Heute hat mein Yahoo-Emailaccount automatisch an alle bekannten Adressen eine Spam mit unterschiedlichen Inhalten verschickt. Im Postausgang ist keine dieser Emails zu sehen, ich wurde von den Betroffenen darauf hingewiesen.

Danach habe ich AntiVir gestartet, aber abgebrochen und jetzt deaktiviert als ich durch google auf diese Seite gestoßen bin und die Anleitung gelesen habe.

defogger ist ausgeführt.

Ich habe leider ein Problem mit Gmer- beim ersten Mal als ich auf "Scan" geklickt habe lief das Programm einige Zeit, dann kam ein Bericht das es abgestürzt sei, und als ich da auf OK geklickt hab, ist der ganze PC abgestürzt. Ich war dann bei so einem blauen Bildschirm wo irgendwas stand von wegen "Windows has been shut down to protect " bla bla (man sieht ich habe keine Ahnung und konnte mir den Text nicht merken ;___

Der PC wurde automatisch neu gestartet, ich habe im normalen (nicht im abgesicherten) Modus ausgewählt als ich gefragt wurde.

Beim zweiten Mal GMER ist der PC gleich beim Öffnen des Programms abgestürzt. Somit kann ich den Log von GMER wohl nicht anhängen Es waren alle Fenster und Anwendungen außer GMER geschlossen als ich es geöffnet habe.

Die Logs von OTL hänge ich an.

Ich hoffe jemand kann mir helfen, bin grade sehr verzweifelt dass alle meine Kontakte (auch Arbeit etc.) eine Spammail von mir gekriegt haben.

hi
1. warum hat dein pc fehlene updates, zb kein servicepack 2?
2. öffne avira, verwaltung, quarantäne, poste fundmeldungen mit pfad angaben.
3. öffne Malwarebytes berichte, poste logs mit funden

Hallo,

vielen Dank, dass du mir mit meinem Problem hilfst!


1. warum hatt dein pc fehlene updates, zb kein servicepack 2?

Sorry, ich kenn mich überhaupt nicht aus - was für ein Servicepack 2? Windows hat anfangs öfters ein automatisches Update durchgeführt, wenn ich den Laptop runtergefahren hab, das war aber schon länger nicht mehr der Fall. Oder müsste ich das irgendwo runterladen?

2. öffne avira, verwaltung, quarantäne, poste fundmeldungen mit pfad angaben.

Ich häng mal einen Screenshot an, ich weiß nicht wie ich das kopieren kann, tut mir leid


3. öffne Malwarebytes berichte, poste logs mit funden

Ich hab eine Quick Search durchgeführt, reicht das? Hier der Log:


Malwarebytes Anti-Malware 1.65.0.1400
www.malwarebytes.org

Datenbank Version: v2012.09.26.09

Windows Vista Service Pack 1 x86 NTFS
Internet Explorer 7.0.6001.18000
User :: USER-PC [Administrator]

26.09.2012 19:57:54
mbam-log-2012-09-26 (19-57-54).txt

Art des Suchlaufs: Quick-Scan
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 188238
Laufzeit: 9 Minute(n), 32 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 1
C:\Users\User\Downloads\SoftonicDownloader_fuer_virtualdub.exe (PUP.OfferBundler.ST) -> Erfolgreich gelöscht und in Quarantäne gestellt.

(Ende)

hi
Softonic
finger weg davon :-)
lade vom hersteller direkt.
2.
kannst du die avira meldungen mal anklicken, da müsste man dann eig den text markieren kopieren (strg+c) und hier einfügen können.
3. zu den updates kommen wir dann

Irgendwie klappt das mit dem öffnen / kopieren nicht, ich tipps mal ab:

Contains recognition pattern of the DR/FakePic.Gen dropper, Source: C:/ProgramData/Microsoft/Search/Data/Applications/Windows/tmp.edb, Date: 04.12.2011

Contains recognition pattern of the EXP/CVE-2008-5353.L exploit, Source: C:/Users/User/AppData/LocalLow/Sun/Java/Deployment/cache/6.0/0/57832b-40-2be8322b, Date: 04.12.2011

Contains recognition pattern of the JAVA/Small.AF Java virus, Source: C:/Users/User/AppData/Local/Temp/jar_cache3486093409361074082.tmp, Date: 04.12.2011

Contains recognition pattern of the JAVA/Agent.D. Java virus, Source: C:/Users/User/AppData/LocalLow/Sun/Java/Deployment/cache/6.0/17/177567d1-7325ccdc, Date: 04.12.2011

Contains recognition pattern of the JAVA/Dldr.Agen.NA.1 Java virus, Source: C:/Users/User/AppData/LocalLow/Sun/Java/Deployment/cache/6.0/62/5982fcbe-571d9fd9, Date: 18.05.2010

danke und sorry für die mühen.

Combofix darf ausschließlich ausgeführt werden, wenn dies von einem Team Mitglied angewiesen wurde!
Es sollte nie auf eigene Initiative hin ausgeführt werden! Eine falsche Benutzung kann ernsthafte Computerprobleme nach sich
ziehen und eine Bereinigung der Infektion noch erschweren.

Downloade dir bitte Combofix von einem dieser Downloadspiegel

Link 1
Link 2


WICHTIG - Speichere Combofix auf deinem Desktop

• Deaktiviere bitte all deine Anti Viren sowie Anti Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören.

Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.

Wenn Combofix fertig ist, wird es eine Logfile erstellen. Bitte poste die C:\Combofix.txt in deiner nächsten Antwort.


Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten

Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.

starte den Rechner einfach neu. Dies sollte das Problem beheben.

Hier der Log von Combifix:

Combofix Logfile:

ComboFix 12-09-26.04 - User 26.09.2012  21:06:45.1.2 - x86
Microsoft® Windows Vista™ Home Premium   6.0.6001.1.1252.49.1031.18.2269.1301 [GMT 2:00]
ausgeführt von:: c:\users\User\Desktop\ComboFix.exe
AV: AntiVir Desktop *Disabled/Updated* {090F9C29-64CE-6C6F-379C-5901B49A85B7}
SP: AntiVir Desktop *Disabled/Updated* {B26E7DCD-42F4-63E1-0D2C-6273CF1DCF0A}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\User\avira_antivir_personal_en.exe
c:\windows\system32\drivers\FSC__RC__AMILO Notebook Pa 3553  __FUJITSU SIEMENS_P15  __Ver 1.00PARTTBL_FSC - 6040000_V1.10   .MRK
.
.
(((((((((((((((((((((((   Dateien erstellt von 2012-08-26 bis 2012-09-26  ))))))))))))))))))))))))))))))
.
.
2012-09-26 19:14 . 2012-09-26 19:14	--------	d-----w-	c:\users\Default\AppData\Local\temp
2012-09-26 17:19 . 2012-09-26 17:19	--------	d-----w-	c:\program files\7-Zip
2012-09-25 07:51 . 2012-08-30 08:17	6980552	----a-w-	c:\programdata\Microsoft\Windows Defender\Definition Updates\{9ACB71F5-3A98-469E-9F02-65D87F872896}\mpengine.dll
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-09-07 15:04 . 2011-12-04 18:13	22856	----a-w-	c:\windows\system32\drivers\mbam.sys
2012-09-07 08:46 . 2012-09-07 08:46	266720	----a-w-	c:\program files\mozilla firefox\components\browsercomps.dll
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2008-01-21 1233920]
"WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-21 202240]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2012-07-13 17418928]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2008-01-21 61440]
"RtHDVCpl"="RtHDVCpl.exe" [2008-06-13 6183456]
"Skytel"="Skytel.exe" [2007-11-20 1826816]
"SynTPStart"="c:\program files\Synaptics\SynTP\SynTPStart.exe" [2007-08-17 102400]
"HotkeyApp"="c:\program files\Launch Manager\HotkeyApp.exe" [2008-05-23 192512]
"WisKeyState"="c:\program files\Launch Manager\WisKeyState.exe" [2008-03-07 208896]
"LMgrVolOSD"="c:\program files\Launch Manager\OSD.exe" [2008-03-03 258048]
"LMgrOSD"="c:\program files\Launch Manager\OSDCtrl.exe" [2007-12-25 241664]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2010-08-02 281768]
"FreePDF Assistant"="c:\program files\FreePDF_XP\fpassist.exe" [2008-07-22 357376]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2010-03-17 421888]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2010-04-28 142120]
"TkBellExe"="c:\program files\real\realplayer\Update\realsched.exe" [2011-06-23 273544]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2011-09-07 37296]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-03-30 937920]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2012-01-18 254696]
"UIExec"="c:\program files\1&1 Surf-Stick\UIExec.exe" [2010-09-30 139088]
.
c:\users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OpenOffice.org 3.1.lnk - c:\program files\OpenOffice.org 3\program\quickstart.exe [2009-8-18 384000]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
McAfee Security Scan Plus.lnk - c:\program files\McAfee Security Scan\2.0.181\SSScheduler.exe [2010-1-15 255536]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv
.
Inhalt des "geplante Tasks" Ordners
.
2012-09-26 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2039482844-2034541489-3336862068-1000Core.job
- c:\users\User\AppData\Local\Google\Update\GoogleUpdate.exe [2012-09-18 17:05]
.
2012-09-26 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2039482844-2034541489-3336862068-1000UA.job
- c:\users\User\AppData\Local\Google\Update\GoogleUpdate.exe [2012-09-18 17:05]
.
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = hxxp://de.ask.com?o=15458&l=dis
uInternet Settings,ProxyOverride = *.local
TCP: DhcpNameServer = 192.168.0.1
FF - ProfilePath - c:\users\User\AppData\Roaming\Mozilla\Firefox\Profiles\gfqv4dgy.default\
FF - prefs.js: browser.search.selectedEngine - WEB.DE Suche
FF - prefs.js: browser.startup.homepage - www.google.de
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, hxxp://www.gmer.net
Rootkit scan 2012-09-26 21:15
Windows 6.0.6001 Service Pack 1 NTFS
.
Scanne versteckte Prozesse... 
.
Scanne versteckte Autostarteinträge... 
.
Scanne versteckte Dateien... 
.
Scan erfolgreich abgeschlossen
versteckte Dateien: 0
.
**************************************************************************
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_USERS\S-1-5-21-2039482844-2034541489-3336862068-1000\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{2848AE5A-6BF6-E73A-4797-E47F9DC9808C}*]
"hafcacddojoimcij"=hex:6b,61,6c,6a,69,65,6a,6b,66,6f,66,6a,67,66,66,6e,6e,66,
   6b,6f,65,69,00,00
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
Zeit der Fertigstellung: 2012-09-26  21:17:53
ComboFix-quarantined-files.txt  2012-09-26 19:17
.
Vor Suchlauf: 8 Verzeichnis(se), 47.900.536.832 Bytes frei
Nach Suchlauf: 11 Verzeichnis(se), 48.747.843.584 Bytes frei
.
- - End Of File - - 6C8D64C38DCD95879A937924AE05A340
         

--- --- ---

hi
download tdss killer:
http://www.trojaner-board.de/82358-t...entfernen.html
Klicke auf Change parameters
• Setze die Haken bei Verify driver digital signatures und Detect TDLFS file system
• Klick auf OK und anschließend auf Start scan
- bei funden erst mal immer skip wählen, log posten

Hier der Log von TDSS:


21:43:40.0313 3660 TDSS rootkit removing tool 2.8.10.0 Sep 17 2012 19:23:24
21:43:40.0511 3660 ============================================================
21:43:40.0511 3660 Current date / time: 2012/09/26 21:43:40.0511
21:43:40.0511 3660 SystemInfo:
21:43:40.0511 3660
21:43:40.0512 3660 OS Version: 6.0.6001 ServicePack: 1.0
21:43:40.0512 3660 Product type: Workstation
21:43:40.0512 3660 ComputerName: USER-PC
21:43:40.0512 3660 UserName: User
21:43:40.0512 3660 Windows directory: C:\Windows
21:43:40.0512 3660 System windows directory: C:\Windows
21:43:40.0512 3660 Processor architecture: Intel x86
21:43:40.0512 3660 Number of processors: 2
21:43:40.0512 3660 Page size: 0x1000
21:43:40.0512 3660 Boot type: Normal boot
21:43:40.0512 3660 ============================================================
21:43:42.0085 3660 Drive \Device\Harddisk0\DR0 - Size: 0x4A85D56000 (298.09 Gb), SectorSize: 0x200, Cylinders: 0x9801, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050
21:43:42.0094 3660 ============================================================
21:43:42.0095 3660 \Device\Harddisk0\DR0:
21:43:42.0104 3660 MBR partitions:
21:43:42.0104 3660 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x2542D800
21:43:42.0104 3660 ============================================================
21:43:42.0169 3660 C: <-> \Device\Harddisk0\DR0\Partition1
21:43:42.0170 3660 ============================================================
21:43:42.0170 3660 Initialize success
21:43:42.0170 3660 ============================================================
21:44:32.0170 3968 ============================================================
21:44:32.0170 3968 Scan started
21:44:32.0170 3968 Mode: Manual; SigCheck; TDLFS;
21:44:32.0170 3968 ============================================================
21:44:32.0774 3968 ================ Scan system memory ========================
21:44:32.0774 3968 System memory - ok
21:44:32.0775 3968 ================ Scan services =============================
21:44:33.0109 3968 [ FCB8C7210F0135E24C6580F7F649C73C ] ACPI C:\Windows\system32\drivers\acpi.sys
21:44:33.0218 3968 ACPI - ok
21:44:33.0234 3968 [ 04F0FCAC69C7C71A3AC4EB97FAFC8303 ] adp94xx C:\Windows\system32\drivers\adp94xx.sys
21:44:33.0280 3968 adp94xx - ok
21:44:33.0327 3968 [ 60505E0041F7751BDBB80F88BF45C2CE ] adpahci C:\Windows\system32\drivers\adpahci.sys
21:44:33.0343 3968 adpahci - ok
21:44:33.0390 3968 [ 8A42779B02AEC986EAB64ECFC98F8BD7 ] adpu160m C:\Windows\system32\drivers\adpu160m.sys
21:44:33.0405 3968 adpu160m - ok
21:44:33.0421 3968 [ 241C9E37F8CE45EF51C3DE27515CA4E5 ] adpu320 C:\Windows\system32\drivers\adpu320.sys
21:44:33.0436 3968 adpu320 - ok
21:44:33.0483 3968 [ 9D1FDA9E086BA64E3C93C9DE32461BCF ] AeLookupSvc C:\Windows\System32\aelupsvc.dll
21:44:33.0624 3968 AeLookupSvc - ok
21:44:33.0702 3968 [ 48EB99503533C27AC6135648E5474457 ] AFD C:\Windows\system32\drivers\afd.sys
21:44:33.0764 3968 AFD - ok
21:44:33.0811 3968 [ 13F9E33747E6B41A3FF305C37DB0D360 ] agp440 C:\Windows\system32\drivers\agp440.sys
21:44:33.0826 3968 agp440 - ok
21:44:33.0873 3968 [ FBE4016F9EF3AB3DB547E40A936B6CD9 ] ahcix86s C:\Windows\system32\drivers\ahcix86s.sys
21:44:34.0076 3968 ahcix86s - ok
21:44:34.0123 3968 [ AE1FDF7BF7BB6C6A70F67699D880592A ] aic78xx C:\Windows\system32\drivers\djsvs.sys
21:44:34.0138 3968 aic78xx - ok
21:44:34.0170 3968 [ A1545B731579895D8CC44FC0481C1192 ] ALG C:\Windows\System32\alg.exe
21:44:34.0450 3968 ALG - ok
21:44:34.0482 3968 [ 9EAEF5FC9B8E351AFA7E78A6FAE91F91 ] aliide C:\Windows\system32\drivers\aliide.sys
21:44:34.0497 3968 aliide - ok
21:44:34.0544 3968 [ C47344BC706E5F0B9DCE369516661578 ] amdagp C:\Windows\system32\drivers\amdagp.sys
21:44:34.0560 3968 amdagp - ok
21:44:34.0606 3968 [ 9B78A39A4C173FDBC1321E0DD659B34C ] amdide C:\Windows\system32\drivers\amdide.sys
21:44:34.0622 3968 amdide - ok
21:44:34.0653 3968 [ 18F29B49AD23ECEE3D2A826C725C8D48 ] AmdK7 C:\Windows\system32\drivers\amdk7.sys
21:44:34.0716 3968 AmdK7 - ok
21:44:34.0747 3968 [ 93AE7F7DD54AB986A6F1A1B37BE7442D ] AmdK8 C:\Windows\system32\drivers\amdk8.sys
21:44:34.0809 3968 AmdK8 - ok
21:44:34.0918 3968 [ B4837FE56D76B2E9EA90E5365CF6A2BE ] AntiVirSchedulerService C:\Program Files\Avira\AntiVir Desktop\sched.exe
21:44:34.0934 3968 AntiVirSchedulerService - ok
21:44:34.0965 3968 [ DF5A3016052755C910A206058B4A1729 ] AntiVirService C:\Program Files\Avira\AntiVir Desktop\avguard.exe
21:44:34.0981 3968 AntiVirService - ok
21:44:35.0043 3968 [ C6D704C7F0434DC791AAC37CAC4B6E14 ] Appinfo C:\Windows\System32\appinfo.dll
21:44:35.0137 3968 Appinfo - ok
21:44:35.0199 3968 [ D503DF3ABA595F551B98B9BAE017A271 ] Apple Mobile Device C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
21:44:35.0246 3968 Apple Mobile Device - ok
21:44:35.0355 3968 [ 5D2888182FB46632511ACEE92FDAD522 ] arc C:\Windows\system32\drivers\arc.sys
21:44:35.0386 3968 arc - ok
21:44:35.0418 3968 [ 5E2A321BD7C8B3624E41FDEC3E244945 ] arcsas C:\Windows\system32\drivers\arcsas.sys
21:44:35.0464 3968 arcsas - ok
21:44:35.0511 3968 [ 53B202ABEE6455406254444303E87BE1 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys
21:44:35.0636 3968 AsyncMac - ok
21:44:35.0667 3968 [ 0D83C87A801A3DFCD1BF73893FE7518C ] atapi C:\Windows\system32\drivers\atapi.sys
21:44:35.0683 3968 atapi - ok
21:44:35.0761 3968 [ 2846F5EE802889D500FCF5CC48B28381 ] athr C:\Windows\system32\DRIVERS\athr.sys
21:44:36.0010 3968 athr - ok
21:44:36.0213 3968 [ 14872220A3642D653E32B2B5480C5928 ] Ati External Event Utility C:\Windows\system32\Ati2evxx.exe
21:44:36.0494 3968 Ati External Event Utility - ok
21:44:36.0712 3968 [ 5A1E51FF7BA5F23AA4585B25AC0E484D ] atikmdag C:\Windows\system32\DRIVERS\atikmdag.sys
21:44:36.0900 3968 atikmdag - ok
21:44:36.0931 3968 [ 5A1465AD2E7C1BC39CDA12A355329096 ] AtiPcie C:\Windows\system32\DRIVERS\AtiPcie.sys
21:44:36.0946 3968 AtiPcie - ok
21:44:36.0978 3968 [ 42076E29AAFA0830A2C5D4E310F58DD1 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
21:44:37.0024 3968 AudioEndpointBuilder - ok
21:44:37.0040 3968 [ 42076E29AAFA0830A2C5D4E310F58DD1 ] Audiosrv C:\Windows\System32\Audiosrv.dll
21:44:37.0071 3968 Audiosrv - ok
21:44:37.0134 3968 [ 6A646C46B9415E13095AA9B352040A7A ] avgio C:\Program Files\Avira\AntiVir Desktop\avgio.sys
21:44:37.0134 3968 avgio - ok
21:44:37.0212 3968 [ 1E4114685DE1FFA9675E09C6A1FB3F4B ] avgntflt C:\Windows\system32\DRIVERS\avgntflt.sys
21:44:37.0227 3968 avgntflt - ok
21:44:37.0290 3968 [ 0F78D3DAE6DEDD99AE54C9491C62ADF2 ] avipbb C:\Windows\system32\DRIVERS\avipbb.sys
21:44:37.0305 3968 avipbb - ok
21:44:37.0352 3968 [ 67E506B75BD5326A3EC7B70BD014DFB6 ] Beep C:\Windows\system32\drivers\Beep.sys
21:44:37.0383 3968 Beep - ok
21:44:37.0430 3968 [ 8582E233C346AEFE759833E8A30DD697 ] BFE C:\Windows\System32\bfe.dll
21:44:37.0508 3968 BFE - ok
21:44:37.0570 3968 [ 02ED7B4DBC2A3232A389106DA7515C3D ] BITS C:\Windows\system32\qmgr.dll
21:44:37.0680 3968 BITS - ok
21:44:37.0726 3968 [ D4DF28447741FD3D953526E33A617397 ] blbdrive C:\Windows\system32\drivers\blbdrive.sys
21:44:37.0804 3968 blbdrive - ok
21:44:37.0914 3968 [ EBAD0F51D8D4DADE7660B1851ADDBD07 ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe
21:44:37.0960 3968 Bonjour Service - ok
21:44:38.0038 3968 [ 8153396D5551276227FA146900F734E6 ] bowser C:\Windows\system32\DRIVERS\bowser.sys
21:44:38.0116 3968 bowser - ok
21:44:38.0194 3968 [ 9F9ACC7F7CCDE8A15C282D3F88B43309 ] BrFiltLo C:\Windows\system32\drivers\brfiltlo.sys
21:44:38.0272 3968 BrFiltLo - ok
21:44:38.0319 3968 [ 56801AD62213A41F6497F96DEE83755A ] BrFiltUp C:\Windows\system32\drivers\brfiltup.sys
21:44:38.0382 3968 BrFiltUp - ok
21:44:38.0413 3968 [ A3629A0C4226F9E9C72FAAEEBC3AD33C ] Browser C:\Windows\System32\browser.dll
21:44:38.0553 3968 Browser - ok
21:44:38.0647 3968 [ B304E75CFF293029EDDF094246747113 ] Brserid C:\Windows\system32\drivers\brserid.sys
21:44:38.0881 3968 Brserid - ok
21:44:38.0912 3968 [ 203F0B1E73ADADBBB7B7B1FABD901F6B ] BrSerWdm C:\Windows\system32\drivers\brserwdm.sys
21:44:38.0974 3968 BrSerWdm - ok
21:44:39.0006 3968 [ BD456606156BA17E60A04E18016AE54B ] BrUsbMdm C:\Windows\system32\drivers\brusbmdm.sys
21:44:39.0068 3968 BrUsbMdm - ok
21:44:39.0084 3968 [ AF72ED54503F717A43268B3CC5FAEC2E ] BrUsbSer C:\Windows\system32\drivers\brusbser.sys
21:44:39.0208 3968 BrUsbSer - ok
21:44:39.0240 3968 [ AD07C1EC6665B8B35741AB91200C6B68 ] BTHMODEM C:\Windows\system32\drivers\bthmodem.sys
21:44:39.0302 3968 BTHMODEM - ok
21:44:39.0411 3968 catchme - ok
21:44:39.0442 3968 [ 7ADD03E75BEB9E6DD102C3081D29840A ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys
21:44:39.0520 3968 cdfs - ok
21:44:39.0552 3968 [ 1EC25CEA0DE6AC4718BF89F9E1778B57 ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys
21:44:39.0661 3968 cdrom - ok
21:44:39.0723 3968 [ 87C2D0377B23E2D8A41093C2F5FB1A5B ] CertPropSvc C:\Windows\System32\certprop.dll
21:44:39.0786 3968 CertPropSvc - ok
21:44:39.0801 3968 [ E5D4133F37219DBCFE102BC61072589D ] circlass C:\Windows\system32\drivers\circlass.sys
21:44:39.0864 3968 circlass - ok
21:44:39.0957 3968 [ 0703B9DEE7EEC6D6370EDEBD43D0F5C2 ] CLFS C:\Windows\system32\CLFS.sys
21:44:39.0988 3968 CLFS - ok
21:44:40.0098 3968 [ D87ACAED61E417BBA546CED5E7E36D9C ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
21:44:40.0160 3968 clr_optimization_v2.0.50727_32 - ok
21:44:40.0269 3968 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
21:44:40.0300 3968 clr_optimization_v4.0.30319_32 - ok
21:44:40.0347 3968 [ 99AFC3795B58CC478FBBBCDC658FCB56 ] CmBatt C:\Windows\system32\DRIVERS\CmBatt.sys
21:44:40.0441 3968 CmBatt - ok
21:44:40.0472 3968 [ 0CA25E686A4928484E9FDABD168AB629 ] cmdide C:\Windows\system32\drivers\cmdide.sys
21:44:40.0488 3968 cmdide - ok
21:44:40.0519 3968 [ 6AFEF0B60FA25DE07C0968983EE4F60A ] Compbatt C:\Windows\system32\DRIVERS\compbatt.sys
21:44:40.0534 3968 Compbatt - ok
21:44:40.0550 3968 COMSysApp - ok
21:44:40.0581 3968 [ 741E9DFF4F42D2D8477D0FC1DC0DF871 ] crcdisk C:\Windows\system32\drivers\crcdisk.sys
21:44:40.0597 3968 crcdisk - ok
21:44:40.0644 3968 [ 1F07BECDCA750766A96CDA811BA86410 ] Crusoe C:\Windows\system32\drivers\crusoe.sys
21:44:40.0722 3968 Crusoe - ok
21:44:40.0753 3968 [ 6DE363F9F99334514C46AEC02D3E3678 ] CryptSvc C:\Windows\system32\cryptsvc.dll
21:44:40.0831 3968 CryptSvc - ok
21:44:40.0878 3968 [ 301AE00E12408650BADDC04DBC832830 ] DcomLaunch C:\Windows\system32\rpcss.dll
21:44:40.0956 3968 DcomLaunch - ok
21:44:40.0987 3968 [ A3E9FA213F443AC77C7746119D13FEEC ] DfsC C:\Windows\system32\Drivers\dfsc.sys
21:44:41.0034 3968 DfsC - ok
21:44:41.0143 3968 [ FA3463F25F9CC9C3BCF1E7912FEFF099 ] DFSR C:\Windows\system32\DFSR.exe
21:44:41.0392 3968 DFSR - ok
21:44:41.0455 3968 [ 43A988A9C10333476CB5FB667CBD629D ] Dhcp C:\Windows\System32\dhcpcsvc.dll
21:44:41.0517 3968 Dhcp - ok
21:44:41.0658 3968 [ 64109E623ABD6955C8FB110B592E68B7 ] disk C:\Windows\system32\drivers\disk.sys
21:44:41.0673 3968 disk - ok
21:44:41.0767 3968 [ 4805D9A6D281C7A7DEFD9094DEC6AF7D ] Dnscache C:\Windows\System32\dnsrslvr.dll
21:44:41.0876 3968 Dnscache - ok
21:44:41.0907 3968 [ 5AF620A08C614E24206B79E8153CF1A8 ] dot3svc C:\Windows\System32\dot3svc.dll
21:44:41.0985 3968 dot3svc - ok
21:44:42.0016 3968 [ A622E888F8AA2F6B49E9BC466F0E5DEF ] DPS C:\Windows\system32\dps.dll
21:44:42.0094 3968 DPS - ok
21:44:42.0157 3968 [ 97FEF831AB90BEE128C9AF390E243F80 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys
21:44:42.0204 3968 drmkaud - ok
21:44:42.0250 3968 [ 85F33880B8CFB554BD3D9CCDB486845A ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys
21:44:42.0328 3968 DXGKrnl - ok
21:44:42.0360 3968 [ 5425F74AC0C1DBD96A1E04F17D63F94C ] E1G60 C:\Windows\system32\DRIVERS\E1G60I32.sys
21:44:42.0406 3968 E1G60 - ok
21:44:42.0438 3968 EagleXNt - ok
21:44:42.0469 3968 [ C0B95E40D85CD807D614E264248A45B9 ] EapHost C:\Windows\System32\eapsvc.dll
21:44:42.0516 3968 EapHost - ok
21:44:42.0562 3968 [ DD2CD259D83D8B72C02C5F2331FF9D68 ] Ecache C:\Windows\system32\drivers\ecache.sys
21:44:42.0578 3968 Ecache - ok
21:44:42.0625 3968 [ 9BE3744D295A7701EB425332014F0797 ] ehRecvr C:\Windows\ehome\ehRecvr.exe
21:44:42.0672 3968 ehRecvr - ok
21:44:42.0703 3968 [ AD1870C8E5D6DD340C829E6074BF3C3F ] ehSched C:\Windows\ehome\ehsched.exe
21:44:42.0734 3968 ehSched - ok
21:44:42.0750 3968 [ C27C4EE8926E74AA72EFCAB24C5242C3 ] ehstart C:\Windows\ehome\ehstart.dll
21:44:42.0781 3968 ehstart - ok
21:44:42.0828 3968 [ 23B62471681A124889978F6295B3F4C6 ] elxstor C:\Windows\system32\drivers\elxstor.sys
21:44:42.0843 3968 elxstor - ok
21:44:42.0921 3968 [ 70B1A86DF0C8EAD17D2BC332EDAE2C7C ] EMDMgmt C:\Windows\system32\emdmgmt.dll
21:44:42.0968 3968 EMDMgmt - ok
21:44:42.0999 3968 [ 3DB974F3935483555D7148663F726C61 ] ErrDev C:\Windows\system32\drivers\errdev.sys
21:44:43.0046 3968 ErrDev - ok
21:44:43.0077 3968 [ 3CB3343D720168B575133A0A20DC2465 ] EventSystem C:\Windows\system32\es.dll
21:44:43.0155 3968 EventSystem - ok
21:44:43.0186 3968 [ 0D858EB20589A34EFB25695ACAA6AA2D ] exfat C:\Windows\system32\drivers\exfat.sys
21:44:43.0264 3968 exfat - ok
21:44:43.0327 3968 [ 3C489390C2E2064563727752AF8EAB9E ] fastfat C:\Windows\system32\drivers\fastfat.sys
21:44:43.0420 3968 fastfat - ok
21:44:43.0467 3968 [ AFE1E8B9782A0DD7FB46BBD88E43F89A ] fdc C:\Windows\system32\DRIVERS\fdc.sys
21:44:43.0530 3968 fdc - ok
21:44:43.0561 3968 [ 6629B5F0E98151F4AFDD87567EA32BA3 ] fdPHost C:\Windows\system32\fdPHost.dll
21:44:43.0608 3968 fdPHost - ok
21:44:43.0639 3968 [ 89ED56DCE8E47AF40892778A5BD31FD2 ] FDResPub C:\Windows\system32\fdrespub.dll
21:44:43.0686 3968 FDResPub - ok
21:44:43.0717 3968 [ A8C0139A884861E3AAE9CFE73B208A9F ] FileInfo C:\Windows\system32\drivers\fileinfo.sys
21:44:43.0717 3968 FileInfo - ok
21:44:43.0748 3968 [ 0AE429A696AECBC5970E3CF2C62635AE ] Filetrace C:\Windows\system32\drivers\filetrace.sys
21:44:43.0795 3968 Filetrace - ok
21:44:43.0826 3968 [ 85B7CF99D532820495D68D747FDA9EBD ] flpydisk C:\Windows\system32\DRIVERS\flpydisk.sys
21:44:43.0904 3968 flpydisk - ok
21:44:43.0966 3968 [ 05EA53AFE985443011E36DAB07343B46 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys
21:44:43.0982 3968 FltMgr - ok
21:44:44.0107 3968 [ C9BE08664611DDAF98E2331E9288B00B ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
21:44:44.0138 3968 FontCache3.0.0.0 - ok
21:44:44.0200 3968 [ 65EA8B77B5851854F0C55C43FA51A198 ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys
21:44:44.0247 3968 Fs_Rec - ok
21:44:44.0263 3968 [ 34582A6E6573D54A07ECE5FE24A126B5 ] gagp30kx C:\Windows\system32\drivers\gagp30kx.sys
21:44:44.0294 3968 gagp30kx - ok
21:44:44.0325 3968 [ 8182FF89C65E4D38B2DE4BB0FB18564E ] GEARAspiWDM C:\Windows\system32\DRIVERS\GEARAspiWDM.sys
21:44:44.0341 3968 GEARAspiWDM - ok
21:44:44.0434 3968 [ D9F1113D9401185245573350712F92FC ] gpsvc C:\Windows\System32\gpsvc.dll
21:44:44.0544 3968 gpsvc - ok
21:44:44.0606 3968 [ CB04C744BE0A61B1D648FAED182C3B59 ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
21:44:44.0715 3968 HdAudAddService - ok
21:44:44.0762 3968 [ C87B1EE051C0464491C1A7B03FA0BC99 ] HDAudBus C:\Windows\system32\DRIVERS\HDAudBus.sys
21:44:44.0824 3968 HDAudBus - ok
21:44:44.0856 3968 [ 1338520E78D90154ED6BE8F84DE5FCEB ] HidBth C:\Windows\system32\drivers\hidbth.sys
21:44:44.0980 3968 HidBth - ok
21:44:45.0012 3968 [ FF3160C3A2445128C5A6D9B076DA519E ] HidIr C:\Windows\system32\drivers\hidir.sys
21:44:45.0199 3968 HidIr - ok
21:44:45.0230 3968 [ 8FA640195279ACE21BEA91396A0054FC ] hidserv C:\Windows\System32\hidserv.dll
21:44:45.0308 3968 hidserv - ok
21:44:45.0339 3968 [ 854CA287AB7FAF949617A788306D967E ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys
21:44:45.0402 3968 HidUsb - ok
21:44:45.0433 3968 [ D8AD255B37DA92434C26E4876DB7D418 ] hkmsvc C:\Windows\system32\kmsvc.dll
21:44:45.0464 3968 hkmsvc - ok
21:44:45.0480 3968 [ 8B566EA71D5B76157A9CDB78F25A5731 ] Hotkey C:\Windows\system32\drivers\Hotkey.sys
21:44:45.0495 3968 Hotkey ( UnsignedFile.Multi.Generic ) - warning
21:44:45.0495 3968 Hotkey - detected UnsignedFile.Multi.Generic (1)
21:44:45.0542 3968 [ 16EE7B23A009E00D835CDB79574A91A6 ] HpCISSs C:\Windows\system32\drivers\hpcisss.sys
21:44:45.0542 3968 HpCISSs - ok
21:44:45.0729 3968 [ 96E241624C71211A79C84F50A8E71CAB ] HTTP C:\Windows\system32\drivers\HTTP.sys
21:44:45.0823 3968 HTTP - ok
21:44:45.0870 3968 [ C6B032D69650985468160FC9937CF5B4 ] i2omp C:\Windows\system32\drivers\i2omp.sys
21:44:45.0885 3968 i2omp - ok
21:44:45.0932 3968 [ 22D56C8184586B7A1F6FA60BE5F5A2BD ] i8042prt C:\Windows\system32\DRIVERS\i8042prt.sys
21:44:45.0979 3968 i8042prt - ok
21:44:46.0026 3968 [ 54155EA1B0DF185878E0FC9EC3AC3A14 ] iaStorV C:\Windows\system32\drivers\iastorv.sys
21:44:46.0072 3968 iaStorV - ok
21:44:46.0166 3968 [ 7B630ACAED64FEF0C3E1CF255CB56686 ] idsvc C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
21:44:46.0338 3968 idsvc - ok
21:44:46.0384 3968 [ 2D077BF86E843F901D8DB709C95B49A5 ] iirsp C:\Windows\system32\drivers\iirsp.sys
21:44:46.0400 3968 iirsp - ok
21:44:46.0462 3968 [ A3BC480A2BF8AA8E4DABD2D5DCE0AFAC ] IKEEXT C:\Windows\System32\ikeext.dll
21:44:46.0556 3968 IKEEXT - ok
21:44:46.0650 3968 [ 23EBCEE9AAA4D6C88728791FAB462456 ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHDA.sys
21:44:46.0790 3968 IntcAzAudAddService - ok
21:44:46.0899 3968 [ 83AA759F3189E6370C30DE5DC5590718 ] intelide C:\Windows\system32\drivers\intelide.sys
21:44:46.0915 3968 intelide - ok
21:44:46.0962 3968 [ 224191001E78C89DFA78924C3EA595FF ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys
21:44:47.0086 3968 intelppm - ok
21:44:47.0133 3968 [ 9AC218C6E6105477484C6FDBE7D409A4 ] IPBusEnum C:\Windows\system32\ipbusenum.dll
21:44:47.0227 3968 IPBusEnum - ok
21:44:47.0274 3968 [ 62C265C38769B864CB25B4BCF62DF6C3 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
21:44:47.0398 3968 IpFilterDriver - ok
21:44:47.0445 3968 [ 6A35D233693EDC29A12742049BC5E37F ] iphlpsvc C:\Windows\System32\iphlpsvc.dll
21:44:47.0492 3968 iphlpsvc - ok
21:44:47.0492 3968 IpInIp - ok
21:44:47.0539 3968 [ B25AAF203552B7B3491139D582B39AD1 ] IPMIDRV C:\Windows\system32\drivers\ipmidrv.sys
21:44:47.0570 3968 IPMIDRV - ok
21:44:47.0601 3968 [ 8793643A67B42CEC66490B2A0CF92D68 ] IPNAT C:\Windows\system32\DRIVERS\ipnat.sys
21:44:47.0617 3968 IPNAT - ok
21:44:47.0664 3968 [ 3C30491045DBBD44A42876B3D6F3917D ] iPod Service C:\Program Files\iPod\bin\iPodService.exe
21:44:47.0695 3968 iPod Service - ok
21:44:47.0726 3968 [ 109C0DFB82C3632FBD11949B73AEEAC9 ] IRENUM C:\Windows\system32\drivers\irenum.sys
21:44:47.0757 3968 IRENUM - ok
21:44:47.0788 3968 [ 6C70698A3E5C4376C6AB5C7C17FB0614 ] isapnp C:\Windows\system32\drivers\isapnp.sys
21:44:47.0804 3968 isapnp - ok
21:44:47.0835 3968 [ F247EEC28317F6C739C16DE420097301 ] iScsiPrt C:\Windows\system32\DRIVERS\msiscsi.sys
21:44:47.0851 3968 iScsiPrt - ok
21:44:47.0882 3968 [ BCED60D16156E428F8DF8CF27B0DF150 ] iteatapi C:\Windows\system32\drivers\iteatapi.sys
21:44:47.0898 3968 iteatapi - ok
21:44:47.0929 3968 [ 06FA654504A498C30ADCA8BEC4E87E7E ] iteraid C:\Windows\system32\drivers\iteraid.sys
21:44:47.0929 3968 iteraid - ok
21:44:47.0991 3968 [ DEDB6CC1B166928A8F3F68DEF1766DB0 ] JMCR C:\Windows\system32\DRIVERS\jmcr.sys
21:44:48.0054 3968 JMCR - ok
21:44:48.0100 3968 [ AB95B2DDB49F6B6CF52625E56C1F1F71 ] JRAID C:\Windows\system32\drivers\jraid.sys
21:44:48.0147 3968 JRAID - ok
21:44:48.0210 3968 [ 37605E0A8CF00CBBA538E753E4344C6E ] kbdclass C:\Windows\system32\DRIVERS\kbdclass.sys
21:44:48.0225 3968 kbdclass - ok
21:44:48.0288 3968 [ 18247836959BA67E3511B62846B9C2E0 ] kbdhid C:\Windows\system32\drivers\kbdhid.sys
21:44:48.0350 3968 kbdhid - ok
21:44:48.0397 3968 [ A911ECAC81F94ADEAFBE8E3F7873EDB0 ] KeyIso C:\Windows\system32\lsass.exe
21:44:48.0428 3968 KeyIso - ok
21:44:48.0490 3968 [ 7A0CF7908B6824D6A2A1D313E5AE3DCA ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys
21:44:48.0522 3968 KSecDD - ok
21:44:48.0600 3968 [ 8078F8F8F7A79E2E6B494523A828C585 ] KtmRm C:\Windows\system32\msdtckrm.dll
21:44:48.0709 3968 KtmRm - ok
21:44:48.0740 3968 [ 1925E63C91CF1610AE41BFD539062079 ] LanmanServer C:\Windows\System32\srvsvc.dll
21:44:48.0787 3968 LanmanServer - ok
21:44:48.0849 3968 [ 2AE2E1628C5D3F1C0A46A67C9FA1DF15 ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
21:44:48.0880 3968 LanmanWorkstation - ok
21:44:48.0927 3968 [ D1C5883087A0C3F1344D9D55A44901F6 ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys
21:44:48.0990 3968 lltdio - ok
21:44:49.0114 3968 [ 2D5A428872F1442631D0959A34ABFF63 ] lltdsvc C:\Windows\System32\lltdsvc.dll
21:44:49.0192 3968 lltdsvc - ok
21:44:49.0224 3968 [ 35D40113E4A5B961B6CE5C5857702518 ] lmhosts C:\Windows\System32\lmhsvc.dll
21:44:49.0302 3968 lmhosts - ok
21:44:49.0364 3968 [ C7E15E82879BF3235B559563D4185365 ] LSI_FC C:\Windows\system32\drivers\lsi_fc.sys
21:44:49.0364 3968 LSI_FC - ok
21:44:49.0458 3968 [ 90CFC725E69AD443583E57EF0DDC7E2D ] LSI_SAS C:\Windows\system32\drivers\lsi_sas.sys
21:44:49.0536 3968 LSI_SAS - ok
21:44:49.0567 3968 [ 912A04696E9CA30146A62AFA1463DD5C ] LSI_SCSI C:\Windows\system32\drivers\lsi_scsi.sys
21:44:49.0582 3968 LSI_SCSI - ok
21:44:49.0614 3968 [ 8F5C7426567798E62A3B3614965D62CC ] luafv C:\Windows\system32\drivers\luafv.sys
21:44:49.0660 3968 luafv - ok
21:44:49.0723 3968 [ 59A2783ABA6019BED0C843C706E10A6A ] massfilter C:\Windows\system32\drivers\massfilter.sys
21:44:49.0785 3968 massfilter - ok
21:44:49.0910 3968 [ F453D1E6D881E8F8717E20CCD4199E85 ] McComponentHostService C:\Program Files\McAfee Security Scan\2.0.181\McCHSvc.exe
21:44:49.0926 3968 McComponentHostService - ok
21:44:49.0972 3968 [ AEF9BABB8A506BC4CE0451A64AADED46 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll
21:44:50.0019 3968 Mcx2Svc - ok
21:44:50.0050 3968 [ 0001CE609D66632FA17B84705F658879 ] megasas C:\Windows\system32\drivers\megasas.sys
21:44:50.0066 3968 megasas - ok
21:44:50.0222 3968 [ 5E6EBB00401A104462F97041BEFA578A ] MegaSR C:\Windows\system32\drivers\megasr.sys
21:44:50.0362 3968 MegaSR - ok
21:44:50.0425 3968 [ 1076FFCFFAAE8385FD62DFCB25AC4708 ] MMCSS C:\Windows\system32\mmcss.dll
21:44:50.0534 3968 MMCSS - ok
21:44:50.0596 3968 [ E13B5EA0F51BA5B1512EC671393D09BA ] Modem C:\Windows\system32\drivers\modem.sys
21:44:50.0737 3968 Modem - ok
21:44:50.0784 3968 [ 0A9BB33B56E294F686ABB7C1E4E2D8A8 ] monitor C:\Windows\system32\DRIVERS\monitor.sys
21:44:50.0908 3968 monitor - ok
21:44:50.0924 3968 [ 5BF6A1326A335C5298477754A506D263 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys
21:44:50.0955 3968 mouclass - ok
21:44:51.0018 3968 [ 93B8D4869E12CFBE663915502900876F ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys
21:44:51.0096 3968 mouhid - ok
21:44:51.0127 3968 [ BDAFC88AA6B92F7842416EA6A48E1600 ] MountMgr C:\Windows\system32\drivers\mountmgr.sys
21:44:51.0158 3968 MountMgr - ok
21:44:51.0298 3968 [ CB8AF049AC9BE419A77ADAE288673359 ] MozillaMaintenance C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
21:44:51.0330 3968 MozillaMaintenance - ok
21:44:51.0376 3968 [ 511D011289755DD9F9A7579FB0B064E6 ] mpio C:\Windows\system32\drivers\mpio.sys
21:44:51.0376 3968 mpio - ok
21:44:51.0408 3968 [ 22241FEBA9B2DEFA669C8CB0A8DD7D2E ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys
21:44:51.0470 3968 mpsdrv - ok
21:44:51.0595 3968 [ D1639BA315B0D79DEC49A4B0E1FB929B ] MpsSvc C:\Windows\system32\mpssvc.dll
21:44:51.0704 3968 MpsSvc - ok
21:44:51.0751 3968 [ 4FBBB70D30FD20EC51F80061703B001E ] Mraid35x C:\Windows\system32\drivers\mraid35x.sys
21:44:51.0766 3968 Mraid35x - ok
21:44:51.0813 3968 [ AE3DE84536B6799D2267443CEC8EDBB9 ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys
21:44:51.0860 3968 MRxDAV - ok
21:44:51.0938 3968 [ 5734A0F2BE7E495F7D3ED6EFD4B9F5A1 ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys
21:44:52.0032 3968 mrxsmb - ok
21:44:52.0094 3968 [ 6B5FA5ADFACAC9DBBE0991F4566D7D55 ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys
21:44:52.0141 3968 mrxsmb10 - ok
21:44:52.0188 3968 [ 5C80D8159181C7ABF1B14BA703B01E0B ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys
21:44:52.0281 3968 mrxsmb20 - ok
21:44:52.0328 3968 [ F70590424EEFBF5C27A40C67AFDB8383 ] msahci C:\Windows\system32\drivers\msahci.sys
21:44:52.0359 3968 msahci - ok
21:44:52.0406 3968 [ 4468B0F385A86ECDDAF8D3CA662EC0E7 ] msdsm C:\Windows\system32\drivers\msdsm.sys
21:44:52.0453 3968 msdsm - ok
21:44:52.0500 3968 [ FD7520CC3A80C5FC8C48852BB24C6DED ] MSDTC C:\Windows\System32\msdtc.exe
21:44:52.0578 3968 MSDTC - ok
21:44:52.0656 3968 [ A9927F4A46B816C92F461ACB90CF8515 ] Msfs C:\Windows\system32\drivers\Msfs.sys
21:44:52.0765 3968 Msfs - ok
21:44:52.0812 3968 [ 0F400E306F385C56317357D6DEA56F62 ] msisadrv C:\Windows\system32\drivers\msisadrv.sys
21:44:52.0827 3968 msisadrv - ok
21:44:52.0905 3968 [ 85466C0757A23D9A9AECDC0755203CB2 ] MSiSCSI C:\Windows\system32\iscsiexe.dll
21:44:53.0046 3968 MSiSCSI - ok
21:44:53.0108 3968 msiserver - ok
21:44:53.0248 3968 [ D8C63D34D9C9E56C059E24EC7185CC07 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys
21:44:53.0295 3968 MSKSSRV - ok
21:44:53.0342 3968 [ 1D373C90D62DDB641D50E55B9E78D65E ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys
21:44:53.0404 3968 MSPCLOCK - ok
21:44:53.0436 3968 [ B572DA05BF4E098D4BBA3A4734FB505B ] MSPQM C:\Windows\system32\drivers\MSPQM.sys
21:44:53.0514 3968 MSPQM - ok
21:44:53.0592 3968 [ B5614AECB05A9340AA0FB55BF561CC63 ] MsRPC C:\Windows\system32\drivers\MsRPC.sys
21:44:53.0623 3968 MsRPC - ok
21:44:53.0670 3968 [ E384487CB84BE41D09711C30CA79646C ] mssmbios C:\Windows\system32\DRIVERS\mssmbios.sys
21:44:53.0685 3968 mssmbios - ok
21:44:53.0716 3968 [ 7199C1EEC1E4993CAF96B8C0A26BD58A ] MSTEE C:\Windows\system32\drivers\MSTEE.sys
21:44:53.0763 3968 MSTEE - ok
21:44:53.0779 3968 [ 6DFD1D322DE55B0B7DB7D21B90BEC49C ] Mup C:\Windows\system32\Drivers\mup.sys
21:44:53.0810 3968 Mup - ok
21:44:53.0857 3968 [ C43B25863FBD65B6D2A142AF3AE320CA ] napagent C:\Windows\system32\qagentRT.dll
21:44:53.0888 3968 napagent - ok
21:44:53.0935 3968 [ 3C21CE48FF529BB73DADB98770B54025 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys
21:44:53.0950 3968 NativeWifiP - ok
21:44:53.0997 3968 [ 9BDC71790FA08F0A0B5F10462B1BD0B1 ] NDIS C:\Windows\system32\drivers\ndis.sys
21:44:54.0013 3968 NDIS - ok
21:44:54.0044 3968 [ 0E186E90404980569FB449BA7519AE61 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys
21:44:54.0122 3968 NdisTapi - ok
21:44:54.0138 3968 [ D6973AA34C4D5D76C0430B181C3CD389 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys
21:44:54.0169 3968 Ndisuio - ok
21:44:54.0200 3968 [ 3D14C3B3496F88890D431E8AA022A411 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys
21:44:54.0216 3968 NdisWan - ok
21:44:54.0262 3968 [ 71DAB552B41936358F3B541AE5997FB3 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys
21:44:54.0278 3968 NDProxy - ok
21:44:54.0325 3968 [ BCD093A5A6777CF626434568DC7DBA78 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys
21:44:54.0387 3968 NetBIOS - ok
21:44:54.0418 3968 [ 7C5FEE5B1C5728507CD96FB4A13E7A02 ] netbt C:\Windows\system32\DRIVERS\netbt.sys
21:44:54.0465 3968 netbt - ok
21:44:54.0481 3968 [ A911ECAC81F94ADEAFBE8E3F7873EDB0 ] Netlogon C:\Windows\system32\lsass.exe
21:44:54.0496 3968 Netlogon - ok
21:44:54.0543 3968 [ C8052711DAECC48B982434C5116CA401 ] Netman C:\Windows\System32\netman.dll
21:44:54.0590 3968 Netman - ok
21:44:54.0606 3968 [ 2EF3BBE22E5A5ACD1428EE387A0D0172 ] netprofm C:\Windows\System32\netprofm.dll
21:44:54.0652 3968 netprofm - ok
21:44:54.0715 3968 [ 0AD5876EF4E9EB77C8F93EB5B2FFF386 ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
21:44:54.0762 3968 NetTcpPortSharing - ok
21:44:54.0824 3968 [ 2E7FB731D4790A1BC6270ACCEFACB36E ] nfrd960 C:\Windows\system32\drivers\nfrd960.sys
21:44:54.0840 3968 nfrd960 - ok
21:44:54.0964 3968 [ 2997B15415F9BBE05B5A4C1C85E0C6A2 ] NlaSvc C:\Windows\System32\nlasvc.dll
21:44:55.0058 3968 NlaSvc - ok
21:44:55.0105 3968 [ ECB5003F484F9ED6C608D6D6C7886CBB ] Npfs C:\Windows\system32\drivers\Npfs.sys
21:44:55.0230 3968 Npfs - ok
21:44:55.0292 3968 [ 8BB86F0C7EEA2BDED6FE095D0B4CA9BD ] nsi C:\Windows\system32\nsisvc.dll
21:44:55.0339 3968 nsi - ok
21:44:55.0370 3968 [ 609773E344A97410CE4EBF74A8914FCF ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys
21:44:55.0448 3968 nsiproxy - ok
21:44:55.0869 3968 [ B4EFFE29EB4F15538FD8A9681108492D ] Ntfs C:\Windows\system32\drivers\Ntfs.sys
21:44:56.0041 3968 Ntfs - ok
21:44:56.0088 3968 [ E875C093AEC0C978A90F30C9E0DFBB72 ] ntrigdigi C:\Windows\system32\drivers\ntrigdigi.sys
21:44:56.0322 3968 ntrigdigi - ok
21:44:56.0415 3968 [ C5DBBCDA07D780BDA9B685DF333BB41E ] Null C:\Windows\system32\drivers\Null.sys
21:44:56.0556 3968 Null - ok
21:44:56.0602 3968 [ 2EDF9E7751554B42CBB60116DE727101 ] nvraid C:\Windows\system32\drivers\nvraid.sys
21:44:56.0634 3968 nvraid - ok
21:44:56.0743 3968 [ 7894FFC354DDD5A0600BC112FFEC2DD0 ] nvrd32 C:\Windows\system32\drivers\nvrd32.sys
21:44:56.0758 3968 nvrd32 - ok
21:44:56.0805 3968 [ ABED0C09758D1D97DB0042DBB2688177 ] nvstor C:\Windows\system32\drivers\nvstor.sys
21:44:56.0821 3968 nvstor - ok
21:44:56.0868 3968 [ 2A0CC26D67B38460CC7563BC8313C1D6 ] nvstor32 C:\Windows\system32\drivers\nvstor32.sys
21:44:56.0899 3968 nvstor32 - ok
21:44:56.0992 3968 [ 18BBDF913916B71BD54575BDB6EEAC0B ] nv_agp C:\Windows\system32\drivers\nv_agp.sys
21:44:57.0024 3968 nv_agp - ok
21:44:57.0039 3968 NwlnkFlt - ok
21:44:57.0055 3968 NwlnkFwd - ok
21:44:57.0102 3968 [ 790E27C3DB53410B40FF9EF2FD10A1D9 ] ohci1394 C:\Windows\system32\DRIVERS\ohci1394.sys
21:44:57.0180 3968 ohci1394 - ok
21:44:57.0336 3968 [ 5DE1A3972FD3112C75EB17BDCF454169 ] p2pimsvc C:\Windows\system32\p2psvc.dll
21:44:57.0492 3968 p2pimsvc - ok
21:44:57.0710 3968 [ 5DE1A3972FD3112C75EB17BDCF454169 ] p2psvc C:\Windows\system32\p2psvc.dll
21:44:57.0788 3968 p2psvc - ok
21:44:57.0835 3968 [ 0FA9B5055484649D63C303FE404E5F4D ] Parport C:\Windows\system32\drivers\parport.sys
21:44:57.0960 3968 Parport - ok
21:44:58.0006 3968 [ 3B38467E7C3DAED009DFE359E17F139F ] partmgr C:\Windows\system32\drivers\partmgr.sys
21:44:58.0022 3968 partmgr - ok
21:44:58.0100 3968 [ 4F9A6A8A31413180D0FCB279AD5D8112 ] Parvdm C:\Windows\system32\drivers\parvdm.sys
21:44:58.0287 3968 Parvdm - ok
21:44:58.0365 3968 [ C6276AD11F4BB49B58AA1ED88537F14A ] PcaSvc C:\Windows\System32\pcasvc.dll
21:44:58.0443 3968 PcaSvc - ok
21:44:58.0490 3968 [ 01B94418DEB235DFF777CC80076354B4 ] pci C:\Windows\system32\drivers\pci.sys
21:44:58.0506 3968 pci - ok
21:44:58.0552 3968 [ FC175F5DDAB666D7F4D17449A547626F ] pciide C:\Windows\system32\drivers\pciide.sys
21:44:58.0568 3968 pciide - ok
21:44:58.0599 3968 [ E6F3FB1B86AA519E7698AD05E58B04E5 ] pcmcia C:\Windows\system32\drivers\pcmcia.sys
21:44:58.0646 3968 pcmcia - ok
21:44:58.0724 3968 [ 6349F6ED9C623B44B52EA3C63C831A92 ] PEAUTH C:\Windows\system32\drivers\peauth.sys
21:44:58.0974 3968 PEAUTH - ok
21:44:59.0114 3968 [ B1689DF169143F57053F795390C99DB3 ] pla C:\Windows\system32\pla.dll
21:44:59.0208 3968 pla - ok
21:44:59.0332 3968 [ 78F975CB6D18265BE6F492EDB2D7BC7B ] PlugPlay C:\Windows\system32\umpnpmgr.dll
21:44:59.0395 3968 PlugPlay - ok
21:44:59.0410 3968 [ 5DE1A3972FD3112C75EB17BDCF454169 ] PNRPAutoReg C:\Windows\system32\p2psvc.dll
21:44:59.0473 3968 PNRPAutoReg - ok
21:44:59.0488 3968 [ 5DE1A3972FD3112C75EB17BDCF454169 ] PNRPsvc C:\Windows\system32\p2psvc.dll
21:44:59.0520 3968 PNRPsvc - ok
21:44:59.0644 3968 [ 47B8F37AA18B74D8C2E1BC1A7A2C8F8A ] PolicyAgent C:\Windows\System32\ipsecsvc.dll
21:44:59.0769 3968 PolicyAgent - ok
21:44:59.0847 3968 [ ECFFFAEC0C1ECD8DBC77F39070EA1DB1 ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys
21:44:59.0910 3968 PptpMiniport - ok
21:44:59.0941 3968 [ 2027293619DD0F047C584CF2E7DF4FFD ] Processor C:\Windows\system32\DRIVERS\processr.sys
21:45:00.0019 3968 Processor - ok
21:45:00.0175 3968 [ B627E4FC8585E8843C5905D4D3587A90 ] ProfSvc C:\Windows\system32\profsvc.dll
21:45:00.0315 3968 ProfSvc - ok
21:45:00.0393 3968 [ A911ECAC81F94ADEAFBE8E3F7873EDB0 ] ProtectedStorage C:\Windows\system32\lsass.exe
21:45:00.0440 3968 ProtectedStorage - ok
21:45:00.0502 3968 [ BFEF604508A0ED1EAE2A73E872555FFB ] PSched C:\Windows\system32\DRIVERS\pacer.sys
21:45:00.0580 3968 PSched - ok
21:45:00.0658 3968 [ 0A6DB55AFB7820C99AA1F3A1D270F4F6 ] ql2300 C:\Windows\system32\drivers\ql2300.sys
21:45:00.0799 3968 ql2300 - ok
21:45:00.0861 3968 [ 81A7E5C076E59995D54BC1ED3A16E60B ] ql40xx C:\Windows\system32\drivers\ql40xx.sys
21:45:00.0908 3968 ql40xx - ok
21:45:01.0017 3968 [ E9ECAE663F47E6CB43962D18AB18890F ] QWAVE C:\Windows\system32\qwave.dll
21:45:01.0064 3968 QWAVE - ok
21:45:01.0095 3968 [ 9F5E0E1926014D17486901C88ECA2DB7 ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys
21:45:01.0126 3968 QWAVEdrv - ok
21:45:01.0158 3968 [ 147D7F9C556D259924351FEB0DE606C3 ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys
21:45:01.0220 3968 RasAcd - ok
21:45:01.0298 3968 [ F6A452EB4CEADBB51C9E0EE6B3ECEF0F ] RasAuto C:\Windows\System32\rasauto.dll
21:45:01.0345 3968 RasAuto - ok
21:45:01.0376 3968 [ A214ADBAF4CB47DD2728859EF31F26B0 ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys
21:45:01.0407 3968 Rasl2tp - ok
21:45:01.0423 3968 [ 6E7C284FC5C4EC07AD164D93810385A6 ] RasMan C:\Windows\System32\rasmans.dll
21:45:01.0470 3968 RasMan - ok
21:45:01.0501 3968 [ 3E9D9B048107B40D87B97DF2E48E0744 ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys
21:45:01.0532 3968 RasPppoe - ok
21:45:01.0563 3968 [ A7D141684E9500AC928A772ED8E6B671 ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys
21:45:01.0594 3968 RasSstp - ok
21:45:01.0626 3968 [ 6E1C5D0457622F9EE35F683110E93D14 ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys
21:45:01.0657 3968 rdbss - ok
21:45:01.0672 3968 [ 89E59BE9A564262A3FB6C4F4F1CD9899 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys
21:45:01.0719 3968 RDPCDD - ok
21:45:01.0766 3968 [ FBC0BACD9C3D7F6956853F64A66E252D ] rdpdr C:\Windows\system32\drivers\rdpdr.sys
21:45:01.0813 3968 rdpdr - ok
21:45:01.0813 3968 [ 9D91FE5286F748862ECFFA05F8A0710C ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys
21:45:01.0860 3968 RDPENCDD - ok
21:45:01.0891 3968 [ E1C18F4097A5ABCEC941DC4B2F99DB7E ] RDPWD C:\Windows\system32\drivers\RDPWD.sys
21:45:01.0938 3968 RDPWD - ok
21:45:01.0984 3968 [ BCDD6B4804D06B1F7EBF29E53A57ECE9 ] RemoteAccess C:\Windows\System32\mprdim.dll
21:45:02.0000 3968 RemoteAccess - ok
21:45:02.0047 3968 [ CC4E32400F3C7253400CF8F3F3A0B676 ] RemoteRegistry C:\Windows\system32\regsvc.dll
21:45:02.0094 3968 RemoteRegistry - ok
21:45:02.0125 3968 [ 5123F83CBC4349D065534EEB6BBDC42B ] RpcLocator C:\Windows\system32\locator.exe
21:45:02.0187 3968 RpcLocator - ok
21:45:02.0218 3968 [ 301AE00E12408650BADDC04DBC832830 ] RpcSs C:\Windows\system32\rpcss.dll
21:45:02.0250 3968 RpcSs - ok
21:45:02.0281 3968 [ 9C508F4074A39E8B4B31D27198146FAD ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys
21:45:02.0328 3968 rspndr - ok
21:45:02.0390 3968 [ ABBE0F54BA3A378262C9CB86CF7D91F8 ] RTL8169 C:\Windows\system32\DRIVERS\Rtlh86.sys
21:45:02.0468 3968 RTL8169 - ok
21:45:02.0499 3968 [ A911ECAC81F94ADEAFBE8E3F7873EDB0 ] SamSs C:\Windows\system32\lsass.exe
21:45:02.0515 3968 SamSs - ok
21:45:02.0530 3968 [ 3CE8F073A557E172B330109436984E30 ] sbp2port C:\Windows\system32\drivers\sbp2port.sys
21:45:02.0546 3968 sbp2port - ok
21:45:02.0655 3968 [ 11387E32642269C7E62E8B52C060B3C6 ] SCardSvr C:\Windows\System32\SCardSvr.dll
21:45:02.0827 3968 SCardSvr - ok
21:45:02.0905 3968 [ 7B587B8A6D4A99F79D2902D0385F29BD ] Schedule C:\Windows\system32\schedsvc.dll
21:45:02.0998 3968 Schedule - ok
21:45:03.0030 3968 [ 87C2D0377B23E2D8A41093C2F5FB1A5B ] SCPolicySvc C:\Windows\System32\certprop.dll
21:45:03.0092 3968 SCPolicySvc - ok
21:45:03.0154 3968 [ 126EA89BCC413EE45E3004FB0764888F ] sdbus C:\Windows\system32\DRIVERS\sdbus.sys
21:45:03.0186 3968 sdbus - ok
21:45:03.0217 3968 [ 716313D9F6B0529D03F726D5AAF6F191 ] SDRSVC C:\Windows\System32\SDRSVC.dll
21:45:03.0248 3968 SDRSVC - ok
21:45:03.0279 3968 [ 90A3935D05B494A5A39D37E71F09A677 ] secdrv C:\Windows\system32\drivers\secdrv.sys
21:45:03.0357 3968 secdrv - ok
21:45:03.0388 3968 [ FD5199D4D8A521005E4B5EE7FE00FA9B ] seclogon C:\Windows\system32\seclogon.dll
21:45:03.0420 3968 seclogon - ok
21:45:03.0435 3968 [ A9BBAB5759771E523F55563D6CBE140F ] SENS C:\Windows\system32\sens.dll
21:45:03.0529 3968 SENS - ok
21:45:03.0560 3968 [ 68E44E331D46F0FB38F0863A84CD1A31 ] Serenum C:\Windows\system32\drivers\serenum.sys
21:45:03.0607 3968 Serenum - ok
21:45:03.0669 3968 [ C70D69A918B178D3C3B06339B40C2E1B ] Serial C:\Windows\system32\drivers\serial.sys
21:45:03.0810 3968 Serial - ok
21:45:03.0841 3968 [ 8AF3D28A879BF75DB53A0EE7A4289624 ] sermouse C:\Windows\system32\drivers\sermouse.sys
21:45:03.0888 3968 sermouse - ok
21:45:03.0950 3968 [ D2193326F729B163125610DBF3E17D57 ] SessionEnv C:\Windows\system32\sessenv.dll
21:45:04.0012 3968 SessionEnv - ok
21:45:04.0028 3968 [ 3EFA810BDCA87F6ECC24F9832243FE86 ] sffdisk C:\Windows\system32\drivers\sffdisk.sys
21:45:04.0044 3968 sffdisk - ok
21:45:04.0075 3968 [ E95D451F7EA3E583AEC75F3B3EE42DC5 ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys
21:45:04.0122 3968 sffp_mmc - ok
21:45:04.0137 3968 [ 3D0EA348784B7AC9EA9BD9F317980979 ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys
21:45:04.0184 3968 sffp_sd - ok
21:45:04.0231 3968 [ 46ED8E91793B2E6F848015445A0AC188 ] sfloppy C:\Windows\system32\drivers\sfloppy.sys
21:45:04.0340 3968 sfloppy - ok
21:45:04.0371 3968 [ E1499BD0FF76B1B2FBBF1AF339D91165 ] SharedAccess C:\Windows\System32\ipnathlp.dll
21:45:04.0418 3968 SharedAccess - ok
21:45:04.0465 3968 [ 1E3FDB80E40A3CE645F229DFBDFB7694 ] ShellHWDetection C:\Windows\System32\shsvcs.dll
21:45:04.0527 3968 ShellHWDetection - ok
21:45:04.0558 3968 [ 1D76624A09A054F682D746B924E2DBC3 ] sisagp C:\Windows\system32\drivers\sisagp.sys
21:45:04.0574 3968 sisagp - ok
21:45:04.0621 3968 [ 43CB7AA756C7DB280D01DA9B676CFDE2 ] SiSRaid2 C:\Windows\system32\drivers\sisraid2.sys
21:45:04.0636 3968 SiSRaid2 - ok
21:45:04.0668 3968 [ A99C6C8B0BAA970D8AA59DDC50B57F94 ] SiSRaid4 C:\Windows\system32\drivers\sisraid4.sys
21:45:04.0668 3968 SiSRaid4 - ok
21:45:04.0777 3968 [ DDAA5F4A6B958FC313EBD02DD925752F ] SkypeUpdate C:\Program Files\Skype\Updater\Updater.exe
21:45:04.0792 3968 SkypeUpdate - ok
21:45:04.0902 3968 [ 0BA91E1358AD25236863039BB2609A2E ] slsvc C:\Windows\system32\SLsvc.exe
21:45:05.0042 3968 slsvc - ok
21:45:05.0073 3968 [ 7C6DC44CA0BFA6291629AB764200D1D4 ] SLUINotify C:\Windows\system32\SLUINotify.dll
21:45:05.0136 3968 SLUINotify - ok
21:45:05.0167 3968 [ 031E6BCD53C9B2B9ACE111EAFEC347B6 ] Smb C:\Windows\system32\DRIVERS\smb.sys
21:45:05.0214 3968 Smb - ok
21:45:05.0260 3968 [ 2A146A055B4401C16EE62D18B8E2A032 ] SNMPTRAP C:\Windows\System32\snmptrap.exe
21:45:05.0276 3968 SNMPTRAP - ok
21:45:05.0307 3968 [ 7AEBDEEF071FE28B0EEF2CDD69102BFF ] spldr C:\Windows\system32\drivers\spldr.sys
21:45:05.0323 3968 spldr - ok
21:45:05.0354 3968 [ 3665F79026A3F91FBCA63F2C65A09B19 ] Spooler C:\Windows\System32\spoolsv.exe
21:45:05.0401 3968 Spooler - ok
21:45:05.0479 3968 [ 2252AEF839B1093D16761189F45AF885 ] srv C:\Windows\system32\DRIVERS\srv.sys
21:45:05.0541 3968 srv - ok
21:45:05.0572 3968 [ B7FF59408034119476B00A81BB53D5D1 ] srv2 C:\Windows\system32\DRIVERS\srv2.sys
21:45:05.0619 3968 srv2 - ok
21:45:05.0650 3968 [ 2ACCC9B12AF02030F531E6CCA6F8B76E ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys
21:45:05.0682 3968 srvnet - ok
21:45:05.0822 3968 [ 03D50B37234967433A5EA5BA72BC0B62 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll
21:45:05.0916 3968 SSDPSRV - ok
21:45:05.0978 3968 [ A36EE93698802CD899F98BFD553D8185 ] ssmdrv C:\Windows\system32\DRIVERS\ssmdrv.sys
21:45:05.0994 3968 ssmdrv - ok
21:45:06.0025 3968 [ 6F1A32E7B7B30F004D9A20AFADB14944 ] SstpSvc C:\Windows\system32\sstpsvc.dll
21:45:06.0087 3968 SstpSvc - ok
21:45:06.0134 3968 [ 7DD08A597BC56051F320DA0BAF69E389 ] stisvc C:\Windows\System32\wiaservc.dll
21:45:06.0212 3968 stisvc - ok
21:45:06.0290 3968 [ 7BA58ECF0C0A9A69D44B3DCA62BECF56 ] swenum C:\Windows\system32\DRIVERS\swenum.sys
21:45:06.0321 3968 swenum - ok
21:45:06.0430 3968 [ B36C7CDB86F7F7A8E884479219766950 ] swprv C:\Windows\System32\swprv.dll
21:45:06.0508 3968 swprv - ok
21:45:06.0540 3968 [ 192AA3AC01DF071B541094F251DEED10 ] Symc8xx C:\Windows\system32\drivers\symc8xx.sys
21:45:06.0555 3968 Symc8xx - ok
21:45:06.0586 3968 [ 8C8EB8C76736EBAF3B13B633B2E64125 ] Sym_hi C:\Windows\system32\drivers\sym_hi.sys
21:45:06.0602 3968 Sym_hi - ok
21:45:06.0633 3968 [ 8072AF52B5FD103BBBA387A1E49F62CB ] Sym_u3 C:\Windows\system32\drivers\sym_u3.sys
21:45:06.0649 3968 Sym_u3 - ok
21:45:06.0727 3968 [ DB835C324CD488A86E9BFC2C3FD29CD8 ] SynTP C:\Windows\system32\DRIVERS\SynTP.sys
21:45:06.0789 3968 SynTP - ok
21:45:06.0836 3968 [ 59302BD9A118F8807F59BDFF07ED2687 ] SysMain C:\Windows\system32\sysmain.dll
21:45:06.0898 3968 SysMain - ok
21:45:06.0945 3968 [ 2DCA225EAE15F42C0933E998EE0231C3 ] TabletInputService C:\Windows\System32\TabSvc.dll
21:45:07.0008 3968 TabletInputService - ok
21:45:07.0039 3968 [ 680916BB09EE0F3A6ACA7C274B0D633F ] TapiSrv C:\Windows\System32\tapisrv.dll
21:45:07.0148 3968 TapiSrv - ok
21:45:07.0195 3968 [ CB05822CD9CC6C688168E113C603DBE7 ] TBS C:\Windows\System32\tbssvc.dll
21:45:07.0242 3968 TBS - ok
21:45:07.0304 3968 [ 782568AB6A43160A159B6215B70BCCE9 ] Tcpip C:\Windows\system32\drivers\tcpip.sys
21:45:07.0413 3968 Tcpip - ok
21:45:07.0429 3968 [ 782568AB6A43160A159B6215B70BCCE9 ] Tcpip6 C:\Windows\system32\DRIVERS\tcpip.sys
21:45:07.0460 3968 Tcpip6 - ok
21:45:07.0507 3968 [ D4A2E4A4B011F3A883AF77315A5AE76B ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys
21:45:07.0538 3968 tcpipreg - ok
21:45:07.0585 3968 [ 5DCF5E267BE67A1AE926F2DF77FBCC56 ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys
21:45:07.0663 3968 TDPIPE - ok
21:45:07.0710 3968 [ 389C63E32B3CEFED425B61ED92D3F021 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys
21:45:07.0741 3968 TDTCP - ok
21:45:07.0803 3968 [ D09276B1FAB033CE1D40DCBDF303D10F ] tdx C:\Windows\system32\DRIVERS\tdx.sys
21:45:07.0881 3968 tdx - ok
21:45:07.0897 3968 [ A048056F5E1A96A9BF3071B91741A5AA ] TermDD C:\Windows\system32\DRIVERS\termdd.sys
21:45:07.0928 3968 TermDD - ok
21:45:07.0990 3968 [ D605031E225AACCBCEB5B76A4F1603A6 ] TermService C:\Windows\System32\termsrv.dll
21:45:08.0068 3968 TermService - ok
21:45:08.0100 3968 [ 1E3FDB80E40A3CE645F229DFBDFB7694 ] Themes C:\Windows\system32\shsvcs.dll
21:45:08.0131 3968 Themes - ok
21:45:08.0146 3968 [ 1076FFCFFAAE8385FD62DFCB25AC4708 ] THREADORDER C:\Windows\system32\mmcss.dll
21:45:08.0178 3968 THREADORDER - ok
21:45:08.0224 3968 [ EC74E77D0EB004BD3A809B5F8FB8C2CE ] TrkWks C:\Windows\System32\trkwks.dll
21:45:08.0302 3968 TrkWks - ok
21:45:08.0474 3968 [ 16613A1BAD034D4ECF957AF18B7C2FF5 ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
21:45:08.0552 3968 TrustedInstaller - ok
21:45:08.0614 3968 [ DCF0F056A2E4F52287264F5AB29CF206 ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys
21:45:08.0677 3968 tssecsrv - ok
21:45:08.0708 3968 [ CAECC0120AC49E3D2F758B9169872D38 ] tunmp C:\Windows\system32\DRIVERS\tunmp.sys
21:45:08.0755 3968 tunmp - ok
21:45:08.0770 3968 [ 6042505FF6FA9AC1EF7684D0E03B6940 ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys
21:45:08.0802 3968 tunnel - ok
21:45:08.0864 3968 [ 7D33C4DB2CE363C8518D2DFCF533941F ] uagp35 C:\Windows\system32\drivers\uagp35.sys
21:45:08.0880 3968 uagp35 - ok
21:45:08.0958 3968 [ 8B5088058FA1D1CD897A2113CCFF6C58 ] udfs C:\Windows\system32\DRIVERS\udfs.sys
21:45:09.0051 3968 udfs - ok
21:45:09.0254 3968 [ 13BFF97E926BF8D9C1230CECC371A0C0 ] UI Assistant Service C:\Program Files\1&1 Surf-Stick\AssistantServices.exe
21:45:09.0285 3968 UI Assistant Service - ok
21:45:09.0332 3968 [ ECEF404F62863755951E09C802C94AD5 ] UI0Detect C:\Windows\system32\UI0Detect.exe
21:45:09.0394 3968 UI0Detect - ok
21:45:09.0472 3968 [ B0ACFDC9E4AF279E9116C03E014B2B27 ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys
21:45:09.0504 3968 uliagpkx - ok
21:45:09.0582 3968 [ 9224BB254F591DE4CA8D572A5F0D635C ] uliahci C:\Windows\system32\drivers\uliahci.sys
21:45:09.0613 3968 uliahci - ok
21:45:09.0644 3968 [ 8514D0E5CD0534467C5FC61BE94A569F ] UlSata C:\Windows\system32\drivers\ulsata.sys
21:45:09.0675 3968 UlSata - ok
21:45:09.0784 3968 [ 38C3C6E62B157A6BC46594FADA45C62B ] ulsata2 C:\Windows\system32\drivers\ulsata2.sys
21:45:09.0816 3968 ulsata2 - ok
21:45:09.0862 3968 [ 32CFF9F809AE9AED85464492BF3E32D2 ] umbus C:\Windows\system32\DRIVERS\umbus.sys
21:45:09.0940 3968 umbus - ok
21:45:10.0018 3968 [ 68308183F4AE0BE7BF8ECD07CB297999 ] upnphost C:\Windows\System32\upnphost.dll
21:45:10.0081 3968 upnphost - ok
21:45:10.0190 3968 [ E8C1B9EBAC65288E1B51E8A987D98AF6 ] USBAAPL C:\Windows\system32\Drivers\usbaapl.sys
21:45:10.0268 3968 USBAAPL - ok
21:45:10.0330 3968 [ CAF811AE4C147FFCD5B51750C7F09142 ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys
21:45:10.0408 3968 usbccgp - ok
21:45:10.0486 3968 [ E9476E6C486E76BC4898074768FB7131 ] usbcir C:\Windows\system32\drivers\usbcir.sys
21:45:10.0580 3968 usbcir - ok
21:45:10.0611 3968 [ CEBE90821810E76320155BEBA722FCF9 ] usbehci C:\Windows\system32\DRIVERS\usbehci.sys
21:45:10.0642 3968 usbehci - ok
21:45:10.0674 3968 [ CC6B28E4CE39951357963119CE47B143 ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys
21:45:10.0705 3968 usbhub - ok
21:45:10.0752 3968 [ 7BDB7B0E7D45AC0402D78B90789EF47C ] usbohci C:\Windows\system32\DRIVERS\usbohci.sys
21:45:10.0798 3968 usbohci - ok
21:45:10.0845 3968 [ B51E52ACF758BE00EF3A58EA452FE360 ] usbprint C:\Windows\system32\drivers\usbprint.sys
21:45:10.0923 3968 usbprint - ok
21:45:10.0986 3968 [ 87BA6B83C5D19B69160968D07D6E2982 ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS
21:45:11.0079 3968 USBSTOR - ok
21:45:11.0142 3968 [ 814D653EFC4D48BE3B04A307ECEFF56F ] usbuhci C:\Windows\system32\DRIVERS\usbuhci.sys
21:45:11.0235 3968 usbuhci - ok
21:45:11.0282 3968 [ E67998E8F14CB0627A769F6530BCB352 ] usbvideo C:\Windows\system32\Drivers\usbvideo.sys
21:45:11.0376 3968 usbvideo - ok
21:45:11.0407 3968 [ 032A0ACC3909AE7215D524E29D536797 ] UxSms C:\Windows\System32\uxsms.dll
21:45:11.0469 3968 UxSms - ok
21:45:11.0516 3968 [ B13BC395B9D6116628F5AF47E0802AC4 ] vds C:\Windows\System32\vds.exe
21:45:11.0610 3968 vds - ok
21:45:11.0656 3968 [ 87B06E1F30B749A114F74622D013F8D4 ] vga C:\Windows\system32\DRIVERS\vgapnp.sys
21:45:11.0703 3968 vga - ok
21:45:11.0734 3968 [ 2E93AC0A1D8C79D019DB6C51F036636C ] VgaSave C:\Windows\System32\drivers\vga.sys
21:45:11.0750 3968 VgaSave - ok
21:45:11.0781 3968 [ 5D7159DEF58A800D5781BA3A879627BC ] viaagp C:\Windows\system32\drivers\viaagp.sys
21:45:11.0781 3968 viaagp - ok
21:45:11.0828 3968 [ C4F3A691B5BAD343E6249BD8C2D45DEE ] ViaC7 C:\Windows\system32\drivers\viac7.sys
21:45:11.0844 3968 ViaC7 - ok
21:45:11.0890 3968 [ AADF5587A4063F52C2C3FED7887426FC ] viaide C:\Windows\system32\drivers\viaide.sys
21:45:11.0906 3968 viaide - ok
21:45:11.0922 3968 [ 69503668AC66C77C6CD7AF86FBDF8C43 ] volmgr C:\Windows\system32\drivers\volmgr.sys
21:45:11.0937 3968 volmgr - ok
21:45:12.0046 3968 [ 98F5FFE6316BD74E9E2C97206C190196 ] volmgrx C:\Windows\system32\drivers\volmgrx.sys
21:45:12.0078 3968 volmgrx - ok
21:45:12.0187 3968 [ D8B4A53DD2769F226B3EB374374987C9 ] volsnap C:\Windows\system32\drivers\volsnap.sys
21:45:12.0218 3968 volsnap - ok
21:45:12.0265 3968 [ 587253E09325E6BF226B299774B728A9 ] vsmraid C:\Windows\system32\drivers\vsmraid.sys
21:45:12.0280 3968 vsmraid - ok
21:45:12.0499 3968 [ D5FB73D19C46ADE183F968E13F186B23 ] VSS C:\Windows\system32\vssvc.exe
21:45:12.0639 3968 VSS - ok
21:45:12.0702 3968 [ 1CF9206966A8458CDA9A8B20DF8AB7D3 ] W32Time C:\Windows\system32\w32time.dll
21:45:12.0764 3968 W32Time - ok
21:45:12.0811 3968 [ 48DFEE8F1AF7C8235D4E626F0C4FE031 ] WacomPen C:\Windows\system32\drivers\wacompen.sys
21:45:12.0889 3968 WacomPen - ok
21:45:12.0920 3968 [ 55201897378CCA7AF8B5EFD874374A26 ] Wanarp C:\Windows\system32\DRIVERS\wanarp.sys
21:45:13.0029 3968 Wanarp - ok
21:45:13.0029 3968 [ 55201897378CCA7AF8B5EFD874374A26 ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys
21:45:13.0092 3968 Wanarpv6 - ok
21:45:13.0138 3968 [ F3A5C2E1A6533192B070D06ECF6BE796 ] wcncsvc C:\Windows\System32\wcncsvc.dll
21:45:13.0216 3968 wcncsvc - ok
21:45:13.0248 3968 [ 11BCB7AFCDD7AADACB5746F544D3A9C7 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
21:45:13.0294 3968 WcsPlugInService - ok
21:45:13.0326 3968 [ 78FE9542363F297B18C027B2D7E7C07F ] Wd C:\Windows\system32\drivers\wd.sys
21:45:13.0341 3968 Wd - ok
21:45:13.0388 3968 [ B6F0A7AD6D4BD325FBCD8BAC96CD8D96 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys
21:45:13.0404 3968 Wdf01000 - ok
21:45:13.0435 3968 [ ABFC76B48BB6C96E3338D8943C5D93B5 ] WdiServiceHost C:\Windows\system32\wdi.dll
21:45:13.0482 3968 WdiServiceHost - ok
21:45:13.0482 3968 [ ABFC76B48BB6C96E3338D8943C5D93B5 ] WdiSystemHost C:\Windows\system32\wdi.dll
21:45:13.0528 3968 WdiSystemHost - ok
21:45:13.0575 3968 [ CF9A5F41789B642DB967021DE06A2713 ] WebClient C:\Windows\System32\webclnt.dll
21:45:13.0606 3968 WebClient - ok
21:45:13.0653 3968 [ AE3736E7E8892241C23E4EBBB7453B60 ] Wecsvc C:\Windows\system32\wecsvc.dll
21:45:13.0700 3968 Wecsvc - ok
21:45:13.0731 3968 [ 670FF720071ED741206D69BD995EA453 ] wercplsupport C:\Windows\System32\wercplsupport.dll
21:45:13.0778 3968 wercplsupport - ok
21:45:13.0809 3968 [ FD1965AAA112C6818A30AB02742D0461 ] WerSvc C:\Windows\System32\WerSvc.dll
21:45:13.0872 3968 WerSvc - ok
21:45:13.0934 3968 [ 4575AA12561C5648483403541D0D7F2B ] WinDefend C:\Program Files\Windows Defender\mpsvc.dll
21:45:13.0965 3968 WinDefend - ok
21:45:13.0981 3968 WinHttpAutoProxySvc - ok
21:45:14.0246 3968 [ 00B79A7C984678F24CF052E5BEB3A2F5 ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll
21:45:14.0371 3968 Winmgmt - ok
21:45:14.0511 3968 [ 7CFE68BDC065E55AA5E8421607037511 ] WinRM C:\Windows\system32\WsmSvc.dll
21:45:14.0667 3968 WinRM - ok
21:45:14.0761 3968 [ 40B6CE57B2B209115C0426535D4253F2 ] WisLMSvc C:\Program Files\Launch Manager\WisLMSvc.exe
21:45:14.0761 3968 WisLMSvc ( UnsignedFile.Multi.Generic ) - warning
21:45:14.0761 3968 WisLMSvc - detected UnsignedFile.Multi.Generic (1)
21:45:14.0870 3968 [ 275F4346E569DF56CFB95243BD6F6FF0 ] Wlansvc C:\Windows\System32\wlansvc.dll
21:45:14.0995 3968 Wlansvc - ok
21:45:15.0042 3968 [ 2E7255D172DF0B8283CDFB7B433B864E ] WmiAcpi C:\Windows\system32\DRIVERS\wmiacpi.sys
21:45:15.0104 3968 WmiAcpi - ok
21:45:15.0166 3968 [ ABA4CF9F856D9A3A25F4DDD7690A6E9D ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe
21:45:15.0260 3968 wmiApSrv - ok
21:45:15.0338 3968 [ 3978704576A121A9204F8CC49A301A9B ] WMPNetworkSvc C:\Program Files\Windows Media Player\wmpnetwk.exe
21:45:15.0525 3968 WMPNetworkSvc - ok
21:45:15.0603 3968 [ 5D94CD167751294962BA238D82DD1BB8 ] WPCSvc C:\Windows\System32\wpcsvc.dll
21:45:15.0666 3968 WPCSvc - ok
21:45:15.0712 3968 [ 396D406292B0CD26E3504FFE82784702 ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll
21:45:15.0790 3968 WPDBusEnum - ok
21:45:15.0853 3968 [ 0CEC23084B51B8288099EB710224E955 ] WpdUsb C:\Windows\system32\DRIVERS\wpdusb.sys
21:45:15.0915 3968 WpdUsb - ok
21:45:16.0087 3968 [ DCF3E3EDF5109EE8BC02FE6E1F045795 ] WPFFontCache_v0400 C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe
21:45:16.0165 3968 WPFFontCache_v0400 - ok
21:45:16.0196 3968 [ E3A3CB253C0EC2494D4A61F5E43A389C ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys
21:45:16.0274 3968 ws2ifsl - ok
21:45:16.0321 3968 [ 683DD16B590372F2C9661D277F35E49C ] wscsvc C:\Windows\system32\wscsvc.dll
21:45:16.0368 3968 wscsvc - ok
21:45:16.0383 3968 WSearch - ok
21:45:16.0477 3968 [ 6298277B73C77FA99106B271A7525163 ] wuauserv C:\Windows\system32\wuaueng.dll
21:45:16.0617 3968 wuauserv - ok
21:45:16.0711 3968 [ AC13CB789D93412106B0FB6C7EB2BCB6 ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys
21:45:16.0758 3968 WUDFRd - ok
21:45:16.0820 3968 [ 575A4190D989F64732119E4114045A4F ] wudfsvc C:\Windows\System32\WUDFSvc.dll
21:45:16.0851 3968 wudfsvc - ok
21:45:16.0898 3968 [ 3862318F85BE7A91957ADA5E814ED58C ] ZTEusbmdm6k C:\Windows\system32\DRIVERS\ZTEusbmdm6k.sys
21:45:16.0976 3968 ZTEusbmdm6k - ok
21:45:17.0023 3968 [ 3862318F85BE7A91957ADA5E814ED58C ] ZTEusbnmea C:\Windows\system32\DRIVERS\ZTEusbnmea.sys
21:45:17.0054 3968 ZTEusbnmea - ok
21:45:17.0101 3968 [ 3862318F85BE7A91957ADA5E814ED58C ] ZTEusbser6k C:\Windows\system32\DRIVERS\ZTEusbser6k.sys
21:45:17.0132 3968 ZTEusbser6k - ok
21:45:17.0163 3968 ================ Scan global ===============================
21:45:17.0194 3968 [ F31EEBC1A1C81FD04005489CC3DCDFE7 ] C:\Windows\system32\basesrv.dll
21:45:17.0272 3968 [ F42F8855CB5C22E203C6672B124F17FD ] C:\Windows\system32\winsrv.dll
21:45:17.0304 3968 [ F42F8855CB5C22E203C6672B124F17FD ] C:\Windows\system32\winsrv.dll
21:45:17.0350 3968 [ 2B336AB6286D6C81FA02CBAB914E3C6C ] C:\Windows\system32\services.exe
21:45:17.0350 3968 [Global] - ok
21:45:17.0350 3968 ================ Scan MBR ==================================
21:45:17.0382 3968 [ 5C616939100B85E558DA92B899A0FC36 ] \Device\Harddisk0\DR0
21:45:18.0271 3968 \Device\Harddisk0\DR0 - ok
21:45:18.0271 3968 ================ Scan VBR ==================================
21:45:18.0318 3968 [ 31B6D883DA04414AD6712DCA3E0D1DEB ] \Device\Harddisk0\DR0\Partition1
21:45:18.0333 3968 \Device\Harddisk0\DR0\Partition1 - ok
21:45:18.0333 3968 ============================================================
21:45:18.0333 3968 Scan finished
21:45:18.0333 3968 ============================================================
21:45:18.0349 0252 Detected object count: 2
21:45:18.0349 0252 Actual detected object count: 2
21:45:25.0696 0252 Hotkey ( UnsignedFile.Multi.Generic ) - skipped by user
21:45:25.0696 0252 Hotkey ( UnsignedFile.Multi.Generic ) - User select action: Skip
21:45:25.0696 0252 WisLMSvc ( UnsignedFile.Multi.Generic ) - skipped by user
21:45:25.0696 0252 WisLMSvc ( UnsignedFile.Multi.Generic ) - User select action: Skip

ok, malwarebytes öffnen, updaten, komplett scan ausführen, log posten, funde öschen

Hallo

Hab von Malwarebites die Komplettsuche durchgeführt. Es sagt, dass nichts gefunden wurde. Heisst das, das Problem ist erledigt?

Hier der Log

Malwarebytes Anti-Malware 1.65.0.1400
www.malwarebytes.org

Datenbank Version: v2012.09.27.09

Windows Vista Service Pack 1 x86 NTFS
Internet Explorer 7.0.6001.18000
User :: USER-PC [Administrator]

27.09.2012 20:31:51
mbam-log-2012-09-27 (20-31-51).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|)
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 313162
Laufzeit: 1 Stunde(n), 37 Minute(n), 37 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 0
(Keine bösartigen Objekte gefunden)

(Ende)

jetzt müssen wir den pc aufräumen und unbedingt absichern.
bist mich noch nicht los :-(
lade den CCleaner standard:
CCleaner Download - CCleaner 3.23.1823
falls der CCleaner
bereits instaliert, überspringen.
instalieren, öffnen, extras, liste der instalierten programme, als txt speichern. öffnen.
hinter, jedes von dir benötigte programm, schreibe notwendig.
hinter, jedes, von dir nicht benötigte, unnötig.
hinter, dir unbekannte, unbekannt.
liste posten.