Hallo,

habe hier einen Laptop der nach dem starten nur noch einen weißen Bildschirm zeigt. Nichts funktioniert und man kann nur im Task-Manager Menue herunterfahren.
Habe versucht im abgesicherten Modus zu starten. Das funkioniert aber nur "mit Eingabeaufforderung". In den beiden anderen Modi fährt er ohne eigenes zutun sofort wieder runter.
Ich habe hier die OTL.txt

OTL logfile created on: 07.05.2013 14:10:33 - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = g:\
64bit-Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
3,97 Gb Total Physical Memory | 3,44 Gb Available Physical Memory | 86,80% Memory free
8,11 Gb Paging File | 7,70 Gb Available in Paging File | 94,95% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 286,02 Gb Total Space | 199,74 Gb Free Space | 69,83% Space Free | Partition Type: NTFS
Drive D: | 298,09 Gb Total Space | 297,99 Gb Free Space | 99,97% Space Free | Partition Type: NTFS
Drive E: | 12,07 Gb Total Space | 1,93 Gb Free Space | 16,01% Space Free | Partition Type: NTFS
Drive G: | 7,45 Gb Total Space | 6,43 Gb Free Space | 86,21% Space Free | Partition Type: FAT32
 
Computer Name: YVONNE-PC | User Name: Yvonne | Logged in as Administrator.
Boot Mode: SafeMode | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - [2013.05.07 13:59:08 | 000,602,112 | ---- | M] (OldTimer Tools) -- g:\OTL.exe
 
 
========== Modules (No Company Name) ==========
 
 
========== Services (SafeList) ==========
 
SRV:64bit: - [2011.05.13 18:58:10 | 000,030,520 | ---- | M] (Hewlett-Packard Company) [Auto | Stopped] -- C:\Windows\SysNative\Hpservice.exe -- (hpsrv)
SRV:64bit: - [2009.06.03 20:43:18 | 000,239,104 | ---- | M] (IDT, Inc.) [Auto | Stopped] -- C:\Windows\SysNative\DriverStore\FileRepository\stwrt64.inf_6ef279c8\STacSV64.exe -- (STacSV)
SRV:64bit: - [2009.03.02 18:42:58 | 000,089,600 | ---- | M] (Andrea Electronics Corporation) [Auto | Stopped] -- C:\Windows\SysNative\DriverStore\FileRepository\stwrt64.inf_6ef279c8\AESTSr64.exe -- (AESTFilters)
SRV:64bit: - [2008.11.18 06:09:46 | 000,721,712 | ---- | M] (Validity Sensors, Inc.) [Auto | Stopped] -- C:\Windows\SysNative\vfsFPService.exe -- (vfsFPService)
SRV - [2013.03.21 14:21:26 | 000,253,656 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2012.07.18 18:04:33 | 000,086,224 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Stopped] -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2012.07.18 18:04:23 | 000,110,032 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Stopped] -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2011.11.16 18:23:44 | 000,377,344 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- winhttp.dll -- (WinHttpAutoProxySvc)
SRV - [2010.03.18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2010.01.25 09:22:56 | 000,245,760 | ---- | M] (Brother Industries, Ltd.) [On_Demand | Stopped] -- C:\Program Files (x86)\Browny02\BrYNSvc.exe -- (BrYNSvc)
SRV - [2009.12.01 13:37:48 | 000,322,624 | ---- | M] (DigitalPersona, Inc.) [Auto | Stopped] -- C:\Program Files (x86)\DigitalPersona\Bin\DpHostW.exe -- (DpHost)
SRV - [2009.03.30 06:42:14 | 000,066,368 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2008.12.17 17:11:40 | 000,365,952 | ---- | M] () [Auto | Stopped] -- C:\Program Files (x86)\SMINST\BLService.exe -- (Recovery Service for Windows)
SRV - [2008.11.26 17:13:08 | 000,296,320 | ---- | M] () [Auto | Stopped] -- C:\Program Files (x86)\Hewlett-Packard\Media\TV\Kernel\TV\TVCapSvc.exe -- (TVCapSvc)
SRV - [2008.11.26 17:13:08 | 000,116,096 | ---- | M] () [Auto | Stopped] -- C:\Program Files (x86)\Hewlett-Packard\Media\TV\Kernel\TV\TVSched.exe -- (TVSched)
SRV - [2008.11.18 06:09:42 | 000,599,344 | ---- | M] (Validity Sensors, Inc.) [Auto | Stopped] -- C:\Windows\SysWOW64\vfsFPService.exe -- (vfsFPService)
SRV - [2008.02.03 13:00:00 | 000,129,992 | ---- | M] (EasyBits Sofware AS) [Auto | Stopped] -- C:\Windows\SysWOW64\ezsvc7.dll -- (ezSharedSvc)
SRV - [2007.01.19 13:54:14 | 000,097,136 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\MSN Messenger\usnsvc.exe -- (usnjsvc)
 
 
========== Driver Services (SafeList) ==========
 
DRV:64bit: - [2012.07.18 18:04:42 | 000,132,832 | ---- | M] (Avira GmbH) [Kernel | System | Stopped] -- C:\Windows\SysNative\DRIVERS\avipbb.sys -- (avipbb)
DRV:64bit: - [2012.07.18 18:04:42 | 000,027,760 | ---- | M] (Avira GmbH) [Kernel | System | Stopped] -- C:\Windows\SysNative\DRIVERS\avkmgr.sys -- (avkmgr)
DRV:64bit: - [2012.07.18 18:04:41 | 000,098,848 | ---- | M] (Avira GmbH) [File_System | Auto | Stopped] -- C:\Windows\SysNative\DRIVERS\avgntflt.sys -- (avgntflt)
DRV:64bit: - [2012.02.29 15:52:46 | 000,016,384 | ---- | M] (Microsoft Corporation) [Recognizer | System | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:64bit: - [2011.05.13 18:58:16 | 000,030,008 | ---- | M] (Hewlett-Packard Company) [Kernel | Boot | Running] -- C:\Windows\SysNative\DRIVERS\hpdskflt.sys -- (hpdskflt)
DRV:64bit: - [2011.05.13 18:57:58 | 000,043,320 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\Accelerometer.sys -- (Accelerometer)
DRV:64bit: - [2010.05.27 22:32:56 | 000,320,560 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\SynTP.sys -- (SynTP)
DRV:64bit: - [2009.06.03 20:43:18 | 000,486,400 | ---- | M] (IDT, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\stwrt64.sys -- (STHDA)
DRV:64bit: - [2008.11.17 15:50:30 | 004,751,360 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\NETw5v64.sys -- (NETw5v64)
DRV:64bit: - [2008.10.23 11:42:06 | 000,128,352 | ---- | M] (JMicron Technology Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\jmcr.sys -- (JMCR)
DRV:64bit: - [2008.09.25 07:39:48 | 000,058,912 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\nvhda64v.sys -- (NVHDA)
DRV:64bit: - [2008.09.04 19:48:00 | 000,064,000 | ---- | M] (ENE TECHNOLOGY INC.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\enecir.sys -- (enecir)
DRV:64bit: - [2008.08.06 18:26:08 | 000,174,592 | ---- | M] (Realtek Corporation                                            ) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\Rtlh64.sys -- (RTL8169)
DRV:64bit: - [2008.07.04 07:23:12 | 000,306,688 | ---- | M] (AVerMedia TECHNOLOGIES, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\AVerAF15.sys -- (AVerAF15)
DRV:64bit: - [2008.06.23 13:54:02 | 000,099,368 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btwavdt.sys -- (btwavdt)
DRV:64bit: - [2008.06.23 13:54:02 | 000,091,176 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btwaudio.sys -- (btwaudio)
DRV:64bit: - [2008.06.23 13:54:02 | 000,019,752 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\btwrchid.sys -- (btwrchid)
DRV:64bit: - [2008.01.21 04:46:57 | 003,154,432 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\NETw3v64.sys -- (NETw3v64)
DRV:64bit: - [2008.01.21 04:46:55 | 000,111,104 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\sdbus.sys -- (sdbus)
DRV:64bit: - [2007.06.18 18:13:12 | 000,018,432 | ---- | M] (Hewlett-Packard Development Company, L.P.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\HpqKbFiltr.sys -- (HpqKbFiltr)
DRV:64bit: - [2006.10.04 03:45:36 | 000,273,408 | ---- | M] (Marvell) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\yk60x64.sys -- (yukonx64)
DRV - [2008.11.28 18:04:24 | 000,146,928 | ---- | M] (CyberLink Corp.) [2009/07/20 02:50:53] [Kernel | Auto | Stopped] -- C:\Program Files (x86)\Hewlett-Packard\Media\DVD\000.fcl -- ({55662437-DA8C-40c0-AADA-2C816A897A49})
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=de_de&c=91&bd=Pavilion&pf=cnnb
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=de_de&c=91&bd=Pavilion&pf=cnnb
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {EA90534F-BBBC-4515-8951-8BD6060C0737}
IE:64bit: - HKLM\..\SearchScopes\{2A1AD9D0-591B-4D34-941E-A94D9B0450E0}: "URL" = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=cb-hp06&type=ie2008
IE:64bit: - HKLM\..\SearchScopes\{8B436489-8A83-4B8A-8B88-0F0DA1F31406}: "URL" = hxxp://de.kelkoopartners.net/ctl/do/search?siteSearchQuery={searchTerms}&fromform=true&x=true&y=true&partner=hp&partnerId=96913933
IE:64bit: - HKLM\..\SearchScopes\{EA90534F-BBBC-4515-8951-8BD6060C0737}: "URL" = hxxp://slirsredirect.search.aol.com/slirs_http/sredir?sredir=1145&query={searchTerms}&invocationType=tb50hpcnnbie7-de-de
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=de_de&c=91&bd=Pavilion&pf=cnnb
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=de_de&c=91&bd=Pavilion&pf=cnnb
IE - HKLM\..\SearchScopes,DefaultScope = {EA90534F-BBBC-4515-8951-8BD6060C0737}
IE - HKLM\..\SearchScopes\{2A1AD9D0-591B-4D34-941E-A94D9B0450E0}: "URL" = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=cb-hp06&type=ie2008
IE - HKLM\..\SearchScopes\{8B436489-8A83-4B8A-8B88-0F0DA1F31406}: "URL" = hxxp://de.kelkoopartners.net/ctl/do/search?siteSearchQuery={searchTerms}&fromform=true&x=true&y=true&partner=hp&partnerId=96913933
IE - HKLM\..\SearchScopes\{EA90534F-BBBC-4515-8951-8BD6060C0737}: "URL" = hxxp://slirsredirect.search.aol.com/slirs_http/sredir?sredir=1145&query={searchTerms}&invocationType=tb50hpcnnbie7-de-de
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
IE - HKU\S-1-5-21-2116707517-3129132125-347974426-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=de_de&c=91&bd=Pavilion&pf=cnnb
IE - HKU\S-1-5-21-2116707517-3129132125-347974426-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = about:Tabs [binary data]
IE - HKU\S-1-5-21-2116707517-3129132125-347974426-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://hp-notebook.de.msn.com/?pc=HICN&ar=3
IE - HKU\S-1-5-21-2116707517-3129132125-347974426-1000\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKU\S-1-5-21-2116707517-3129132125-347974426-1000\..\URLSearchHook: {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
IE - HKU\S-1-5-21-2116707517-3129132125-347974426-1000\..\SearchScopes,DefaultScope = {EA90534F-BBBC-4515-8951-8BD6060C0737}
IE - HKU\S-1-5-21-2116707517-3129132125-347974426-1000\..\SearchScopes\{2A1AD9D0-591B-4D34-941E-A94D9B0450E0}: "URL" = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=cb-hp06&type=ie2008
IE - HKU\S-1-5-21-2116707517-3129132125-347974426-1000\..\SearchScopes\{8B436489-8A83-4B8A-8B88-0F0DA1F31406}: "URL" = hxxp://de.kelkoopartners.net/ctl/do/search?siteSearchQuery={searchTerms}&fromform=true&x=true&y=true&partner=hp&partnerId=96913933
IE - HKU\S-1-5-21-2116707517-3129132125-347974426-1000\..\SearchScopes\{A7C871A0-0FD7-48AC-BA3C-87318A867B20}: "URL" = hxxp://websearch.ask.com/redirect?client=ie&tb=ORJ&o=&src=kw&q={searchTerms}&locale=&apn_ptnrs=&apn_dtid=OSJ000&apn_uid=3A9EB920-47B5-4982-AE4E-6B26E98992A5&apn_sauid=E3D82F8A-C253-4AFB-B0B8-0A300338AADA
IE - HKU\S-1-5-21-2116707517-3129132125-347974426-1000\..\SearchScopes\{EA90534F-BBBC-4515-8951-8BD6060C0737}: "URL" = hxxp://slirsredirect.search.aol.com/slirs_http/sredir?sredir=1145&query={searchTerms}&invocationType=tb50hpcnnbie7-de-de
IE - HKU\S-1-5-21-2116707517-3129132125-347974426-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
========== FireFox ==========
 
FF - prefs.js..browser.search.defaultengine: "Ask.com"
FF - prefs.js..browser.search.defaultenginename: "Ask.com"
FF - prefs.js..browser.search.order.1: "Ask.com"
FF - prefs.js..browser.search.selectedEngine: "Ask.com"
FF - prefs.js..browser.startup.homepage: "hxxp://www.google.de/"
FF - prefs.js..keyword.URL: "hxxp://websearch.ask.com/redirect?client=ff&src=kw&tb=ORJ&o=&locale=&apn_uid=3A9EB920-47B5-4982-AE4E-6B26E98992A5&apn_ptnrs=&apn_sauid=E3D82F8A-C253-4AFB-B0B8-0A300338AADA&apn_dtid=OSJ000&&q="
FF - prefs.js..network.proxy.type: 0
FF - user.js - File not found
 
FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_6_602_180.dll File not found
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_6_602_180.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.17.2: C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.17.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\otis@digitalpersona.com: C:\Program Files (x86)\DigitalPersona\Bin\FirefoxExt\ [2011.07.18 17:47:48 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 11.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012.04.05 18:09:10 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 11.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 11.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2012.04.05 18:19:39 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 11.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\otis@digitalpersona.com: C:\Program Files (x86)\DigitalPersona\Bin\firefoxext [2011.07.18 17:47:48 | 000,000,000 | ---D | M]
 
[2011.07.18 18:30:56 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Yvonne\AppData\Roaming\mozilla\Extensions
[2012.07.31 18:02:33 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Yvonne\AppData\Roaming\mozilla\Firefox\Profiles\g02mn3sg.default\extensions
[2012.07.30 12:34:53 | 000,002,299 | ---- | M] () -- C:\Users\Yvonne\AppData\Roaming\mozilla\firefox\profiles\g02mn3sg.default\searchplugins\askcom.xml
[2013.01.25 20:33:43 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions
[2012.04.05 18:09:09 | 000,097,208 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
[2012.04.05 18:08:57 | 000,001,392 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom-de.xml
[2012.04.05 18:08:57 | 000,002,252 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml
[2012.04.05 18:08:57 | 000,001,153 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-de.xml
[2012.04.05 18:08:57 | 000,006,805 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\leo_ende_de.xml
[2012.04.05 18:08:57 | 000,001,178 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-de.xml
[2012.04.05 18:08:56 | 000,001,105 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml
 
O1 HOSTS File: ([2006.09.18 23:37:24 | 000,000,761 | ---- | M]) - C:\Windows\SysNative\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1       localhost
O1 - Hosts: ::1             localhost
O2:64bit: - BHO: (DigitalPersona Personal Extension) - {395610AE-C624-4f58-B89E-23733EA00F9A} - C:\Programme\DigitalPersona\Bin\DpOtsPluginIe8.dll (DigitalPersona, Inc.)
O2 - BHO: (Skype add-on (mastermind)) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.)
O2 - BHO: (DigitalPersona Personal Extension) - {395610AE-C624-4f58-B89E-23733EA00F9A} - C:\Program Files (x86)\DigitalPersona\Bin\DpOtsPluginIe8.dll (DigitalPersona, Inc.)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - No CLSID value found.
O2 - BHO: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O3 - HKLM\..\Toolbar: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
O4:64bit: - HKLM..\Run: [SmartMenu] C:\Programme\Hewlett-Packard\HP MediaSmart\SmartMenu.exe (Hewlett-Packard)
O4:64bit: - HKLM..\Run: [SysTrayApp] C:\Programme\IDT\WDM\sttray64.exe (IDT, Inc.)
O4:64bit: - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - HKLM..\Run: []  File not found
O4 - HKLM..\Run: [ApnUpdater] C:\Program Files (x86)\Ask.com\Updater\Updater.exe (Ask)
O4 - HKLM..\Run: [avgnt] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
O4 - HKLM..\Run: [BrStsMon00] C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe (Brother Industries, Ltd.)
O4 - HKLM..\Run: [CLMLServer for HP TouchSmart] C:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe (CyberLink)
O4 - HKLM..\Run: [ControlCenter3] C:\Program Files (x86)\Brother\ControlCenter3\brctrcen.exe (Brother Industries, Ltd.)
O4 - HKLM..\Run: [DpAgent] C:\Program Files (x86)\DigitalPersona\Bin\dpagent.exe (DigitalPersona, Inc.)
O4 - HKLM..\Run: [DVDAgent] C:\Program Files (x86)\Hewlett-Packard\Media\DVD\DVDAgent.exe (CyberLink Corp.)
O4 - HKLM..\Run: [HP Health Check Scheduler] c:\Program Files (x86)\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe (Hewlett-Packard)
O4 - HKLM..\Run: [TSMAgent] C:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\TSMAgent.exe (CyberLink Corp.)
O4 - HKLM..\Run: [TVAgent] C:\Program Files (x86)\Hewlett-Packard\Media\TV\TVAgent.exe (CyberLink Corp.)
O4 - HKLM..\Run: [UCam_Menu] C:\Program Files (x86)\Hewlett-Packard\Media\Webcam\MUITransfer\MUIStartMenu.exe (CyberLink Corp.)
O4 - HKLM..\Run: [UpdateLBPShortCut] C:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe (CyberLink Corp.)
O4 - HKLM..\Run: [UpdateP2GoShortCut] C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe (CyberLink Corp.)
O4 - HKLM..\Run: [UpdatePDIRShortCut] C:\Program Files (x86)\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe (CyberLink Corp.)
O4 - HKLM..\Run: [UpdatePSTShortCut] C:\Program Files (x86)\CyberLink\DVD Suite\MUITransfer\MUIStartMenu.exe (CyberLink Corp.)
O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-19..\Run: [WindowsWelcomeCenter] C:\Windows\SysWow64\oobefldr.dll (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [WindowsWelcomeCenter] C:\Windows\SysWow64\oobefldr.dll (Microsoft Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O8:64bit: - Extra context menu item: Bild an &Bluetooth-Gerät senden... - C:\Programme\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm ()
O8:64bit: - Extra context menu item: Seite an &Bluetooth-Gerät senden... - C:\Programme\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O8 - Extra context menu item: Bild an &Bluetooth-Gerät senden... - C:\Programme\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm ()
O8 - Extra context menu item: Seite an &Bluetooth-Gerät senden... - C:\Programme\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9:64bit: - Extra Button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Programme\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9:64bit: - Extra 'Tools' menuitem : @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Programme\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra 'Tools' menuitem : Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files (x86)\Java\jre7\bin\jp2iexp.dll ()
O9 - Extra Button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.)
O9 - Extra Button: Senden an Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Programme\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra 'Tools' menuitem : Senden an &Bluetooth-Gerät... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Programme\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab (Reg Error: Value error.)
O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab (Java Plug-in 1.6.0_07)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab (Java Plug-in 10.17.2)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.160.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{054553BB-FAE4-4E3A-BB19-72744C69A538}: DhcpNameServer = 217.68.161.141 217.68.161.171
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{BFCF2C3B-084F-4542-8F56-F2A7EFAA75A1}: DhcpNameServer = 192.168.160.1
O18:64bit: - Protocol\Handler\livecall - No CLSID value found
O18:64bit: - Protocol\Handler\ms-itss - No CLSID value found
O18:64bit: - Protocol\Handler\msnim - No CLSID value found
O18:64bit: - Protocol\Handler\skype4com - No CLSID value found
O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\MSNMES~1\MSGRAP~1.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\MSNMES~1\MSGRAP~1.DLL (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
O18:64bit: - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation)
O18:64bit: - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation)
O18:64bit: - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - userinit.exe (Microsoft Corporation)
O20 - HKU\S-1-5-21-2116707517-3129132125-347974426-1000 Winlogon: Shell - (explorer.exe) - explorer.exe (Microsoft Corporation)
O20 - HKU\S-1-5-21-2116707517-3129132125-347974426-1000 Winlogon: Shell - (C:\Users\Yvonne\AppData\Roaming\skype.dat) - C:\Users\Yvonne\AppData\Roaming\skype.dat ()
O24 - Desktop WallPaper: C:\Windows\Web\Wallpaper\img2.jpg
O24 - Desktop BackupWallPaper: C:\Windows\Web\Wallpaper\img2.jpg
O29:64bit: - HKLM SecurityProviders - (credssp.dll) - credssp.dll (Microsoft Corporation)
O29 - HKLM SecurityProviders - (credssp.dll) - credssp.dll (Microsoft Corporation)
O31 - SafeBoot: UseAlternatShell - 1
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
 
========== Files/Folders - Created Within 30 Days ==========
 
[2013.04.17 10:57:50 | 000,096,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll
[2013.04.17 10:57:50 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll
[2013.04.17 10:57:48 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll
[2013.04.17 10:57:47 | 000,248,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll
[2013.04.17 10:57:47 | 000,173,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieUnatt.exe
[2013.04.17 10:57:47 | 000,142,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe
[2013.04.17 10:57:46 | 000,237,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\url.dll
[2013.04.17 10:57:46 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\url.dll
[2013.04.17 10:57:44 | 002,312,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll
[2013.04.17 10:57:44 | 001,494,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl
[2013.04.17 10:57:44 | 001,427,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl
[2013.04.17 10:57:43 | 000,729,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll
[2013.04.17 10:57:41 | 000,816,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll
[2013.04.17 10:57:41 | 000,717,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll
[2013.04.17 10:57:41 | 000,599,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vbscript.dll
[2013.04.15 11:58:29 | 004,691,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntoskrnl.exe
[2013.04.15 11:58:29 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\csrsrv.dll
[2013.04.15 11:58:29 | 000,075,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\smss.exe
[2013.04.15 11:58:21 | 000,451,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winsrv.dll
[2013.04.15 11:58:17 | 002,425,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mstscax.dll
[2013.04.15 11:58:17 | 002,067,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mstscax.dll
 
========== Files - Modified Within 30 Days ==========
 
[2013.05.07 14:09:19 | 001,445,310 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2013.05.07 14:09:19 | 000,627,756 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat
[2013.05.07 14:09:19 | 000,595,386 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2013.05.07 14:09:19 | 000,125,870 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat
[2013.05.07 14:09:19 | 000,103,460 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2013.05.07 14:03:58 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2013.05.07 14:02:20 | 000,000,012 | ---- | M] () -- C:\Windows\bthservsdp.dat
[2013.05.07 14:02:13 | 000,000,004 | ---- | M] () -- C:\Users\Yvonne\AppData\Roaming\skype.ini
[2013.05.07 14:00:27 | 000,003,216 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2013.05.07 14:00:27 | 000,003,216 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2013.05.03 08:44:22 | 000,337,712 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2013.04.17 11:20:04 | 000,000,884 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2013.04.09 10:33:39 | 000,017,882 | ---- | M] () -- C:\Users\Yvonne\Documents\Bücher.ods
 
========== Files Created - No Company Name ==========
 
[2013.05.03 09:00:25 | 000,000,004 | ---- | C] () -- C:\Users\Yvonne\AppData\Roaming\skype.ini
[2013.04.08 09:02:29 | 000,017,882 | ---- | C] () -- C:\Users\Yvonne\Documents\Bücher.ods
[2013.01.25 20:21:33 | 000,000,241 | ---- | C] () -- C:\Windows\Brpfx04a.ini
[2013.01.25 20:21:33 | 000,000,093 | ---- | C] () -- C:\Windows\brpcfx.ini
[2013.01.25 20:20:23 | 000,000,425 | ---- | C] () -- C:\Windows\BRWMARK.INI
[2013.01.25 20:17:23 | 000,000,000 | ---- | C] () -- C:\Windows\brdfxspd.dat
[2012.04.05 18:25:34 | 000,075,264 | ---- | C] () -- C:\Users\Yvonne\AppData\Roaming\skype.dat
[2011.11.10 09:41:05 | 000,004,608 | ---- | C] () -- C:\Users\Yvonne\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011.11.10 09:35:07 | 000,000,056 | -H-- | C] () -- C:\Windows\SysWow64\ezsidmv.dat
[2011.07.18 19:03:48 | 000,117,248 | ---- | C] () -- C:\Windows\SysWow64\EhStorAuthn.dll
[2011.07.18 19:02:12 | 000,107,612 | ---- | C] () -- C:\Windows\SysWow64\StructuredQuerySchema.bin
[2011.07.18 19:00:59 | 000,368,640 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll
[2010.02.20 19:58:57 | 000,031,966 | ---- | C] () -- C:\ProgramData\nvModes.001
[2010.02.20 19:04:48 | 000,031,966 | ---- | C] () -- C:\ProgramData\nvModes.dat
 
========== ZeroAccess Check ==========
 
[2006.11.02 17:30:40 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
 
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
 
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2012.06.08 19:59:03 | 012,899,840 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2012.06.08 19:47:00 | 011,586,048 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009.04.11 09:11:14 | 000,891,392 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2009.04.11 08:28:19 | 000,614,912 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2008.01.21 04:50:58 | 000,513,024 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

< End of report >
         

und hier die extra.txt

OTL Extras logfile created on: 07.05.2013 14:10:33 - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = g:\
64bit-Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
3,97 Gb Total Physical Memory | 3,44 Gb Available Physical Memory | 86,80% Memory free
8,11 Gb Paging File | 7,70 Gb Available in Paging File | 94,95% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 286,02 Gb Total Space | 199,74 Gb Free Space | 69,83% Space Free | Partition Type: NTFS
Drive D: | 298,09 Gb Total Space | 297,99 Gb Free Space | 99,97% Space Free | Partition Type: NTFS
Drive E: | 12,07 Gb Total Space | 1,93 Gb Free Space | 16,01% Space Free | Partition Type: NTFS
Drive G: | 7,45 Gb Total Space | 6,43 Gb Free Space | 86,21% Space Free | Partition Type: FAT32
 
Computer Name: YVONNE-PC | User Name: Yvonne | Logged in as Administrator.
Boot Mode: SafeMode | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
 
[HKEY_USERS\S-1-5-21-2116707517-3129132125-347974426-1000\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
 
========== Shell Spawning ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
========== Security Center Settings ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
"VistaSp1" = 9F 9E 16 8C DC 5B C8 01  [binary data]
"VistaSp2" = 4C D5 8C 58 CF 47 CC 01  [binary data]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"oobe_av" = 1
 
========== Firewall Settings ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
========== Authorized Applications List ==========
 
 
========== Vista Active Open Ports Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{3C37734A-8257-424D-9322-22DC9E74EC94}" = lport=2869 | protocol=6 | dir=in | app=system | 
"{43BCEB24-78E1-4546-90A6-51134BD8786B}" = lport=67 | protocol=17 | dir=in | svc=sharedaccess | app=%systemroot%\system32\svchost.exe | 
"{6A14EA60-784E-4089-AF44-41D312562E6D}" = rport=2869 | protocol=6 | dir=out | app=system | 
"{79D2B676-B311-454E-A259-B467B463A46E}" = lport=53 | protocol=17 | dir=in | svc=sharedaccess | app=%systemroot%\system32\svchost.exe | 
"{96ECFC3F-FFD8-40B4-8183-82EC368FB302}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=svchost.exe | 
"{AE212924-6005-4817-9F25-3120A0F4336F}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{BC33E1AE-BAE1-45E6-BDF6-D05F8CD14B7D}" = lport=68 | protocol=17 | dir=in | svc=sharedaccess | app=%systemroot%\system32\svchost.exe | 
"{C3656A8F-9F9B-4D1F-975C-36A83FEB46E0}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{D7EDC6E2-E489-4101-8009-A0E2D25DE0FE}" = lport=2869 | protocol=6 | dir=in | app=system | 
"{DAC2C618-64D5-4B36-B39D-10409CC0E901}" = lport=547 | protocol=17 | dir=in | svc=sharedaccess | app=%systemroot%\system32\svchost.exe | 
 
========== Vista Active Application Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0073F468-85D1-4D83-9AD2-80B18999298D}" = dir=in | app=c:\program files (x86)\hewlett-packard\touchsmart\media\hptouchsmartphoto.exe | 
"{086FD524-6C21-419E-9BD8-7956057E1AE5}" = dir=in | app=c:\program files (x86)\hewlett-packard\media\dvd\hptouchsmartvideo.exe | 
"{2240C62D-EE42-40E1-B9D5-23792F9DF675}" = dir=in | app=c:\program files (x86)\msn messenger\msnmsgr.exe | 
"{2FECA000-F532-47A2-B7ED-C3263FD2DF93}" = dir=in | app=c:\program files (x86)\hewlett-packard\media\tv\qpservice.exe | 
"{34879060-81A2-4846-A688-52786CFC51DE}" = dir=in | app=c:\program files (x86)\cyberlink\powerdirector\pdr.exe | 
"{4642D4EA-5A28-404A-B56C-FD3857AE4A85}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office12\onenote.exe | 
"{4BB5A05C-6060-44BF-ACC6-D6FB617983B5}" = dir=in | app=c:\program files (x86)\hewlett-packard\media\dvd\kernel\clml\clmlsvc.exe | 
"{51D30920-0DA9-4E25-A662-EF39E172113B}" = dir=in | app=c:\program files (x86)\msn messenger\livecall.exe | 
"{570161D4-AF59-44B0-B09C-ED7A806850CF}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe | 
"{623C848C-A48E-4CF0-9A01-704891361408}" = dir=out | svc=sharedaccess | app=%systemroot%\system32\svchost.exe | 
"{76E08F9F-E342-463F-9D1B-F4D7A72145DF}" = dir=in | app=c:\program files (x86)\hewlett-packard\media\dvd\hptouchsmartphoto.exe | 
"{793E2237-27C4-4180-A420-778B3CC70AE7}" = protocol=58 | dir=in | name=@hnetcfg.dll,-148 | 
"{7A1EB2F2-3648-4CE2-84A1-ECA4489DDDD2}" = dir=in | app=c:\program files (x86)\hewlett-packard\touchsmart\media\hptouchsmartmusic.exe | 
"{8329E12E-AB33-4C83-8DBB-2DD80308E2AB}" = dir=in | app=c:\program files (x86)\hewlett-packard\media\dvd\tsmagent.exe | 
"{9FCACF34-BBE2-43E2-9DD4-2E7A3899CFA2}" = dir=in | app=c:\program files (x86)\hewlett-packard\touchsmart\media\tsmagent.exe | 
"{A04CB8AC-56F5-4593-9631-378F2366C5AF}" = dir=in | app=c:\program files (x86)\hewlett-packard\media\tv\qp.exe | 
"{B19C84C5-7874-4839-B284-8F70F0DD5773}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | 
"{BEA66870-7E24-478E-90E1-6A6A5E208CD1}" = dir=in | app=c:\program files (x86)\hewlett-packard\media\dvd\hpdvdsmart.exe | 
"{CE71B556-EC0C-4BB5-8594-46FD79DEA903}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft office\office12\onenote.exe | 
"{E8E3CD8F-D979-451C-AF0E-3EDAADFD341B}" = dir=in | app=c:\program files (x86)\hewlett-packard\media\dvd\hptouchsmartmusic.exe | 
"{F685AD61-BDA1-4F60-BE49-92582F6E31D6}" = dir=in | app=c:\program files (x86)\hewlett-packard\touchsmart\media\hptouchsmartvideo.exe | 
"{F8D2220B-43FB-4400-8525-0C2CB0619820}" = dir=in | app=c:\program files (x86)\hewlett-packard\touchsmart\media\kernel\clml\clmlsvc.exe | 
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{03D1988F-469F-4843-8E6E-E5FE9D17889D}" = HP Integrated Module with Bluetooth wireless technology 6.0.1.6204
"{052FDD78-A6EA-3187-8386-C82F4CA3A929}" = Microsoft .NET Framework 3.5 Language Pack SP1 - deu
"{071c9b48-7c32-4621-a0ac-3f809523288f}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{0E3DAF3D-FF69-345A-A99E-1FED304CA083}" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"{191C1158-D287-4074-B749-D4CDD321E062}" = ProtectSmart Hard Drive Protection
"{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
"{4FFA2088-8317-3B14-93CD-4C699DB37843}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{F1568AA6-5982-4AFB-A871-C68E4328BC3B}" = HP MediaSmart SmartMenu
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"{F65B8208-5221-43D9-AA12-DDEA64EC4AF6}" = Validity Sensors software
"{F74D69E5-ECFD-45D1-A87A-341208ADD7CC}" = DigitalPersona Personal 4.11
"07B260955637F1FF7587ED2AA87459040DD09BF7" = Windows-Treiberpaket - ENE (enecir) HIDClass  (09/04/2008 2.6.0.0)
"Microsoft .NET Framework 3.5 Language Pack SP1 - deu" = Microsoft .NET Framework 3.5 Language Pack SP1 - DEU
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile DEU Language Pack" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"NVIDIA Drivers" = NVIDIA Drivers
"SynTPDeinstKey" = Synaptics Pointing Device Driver
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0054A0F6-00C9-4498-B821-B5C9578F433E}" = HP Help and Support
"{01FB4998-33C4-4431-85ED-079E3EEFE75D}" = HP MediaSmart Webcam
"{082702D5-5DD8-4600-BCE5-48B15174687F}" = HP Doc Viewer
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}" = CyberLink DVD Suite
"{254C37AA-6B72-4300-84F6-98A82419187E}" = ActiveCheck component for HP Active Support Library
"{26604C7E-A313-4D12-867F-7C6E7820BE4C}" = JMicron JMB38X Flash Media Controller Driver
"{26A24AE4-039D-4CA4-87B4-2F83217017FF}" = Java 7 Update 17
"{279DB581-239C-4E13-97F8-0F48E40BE75C}" = Windows Live Messenger
"{294C633F-6933-4F86-A305-BFDF9FCE9EFF}" = HP User Guides 0116
"{2EFA4E4C-7B5F-48F7-A1C0-1AA882B7A9C3}" = HP Update
"{3248F0A8-6813-11D6-A77B-00B0D0160070}" = Java(TM) 6 Update 7
"{34D2AB40-150D-475D-AE32-BD23FB5EE355}" = HP Quick Launch Buttons 6.40 H2
"{3877C901-7B90-4727-A639-B6ED2DD59D43}" = ESU for Microsoft Vista
"{39D0E034-1042-4905-BECB-5502909FCB7C}" = Microsoft Works
"{40BF1E83-20EB-11D8-97C5-0009C5020658}" = Power2Go
"{4286716B-1287-48E7-9078-3DC8248DBA96}" = OpenOffice.org 3.3
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{57A5AEC1-97FC-474D-92C4-908FCC2253D4}" = HP Customer Experience Enhancements
"{5C82DAE5-6EB0-4374-9254-BE3319BA4E82}" = Skype™ 3.8
"{669D4A35-146B-4314-89F1-1AC3D7B88367}" = HPAsset component for HP Active Support Library
"{67626E09-5366-4480-8F1E-93FADF50CA15}" = HP MediaSmart TV
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{86D4B82A-ABED-442A-BE86-96357B70F4FE}" = Ask Toolbar
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek 8169 8168 8101E 8102E Ethernet Driver
"{90120000-0020-0407-0000-0000000FF1CE}" = Compatibility Pack für 2007 Office System
"{95120000-00AF-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint Viewer 2007 (German)
"{95A747E0-DF19-46CB-A622-20A0107201BD}" = HP Total Care Setup
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9ADABDDE-9644-461B-9E73-83FA3EFCAB50}" = HP Wireless Assistant
"{AC76BA86-7AD7-1031-7B44-A90000000001}" = Adobe Reader 9 - Deutsch
"{B2EE25B9-5B00-4ACF-94F0-92433C28C39E}" = HP MediaSmart Music/Photo/Video
"{C59C179C-668D-49A9-B6EA-0121CCFC1243}" = LabelPrint
"{CB099890-1D5F-11D5-9EA9-0050BAE317E1}" = PowerDirector
"{CE7E3BE0-2DD3-4416-A690-F9E4A99A8CFF}" = HP Active Support Library
"{D36DD326-7280-11D8-97C8-000129760CBE}" = PhotoNow!
"{DCCAD079-F92C-44DA-B258-624FC6517A5A}" = HP MediaSmart DVD
"{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}" = IDT Audio
"{E8020EC7-5DD8-80C9-7237-7B2E9BDA8CC6}" = muvee Reveal
"{ECEE0279-785F-4CB3-9F28-E69813234BF8}" = SPORE Creature Creator Trial Edition
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219
"{FB83EAC4-E3F6-4666-B45B-44522F2344B6}" = Brother MFL-Pro Suite MFC-J220
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"AVerMedia A309 (MiniCard, DVB-T)" = AVerMedia A309 (MiniCard, DVB-T) 1.0.64.46
"Avira AntiVir Desktop" = Avira Free Antivirus
"InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}" = HP MediaSmart Webcam
"InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}" = CyberLink DVD Suite
"InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}" = Power2Go
"InstallShield_{67626E09-5366-4480-8F1E-93FADF50CA15}" = HP MediaSmart TV
"InstallShield_{B2EE25B9-5B00-4ACF-94F0-92433C28C39E}" = HP MediaSmart Music/Photo/Video
"InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}" = LabelPrint
"InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}" = PowerDirector
"InstallShield_{D36DD326-7280-11D8-97C8-000129760CBE}" = PhotoNow!
"InstallShield_{DCCAD079-F92C-44DA-B258-624FC6517A5A}" = HP MediaSmart DVD
"Mozilla Firefox 11.0 (x86 de)" = Mozilla Firefox 11.0 (x86 de)
"Mozilla Thunderbird 11.0.1 (x86 de)" = Mozilla Thunderbird 11.0.1 (x86 de)
"WildTangent hp Master Uninstall" = My HP Games
 
========== HKEY_USERS Uninstall List ==========
 
[HKEY_USERS\S-1-5-21-2116707517-3129132125-347974426-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{79A765E1-C399-405B-85AF-466F52E918B0}" = Ask Toolbar Updater
 
========== Last 20 Event Log Errors ==========
 
[ Application Events ]
Error - 17.04.2013 04:52:28 | Computer Name = Yvonne-PC | Source = WinMgmt | ID = 10
Description = 
 
Error - 17.04.2013 04:52:34 | Computer Name = Yvonne-PC | Source = Application Error | ID = 1000
Description = Fehlerhafte Anwendung TVAgent.exe, Version 2.1.1.1321, Zeitstempel
 0x49772d0a, fehlerhaftes Modul MFC71.DLL, Version 7.10.3077.0, Zeitstempel 0x3e77fdfd,
 Ausnahmecode 0xc0000005, Fehleroffset 0x0002a3a3,  Prozess-ID 0xcd8, Anwendungsstartzeit
 01ce3b48df2e6ceb.
 
Error - 03.05.2013 02:44:45 | Computer Name = Yvonne-PC | Source = WinMgmt | ID = 10
Description = 
 
Error - 03.05.2013 02:46:10 | Computer Name = Yvonne-PC | Source = Application Error | ID = 1000
Description = Fehlerhafte Anwendung TVAgent.exe, Version 2.1.1.1321, Zeitstempel
 0x49772d0a, fehlerhaftes Modul MFC71.DLL, Version 7.10.3077.0, Zeitstempel 0x3e77fdfd,
 Ausnahmecode 0xc0000005, Fehleroffset 0x0002a3a3,  Prozess-ID 0x4cc, Anwendungsstartzeit
 01ce47c9d2c43593.
 
Error - 03.05.2013 03:03:49 | Computer Name = Yvonne-PC | Source = Application Error | ID = 1000
Description = Fehlerhafte Anwendung Explorer.EXE, Version 6.0.6002.18005, Zeitstempel
 0x49e02a1e, fehlerhaftes Modul ole32.dll, Version 6.0.6002.18277, Zeitstempel 0x4c28da13,
 Ausnahmecode 0xc0000005, Fehleroffset 0x0000000000027513,  Prozess-ID 0x718, Anwendungsstartzeit
 01ce47cc518d9d0c.
 
Error - 03.05.2013 03:04:07 | Computer Name = Yvonne-PC | Source = WinMgmt | ID = 10
Description = 
 
Error - 03.05.2013 05:51:13 | Computer Name = Yvonne-PC | Source = WinMgmt | ID = 10
Description = 
 
Error - 06.05.2013 11:29:13 | Computer Name = Yvonne-PC | Source = WinMgmt | ID = 10
Description = 
 
Error - 06.05.2013 11:29:20 | Computer Name = Yvonne-PC | Source = Application Error | ID = 1000
Description = Fehlerhafte Anwendung TVAgent.exe, Version 2.1.1.1321, Zeitstempel
 0x49772d0a, fehlerhaftes Modul MFC71.DLL, Version 7.10.3077.0, Zeitstempel 0x3e77fdfd,
 Ausnahmecode 0xc0000005, Fehleroffset 0x0002a3a3,  Prozess-ID 0xce4, Anwendungsstartzeit
 01ce4a6e618085df.
 
Error - 06.05.2013 11:44:21 | Computer Name = Yvonne-PC | Source = WinMgmt | ID = 10
Description = 
 
[ Media Center Events ]
Error - 20.02.2010 13:45:05 | Computer Name = Yvonne-PC | Source = ehRecvr | ID = 3
Description = 
 
[ System Events ]
Error - 21.07.2011 15:39:48 | Computer Name = Yvonne-PC | Source = Service Control Manager | ID = 7000
Description = 
 
Error - 21.07.2011 15:39:48 | Computer Name = Yvonne-PC | Source = Service Control Manager | ID = 7026
Description = 
 
Error - 21.07.2011 18:16:48 | Computer Name = Yvonne-PC | Source = ipnathlp | ID = 31004
Description = 0 Bytes Speicher konnten durch den DNS-Proxy-Agenten nicht zugeordnet
 werden. Möglicherweise ist nicht genügend Speicher vorhanden oder ein interner 
Fehler ist im Speicher-Manager aufgetreten.
 
Error - 21.07.2011 18:16:51 | Computer Name = Yvonne-PC | Source = ipnathlp | ID = 31004
Description = 0 Bytes Speicher konnten durch den DNS-Proxy-Agenten nicht zugeordnet
 werden. Möglicherweise ist nicht genügend Speicher vorhanden oder ein interner 
Fehler ist im Speicher-Manager aufgetreten.
 
Error - 10.11.2011 03:35:32 | Computer Name = Yvonne-PC | Source = Service Control Manager | ID = 7000
Description = 
 
Error - 10.11.2011 03:35:32 | Computer Name = Yvonne-PC | Source = Service Control Manager | ID = 7026
Description = 
 
Error - 10.11.2011 03:36:45 | Computer Name = Yvonne-PC | Source = Service Control Manager | ID = 7009
Description = 
 
Error - 05.04.2012 11:55:27 | Computer Name = Yvonne-PC | Source = Service Control Manager | ID = 7000
Description = 
 
Error - 05.04.2012 11:55:27 | Computer Name = Yvonne-PC | Source = Service Control Manager | ID = 7026
Description = 
 
Error - 05.04.2012 11:59:20 | Computer Name = Yvonne-PC | Source = ipnathlp | ID = 31004
Description = 0 Bytes Speicher konnten durch den DNS-Proxy-Agenten nicht zugeordnet
 werden. Möglicherweise ist nicht genügend Speicher vorhanden oder ein interner 
Fehler ist im Speicher-Manager aufgetreten.
 
 
< End of report >
         

ich würde mich freuen wenn mir jemand sagen könnte wie ich weiter vorgehen soll.

Danke schon mal im vorraus.

Hi,


otl fix

Fixen mit OTL

• Starte bitte die OTL.exe.
• Kopiere nun den Inhalt aus der Codebox in die Textbox.

:OTL
O20 - HKU\S-1-5-21-2116707517-3129132125-347974426-1000 Winlogon: Shell - (C:\Users\Yvonne\AppData\Roaming\skype.dat) - C:\Users\Yvonne\AppData\Roaming\skype.dat
()
[2013.05.07 14:02:13 | 000,000,004 | ---- | M] () -- C:\Users\Yvonne\AppData\Roaming\skype.ini

:files
C:\Users\Yvonne\AppData\Roaming\skype.dat
:Commands
[emptytemp]
         

• Solltest du deinen Benutzernamen z. B. durch "*****" unkenntlich gemacht haben, so füge an entsprechender Stelle deinen richtigen Benutzernamen ein. Andernfalls wird der Fix nicht funktionieren.
• Schließe bitte nun alle Programme.
• Klicke nun bitte auf den Fix Button.
• OTL kann gegebenfalls einen Neustart verlangen. Bitte dies zulassen.
• Nach dem Neustart findest Du ein Textdokument auf deinem Desktop.
  ( Auch zu finden unter C:\_OTL\MovedFiles\<Uhrzeit_Datum>.txt)
  Kopiere nun den Inhalt hier in Deinen Thread

Hinweis: Die Datei bitte wie in der Anleitung zum UpChannel angegeben auch da hochladen. Bitte NICHT die ZIP-Datei hier als Anhang
in den Thread posten!



Drücke bitte die + E Taste.

• Öffne dein Systemlaufwerk ( meistens C: )
• Suche nun
  folgenden Ordner: _OTL und öffne diesen.
• Mache einen Rechtsklick auf den Ordner Movedfiles --> Senden an --> Zip-Komprimierter Ordner
• 
  Dies wird eine Movedfiles.zip Datei in _OTL erstellen
• Lade diese bitte in unseren Uploadchannel
  hoch. ( Durchsuchen --> C:\_OTL\Movedfiles.zip )

Teile mir mit ob der Upload problemlos geklappt hat. Danke im voraus

Hallo markusg,

konnte die zip ohne schwierigkeiten hochladen.

Was kommt als nächstes?

Hi,
teste, ob der normale Modus läuft.
Wenn dem so ist:
Downloade dir bitte TDSSKiller.exe und speichere diese Datei auf dem Desktop

• Starte die TDSSKiller.exe - Einstellen wie in der Anleitung zu TDSSKiller beschrieben.
• Drücke Start Scan
  
• Sollten infizierte Objekte gefunden werden, wähle keinesfalls Cure. Wähle Skip und klicke auf Continue.
  TDSSKiller wird eine Logfile auf deinem Systemlaufwerk speichern (Meistens C:\)
  Als Beispiel: C:\TDSSKiller.<Version_Datum_Uhrzeit>log.txt

Poste den Inhalt bitte in jedem Fall hier in deinen Thread.

Hallo hier der log vom TDSSKiller

15:42:02.0338 4364  TDSS rootkit removing tool 2.8.16.0 Feb 11 2013 18:50:42
15:42:02.0572 4364  ============================================================
15:42:02.0572 4364  Current date / time: 2013/05/07 15:42:02.0572
15:42:02.0572 4364  SystemInfo:
15:42:02.0572 4364  
15:42:02.0572 4364  OS Version: 6.0.6002 ServicePack: 2.0
15:42:02.0572 4364  Product type: Workstation
15:42:02.0572 4364  ComputerName: YVONNE-PC
15:42:02.0572 4364  UserName: Yvonne
15:42:02.0572 4364  Windows directory: C:\Windows
15:42:02.0572 4364  System windows directory: C:\Windows
15:42:02.0572 4364  Running under WOW64
15:42:02.0572 4364  Processor architecture: Intel x64
15:42:02.0572 4364  Number of processors: 4
15:42:02.0572 4364  Page size: 0x1000
15:42:02.0572 4364  Boot type: Normal boot
15:42:02.0572 4364  ============================================================
15:42:03.0789 4364  Drive \Device\Harddisk1\DR1 - Size: 0x4A85D56000 (298.09 Gb), SectorSize: 0x200, Cylinders: 0x9801, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
15:42:03.0789 4364  Drive \Device\Harddisk0\DR0 - Size: 0x4A85D56000 (298.09 Gb), SectorSize: 0x200, Cylinders: 0x9801, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
15:42:03.0804 4364  Drive \Device\Harddisk2\DR2 - Size: 0x1DE000000 (7.47 Gb), SectorSize: 0x200, Cylinders: 0x3CE, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W'
15:42:03.0804 4364  ============================================================
15:42:03.0804 4364  \Device\Harddisk1\DR1:
15:42:03.0804 4364  MBR partitions:
15:42:03.0804 4364  \Device\Harddisk1\DR1\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x23C0A800
15:42:03.0804 4364  \Device\Harddisk1\DR1\Partition2: MBR, Type 0x7, StartLBA 0x23C0B000, BlocksNum 0x1822000
15:42:03.0804 4364  \Device\Harddisk0\DR0:
15:42:03.0804 4364  MBR partitions:
15:42:03.0804 4364  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x2542D800
15:42:03.0804 4364  \Device\Harddisk2\DR2:
15:42:03.0820 4364  MBR partitions:
15:42:03.0820 4364  \Device\Harddisk2\DR2\Partition1: MBR, Type 0xB, StartLBA 0x30, BlocksNum 0xEEFFCF
15:42:03.0820 4364  ============================================================
15:42:03.0867 4364  C: <-> \Device\Harddisk1\DR1\Partition1
15:42:04.0225 4364  D: <-> \Device\Harddisk0\DR0\Partition1
15:42:04.0459 4364  E: <-> \Device\Harddisk1\DR1\Partition2
15:42:04.0459 4364  ============================================================
15:42:04.0459 4364  Initialize success
15:42:04.0459 4364  ============================================================
15:43:38.0592 4680  ============================================================
15:43:38.0592 4680  Scan started
15:43:38.0592 4680  Mode: Manual; SigCheck; TDLFS; 
15:43:38.0592 4680  ============================================================
15:43:39.0526 4680  ================ Scan system memory ========================
15:43:39.0526 4680  System memory - ok
15:43:39.0528 4680  ================ Scan services =============================
15:43:39.0805 4680  [ 5C368F4B04ED2A923E6AFCA2D37BAFF5 ] Accelerometer   C:\Windows\system32\DRIVERS\Accelerometer.sys
15:43:39.0955 4680  Accelerometer - ok
15:43:40.0002 4680  [ 1965AAFFAB07E3FB03C77F81BEBA3547 ] ACPI            C:\Windows\system32\drivers\acpi.sys
15:43:40.0033 4680  ACPI - ok
15:43:40.0251 4680  [ EA856F4A46320389D1899B2CAA7BF40F ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
15:43:40.0298 4680  AdobeFlashPlayerUpdateSvc - ok
15:43:40.0345 4680  [ F14215E37CF124104575073F782111D2 ] adp94xx         C:\Windows\system32\drivers\adp94xx.sys
15:43:40.0439 4680  adp94xx - ok
15:43:40.0454 4680  [ 7D05A75E3066861A6610F7EE04FF085C ] adpahci         C:\Windows\system32\drivers\adpahci.sys
15:43:40.0485 4680  adpahci - ok
15:43:40.0501 4680  [ 820A201FE08A0C345B3BEDBC30E1A77C ] adpu160m        C:\Windows\system32\drivers\adpu160m.sys
15:43:40.0532 4680  adpu160m - ok
15:43:40.0532 4680  [ 9B4AB6854559DC168FBB4C24FC52E794 ] adpu320         C:\Windows\system32\drivers\adpu320.sys
15:43:40.0563 4680  adpu320 - ok
15:43:40.0595 4680  [ 0F421175574BFE0BF2F4D8E910A253BB ] AeLookupSvc     C:\Windows\System32\aelupsvc.dll
15:43:40.0735 4680  AeLookupSvc - ok
15:43:41.0109 4680  [ A6FB9DB8F1A86861D955FD6975977AE0 ] AESTFilters     C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_6ef279c8\AESTSr64.exe
15:43:41.0203 4680  AESTFilters - ok
15:43:41.0265 4680  [ C4F6CE6087760AD70960C9EB130E7943 ] AFD             C:\Windows\system32\drivers\afd.sys
15:43:41.0359 4680  AFD - ok
15:43:41.0406 4680  [ F6F6793B7F17B550ECFDBD3B229173F7 ] agp440          C:\Windows\system32\drivers\agp440.sys
15:43:41.0421 4680  agp440 - ok
15:43:41.0453 4680  [ 222CB641B4B8A1D1126F8033F9FD6A00 ] aic78xx         C:\Windows\system32\drivers\djsvs.sys
15:43:41.0484 4680  aic78xx - ok
15:43:41.0515 4680  [ 5922F4F59B7868F3D74BBBBEB7B825A3 ] ALG             C:\Windows\System32\alg.exe
15:43:41.0687 4680  ALG - ok
15:43:41.0702 4680  [ E0CA5BB8E6C79533DC6B1DA7361A201E ] aliide          C:\Windows\system32\drivers\aliide.sys
15:43:41.0733 4680  aliide - ok
15:43:41.0733 4680  [ 7034F8D1B9703D711D3F92C95DEB377D ] amdide          C:\Windows\system32\drivers\amdide.sys
15:43:41.0765 4680  amdide - ok
15:43:41.0796 4680  [ CDC3632A3A5EA4DBB83E46076A3165A1 ] AmdK8           C:\Windows\system32\drivers\amdk8.sys
15:43:41.0843 4680  AmdK8 - ok
15:43:41.0967 4680  [ 466A0D95960DAD3222C896D2CEA99993 ] AntiVirSchedulerService C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
15:43:41.0983 4680  AntiVirSchedulerService - ok
15:43:42.0014 4680  [ A489BE6BB0AA1FF406B488B60542314B ] AntiVirService  C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
15:43:42.0030 4680  AntiVirService - ok
15:43:42.0045 4680  [ 9C37B3FD5615477CB9A0CD116CF43F5C ] Appinfo         C:\Windows\System32\appinfo.dll
15:43:42.0139 4680  Appinfo - ok
15:43:42.0155 4680  [ BA8417D4765F3988FF921F30F630E303 ] arc             C:\Windows\system32\drivers\arc.sys
15:43:42.0186 4680  arc - ok
15:43:42.0201 4680  [ 9D41C435619733B34CC16A511E644B11 ] arcsas          C:\Windows\system32\drivers\arcsas.sys
15:43:42.0217 4680  arcsas - ok
15:43:42.0248 4680  [ 22D13FF3DAFEC2A80634752B1EAA2DE6 ] AsyncMac        C:\Windows\system32\DRIVERS\asyncmac.sys
15:43:42.0311 4680  AsyncMac - ok
15:43:42.0326 4680  [ E68D9B3A3905619732F7FE039466A623 ] atapi           C:\Windows\system32\drivers\atapi.sys
15:43:42.0357 4680  atapi - ok
15:43:42.0404 4680  [ 79318C744693EC983D20E9337A2F8196 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
15:43:42.0467 4680  AudioEndpointBuilder - ok
15:43:42.0482 4680  [ 79318C744693EC983D20E9337A2F8196 ] AudioSrv        C:\Windows\System32\Audiosrv.dll
15:43:42.0529 4680  AudioSrv - ok
15:43:42.0560 4680  [ DFEC23C325AD5E4E66365F8C44FAD7BA ] AVerAF15        C:\Windows\system32\Drivers\AVerAF15.sys
15:43:42.0607 4680  AVerAF15 - ok
15:43:42.0623 4680  [ 26E38B5A58C6C55FAFBC563EEDDB0867 ] avgntflt        C:\Windows\system32\DRIVERS\avgntflt.sys
15:43:42.0638 4680  avgntflt - ok
15:43:42.0685 4680  [ 9D1F00BEFF84CBBF46D7F052BC7E0565 ] avipbb          C:\Windows\system32\DRIVERS\avipbb.sys
15:43:42.0701 4680  avipbb - ok
15:43:42.0716 4680  [ 248DB59FC86DE44D2779F4C7FB1A567D ] avkmgr          C:\Windows\system32\DRIVERS\avkmgr.sys
15:43:42.0732 4680  avkmgr - ok
15:43:42.0794 4680  [ FFB96C2589FFA60473EAD78B39FBDE29 ] BFE             C:\Windows\System32\bfe.dll
15:43:42.0919 4680  BFE - ok
15:43:43.0028 4680  [ 6D316F4859634071CC25C4FD4589AD2C ] BITS            C:\Windows\System32\qmgr.dll
15:43:43.0231 4680  BITS - ok
15:43:43.0247 4680  [ 79FEEB40056683F8F61398D81DDA65D2 ] blbdrive        C:\Windows\system32\drivers\blbdrive.sys
15:43:43.0293 4680  blbdrive - ok
15:43:43.0325 4680  [ 2348447A80920B2493A9B582A23E81E1 ] bowser          C:\Windows\system32\DRIVERS\bowser.sys
15:43:43.0356 4680  bowser - ok
15:43:43.0387 4680  [ F09EEE9EDC320B5E1501F749FDE686C8 ] BrFiltLo        C:\Windows\system32\drivers\brfiltlo.sys
15:43:43.0418 4680  BrFiltLo - ok
15:43:43.0418 4680  [ B114D3098E9BDB8BEA8B053685831BE6 ] BrFiltUp        C:\Windows\system32\drivers\brfiltup.sys
15:43:43.0465 4680  BrFiltUp - ok
15:43:43.0496 4680  [ A1B39DE453433B115B4EA69EE0343816 ] Browser         C:\Windows\System32\browser.dll
15:43:43.0559 4680  Browser - ok
15:43:43.0605 4680  [ F0F0BA4D815BE446AA6A4583CA3BCA9B ] Brserid         C:\Windows\system32\drivers\brserid.sys
15:43:43.0808 4680  Brserid - ok
15:43:43.0839 4680  [ A6ECA2151B08A09CACECA35C07F05B42 ] BrSerWdm        C:\Windows\system32\drivers\brserwdm.sys
15:43:43.0933 4680  BrSerWdm - ok
15:43:43.0964 4680  [ B79968002C277E869CF38BD22CD61524 ] BrUsbMdm        C:\Windows\system32\drivers\brusbmdm.sys
15:43:44.0058 4680  BrUsbMdm - ok
15:43:44.0073 4680  [ A87528880231C54E75EA7A44943B38BF ] BrUsbSer        C:\Windows\system32\drivers\brusbser.sys
15:43:44.0136 4680  BrUsbSer - ok
15:43:44.0183 4680  [ EA7E57F87D6FEE5FD6C5F813C04E8CD2 ] BrYNSvc         C:\Program Files (x86)\Browny02\BrYNSvc.exe
15:43:44.0198 4680  BrYNSvc ( UnsignedFile.Multi.Generic ) - warning
15:43:44.0198 4680  BrYNSvc - detected UnsignedFile.Multi.Generic (1)
15:43:44.0261 4680  [ 09F926A0D9C0BAFD8417A4307D2ED13C ] BthEnum         C:\Windows\system32\DRIVERS\BthEnum.sys
15:43:44.0292 4680  BthEnum - ok
15:43:44.0323 4680  [ E0777B34E05F8A82A21856EFC900C29F ] BTHMODEM        C:\Windows\system32\drivers\bthmodem.sys
15:43:44.0385 4680  BTHMODEM - ok
15:43:44.0417 4680  [ BEFC5311736B475AC5B60C14FF7C775A ] BthPan          C:\Windows\system32\DRIVERS\bthpan.sys
15:43:44.0463 4680  BthPan - ok
15:43:44.0526 4680  [ E1466882252FF51EDDE48C3F7EDA2591 ] BTHPORT         C:\Windows\system32\Drivers\BTHport.sys
15:43:44.0573 4680  BTHPORT - ok
15:43:44.0604 4680  [ 22E65FFD640F16968F855F5B3528D366 ] BthServ         C:\Windows\System32\bthserv.dll
15:43:44.0635 4680  BthServ - ok
15:43:44.0651 4680  [ 970192CDED77A128E7E30722E5EE6B9C ] BTHUSB          C:\Windows\system32\Drivers\BTHUSB.sys
15:43:44.0682 4680  BTHUSB - ok
15:43:44.0744 4680  [ 0C5D9C8B412BE72C4535EC67A24C01DB ] btwaudio        C:\Windows\system32\drivers\btwaudio.sys
15:43:44.0760 4680  btwaudio - ok
15:43:44.0775 4680  [ DF18E4291C43BED05B1D0C2D5C0E96D6 ] btwavdt         C:\Windows\system32\drivers\btwavdt.sys
15:43:44.0791 4680  btwavdt - ok
15:43:44.0900 4680  [ D724316F5AA1AB1870E57F0BFC017F64 ] btwdins         C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
15:43:44.0947 4680  btwdins - ok
15:43:44.0978 4680  [ 637A44C54520A9958E2E5E3EE9E26C4A ] btwrchid        C:\Windows\system32\DRIVERS\btwrchid.sys
15:43:44.0994 4680  btwrchid - ok
15:43:44.0994 4680  [ B4D787DB8D30793A4D4DF9FEED18F136 ] cdfs            C:\Windows\system32\DRIVERS\cdfs.sys
15:43:45.0072 4680  cdfs - ok
15:43:45.0103 4680  [ C025AA69BE3D0D25C7A2E746EF6F94FC ] cdrom           C:\Windows\system32\DRIVERS\cdrom.sys
15:43:45.0165 4680  cdrom - ok
15:43:45.0197 4680  [ 5A268127633C7EE2A7FB87F39D748D56 ] CertPropSvc     C:\Windows\System32\certprop.dll
15:43:45.0259 4680  CertPropSvc - ok
15:43:45.0290 4680  [ 02EA568D498BBDD4BA55BF3FCE34D456 ] circlass        C:\Windows\system32\DRIVERS\circlass.sys
15:43:45.0368 4680  circlass - ok
15:43:45.0415 4680  [ 3DCA9A18B204939CFB24BEA53E31EB48 ] CLFS            C:\Windows\system32\CLFS.sys
15:43:45.0462 4680  CLFS - ok
15:43:45.0540 4680  [ 8EE772032E2FE80A924F3B8DD5082194 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
15:43:45.0555 4680  clr_optimization_v2.0.50727_32 - ok
15:43:45.0587 4680  [ CE07A466201096F021CD09D631B21540 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
15:43:45.0602 4680  clr_optimization_v2.0.50727_64 - ok
15:43:45.0665 4680  [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
15:43:45.0696 4680  clr_optimization_v4.0.30319_32 - ok
15:43:45.0727 4680  [ C6F9AF94DCD58122A4D7E89DB6BED29D ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
15:43:45.0758 4680  clr_optimization_v4.0.30319_64 - ok
15:43:45.0774 4680  [ B52D9A14CE4101577900A364BA86F3DF ] CmBatt          C:\Windows\system32\DRIVERS\CmBatt.sys
15:43:45.0836 4680  CmBatt - ok
15:43:45.0852 4680  [ 8C6AA24C1D7273A02284588426AB8CE3 ] cmdide          C:\Windows\system32\drivers\cmdide.sys
15:43:45.0867 4680  cmdide - ok
15:43:45.0945 4680  [ 7795F8CEBC284A426B53F541E538695F ] Com4QLBEx       C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe
15:43:45.0961 4680  Com4QLBEx - ok
15:43:45.0977 4680  [ 7FB8AD01DB0EABE60C8A861531A8F431 ] Compbatt        C:\Windows\system32\DRIVERS\compbatt.sys
15:43:45.0992 4680  Compbatt - ok
15:43:46.0008 4680  COMSysApp - ok
15:43:46.0023 4680  [ A8585B6412253803CE8EFCBD6D6DC15C ] crcdisk         C:\Windows\system32\drivers\crcdisk.sys
15:43:46.0039 4680  crcdisk - ok
15:43:46.0086 4680  [ CA78B312C44E4D52E842C2C8BD48E452 ] CryptSvc        C:\Windows\system32\cryptsvc.dll
15:43:46.0133 4680  CryptSvc - ok
15:43:46.0211 4680  [ CF8B9A3A5E7DC57724A89D0C3E8CF9EF ] DcomLaunch      C:\Windows\system32\rpcss.dll
15:43:46.0273 4680  DcomLaunch - ok
15:43:46.0320 4680  [ 8B722BA35205C71E7951CDC4CDBADE19 ] DfsC            C:\Windows\system32\Drivers\dfsc.sys
15:43:46.0367 4680  DfsC - ok
15:43:46.0819 4680  [ C647F468F7DE343DF8C143655C5557D4 ] DFSR            C:\Windows\system32\DFSR.exe
15:43:47.0583 4680  DFSR - ok
15:43:47.0630 4680  [ 3ED0321127CE70ACDAABBF77E157C2A7 ] Dhcp            C:\Windows\System32\dhcpcsvc.dll
15:43:47.0677 4680  Dhcp - ok
15:43:47.0724 4680  [ B0107E40ECDB5FA692EBF832F295D905 ] disk            C:\Windows\system32\drivers\disk.sys
15:43:47.0739 4680  disk - ok
15:43:47.0849 4680  [ 06230F1B721494A6DF8D47FD395BB1B0 ] Dnscache        C:\Windows\System32\dnsrslvr.dll
15:43:47.0895 4680  Dnscache - ok
15:43:47.0942 4680  [ 1A7156DD1E850E9914E5E991E3225B94 ] dot3svc         C:\Windows\System32\dot3svc.dll
15:43:48.0005 4680  dot3svc - ok
15:43:48.0098 4680  [ 5BC1D876DFD53C31C5FC65D2E9614015 ] DpHost          C:\Program Files (x86)\DigitalPersona\Bin\DpHostW.exe
15:43:48.0129 4680  DpHost ( UnsignedFile.Multi.Generic ) - warning
15:43:48.0129 4680  DpHost - detected UnsignedFile.Multi.Generic (1)
15:43:48.0176 4680  [ 1583B39790DB3EAEC7EDB0CB0140C708 ] DPS             C:\Windows\system32\dps.dll
15:43:48.0254 4680  DPS - ok
15:43:48.0285 4680  [ F1A78A98CFC2EE02144C6BEC945447E6 ] drmkaud         C:\Windows\system32\drivers\drmkaud.sys
15:43:48.0332 4680  drmkaud - ok
15:43:48.0426 4680  [ B8E554E502D5123BC111F99D6A2181B4 ] DXGKrnl         C:\Windows\System32\drivers\dxgkrnl.sys
15:43:48.0519 4680  DXGKrnl - ok
15:43:48.0566 4680  [ 264CEE7B031A9D6C827F3D0CB031F2FE ] E1G60           C:\Windows\system32\DRIVERS\E1G6032E.sys
15:43:48.0613 4680  E1G60 - ok
15:43:48.0644 4680  [ C2303883FD9BE49DC36A6400643002EA ] EapHost         C:\Windows\System32\eapsvc.dll
15:43:48.0707 4680  EapHost - ok
15:43:48.0738 4680  [ 5F94962BE5A62DB6E447FF6470C4F48A ] Ecache          C:\Windows\system32\drivers\ecache.sys
15:43:48.0753 4680  Ecache - ok
15:43:48.0847 4680  [ 14CE384D2E27B64C256BDA4DC39C312D ] ehRecvr         C:\Windows\ehome\ehRecvr.exe
15:43:48.0956 4680  ehRecvr - ok
15:43:48.0972 4680  [ B93159C1313D66FDFBBE876F5189CD52 ] ehSched         C:\Windows\ehome\ehsched.exe
15:43:49.0003 4680  ehSched - ok
15:43:49.0034 4680  [ F5EE2527D74449868E3C3227A59BCD28 ] ehstart         C:\Windows\ehome\ehstart.dll
15:43:49.0065 4680  ehstart - ok
15:43:49.0112 4680  [ C4636D6E10469404AB5308D9FD45ED07 ] elxstor         C:\Windows\system32\drivers\elxstor.sys
15:43:49.0143 4680  elxstor - ok
15:43:49.0175 4680  [ A9B18B63A4FD6BAAB83326706D857FAB ] EMDMgmt         C:\Windows\system32\emdmgmt.dll
15:43:49.0237 4680  EMDMgmt - ok
15:43:49.0284 4680  [ F218A3A27ED6592C0E22EC3595554447 ] enecir          C:\Windows\system32\DRIVERS\enecir.sys
15:43:49.0346 4680  enecir - ok
15:43:49.0393 4680  [ BC3A58E938BB277E46BF4B3003B01ABD ] ErrDev          C:\Windows\system32\drivers\errdev.sys
15:43:49.0487 4680  ErrDev - ok
15:43:49.0565 4680  [ E12F22B73F153DECE721CD45EC05B4AF ] EventSystem     C:\Windows\system32\es.dll
15:43:49.0643 4680  EventSystem - ok
15:43:49.0674 4680  [ 486844F47B6636044A42454614ED4523 ] exfat           C:\Windows\system32\drivers\exfat.sys
15:43:49.0736 4680  exfat - ok
15:43:49.0736 4680  ezSharedSvc - ok
15:43:49.0830 4680  [ 1A4BEE34277784619DDAF0422C0C6E23 ] fastfat         C:\Windows\system32\drivers\fastfat.sys
15:43:49.0923 4680  fastfat - ok
15:43:49.0970 4680  [ 81B79B6DF71FA1D2C6D688D830616E39 ] fdc             C:\Windows\system32\DRIVERS\fdc.sys
15:43:50.0033 4680  fdc - ok
15:43:50.0064 4680  [ BB9267ACACD8B7533DD936C34A0CBA5E ] fdPHost         C:\Windows\system32\fdPHost.dll
15:43:50.0142 4680  fdPHost - ok
15:43:50.0157 4680  [ 300C80931EABBE1DB7591C516EFE8D0F ] FDResPub        C:\Windows\system32\fdrespub.dll
15:43:50.0267 4680  FDResPub - ok
15:43:50.0313 4680  [ 457B7D1D533E4BD62A99AED9C7BB4C59 ] FileInfo        C:\Windows\system32\drivers\fileinfo.sys
15:43:50.0345 4680  FileInfo - ok
15:43:50.0391 4680  [ D421327FD6EFCCAF884A54C58E1B0D7F ] Filetrace       C:\Windows\system32\drivers\filetrace.sys
15:43:50.0438 4680  Filetrace - ok
15:43:50.0469 4680  [ 230923EA2B80F79B0F88D90F87B87EBD ] flpydisk        C:\Windows\system32\DRIVERS\flpydisk.sys
15:43:50.0579 4680  flpydisk - ok
15:43:50.0641 4680  [ E3041BC26D6930D61F42AEDB79C91720 ] FltMgr          C:\Windows\system32\drivers\fltmgr.sys
15:43:50.0703 4680  FltMgr - ok
15:43:50.0781 4680  [ BE1C5BD1CA7ED015BC6FA1AE67E592C8 ] FontCache       C:\Windows\system32\FntCache.dll
15:43:50.0922 4680  FontCache - ok
15:43:50.0984 4680  [ BC5B0BE5AF3510B0FD8C140EE42C6D3E ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
15:43:51.0000 4680  FontCache3.0.0.0 - ok
15:43:51.0078 4680  [ 5779B86CD8B32519FBECB136394D946A ] Fs_Rec          C:\Windows\system32\drivers\Fs_Rec.sys
15:43:51.0125 4680  Fs_Rec - ok
15:43:51.0156 4680  [ C8E416668D3DC2BE3D4FE4C79224997F ] gagp30kx        C:\Windows\system32\drivers\gagp30kx.sys
15:43:51.0171 4680  gagp30kx - ok
15:43:51.0203 4680  [ 617DC2877015270914CA3C03873560D5 ] GameConsoleService C:\Program Files (x86)\HP Games\My HP Game Console\GameConsoleService.exe
15:43:51.0218 4680  GameConsoleService - ok
15:43:51.0265 4680  [ A0E1B575BA8F504968CD40C0FAEB2384 ] gpsvc           C:\Windows\System32\gpsvc.dll
15:43:51.0327 4680  gpsvc - ok
15:43:51.0374 4680  [ DF45F8142DC6DF9D18C39B3EFFBD0409 ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
15:43:51.0483 4680  HdAudAddService - ok
15:43:51.0593 4680  [ F942C5820205F2FB453243EDFEC82A3D ] HDAudBus        C:\Windows\system32\DRIVERS\HDAudBus.sys
15:43:51.0671 4680  HDAudBus - ok
15:43:51.0686 4680  [ B4881C84A180E75B8C25DC1D726C375F ] HidBth          C:\Windows\system32\drivers\hidbth.sys
15:43:51.0764 4680  HidBth - ok
15:43:51.0795 4680  [ 5F47839455D01FF6403B008D481A6F5B ] HidIr           C:\Windows\system32\DRIVERS\hidir.sys
15:43:51.0827 4680  HidIr - ok
15:43:51.0889 4680  [ 59361D38A297755D46A540E450202B2A ] hidserv         C:\Windows\system32\hidserv.dll
15:43:51.0920 4680  hidserv - ok
15:43:51.0951 4680  [ 443BDD2D30BB4F00795C797E2CF99EDF ] HidUsb          C:\Windows\system32\DRIVERS\hidusb.sys
15:43:51.0998 4680  HidUsb - ok
15:43:52.0045 4680  [ B12F367EA39C0795FD57E31242CE1A5A ] hkmsvc          C:\Windows\system32\kmsvc.dll
15:43:52.0139 4680  hkmsvc - ok
15:43:52.0263 4680  [ A19B0BB5A7EB6DF2DD4A0711D36955EE ] HP Health Check Service c:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe
15:43:52.0279 4680  HP Health Check Service ( UnsignedFile.Multi.Generic ) - warning
15:43:52.0279 4680  HP Health Check Service - detected UnsignedFile.Multi.Generic (1)
15:43:52.0326 4680  [ D7109A1E6BD2DFDBCBA72A6BC626A13B ] HpCISSs         C:\Windows\system32\drivers\hpcisss.sys
15:43:52.0341 4680  HpCISSs - ok
15:43:52.0357 4680  [ 4E0BEC0F78096FFD6D3314B497FC49D3 ] hpdskflt        C:\Windows\system32\DRIVERS\hpdskflt.sys
15:43:52.0373 4680  hpdskflt - ok
15:43:52.0404 4680  [ 0ECC54FD34D6A089C300846B011E81D6 ] HpqKbFiltr      C:\Windows\system32\DRIVERS\HpqKbFiltr.sys
15:43:52.0435 4680  HpqKbFiltr - ok
15:43:52.0482 4680  [ 1665C7121A026DF10C903DB9BC5E9D43 ] hpqwmiex        C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
15:43:52.0482 4680  hpqwmiex - ok
15:43:52.0529 4680  [ FC7C13B5A9E9BE23B7AE72BBC7FDB278 ] hpsrv           C:\Windows\system32\Hpservice.exe
15:43:52.0544 4680  hpsrv - ok
15:43:52.0653 4680  [ 098F1E4E5C9CB5B0063A959063631610 ] HTTP            C:\Windows\system32\drivers\HTTP.sys
15:43:52.0731 4680  HTTP - ok
15:43:52.0763 4680  [ DA94C854CEA5FAC549D4E1F6E88349E8 ] i2omp           C:\Windows\system32\drivers\i2omp.sys
15:43:52.0778 4680  i2omp - ok
15:43:52.0809 4680  [ CBB597659A2713CE0C9CC20C88C7591F ] i8042prt        C:\Windows\system32\DRIVERS\i8042prt.sys
15:43:52.0856 4680  i8042prt - ok
15:43:52.0872 4680  [ 3E3BF3627D886736D0B4E90054F929F6 ] iaStorV         C:\Windows\system32\drivers\iastorv.sys
15:43:52.0903 4680  iaStorV - ok
15:43:53.0090 4680  [ 6F95324909B502E2651442C1548AB12F ] IDriverT        C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
15:43:53.0137 4680  IDriverT ( UnsignedFile.Multi.Generic ) - warning
15:43:53.0137 4680  IDriverT - detected UnsignedFile.Multi.Generic (1)
15:43:53.0215 4680  [ 749F5F8CEDCA70F2A512945325FC489D ] idsvc           C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
15:43:53.0262 4680  idsvc - ok
15:43:53.0293 4680  [ 8C3951AD2FE886EF76C7B5027C3125D3 ] iirsp           C:\Windows\system32\drivers\iirsp.sys
15:43:53.0309 4680  iirsp - ok
15:43:53.0371 4680  [ 0C9EA6E654E7B0471741E343A6C671AF ] IKEEXT          C:\Windows\System32\ikeext.dll
15:43:53.0418 4680  IKEEXT - ok
15:43:53.0465 4680  [ 475490CAF376E55E6E8B37BBDFEB2E81 ] intelide        C:\Windows\system32\drivers\intelide.sys
15:43:53.0480 4680  intelide - ok
15:43:53.0496 4680  [ BFD84AF32FA1BAD6231C4585CB469630 ] intelppm        C:\Windows\system32\DRIVERS\intelppm.sys
15:43:53.0543 4680  intelppm - ok
15:43:53.0558 4680  [ 5624BC1BC5EEB49C0AB76A8114F05EA3 ] IPBusEnum       C:\Windows\system32\ipbusenum.dll
15:43:53.0621 4680  IPBusEnum - ok
15:43:53.0636 4680  [ D8AABC341311E4780D6FCE8C73C0AD81 ] IpFilterDriver  C:\Windows\system32\DRIVERS\ipfltdrv.sys
15:43:53.0683 4680  IpFilterDriver - ok
15:43:53.0714 4680  [ BF0DBFA9792C5C14FA00F61C75116C1B ] iphlpsvc        C:\Windows\System32\iphlpsvc.dll
15:43:53.0761 4680  iphlpsvc - ok
15:43:53.0777 4680  IpInIp - ok
15:43:53.0808 4680  [ 9C2EE2E6E5A7203BFAE15C299475EC67 ] IPMIDRV         C:\Windows\system32\drivers\ipmidrv.sys
15:43:53.0855 4680  IPMIDRV - ok
15:43:53.0870 4680  [ B7E6212F581EA5F6AB0C3A6CEEEB89BE ] IPNAT           C:\Windows\system32\DRIVERS\ipnat.sys
15:43:53.0933 4680  IPNAT - ok
15:43:53.0948 4680  [ 8C42CA155343A2F11D29FECA67FAA88D ] IRENUM          C:\Windows\system32\drivers\irenum.sys
15:43:53.0979 4680  IRENUM - ok
15:43:54.0011 4680  [ 0672BFCEDC6FC468A2B0500D81437F4F ] isapnp          C:\Windows\system32\drivers\isapnp.sys
15:43:54.0026 4680  isapnp - ok
15:43:54.0057 4680  [ E4FDF99599F27EC25D2CF6D754243520 ] iScsiPrt        C:\Windows\system32\DRIVERS\msiscsi.sys
15:43:54.0089 4680  iScsiPrt - ok
15:43:54.0104 4680  [ 63C766CDC609FF8206CB447A65ABBA4A ] iteatapi        C:\Windows\system32\drivers\iteatapi.sys
15:43:54.0120 4680  iteatapi - ok
15:43:54.0120 4680  [ 1281FE73B17664631D12F643CBEA3F59 ] iteraid         C:\Windows\system32\drivers\iteraid.sys
15:43:54.0135 4680  iteraid - ok
15:43:54.0167 4680  [ 54DF9EAFB54A98E1A2AC3DB69C16CF05 ] JMCR            C:\Windows\system32\DRIVERS\jmcr.sys
15:43:54.0198 4680  JMCR - ok
15:43:54.0213 4680  [ 423696F3BA6472DD17699209B933BC26 ] kbdclass        C:\Windows\system32\DRIVERS\kbdclass.sys
15:43:54.0229 4680  kbdclass - ok
15:43:54.0260 4680  [ DBDF75D51464FBC47D0104EC3D572C05 ] kbdhid          C:\Windows\system32\DRIVERS\kbdhid.sys
15:43:54.0307 4680  kbdhid - ok
15:43:54.0338 4680  [ 260BF9C43EE12C6898A9F5AAB0FB0E5D ] KeyIso          C:\Windows\system32\lsass.exe
15:43:54.0385 4680  KeyIso - ok
15:43:54.0432 4680  [ 88956AD9FA510848AD176777A6C6C1F5 ] KSecDD          C:\Windows\system32\Drivers\ksecdd.sys
15:43:54.0494 4680  KSecDD - ok
15:43:54.0525 4680  [ 1D419CF43DB29396ECD7113D129D94EB ] ksthunk         C:\Windows\system32\drivers\ksthunk.sys
15:43:54.0588 4680  ksthunk - ok
15:43:54.0635 4680  [ 1FAF6926F3416D3DA05C5B265491BDAE ] KtmRm           C:\Windows\system32\msdtckrm.dll
15:43:54.0681 4680  KtmRm - ok
15:43:54.0728 4680  [ 50C7A3CB427E9BB5ED0708A669956AB5 ] LanmanServer    C:\Windows\system32\srvsvc.dll
15:43:54.0791 4680  LanmanServer - ok
15:43:54.0822 4680  [ CAF86FC1388BE1E470F1A7B43E348ADB ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
15:43:54.0853 4680  LanmanWorkstation - ok
15:43:54.0884 4680  [ 96ECE2659B6654C10A0C310AE3A6D02C ] lltdio          C:\Windows\system32\DRIVERS\lltdio.sys
15:43:54.0931 4680  lltdio - ok
15:43:54.0962 4680  [ 961CCBD0B1CCB5675D64976FAE37D092 ] lltdsvc         C:\Windows\System32\lltdsvc.dll
15:43:55.0009 4680  lltdsvc - ok
15:43:55.0040 4680  [ A47F8080CACC23C91FE823AD19AA5612 ] lmhosts         C:\Windows\System32\lmhsvc.dll
15:43:55.0087 4680  lmhosts - ok
15:43:55.0118 4680  [ ACBE1AF32D3123E330A07BFBC5EC4A9B ] LSI_FC          C:\Windows\system32\drivers\lsi_fc.sys
15:43:55.0134 4680  LSI_FC - ok
15:43:55.0149 4680  [ 799FFB2FC4729FA46D2157C0065B3525 ] LSI_SAS         C:\Windows\system32\drivers\lsi_sas.sys
15:43:55.0165 4680  LSI_SAS - ok
15:43:55.0181 4680  [ F445FF1DAAD8A226366BFAF42551226B ] LSI_SCSI        C:\Windows\system32\drivers\lsi_scsi.sys
15:43:55.0196 4680  LSI_SCSI - ok
15:43:55.0196 4680  [ 52F87B9CC8932C2A7375C3B2A9BE5E3E ] luafv           C:\Windows\system32\drivers\luafv.sys
15:43:55.0243 4680  luafv - ok
15:43:55.0274 4680  [ 76A58DF02BD4EA29F189B82D0BEF17F8 ] Mcx2Svc         C:\Windows\system32\Mcx2Svc.dll
15:43:55.0290 4680  Mcx2Svc - ok
15:43:55.0305 4680  [ 5C5CD6AACED32FB26C3FB34B3DCF972F ] megasas         C:\Windows\system32\drivers\megasas.sys
15:43:55.0321 4680  megasas - ok
15:43:55.0337 4680  [ 859BC2436B076C77C159ED694ACFE8F8 ] MegaSR          C:\Windows\system32\drivers\megasr.sys
15:43:55.0368 4680  MegaSR - ok
15:43:55.0383 4680  [ 3CBE4995E80E13CCFBC42E5DCF3AC81A ] MMCSS           C:\Windows\system32\mmcss.dll
15:43:55.0430 4680  MMCSS - ok
15:43:55.0446 4680  [ 59848D5CC74606F0EE7557983BB73C2E ] Modem           C:\Windows\system32\drivers\modem.sys
15:43:55.0508 4680  Modem - ok
15:43:55.0539 4680  [ C247CC2A57E0A0C8C6DCCF7807B3E9E5 ] monitor         C:\Windows\system32\DRIVERS\monitor.sys
15:43:55.0586 4680  monitor - ok
15:43:55.0617 4680  [ 9367304E5E412B120CF5F4EA14E4E4F1 ] mouclass        C:\Windows\system32\DRIVERS\mouclass.sys
15:43:55.0633 4680  mouclass - ok
15:43:55.0664 4680  [ C2C2BD5C5CE5AAF786DDD74B75D2AC69 ] mouhid          C:\Windows\system32\DRIVERS\mouhid.sys
15:43:55.0695 4680  mouhid - ok
15:43:55.0711 4680  [ 11BC9B1E8801B01F7F6ADB9EAD30019B ] MountMgr        C:\Windows\system32\drivers\mountmgr.sys
15:43:55.0727 4680  MountMgr - ok
15:43:55.0742 4680  [ F8276EB8698142884498A528DFEA8478 ] mpio            C:\Windows\system32\drivers\mpio.sys
15:43:55.0758 4680  mpio - ok
15:43:55.0773 4680  [ C92B9ABDB65A5991E00C28F13491DBA2 ] mpsdrv          C:\Windows\system32\drivers\mpsdrv.sys
15:43:55.0820 4680  mpsdrv - ok
15:43:55.0914 4680  [ 897E3BAF68BA406A61682AE39C83900C ] MpsSvc          C:\Windows\system32\mpssvc.dll
15:43:55.0976 4680  MpsSvc - ok
15:43:55.0992 4680  [ 3C200630A89EF2C0864D515B7A75802E ] Mraid35x        C:\Windows\system32\drivers\mraid35x.sys
15:43:56.0007 4680  Mraid35x - ok
15:43:56.0023 4680  [ 7C1DE4AA96DC0C071611F9E7DE02A68D ] MRxDAV          C:\Windows\system32\drivers\mrxdav.sys
15:43:56.0054 4680  MRxDAV - ok
15:43:56.0085 4680  [ 1485811B320FF8C7EDAD1CAEBB1C6C2B ] mrxsmb          C:\Windows\system32\DRIVERS\mrxsmb.sys
15:43:56.0117 4680  mrxsmb - ok
15:43:56.0132 4680  [ 3B929A60C833FC615FD97FBA82BC7632 ] mrxsmb10        C:\Windows\system32\DRIVERS\mrxsmb10.sys
15:43:56.0163 4680  mrxsmb10 - ok
15:43:56.0163 4680  [ C64AB3E1F53B4F5B5BB6D796B2D7BEC3 ] mrxsmb20        C:\Windows\system32\DRIVERS\mrxsmb20.sys
15:43:56.0195 4680  mrxsmb20 - ok
15:43:56.0226 4680  [ AA459F2AB3AB603C357FF117CAE3D818 ] msahci          C:\Windows\system32\drivers\msahci.sys
15:43:56.0241 4680  msahci - ok
15:43:56.0273 4680  [ 264BBB4AAF312A485F0E44B65A6B7202 ] msdsm           C:\Windows\system32\drivers\msdsm.sys
15:43:56.0288 4680  msdsm - ok
15:43:56.0304 4680  [ 7EC02CE772F068ED0BEAFA3DA341A9BC ] MSDTC           C:\Windows\System32\msdtc.exe
15:43:56.0382 4680  MSDTC - ok
15:43:56.0397 4680  [ 704F59BFC4512D2BB0146AEC31B10A7C ] Msfs            C:\Windows\system32\drivers\Msfs.sys
15:43:56.0460 4680  Msfs - ok
15:43:56.0491 4680  [ 00EBC952961664780D43DCA157E79B27 ] msisadrv        C:\Windows\system32\drivers\msisadrv.sys
15:43:56.0507 4680  msisadrv - ok
15:43:56.0522 4680  [ 366B0C1F4478B519C181E37D43DCDA32 ] MSiSCSI         C:\Windows\system32\iscsiexe.dll
15:43:56.0585 4680  MSiSCSI - ok
15:43:56.0600 4680  msiserver - ok
15:43:56.0631 4680  [ 0EA73E498F53B96D83DBFCA074AD4CF8 ] MSKSSRV         C:\Windows\system32\drivers\MSKSSRV.sys
15:43:56.0678 4680  MSKSSRV - ok
15:43:56.0694 4680  [ 52E59B7E992A58E740AA63F57EDBAE8B ] MSPCLOCK        C:\Windows\system32\drivers\MSPCLOCK.sys
15:43:56.0741 4680  MSPCLOCK - ok
15:43:56.0756 4680  [ 49084A75BAE043AE02D5B44D02991BB2 ] MSPQM           C:\Windows\system32\drivers\MSPQM.sys
15:43:56.0803 4680  MSPQM - ok
15:43:56.0850 4680  [ DC6CCF440CDEDE4293DB41C37A5060A5 ] MsRPC           C:\Windows\system32\drivers\MsRPC.sys
15:43:56.0881 4680  MsRPC - ok
15:43:56.0897 4680  [ 855796E59DF77EA93AF46F20155BF55B ] mssmbios        C:\Windows\system32\DRIVERS\mssmbios.sys
15:43:56.0912 4680  mssmbios - ok
15:43:56.0943 4680  [ 86D632D75D05D5B7C7C043FA3564AE86 ] MSTEE           C:\Windows\system32\drivers\MSTEE.sys
15:43:57.0006 4680  MSTEE - ok
15:43:57.0037 4680  [ 0CC49F78D8ACA0877D885F149084E543 ] Mup             C:\Windows\system32\Drivers\mup.sys
15:43:57.0068 4680  Mup - ok
15:43:57.0099 4680  [ A5B10C845E7538C60C0F5D87A57CB3F5 ] napagent        C:\Windows\system32\qagentRT.dll
15:43:57.0177 4680  napagent - ok
15:43:57.0224 4680  [ 2007B826C4ACD94AE32232B41F0842B9 ] NativeWifiP     C:\Windows\system32\DRIVERS\nwifi.sys
15:43:57.0255 4680  NativeWifiP - ok
15:43:57.0302 4680  NAVENG - ok
15:43:57.0302 4680  NAVEX15 - ok
15:43:57.0349 4680  [ 65950E07329FCEE8E6516B17C8D0ABB6 ] NDIS            C:\Windows\system32\drivers\ndis.sys
15:43:57.0380 4680  NDIS - ok
15:43:57.0396 4680  [ 64DF698A425478E321981431AC171334 ] NdisTapi        C:\Windows\system32\DRIVERS\ndistapi.sys
15:43:57.0443 4680  NdisTapi - ok
15:43:57.0458 4680  [ 8BAA43196D7B5BB972C9A6B2BBF61A19 ] Ndisuio         C:\Windows\system32\DRIVERS\ndisuio.sys
15:43:57.0521 4680  Ndisuio - ok
15:43:57.0552 4680  [ F8158771905260982CE724076419EF19 ] NdisWan         C:\Windows\system32\DRIVERS\ndiswan.sys
15:43:57.0599 4680  NdisWan - ok
15:43:57.0599 4680  [ 9CB77ED7CB72850253E973A2D6AFDF49 ] NDProxy         C:\Windows\system32\drivers\NDProxy.sys
15:43:57.0677 4680  NDProxy - ok
15:43:57.0692 4680  [ A499294F5029A7862ADC115BDA7371CE ] NetBIOS         C:\Windows\system32\DRIVERS\netbios.sys
15:43:57.0770 4680  NetBIOS - ok
15:43:57.0833 4680  [ FC2C792EBDDC8E28DF939D6A92C83D61 ] netbt           C:\Windows\system32\DRIVERS\netbt.sys
15:43:57.0895 4680  netbt - ok
15:43:57.0895 4680  [ 260BF9C43EE12C6898A9F5AAB0FB0E5D ] Netlogon        C:\Windows\system32\lsass.exe
15:43:57.0926 4680  Netlogon - ok
15:43:58.0082 4680  [ 9B63B29DEFC0F3115A559D2597BF5D75 ] Netman          C:\Windows\System32\netman.dll
15:43:58.0191 4680  Netman - ok
15:43:58.0254 4680  [ 7846D0136CC2B264926A73047BA7688A ] netprofm        C:\Windows\System32\netprofm.dll
15:43:58.0332 4680  netprofm - ok
15:43:58.0363 4680  [ 74751DDA198165947FD7454D83F49825 ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe
15:43:58.0394 4680  NetTcpPortSharing - ok
15:43:58.0597 4680  [ C86984AEE87900C1EEB6942EDE3BF4B6 ] NETw3v64        C:\Windows\system32\DRIVERS\NETw3v64.sys
15:43:58.0878 4680  NETw3v64 - ok
15:43:59.0143 4680  [ 2BDCB7B7917380794C9D87AC2153CE33 ] NETw5v64        C:\Windows\system32\DRIVERS\NETw5v64.sys
15:43:59.0829 4680  NETw5v64 - ok
15:43:59.0845 4680  [ 4AC08BD6AF2DF42E0C3196D826C8AEA7 ] nfrd960         C:\Windows\system32\drivers\nfrd960.sys
15:43:59.0861 4680  nfrd960 - ok
15:43:59.0892 4680  [ F145BF4C4668E7E312069F81EF847CFC ] NlaSvc          C:\Windows\System32\nlasvc.dll
15:43:59.0939 4680  NlaSvc - ok
15:43:59.0954 4680  Norton Internet Security - ok
15:43:59.0970 4680  [ B298874F8E0EA93F06EC40AA8D146478 ] Npfs            C:\Windows\system32\drivers\Npfs.sys
15:44:00.0017 4680  Npfs - ok
15:44:00.0032 4680  [ ACB62BAA1C319B17752553DF3026EEEB ] nsi             C:\Windows\system32\nsisvc.dll
15:44:00.0079 4680  nsi - ok
15:44:00.0110 4680  [ 1523AF19EE8B030BA682F7A53537EAEB ] nsiproxy        C:\Windows\system32\drivers\nsiproxy.sys
15:44:00.0188 4680  nsiproxy - ok
15:44:00.0407 4680  [ 2ACCAA3C3C55370A32F17B3595E1A217 ] Ntfs            C:\Windows\system32\drivers\Ntfs.sys
15:44:00.0485 4680  Ntfs - ok
15:44:00.0500 4680  [ DD5D684975352B85B52E3FD5347C20CB ] Null            C:\Windows\system32\drivers\Null.sys
15:44:00.0547 4680  Null - ok
15:44:00.0578 4680  [ FD2A56F66FBC5360BF25193083516408 ] NVHDA           C:\Windows\system32\drivers\nvhda64v.sys
15:44:00.0594 4680  NVHDA - ok
15:44:01.0686 4680  [ BBE872A814B00798C2D568D46C42A71B ] nvlddmkm        C:\Windows\system32\DRIVERS\nvlddmkm.sys
15:44:04.0385 4680  nvlddmkm - ok
15:44:04.0416 4680  [ 2C040B7ADA5B06F6FACADAC8514AA034 ] nvraid          C:\Windows\system32\drivers\nvraid.sys
15:44:04.0431 4680  nvraid - ok
15:44:04.0431 4680  [ F7EA0FE82842D05EDA3EFDD376DBFDBA ] nvstor          C:\Windows\system32\drivers\nvstor.sys
15:44:04.0447 4680  nvstor - ok
15:44:04.0509 4680  [ 6C076FE337DC99400C3181CBB289D057 ] nvsvc           C:\Windows\system32\nvvsvc.exe
15:44:04.0541 4680  nvsvc - ok
15:44:04.0587 4680  [ 19067CA93075EF4823E3938A686F532F ] nv_agp          C:\Windows\system32\drivers\nv_agp.sys
15:44:04.0603 4680  nv_agp - ok
15:44:04.0603 4680  NwlnkFlt - ok
15:44:04.0603 4680  NwlnkFwd - ok
15:44:04.0650 4680  [ B5B1CE65AC15BBD11C0619E3EF7CFC28 ] ohci1394        C:\Windows\system32\DRIVERS\ohci1394.sys
15:44:04.0681 4680  ohci1394 - ok
15:44:04.0743 4680  [ 9AE31D2E1D15C10D91318E0EC149CEAC ] p2pimsvc        C:\Windows\system32\p2psvc.dll
15:44:04.0821 4680  p2pimsvc - ok
15:44:04.0837 4680  [ 9AE31D2E1D15C10D91318E0EC149CEAC ] p2psvc          C:\Windows\system32\p2psvc.dll
15:44:04.0868 4680  p2psvc - ok
15:44:04.0899 4680  [ AECD57F94C887F58919F307C35498EA0 ] Parport         C:\Windows\system32\drivers\parport.sys
15:44:04.0977 4680  Parport - ok
15:44:04.0993 4680  [ B43751085E2ABE389DA466BC62A4B987 ] partmgr         C:\Windows\system32\drivers\partmgr.sys
15:44:05.0040 4680  partmgr - ok
15:44:05.0071 4680  [ 9AB157B374192FF276C1628FBDBA2B0E ] PcaSvc          C:\Windows\System32\pcasvc.dll
15:44:05.0118 4680  PcaSvc - ok
15:44:05.0133 4680  [ 47AB1E0FC9D0E12BB53BA246E3A0906D ] pci             C:\Windows\system32\drivers\pci.sys
15:44:05.0165 4680  pci - ok
15:44:05.0180 4680  [ 15E5C3F89A3452EFBDA3B39816DBC4EE ] pciide          C:\Windows\system32\drivers\pciide.sys
15:44:05.0196 4680  pciide - ok
15:44:05.0227 4680  [ 037661F3D7C507C9993B7010CEEE6288 ] pcmcia          C:\Windows\system32\drivers\pcmcia.sys
15:44:05.0258 4680  pcmcia - ok
15:44:05.0289 4680  [ 58865916F53592A61549B04941BFD80D ] PEAUTH          C:\Windows\system32\drivers\peauth.sys
15:44:05.0383 4680  PEAUTH - ok
15:44:05.0648 4680  [ 0ED8727EA0172860F47258456C06CAEA ] PerfHost        C:\Windows\SysWow64\perfhost.exe
15:44:05.0711 4680  PerfHost - ok
15:44:05.0960 4680  [ E9E68C1A0F25CF4A7AC966EEA74EE89E ] pla             C:\Windows\system32\pla.dll
15:44:06.0085 4680  pla - ok
15:44:06.0147 4680  [ FE6B0F59215C9FD9F9D26539C58C8B82 ] PlugPlay        C:\Windows\system32\umpnpmgr.dll
15:44:06.0194 4680  PlugPlay - ok
15:44:06.0241 4680  [ 9AE31D2E1D15C10D91318E0EC149CEAC ] PNRPAutoReg     C:\Windows\system32\p2psvc.dll
15:44:06.0288 4680  PNRPAutoReg - ok
15:44:06.0303 4680  [ 9AE31D2E1D15C10D91318E0EC149CEAC ] PNRPsvc         C:\Windows\system32\p2psvc.dll
15:44:06.0381 4680  PNRPsvc - ok
15:44:06.0428 4680  [ 89A5560671C2D8B4A4B51F3E1AA069D8 ] PolicyAgent     C:\Windows\System32\ipsecsvc.dll
15:44:06.0475 4680  PolicyAgent - ok
15:44:06.0506 4680  [ 23386E9952025F5F21C368971E2E7301 ] PptpMiniport    C:\Windows\system32\DRIVERS\raspptp.sys
15:44:06.0553 4680  PptpMiniport - ok
15:44:06.0584 4680  [ 5080E59ECEE0BC923F14018803AA7A01 ] Processor       C:\Windows\system32\drivers\processr.sys
15:44:06.0631 4680  Processor - ok
15:44:06.0662 4680  [ E058CE4FC2449D8BFA14739C83B7FF2A ] ProfSvc         C:\Windows\system32\profsvc.dll
15:44:06.0709 4680  ProfSvc - ok
15:44:06.0725 4680  [ 260BF9C43EE12C6898A9F5AAB0FB0E5D ] ProtectedStorage C:\Windows\system32\lsass.exe
15:44:06.0740 4680  ProtectedStorage - ok
15:44:06.0771 4680  [ C5AB7F0809392D0DA027F4A2A81BFA31 ] PSched          C:\Windows\system32\DRIVERS\pacer.sys
15:44:06.0803 4680  PSched - ok
15:44:06.0959 4680  [ 0B83F4E681062F3839BE2EC1D98FD94A ] ql2300          C:\Windows\system32\drivers\ql2300.sys
15:44:07.0052 4680  ql2300 - ok
15:44:07.0099 4680  [ E1C80F8D4D1E39EF9595809C1369BF2A ] ql40xx          C:\Windows\system32\drivers\ql40xx.sys
15:44:07.0130 4680  ql40xx - ok
15:44:07.0146 4680  [ 90574842C3DA781E279061A3EFF91F07 ] QWAVE           C:\Windows\system32\qwave.dll
15:44:07.0193 4680  QWAVE - ok
15:44:07.0208 4680  [ E8D76EDAB77EC9C634C27B8EAC33ADC5 ] QWAVEdrv        C:\Windows\system32\drivers\qwavedrv.sys
15:44:07.0224 4680  QWAVEdrv - ok
15:44:07.0239 4680  [ 1013B3B663A56D3DDD784F581C1BD005 ] RasAcd          C:\Windows\system32\DRIVERS\rasacd.sys
15:44:07.0286 4680  RasAcd - ok
15:44:07.0317 4680  [ B2AE18F847D07F0044404DDF7CB04497 ] RasAuto         C:\Windows\System32\rasauto.dll
15:44:07.0380 4680  RasAuto - ok
15:44:07.0411 4680  [ AC7BC4D42A7E558718DFDEC599BBFC2C ] Rasl2tp         C:\Windows\system32\DRIVERS\rasl2tp.sys
15:44:07.0489 4680  Rasl2tp - ok
15:44:07.0520 4680  [ 3AD83E4046C43BE510DE681588ACB8AF ] RasMan          C:\Windows\System32\rasmans.dll
15:44:07.0614 4680  RasMan - ok
15:44:07.0645 4680  [ 4517FBF8B42524AFE4EDE1DE102AAE3E ] RasPppoe        C:\Windows\system32\DRIVERS\raspppoe.sys
15:44:07.0692 4680  RasPppoe - ok
15:44:07.0785 4680  [ C6A593B51F34C33E5474539544072527 ] RasSstp         C:\Windows\system32\DRIVERS\rassstp.sys
15:44:07.0848 4680  RasSstp - ok
15:44:07.0879 4680  [ 322DB5C6B55E8D8EE8D6F358B2AAABB1 ] rdbss           C:\Windows\system32\DRIVERS\rdbss.sys
15:44:07.0910 4680  rdbss - ok
15:44:07.0941 4680  [ 603900CC05F6BE65CCBF373800AF3716 ] RDPCDD          C:\Windows\system32\DRIVERS\RDPCDD.sys
15:44:07.0988 4680  RDPCDD - ok
15:44:08.0019 4680  [ C045D1FB111C28DF0D1BE8D4BDA22C06 ] rdpdr           C:\Windows\system32\drivers\rdpdr.sys
15:44:08.0082 4680  rdpdr - ok
15:44:08.0097 4680  [ CAB9421DAF3D97B33D0D055858E2C3AB ] RDPENCDD        C:\Windows\system32\drivers\rdpencdd.sys
15:44:08.0144 4680  RDPENCDD - ok
15:44:08.0191 4680  [ AE4BD9E1C33D351D8E607FC81F15160C ] RDPWD           C:\Windows\system32\drivers\RDPWD.sys
15:44:08.0238 4680  RDPWD - ok
15:44:08.0378 4680  [ BC0A4D47472B042537F4E57B950415FA ] Recovery Service for Windows C:\Program Files (x86)\SMINST\BLService.exe
15:44:08.0441 4680  Recovery Service for Windows - ok
15:44:08.0472 4680  [ C612B9557DA73F70D41F8A6FBC8E5344 ] RemoteAccess    C:\Windows\System32\mprdim.dll
15:44:08.0534 4680  RemoteAccess - ok
15:44:08.0659 4680  [ 44B9D8EC2F3EF3A0EFB00857AF70D861 ] RemoteRegistry  C:\Windows\system32\regsvc.dll
15:44:08.0721 4680  RemoteRegistry - ok
15:44:08.0753 4680  [ CD71E053D7260E4102D99A28F9196070 ] RFCOMM          C:\Windows\system32\DRIVERS\rfcomm.sys
15:44:08.0784 4680  RFCOMM - ok
15:44:08.0831 4680  [ 805AE1F90C64758D19AAA001CF8CBA12 ] RichVideo       C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
15:44:08.0846 4680  RichVideo ( UnsignedFile.Multi.Generic ) - warning
15:44:08.0846 4680  RichVideo - detected UnsignedFile.Multi.Generic (1)
15:44:08.0862 4680  [ F46C457840D4B7A4DAAFEE739CE04102 ] RpcLocator      C:\Windows\system32\locator.exe
15:44:08.0924 4680  RpcLocator - ok
15:44:09.0080 4680  [ CF8B9A3A5E7DC57724A89D0C3E8CF9EF ] RpcSs           C:\Windows\system32\rpcss.dll
15:44:09.0127 4680  RpcSs - ok
15:44:09.0158 4680  [ 22A9CB08B1A6707C1550C6BF099AAE73 ] rspndr          C:\Windows\system32\DRIVERS\rspndr.sys
15:44:09.0221 4680  rspndr - ok
15:44:09.0267 4680  [ 8B91737DA75ADD21CB1554B38089196A ] RTL8169         C:\Windows\system32\DRIVERS\Rtlh64.sys
15:44:09.0330 4680  RTL8169 - ok
15:44:09.0345 4680  [ 260BF9C43EE12C6898A9F5AAB0FB0E5D ] SamSs           C:\Windows\system32\lsass.exe
15:44:09.0361 4680  SamSs - ok
15:44:09.0408 4680  [ CD9C693589C60AD59BBBCFB0E524E01B ] sbp2port        C:\Windows\system32\drivers\sbp2port.sys
15:44:09.0439 4680  sbp2port - ok
15:44:09.0455 4680  [ FD1CDCF108D5EF3366F00D18B70FB89B ] SCardSvr        C:\Windows\System32\SCardSvr.dll
15:44:09.0501 4680  SCardSvr - ok
15:44:09.0611 4680  [ 0F838C811AD295D2A4489B9993096C63 ] Schedule        C:\Windows\system32\schedsvc.dll
15:44:09.0735 4680  Schedule - ok
15:44:09.0782 4680  [ 5A268127633C7EE2A7FB87F39D748D56 ] SCPolicySvc     C:\Windows\System32\certprop.dll
15:44:09.0813 4680  SCPolicySvc - ok
15:44:09.0876 4680  [ B42EE50F7D24F837F925332EB349ECA5 ] sdbus           C:\Windows\system32\DRIVERS\sdbus.sys
15:44:09.0954 4680  sdbus - ok
15:44:09.0969 4680  [ 4FF71B076A7760FE75EA5AE2D0EE0018 ] SDRSVC          C:\Windows\System32\SDRSVC.dll
15:44:10.0032 4680  SDRSVC - ok
15:44:10.0063 4680  [ 3EA8A16169C26AFBEB544E0E48421186 ] secdrv          C:\Windows\system32\drivers\secdrv.sys
15:44:10.0141 4680  secdrv - ok
15:44:10.0172 4680  [ 5ACDCBC67FCF894A1815B9F96D704490 ] seclogon        C:\Windows\system32\seclogon.dll
15:44:10.0250 4680  seclogon - ok
15:44:10.0266 4680  [ 90973A64B96CD647FF81C79443618EED ] SENS            C:\Windows\System32\sens.dll
15:44:10.0328 4680  SENS - ok
15:44:10.0344 4680  [ F71BFE7AC6C52273B7C82CBF1BB2A222 ] Serenum         C:\Windows\system32\drivers\serenum.sys
15:44:10.0422 4680  Serenum - ok
15:44:10.0437 4680  [ E62FAC91EE288DB29A9696A9D279929C ] Serial          C:\Windows\system32\drivers\serial.sys
15:44:10.0515 4680  Serial - ok
15:44:10.0531 4680  [ A842F04833684BCEEA7336211BE478DF ] sermouse        C:\Windows\system32\drivers\sermouse.sys
15:44:10.0593 4680  sermouse - ok
15:44:10.0609 4680  [ A8E4A4407A09F35DCCC3771AF590B0C4 ] SessionEnv      C:\Windows\system32\sessenv.dll
15:44:10.0671 4680  SessionEnv - ok
15:44:10.0671 4680  [ 14D4B4465193A87C127933978E8C4106 ] sffdisk         C:\Windows\system32\drivers\sffdisk.sys
15:44:10.0718 4680  sffdisk - ok
15:44:10.0718 4680  [ 7073AEE3F82F3D598E3825962AA98AB2 ] sffp_mmc        C:\Windows\system32\drivers\sffp_mmc.sys
15:44:10.0765 4680  sffp_mmc - ok
15:44:10.0796 4680  [ 35E59EBE4A01A0532ED67975161C7B82 ] sffp_sd         C:\Windows\system32\drivers\sffp_sd.sys
15:44:10.0843 4680  sffp_sd - ok
15:44:10.0859 4680  [ 6B7838C94135768BD455CBDC23E39E5F ] sfloppy         C:\Windows\system32\drivers\sfloppy.sys
15:44:10.0921 4680  sfloppy - ok
15:44:10.0952 4680  [ 4C5AEE179DA7E1EE9A9CCB9DA289AF34 ] SharedAccess    C:\Windows\System32\ipnathlp.dll
15:44:11.0015 4680  SharedAccess - ok
15:44:11.0077 4680  [ 56793271ECDEDD350C5ADD305603E963 ] ShellHWDetection C:\Windows\System32\shsvcs.dll
15:44:11.0139 4680  ShellHWDetection - ok
15:44:11.0171 4680  [ 7A5DE502AEB719D4594C6471060A78B3 ] SiSRaid2        C:\Windows\system32\drivers\sisraid2.sys
15:44:11.0186 4680  SiSRaid2 - ok
15:44:11.0202 4680  [ 3A2F769FAB9582BC720E11EA1DFB184D ] SiSRaid4        C:\Windows\system32\drivers\sisraid4.sys
15:44:11.0217 4680  SiSRaid4 - ok
15:44:11.0373 4680  [ A9A27A8E257B45A604FDAD4F26FE7241 ] slsvc           C:\Windows\system32\SLsvc.exe
15:44:11.0592 4680  slsvc - ok
15:44:11.0623 4680  [ FD74B4B7C2088E390A30C85A896FC3AF ] SLUINotify      C:\Windows\system32\SLUINotify.dll
15:44:11.0670 4680  SLUINotify - ok
15:44:11.0732 4680  [ 290B6F6A0EC4FCDFC90F5CB6D7020473 ] Smb             C:\Windows\system32\DRIVERS\smb.sys
15:44:11.0779 4680  Smb - ok
15:44:11.0826 4680  [ F8F47F38909823B1AF28D60B96340CFF ] SNMPTRAP        C:\Windows\System32\snmptrap.exe
15:44:11.0873 4680  SNMPTRAP - ok
15:44:11.0888 4680  [ 386C3C63F00A7040C7EC5E384217E89D ] spldr           C:\Windows\system32\drivers\spldr.sys
15:44:11.0904 4680  spldr - ok
15:44:12.0044 4680  [ F66FF751E7EFC816D266977939EF5DC3 ] Spooler         C:\Windows\System32\spoolsv.exe
15:44:12.0075 4680  Spooler - ok
15:44:12.0107 4680  SRTSP - ok
15:44:12.0107 4680  SRTSPX - ok
15:44:12.0138 4680  [ 880A57FCCB571EBD063D4DD50E93E46D ] srv             C:\Windows\system32\DRIVERS\srv.sys
15:44:12.0200 4680  srv - ok
15:44:12.0231 4680  [ A1AD14A6D7A37891FFFECA35EBBB0730 ] srv2            C:\Windows\system32\DRIVERS\srv2.sys
15:44:12.0278 4680  srv2 - ok
15:44:12.0278 4680  [ 4BED62F4FA4D8300973F1151F4C4D8A7 ] srvnet          C:\Windows\system32\DRIVERS\srvnet.sys
15:44:12.0309 4680  srvnet - ok
15:44:12.0341 4680  [ 192C74646EC5725AEF3F80D19FF75F6A ] SSDPSRV         C:\Windows\System32\ssdpsrv.dll
15:44:12.0387 4680  SSDPSRV - ok
15:44:12.0434 4680  [ 2EE3FA0308E6185BA64A9A7F2E74332B ] SstpSvc         C:\Windows\system32\sstpsvc.dll
15:44:12.0481 4680  SstpSvc - ok
15:44:12.0824 4680  [ 72EB6157E892A674E47E08732BB5CCE3 ] STacSV          C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_6ef279c8\STacSV64.exe
15:44:12.0871 4680  STacSV - ok
15:44:12.0918 4680  [ 0C7BDA7E9A329A071C080EB5210FE019 ] STHDA           C:\Windows\system32\DRIVERS\stwrt64.sys
15:44:12.0949 4680  STHDA - ok
15:44:12.0980 4680  [ 15825C1FBFB8779992CB65087F316AF5 ] stisvc          C:\Windows\System32\wiaservc.dll
15:44:13.0011 4680  stisvc - ok
15:44:13.0074 4680  [ 8A851CA908B8B974F89C50D2E18D4F0C ] swenum          C:\Windows\system32\DRIVERS\swenum.sys
15:44:13.0089 4680  swenum - ok
15:44:13.0136 4680  [ 6DE37F4DE19D4EFD9C48C43ADDBC949A ] swprv           C:\Windows\System32\swprv.dll
15:44:13.0214 4680  swprv - ok
15:44:13.0230 4680  [ 2F26A2C6FC96B29BEFF5D8ED74E6625B ] Symc8xx         C:\Windows\system32\drivers\symc8xx.sys
15:44:13.0245 4680  Symc8xx - ok
15:44:13.0261 4680  [ A909667976D3BCCD1DF813FED517D837 ] Sym_hi          C:\Windows\system32\drivers\sym_hi.sys
15:44:13.0277 4680  Sym_hi - ok
15:44:13.0277 4680  [ 36887B56EC2D98B9C362F6AE4DE5B7B0 ] Sym_u3          C:\Windows\system32\drivers\sym_u3.sys
15:44:13.0292 4680  Sym_u3 - ok
15:44:13.0355 4680  [ 3A706A967295E16511E40842B1A2761D ] SynTP           C:\Windows\system32\DRIVERS\SynTP.sys
15:44:13.0370 4680  SynTP - ok
15:44:13.0448 4680  [ 92D7A8B0F87B036F17D25885937897A6 ] SysMain         C:\Windows\system32\sysmain.dll
15:44:13.0573 4680  SysMain - ok
15:44:13.0604 4680  [ 005CE42567F9113A3BCCB3B20073B029 ] TabletInputService C:\Windows\System32\TabSvc.dll
15:44:13.0651 4680  TabletInputService - ok
15:44:13.0729 4680  [ CC2562B4D55E0B6A4758C65407F63B79 ] TapiSrv         C:\Windows\System32\tapisrv.dll
15:44:13.0776 4680  TapiSrv - ok
15:44:13.0807 4680  [ CDBE8D7C1E201B911CDC346D06617FB5 ] TBS             C:\Windows\System32\tbssvc.dll
15:44:13.0854 4680  TBS - ok
15:44:13.0979 4680  [ 0E970F59D7FBB838316176B19A2ADB82 ] Tcpip           C:\Windows\system32\drivers\tcpip.sys
15:44:14.0072 4680  Tcpip - ok
15:44:14.0103 4680  [ 0E970F59D7FBB838316176B19A2ADB82 ] Tcpip6          C:\Windows\system32\DRIVERS\tcpip.sys
15:44:14.0244 4680  Tcpip6 - ok
15:44:14.0291 4680  [ C7E72A4071EE0200E3C075DACFB2B334 ] tcpipreg        C:\Windows\system32\drivers\tcpipreg.sys
15:44:14.0337 4680  tcpipreg - ok
15:44:14.0369 4680  [ 1D8BF4AAA5FB7A2761475781DC1195BC ] TDPIPE          C:\Windows\system32\drivers\tdpipe.sys
15:44:14.0447 4680  TDPIPE - ok
15:44:14.0447 4680  [ 7F7E00CDF609DF657F4CDA02DD1C9BB1 ] TDTCP           C:\Windows\system32\drivers\tdtcp.sys
15:44:14.0509 4680  TDTCP - ok
15:44:14.0540 4680  [ 458919C8C42E398DC4802178D5FFEE27 ] tdx             C:\Windows\system32\DRIVERS\tdx.sys
15:44:14.0587 4680  tdx - ok
15:44:14.0634 4680  [ 8C19678D22649EC002EF2282EAE92F98 ] TermDD          C:\Windows\system32\DRIVERS\termdd.sys
15:44:14.0649 4680  TermDD - ok
15:44:14.0759 4680  [ 5CDD30BC217082DAC71A9878D9BFD566 ] TermService     C:\Windows\System32\termsrv.dll
15:44:14.0883 4680  TermService - ok
15:44:14.0946 4680  [ 56793271ECDEDD350C5ADD305603E963 ] Themes          C:\Windows\system32\shsvcs.dll
15:44:14.0961 4680  Themes - ok
15:44:15.0008 4680  [ 3CBE4995E80E13CCFBC42E5DCF3AC81A ] THREADORDER     C:\Windows\system32\mmcss.dll
15:44:15.0039 4680  THREADORDER - ok
15:44:15.0086 4680  [ F4689F05AF472A651A7B1B7B02D200E7 ] TrkWks          C:\Windows\System32\trkwks.dll
15:44:15.0149 4680  TrkWks - ok
15:44:15.0195 4680  [ 66328B08EF5A9305D8EDE36B93930369 ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
15:44:15.0242 4680  TrustedInstaller - ok
15:44:15.0273 4680  [ 9E5409CD17C8BEF193AAD498F3BC2CB8 ] tssecsrv        C:\Windows\system32\DRIVERS\tssecsrv.sys
15:44:15.0320 4680  tssecsrv - ok
15:44:15.0336 4680  [ 89EC74A9E602D16A75A4170511029B3C ] tunmp           C:\Windows\system32\DRIVERS\tunmp.sys
15:44:15.0367 4680  tunmp - ok
15:44:15.0383 4680  [ 30A9B3F45AD081BFFC3BCAA9C812B609 ] tunnel          C:\Windows\system32\DRIVERS\tunnel.sys
15:44:15.0414 4680  tunnel - ok
15:44:15.0539 4680  [ 1C31169DDDC70C1605F703DA701EAEEA ] TVCapSvc        C:\Program Files (x86)\Hewlett-Packard\Media\TV\Kernel\TV\TVCapSvc.exe
15:44:15.0554 4680  TVCapSvc - ok
15:44:15.0570 4680  [ 290B8C381DBC15D3DBCBD2BDB6B0BA12 ] TVSched         C:\Program Files (x86)\Hewlett-Packard\Media\TV\Kernel\TV\TVSched.exe
15:44:15.0585 4680  TVSched - ok
15:44:15.0679 4680  [ FEC266EF401966311744BD0F359F7F56 ] uagp35          C:\Windows\system32\drivers\uagp35.sys
15:44:15.0710 4680  uagp35 - ok
15:44:15.0741 4680  [ FAF2640A2A76ED03D449E443194C4C34 ] udfs            C:\Windows\system32\DRIVERS\udfs.sys
15:44:15.0804 4680  udfs - ok
15:44:15.0851 4680  [ 060507C4113391394478F6953A79EEDC ] UI0Detect       C:\Windows\system32\UI0Detect.exe
15:44:15.0897 4680  UI0Detect - ok
15:44:15.0944 4680  [ 4EC9447AC3AB462647F60E547208CA00 ] uliagpkx        C:\Windows\system32\drivers\uliagpkx.sys
15:44:15.0960 4680  uliagpkx - ok
15:44:15.0991 4680  [ 697F0446134CDC8F99E69306184FBBB4 ] uliahci         C:\Windows\system32\drivers\uliahci.sys
15:44:16.0022 4680  uliahci - ok
15:44:16.0022 4680  [ 31707F09846056651EA2C37858F5DDB0 ] UlSata          C:\Windows\system32\drivers\ulsata.sys
15:44:16.0038 4680  UlSata - ok
15:44:16.0053 4680  [ 85E5E43ED5B48C8376281BAB519271B7 ] ulsata2         C:\Windows\system32\drivers\ulsata2.sys
15:44:16.0069 4680  ulsata2 - ok
15:44:16.0085 4680  [ 46E9A994C4FED537DD951F60B86AD3F4 ] umbus           C:\Windows\system32\DRIVERS\umbus.sys
15:44:16.0131 4680  umbus - ok
15:44:16.0147 4680  [ 7093799FF80E9DECA0680D2E3535BE60 ] upnphost        C:\Windows\System32\upnphost.dll
15:44:16.0303 4680  upnphost - ok
15:44:16.0381 4680  [ 07E3498FC60834219D2356293DA0FECC ] usbccgp         C:\Windows\system32\DRIVERS\usbccgp.sys
15:44:16.0412 4680  usbccgp - ok
15:44:16.0459 4680  [ 9247F7E0B65852C1F6631480984D6ED2 ] usbcir          C:\Windows\system32\drivers\usbcir.sys
15:44:16.0537 4680  usbcir - ok
15:44:16.0568 4680  [ 827E44DE934A736EA31E91D353EB126F ] usbehci         C:\Windows\system32\DRIVERS\usbehci.sys
15:44:16.0599 4680  usbehci - ok
15:44:16.0631 4680  [ BB35CD80A2ECECFADC73569B3D70C7D1 ] usbhub          C:\Windows\system32\DRIVERS\usbhub.sys
15:44:16.0693 4680  usbhub - ok
15:44:16.0724 4680  [ EBA14EF0C07CEC233F1529C698D0D154 ] usbohci         C:\Windows\system32\drivers\usbohci.sys
15:44:16.0787 4680  usbohci - ok
15:44:16.0818 4680  [ 28B693B6D31E7B9332C1BDCEFEF228C1 ] usbprint        C:\Windows\system32\DRIVERS\usbprint.sys
15:44:16.0865 4680  usbprint - ok
15:44:16.0896 4680  [ EA0BF666868964FBE8CB10E50C97B9F1 ] usbscan         C:\Windows\system32\DRIVERS\usbscan.sys
15:44:16.0943 4680  usbscan - ok
15:44:16.0989 4680  [ B854C1558FCA0C269A38663E8B59B581 ] USBSTOR         C:\Windows\system32\DRIVERS\USBSTOR.SYS
15:44:17.0036 4680  USBSTOR - ok
15:44:17.0052 4680  [ B2872CBF9F47316ABD0E0C74A1ABA507 ] usbuhci         C:\Windows\system32\DRIVERS\usbuhci.sys
15:44:17.0083 4680  usbuhci - ok
15:44:17.0130 4680  [ FC33099877790D51B0927B7039059855 ] usbvideo        C:\Windows\system32\Drivers\usbvideo.sys
15:44:17.0177 4680  usbvideo - ok
15:44:17.0255 4680  [ C5B70A6AA947667CE0E5FC84A05EC8B6 ] usnjsvc         C:\Program Files (x86)\MSN Messenger\usnsvc.exe
15:44:17.0270 4680  usnjsvc - ok
15:44:17.0301 4680  [ D76E231E4850BB3F88A3D9A78DF191E3 ] UxSms           C:\Windows\System32\uxsms.dll
15:44:17.0333 4680  UxSms - ok
15:44:17.0395 4680  [ 294945381DFA7CE58CECF0A9896AF327 ] vds             C:\Windows\System32\vds.exe
15:44:17.0442 4680  vds - ok
15:44:17.0489 4680  [ 4B6F9959F8DF8FADC8170CD8A6BCE5C2 ] vfsFPService    C:\Windows\system32\vfsFPService.exe
15:44:17.0520 4680  vfsFPService - ok
15:44:17.0535 4680  [ 916B94BCF1E09873FFF2D5FB11767BBC ] vga             C:\Windows\system32\DRIVERS\vgapnp.sys
15:44:17.0582 4680  vga - ok
15:44:17.0598 4680  [ B83AB16B51FEDA65DD81B8C59D114D63 ] VgaSave         C:\Windows\System32\drivers\vga.sys
15:44:17.0660 4680  VgaSave - ok
15:44:17.0738 4680  [ 4F964E6828156F0EF3FA8D3A9A7895DE ] viaide          C:\Windows\system32\drivers\viaide.sys
15:44:17.0754 4680  viaide - ok
15:44:17.0754 4680  [ 2B7E885ED951519A12C450D24535DFCA ] volmgr          C:\Windows\system32\drivers\volmgr.sys
15:44:17.0785 4680  volmgr - ok
15:44:17.0832 4680  [ CEC5AC15277D75D9E5DEC2E1C6EAF877 ] volmgrx         C:\Windows\system32\drivers\volmgrx.sys
15:44:17.0863 4680  volmgrx - ok
15:44:17.0879 4680  [ 582F710097B46140F5A89A19A6573D4B ] volsnap         C:\Windows\system32\drivers\volsnap.sys
15:44:17.0910 4680  volsnap - ok
15:44:17.0988 4680  [ A68F455ED2673835209318DD61BFBB0E ] vsmraid         C:\Windows\system32\drivers\vsmraid.sys
15:44:18.0003 4680  vsmraid - ok
15:44:18.0191 4680  [ B75232DAD33BFD95BF6F0A3E6BFF51E1 ] VSS             C:\Windows\system32\vssvc.exe
15:44:18.0393 4680  VSS - ok
15:44:18.0456 4680  [ F14A7DE2EA41883E250892E1E5230A9A ] W32Time         C:\Windows\system32\w32time.dll
15:44:18.0612 4680  W32Time - ok
15:44:18.0627 4680  [ FEF8FE5923FEAD2CEE4DFABFCE3393A7 ] WacomPen        C:\Windows\system32\drivers\wacompen.sys
15:44:18.0752 4680  WacomPen - ok
15:44:18.0783 4680  [ B8E7049622300D20BA6D8BE0C47C0CFD ] Wanarp          C:\Windows\system32\DRIVERS\wanarp.sys
15:44:18.0908 4680  Wanarp - ok
15:44:18.0908 4680  [ B8E7049622300D20BA6D8BE0C47C0CFD ] Wanarpv6        C:\Windows\system32\DRIVERS\wanarp.sys
15:44:18.0939 4680  Wanarpv6 - ok
15:44:18.0971 4680  [ B4E4C37D0AA6100090A53213EE2BF1C1 ] wcncsvc         C:\Windows\System32\wcncsvc.dll
15:44:19.0049 4680  wcncsvc - ok
15:44:19.0111 4680  [ EA4B369560E986F19D93F45A881484AC ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
15:44:19.0158 4680  WcsPlugInService - ok
15:44:19.0173 4680  [ 0C17A0816F65B89E362E682AD5E7266E ] Wd              C:\Windows\system32\drivers\wd.sys
15:44:19.0205 4680  Wd - ok
15:44:19.0314 4680  [ 442783E2CB0DA19873B7A63833FF4CB4 ] Wdf01000        C:\Windows\system32\drivers\Wdf01000.sys
15:44:19.0361 4680  Wdf01000 - ok
15:44:19.0392 4680  [ C5EFDA73EBFCA8B02A094898DE0A9276 ] WdiServiceHost  C:\Windows\system32\wdi.dll
15:44:19.0439 4680  WdiServiceHost - ok
15:44:19.0454 4680  [ C5EFDA73EBFCA8B02A094898DE0A9276 ] WdiSystemHost   C:\Windows\system32\wdi.dll
15:44:19.0501 4680  WdiSystemHost - ok
15:44:19.0548 4680  [ 3E6D05381CF35F75EBB055544A8ED9AC ] WebClient       C:\Windows\System32\webclnt.dll
15:44:19.0563 4680  WebClient - ok
15:44:19.0626 4680  [ 8D40BC587993F876658BF9FB0F7D3462 ] Wecsvc          C:\Windows\system32\wecsvc.dll
15:44:19.0719 4680  Wecsvc - ok
15:44:19.0766 4680  [ 9C980351D7E96288EA0C23AE232BD065 ] wercplsupport   C:\Windows\System32\wercplsupport.dll
15:44:19.0797 4680  wercplsupport - ok
15:44:19.0813 4680  [ 66B9ECEBC46683F47EDC06333C075FEF ] WerSvc          C:\Windows\System32\WerSvc.dll
15:44:19.0860 4680  WerSvc - ok
15:44:19.0891 4680  WinDefend - ok
15:44:19.0907 4680  WinHttpAutoProxySvc - ok
15:44:20.0063 4680  [ D2E7296ED1BD26D8DB2799770C077A02 ] Winmgmt         C:\Windows\system32\wbem\WMIsvc.dll
15:44:20.0109 4680  Winmgmt - ok
15:44:20.0187 4680  [ 6CBB0C68F13B9C2EC1B16F5FA5E7C869 ] WinRM           C:\Windows\system32\WsmSvc.dll
15:44:20.0312 4680  WinRM - ok
15:44:20.0343 4680  [ 817EAFF5D38674EDD7713B9DFB8E9791 ] WinUSB          C:\Windows\system32\DRIVERS\WinUSB.sys
15:44:20.0375 4680  WinUSB - ok
15:44:20.0421 4680  [ EC339C8115E91BAED835957E9A677F16 ] Wlansvc         C:\Windows\System32\wlansvc.dll
15:44:20.0546 4680  Wlansvc - ok
15:44:20.0609 4680  [ E18AEBAAA5A773FE11AA2C70F65320F5 ] WmiAcpi         C:\Windows\system32\DRIVERS\wmiacpi.sys
15:44:20.0640 4680  WmiAcpi - ok
15:44:20.0702 4680  [ 21FA389E65A852698B6A1341F36EE02D ] wmiApSrv        C:\Windows\system32\wbem\WmiApSrv.exe
15:44:20.0733 4680  wmiApSrv - ok
15:44:20.0780 4680  WMPNetworkSvc - ok
15:44:20.0843 4680  [ CBC156C913F099E6680D1DF9307DB7A8 ] WPCSvc          C:\Windows\System32\wpcsvc.dll
15:44:20.0889 4680  WPCSvc - ok
15:44:20.0921 4680  [ 490A18B4E4D53DC10879DEAA8E8B70D9 ] WPDBusEnum      C:\Windows\system32\wpdbusenum.dll
15:44:20.0983 4680  WPDBusEnum - ok
15:44:21.0264 4680  [ 991E2C2CF3BC204C2BB2EE1476149E4E ] WPFFontCache_v0400 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\WPFFontCache_v0400.exe
15:44:21.0326 4680  WPFFontCache_v0400 - ok
15:44:21.0357 4680  [ 8A900348370E359B6BFF6A550E4649E1 ] ws2ifsl         C:\Windows\system32\drivers\ws2ifsl.sys
15:44:21.0435 4680  ws2ifsl - ok
15:44:21.0467 4680  [ 9EA3E6D0EF7A5C2B9181961052A4B01A ] wscsvc          C:\Windows\System32\wscsvc.dll
15:44:21.0482 4680  wscsvc - ok
15:44:21.0498 4680  WSearch - ok
15:44:21.0763 4680  [ D9EF901DCA379CFE914E9FA13B73B4C4 ] wuauserv        C:\Windows\system32\wuaueng.dll
15:44:21.0981 4680  wuauserv - ok
15:44:22.0028 4680  [ AB886378EEB55C6C75B4F2D14B6C869F ] WudfPf          C:\Windows\system32\drivers\WudfPf.sys
15:44:22.0044 4680  WudfPf - ok
15:44:22.0075 4680  [ DDA4CAF29D8C0A297F886BFE561E6659 ] WUDFRd          C:\Windows\system32\DRIVERS\WUDFRd.sys
15:44:22.0091 4680  WUDFRd - ok
15:44:22.0122 4680  [ B20F051B03A966392364C83F009F7D17 ] wudfsvc         C:\Windows\System32\WUDFSvc.dll
15:44:22.0153 4680  wudfsvc - ok
15:44:22.0231 4680  [ 07F7285220307AAFB755D890295F0F9A ] yukonx64        C:\Windows\system32\DRIVERS\yk60x64.sys
15:44:22.0340 4680  yukonx64 - ok
15:44:22.0465 4680  [ 1CACFEF9E5DD866C5B79A135EE729E18 ] {55662437-DA8C-40c0-AADA-2C816A897A49} C:\Program Files (x86)\Hewlett-Packard\Media\DVD\000.fcl
15:44:22.0481 4680  {55662437-DA8C-40c0-AADA-2C816A897A49} - ok
15:44:22.0481 4680  ================ Scan global ===============================
15:44:22.0527 4680  [ 060DC3A7A9A2626031EB23D90151428D ] C:\Windows\system32\basesrv.dll
15:44:22.0543 4680  [ D665D594B7E11133D29D726BDDC7A5B0 ] C:\Windows\system32\winsrv.dll
15:44:22.0574 4680  [ D665D594B7E11133D29D726BDDC7A5B0 ] C:\Windows\system32\winsrv.dll
15:44:22.0605 4680  [ 934E0B7D77FF78C18D9F8891221B6DE3 ] C:\Windows\system32\services.exe
15:44:22.0605 4680  [Global] - ok
15:44:22.0605 4680  ================ Scan MBR ==================================
15:44:22.0621 4680  [ 588AE8F0C685C02BA11F30D9CD7E61A0 ] \Device\Harddisk1\DR1
15:44:24.0992 4680  \Device\Harddisk1\DR1 - ok
15:44:25.0008 4680  [ 5C616939100B85E558DA92B899A0FC36 ] \Device\Harddisk0\DR0
15:44:25.0429 4680  \Device\Harddisk0\DR0 - ok
15:44:25.0429 4680  [ 8F558EB6672622401DA993E1E865C861 ] \Device\Harddisk2\DR2
15:44:28.0159 4680  \Device\Harddisk2\DR2 - ok
15:44:28.0159 4680  ================ Scan VBR ==================================
15:44:28.0175 4680  [ 48876511941CB35567EB7C07D35D1F03 ] \Device\Harddisk1\DR1\Partition1
15:44:28.0175 4680  \Device\Harddisk1\DR1\Partition1 - ok
15:44:28.0221 4680  [ 5D350AE096185B67C4B8FC58DC584316 ] \Device\Harddisk1\DR1\Partition2
15:44:28.0268 4680  \Device\Harddisk1\DR1\Partition2 - ok
15:44:28.0268 4680  [ 2547A837D6726F89D2840A2E24A94B29 ] \Device\Harddisk0\DR0\Partition1
15:44:28.0268 4680  \Device\Harddisk0\DR0\Partition1 - ok
15:44:28.0268 4680  [ A024D63F01A1F8DD27C97CAA3D4C565F ] \Device\Harddisk2\DR2\Partition1
15:44:28.0268 4680  \Device\Harddisk2\DR2\Partition1 - ok
15:44:28.0268 4680  ============================================================
15:44:28.0268 4680  Scan finished
15:44:28.0268 4680  ============================================================
15:44:28.0284 3460  Detected object count: 5
15:44:28.0284 3460  Actual detected object count: 5
15:44:54.0242 3460  BrYNSvc ( UnsignedFile.Multi.Generic ) - skipped by user
15:44:54.0242 3460  BrYNSvc ( UnsignedFile.Multi.Generic ) - User select action: Skip 
15:44:54.0242 3460  DpHost ( UnsignedFile.Multi.Generic ) - skipped by user
15:44:54.0242 3460  DpHost ( UnsignedFile.Multi.Generic ) - User select action: Skip 
15:44:54.0242 3460  HP Health Check Service ( UnsignedFile.Multi.Generic ) - skipped by user
15:44:54.0242 3460  HP Health Check Service ( UnsignedFile.Multi.Generic ) - User select action: Skip 
15:44:54.0242 3460  IDriverT ( UnsignedFile.Multi.Generic ) - skipped by user
15:44:54.0242 3460  IDriverT ( UnsignedFile.Multi.Generic ) - User select action: Skip 
15:44:54.0258 3460  RichVideo ( UnsignedFile.Multi.Generic ) - skipped by user
15:44:54.0258 3460  RichVideo ( UnsignedFile.Multi.Generic ) - User select action: Skip
         

Rechner läuft jetzt ohne Schwierigkeiten im Normalmodus.

Was muss ich noch machen ?

Combofix:
Scan mit Combofix

WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link

• WICHTIG: Speichere Combofix auf deinem Desktop.
• Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.
• Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.
• Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!
• Wenn Combofix fertig ist, wird es ein Logfile erstellen.
• Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).

Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten

Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.

starte den Rechner einfach neu. Dies sollte das Problem beheben.

Hallo,

combofix hat nicht gemeckert. Zwischendurch wurde neu gebootet dabei gab es keine Probleme.

Hier das Log

ComboFix 13-05-07.02 - Yvonne 07.05.2013  16:16:28.1.4 - x64
Microsoft® Windows Vista™ Home Premium   6.0.6002.2.1252.49.1031.18.4062.2037 [GMT 2:00]
ausgeführt von:: c:\users\Yvonne\Desktop\ComboFix.exe
AV: Avira Desktop *Disabled/Updated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
SP: Avira Desktop *Disabled/Updated* {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
.
(((((((((((((((((((((((((((((((((((((((   Treiber/Dienste   )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Service_usnjsvc
.
.
(((((((((((((((((((((((   Dateien erstellt von 2013-04-07 bis 2013-05-07  ))))))))))))))))))))))))))))))
.
.
2013-05-07 13:30 . 2013-05-07 13:30	--------	d-----w-	C:\_OTL
2013-05-07 13:26 . 2013-04-10 03:46	9317456	----a-w-	c:\programdata\Microsoft\Windows Defender\Definition Updates\{01F97DD1-8C6F-43D4-9468-54F3D8E85C60}\mpengine.dll
2013-05-03 06:58 . 2013-03-03 19:13	1513320	----a-w-	c:\windows\system32\drivers\ntfs.sys
2013-04-15 09:58 . 2013-03-11 13:33	4691304	----a-w-	c:\windows\system32\ntoskrnl.exe
2013-04-15 09:58 . 2013-03-09 04:16	85504	----a-w-	c:\windows\system32\csrsrv.dll
2013-04-15 09:58 . 2013-03-09 01:48	75264	----a-w-	c:\windows\system32\smss.exe
2013-04-15 09:58 . 2013-03-05 01:57	2774016	----a-w-	c:\windows\system32\win32k.sys
2013-04-15 09:58 . 2013-03-08 04:18	451072	----a-w-	c:\windows\system32\winsrv.dll
2013-04-15 09:58 . 2013-03-08 04:17	2425344	----a-w-	c:\windows\system32\mstscax.dll
2013-04-15 09:58 . 2013-03-08 03:52	2067968	----a-w-	c:\windows\SysWow64\mstscax.dll
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-05-02 00:06 . 2010-02-20 17:23	278800	------w-	c:\windows\system32\MpSigStub.exe
2013-04-17 09:01 . 2006-11-02 12:35	72702784	----a-w-	c:\windows\system32\mrt.exe
2013-03-22 10:28 . 2012-07-31 15:25	693976	----a-w-	c:\windows\SysWow64\FlashPlayerApp.exe
2013-03-22 10:28 . 2011-07-18 17:40	73432	----a-w-	c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-03-22 10:27 . 2013-03-22 10:27	16486616	----a-w-	c:\windows\SysWow64\FlashPlayerInstaller.exe
2013-03-10 07:58 . 2013-03-10 07:59	95648	----a-w-	c:\windows\SysWow64\WindowsAccessBridge-32.dll
2013-03-10 07:58 . 2012-07-29 07:16	861088	----a-w-	c:\windows\SysWow64\npdeployJava1.dll
2013-03-10 07:58 . 2011-07-18 15:25	782240	----a-w-	c:\windows\SysWow64\deployJava1.dll
2013-02-18 07:22 . 2013-02-18 07:22	31080	----a-w-	c:\windows\system32\nvhdap64.dll
2013-02-18 07:22 . 2013-02-18 07:22	1472360	----a-w-	c:\windows\system32\nvhdagenco6420103.dll
2013-02-18 07:22 . 2013-02-18 07:22	72552	----a-w-	c:\windows\system32\nvapo64v.dll
2013-02-18 07:22 . 2013-02-18 07:22	189288	----a-w-	c:\windows\system32\drivers\nvhda64v.sys
2013-02-12 02:18 . 2013-03-21 12:22	19456	----a-w-	c:\windows\system32\drivers\usb8023.sys
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{00000000-6E41-4FD3-8538-502F5495E5FC}"= "c:\program files (x86)\Ask.com\GenericAskToolbar.dll" [2012-05-04 1519272]
.
[HKEY_CLASSES_ROOT\clsid\{00000000-6e41-4fd3-8538-502f5495e5fc}]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
2012-05-04 13:43	1519272	----a-w-	c:\program files (x86)\Ask.com\GenericAskToolbar.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar]
"{D4027C7F-154A-4066-A1AD-4243D8127440}"= "c:\program files (x86)\Ask.com\GenericAskToolbar.dll" [2012-05-04 1519272]
.
[HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1]
[HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd]
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-21 138240]
"Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2008-04-30 22058792]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"DVDAgent"="c:\program files (x86)\Hewlett-Packard\Media\DVD\DVDAgent.exe" [2008-11-28 1148200]
"TSMAgent"="c:\program files (x86)\Hewlett-Packard\TouchSmart\Media\TSMAgent.exe" [2008-12-25 1316136]
"CLMLServer for HP TouchSmart"="c:\program files (x86)\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe" [2008-12-25 189736]
"TVAgent"="c:\program files (x86)\Hewlett-Packard\Media\TV\TVAgent.exe" [2009-01-21 210216]
"UCam_Menu"="c:\program files (x86)\Hewlett-Packard\Media\Webcam\MUITransfer\MUIStartMenu.exe" [2008-11-14 218408]
"UpdateLBPShortCut"="c:\program files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe" [2008-06-13 210216]
"UpdatePSTShortCut"="c:\program files (x86)\CyberLink\DVD Suite\MUITransfer\MUIStartMenu.exe" [2008-11-26 210216]
"QlbCtrl.exe"="c:\program files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe" [2008-08-01 202032]
"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2008-06-12 34672]
"UpdateP2GoShortCut"="c:\program files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe" [2008-10-30 210216]
"UpdatePDIRShortCut"="c:\program files (x86)\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe" [2008-06-13 210216]
"HP Health Check Scheduler"="c:\program files (x86)\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe" [2008-10-09 75008]
"hpWirelessAssistant"="c:\program files (x86)\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe" [2008-04-15 488752]
"DpAgent"="c:\program files (x86)\DigitalPersona\Bin\dpagent.exe" [2009-12-01 842816]
"HP Software Update"="c:\program files (x86)\Hp\HP Software Update\HPWuSchd2.exe" [2011-05-10 49208]
"ApnUpdater"="c:\program files (x86)\Ask.com\Updater\Updater.exe" [2012-05-04 1561768]
"avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2012-07-18 348664]
"ControlCenter3"="c:\program files (x86)\Brother\ControlCenter3\brctrcen.exe" [2008-12-24 114688]
"BrStsMon00"="c:\program files (x86)\Browny02\Brother\BrStMonW.exe" [2010-02-09 2621440]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2012-07-03 252848]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
BTTray.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2008-6-19 994856]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]
@="Service"
.
S2 AESTFilters;Andrea ST Filters Service;c:\windows\System32\DriverStore\FileRepository\stwrt64.inf_6ef279c8\AESTSr64.exe [2009-03-02 89600]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*NewlyCreated* - WS2IFSL
.
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Svchost  - NetSvcs
Themes
ezSharedSvc
.
Inhalt des "geplante Tasks" Ordners
.
2013-05-07 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-07-31 12:21]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SysTrayApp"="c:\program files\IDT\WDM\sttray64.exe" [2009-06-03 442368]
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
mStart Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=de_de&c=91&bd=Pavilion&pf=cnnb
mDefault_Page_URL = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=de_de&c=91&bd=Pavilion&pf=cnnb
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: Bild an &Bluetooth-Gerät senden... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Seite an &Bluetooth-Gerät senden... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
TCP: DhcpNameServer = 192.168.160.1
FF - ProfilePath - c:\users\Yvonne\AppData\Roaming\Mozilla\Firefox\Profiles\g02mn3sg.default\
FF - prefs.js: browser.search.selectedEngine - Ask.com
FF - prefs.js: browser.startup.homepage - hxxp://www.google.de/
FF - prefs.js: keyword.URL - hxxp://websearch.ask.com/redirect?client=ff&src=kw&tb=ORJ&o=&locale=&apn_uid=3A9EB920-47B5-4982-AE4E-6B26E98992A5&apn_ptnrs=&apn_sauid=E3D82F8A-C253-4AFB-B0B8-0A300338AADA&apn_dtid=OSJ000&&q=
FF - prefs.js: network.proxy.type - 0
FF - ExtSQL: !HIDDEN! 2011-07-18 17:47; otis@digitalpersona.com; c:\program files (x86)\DigitalPersona\Bin\FirefoxExt
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Wow6432Node-HKLM-Run-<NO NAME> - (no file)
SafeBoot-WudfPf
SafeBoot-WudfRd
HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe
HKLM-Run-SmartMenu - c:\program files (x86)\Hewlett-Packard\HP MediaSmart\SmartMenu.exe
AddRemove-AVerMedia A309 (MiniCard, DVB-T) - c:\program files (x86)\AVerMedia\AVerMedia A309 (MiniCard
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Norton Internet Security]
"ImagePath"="\"c:\program files (x86)\Norton Internet Security\Engine\16.0.0.125\ccSvcHst.exe\" /s \"Norton Internet Security\" /m \"c:\program files (x86)\Norton Internet Security\Engine\16.0.0.125\diMaster.dll\" /prefetch:1"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\{55662437-DA8C-40c0-AADA-2C816A897A49}]
"ImagePath"="\??\c:\program files (x86)\Hewlett-Packard\Media\DVD\000.fcl"
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_6_602_180_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_6_602_180_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_6_602_180_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_6_602_180_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_6_602_180.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_6_602_180.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_6_602_180.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_6_602_180.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{D27CDB6B-AE6D-11CF-96B8-444553540000}]
@Denied: (A 2) (Everyone)
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{D27CDB6B-AE6D-11CF-96B8-444553540000}\1.0]
@="Shockwave Flash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{FAB3E735-69C7-453B-A446-B6823C6DF1C9}]
@Denied: (A 2) (Everyone)
@=""
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{FAB3E735-69C7-453B-A446-B6823C6DF1C9}\1.0]
@="FlashBroker"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes]
"SymbolicLinkValue"=hex(6):5c,00,52,00,45,00,47,00,49,00,53,00,54,00,52,00,59,
   00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,4f,00,46,00,\
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\program files (x86)\DigitalPersona\Bin\DpHostW.exe
c:\program files (x86)\Avira\AntiVir Desktop\sched.exe
c:\program files (x86)\Avira\AntiVir Desktop\avguard.exe
c:\program files (x86)\SMINST\BLService.exe
c:\program files (x86)\CyberLink\Shared files\RichVideo.exe
c:\program files (x86)\Hewlett-Packard\Media\TV\Kernel\TV\TVCapSvc.exe
c:\program files (x86)\Hewlett-Packard\Media\TV\Kernel\TV\TVSched.exe
c:\program files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
c:\program files (x86)\Brother\ControlCenter3\brccMCtl.exe
c:\program files (x86)\Hewlett-Packard\HP wireless Assistant\WiFiMsg.EXE
c:\program files (x86)\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe
c:\program files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe
c:\program files (x86)\Skype\Plugin Manager\skypePM.exe
c:\program files (x86)\Hewlett-Packard\Shared\HpqToaster.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2013-05-07  16:48:50 - PC wurde neu gestartet
ComboFix-quarantined-files.txt  2013-05-07 14:48
.
Vor Suchlauf: 9 Verzeichnis(se), 211.375.292.416 Bytes frei
Nach Suchlauf: 15 Verzeichnis(se), 210.761.240.576 Bytes frei
.
- - End Of File - - 30AB52FBAF63ACA2EFFB121F4A1EDC83
         

Ich warte auf weiter Anweisungen.

hi
malwarebytes:
Downloade Dir bitte Malwarebytes

• Installiere
  das Programm in den vorgegebenen Pfad.
  Vista und Win7 User mit Rechtsklick "als Administrator starten"
• Starte Malwarebytes, klicke auf Aktualisierung --> Suche
  nach Aktualisierung
• Wenn das Update beendet wurde, aktiviere vollständiger Scan durchführen und drücke auf Scannen.
• Wenn der Scan beendet
  ist, klicke auf Ergebnisse anzeigen.
• Versichere Dich, dass alle Funde markiert sind und drücke Entferne Auswahl.
• Poste
  das Logfile, welches sich in Notepad öffnet, hier in den Thread.
• Nachträglich kannst du den Bericht unter "Log Dateien" finden.

Hallo,

hier das malewarebytes log

 Malwarebytes Anti-Malware  (Test) 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2013.05.07.05

Windows Vista Service Pack 2 x64 NTFS
Internet Explorer 9.0.8112.16421
Yvonne :: YVONNE-PC [Administrator]

Schutz: Aktiviert

07.05.2013 17:45:51
mbam-log-2013-05-07 (17-45-51).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|E:\|)
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 394162
Laufzeit: 56 Minute(n), 16 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 2
C:\_OTL\MovedFiles.zip (Trojan.FakeAlert) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\_OTL\MovedFiles\05072013_151800\C_Users\Yvonne\AppData\Roaming\skype.dat (Trojan.FakeAlert) -> Erfolgreich gelöscht und in Quarantäne gestellt.

(Ende)
         

wie geht es weiter?

du musst nicht immer fragen, wie es weiter geht, ich werds dir auch so sagen...
lade den CCleaner standard:
CCleaner Download - CCleaner 3.21.1767
falls der CCleaner bereits instaliert ist, überspringen.
instalieren, öffnen, extras, liste der instalierten programme, als txt speichern. öffnen.
hinter, jedes von dir benötigte programm, schreibe notwendig.
hinter, jedes, von dir nicht benötigte, unnötig.
hinter, dir unbekannte, unbekannt.
liste posten.

ok fertig

ich habe sämtliche hp Programme ignoriert da sie zum Notebook gehören.
Auch habe ich die Programme, die ich jetzt im laufe der desinfektion installiert habe nicht bezeichnet.

Adobe Flash Player 11 ActiveX	Adobe Systems Incorporated	20.03.2013		11.6.602.180                           	notwendig 
Adobe Flash Player 11 Plugin	Adobe Systems Incorporated	21.03.2013		11.6.602.180				notwendig
Adobe Reader X (10.1.4) - Deutsch	Adobe Systems Incorporated	07.05.2013	121MB	10.1.4				notwendig
AVerMedia A309 (MiniCard, DVB-T) 1.0.64.46	AVerMedia TECHNOLOGIES, Inc.	20.07.2009	1,16MB	1.0.64.46		notwendig
Avira Free Antivirus	Avira	18.11.2012	82,4MB	12.1.9.1236								notwendig
Brother MFL-Pro Suite MFC-J220	Brother Industries, Ltd.	24.01.2013	5,32MB	1.0.3.0					notwendig
CCleaner	Piriform	23.04.2013	11,3MB	4.01
Compatibility Pack für 2007 Office System	Microsoft Corporation	09.02.2009	63,1MB	12.0.4518.1014			unbekannt
CyberLink DVD Suite	CyberLink Corp.	09.02.2009	16,6MB	6.0.2326							notwendig
DigitalPersona Personal 4.11	DigitalPersona, Inc.	18.07.2011	79,4MB	4.11.3826
HP Active Support Library	Hewlett-Packard	09.02.2009	20,5MB	3.1.9.1
HP Customer Experience Enhancements	Hewlett-Packard	09.02.2009	0,98MB	5.7.0.2664
HP Help and Support	Hewlett-Packard Company	09.02.2009	30,6MB	2.1.3.0
HP Integrated Module with Bluetooth wireless technology 6.0.1.6204	HP	20.07.2009	53,2MB	6.0.1.6204
HP MediaSmart DVD	Hewlett-Packard	20.07.2009	85,2MB	2.1.2328
HP MediaSmart Music/Photo/Video	Hewlett-Packard	20.07.2009	222MB	2.1.2425
HP MediaSmart SmartMenu	Hewlett-Packard	20.07.2009	11,8MB	2.1.7
HP MediaSmart TV	Hewlett-Packard	20.07.2009	90,1MB	2.1.1219
HP MediaSmart Webcam	Hewlett-Packard	20.07.2009	73,6MB	2.1.1208
HP Quick Launch Buttons 6.40 H2	Hewlett-Packard	09.02.2009	18,5MB	6.40 H2
HP Total Care Setup	Hewlett-Packard Company	09.02.2009		1.1.2413.2876
HP Update	Hewlett-Packard	05.04.2012	3,98MB	5.003.001.001
HP User Guides 0116	Hewlett-Packard	09.02.2009	132MB	1.03.0002
HP Wireless Assistant	Hewlett-Packard	09.02.2009	4,22MB	3.00 K2
IDT Audio	IDT	20.07.2009	32,0MB	1.0.6047.5									unbekannt
Java 7 Update 17	Oracle	09.03.2013	129MB	7.0.170									notwendig
Java(TM) 6 Update 7	Sun Microsystems, Inc.	09.02.2009	171MB	1.6.0.70						notwendig
JMicron JMB38X Flash Media Controller Driver	JMicron Technology Corp.	20.07.2009		1.00.20.07		unbekannt
LabelPrint	CyberLink Corp.	09.02.2009	241MB	2.5.1118								unbekannt
Malwarebytes Anti-Malware Version 1.75.0.1300	Malwarebytes Corporation	07.05.2013	13,4MB	1.75.0.1300		
Microsoft .NET Framework 3.5 Language Pack SP1 - DEU	Microsoft Corporation	18.07.2011	42,1MB				unbekannt
Microsoft .NET Framework 3.5 SP1	Microsoft Corporation	19.02.2010	32,4MB						unbekannt
Microsoft .NET Framework 4 Client Profile	Microsoft Corporation	21.07.2011	189MB	4.0.30319			unbekannt
Microsoft .NET Framework 4 Client Profile DEU Language Pack	Microsoft Corporation	21.07.2011	46,4MB	4.0.30319	unbekannt
Microsoft Office PowerPoint Viewer 2007 (German)	Microsoft Corporation	09.02.2009	87,1MB	12.0.4518.1014		benötigt
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729	Microsoft Corporation	09.02.2009	782KB	9.0.30729	unbekannt
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148	Microsoft Corporation	18.07.2011	782KB	9.0.30729.4148	unbekannt
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17	Microsoft Corporation	19.02.2010	590KB	9.0.30729	unbekannt
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148	Microsoft Corporation	18.07.2011	590KB	9.0.30729.4148	unbekannt
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219	Microsoft Corporation	05.04.2012	11,1MB	10.0.40219	unbekannt
Microsoft Works	Microsoft Corporation	09.02.2009	378MB	9.7.0621							benötigt
Mozilla Firefox 11.0 (x86 de)	Mozilla	05.04.2012	35,9MB	11.0								benötigt
Mozilla Thunderbird 11.0.1 (x86 de)	Mozilla	05.04.2012	37,6MB	11.0.1							benötigt
MSXML 4.0 SP2 (KB954430)	Microsoft Corporation	19.02.2010	1,27MB	4.20.9870.0					unbekannt
MSXML 4.0 SP2 (KB973688)	Microsoft Corporation	19.02.2010	1,33MB	4.20.9876.0					unbekannt
muvee Reveal	muvee Technologies Pte Ltd	20.07.2009	154MB	7.0.35.7660						unbekannt
My HP Games	WildTangent	20.07.2009	204MB	1.0.0.62								unbekannt
NVIDIA Drivers	NVIDIA Corporation	21.07.2011	2,81GB									benötigt
NVIDIA HD-Audiotreiber 1.3.18.0	NVIDIA Corporation	07.05.2013	3,49MB	1.3.18.0					benötigt
OpenOffice.org 3.3	OpenOffice.org	18.07.2011	408MB	3.3.9567							benötigt
PhotoNow!	CyberLink Corp.	20.07.2009	34,8MB	1.1.5615								benötigt
Power2Go	CyberLink Corp.	09.02.2009	178MB	6.0.2325								benötigt
PowerDirector	CyberLink Corp.	09.02.2009	529MB	7.0.2317								benötigt
ProtectSmart Hard Drive Protection	Hewlett-Packard	20.07.2009		3.10.1.7					unbekannt
Realtek 8169 8168 8101E 8102E Ethernet Driver	Realtek	20.07.2009	1,58MB	1.00.0000					benötigt
Skype™ 3.8	Skype Technologies S.A.	18.07.2011	30,7MB	3.8.115								benötigt
SPORE Creature Creator Trial Edition	Electronic Arts	20.07.2009	1,85MB	1.00.0000					unbekannt
Synaptics Pointing Device Driver	Synaptics Incorporated	07.05.2013	14,9MB	15.3.29.0				unbekannt
Validity Sensors software	Validity Sensors, Inc.	20.07.2009	9,44MB	2.8.109						unbekannt
Windows Live Messenger	Microsoft Corporation	09.02.2009	29,0MB	8.1.0178.00						unbekannt
Windows-Treiberpaket - ENE (enecir) HIDClass  (09/04/2008 2.6.0.0)	ENE	20.07.2009		09/04/2008 2.6.0.0	unbekannt
         

deinstaliere:
Adobe Flash Player alle
Adobe - Adobe Flash Player installieren
neueste version laden, instalieren.
adobe reader:
Adobe - Adobe Reader herunterladen - Alle Versionen
haken bei mcafee security scan raus nehmen
bitte auch mal den adobe reader wie folgt konfigurieren:
adobe reader öffnen, bearbeiten, voreinstellungen.
allgemein:
nur zertifizierte zusatz module verwenden, anhaken.
Sicherheit (erweitert)
Erweiterte Sicherheit anhaken
und alle Dateien auswählen.
internet:
hier sollte alles deaktiviert werden, es ist sehr unsicher pdfs automatisch zu öffnen, zu downloaden etc.
es ist immer besser diese direkt abzuspeichern da man nur so die kontrolle hat was auf dem pc vor geht.
bei javascript den haken bei java script verwenden raus nehmen
bei updater, automatisch instalieren wählen.
übernehmen /ok

deinstaliere:
Java : alle
downloade Java jre:
Java-Downloads für alle Betriebssysteme
klicke:
Download der Java-Software für Windows Offline
laden, und instalieren
Thunderbird ? Software für den einfachen Umgang mit E-Mails
thunderbird updaten
firefox updaten:
Webbrowser Firefox auf Deutsch | Schneller, sicherer und anpassbar
Skype™
Skype auf Ihren Computer herunterladen ? Mac, Windows, Linux*?*Skype
ebenfalls updaten

Öffne CCleaner, analysieren, starten, PC neustarten.
Downloade Dir bitte AdwCleaner auf deinen Desktop.

• Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
• Starte die AdwCleaner.exe mit einem Doppelklick.
• Stimme den Nutzungsbedingungen zu.
• Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
  • "Tracing" Schlüssel löschen
  • Winsock Einstellungen zurücksetzen
  • Proxy Einstellungen zurücksetzen
  • Internet Explorer Richtlinien zurücksetzen
  • Chrome Richtlinien zurücksetzen
  • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
• Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
• Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
• Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
• Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

So hier:

# AdwCleaner v2.300 - Datei am 07/05/2013 um 20:37:11 erstellt
# Aktualisiert am 28/04/2013 von Xplode
# Betriebssystem : Windows (TM) Vista Home Premium Service Pack 2 (64 bits)
# Benutzer : Yvonne - YVONNE-PC
# Bootmodus : Normal
# Ausgeführt unter : C:\Users\Yvonne\Desktop\adwcleaner.exe
# Option [Löschen]


**** [Dienste] ****


***** [Dateien / Ordner] *****

Datei Gelöscht : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\eBay.lnk
Datei Gelöscht : C:\Users\Yvonne\AppData\Roaming\Mozilla\Firefox\Profiles\g02mn3sg.default\searchplugins\Askcom.xml
Gelöscht mit Neustart : C:\ProgramData\Ask

***** [Registrierungsdatenbank] *****

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{79A765E1-C399-405B-85AF-466F52E918B0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\GenericAskToolbar.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{761F6A83-F007-49E4-8EAC-CDB6808EF06F}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{76C45B18-A29E-43EA-AAF8-AF55C2E1AE17}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{96EF404C-24C7-43D0-9096-4CCC8BB7CCAC}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{97720195-206A-42AE-8E65-260B9BA5589F}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{97D69524-BB57-4185-9C7F-5F05593B771A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{986F7A5A-9676-47E1-8642-F41F8C3FCF82}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{B18788A4-92BD-440E-A4D1-380C36531119}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}

***** [Internet Browser] *****

-\\ Internet Explorer v9.0.8112.16476

[OK] Die Registrierungsdatenbank ist sauber.

-\\ Mozilla Firefox v20.0.1 (de)

Datei : C:\Users\Yvonne\AppData\Roaming\Mozilla\Firefox\Profiles\g02mn3sg.default\prefs.js
         

Hi,
HitmanPro - Download - Filepony
lade bitte Hitmanpro.
Doppelklicken, Scan, nichts löschen.
Auf weiter, Log als xml exportieren und posten, bzw packen und anhängen

Hallo

hier der log

	
	
HitmanPro 3.7.3.194
www.hitmanpro.com

   Computer name . . . . : YVONNE-PC
   Windows . . . . . . . : 6.0.2.6002.X64/4
   User name . . . . . . : Yvonne-PC\Yvonne
   UAC . . . . . . . . . : Enabled
   License . . . . . . . : Free

   Scan date . . . . . . : 2013-05-07 21:55:34
   Scan mode . . . . . . : Normal
   Scan duration . . . . : 5m 27s
   Disk access mode  . . : Direct disk access (SRB)
   Cloud . . . . . . . . : Internet
   Reboot  . . . . . . . : No

   Threats . . . . . . . : 0
   Traces  . . . . . . . : 35

   Objects scanned . . . : 2.962.706
   Files scanned . . . . : 10.566
   Remnants scanned  . . : 268.789 files / 2.683.351 keys

Cookies _____________________________________________________________________

   C:\Users\Yvonne\AppData\Roaming\Microsoft\Windows\Cookies\1EECDAPF.txt
   C:\Users\Yvonne\AppData\Roaming\Microsoft\Windows\Cookies\DYRTUSQV.txt
   C:\Users\Yvonne\AppData\Roaming\Microsoft\Windows\Cookies\HSI5SUVW.txt
   C:\Users\Yvonne\AppData\Roaming\Microsoft\Windows\Cookies\MCOQQZUL.txt
   C:\Users\Yvonne\AppData\Roaming\Microsoft\Windows\Cookies\N2J4YY0R.txt
   C:\Users\Yvonne\AppData\Roaming\Microsoft\Windows\Cookies\UDQE3A7X.txt
   C:\Users\Yvonne\AppData\Roaming\Mozilla\Firefox\Profiles\g02mn3sg.default\cookies.sqlite:2o7.net
   C:\Users\Yvonne\AppData\Roaming\Mozilla\Firefox\Profiles\g02mn3sg.default\cookies.sqlite:ad.360yield.com
   C:\Users\Yvonne\AppData\Roaming\Mozilla\Firefox\Profiles\g02mn3sg.default\cookies.sqlite:ad.ad-srv.net
   C:\Users\Yvonne\AppData\Roaming\Mozilla\Firefox\Profiles\g02mn3sg.default\cookies.sqlite:ad.yieldmanager.com
   C:\Users\Yvonne\AppData\Roaming\Mozilla\Firefox\Profiles\g02mn3sg.default\cookies.sqlite:ad.zanox.com
   C:\Users\Yvonne\AppData\Roaming\Mozilla\Firefox\Profiles\g02mn3sg.default\cookies.sqlite:adbrite.com
   C:\Users\Yvonne\AppData\Roaming\Mozilla\Firefox\Profiles\g02mn3sg.default\cookies.sqlite:ads.creative-serving.com
   C:\Users\Yvonne\AppData\Roaming\Mozilla\Firefox\Profiles\g02mn3sg.default\cookies.sqlite:adtech.de
   C:\Users\Yvonne\AppData\Roaming\Mozilla\Firefox\Profiles\g02mn3sg.default\cookies.sqlite:advertising.com
   C:\Users\Yvonne\AppData\Roaming\Mozilla\Firefox\Profiles\g02mn3sg.default\cookies.sqlite:apmebf.com
   C:\Users\Yvonne\AppData\Roaming\Mozilla\Firefox\Profiles\g02mn3sg.default\cookies.sqlite:atdmt.com
   C:\Users\Yvonne\AppData\Roaming\Mozilla\Firefox\Profiles\g02mn3sg.default\cookies.sqlite:bs.serving-sys.com
   C:\Users\Yvonne\AppData\Roaming\Mozilla\Firefox\Profiles\g02mn3sg.default\cookies.sqlite:casalemedia.com
   C:\Users\Yvonne\AppData\Roaming\Mozilla\Firefox\Profiles\g02mn3sg.default\cookies.sqlite:de.at.atwola.com
   C:\Users\Yvonne\AppData\Roaming\Mozilla\Firefox\Profiles\g02mn3sg.default\cookies.sqlite:de.sitestat.com
   C:\Users\Yvonne\AppData\Roaming\Mozilla\Firefox\Profiles\g02mn3sg.default\cookies.sqlite:deutsche-pornos.com
   C:\Users\Yvonne\AppData\Roaming\Mozilla\Firefox\Profiles\g02mn3sg.default\cookies.sqlite:doubleclick.net
   C:\Users\Yvonne\AppData\Roaming\Mozilla\Firefox\Profiles\g02mn3sg.default\cookies.sqlite:emjcd.com
   C:\Users\Yvonne\AppData\Roaming\Mozilla\Firefox\Profiles\g02mn3sg.default\cookies.sqlite:invitemedia.com
   C:\Users\Yvonne\AppData\Roaming\Mozilla\Firefox\Profiles\g02mn3sg.default\cookies.sqlite:mediaplex.com
   C:\Users\Yvonne\AppData\Roaming\Mozilla\Firefox\Profiles\g02mn3sg.default\cookies.sqlite:revsci.net
   C:\Users\Yvonne\AppData\Roaming\Mozilla\Firefox\Profiles\g02mn3sg.default\cookies.sqlite:serving-sys.com
   C:\Users\Yvonne\AppData\Roaming\Mozilla\Firefox\Profiles\g02mn3sg.default\cookies.sqlite:smartadserver.com
   C:\Users\Yvonne\AppData\Roaming\Mozilla\Firefox\Profiles\g02mn3sg.default\cookies.sqlite:statse.webtrendslive.com
   C:\Users\Yvonne\AppData\Roaming\Mozilla\Firefox\Profiles\g02mn3sg.default\cookies.sqlite:track.adform.net
   C:\Users\Yvonne\AppData\Roaming\Mozilla\Firefox\Profiles\g02mn3sg.default\cookies.sqlite:tradedoubler.com
   C:\Users\Yvonne\AppData\Roaming\Mozilla\Firefox\Profiles\g02mn3sg.default\cookies.sqlite:ww251.smartadserver.com
   C:\Users\Yvonne\AppData\Roaming\Mozilla\Firefox\Profiles\g02mn3sg.default\cookies.sqlite:www.emjcd.com
   C:\Users\Yvonne\AppData\Roaming\Mozilla\Firefox\Profiles\g02mn3sg.default\cookies.sqlite:www.googleadservices.com
         
 
 

habe aber den fehler gemacht danach auf "weiter" zu drücken und damit wurde gelöscht.

srry war mir nicht ersichtlich das ich mit "weiter" lösche