Protection: {53707962-6f74-2d53-2644-206d7942484f} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll BHO: {5C255C8A-E604-49b4-9D64-90988571CECB} - No File BHO: {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - No File BHO: Windows Live Anmelde-Hilfsprogramm: {9030d464-4c02-4abf-8ecc-5164760863c6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll BHO: Office Document Cache Handler: {b4f3a835-0e21-4959-ba22-42b3008e02ff} - C:\PROGRA~2\MICROS~2\Office14\URLREDIR.DLL BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll BHO: SearchSettings Class: {e312764e-7706-43f1-8dab-fcdd2b1e416d} - C:\Program Files (x86)\Search Settings\SearchSettings.dll TB: MyPlayCity Toolbar: {4724c5d8-dfa7-417a-a2f5-1eabfee9b4ac} - C:\Program Files (x86)\MyPlayCity\tbMyPl.dll TB: Canon Easy-WebPrint EX: {759d9886-0c6f-4498-bab6-4a5f47c6c72f} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll EB: Canon Easy-WebPrint EX: {21347690-ec41-4f9a-8887-1f4aee672439} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll uRun: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun uRun: [SpybotSD TeaTimer] C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe uRun: [EA Core] "C:\Program Files (x86)\Electronic Arts\EADM\Core.exe" -silent uRun: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexStoreSvr.exe" ASO-616B5711-6DAE-4795-A05F-39A1E5104020 mRun: [Adobe Reader Speed Launcher] "c:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" mRun: [BackupManagerTray] "C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe" -h -k mRun: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun mRun: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe mRun: [ArcadeDeluxeAgent] "C:\Program Files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe" mRun: [PlayMovie] "C:\Program Files (x86)\Acer Arcade Deluxe\PlayMovie\PMVService.exe" mRun: [SearchSettings] C:\Program Files (x86)\Search Settings\SearchSettings.exe mRun: [NeroCheck] C:\Windows\system32\NeroCheck.exe mRun: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime mRun: [NBKeyScan] "C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBKeyScan.exe" mRun: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" mRun: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" mRun: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe" mRun: [IJNetworkScanUtility] C:\Program Files (x86)\Canon\Canon IJ Network Scan Utility\CNMNSUT.exe StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\BLUETO~1.LNK - C:\Program Files (x86)\WIDCOMM\Bluetooth Software\BTTray.exe mPolicies-explorer: NoActiveDesktop = 1 (0x1) mPolicies-explorer: NoActiveDesktopChanges = 1 (0x1) mPolicies-system: ConsentPromptBehaviorAdmin = 5 (0x5) mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3) mPolicies-system: EnableUIADesktopToggle = 0 (0x0) IE: An OneNote s&enden - C:\PROGRA~2\MICROS~2\Office14\ONBttnIE.dll/105 IE: Bild an &Bluetooth-Gerät senden... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm IE: E&xport to Microsoft Excel - C:\PROGRA~2\MICROS~2\Office12\EXCEL.EXE/3000 IE: Google Sidewiki... - C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll/cmsidewiki.html IE: Nach Microsoft E&xcel exportieren - C:\PROGRA~2\MICROS~2\Office14\EXCEL.EXE/3000 IE: Seite an &Bluetooth-Gerät senden... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm IE: {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll IE: {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab TCP: DhcpNameServer = 192.168.2.1 TCP: Interfaces\{079E895E-A34A-44CA-AB30-B5385D4D0B79} : DhcpNameServer = 192.168.2.1 TCP: Interfaces\{BD2122B5-0DFA-42AB-9148-FD90789C0BB2} : DhcpNameServer = 139.7.30.126 139.7.30.125 TCP: Interfaces\{D3177C3C-EE10-4485-88A9-1938E849314D} : DhcpNameServer = 192.168.2.1 TCP: Interfaces\{D3177C3C-EE10-4485-88A9-1938E849314D}\2457D62457D6 : DhcpNameServer = 195.234.128.7 195.234.128.16 85.233.58.60 TCP: Interfaces\{D3177C3C-EE10-4485-88A9-1938E849314D}\2564350284F4D454 : DhcpNameServer = 192.168.2.1 TCP: Interfaces\{D3177C3C-EE10-4485-88A9-1938E849314D}\5416379724F687D2131413630373 : DhcpNameServer = 192.168.2.1 TCP: Interfaces\{D3177C3C-EE10-4485-88A9-1938E849314D}\5416379724F687D2239333131363 : DhcpNameServer = 192.168.2.1 TCP: Interfaces\{D3177C3C-EE10-4485-88A9-1938E849314D}\5416379724F687D2730383643373 : DhcpNameServer = 192.168.2.1 Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\MSOXMLMF.DLL {18DF081C-E8AD-4283-A596-FA578C2EBDC3} {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} {4724c5d8-dfa7-417a-a2f5-1eabfee9b4ac} {53707962-6F74-2D53-2644-206D7942484F} BHO-X64: {5C255C8A-E604-49b4-9D64-90988571CECB} - No File BHO-X64: {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - No File {9030D464-4C02-4ABF-8ECC-5164760863C6} {B4F3A835-0E21-4959-BA22-42B3008E02FF} {DBC80044-A445-435b-BC74-9C25C1C588A9} {E312764E-7706-43F1-8DAB-FCDD2B1E416D} {4724c5d8-dfa7-417a-a2f5-1eabfee9b4ac} {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} EB-X64: {21347690-EC41-4F9A-8887-1F4AEE672439} - No File mRun-x64: [Adobe Reader Speed Launcher] "c:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" mRun-x64: [BackupManagerTray] "C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe" -h -k mRun-x64: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun mRun-x64: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe mRun-x64: [ArcadeDeluxeAgent] "C:\Program Files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe" mRun-x64: [PlayMovie] "C:\Program Files (x86)\Acer Arcade Deluxe\PlayMovie\PMVService.exe" mRun-x64: [SearchSettings] C:\Program Files (x86)\Search Settings\SearchSettings.exe mRun-x64: [NeroCheck] C:\Windows\system32\NeroCheck.exe mRun-x64: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime mRun-x64: [NBKeyScan] "C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBKeyScan.exe" mRun-x64: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" mRun-x64: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" mRun-x64: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe" mRun-x64: [IJNetworkScanUtility] C:\Program Files (x86)\Canon\Canon IJ Network Scan Utility\CNMNSUT.exe IE-X64: {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm . ================= FIREFOX =================== . FF - ProfilePath - C:\Users\Richie\AppData\Roaming\Mozilla\Firefox\Profiles\wec2ss4j.default\ FF - prefs.js: browser.startup.homepage - hxxp://www.gmx.de FF - prefs.js: keyword.URL - hxxp://search.babylon.com/?babsrc=toolbar2&q= FF - component: C:\Program Files (x86)\Search Settings\FF\components\SearchSettingsFF.dll FF - plugin: C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL FF - plugin: C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL FF - plugin: C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL FF - plugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll FF - plugin: C:\Program Files (x86)\Google\Update\1.3.21.99\npGoogleUpdate3.dll FF - plugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll FF - plugin: c:\Program Files (x86)\Microsoft Silverlight\5.0.61118.0\npctrlui.dll FF - plugin: C:\Program Files (x86)\Mozilla Firefox\plugins\npdeployJava1.dll FF - plugin: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll FF - plugin: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll . ============= SERVICES / DRIVERS =============== . R0 tclondrv;tclondrv;C:\Windows\system32\DRIVERS\tclondrv.sys --> C:\Windows\system32\DRIVERS\tclondrv.sys [?] R1 vwififlt;Virtual WiFi Filter Driver;C:\Windows\system32\DRIVERS\vwififlt.sys --> C:\Windows\system32\DRIVERS\vwififlt.sys [?] R2 AMD External Events Utility;AMD External Events Utility;C:\Windows\system32\atiesrxx.exe --> C:\Windows\system32\atiesrxx.exe [?] R2 Application Updater;Application Updater;C:\Program Files (x86)\Application Updater\ApplicationUpdater.exe [2010-1-7 380928] R2 ePowerSvc;Acer ePower Service;C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe [2010-8-3 844320] R2 Greg_Service;GRegService;C:\Program Files (x86)\Acer\Registration\GregHSRW.exe [2009-8-28 1150496] R2 NTI IScheduleSvc;NTI IScheduleSvc;C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe [2009-9-25 62720] R2 NTISchedulerSvc;NTI Backup Now 5 Scheduler Service;C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe [2009-6-18 144640] R2 TurboB;Turbo Boost UI Monitor driver;C:\Windows\system32\DRIVERS\TurboB.sys --> C:\Windows\system32\DRIVERS\TurboB.sys [?] R3 HECIx64;Intel(R) Management Engine Interface;C:\Windows\system32\DRIVERS\HECIx64.sys --> C:\Windows\system32\DRIVERS\HECIx64.sys [?] R3 Impcd;Impcd;C:\Windows\system32\DRIVERS\Impcd.sys --> C:\Windows\system32\DRIVERS\Impcd.sys [?] R3 k57nd60a;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0;C:\Windows\system32\DRIVERS\k57nd60a.sys --> C:\Windows\system32\DRIVERS\k57nd60a.sys [?] R3 vwifimp;Microsoft Virtual WiFi Miniport Service;C:\Windows\system32\DRIVERS\vwifimp.sys --> C:\Windows\system32\DRIVERS\vwifimp.sys [?] S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384] S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576] S2 gupdate;Google Update Service (gupdate);C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-8-3 136176] S3 AmUStor;AM USB Stroage Driver;C:\Windows\system32\drivers\AmUStor.SYS --> C:\Windows\system32\drivers\AmUStor.SYS [?] S3 Boonty Games;Boonty Games;C:\Program Files (x86)\Common Files\BOONTY Shared\Service\Boonty.exe [2010-8-4 69120] S3 btusbflt;Bluetooth USB Filter;C:\Windows\system32\drivers\btusbflt.sys --> C:\Windows\system32\drivers\btusbflt.sys [?] S3 btwl2cap;Bluetooth L2CAP Service;C:\Windows\system32\DRIVERS\btwl2cap.sys --> C:\Windows\system32\DRIVERS\btwl2cap.sys [?] S3 gupdatem;Google Update-Dienst (gupdatem);C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-8-3 136176] S3 Netaapl;Apple Mobile Device Ethernet Service;C:\Windows\system32\DRIVERS\netaapl64.sys --> C:\Windows\system32\DRIVERS\netaapl64.sys [?] S3 NTIBackupSvc;NTI Backup Now 5 Backup Service;C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe [2009-6-18 50432] S3 TsUsbFlt;TsUsbFlt;C:\Windows\system32\drivers\tsusbflt.sys --> C:\Windows\system32\drivers\tsusbflt.sys [?] S3 USBAAPL64;Apple Mobile USB Driver;C:\Windows\system32\Drivers\usbaapl64.sys --> C:\Windows\system32\Drivers\usbaapl64.sys [?] . =============== Created Last 30 ================ . 2012-02-28 07:06:25 -------- d-----w- C:\ProgramData\Avira 2012-02-28 07:06:25 -------- d-----w- C:\Program Files (x86)\Avira 2012-02-28 07:02:40 8643640 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{D7BDC377-9027-4DAE-9842-BFF615DF352B}\mpengine.dll 2012-02-22 12:02:17 258048 ----a-w- C:\Windows\SysWow64\GplMpgDec.ax 2012-02-22 12:02:16 417792 ----a-w- C:\Windows\SysWow64\ac3filter.ax 2012-02-22 12:02:16 356352 ----a-w- C:\Windows\SysWow64\RealMediaSplitter.ax 2012-02-22 12:02:16 -------- d-----w- C:\Program Files (x86)\Free iPod Video Converter 2012-02-17 11:08:22 -------- d-----w- C:\ProgramData\TuneClone 2012-02-17 11:07:56 26856 ----a-w- C:\Windows\System32\drivers\tclondrv.sys 2012-02-15 06:11:39 509952 ----a-w- C:\Windows\System32\ntshrui.dll 2012-02-15 06:11:39 442880 ----a-w- C:\Windows\SysWow64\ntshrui.dll 2012-02-15 06:11:38 515584 ----a-w- C:\Windows\System32\timedate.cpl 2012-02-15 06:11:38 478720 ----a-w- C:\Windows\SysWow64\timedate.cpl 2012-02-15 06:11:37 498688 ----a-w- C:\Windows\System32\drivers\afd.sys 2012-02-15 06:11:37 3145728 ----a-w- C:\Windows\System32\win32k.sys 2012-02-15 06:11:35 690688 ----a-w- C:\Windows\SysWow64\msvcrt.dll 2012-02-15 06:11:35 634880 ----a-w- C:\Windows\System32\msvcrt.dll . ==================== Find3M ==================== . 2012-01-29 04:10:42 279656 ------w- C:\Windows\System32\MpSigStub.exe 2012-01-10 07:20:04 175616 ----a-w- C:\Windows\System32\msclmd.dll 2012-01-10 07:20:04 152576 ----a-w- C:\Windows\SysWow64\msclmd.dll 2011-12-14 07:11:03 2308096 ----a-w- C:\Windows\System32\jscript9.dll 2011-12-14 07:04:30 1390080 ----a-w- C:\Windows\System32\wininet.dll 2011-12-14 07:03:38 1493504 ----a-w- C:\Windows\System32\inetcpl.cpl 2011-12-14 06:57:28 2382848 ----a-w- C:\Windows\System32\mshtml.tlb 2011-12-14 03:04:54 1798656 ----a-w- C:\Windows\SysWow64\jscript9.dll 2011-12-14 02:57:18 1127424 ----a-w- C:\Windows\SysWow64\wininet.dll 2011-12-14 02:56:58 1427456 ----a-w- C:\Windows\SysWow64\inetcpl.cpl 2011-12-14 02:50:04 2382848 ----a-w- C:\Windows\SysWow64\mshtml.tlb 2011-12-01 01:52:12 414368 ----a-w- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl 2011-06-22 08:40:13 1540912 ----a-w- C:\Program Files (x86)\TotallyFreeBurner-7.exe 2011-04-02 13:48:38 25329664 ----a-w- C:\Program Files\vlc_player_1.1.8.exe 2010-08-03 17:07:18 2568656 ----a-w- C:\Program Files\install_flash_player.exe . ============= FINISH: 9:17:43,92 =============== . UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG. IF REQUESTED, ZIP IT UP & ATTACH IT . DDS (Ver_2011-08-26.01) . Microsoft Windows 7 Home Premium Boot Device: \Device\HarddiskVolume2 Install Date: 03.08.2010 17:21:35 System Uptime: 28.02.2012 08:31:05 (1 hours ago) . Motherboard: Acer | | Aspire 5740DG Processor: Intel(R) Core(TM) i5 CPU M 430 @ 2.27GHz | CPU 1 | 1858/133mhz . ==== Disk Partitions ========================= . . ==== Installed Programs ====================== . . Update for Microsoft Office 2007 (KB2508958) Acer Arcade Deluxe Acer Backup Manager Acer Crystal Eye webcam Ver:1.1.124.1120 Acer ePower Management Acer eRecovery Management Acer GameZone Console Acer GridVista Acer Registration Acer ScreenSaver Acer Updater Acrobat.com Adobe AIR Adobe Reader 9.1 MUI Air Flashback Alcor Micro USB Card Reader Angel-Simulator Apple Application Support Apple Software Update Audials AVS Audio Converter 7 AVS Update Manager 1.0 AVS4YOU Software Navigator 1.4 Backup Manager Basic Canon Easy-WebPrint EX Canon IJ Network Scan Utility Canon IJ Network Tool Canon Inkjet Printer/Scanner/Fax Extended Survey Program Canon Kurzwahlprogramm Canon MP Navigator EX 3.1 Canon MX870 series Benutzerregistrierung Canon Utilities Easy-PhotoPrint EX Canon Utilities My Printer Canon Utilities Solution Menu Catalyst Control Center - Branding Catalyst Control Center Core Implementation Catalyst Control Center Graphics Full Existing Catalyst Control Center Graphics Full New Catalyst Control Center Graphics Light Catalyst Control Center Graphics Previews Vista Catalyst Control Center InstallProxy Catalyst Control Center Localization All ccc-core-static CCC Help Chinese Standard CCC Help Chinese Traditional CCC Help Czech CCC Help Danish CCC Help Dutch CCC Help English CCC Help Finnish CCC Help French CCC Help German CCC Help Greek CCC Help Hungarian CCC Help Italian CCC Help Japanese CCC Help Korean CCC Help Norwegian CCC Help Polish CCC Help Portuguese CCC Help Russian CCC Help Spanish CCC Help Swedish CCC Help Thai CCC Help Turkish Dairy Dash Deer Hunter - The 2005 Season Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition Dream Day First Home DupDetector 3.302 EA Download Manager EA Download Manager UI First Class Flurry Free iPod Video Converter 1.34 FUSSBALL MANAGER 10 Google Earth Google Update Helper IcoFX 1.6.4 Identity Card Intel(R) Management Engine Components Intel(R) Turbo Boost Technology Driver Java Auto Updater Java(TM) 6 Update 29 Junk Mail filter update Launch Manager Merriam Websters Spell Jam Microsoft Choice Guard Microsoft Office 2007 Service Pack 2 (SP2) Microsoft Office 2010 Service Pack 1 (SP1) Microsoft Office Access MUI (German) 2007 Microsoft Office Access MUI (German) 2010 Microsoft Office Enterprise 2007 Microsoft Office Excel MUI (German) 2007 Microsoft Office Excel MUI (German) 2010 Microsoft Office Groove MUI (German) 2007 Microsoft Office Home and Student 2010 Microsoft Office InfoPath MUI (German) 2007 Microsoft Office OneNote MUI (German) 2007 Microsoft Office OneNote MUI (German) 2010 Microsoft Office Outlook MUI (German) 2007 Microsoft Office Outlook MUI (German) 2010 Microsoft Office PowerPoint MUI (German) 2007 Microsoft Office PowerPoint MUI (German) 2010 Microsoft Office PowerPoint Viewer 2007 (German) Microsoft Office Proof (English) 2007 Microsoft Office Proof (English) 2010 Microsoft Office Proof (French) 2007 Microsoft Office Proof (French) 2010 Microsoft Office Proof (German) 2007 Microsoft Office Proof (German) 2010 Microsoft Office Proof (Italian) 2007 Microsoft Office Proof (Italian) 2010 Microsoft Office Proofing (German) 2007 Microsoft Office Proofing (German) 2010 Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) Microsoft Office Publisher MUI (German) 2007 Microsoft Office Publisher MUI (German) 2010 Microsoft Office Shared MUI (German) 2007 Microsoft Office Shared MUI (German) 2010 Microsoft Office Single Image 2010 Microsoft Office Word MUI (German) 2007 Microsoft Office Word MUI (German) 2010 Microsoft PowerPoint Viewer 97 Microsoft SQL Server 2005 Compact Edition [ENU] Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 Microsoft Visual C++ 2005 Redistributable Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 Microsoft Works Mozilla Firefox 10.0.2 (x86 de) MSVCRT MSXML 4.0 SP2 (KB954430) MSXML 4.0 SP2 (KB973688) Nero 8 neroxml NTI Backup Now 5 NTI Backup Now Standard NTI Media Maker 8 PhotoFilmStrip 1.4.0 QuickTime Realtek High Definition Audio Driver Search Settings v1.2.3 Security Update for 2007 Microsoft Office System (KB2288621) Security Update for 2007 Microsoft Office System (KB2288931) Security Update for 2007 Microsoft Office System (KB2345043) Security Update for 2007 Microsoft Office System (KB2553089) Security Update for 2007 Microsoft Office System (KB2553090) Security Update for 2007 Microsoft Office System (KB2584063) Security Update for 2007 Microsoft Office System (KB969559) Security Update for 2007 Microsoft Office System (KB976321) Security Update for Microsoft .NET Framework 4 Client Profile (KB2160841) Security Update for Microsoft .NET Framework 4 Client Profile (KB2446708) Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663) Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870) Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636) Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078) Security Update for Microsoft .NET Framework 4 Client Profile (KB2633870) Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351) Security Update for Microsoft .NET Framework 4 Client Profile DEU Language Pack (KB2478663) Security Update for Microsoft .NET Framework 4 Client Profile DEU Language Pack (KB2518870) Security Update for Microsoft Office 2007 suites (KB2596785) 32-Bit Edition Security Update for Microsoft Office 2010 (KB2553091) Security Update for Microsoft Office 2010 (KB2553096) Security Update for Microsoft Office 2010 (KB2589320) 32-Bit Edition Security Update for Microsoft Office Access 2007 (KB979440) Security Update for Microsoft Office Groove 2007 (KB2552997) Security Update for Microsoft Office InfoPath 2007 (KB2510061) Security Update for Microsoft Office InfoPath 2007 (KB979441) Security Update for Microsoft Office PowerPoint 2007 (KB2596764) 32-Bit Edition Security Update for Microsoft Office PowerPoint 2007 (KB2596912) 32-Bit Edition Security Update for Microsoft Office Publisher 2007 (KB2596705) 32-Bit Edition Security Update for Microsoft Office system 2007 (972581) Security Update for Microsoft Office system 2007 (KB974234) Security Update for Microsoft Office Visio Viewer 2007 (KB973709) Security Update for Microsoft Office Word 2007 (KB2344993) Security Update for Microsoft PowerPoint 2010 (KB2553185) 32-Bit Edition Security Update for Microsoft SharePoint Workspace 2010 (KB2566445) Security Update for Microsoft Visio Viewer 2010 (KB2597170) 32-Bit Edition Spybot - Search & Destroy streamWriter Update für Microsoft Office Excel 2007 Help (KB963678) Update für Microsoft Office Outlook 2007 Help (KB963677) Update für Microsoft Office Powerpoint 2007 Help (KB963669) Update für Microsoft Office Word 2007 Help (KB963665) Update for 2007 Microsoft Office System (KB2284654) Update for 2007 Microsoft Office System (KB967642) Update for Microsoft .NET Framework 4 Client Profile (KB2468871) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) Update for Microsoft Excel 2010 (KB2553439) 32-Bit Edition Update for Microsoft Office 2007 suites (KB2596651) 32-Bit Edition Update for Microsoft Office 2007 suites (KB2596789) 32-Bit Edition Update for Microsoft Office 2007 suites (KB2597998) 32-Bit Edition Update for Microsoft Office 2007 System (KB2539530) Update for Microsoft Office 2010 (KB2494150) Update for Microsoft Office 2010 (KB2553065) Update for Microsoft Office 2010 (KB2553181) 32-Bit Edition Update for Microsoft Office 2010 (KB2553270) 32-Bit Edition Update for Microsoft Office 2010 (KB2553310) 32-Bit Edition Update for Microsoft Office 2010 (KB2553385) 32-Bit Edition Update for Microsoft Office 2010 (KB2566458) Update for Microsoft Office 2010 (KB2596964) 32-Bit Edition Update for Microsoft Office 2010 (KB2597091) 32-Bit Edition Update for Microsoft Office Excel 2007 (KB2596596) 32-Bit Edition Update for Microsoft Office OneNote 2007 (KB980729) Update for Microsoft Office Outlook 2007 (KB2583910) Update for Microsoft OneNote 2010 (KB2553290) 32-Bit Edition Update for Microsoft Outlook 2010 (KB2553323) 32-Bit Edition Update for Microsoft Outlook Social Connector (KB2583935) VLC media player 1.1.8 Welcome Center Windows Live-Uploadtool Windows Live Anmelde-Assistent Windows Live Call Windows Live Communications Platform Windows Live Essentials Windows Live Fotogalerie Windows Live Mail Windows Live Messenger Windows Live Movie Maker Windows Live Sync Windows Live Writer Windows Media Player Firefox Plugin Yahoo! Detect Zattoo4 4.0.5 . ==== End Of File =========================== gruss richie Geändert von SoFaRi82 (28.02.2012 um 09:47 Uhr) |
|
28.02.2012, 11:21
| #2 |
| /// Malware-holic   | Windows Explorer funktioniert nicht mehr / Startet immer wieder eu hi,
__________________Combofix darf ausschließlich ausgeführt werden, wenn dies von einem Team Mitglied angewiesen wurde! Bitte downloade dir Combofix.exe und speichere es unbedingt auf deinem Desktop.
__________________ |
|
28.02.2012, 13:57
| #3 |
| | Windows Explorer funktioniert nicht mehr / Startet immer wieder eu Combofix Logfile:
__________________Code:
ATTFilter ComboFix 12-02-27.02 - Richie 28.02.2012 13:07:34.1.4 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.49.1031.18.3956.2741 [GMT 1:00]
ausgeführt von:: c:\users\Richie\Desktop\ComboFix.exe
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
(((((((((((((((((((((((((((((((((((( Weitere Löschungen ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files (x86)\Common Files\Acer GameZone online.ico
c:\program files (x86)\Search Settings
c:\program files (x86)\Search Settings\FF\chrome.manifest
c:\program files (x86)\Search Settings\FF\chrome\content\plugin.js
c:\program files (x86)\Search Settings\FF\chrome\content\protection.js
c:\program files (x86)\Search Settings\FF\chrome\content\utils.js
c:\program files (x86)\Search Settings\FF\chrome\locale\en-US\searchsettingsplugin.properties
c:\program files (x86)\Search Settings\FF\components\SearchSettingsFF.dll
c:\program files (x86)\Search Settings\SeARchsettings.dll
c:\program files (x86)\Search Settings\SearchSettings.exe
c:\program files (x86)\Search Settings\SearchSettingsRes409.dll
c:\users\Public\Documents\NTILiveUpdate.dll
c:\users\Richie\AppData\Local\Bron.tok.A12.em.bin
c:\users\Richie\AppData\Local\Kosong.Bron.Tok.txt
c:\users\Richie\AppData\Local\Microsoft\Windows\Temporary Internet Files\{4E0BEF93-9C38-4DEF-80AE-5DFF56B501B2}.xps
c:\users\Richie\AppData\Local\Microsoft\Windows\Temporary Internet Files\{50ED0735-9212-4AA3-870F-1767A5178D86}.xps
c:\users\Richie\AppData\Local\Microsoft\Windows\Temporary Internet Files\{6D7659C6-8318-4978-AA4D-E3B387795553}.xps
c:\users\Richie\AppData\Local\Microsoft\Windows\Temporary Internet Files\{C149A279-BAB7-47AF-998A-48B59945467D}.xps
c:\users\Richie\AppData\Local\Microsoft\Windows\Temporary Internet Files\{C2DABF15-6951-494B-8AC4-6F18D6D62129}.xps
c:\users\Richie\AppData\Local\Microsoft\Windows\Temporary Internet Files\{F17311BC-4E98-43ED-A5A4-9C80D4F1AEDC}.xps
c:\users\Richie\AppData\Local\Microsoft\Windows\Temporary Internet Files\PingPong.gadget
c:\users\Richie\AppData\Local\Update.12.Bron.Tok.bin
c:\users\Richie\AppData\Roaming\.#
.
.
((((((((((((((((((((((((((((((((((((((( Treiber/Dienste )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Service_Boonty Games
.
.
((((((((((((((((((((((( Dateien erstellt von 2012-01-28 bis 2012-02-28 ))))))))))))))))))))))))))))))
.
.
2012-02-28 12:30 . 2012-02-28 12:30 -------- d-----w- c:\users\Default\AppData\Local\temp
2012-02-28 07:06 . 2012-02-28 07:06 -------- d-----w- c:\programdata\Avira
2012-02-28 07:06 . 2012-02-28 07:06 -------- d-----w- c:\program files (x86)\Avira
2012-02-22 12:02 . 2004-01-10 16:02 258048 ----a-w- c:\windows\SysWow64\GplMpgDec.ax
2012-02-22 12:02 . 2012-02-22 12:02 -------- d-----w- c:\program files (x86)\Free iPod Video Converter
2012-02-22 12:02 . 2005-02-27 20:48 356352 ----a-w- c:\windows\SysWow64\RealMediaSplitter.ax
2012-02-22 12:02 . 2004-05-25 16:06 417792 ----a-w- c:\windows\SysWow64\ac3filter.ax
2012-02-17 11:08 . 2012-02-17 11:08 -------- d-----w- c:\programdata\TuneClone
2012-02-17 11:07 . 2011-10-19 08:00 26856 ----a-w- c:\windows\system32\drivers\tclondrv.sys
2012-02-15 06:11 . 2012-01-04 10:44 509952 ----a-w- c:\windows\system32\ntshrui.dll
2012-02-15 06:11 . 2012-01-04 08:58 442880 ----a-w- c:\windows\SysWow64\ntshrui.dll
2012-02-15 06:11 . 2011-12-30 06:26 515584 ----a-w- c:\windows\system32\timedate.cpl
2012-02-15 06:11 . 2011-12-30 05:27 478720 ----a-w- c:\windows\SysWow64\timedate.cpl
2012-02-15 06:11 . 2012-01-14 04:06 3145728 ----a-w- c:\windows\system32\win32k.sys
2012-02-15 06:11 . 2011-12-28 03:59 498688 ----a-w- c:\windows\system32\drivers\afd.sys
2012-02-15 06:11 . 2011-12-16 08:46 634880 ----a-w- c:\windows\system32\msvcrt.dll
2012-02-15 06:11 . 2011-12-16 07:52 690688 ----a-w- c:\windows\SysWow64\msvcrt.dll
.
.
.
(((((((((((((((((((((((((((((((((((( Find3M Bericht ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-01-29 04:10 . 2010-08-04 16:44 279656 ------w- c:\windows\system32\MpSigStub.exe
2012-01-10 07:20 . 2009-07-14 02:36 175616 ----a-w- c:\windows\system32\msclmd.dll
2012-01-10 07:20 . 2009-07-14 02:36 152576 ----a-w- c:\windows\SysWow64\msclmd.dll
2011-12-01 01:52 . 2011-12-01 01:52 414368 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2011-06-22 08:40 . 2011-06-22 08:40 1540912 ----a-w- c:\program files (x86)\TotallyFreeBurner-7.exe
2011-04-02 13:48 . 2011-04-02 13:48 25329664 ----a-w- c:\program files\vlc_player_1.1.8.exe
2010-08-03 17:07 . 2010-08-03 17:07 2568656 ----a-w- c:\program files\install_flash_player.exe
.
.
(((((((((((((((((((((((((((( Autostartpunkte der Registrierung ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1475584]
"SpybotSD TeaTimer"="c:\program files (x86)\Spybot - Search & Destroy\TeaTimer.exe" [2009-01-26 2144088]
"IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files (x86)\Common Files\Nero\Lib\NMIndexStoreSvr.exe" [2009-03-25 1840424]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-02-28 35696]
"BackupManagerTray"="c:\program files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe" [2009-09-24 261888]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2009-12-09 98304]
"LManager"="c:\program files (x86)\Launch Manager\LManager.exe" [2009-11-01 1094736]
"ArcadeDeluxeAgent"="c:\program files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe" [2009-10-29 419112]
"PlayMovie"="c:\program files (x86)\Acer Arcade Deluxe\PlayMovie\PMVService.exe" [2009-11-12 181480]
"NeroCheck"="c:\windows\system32\NeroCheck.exe" [2003-07-13 155648]
"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2010-11-29 421888]
"NBKeyScan"="c:\program files (x86)\Nero\Nero8\Nero BackItUp\NBKeyScan.exe" [2008-12-02 2221352]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2011-06-09 254696]
"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2011-09-27 59240]
"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2011-10-09 421736]
"IJNetworkScanUtility"="c:\program files (x86)\Canon\Canon IJ Network Scan Utility\CNMNSUT.exe" [2009-09-28 140640]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2009-10-2 1082144]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 gupdate;Google Update Service (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-08-03 136176]
R3 AmUStor;AM USB Stroage Driver;c:\windows\system32\drivers\AmUStor.SYS [x]
R3 btusbflt;Bluetooth USB Filter;c:\windows\system32\drivers\btusbflt.sys [x]
R3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys [x]
R3 gupdatem;Google Update-Dienst (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-08-03 136176]
R3 Netaapl;Apple Mobile Device Ethernet Service;c:\windows\system32\DRIVERS\netaapl64.sys [x]
R3 NTIBackupSvc;NTI Backup Now 5 Backup Service;c:\program files (x86)\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe [2009-06-18 50432]
R3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
R3 TurboBoost;TurboBoost;c:\program files\Intel\TurboBoost\TurboBoost.exe [2009-11-02 126352]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys [x]
S0 tclondrv;tclondrv;c:\windows\system32\DRIVERS\tclondrv.sys [x]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [x]
S2 Application Updater;Application Updater;c:\program files (x86)\Application Updater\ApplicationUpdater.exe [2010-01-07 380928]
S2 ePowerSvc;Acer ePower Service;c:\program files\Acer\Acer ePower Management\ePowerSvc.exe [2009-09-30 844320]
S2 Greg_Service;GRegService;c:\program files (x86)\Acer\Registration\GregHSRW.exe [2009-08-28 1150496]
S2 NTI IScheduleSvc;NTI IScheduleSvc;c:\program files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe [2009-09-24 62720]
S2 NTISchedulerSvc;NTI Backup Now 5 Scheduler Service;c:\program files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe [2009-06-18 144640]
S2 SBSDWSCService;SBSD Security Center Service;c:\program files (x86)\Spybot - Search & Destroy\SDWinSec.exe [2009-01-26 1153368]
S2 TurboB;Turbo Boost UI Monitor driver;c:\windows\system32\DRIVERS\TurboB.sys [x]
S2 UNS;Intel(R) Management & Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2009-10-01 2320920]
S2 Updater Service;Updater Service;c:\program files\Acer\Acer Updater\UpdaterService.exe [2009-07-04 240160]
S3 HECIx64;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys [x]
S3 Impcd;Impcd;c:\windows\system32\DRIVERS\Impcd.sys [x]
S3 k57nd60a;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0;c:\windows\system32\DRIVERS\k57nd60a.sys [x]
S3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\system32\DRIVERS\vwifimp.sys [x]
.
.
Inhalt des "geplante Tasks" Ordners
.
2012-02-28 c:\windows\Tasks\GoogleUpdateTaskMachineCore1cc508cdf74ad8c.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-08-03 18:14]
.
2012-02-28 c:\windows\Tasks\GoogleUpdateTaskMachineUA1cc508cdfe23e07.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-08-03 18:14]
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AmIcoSinglun64"="c:\program files (x86)\AmIcoSingLun\AmIcoSinglun64.exe" [2009-07-22 323072]
"IAAnotif"="c:\program files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2009-06-05 186904]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2009-10-29 8312352]
"PLFSetI"="c:\windows\PLFSetI.exe" [2010-08-03 200704]
"Acer ePower Management"="c:\program files\Acer\Acer ePower Management\ePowerTray.exe" [2009-09-30 823840]
"CanonMyPrinter"="c:\program files\Canon\MyPrinter\BJMyPrt.exe" [2009-11-01 2710856]
"CanonSolutionMenu"="c:\program files (x86)\Canon\SolutionMenu\CNSLMAIN.exe" [2009-09-03 767312]
"combofix"="c:\combofix\CF15614.3XE" [2010-11-20 345088]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"LoadAppInit_DLLs"=0x0
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = hxxp://www.gmx.de/
uLocal Page = c:\windows\system32\blank.htm
mStart Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&m=aspire_5740dg&r=27360810l206l0408z1h5t5441i29s
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = *.local
IE: An OneNote s&enden - c:\progra~2\MICROS~2\Office14\ONBttnIE.dll/105
IE: Bild an &Bluetooth-Gerät senden... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: E&xport to Microsoft Excel - c:\progra~2\MICROS~2\Office12\EXCEL.EXE/3000
IE: Google Sidewiki... - c:\program files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll/cmsidewiki.html
IE: Nach Microsoft E&xcel exportieren - c:\progra~2\MICROS~2\Office14\EXCEL.EXE/3000
IE: Seite an &Bluetooth-Gerät senden... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
TCP: DhcpNameServer = 192.168.2.1
FF - ProfilePath - c:\users\Richie\AppData\Roaming\Mozilla\Firefox\Profiles\wec2ss4j.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.gmx.de
FF - prefs.js: keyword.URL - hxxp://search.babylon.com/?babsrc=toolbar2&q=
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
URLSearchHooks-{4724c5d8-dfa7-417a-a2f5-1eabfee9b4ac} - c:\program files (x86)\MyPlayCity\tbMyPl.dll
BHO-{4724c5d8-dfa7-417a-a2f5-1eabfee9b4ac} - c:\program files (x86)\MyPlayCity\tbMyPl.dll
Toolbar-Locked - (no file)
Toolbar-{4724c5d8-dfa7-417a-a2f5-1eabfee9b4ac} - c:\program files (x86)\MyPlayCity\tbMyPl.dll
Wow6432Node-HKCU-Run-EA Core - c:\program files (x86)\Electronic Arts\EADM\Core.exe
Wow6432Node-HKLM-Run-SearchSettings - c:\program files (x86)\Search Settings\SearchSettings.exe
SafeBoot-mcmscsvc
SafeBoot-MCODS
Toolbar-Locked - (no file)
HKLM-Run-mwlDaemon - c:\program files (x86)\EgisTec\MyWinLocker 3\x86\mwlDaemon.exe
HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe
HKLM-Run-TuneClone - c:\program files\TuneClone\TuneClone.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_USERS\S-1-5-21-4189423880-2254750483-2313066118-1001\Software\SecuROM\License information*]
"datasecu"=hex:82,41,46,a1,ca,98,05,4c,f3,e7,59,c5,ee,dc,cd,b2,16,27,bb,37,32,
26,47,eb,e0,04,d4,fe,36,6c,00,94,9b,88,8d,e6,c4,1a,c6,ed,08,65,ad,2e,e5,c0,\
"rkeysecu"=hex:60,09,c7,4f,9c,77,55,59,9f,47,92,d9,bf,4d,93,dd
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
@Denied: (A) (Everyone)
"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]
"Key"="ActionsPane3"
"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
"MSCurrentCountry"=dword:000000b5
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\program files (x86)\Canon\IJPLM\IJPLMSVC.EXE
c:\program files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
c:\program files (x86)\Nero\Nero8\Nero BackItUp\NBService.exe
c:\windows\SysWOW64\IoctlSvc.exe
c:\program files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2012-02-28 13:47:39 - PC wurde neu gestartet
ComboFix-quarantined-files.txt 2012-02-28 12:47
.
Vor Suchlauf: 11 Verzeichnis(se), 510.660.694.016 Bytes frei
Nach Suchlauf: 18 Verzeichnis(se), 510.654.246.912 Bytes frei
.
- - End Of File - - D68C1FB15DA53ED78689319A6EAA044B
|
|
28.02.2012, 14:27
| #4 |
| | Windows Explorer funktioniert nicht mehr / Startet immer wieder eu Combofix Logfile: Code:
ATTFilter ComboFix 12-02-27.02 - Richie 28.02.2012 13:07:34.1.4 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.49.1031.18.3956.2741 [GMT 1:00]
ausgeführt von:: c:\users\Richie\Desktop\ComboFix.exe
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
(((((((((((((((((((((((((((((((((((( Weitere Löschungen ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files (x86)\Common Files\Acer GameZone online.ico
c:\program files (x86)\Search Settings
c:\program files (x86)\Search Settings\FF\chrome.manifest
c:\program files (x86)\Search Settings\FF\chrome\content\plugin.js
c:\program files (x86)\Search Settings\FF\chrome\content\protection.js
c:\program files (x86)\Search Settings\FF\chrome\content\utils.js
c:\program files (x86)\Search Settings\FF\chrome\locale\en-US\searchsettingsplugin.properties
c:\program files (x86)\Search Settings\FF\components\SearchSettingsFF.dll
c:\program files (x86)\Search Settings\SeARchsettings.dll
c:\program files (x86)\Search Settings\SearchSettings.exe
c:\program files (x86)\Search Settings\SearchSettingsRes409.dll
c:\users\Public\Documents\NTILiveUpdate.dll
c:\users\Richie\AppData\Local\Bron.tok.A12.em.bin
c:\users\Richie\AppData\Local\Kosong.Bron.Tok.txt
c:\users\Richie\AppData\Local\Microsoft\Windows\Temporary Internet Files\{4E0BEF93-9C38-4DEF-80AE-5DFF56B501B2}.xps
c:\users\Richie\AppData\Local\Microsoft\Windows\Temporary Internet Files\{50ED0735-9212-4AA3-870F-1767A5178D86}.xps
c:\users\Richie\AppData\Local\Microsoft\Windows\Temporary Internet Files\{6D7659C6-8318-4978-AA4D-E3B387795553}.xps
c:\users\Richie\AppData\Local\Microsoft\Windows\Temporary Internet Files\{C149A279-BAB7-47AF-998A-48B59945467D}.xps
c:\users\Richie\AppData\Local\Microsoft\Windows\Temporary Internet Files\{C2DABF15-6951-494B-8AC4-6F18D6D62129}.xps
c:\users\Richie\AppData\Local\Microsoft\Windows\Temporary Internet Files\{F17311BC-4E98-43ED-A5A4-9C80D4F1AEDC}.xps
c:\users\Richie\AppData\Local\Microsoft\Windows\Temporary Internet Files\PingPong.gadget
c:\users\Richie\AppData\Local\Update.12.Bron.Tok.bin
c:\users\Richie\AppData\Roaming\.#
.
.
((((((((((((((((((((((((((((((((((((((( Treiber/Dienste )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Service_Boonty Games
.
.
((((((((((((((((((((((( Dateien erstellt von 2012-01-28 bis 2012-02-28 ))))))))))))))))))))))))))))))
.
.
2012-02-28 12:30 . 2012-02-28 12:30 -------- d-----w- c:\users\Default\AppData\Local\temp
2012-02-28 07:06 . 2012-02-28 07:06 -------- d-----w- c:\programdata\Avira
2012-02-28 07:06 . 2012-02-28 07:06 -------- d-----w- c:\program files (x86)\Avira
2012-02-22 12:02 . 2004-01-10 16:02 258048 ----a-w- c:\windows\SysWow64\GplMpgDec.ax
2012-02-22 12:02 . 2012-02-22 12:02 -------- d-----w- c:\program files (x86)\Free iPod Video Converter
2012-02-22 12:02 . 2005-02-27 20:48 356352 ----a-w- c:\windows\SysWow64\RealMediaSplitter.ax
2012-02-22 12:02 . 2004-05-25 16:06 417792 ----a-w- c:\windows\SysWow64\ac3filter.ax
2012-02-17 11:08 . 2012-02-17 11:08 -------- d-----w- c:\programdata\TuneClone
2012-02-17 11:07 . 2011-10-19 08:00 26856 ----a-w- c:\windows\system32\drivers\tclondrv.sys
2012-02-15 06:11 . 2012-01-04 10:44 509952 ----a-w- c:\windows\system32\ntshrui.dll
2012-02-15 06:11 . 2012-01-04 08:58 442880 ----a-w- c:\windows\SysWow64\ntshrui.dll
2012-02-15 06:11 . 2011-12-30 06:26 515584 ----a-w- c:\windows\system32\timedate.cpl
2012-02-15 06:11 . 2011-12-30 05:27 478720 ----a-w- c:\windows\SysWow64\timedate.cpl
2012-02-15 06:11 . 2012-01-14 04:06 3145728 ----a-w- c:\windows\system32\win32k.sys
2012-02-15 06:11 . 2011-12-28 03:59 498688 ----a-w- c:\windows\system32\drivers\afd.sys
2012-02-15 06:11 . 2011-12-16 08:46 634880 ----a-w- c:\windows\system32\msvcrt.dll
2012-02-15 06:11 . 2011-12-16 07:52 690688 ----a-w- c:\windows\SysWow64\msvcrt.dll
.
.
.
(((((((((((((((((((((((((((((((((((( Find3M Bericht ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-01-29 04:10 . 2010-08-04 16:44 279656 ------w- c:\windows\system32\MpSigStub.exe
2012-01-10 07:20 . 2009-07-14 02:36 175616 ----a-w- c:\windows\system32\msclmd.dll
2012-01-10 07:20 . 2009-07-14 02:36 152576 ----a-w- c:\windows\SysWow64\msclmd.dll
2011-12-01 01:52 . 2011-12-01 01:52 414368 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2011-06-22 08:40 . 2011-06-22 08:40 1540912 ----a-w- c:\program files (x86)\TotallyFreeBurner-7.exe
2011-04-02 13:48 . 2011-04-02 13:48 25329664 ----a-w- c:\program files\vlc_player_1.1.8.exe
2010-08-03 17:07 . 2010-08-03 17:07 2568656 ----a-w- c:\program files\install_flash_player.exe
.
.
(((((((((((((((((((((((((((( Autostartpunkte der Registrierung ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1475584]
"SpybotSD TeaTimer"="c:\program files (x86)\Spybot - Search & Destroy\TeaTimer.exe" [2009-01-26 2144088]
"IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files (x86)\Common Files\Nero\Lib\NMIndexStoreSvr.exe" [2009-03-25 1840424]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-02-28 35696]
"BackupManagerTray"="c:\program files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe" [2009-09-24 261888]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2009-12-09 98304]
"LManager"="c:\program files (x86)\Launch Manager\LManager.exe" [2009-11-01 1094736]
"ArcadeDeluxeAgent"="c:\program files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe" [2009-10-29 419112]
"PlayMovie"="c:\program files (x86)\Acer Arcade Deluxe\PlayMovie\PMVService.exe" [2009-11-12 181480]
"NeroCheck"="c:\windows\system32\NeroCheck.exe" [2003-07-13 155648]
"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2010-11-29 421888]
"NBKeyScan"="c:\program files (x86)\Nero\Nero8\Nero BackItUp\NBKeyScan.exe" [2008-12-02 2221352]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2011-06-09 254696]
"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2011-09-27 59240]
"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2011-10-09 421736]
"IJNetworkScanUtility"="c:\program files (x86)\Canon\Canon IJ Network Scan Utility\CNMNSUT.exe" [2009-09-28 140640]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2009-10-2 1082144]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 gupdate;Google Update Service (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-08-03 136176]
R3 AmUStor;AM USB Stroage Driver;c:\windows\system32\drivers\AmUStor.SYS [x]
R3 btusbflt;Bluetooth USB Filter;c:\windows\system32\drivers\btusbflt.sys [x]
R3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys [x]
R3 gupdatem;Google Update-Dienst (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-08-03 136176]
R3 Netaapl;Apple Mobile Device Ethernet Service;c:\windows\system32\DRIVERS\netaapl64.sys [x]
R3 NTIBackupSvc;NTI Backup Now 5 Backup Service;c:\program files (x86)\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe [2009-06-18 50432]
R3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
R3 TurboBoost;TurboBoost;c:\program files\Intel\TurboBoost\TurboBoost.exe [2009-11-02 126352]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys [x]
S0 tclondrv;tclondrv;c:\windows\system32\DRIVERS\tclondrv.sys [x]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [x]
S2 Application Updater;Application Updater;c:\program files (x86)\Application Updater\ApplicationUpdater.exe [2010-01-07 380928]
S2 ePowerSvc;Acer ePower Service;c:\program files\Acer\Acer ePower Management\ePowerSvc.exe [2009-09-30 844320]
S2 Greg_Service;GRegService;c:\program files (x86)\Acer\Registration\GregHSRW.exe [2009-08-28 1150496]
S2 NTI IScheduleSvc;NTI IScheduleSvc;c:\program files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe [2009-09-24 62720]
S2 NTISchedulerSvc;NTI Backup Now 5 Scheduler Service;c:\program files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe [2009-06-18 144640]
S2 SBSDWSCService;SBSD Security Center Service;c:\program files (x86)\Spybot - Search & Destroy\SDWinSec.exe [2009-01-26 1153368]
S2 TurboB;Turbo Boost UI Monitor driver;c:\windows\system32\DRIVERS\TurboB.sys [x]
S2 UNS;Intel(R) Management & Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2009-10-01 2320920]
S2 Updater Service;Updater Service;c:\program files\Acer\Acer Updater\UpdaterService.exe [2009-07-04 240160]
S3 HECIx64;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys [x]
S3 Impcd;Impcd;c:\windows\system32\DRIVERS\Impcd.sys [x]
S3 k57nd60a;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0;c:\windows\system32\DRIVERS\k57nd60a.sys [x]
S3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\system32\DRIVERS\vwifimp.sys [x]
.
.
Inhalt des "geplante Tasks" Ordners
.
2012-02-28 c:\windows\Tasks\GoogleUpdateTaskMachineCore1cc508cdf74ad8c.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-08-03 18:14]
.
2012-02-28 c:\windows\Tasks\GoogleUpdateTaskMachineUA1cc508cdfe23e07.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-08-03 18:14]
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AmIcoSinglun64"="c:\program files (x86)\AmIcoSingLun\AmIcoSinglun64.exe" [2009-07-22 323072]
"IAAnotif"="c:\program files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2009-06-05 186904]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2009-10-29 8312352]
"PLFSetI"="c:\windows\PLFSetI.exe" [2010-08-03 200704]
"Acer ePower Management"="c:\program files\Acer\Acer ePower Management\ePowerTray.exe" [2009-09-30 823840]
"CanonMyPrinter"="c:\program files\Canon\MyPrinter\BJMyPrt.exe" [2009-11-01 2710856]
"CanonSolutionMenu"="c:\program files (x86)\Canon\SolutionMenu\CNSLMAIN.exe" [2009-09-03 767312]
"combofix"="c:\combofix\CF15614.3XE" [2010-11-20 345088]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"LoadAppInit_DLLs"=0x0
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = hxxp://www.gmx.de/
uLocal Page = c:\windows\system32\blank.htm
mStart Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&m=aspire_5740dg&r=27360810l206l0408z1h5t5441i29s
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = *.local
IE: An OneNote s&enden - c:\progra~2\MICROS~2\Office14\ONBttnIE.dll/105
IE: Bild an &Bluetooth-Gerät senden... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: E&xport to Microsoft Excel - c:\progra~2\MICROS~2\Office12\EXCEL.EXE/3000
IE: Google Sidewiki... - c:\program files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll/cmsidewiki.html
IE: Nach Microsoft E&xcel exportieren - c:\progra~2\MICROS~2\Office14\EXCEL.EXE/3000
IE: Seite an &Bluetooth-Gerät senden... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
TCP: DhcpNameServer = 192.168.2.1
FF - ProfilePath - c:\users\Richie\AppData\Roaming\Mozilla\Firefox\Profiles\wec2ss4j.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.gmx.de
FF - prefs.js: keyword.URL - hxxp://search.babylon.com/?babsrc=toolbar2&q=
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
URLSearchHooks-{4724c5d8-dfa7-417a-a2f5-1eabfee9b4ac} - c:\program files (x86)\MyPlayCity\tbMyPl.dll
BHO-{4724c5d8-dfa7-417a-a2f5-1eabfee9b4ac} - c:\program files (x86)\MyPlayCity\tbMyPl.dll
Toolbar-Locked - (no file)
Toolbar-{4724c5d8-dfa7-417a-a2f5-1eabfee9b4ac} - c:\program files (x86)\MyPlayCity\tbMyPl.dll
Wow6432Node-HKCU-Run-EA Core - c:\program files (x86)\Electronic Arts\EADM\Core.exe
Wow6432Node-HKLM-Run-SearchSettings - c:\program files (x86)\Search Settings\SearchSettings.exe
SafeBoot-mcmscsvc
SafeBoot-MCODS
Toolbar-Locked - (no file)
HKLM-Run-mwlDaemon - c:\program files (x86)\EgisTec\MyWinLocker 3\x86\mwlDaemon.exe
HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe
HKLM-Run-TuneClone - c:\program files\TuneClone\TuneClone.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_USERS\S-1-5-21-4189423880-2254750483-2313066118-1001\Software\SecuROM\License information*]
"datasecu"=hex:82,41,46,a1,ca,98,05,4c,f3,e7,59,c5,ee,dc,cd,b2,16,27,bb,37,32,
26,47,eb,e0,04,d4,fe,36,6c,00,94,9b,88,8d,e6,c4,1a,c6,ed,08,65,ad,2e,e5,c0,\
"rkeysecu"=hex:60,09,c7,4f,9c,77,55,59,9f,47,92,d9,bf,4d,93,dd
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
@Denied: (A) (Everyone)
"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]
"Key"="ActionsPane3"
"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
"MSCurrentCountry"=dword:000000b5
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\program files (x86)\Canon\IJPLM\IJPLMSVC.EXE
c:\program files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
c:\program files (x86)\Nero\Nero8\Nero BackItUp\NBService.exe
c:\windows\SysWOW64\IoctlSvc.exe
c:\program files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2012-02-28 13:47:39 - PC wurde neu gestartet
ComboFix-quarantined-files.txt 2012-02-28 12:47
.
Vor Suchlauf: 11 Verzeichnis(se), 510.660.694.016 Bytes frei
Nach Suchlauf: 18 Verzeichnis(se), 510.654.246.912 Bytes frei
.
- - End Of File - - D68C1FB15DA53ED78689319A6EAA044B
|
|
28.02.2012, 17:40
| #5 |
| /// Malware-holic | Windows Explorer funktioniert nicht mehr / Startet immer wieder eu download tdss killer: http://www.trojaner-board.de/82358-t...entfernen.html Klicke auf Change parameters • Setze die Haken bei Verify driver digital signatures und Detect TDLFS file system • Klick auf OK und anschließend auf Start scan - bei funden erst mal immer skip wählen, log posten
__________________ -Verdächtige mails bitte an uns zur Analyse weiterleiten: markusg.trojaner-board@web.de Weiterleiten Anleitung: http://markusg.trojaner-board.de Mails bitte vorerst nach obiger Anleitung an markusg.trojaner-board@web.de Weiterleiten Wenn Ihr uns unterstützen möchtet |
|
28.02.2012, 22:03
| #6 |
| | Windows Explorer funktioniert nicht mehr / Startet immer wieder eu 21:26:37.0454 4944 TDSS rootkit removing tool 2.7.15.0 Feb 27 2012 12:59:02 21:26:37.0574 4944 ============================================================ 21:26:37.0574 4944 Current date / time: 2012/02/28 21:26:37.0574 21:26:37.0574 4944 SystemInfo: 21:26:37.0575 4944 21:26:37.0575 4944 OS Version: 6.1.7601 ServicePack: 1.0 21:26:37.0575 4944 Product type: Workstation 21:26:37.0575 4944 ComputerName: RICHIE-PC 21:26:37.0575 4944 UserName: Richie 21:26:37.0575 4944 Windows directory: C:\Windows 21:26:37.0575 4944 System windows directory: C:\Windows 21:26:37.0575 4944 Running under WOW64 21:26:37.0575 4944 Processor architecture: Intel x64 21:26:37.0575 4944 Number of processors: 4 21:26:37.0575 4944 Page size: 0x1000 21:26:37.0575 4944 Boot type: Normal boot 21:26:37.0575 4944 ============================================================ 21:27:03.0294 4944 Drive \Device\Harddisk0\DR0 - Size: 0x950B056000 (596.17 Gb), SectorSize: 0x200, Cylinders: 0x13001, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040 21:27:03.0298 4944 \Device\Harddisk0\DR0: 21:27:03.0299 4944 MBR used 21:27:03.0299 4944 \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x1964800, BlocksNum 0x32000 21:27:03.0299 4944 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x1996800, BlocksNum 0x48EC12B0 21:27:03.0427 4944 Initialize success 21:27:03.0427 4944 ============================================================ 21:27:24.0818 4292 ============================================================ 21:27:24.0818 4292 Scan started 21:27:24.0818 4292 Mode: Manual; SigCheck; TDLFS; 21:27:24.0818 4292 ============================================================ 21:30:38.0500 4292 1394ohci (a87d604aea360176311474c87a63bb88) C:\Windows\system32\drivers\1394ohci.sys 21:30:38.0863 4292 1394ohci - ok 21:30:39.0393 4292 ACPI (d81d9e70b8a6dd14d42d7b4efa65d5f2) C:\Windows\system32\drivers\ACPI.sys 21:30:39.0408 4292 ACPI - ok 21:30:39.0764 4292 AcpiPmi (99f8e788246d495ce3794d7e7821d2ca) C:\Windows\system32\drivers\acpipmi.sys 21:30:40.0326 4292 AcpiPmi - ok 21:30:40.0856 4292 adp94xx (2f6b34b83843f0c5118b63ac634f5bf4) C:\Windows\system32\DRIVERS\adp94xx.sys 21:30:41.0086 4292 adp94xx - ok 21:30:41.0513 4292 adpahci (597f78224ee9224ea1a13d6350ced962) C:\Windows\system32\DRIVERS\adpahci.sys 21:30:41.0527 4292 adpahci - ok 21:30:41.0968 4292 adpu320 (e109549c90f62fb570b9540c4b148e54) C:\Windows\system32\DRIVERS\adpu320.sys 21:30:41.0980 4292 adpu320 - ok 21:30:42.0453 4292 AFD (1c7857b62de5994a75b054a9fd4c3825) C:\Windows\system32\drivers\afd.sys 21:30:42.0623 4292 AFD - ok 21:30:43.0356 4292 AgereSoftModem (a6ab6f0ace87da76b4c401813d18be95) C:\Windows\system32\DRIVERS\agrsm64.sys 21:30:43.0468 4292 AgereSoftModem - ok 21:30:43.0851 4292 agp440 (608c14dba7299d8cb6ed035a68a15799) C:\Windows\system32\drivers\agp440.sys 21:30:43.0865 4292 agp440 - ok 21:30:44.0309 4292 aliide (5812713a477a3ad7363c7438ca2ee038) C:\Windows\system32\drivers\aliide.sys 21:30:44.0320 4292 aliide - ok 21:30:44.0823 4292 amdide (1ff8b4431c353ce385c875f194924c0c) C:\Windows\system32\drivers\amdide.sys 21:30:44.0835 4292 amdide - ok 21:30:45.0175 4292 AmdK8 (7024f087cff1833a806193ef9d22cda9) C:\Windows\system32\DRIVERS\amdk8.sys 21:30:45.0266 4292 AmdK8 - ok 21:30:45.0581 4292 AmdPPM (1e56388b3fe0d031c44144eb8c4d6217) C:\Windows\system32\DRIVERS\amdppm.sys 21:30:45.0631 4292 AmdPPM - ok 21:30:46.0012 4292 amdsata (d4121ae6d0c0e7e13aa221aa57ef2d49) C:\Windows\system32\drivers\amdsata.sys 21:30:46.0024 4292 amdsata - ok 21:30:46.0377 4292 amdsbs (f67f933e79241ed32ff46a4f29b5120b) C:\Windows\system32\DRIVERS\amdsbs.sys 21:30:46.0393 4292 amdsbs - ok 21:30:46.0753 4292 amdxata (540daf1cea6094886d72126fd7c33048) C:\Windows\system32\drivers\amdxata.sys 21:30:46.0764 4292 amdxata - ok 21:30:47.0076 4292 AmUStor (391887990cdaa83de5c56c3fde966da1) C:\Windows\system32\drivers\AmUStor.SYS 21:30:47.0158 4292 AmUStor - ok 21:30:47.0521 4292 AppID (89a69c3f2f319b43379399547526d952) C:\Windows\system32\drivers\appid.sys 21:31:34.0157 4292 AppID - ok 21:34:14.0337 4292 arc (c484f8ceb1717c540242531db7845c4e) C:\Windows\system32\DRIVERS\arc.sys 21:34:14.0396 4292 arc - ok 21:34:14.0955 4292 arcsas (019af6924aefe7839f61c830227fe79c) C:\Windows\system32\DRIVERS\arcsas.sys 21:34:15.0044 4292 arcsas - ok 21:34:15.0741 4292 AsyncMac (769765ce2cc62867468cea93969b2242) C:\Windows\system32\DRIVERS\asyncmac.sys 21:34:19.0179 4292 AsyncMac - ok 21:34:19.0576 4292 atapi (02062c0b390b7729edc9e69c680a6f3c) C:\Windows\system32\drivers\atapi.sys 21:34:19.0584 4292 atapi - ok 21:34:20.0375 4292 athr (d6cad7e5b05055bb8226bdcb1644da27) C:\Windows\system32\DRIVERS\athrx.sys 21:34:20.0747 4292 athr - ok 21:34:22.0599 4292 atikmdag (37456be85384e4cc38dc899f07f88c45) C:\Windows\system32\DRIVERS\atikmdag.sys 21:34:23.0228 4292 atikmdag - ok 21:34:23.0728 4292 b06bdrv (3e5b191307609f7514148c6832bb0842) C:\Windows\system32\DRIVERS\bxvbda.sys 21:34:23.0821 4292 b06bdrv - ok 21:34:24.0162 4292 b57nd60a (b5ace6968304a3900eeb1ebfd9622df2) C:\Windows\system32\DRIVERS\b57nd60a.sys 21:34:24.0195 4292 b57nd60a - ok 21:34:24.0659 4292 BCM43XX (9e84a931dbee0292e38ed672f6293a99) C:\Windows\system32\DRIVERS\bcmwl664.sys 21:34:25.0395 4292 BCM43XX - ok 21:34:25.0781 4292 Beep (16a47ce2decc9b099349a5f840654746) C:\Windows\system32\drivers\Beep.sys 21:34:25.0887 4292 Beep - ok 21:34:26.0316 4292 blbdrive (61583ee3c3a17003c4acd0475646b4d3) C:\Windows\system32\DRIVERS\blbdrive.sys 21:34:26.0358 4292 blbdrive - ok 21:34:26.0856 4292 bowser (6c02a83164f5cc0a262f4199f0871cf5) C:\Windows\system32\DRIVERS\bowser.sys 21:34:26.0940 4292 bowser - ok 21:34:27.0281 4292 BrFiltLo (f09eee9edc320b5e1501f749fde686c8) C:\Windows\system32\DRIVERS\BrFiltLo.sys 21:34:27.0326 4292 BrFiltLo - ok 21:34:27.0528 4292 BrFiltUp (b114d3098e9bdb8bea8b053685831be6) C:\Windows\system32\DRIVERS\BrFiltUp.sys 21:34:27.0545 4292 BrFiltUp - ok 21:34:27.0913 4292 BridgeMP (5c2f352a4e961d72518261257aae204b) C:\Windows\system32\DRIVERS\bridge.sys 21:34:27.0994 4292 BridgeMP - ok 21:34:28.0324 4292 Brserid (43bea8d483bf1870f018e2d02e06a5bd) C:\Windows\System32\Drivers\Brserid.sys 21:34:28.0503 4292 Brserid - ok 21:34:28.0890 4292 BrSerWdm (a6eca2151b08a09caceca35c07f05b42) C:\Windows\System32\Drivers\BrSerWdm.sys 21:34:28.0925 4292 BrSerWdm - ok 21:34:29.0356 4292 BrUsbMdm (b79968002c277e869cf38bd22cd61524) C:\Windows\System32\Drivers\BrUsbMdm.sys 21:34:29.0400 4292 BrUsbMdm - ok 21:34:29.0587 4292 BrUsbSer (a87528880231c54e75ea7a44943b38bf) C:\Windows\System32\Drivers\BrUsbSer.sys 21:34:29.0607 4292 BrUsbSer - ok 21:34:29.0872 4292 BthEnum (cf98190a94f62e405c8cb255018b2315) C:\Windows\system32\drivers\BthEnum.sys 21:34:29.0957 4292 BthEnum - ok 21:34:30.0313 4292 BTHMODEM (9da669f11d1f894ab4eb69bf546a42e8) C:\Windows\system32\DRIVERS\bthmodem.sys 21:34:30.0350 4292 BTHMODEM - ok 21:34:30.0737 4292 BthPan (02dd601b708dd0667e1331fa8518e9ff) C:\Windows\system32\DRIVERS\bthpan.sys 21:34:30.0784 4292 BthPan - ok 21:34:31.0471 4292 BTHPORT (64c198198501f7560ee41d8d1efa7952) C:\Windows\System32\Drivers\BTHport.sys 21:34:31.0549 4292 BTHPORT - ok 21:35:34.0745 4292 BTHUSB (1108bd97a89ae329dc840ceaa6e8f166) C:\Windows\System32\Drivers\BTHUSB.sys 21:35:34.0777 4292 Suspicious file (Forged): C:\Windows\System32\Drivers\BTHUSB.sys. Real md5: 1108bd97a89ae329dc840ceaa6e8f166, Fake md5: f188b7394d81010767b6df3178519a37 21:35:34.0777 4292 BTHUSB ( ForgedFile.Multi.Generic ) - warning 21:35:34.0777 4292 BTHUSB - detected ForgedFile.Multi.Generic (1) 21:35:34.0870 4292 btusbflt (6e04458e98daf28826482e41a7a62df5) C:\Windows\system32\drivers\btusbflt.sys 21:38:24.0943 4292 btusbflt - ok 21:38:25.0380 4292 btwaudio (af838d8029ae7c27470862d63fa54d24) C:\Windows\system32\drivers\btwaudio.sys 21:38:25.0411 4292 btwaudio - ok 21:38:49.0732 4292 btwavdt (5c849bd7c78791c5cee9f4651d7fe38d) C:\Windows\system32\DRIVERS\btwavdt.sys 21:38:49.0919 4292 btwavdt - ok 21:38:50.0777 4292 btwl2cap (6149301dc3f81d6f9667a3fbac410975) C:\Windows\system32\DRIVERS\btwl2cap.sys 21:38:50.0793 4292 btwl2cap - ok 21:38:51.0011 4292 btwrchid (3e1991afa851a36dc978b0a1b0535c8b) C:\Windows\system32\DRIVERS\btwrchid.sys 21:38:51.0043 4292 btwrchid - ok 21:38:51.0105 4292 catchme - ok 21:38:51.0199 4292 cdfs (b8bd2bb284668c84865658c77574381a) C:\Windows\system32\DRIVERS\cdfs.sys 21:38:51.0261 4292 cdfs - ok 21:38:51.0495 4292 cdrom (f036ce71586e93d94dab220d7bdf4416) C:\Windows\system32\DRIVERS\cdrom.sys 21:38:51.0526 4292 cdrom - ok 21:38:51.0651 4292 circlass (d7cd5c4e1b71fa62050515314cfb52cf) C:\Windows\system32\DRIVERS\circlass.sys 21:38:51.0682 4292 circlass - ok 21:38:51.0838 4292 CLFS (fe1ec06f2253f691fe36217c592a0206) C:\Windows\system32\CLFS.sys 21:38:51.0854 4292 CLFS - ok 21:38:52.0103 4292 CmBatt (0840155d0bddf1190f84a663c284bd33) C:\Windows\system32\DRIVERS\CmBatt.sys 21:38:52.0135 4292 CmBatt - ok 21:38:52.0337 4292 cmdide (e19d3f095812725d88f9001985b94edd) C:\Windows\system32\drivers\cmdide.sys 21:38:52.0337 4292 cmdide - ok 21:38:52.0462 4292 CNG (c4943b6c962e4b82197542447ad599f4) C:\Windows\system32\Drivers\cng.sys 21:38:52.0509 4292 CNG - ok 21:38:52.0790 4292 Compbatt (102de219c3f61415f964c88e9085ad14) C:\Windows\system32\DRIVERS\compbatt.sys 21:38:52.0790 4292 Compbatt - ok 21:38:53.0367 4292 CompositeBus (03edb043586cceba243d689bdda370a8) C:\Windows\system32\drivers\CompositeBus.sys 21:38:53.0414 4292 CompositeBus - ok 21:38:53.0539 4292 crcdisk (1c827878a998c18847245fe1f34ee597) C:\Windows\system32\DRIVERS\crcdisk.sys 21:38:53.0554 4292 crcdisk - ok 21:38:53.0773 4292 DfsC (9bb2ef44eaa163b29c4a4587887a0fe4) C:\Windows\system32\Drivers\dfsc.sys 21:38:53.0835 4292 DfsC - ok 21:38:53.0944 4292 discache (13096b05847ec78f0977f2c0f79e9ab3) C:\Windows\system32\drivers\discache.sys 21:38:54.0007 4292 discache - ok 21:38:54.0147 4292 Disk (9819eee8b5ea3784ec4af3b137a5244c) C:\Windows\system32\DRIVERS\disk.sys 21:38:54.0163 4292 Disk - ok 21:38:54.0194 4292 DKbFltr - ok 21:38:54.0350 4292 drmkaud (9b19f34400d24df84c858a421c205754) C:\Windows\system32\drivers\drmkaud.sys 21:38:54.0397 4292 drmkaud - ok 21:38:54.0553 4292 DXGKrnl (f5bee30450e18e6b83a5012c100616fd) C:\Windows\System32\drivers\dxgkrnl.sys 21:38:54.0568 4292 DXGKrnl - ok 21:38:55.0255 4292 ebdrv (dc5d737f51be844d8c82c695eb17372f) C:\Windows\system32\DRIVERS\evbda.sys 21:38:55.0582 4292 ebdrv - ok 21:39:16.0705 4292 elxstor (0e5da5369a0fcaea12456dd852545184) C:\Windows\system32\DRIVERS\elxstor.sys 21:39:19.0497 4292 elxstor - ok 21:41:39.0024 4292 ErrDev - ok 21:42:40.0285 4292 exfat (a510c654ec00c1e9bdd91eeb3a59823b) C:\Windows\system32\drivers\exfat.sys 21:42:40.0410 4292 exfat - ok 21:43:04.0044 4292 fastfat (0adc83218b66a6db380c330836f3e36d) C:\Windows\system32\drivers\fastfat.sys 21:43:04.0137 4292 fastfat - ok 21:43:04.0590 4292 fdc (d765d19cd8ef61f650c384f62fac00ab) C:\Windows\system32\DRIVERS\fdc.sys 21:43:04.0683 4292 fdc - ok 21:43:05.0588 4292 FileInfo (655661be46b5f5f3fd454e2c3095b930) C:\Windows\system32\drivers\fileinfo.sys 21:43:05.0604 4292 FileInfo - ok 21:43:05.0931 4292 Filetrace (5f671ab5bc87eea04ec38a6cd5962a47) C:\Windows\system32\drivers\filetrace.sys 21:43:06.0041 4292 Filetrace - ok 21:43:06.0259 4292 flpydisk (c172a0f53008eaeb8ea33fe10e177af5) C:\Windows\system32\DRIVERS\flpydisk.sys 21:43:06.0290 4292 flpydisk - ok 21:43:06.0789 4292 FltMgr (da6b67270fd9db3697b20fce94950741) C:\Windows\system32\drivers\fltmgr.sys 21:43:06.0805 4292 FltMgr - ok 21:43:06.0945 4292 FsDepends (d43703496149971890703b4b1b723eac) C:\Windows\system32\drivers\FsDepends.sys 21:43:06.0961 4292 FsDepends - ok 21:43:07.0211 4292 Fs_Rec (e95ef8547de20cf0603557c0cf7a9462) C:\Windows\system32\drivers\Fs_Rec.sys 21:43:07.0226 4292 Fs_Rec - ok 21:43:07.0413 4292 fvevol (1f7b25b858fa27015169fe95e54108ed) C:\Windows\system32\DRIVERS\fvevol.sys 21:43:07.0429 4292 fvevol - ok 21:43:07.0850 4292 gagp30kx (8c778d335c9d272cfd3298ab02abe3b6) C:\Windows\system32\DRIVERS\gagp30kx.sys 21:43:07.0866 4292 gagp30kx - ok 21:43:08.0225 4292 GEARAspiWDM (e403aacf8c7bb11375122d2464560311) C:\Windows\system32\DRIVERS\GEARAspiWDM.sys 21:43:08.0225 4292 GEARAspiWDM - ok 21:43:08.0459 4292 hcw85cir (f2523ef6460fc42405b12248338ab2f0) C:\Windows\system32\drivers\hcw85cir.sys 21:43:08.0537 4292 hcw85cir - ok 21:43:08.0739 4292 HdAudAddService (975761c778e33cd22498059b91e7373a) C:\Windows\system32\drivers\HdAudio.sys 21:43:08.0817 4292 HdAudAddService - ok 21:43:09.0051 4292 HDAudBus (97bfed39b6b79eb12cddbfeed51f56bb) C:\Windows\system32\drivers\HDAudBus.sys 21:43:09.0083 4292 HDAudBus - ok 21:43:09.0254 4292 HECIx64 (b6ac71aaa2b10848f57fc49d55a651af) C:\Windows\system32\DRIVERS\HECIx64.sys 21:43:09.0254 4292 HECIx64 - ok 21:43:09.0395 4292 HidBatt (78e86380454a7b10a5eb255dc44a355f) C:\Windows\system32\DRIVERS\HidBatt.sys 21:43:09.0410 4292 HidBatt - ok 21:43:09.0894 4292 HidBth (7fd2a313f7afe5c4dab14798c48dd104) C:\Windows\system32\DRIVERS\hidbth.sys 21:43:09.0941 4292 HidBth - ok 21:43:10.0097 4292 HidIr (0a77d29f311b88cfae3b13f9c1a73825) C:\Windows\system32\DRIVERS\hidir.sys 21:43:10.0143 4292 HidIr - ok 21:43:10.0409 4292 HidUsb (9592090a7e2b61cd582b612b6df70536) C:\Windows\system32\drivers\hidusb.sys 21:43:10.0455 4292 HidUsb - ok 21:43:10.0596 4292 HpSAMD (39d2abcd392f3d8a6dce7b60ae7b8efc) C:\Windows\system32\drivers\HpSAMD.sys 21:43:10.0611 4292 HpSAMD - ok 21:43:10.0877 4292 HTTP (0ea7de1acb728dd5a369fd742d6eee28) C:\Windows\system32\drivers\HTTP.sys 21:43:10.0955 4292 HTTP - ok 21:43:16.0292 4292 hwpolicy (a5462bd6884960c9dc85ed49d34ff392) C:\Windows\system32\drivers\hwpolicy.sys 21:43:16.0292 4292 hwpolicy - ok 21:44:14.0481 4292 i8042prt (fa55c73d4affa7ee23ac4be53b4592d3) C:\Windows\system32\drivers\i8042prt.sys 21:44:14.0497 4292 i8042prt - ok 21:44:59.0503 4292 iaStor (1d004cb1da6323b1f55caef7f94b61d9) C:\Windows\system32\DRIVERS\iaStor.sys 21:44:59.0518 4292 iaStor - ok 21:46:19.0812 4292 iaStorV - ok 21:46:20.0311 4292 igfx (a87261ef1546325b559374f5689cf5bc) C:\Windows\system32\DRIVERS\igdkmd64.sys 21:48:16.0330 4292 igfx - ok 21:48:25.0364 4292 iirsp (5c18831c61933628f5bb0ea2675b9d21) C:\Windows\system32\DRIVERS\iirsp.sys 21:48:25.0426 4292 iirsp - ok 21:48:49.0263 4292 Impcd (36fdf367a1dabff903e2214023d71368) C:\Windows\system32\DRIVERS\Impcd.sys 21:48:49.0294 4292 Impcd - ok 21:48:49.0746 4292 IntcAzAudAddService (42943bb3ab7a405b30eff7c8283cc129) C:\Windows\system32\drivers\RTKVHD64.sys 21:48:49.0793 4292 IntcAzAudAddService - ok 21:48:50.0433 4292 intelide (f00f20e70c6ec3aa366910083a0518aa) C:\Windows\system32\drivers\intelide.sys 21:48:50.0511 4292 intelide - ok 21:48:50.0792 4292 intelppm (ada036632c664caa754079041cf1f8c1) C:\Windows\system32\DRIVERS\intelppm.sys 21:48:50.0916 4292 intelppm - ok 21:48:51.0197 4292 IpFilterDriver (c9f0e1bd74365a8771590e9008d22ab6) C:\Windows\system32\DRIVERS\ipfltdrv.sys 21:48:51.0322 4292 IpFilterDriver - ok 21:48:52.0133 4292 IPMIDRV (0fc1aea580957aa8817b8f305d18ca3a) C:\Windows\system32\drivers\IPMIDrv.sys 21:48:52.0211 4292 IPMIDRV - ok 21:48:53.0428 4292 IPNAT (af9b39a7e7b6caa203b3862582e9f2d0) C:\Windows\system32\drivers\ipnat.sys 21:48:53.0537 4292 IPNAT - ok 21:48:54.0036 4292 IRENUM (3abf5e7213eb28966d55d58b515d5ce9) C:\Windows\system32\drivers\irenum.sys 21:48:54.0068 4292 IRENUM - ok 21:48:54.0224 4292 isapnp (2f7b28dc3e1183e5eb418df55c204f38) C:\Windows\system32\drivers\isapnp.sys 21:48:54.0224 4292 isapnp - ok 21:48:54.0473 4292 iScsiPrt (d931d7309deb2317035b07c9f9e6b0bd) C:\Windows\system32\drivers\msiscsi.sys 21:48:54.0567 4292 iScsiPrt - ok 21:48:55.0019 4292 k57nd60a (d85f3f18e44f7447b5f1ba5c85baeb7c) C:\Windows\system32\DRIVERS\k57nd60a.sys 21:48:55.0035 4292 k57nd60a - ok 21:48:55.0160 4292 kbdclass (bc02336f1cba7dcc7d1213bb588a68a5) C:\Windows\system32\drivers\kbdclass.sys 21:48:55.0175 4292 kbdclass - ok 21:48:55.0284 4292 kbdhid (0705eff5b42a9db58548eec3b26bb484) C:\Windows\system32\drivers\kbdhid.sys 21:48:55.0300 4292 kbdhid - ok 21:48:55.0409 4292 KSecDD (da1e991a61cfdd755a589e206b97644b) C:\Windows\system32\Drivers\ksecdd.sys 21:48:55.0409 4292 KSecDD - ok 21:49:01.0103 4292 KSecPkg (7e33198d956943a4f11a5474c1e9106f) C:\Windows\system32\Drivers\ksecpkg.sys 21:49:12.0694 4292 KSecPkg - ok 21:50:00.0508 4292 ksthunk (6869281e78cb31a43e969f06b57347c4) C:\Windows\system32\drivers\ksthunk.sys 21:50:42.0425 4292 ksthunk - ok 21:52:08.0709 4292 L1E - ok 21:53:51.0498 4292 lltdio (1538831cf8ad2979a04c423779465827) C:\Windows\system32\DRIVERS\lltdio.sys 21:53:51.0560 4292 lltdio - ok 21:53:51.0701 4292 LSI_FC (1a93e54eb0ece102495a51266dcdb6a6) C:\Windows\system32\DRIVERS\lsi_fc.sys 21:53:51.0716 4292 LSI_FC - ok 21:53:51.0825 4292 LSI_SAS (1047184a9fdc8bdbff857175875ee810) C:\Windows\system32\DRIVERS\lsi_sas.sys 21:53:51.0841 4292 LSI_SAS - ok 21:53:51.0966 4292 LSI_SAS2 (30f5c0de1ee8b5bc9306c1f0e4a75f93) C:\Windows\system32\DRIVERS\lsi_sas2.sys 21:53:51.0981 4292 LSI_SAS2 - ok 21:53:52.0184 4292 LSI_SCSI (0504eacaff0d3c8aed161c4b0d369d4a) C:\Windows\system32\DRIVERS\lsi_scsi.sys 21:53:52.0200 4292 LSI_SCSI - ok 21:53:52.0403 4292 luafv (43d0f98e1d56ccddb0d5254cff7b356e) C:\Windows\system32\drivers\luafv.sys 21:53:52.0481 4292 luafv - ok 21:53:52.0605 4292 megasas (a55805f747c6edb6a9080d7c633bd0f4) C:\Windows\system32\DRIVERS\megasas.sys 21:53:52.0621 4292 megasas - ok 21:53:52.0808 4292 MegaSR (baf74ce0072480c3b6b7c13b2a94d6b3) C:\Windows\system32\DRIVERS\MegaSR.sys 21:53:52.0824 4292 MegaSR - ok 21:53:53.0027 4292 Modem (800ba92f7010378b09f9ed9270f07137) C:\Windows\system32\drivers\modem.sys 21:53:53.0105 4292 Modem - ok 21:53:53.0261 4292 monitor (b03d591dc7da45ece20b3b467e6aadaa) C:\Windows\system32\DRIVERS\monitor.sys 21:53:53.0292 4292 monitor - ok 21:53:53.0417 4292 mouclass (7d27ea49f3c1f687d357e77a470aea99) C:\Windows\system32\drivers\mouclass.sys 21:53:53.0432 4292 mouclass - ok 21:53:53.0588 4292 mouhid (d3bf052c40b0c4166d9fd86a4288c1e6) C:\Windows\system32\DRIVERS\mouhid.sys 21:53:53.0635 4292 mouhid - ok 21:53:53.0775 4292 mountmgr (32e7a3d591d671a6df2db515a5cbe0fa) C:\Windows\system32\drivers\mountmgr.sys 21:53:53.0791 4292 mountmgr - ok 21:53:53.0947 4292 mpio (a44b420d30bd56e145d6a2bc8768ec58) C:\Windows\system32\drivers\mpio.sys 21:53:53.0963 4292 mpio - ok 21:53:54.0087 4292 mpsdrv (6c38c9e45ae0ea2fa5e551f2ed5e978f) C:\Windows\system32\drivers\mpsdrv.sys 21:53:54.0150 4292 mpsdrv - ok 21:53:54.0321 4292 MRxDAV (dc722758b8261e1abafd31a3c0a66380) C:\Windows\system32\drivers\mrxdav.sys 21:53:54.0415 4292 MRxDAV - ok 21:53:54.0571 4292 mrxsmb (a5d9106a73dc88564c825d317cac68ac) C:\Windows\system32\DRIVERS\mrxsmb.sys 21:53:54.0618 4292 mrxsmb - ok 21:53:54.0821 4292 mrxsmb10 (d711b3c1d5f42c0c2415687be09fc163) C:\Windows\system32\DRIVERS\mrxsmb10.sys 21:53:54.0852 4292 mrxsmb10 - ok 21:53:55.0117 4292 mrxsmb20 (9423e9d355c8d303e76b8cfbd8a5c30c) C:\Windows\system32\DRIVERS\mrxsmb20.sys 21:53:55.0133 4292 mrxsmb20 - ok 21:53:55.0304 4292 msahci (c25f0bafa182cbca2dd3c851c2e75796) C:\Windows\system32\drivers\msahci.sys 21:53:55.0304 4292 msahci - ok 21:53:55.0429 4292 msdsm (db801a638d011b9633829eb6f663c900) C:\Windows\system32\drivers\msdsm.sys 21:53:55.0445 4292 msdsm - ok 21:53:55.0569 4292 Msfs (aa3fb40e17ce1388fa1bedab50ea8f96) C:\Windows\system32\drivers\Msfs.sys 21:53:55.0616 4292 Msfs - ok 21:53:55.0757 4292 mshidkmdf (f9d215a46a8b9753f61767fa72a20326) C:\Windows\System32\drivers\mshidkmdf.sys 21:53:55.0819 4292 mshidkmdf - ok 21:53:55.0991 4292 msisadrv (d916874bbd4f8b07bfb7fa9b3ccae29d) C:\Windows\system32\drivers\msisadrv.sys 21:53:56.0006 4292 msisadrv - ok 21:53:56.0178 4292 MSKSSRV (49ccf2c4fea34ffad8b1b59d49439366) C:\Windows\system32\drivers\MSKSSRV.sys 21:53:56.0225 4292 MSKSSRV - ok 21:53:56.0443 4292 MSPCLOCK (bdd71ace35a232104ddd349ee70e1ab3) C:\Windows\system32\drivers\MSPCLOCK.sys 21:53:56.0505 4292 MSPCLOCK - ok 21:53:56.0646 4292 MSPQM (4ed981241db27c3383d72092b618a1d0) C:\Windows\system32\drivers\MSPQM.sys 21:53:56.0708 4292 MSPQM - ok 21:53:56.0880 4292 MsRPC (759a9eeb0fa9ed79da1fb7d4ef78866d) C:\Windows\system32\drivers\MsRPC.sys 21:53:56.0895 4292 MsRPC - ok 21:53:57.0051 4292 mssmbios (0eed230e37515a0eaee3c2e1bc97b288) C:\Windows\system32\drivers\mssmbios.sys 21:53:57.0067 4292 mssmbios - ok 21:53:57.0161 4292 MSTEE (2e66f9ecb30b4221a318c92ac2250779) C:\Windows\system32\drivers\MSTEE.sys 21:53:57.0207 4292 MSTEE - ok 21:53:57.0223 4292 MTConfig (7ea404308934e675bffde8edf0757bcd) C:\Windows\system32\DRIVERS\MTConfig.sys 21:53:57.0270 4292 MTConfig - ok 21:53:57.0301 4292 Mup (f9a18612fd3526fe473c1bda678d61c8) C:\Windows\system32\Drivers\mup.sys 21:53:57.0317 4292 Mup - ok 21:53:57.0426 4292 NativeWifiP (1ea3749c4114db3e3161156ffffa6b33) C:\Windows\system32\DRIVERS\nwifi.sys 21:53:57.0473 4292 NativeWifiP - ok 21:53:57.0629 4292 NDIS (79b47fd40d9a817e932f9d26fac0a81c) C:\Windows\system32\drivers\ndis.sys 21:53:57.0660 4292 NDIS - ok 21:53:57.0785 4292 NdisCap (9f9a1f53aad7da4d6fef5bb73ab811ac) C:\Windows\system32\DRIVERS\ndiscap.sys 21:53:57.0831 4292 NdisCap - ok 21:53:57.0894 4292 NdisTapi (30639c932d9fef22b31268fe25a1b6e5) C:\Windows\system32\DRIVERS\ndistapi.sys 21:53:57.0956 4292 NdisTapi - ok 21:53:58.0221 4292 Ndisuio (136185f9fb2cc61e573e676aa5402356) C:\Windows\system32\DRIVERS\ndisuio.sys 21:53:58.0284 4292 Ndisuio - ok 21:53:58.0409 4292 NdisWan (53f7305169863f0a2bddc49e116c2e11) C:\Windows\system32\DRIVERS\ndiswan.sys 21:53:58.0471 4292 NdisWan - ok 21:53:58.0518 4292 NDProxy (015c0d8e0e0421b4cfd48cffe2825879) C:\Windows\system32\drivers\NDProxy.sys 21:53:58.0580 4292 NDProxy - ok 21:53:58.0752 4292 Netaapl (6f4607e2333fe21e9e3ff8133a88b35b) C:\Windows\system32\DRIVERS\netaapl64.sys 21:53:58.0799 4292 Netaapl - ok 21:53:58.0908 4292 NetBIOS (86743d9f5d2b1048062b14b1d84501c4) C:\Windows\system32\DRIVERS\netbios.sys 21:53:58.0986 4292 NetBIOS - ok 21:53:59.0157 4292 NetBT (09594d1089c523423b32a4229263f068) C:\Windows\system32\DRIVERS\netbt.sys 21:53:59.0220 4292 NetBT - ok 21:53:59.0345 4292 nfrd960 (77889813be4d166cdab78ddba990da92) C:\Windows\system32\DRIVERS\nfrd960.sys 21:53:59.0345 4292 nfrd960 - ok 21:53:59.0625 4292 Npfs (1e4c4ab5c9b8dd13179bbdc75a2a01f7) C:\Windows\system32\drivers\Npfs.sys 21:53:59.0703 4292 Npfs - ok 21:53:59.0750 4292 nsiproxy (e7f5ae18af4168178a642a9247c63001) C:\Windows\system32\drivers\nsiproxy.sys 21:53:59.0797 4292 nsiproxy - ok 21:54:00.0171 4292 Ntfs (a2f74975097f52a00745f9637451fdd8) C:\Windows\system32\drivers\Ntfs.sys 21:54:00.0218 4292 Ntfs - ok 21:54:00.0390 4292 NTIDrvr (64ddd0dee976302f4bd93e5efcc2f013) C:\Windows\system32\drivers\NTIDrvr.sys 21:54:00.0405 4292 NTIDrvr - ok 21:54:00.0499 4292 Null (9899284589f75fa8724ff3d16aed75c1) C:\Windows\system32\drivers\Null.sys 21:54:00.0561 4292 Null - ok 21:54:00.0624 4292 nvraid (0a92cb65770442ed0dc44834632f66ad) C:\Windows\system32\drivers\nvraid.sys 21:54:00.0639 4292 nvraid - ok 21:54:00.0671 4292 nvstor (dab0e87525c10052bf65f06152f37e4a) C:\Windows\system32\drivers\nvstor.sys 21:54:00.0686 4292 nvstor - ok 21:54:00.0733 4292 nv_agp (270d7cd42d6e3979f6dd0146650f0e05) C:\Windows\system32\drivers\nv_agp.sys 21:54:00.0733 4292 nv_agp - ok 21:54:00.0905 4292 ohci1394 (3589478e4b22ce21b41fa1bfc0b8b8a0) C:\Windows\system32\drivers\ohci1394.sys 21:54:00.0951 4292 ohci1394 - ok 21:54:01.0092 4292 Parport (0086431c29c35be1dbc43f52cc273887) C:\Windows\system32\DRIVERS\parport.sys 21:54:01.0123 4292 Parport - ok 21:54:01.0154 4292 partmgr (871eadac56b0a4c6512bbe32753ccf79) C:\Windows\system32\drivers\partmgr.sys 21:54:01.0170 4292 partmgr - ok 21:54:01.0185 4292 pci (94575c0571d1462a0f70bde6bd6ee6b3) C:\Windows\system32\drivers\pci.sys 21:54:01.0201 4292 pci - ok 21:54:01.0248 4292 pciide (b5b8b5ef2e5cb34df8dcf8831e3534fa) C:\Windows\system32\drivers\pciide.sys 21:54:01.0263 4292 pciide - ok 21:54:01.0310 4292 pcmcia (b2e81d4e87ce48589f98cb8c05b01f2f) C:\Windows\system32\DRIVERS\pcmcia.sys 21:54:01.0326 4292 pcmcia - ok 21:54:01.0357 4292 pcw (d6b9c2e1a11a3a4b26a182ffef18f603) C:\Windows\system32\drivers\pcw.sys 21:54:01.0373 4292 pcw - ok 21:54:01.0404 4292 PEAUTH (68769c3356b3be5d1c732c97b9a80d6e) C:\Windows\system32\drivers\peauth.sys 21:54:01.0451 4292 PEAUTH - ok 21:54:01.0638 4292 PptpMiniport (f92a2c41117a11a00be01ca01a7fcde9) C:\Windows\system32\DRIVERS\raspptp.sys 21:54:01.0685 4292 PptpMiniport - ok 21:54:01.0872 4292 Processor (0d922e23c041efb1c3fac2a6f943c9bf) C:\Windows\system32\DRIVERS\processr.sys 21:54:01.0903 4292 Processor - ok 21:54:02.0028 4292 Psched (0557cf5a2556bd58e26384169d72438d) C:\Windows\system32\DRIVERS\pacer.sys 21:54:02.0075 4292 Psched - ok 21:54:02.0246 4292 ql2300 (a53a15a11ebfd21077463ee2c7afeef0) C:\Windows\system32\DRIVERS\ql2300.sys 21:54:02.0324 4292 ql2300 - ok 21:54:02.0449 4292 ql40xx (4f6d12b51de1aaeff7dc58c4d75423c8) C:\Windows\system32\DRIVERS\ql40xx.sys 21:54:02.0465 4292 ql40xx - ok 21:54:02.0527 4292 QWAVEdrv (76707bb36430888d9ce9d705398adb6c) C:\Windows\system32\drivers\qwavedrv.sys 21:54:02.0574 4292 QWAVEdrv - ok 21:54:02.0714 4292 RasAcd (5a0da8ad5762fa2d91678a8a01311704) C:\Windows\system32\DRIVERS\rasacd.sys 21:54:02.0792 4292 RasAcd - ok 21:54:02.0948 4292 RasAgileVpn (7ecff9b22276b73f43a99a15a6094e90) C:\Windows\system32\DRIVERS\AgileVpn.sys 21:54:02.0979 4292 RasAgileVpn - ok 21:54:03.0026 4292 Rasl2tp (471815800ae33e6f1c32fb1b97c490ca) C:\Windows\system32\DRIVERS\rasl2tp.sys 21:54:03.0104 4292 Rasl2tp - ok 21:54:03.0135 4292 RasPppoe (855c9b1cd4756c5e9a2aa58a15f58c25) C:\Windows\system32\DRIVERS\raspppoe.sys 21:54:03.0182 4292 RasPppoe - ok 21:54:03.0291 4292 RasSstp (e8b1e447b008d07ff47d016c2b0eeecb) C:\Windows\system32\DRIVERS\rassstp.sys 21:54:03.0354 4292 RasSstp - ok 21:54:03.0510 4292 rdbss (77f665941019a1594d887a74f301fa2f) C:\Windows\system32\DRIVERS\rdbss.sys 21:54:03.0572 4292 rdbss - ok 21:54:03.0666 4292 rdpbus (302da2a0539f2cf54d7c6cc30c1f2d8d) C:\Windows\system32\DRIVERS\rdpbus.sys 21:54:03.0697 4292 rdpbus - ok 21:54:03.0837 4292 RDPCDD (cea6cc257fc9b7715f1c2b4849286d24) C:\Windows\system32\DRIVERS\RDPCDD.sys 21:54:03.0931 4292 RDPCDD - ok 21:54:04.0071 4292 RDPENCDD (bb5971a4f00659529a5c44831af22365) C:\Windows\system32\drivers\rdpencdd.sys 21:54:04.0118 4292 RDPENCDD - ok 21:54:04.0227 4292 RDPREFMP (216f3fa57533d98e1f74ded70113177a) C:\Windows\system32\drivers\rdprefmp.sys 21:54:04.0290 4292 RDPREFMP - ok 21:54:04.0446 4292 RDPWD (15b66c206b5cb095bab980553f38ed23) C:\Windows\system32\drivers\RDPWD.sys 21:54:04.0508 4292 RDPWD - ok 21:54:04.0649 4292 rdyboost (34ed295fa0121c241bfef24764fc4520) C:\Windows\system32\drivers\rdyboost.sys 21:54:04.0664 4292 rdyboost - ok 21:54:04.0867 4292 RFCOMM (3dd798846e2c28102b922c56e71b7932) C:\Windows\system32\DRIVERS\rfcomm.sys 21:54:04.0914 4292 RFCOMM - ok 21:54:05.0070 4292 rspndr (ddc86e4f8e7456261e637e3552e804ff) C:\Windows\system32\DRIVERS\rspndr.sys 21:54:05.0132 4292 rspndr - ok 21:54:05.0319 4292 RTHDMIAzAudService (7421a35c45484b95e83b5e9e107cefc2) C:\Windows\system32\drivers\RtHDMIVX.sys 21:54:05.0335 4292 RTHDMIAzAudService - ok 21:54:05.0491 4292 sbp2port (ac03af3329579fffb455aa2daabbe22b) C:\Windows\system32\drivers\sbp2port.sys 21:54:05.0507 4292 sbp2port - ok 21:54:05.0616 4292 scfilter (253f38d0d7074c02ff8deb9836c97d2b) C:\Windows\system32\DRIVERS\scfilter.sys 21:54:05.0678 4292 scfilter - ok 21:54:05.0819 4292 secdrv (3ea8a16169c26afbeb544e0e48421186) C:\Windows\system32\drivers\secdrv.sys 21:54:05.0881 4292 secdrv - ok 21:54:05.0975 4292 Serenum (cb624c0035412af0debec78c41f5ca1b) C:\Windows\system32\DRIVERS\serenum.sys 21:54:05.0990 4292 Serenum - ok 21:54:06.0037 4292 Serial (c1d8e28b2c2adfaec4ba89e9fda69bd6) C:\Windows\system32\DRIVERS\serial.sys 21:54:06.0068 4292 Serial - ok 21:54:06.0318 4292 sermouse (1c545a7d0691cc4a027396535691c3e3) C:\Windows\system32\DRIVERS\sermouse.sys 21:54:06.0380 4292 sermouse - ok 21:54:06.0489 4292 sffdisk (a554811bcd09279536440c964ae35bbf) C:\Windows\system32\drivers\sffdisk.sys 21:54:06.0536 4292 sffdisk - ok 21:54:06.0614 4292 sffp_mmc (ff414f0baefeba59bc6c04b3db0b87bf) C:\Windows\system32\drivers\sffp_mmc.sys 21:54:06.0661 4292 sffp_mmc - ok 21:54:06.0708 4292 sffp_sd (dd85b78243a19b59f0637dcf284da63c) C:\Windows\system32\drivers\sffp_sd.sys 21:54:06.0817 4292 sffp_sd - ok 21:54:06.0864 4292 sfloppy (a9d601643a1647211a1ee2ec4e433ff4) C:\Windows\system32\DRIVERS\sfloppy.sys 21:54:06.0895 4292 sfloppy - ok 21:54:07.0191 4292 SiSRaid2 (843caf1e5fde1ffd5ff768f23a51e2e1) C:\Windows\system32\DRIVERS\SiSRaid2.sys 21:54:07.0207 4292 SiSRaid2 - ok 21:54:07.0316 4292 SiSRaid4 (6a6c106d42e9ffff8b9fcb4f754f6da4) C:\Windows\system32\DRIVERS\sisraid4.sys 21:54:07.0332 4292 SiSRaid4 - ok 21:54:07.0363 4292 Smb (548260a7b8654e024dc30bf8a7c5baa4) C:\Windows\system32\DRIVERS\smb.sys 21:54:07.0441 4292 Smb - ok 21:54:07.0566 4292 spldr (b9e31e5cacdfe584f34f730a677803f9) C:\Windows\system32\drivers\spldr.sys 21:54:07.0581 4292 spldr - ok 21:54:07.0628 4292 srv (441fba48bff01fdb9d5969ebc1838f0b) C:\Windows\system32\DRIVERS\srv.sys 21:54:07.0706 4292 srv - ok 21:54:07.0815 4292 srv2 (b4adebbf5e3677cce9651e0f01f7cc28) C:\Windows\system32\DRIVERS\srv2.sys 21:54:07.0862 4292 srv2 - ok 21:54:07.0987 4292 srvnet (27e461f0be5bff5fc737328f749538c3) C:\Windows\system32\DRIVERS\srvnet.sys 21:54:08.0018 4292 srvnet - ok 21:54:08.0143 4292 stexstor (f3817967ed533d08327dc73bc4d5542a) C:\Windows\system32\DRIVERS\stexstor.sys 21:54:08.0159 4292 stexstor - ok 21:54:08.0221 4292 swenum (d01ec09b6711a5f8e7e6564a4d0fbc90) C:\Windows\system32\drivers\swenum.sys 21:54:08.0237 4292 swenum - ok 21:54:08.0377 4292 SynTP (ed6d1424e5b0c21a57b28dd8508d6843) C:\Windows\system32\DRIVERS\SynTP.sys 21:54:08.0393 4292 SynTP - ok 21:54:08.0564 4292 tclondrv (bb7c91d0e97aa8126212838d32dcc83c) C:\Windows\system32\DRIVERS\tclondrv.sys 21:54:08.0580 4292 tclondrv - ok 21:54:08.0783 4292 Tcpip (fc62769e7bff2896035aeed399108162) C:\Windows\system32\drivers\tcpip.sys 21:54:08.0876 4292 Tcpip - ok 21:54:09.0079 4292 TCPIP6 (fc62769e7bff2896035aeed399108162) C:\Windows\system32\DRIVERS\tcpip.sys 21:54:09.0110 4292 TCPIP6 - ok 21:54:09.0282 4292 tcpipreg (df687e3d8836bfb04fcc0615bf15a519) C:\Windows\system32\drivers\tcpipreg.sys 21:54:09.0344 4292 tcpipreg - ok 21:54:09.0453 4292 TDPIPE (3371d21011695b16333a3934340c4e7c) C:\Windows\system32\drivers\tdpipe.sys 21:54:09.0500 4292 TDPIPE - ok 21:54:09.0641 4292 TDTCP (e4245bda3190a582d55ed09e137401a9) C:\Windows\system32\drivers\tdtcp.sys 21:54:09.0687 4292 TDTCP - ok 21:54:09.0843 4292 tdx (ddad5a7ab24d8b65f8d724f5c20fd806) C:\Windows\system32\DRIVERS\tdx.sys 21:54:09.0921 4292 tdx - ok 21:54:10.0155 4292 TermDD (561e7e1f06895d78de991e01dd0fb6e5) C:\Windows\system32\drivers\termdd.sys 21:54:10.0171 4292 TermDD - ok 21:55:09.0545 4292 tssecsrv - ok 21:55:09.0701 4292 TsUsbFlt (d11c783e3ef9a3c52c0ebe83cc5000e9) C:\Windows\system32\drivers\tsusbflt.sys 21:55:09.0747 4292 TsUsbFlt - ok 21:55:09.0950 4292 tunnel (3566a8daafa27af944f5d705eaa64894) C:\Windows\system32\DRIVERS\tunnel.sys 21:55:10.0013 4292 tunnel - ok 21:55:10.0247 4292 TurboB (825e7a1f48fb8bcfba27c178aab4e275) C:\Windows\system32\DRIVERS\TurboB.sys 21:55:10.0247 4292 TurboB - ok 21:55:10.0340 4292 uagp35 (b4dd609bd7e282bfc683cec7eaaaad67) C:\Windows\system32\DRIVERS\uagp35.sys 21:55:10.0356 4292 uagp35 - ok 21:55:10.0449 4292 UBHelper (2e22c1fd397a5a9ffef55e9d1fc96c00) C:\Windows\system32\drivers\UBHelper.sys 21:55:10.0449 4292 UBHelper - ok 21:55:10.0527 4292 udfs (ff4232a1a64012baa1fd97c7b67df593) C:\Windows\system32\DRIVERS\udfs.sys 21:55:10.0590 4292 udfs - ok 21:55:35.0472 4292 uliagpkx - ok 21:55:35.0612 4292 umbus (dc54a574663a895c8763af0fa1ff7561) C:\Windows\system32\drivers\umbus.sys 21:55:35.0644 4292 umbus - ok 21:55:35.0690 4292 UmPass (b2e8e8cb557b156da5493bbddcc1474d) C:\Windows\system32\DRIVERS\umpass.sys 21:55:35.0722 4292 UmPass - ok 21:55:35.0971 4292 USBAAPL64 (aa33fc47ed58c34e6e9261e4f850b7eb) C:\Windows\system32\Drivers\usbaapl64.sys 21:55:36.0034 4292 USBAAPL64 - ok 21:55:36.0221 4292 usbccgp (6f1a3157a1c89435352ceb543cdb359c) C:\Windows\system32\drivers\usbccgp.sys 21:55:36.0252 4292 usbccgp - ok 21:55:36.0361 4292 usbcir (af0892a803fdda7492f595368e3b68e7) C:\Windows\system32\drivers\usbcir.sys 21:55:36.0408 4292 usbcir - ok 21:55:36.0439 4292 usbehci (c025055fe7b87701eb042095df1a2d7b) C:\Windows\system32\drivers\usbehci.sys 21:55:36.0455 4292 usbehci - ok 21:56:09.0293 4292 usbhub (3c75f8040bd7de4a57bf2187c8ad9f4d) C:\Windows\system32\DRIVERS\usbhub.sys 21:56:09.0324 4292 Suspicious file (Forged): C:\Windows\system32\DRIVERS\usbhub.sys. Real md5: 3c75f8040bd7de4a57bf2187c8ad9f4d, Fake md5: 287c6c9410b111b68b52ca298f7b8c24 21:56:09.0324 4292 usbhub ( ForgedFile.Multi.Generic ) - warning 21:56:09.0324 4292 usbhub - detected ForgedFile.Multi.Generic (1) 21:56:09.0683 4292 usbohci (9840fc418b4cbd632d3d0a667a725c31) C:\Windows\system32\drivers\usbohci.sys 21:56:09.0714 4292 usbohci - ok 21:56:09.0776 4292 usbprint (73188f58fb384e75c4063d29413cee3d) C:\Windows\system32\DRIVERS\usbprint.sys 21:56:09.0808 4292 usbprint - ok 21:56:09.0854 4292 usbser (4acee387fa8fd39f83564fcd2fc234f2) C:\Windows\system32\DRIVERS\usbser.sys 21:56:09.0901 4292 usbser - ok 21:56:09.0948 4292 USBSTOR (fed648b01349a3c8395a5169db5fb7d6) C:\Windows\system32\DRIVERS\USBSTOR.SYS 21:56:09.0995 4292 USBSTOR - ok 21:56:10.0026 4292 usbuhci (62069a34518bcf9c1fd9e74b3f6db7cd) C:\Windows\system32\drivers\usbuhci.sys 21:56:10.0057 4292 usbuhci - ok 21:56:10.0182 4292 usbvideo (454800c2bc7f3927ce030141ee4f4c50) C:\Windows\System32\Drivers\usbvideo.sys 21:56:10.0213 4292 usbvideo - ok 21:56:42.0271 4292 vdrvroot (c5c876ccfc083ff3b128f933823e87bd) C:\Windows\system32\drivers\vdrvroot.sys 21:56:42.0287 4292 vdrvroot - ok 21:57:50.0443 4292 vga (8a46a4bc77a3f321996ff4079f834054) C:\Windows\system32\DRIVERS\vgapnp.sys 21:57:58.0462 4292 Suspicious file (Forged): C:\Windows\system32\DRIVERS\vgapnp.sys. Real md5: 8a46a4bc77a3f321996ff4079f834054, Fake md5: da4da3f5e02943c2dc8c6ed875de68dd 21:57:58.0462 4292 vga ( ForgedFile.Multi.Generic ) - warning 21:57:58.0462 4292 vga - detected ForgedFile.Multi.Generic (1) 21:58:41.0143 4292 VgaSave (53e92a310193cb3c03bea963de7d9cfc) C:\Windows\System32\drivers\vga.sys 21:58:41.0284 4292 VgaSave - ok 21:58:41.0487 4292 vhdmp (2ce2df28c83aeaf30084e1b1eb253cbb) C:\Windows\system32\drivers\vhdmp.sys 21:58:41.0518 4292 vhdmp - ok 21:58:41.0955 4292 viaide (e5689d93ffe4e5d66c0178761240dd54) C:\Windows\system32\drivers\viaide.sys 21:58:41.0970 4292 viaide - ok 21:58:42.0189 4292 volmgr (d2aafd421940f640b407aefaaebd91b0) C:\Windows\system32\drivers\volmgr.sys 21:58:42.0204 4292 volmgr - ok 21:58:42.0360 4292 volmgrx (a255814907c89be58b79ef2f189b843b) C:\Windows\system32\drivers\volmgrx.sys 21:58:42.0376 4292 volmgrx - ok 21:58:42.0906 4292 volsnap (0d08d2f3b3ff84e433346669b5e0f639) C:\Windows\system32\drivers\volsnap.sys 21:58:42.0922 4292 volsnap - ok 21:58:43.0156 4292 vsmraid (5e2016ea6ebaca03c04feac5f330d997) C:\Windows\system32\DRIVERS\vsmraid.sys 21:58:43.0171 4292 vsmraid - ok 21:58:43.0203 4292 vwifibus (36d4720b72b5c5d9cb2b9c29e9df67a1) C:\Windows\system32\DRIVERS\vwifibus.sys 21:58:43.0250 4292 vwifibus - ok 21:58:43.0360 4292 vwififlt (6a3d66263414ff0d6fa754c646612f3f) C:\Windows\system32\DRIVERS\vwififlt.sys 21:58:43.0406 4292 vwififlt - ok 21:58:43.0562 4292 vwifimp (6a638fc4bfddc4d9b186c28c91bd1a01) C:\Windows\system32\DRIVERS\vwifimp.sys 21:58:43.0594 4292 vwifimp - ok 21:58:43.0874 4292 WacomPen (4e9440f4f152a7b944cb1663d3935a3e) C:\Windows\system32\DRIVERS\wacompen.sys 21:58:43.0906 4292 WacomPen - ok 21:58:43.0952 4292 WANARP (356afd78a6ed4457169241ac3965230c) C:\Windows\system32\DRIVERS\wanarp.sys 21:58:44.0030 4292 WANARP - ok 21:58:44.0062 4292 Wanarpv6 (356afd78a6ed4457169241ac3965230c) C:\Windows\system32\DRIVERS\wanarp.sys 21:58:44.0108 4292 Wanarpv6 - ok 21:58:44.0202 4292 Wd (72889e16ff12ba0f235467d6091b17dc) C:\Windows\system32\DRIVERS\wd.sys 21:58:44.0218 4292 Wd - ok 21:58:44.0265 4292 Wdf01000 (441bd2d7b4f98134c3a4f9fa570fd250) C:\Windows\system32\drivers\Wdf01000.sys 21:58:44.0297 4292 Wdf01000 - ok 21:58:44.0484 4292 WfpLwf (611b23304bf067451a9fdee01fbdd725) C:\Windows\system32\DRIVERS\wfplwf.sys 21:58:44.0531 4292 WfpLwf - ok 21:58:44.0640 4292 WIMMount (05ecaec3e4529a7153b3136ceb49f0ec) C:\Windows\system32\drivers\wimmount.sys 21:58:44.0655 4292 WIMMount - ok 21:58:44.0811 4292 WinUsb (fe88b288356e7b47b74b13372add906d) C:\Windows\system32\DRIVERS\WinUsb.sys 21:58:44.0858 4292 WinUsb - ok 21:58:45.0014 4292 WmiAcpi (f6ff8944478594d0e414d3f048f0d778) C:\Windows\system32\drivers\wmiacpi.sys 21:58:45.0061 4292 WmiAcpi - ok 21:58:45.0265 4292 ws2ifsl (6bcc1d7d2fd2453957c5479a32364e52) C:\Windows\system32\drivers\ws2ifsl.sys 21:58:45.0327 4292 ws2ifsl - ok 21:58:45.0514 4292 WudfPf (d3381dc54c34d79b22cee0d65ba91b7c) C:\Windows\system32\drivers\WudfPf.sys 21:58:45.0577 4292 WudfPf - ok 21:58:45.0702 4292 WUDFRd (cf8d590be3373029d57af80914190682) C:\Windows\system32\DRIVERS\WUDFRd.sys 21:58:45.0780 4292 WUDFRd - ok 21:58:46.0107 4292 MBR (0x1B8) (5c616939100b85e558da92b899a0fc36) \Device\Harddisk0\DR0 21:58:46.0684 4292 \Device\Harddisk0\DR0 - ok 21:58:46.0747 4292 Boot (0x1200) (5e20630422109a1e467f9c1f0d049591) \Device\Harddisk0\DR0\Partition0 21:58:46.0747 4292 \Device\Harddisk0\DR0\Partition0 - ok 21:58:46.0794 4292 Boot (0x1200) (b5b67205ca239334a251dcdbef060284) \Device\Harddisk0\DR0\Partition1 21:58:46.0794 4292 \Device\Harddisk0\DR0\Partition1 - ok 21:58:46.0794 4292 ============================================================ 21:58:46.0794 4292 Scan finished 21:58:46.0794 4292 ============================================================ 21:58:46.0809 4800 Detected object count: 3 21:58:46.0809 4800 Actual detected object count: 3 21:59:01.0879 4800 BTHUSB ( ForgedFile.Multi.Generic ) - skipped by user 21:59:01.0879 4800 BTHUSB ( ForgedFile.Multi.Generic ) - User select action: Skip 21:59:01.0879 4800 usbhub ( ForgedFile.Multi.Generic ) - skipped by user 21:59:01.0879 4800 usbhub ( ForgedFile.Multi.Generic ) - User select action: Skip 21:59:01.0879 4800 vga ( ForgedFile.Multi.Generic ) - skipped by user 21:59:01.0879 4800 vga ( ForgedFile.Multi.Generic ) - User select action: Skip |
|
29.02.2012, 13:12
| #7 |
| /// Malware-holic | Windows Explorer funktioniert nicht mehr / Startet immer wieder eu das sieht soweit io aus. gibts bereits ne besserung? währen denn viele daten zu sichern, man könnte halt überlegen das system auch einmal komplett neu aufzusetzen und abzusichern.
__________________ -Verdächtige mails bitte an uns zur Analyse weiterleiten: markusg.trojaner-board@web.de Weiterleiten Anleitung: http://markusg.trojaner-board.de Mails bitte vorerst nach obiger Anleitung an markusg.trojaner-board@web.de Weiterleiten Wenn Ihr uns unterstützen möchtet |
|
29.02.2012, 13:25
| #8 |
| | Windows Explorer funktioniert nicht mehr / Startet immer wieder eu keine verbesserung in sicht.leider nicht hab heut fürh 2 stunden zum hochfahren gebraucht, weil der internet explorer so langsam gearbeitet hat, dass mich die eingabe "trojaner-board" mit jedem buchstaben ca 10min gebraucht hat.ich komme nicht an C ran. dann geht wieder das fenster (explorer reagiert nicht) auf und schließt sofort alles. ich denke es geht um ca 40GB (Musik Bilder und Daten) Die bilder sind super wichtig und leider nur auf dem rechner! aber seit neuestem bekomme ich diese meldung: Die Anweisung bei "0x000007FEFB558A59" verwies auf Speicher bei "0x0000000007D72CFF". Die erforderlichen Daten wurden aufgrund eines E/A-Fehlers in "0x0000185" nicht an den Arbeitsspeicher übertragen. Klicken Sie auf "OK", um das Programm zu beeden. ___________________________________ |
|
29.02.2012, 13:37
| #9 |
| /// Malware-holic | Windows Explorer funktioniert nicht mehr / Startet immer wieder eu kommst du an nen zweiten pc? Download | Ubuntu dort mal ubuntu live cd brennen, an dem betroffenen pc starten, also cd bei neustart einlegen. und im probier modus starten, so kannst du schon mal deine wichtigen daten, wie bilder, dokumente, musik, retten.
__________________ -Verdächtige mails bitte an uns zur Analyse weiterleiten: markusg.trojaner-board@web.de Weiterleiten Anleitung: http://markusg.trojaner-board.de Mails bitte vorerst nach obiger Anleitung an markusg.trojaner-board@web.de Weiterleiten Wenn Ihr uns unterstützen möchtet |
|
29.02.2012, 14:15
| #10 |
| | Windows Explorer funktioniert nicht mehr / Startet immer wieder eu Komm ich. kann ich die daten denn dann auf meinem jetzigen laptop brennen?ich komme an den 2. rechner ran aber erst am wochenende? ich versuche es und meld mich dann wieder! danke schon mal vor ab und ein schönes we! |
|
29.02.2012, 16:53
| #11 |
| /// Malware-holic | Windows Explorer funktioniert nicht mehr / Startet immer wieder eu naja, da das gerät kaum arbeitet würde ich dir dazu nicht raten, machs über die linux cd, da kannst du dann in ruhe die daten auf ne externe platte oder stick ziehen
__________________ -Verdächtige mails bitte an uns zur Analyse weiterleiten: markusg.trojaner-board@web.de Weiterleiten Anleitung: http://markusg.trojaner-board.de Mails bitte vorerst nach obiger Anleitung an markusg.trojaner-board@web.de Weiterleiten Wenn Ihr uns unterstützen möchtet |
|
05.03.2012, 21:33
| #12 |
| | Windows Explorer funktioniert nicht mehr / Startet immer wieder eu Ich hab jetzt das ubuntu program und es laeuft super! / es lief super. Ich konnte ein paar daten sichern und jetzt will das programm immer ein update starten. Aber ich komme nicht mehr in die hauptmaske.es arbeitet und arbeitet aber so richtig passieren will nix mehr. Lieber nochmal neu runterladen oder auf etwas spezielles achten? |
|
05.03.2012, 21:38
| #13 |
| | Windows Explorer funktioniert nicht mehr / Startet immer wieder eu Sorry fuer den doppeleintrag. Bin jetzt übers handy drin. Da dauert das etwas. Ich lass das programm im moment über stick laufen. Bin am sonntag an keinen rohling geraten. Ueber stick war das wohl nicht so eine gute idee.!?ich kuemmere mich um die linux cd. Danke vorab. Gruss |
|
05.03.2012, 21:40
| #14 |
| /// Malware-holic | Windows Explorer funktioniert nicht mehr / Startet immer wieder eu na hast du deine daten gesichert? es ging ja nicht darum das du damit dauerhaft arbeiten sollst, sondern nur darum den pc zu formatieren und vorher mit ubuntu die daten zu sichern :-)
__________________ -Verdächtige mails bitte an uns zur Analyse weiterleiten: markusg.trojaner-board@web.de Weiterleiten Anleitung: http://markusg.trojaner-board.de Mails bitte vorerst nach obiger Anleitung an markusg.trojaner-board@web.de Weiterleiten Wenn Ihr uns unterstützen möchtet |
|
06.03.2012, 19:19
| #15 |
| | Windows Explorer funktioniert nicht mehr / Startet immer wieder eu Hallo kurze frage: das ubunto hat doch noch super geholfen. Habe alle daten sichern koennen!juhuuuuu! Nun meine letzte frage: ich finde die recovery cds für den aspire 5740DG nicht! Muss ich die jetzt neu kaufen? Oder habt ihr eine idee wo ich es noch herbekommen koennte???wie immer danke vorab |
|
