IExplorer öffnet bei Googlelinks falsche Seiten

Jak113 · 23.05.2013, 11:42

Hallo zusammen,

vor ein paar Wochen habe ich gemerkt, dass mich Google immer wieder (aber nicht immer) auf flasche Seiten schickt, bzw. der IExplorer falsche Seiten öffnet.
Ich habe daruf hin einen kompletten Systemscan mit Antivir und mit Malwarebytes gemacht.
Beide haben auch was gefunden

!
Die Funde habe ich gelöscht und in meiner Naivität gehofft das Problem sei gelöst.
Leider falsch gedacht - Problem besteht weiter!

Ich hoffe mir kann irgendjemand helfen!? Wäre wirklich sehr dankbar!!

MfG,
Jak

markusg · 23.05.2013, 11:44

Hi, poste alle bisherigen Avira und Malwarebytes Funde:
http://www.trojaner-board.de/125889-...en-posten.html

Jak113 · 23.05.2013, 11:55

Hallo,

auf die Gefahr hin Euch zuzumüllen - hier alle Antivir Berichte (in dem Zeitraum habe ich leider immer wieder was gefunden. jetzt aber nicht mehr.)

Danke für die Hilfe!!
(.. und ich weiß, ich hätte mich wahrscheinlich früher melden sollen.)

markusg · 23.05.2013, 12:04

nur um sicher zu gehen, waren das alle logs von malwarebytes, bzw alle mit Funden?

otl fix

Fixen mit OTL

Starte bitte die OTL.exe.
Kopiere nun den Inhalt aus der Codebox in die Textbox.

Code:

ATTFilter

:OTL
[2013.04.20 16:39:40 | 000,098,304 | RHS- | C] () -- E:\WINDOWS\System32\msafd7.dll
[2013.05.23 07:50:35 | 000,000,312 | ---- | M] () -- E:\WINDOWS\tasks\LQBPPCC.job
:files
:Commands
[emptytemp]

Solltest du deinen Benutzernamen z. B. durch "*****" unkenntlich gemacht haben, so füge an entsprechender Stelle deinen richtigen Benutzernamen ein. Andernfalls wird der Fix nicht funktionieren.
Schließe bitte nun alle Programme.
Klicke nun bitte auf den Fix Button.
OTL kann gegebenfalls einen Neustart verlangen. Bitte dies zulassen.
Nach dem Neustart findest Du ein Textdokument auf deinem Desktop.
( Auch zu finden unter C:\_OTL\MovedFiles\<Uhrzeit_Datum>.txt)
Kopiere nun den Inhalt hier in Deinen Thread

Hinweis: Die Datei bitte wie in der Anleitung zum UpChannel angegeben auch da hochladen. Bitte NICHT die ZIP-Datei hier als Anhang
in den Thread posten!

Drücke bitte die

+ E Taste.

Öffne dein Systemlaufwerk ( meistens C: )
Suche nun
folgenden Ordner: _OTL und öffne diesen.
Mache einen Rechtsklick auf den Ordner Movedfiles --> Senden an --> Zip-Komprimierter Ordner
Dies wird eine Movedfiles.zip Datei in _OTL erstellen
Lade diese bitte in unseren Uploadchannel
hoch. ( Durchsuchen --> C:\_OTL\Movedfiles.zip )

Teile mir mit ob der Upload problemlos geklappt hat. Danke im voraus

downloade get info:
http://markusg.trojaner-board.de/GetInfo.exe
doppelklicke die .exe
im selben ordner wird nun eine .txt erstellt:
summary-info.txt
diese doppelklicken und deren inhalt posten.

Jak113 · 23.05.2013, 12:09

Das waren nur die logs mit Funden!
Ich fixe dann mal.

So, gefixt:

All processes killed
========== OTL ==========
E:\WINDOWS\system32\msafd7.dll moved successfully.
E:\WINDOWS\tasks\LQBPPCC.job moved successfully.
========== FILES ==========
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: Jakob
->Temp folder emptied: 110499584 bytes
->Temporary Internet Files folder emptied: 17885818 bytes
->Java cache emptied: 699821924 bytes
->FireFox cache emptied: 2989109 bytes
->Google Chrome cache emptied: 6677473 bytes
->Flash cache emptied: 885 bytes

User: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 100562030 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 1339461 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 281881147 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 1.165,00 mb

OTL by OldTimer - Version 3.2.69.0 log created on 05232013_131220

Files\Folders moved on Reboot...

PendingFileRenameOperations files...

Registry entries deleted on Reboot...

Die Movedfiles habe ich jetzt hochgeladen.

System volume information: dwHighDateTime = 0x1ca0ead,dwLowDateTime = 0x3152da88
System32: dwHighDateTime = 0x1ca0d2f,dwLowDateTime = 0xa02decce
dwSerialNumber = 0x88311022

markusg · 23.05.2013, 14:10

sehr gut.
Downloade dir bitte

TDSSKiller.exe und speichere diese Datei auf dem Desktop

Starte die TDSSKiller.exe - Einstellen wie in der Anleitung zu TDSSKiller beschrieben.
Drücke Start Scan
Sollten infizierte Objekte gefunden werden, wähle keinesfalls Cure. Wähle Skip und klicke auf Continue.
TDSSKiller wird eine Logfile auf deinem Systemlaufwerk speichern (Meistens C:\)
Als Beispiel: C:\TDSSKiller.<Version_Datum_Uhrzeit>log.txt

Poste den Inhalt bitte in jedem Fall hier in deinen Thread.

Jak113 · 23.05.2013, 14:28

Erledigt: Hat nichts gefunden.
Hier der Log:

15:24:14.0296 2160 TDSS rootkit removing tool 2.8.16.0 Feb 11 2013 18:50:42
15:24:14.0656 2160 ============================================================
15:24:14.0656 2160 Current date / time: 2013/05/23 15:24:14.0656
15:24:14.0656 2160 SystemInfo:
15:24:14.0656 2160
15:24:14.0656 2160 OS Version: 5.1.2600 ServicePack: 3.0
15:24:14.0656 2160 Product type: Workstation
15:24:14.0656 2160 ComputerName: PC-ARBEITSZIMME
15:24:14.0656 2160 UserName: ***
15:24:14.0656 2160 Windows directory: E:\WINDOWS
15:24:14.0656 2160 System windows directory: E:\WINDOWS
15:24:14.0656 2160 Processor architecture: Intel x86
15:24:14.0656 2160 Number of processors: 4
15:24:14.0656 2160 Page size: 0x1000
15:24:14.0656 2160 Boot type: Normal boot
15:24:14.0656 2160 ============================================================
15:24:16.0156 2160 Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 (465.76 Gb), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000054
15:24:16.0625 2160 Drive \Device\Harddisk1\DR1 - Size: 0xE8E0DB6000 (931.51 Gb), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000054
15:24:16.0734 2160 ============================================================
15:24:16.0734 2160 \Device\Harddisk0\DR0:
15:24:16.0734 2160 MBR partitions:
15:24:16.0734 2160 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x61A7927
15:24:16.0750 2160 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x61A79A5, BlocksNum 0x9E5329F
15:24:16.0750 2160 \Device\Harddisk0\DR0\Partition3: MBR, Type 0x7, StartLBA 0xFFFAC44, BlocksNum 0x2A389FFD
15:24:16.0750 2160 \Device\Harddisk1\DR1:
15:24:16.0750 2160 MBR partitions:
15:24:16.0750 2160 \Device\Harddisk1\DR1\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x74705982
15:24:16.0750 2160 ============================================================
15:24:16.0765 2160 E: <-> \Device\Harddisk0\DR0\Partition1
15:24:16.0796 2160 F: <-> \Device\Harddisk0\DR0\Partition2
15:24:16.0828 2160 G: <-> \Device\Harddisk1\DR1\Partition1
15:24:16.0953 2160 C: <-> \Device\Harddisk0\DR0\Partition3
15:24:16.0953 2160 ============================================================
15:24:16.0953 2160 Initialize success
15:24:16.0953 2160 ============================================================
15:24:41.0296 1136 ============================================================
15:24:41.0296 1136 Scan started
15:24:41.0296 1136 Mode: Manual;
15:24:41.0296 1136 ============================================================
15:24:42.0203 1136 ================ Scan system memory ========================
15:24:42.0203 1136 System memory - ok
15:24:42.0203 1136 ================ Scan services =============================
15:24:42.0453 1136 Abiosdsk - ok
15:24:42.0453 1136 abp480n5 - ok
15:24:42.0515 1136 [ ADC420616C501B45D26C0FD3EF1E54E4 ] ACDaemon E:\Programme\Gemeinsame Dateien\ArcSoft\Connection Service\Bin\ACService.exe
15:24:42.0531 1136 ACDaemon - ok
15:24:42.0593 1136 [ E6F53D6C0DEA3D375362265E175CA638 ] acedrv11 E:\WINDOWS\system32\drivers\acedrv11.sys
15:24:42.0609 1136 acedrv11 - ok
15:24:42.0671 1136 [ AC407F1A62C3A300B4F2B5A9F1D55B2C ] ACPI E:\WINDOWS\system32\DRIVERS\ACPI.sys
15:24:42.0671 1136 ACPI - ok
15:24:42.0687 1136 [ 9E1CA3160DAFB159CA14F83B1E317F75 ] ACPIEC E:\WINDOWS\system32\drivers\ACPIEC.sys
15:24:42.0703 1136 ACPIEC - ok
15:24:42.0796 1136 [ F040037B149FD0F5A5044AE563390FA7 ] AdobeFlashPlayerUpdateSvc E:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
15:24:42.0875 1136 AdobeFlashPlayerUpdateSvc - ok
15:24:42.0875 1136 adpu160m - ok
15:24:42.0921 1136 [ 8BED39E3C35D6A489438B8141717A557 ] aec E:\WINDOWS\system32\drivers\aec.sys
15:24:42.0968 1136 aec - ok
15:24:43.0000 1136 [ 30BB1BDE595CA65FD5549462080D94E5 ] AegisP E:\WINDOWS\system32\DRIVERS\AegisP.sys
15:24:43.0000 1136 AegisP - ok
15:24:43.0062 1136 [ 1E44BC1E83D8FD2305F8D452DB109CF9 ] AFD E:\WINDOWS\System32\drivers\afd.sys
15:24:43.0109 1136 AFD - ok
15:24:43.0109 1136 Aha154x - ok
15:24:43.0109 1136 aic78u2 - ok
15:24:43.0109 1136 aic78xx - ok
15:24:43.0140 1136 [ 738D80CC01D7BC7584BE917B7F544394 ] Alerter E:\WINDOWS\system32\alrsvc.dll
15:24:43.0140 1136 Alerter - ok
15:24:43.0156 1136 [ 190CD73D4984F94D823F9444980513E5 ] ALG E:\WINDOWS\System32\alg.exe
15:24:43.0171 1136 ALG - ok
15:24:43.0171 1136 AliIde - ok
15:24:43.0171 1136 amsint - ok
15:24:43.0250 1136 [ D9A92E6DD41C5ADC045AE485026AA40C ] AntiVirSchedulerService E:\Programme\Avira\AntiVir Desktop\sched.exe
15:24:43.0328 1136 AntiVirSchedulerService - ok
15:24:43.0359 1136 [ 66A7A38F7C439153B758548375EB9E5E ] AntiVirService E:\Programme\Avira\AntiVir Desktop\avguard.exe
15:24:43.0375 1136 AntiVirService - ok
15:24:43.0375 1136 AppMgmt - ok
15:24:43.0375 1136 asc - ok
15:24:43.0375 1136 asc3350p - ok
15:24:43.0375 1136 asc3550 - ok
15:24:43.0453 1136 [ 0E5E4957549056E2BF2C49F4F6B601AD ] aspnet_state E:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
15:24:43.0500 1136 aspnet_state - ok
15:24:43.0515 1136 [ B153AFFAC761E7F5FCFA822B9C4E97BC ] AsyncMac E:\WINDOWS\system32\DRIVERS\asyncmac.sys
15:24:43.0515 1136 AsyncMac - ok
15:24:43.0562 1136 [ 9F3A2F5AA6875C72BF062C712CFA2674 ] atapi E:\WINDOWS\system32\DRIVERS\atapi.sys
15:24:43.0562 1136 atapi - ok
15:24:43.0562 1136 Atdisk - ok
15:24:43.0656 1136 [ F0D933B42CD0594048E4D5200AE9E417 ] atksgt E:\WINDOWS\system32\DRIVERS\atksgt.sys
15:24:43.0656 1136 atksgt - ok
15:24:43.0687 1136 [ 9916C1225104BA14794209CFA8012159 ] Atmarpc E:\WINDOWS\system32\DRIVERS\atmarpc.sys
15:24:43.0703 1136 Atmarpc - ok
15:24:43.0750 1136 [ 58ED0D5452DF7BE732193E7999C6B9A4 ] AudioSrv E:\WINDOWS\System32\audiosrv.dll
15:24:43.0750 1136 AudioSrv - ok
15:24:43.0765 1136 [ D9F724AA26C010A217C97606B160ED68 ] audstub E:\WINDOWS\system32\DRIVERS\audstub.sys
15:24:43.0765 1136 audstub - ok
15:24:43.0796 1136 [ 87425709A251386064C99B684BF96F72 ] avgntflt E:\WINDOWS\system32\DRIVERS\avgntflt.sys
15:24:43.0812 1136 avgntflt - ok
15:24:43.0859 1136 [ D50FBA68163BC498F2C136E0E5BA8E2F ] avipbb E:\WINDOWS\system32\DRIVERS\avipbb.sys
15:24:43.0859 1136 avipbb - ok
15:24:43.0890 1136 [ CB8741CD7B126499FED40C9B197F6AC5 ] avkmgr E:\WINDOWS\system32\DRIVERS\avkmgr.sys
15:24:43.0890 1136 avkmgr - ok
15:24:43.0921 1136 [ DA1F27D85E0D1525F6621372E7B685E9 ] Beep E:\WINDOWS\system32\drivers\Beep.sys
15:24:43.0921 1136 Beep - ok
15:24:44.0046 1136 [ D6F603772A789BB3228F310D650B8BD1 ] BITS E:\WINDOWS\System32\qmgr.dll
15:24:44.0156 1136 BITS - ok
15:24:44.0187 1136 [ D3FACB34FFF5DB91ADB70987838F8BA7 ] Brother XP spl Service E:\WINDOWS\System32\brsvc01a.exe
15:24:44.0187 1136 Brother XP spl Service - ok
15:24:44.0218 1136 [ B71549F23736ADF83A571061C47777FD ] Browser E:\WINDOWS\System32\browser.dll
15:24:44.0250 1136 Browser - ok
15:24:44.0265 1136 [ 92A964547B96D697E5E9ED43B4297F5A ] BrScnUsb E:\WINDOWS\system32\Drivers\BrScnUsb.sys
15:24:44.0281 1136 BrScnUsb - ok
15:24:44.0296 1136 [ 90A673FC8E12A79AFBED2576F6A7AAF9 ] cbidf2k E:\WINDOWS\system32\drivers\cbidf2k.sys
15:24:44.0296 1136 cbidf2k - ok
15:24:44.0328 1136 [ 0BE5AEF125BE881C4F854C554F2B025C ] CCDECODE E:\WINDOWS\system32\DRIVERS\CCDECODE.sys
15:24:44.0328 1136 CCDECODE - ok
15:24:44.0343 1136 cd20xrnt - ok
15:24:44.0359 1136 [ C1B486A7658353D33A10CC15211A873B ] Cdaudio E:\WINDOWS\system32\drivers\Cdaudio.sys
15:24:44.0359 1136 Cdaudio - ok
15:24:44.0406 1136 [ C885B02847F5D2FD45A24E219ED93B32 ] Cdfs E:\WINDOWS\system32\drivers\Cdfs.sys
15:24:44.0421 1136 Cdfs - ok
15:24:44.0437 1136 [ 1F4260CC5B42272D71F79E570A27A4FE ] Cdrom E:\WINDOWS\system32\DRIVERS\cdrom.sys
15:24:44.0468 1136 Cdrom - ok
15:24:44.0468 1136 Changer - ok
15:24:44.0484 1136 [ 28E3040D1F1CA2008CD6B29DFEBC9A5E ] cisvc E:\WINDOWS\System32\cisvc.exe
15:24:44.0484 1136 cisvc - ok
15:24:44.0515 1136 [ 778A30ED3C134EB7E406AFC407E9997D ] ClipSrv E:\WINDOWS\system32\clipsrv.exe
15:24:44.0531 1136 ClipSrv - ok
15:24:44.0562 1136 [ D87ACAED61E417BBA546CED5E7E36D9C ] clr_optimization_v2.0.50727_32 E:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
15:24:44.0640 1136 clr_optimization_v2.0.50727_32 - ok
15:24:44.0640 1136 CmdIde - ok
15:24:44.0640 1136 COMSysApp - ok
15:24:44.0656 1136 Cpqarray - ok
15:24:44.0671 1136 [ 611F824E5C703A5A899F84C5F1699E4D ] CryptSvc E:\WINDOWS\System32\cryptsvc.dll
15:24:44.0687 1136 CryptSvc - ok
15:24:44.0687 1136 dac2w2k - ok
15:24:44.0687 1136 dac960nt - ok
15:24:44.0812 1136 [ 3127AFBF2C1ED0AB14A1BBB7AAECB85B ] DcomLaunch E:\WINDOWS\system32\rpcss.dll
15:24:44.0812 1136 DcomLaunch - ok
15:24:44.0859 1136 [ C29A1C9B75BA38FA37F8C44405DEC360 ] Dhcp E:\WINDOWS\System32\dhcpcsvc.dll
15:24:44.0890 1136 Dhcp - ok
15:24:44.0906 1136 [ 044452051F3E02E7963599FC8F4F3E25 ] Disk E:\WINDOWS\system32\DRIVERS\disk.sys
15:24:44.0921 1136 Disk - ok
15:24:44.0921 1136 dmadmin - ok
15:24:45.0140 1136 [ 0DCFC8395A99FECBB1EF771CEC7FE4EA ] dmboot E:\WINDOWS\system32\drivers\dmboot.sys
15:24:45.0343 1136 dmboot - ok
15:24:45.0390 1136 [ 53720AB12B48719D00E327DA470A619A ] dmio E:\WINDOWS\system32\drivers\dmio.sys
15:24:45.0437 1136 dmio - ok
15:24:45.0468 1136 [ E9317282A63CA4D188C0DF5E09C6AC5F ] dmload E:\WINDOWS\system32\drivers\dmload.sys
15:24:45.0468 1136 dmload - ok
15:24:45.0500 1136 [ 25C83FFBBA13B554EB6D59A9B2E2EE78 ] dmserver E:\WINDOWS\System32\dmserver.dll
15:24:45.0500 1136 dmserver - ok
15:24:45.0546 1136 [ 8A208DFCF89792A484E76C40E5F50B45 ] DMusic E:\WINDOWS\system32\drivers\DMusic.sys
15:24:45.0562 1136 DMusic - ok
15:24:45.0593 1136 [ 407F3227AC618FD1CA54B335B083DE07 ] Dnscache E:\WINDOWS\System32\dnsrslvr.dll
15:24:45.0593 1136 Dnscache - ok
15:24:45.0640 1136 [ 676E36C4FF5BCEA1900F44182B9723E6 ] Dot3svc E:\WINDOWS\System32\dot3svc.dll
15:24:45.0687 1136 Dot3svc - ok
15:24:45.0687 1136 dpti2o - ok
15:24:45.0703 1136 [ 8F5FCFF8E8848AFAC920905FBD9D33C8 ] drmkaud E:\WINDOWS\system32\drivers\drmkaud.sys
15:24:45.0703 1136 drmkaud - ok
15:24:45.0718 1136 [ 4E4F2FDDAB0A0736D7671134DCCE91FB ] EapHost E:\WINDOWS\System32\eapsvc.dll
15:24:45.0734 1136 EapHost - ok
15:24:45.0765 1136 [ D82414EC520453EFE2EBA936F6A9115A ] EAPPkt E:\WINDOWS\system32\DRIVERS\EAPPkt.sys
15:24:45.0781 1136 EAPPkt - ok
15:24:45.0796 1136 [ 59C9E1336A4508F059827D638E924C62 ] ElbyCDFL E:\WINDOWS\system32\Drivers\ElbyCDFL.sys
15:24:45.0812 1136 ElbyCDFL - ok
15:24:45.0812 1136 [ 389823DB299B350F2EE830D47376EEAC ] ElbyCDIO E:\WINDOWS\system32\Drivers\ElbyCDIO.sys
15:24:45.0828 1136 ElbyCDIO - ok
15:24:45.0843 1136 [ C4143FC2F7D39A5A8B1CFE0BC4BD8A9E ] ElbyVCD E:\WINDOWS\system32\DRIVERS\ElbyVCD.sys
15:24:45.0843 1136 ElbyVCD - ok
15:24:45.0875 1136 [ 877C18558D70587AA7823A1A308AC96B ] ERSvc E:\WINDOWS\System32\ersvc.dll
15:24:45.0875 1136 ERSvc - ok
15:24:45.0921 1136 [ A3EDBE9053889FB24AB22492472B39DC ] Eventlog E:\WINDOWS\system32\services.exe
15:24:45.0937 1136 Eventlog - ok
15:24:46.0000 1136 [ AF4F6B5739D18CA7972AB53E091CBC74 ] EventSystem E:\WINDOWS\System32\es.dll
15:24:46.0062 1136 EventSystem - ok
15:24:46.0093 1136 [ 38D332A6D56AF32635675F132548343E ] Fastfat E:\WINDOWS\system32\drivers\Fastfat.sys
15:24:46.0140 1136 Fastfat - ok
15:24:46.0187 1136 [ 2DB7D303C36DDD055215052F118E8E75 ] FastUserSwitchingCompatibility E:\WINDOWS\System32\shsvcs.dll
15:24:46.0234 1136 FastUserSwitchingCompatibility - ok
15:24:46.0234 1136 [ 92CDD60B6730B9F50F6A1A0C1F8CDC81 ] Fdc E:\WINDOWS\system32\drivers\Fdc.sys
15:24:46.0265 1136 Fdc - ok
15:24:46.0312 1136 [ B0678A548587C5F1967B0D70BACAD6C1 ] Fips E:\WINDOWS\system32\drivers\Fips.sys
15:24:46.0312 1136 Fips - ok
15:24:46.0328 1136 [ 9D27E7B80BFCDF1CDD9B555862D5E7F0 ] Flpydisk E:\WINDOWS\system32\drivers\Flpydisk.sys
15:24:46.0328 1136 Flpydisk - ok
15:24:46.0375 1136 [ B2CF4B0786F8212CB92ED2B50C6DB6B0 ] FltMgr E:\WINDOWS\system32\drivers\fltmgr.sys
15:24:46.0421 1136 FltMgr - ok
15:24:46.0468 1136 [ 8BA7C024070F2B7FDD98ED8A4BA41789 ] FontCache3.0.0.0 E:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
15:24:46.0484 1136 FontCache3.0.0.0 - ok
15:24:46.0500 1136 [ 3E1E2BD4F39B0E2B7DC4F4D2BCC2779A ] Fs_Rec E:\WINDOWS\system32\drivers\Fs_Rec.sys
15:24:46.0500 1136 Fs_Rec - ok
15:24:46.0546 1136 [ 8F1955CE42E1484714B542F341647778 ] Ftdisk E:\WINDOWS\system32\DRIVERS\ftdisk.sys
15:24:46.0578 1136 Ftdisk - ok
15:24:46.0593 1136 [ 77EBF3E9386DAA51551AF429052D88D0 ] giveio E:\WINDOWS\system32\giveio.sys
15:24:46.0593 1136 giveio - ok
15:24:46.0625 1136 [ 0A02C63C8B144BD8C86B103DEE7C86A2 ] Gpc E:\WINDOWS\system32\DRIVERS\msgpc.sys
15:24:46.0640 1136 Gpc - ok
15:24:46.0687 1136 [ 573C7D0A32852B48F3058CFD8026F511 ] HDAudBus E:\WINDOWS\system32\DRIVERS\HDAudBus.sys
15:24:46.0687 1136 HDAudBus - ok
15:24:46.0750 1136 [ CB66BF85BF599BEFD6C6A57C2E20357F ] helpsvc E:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll
15:24:46.0750 1136 helpsvc - ok
15:24:46.0750 1136 HidServ - ok
15:24:46.0781 1136 [ CCF82C5EC8A7326C3066DE870C06DAF1 ] HidUsb E:\WINDOWS\system32\DRIVERS\hidusb.sys
15:24:46.0781 1136 HidUsb - ok
15:24:46.0812 1136 [ ED29F14101523A6E0E808107405D452C ] hkmsvc E:\WINDOWS\System32\kmsvc.dll
15:24:46.0843 1136 hkmsvc - ok
15:24:46.0843 1136 hpn - ok
15:24:46.0843 1136 hpt3xx - ok
15:24:46.0921 1136 [ F80A415EF82CD06FFAF0D971528EAD38 ] HTTP E:\WINDOWS\system32\Drivers\HTTP.sys
15:24:46.0937 1136 HTTP - ok
15:24:46.0953 1136 [ 9E4ADB854CEBCFB81A4B36718FEECD16 ] HTTPFilter E:\WINDOWS\System32\w3ssl.dll
15:24:46.0953 1136 HTTPFilter - ok
15:24:46.0953 1136 i2omgmt - ok
15:24:46.0968 1136 i2omp - ok
15:24:46.0984 1136 [ E283B97CFBEB86C1D86BAED5F7846A92 ] i8042prt E:\WINDOWS\system32\DRIVERS\i8042prt.sys
15:24:47.0015 1136 i8042prt - ok
15:24:47.0078 1136 [ 6F95324909B502E2651442C1548AB12F ] IDriverT E:\Programme\Gemeinsame Dateien\InstallShield\Driver\1050\Intel 32\IDriverT.exe
15:24:47.0109 1136 IDriverT - ok
15:24:47.0375 1136 [ C01AC32DC5C03076CFB852CB5DA5229C ] idsvc E:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
15:24:47.0625 1136 idsvc - ok
15:24:47.0640 1136 [ 083A052659F5310DD8B6A6CB05EDCF8E ] Imapi E:\WINDOWS\system32\DRIVERS\imapi.sys
15:24:47.0656 1136 Imapi - ok
15:24:47.0703 1136 [ D4B413AA210C21E46AEDD2BA5B68D38E ] ImapiService E:\WINDOWS\System32\imapi.exe
15:24:47.0703 1136 ImapiService - ok
15:24:47.0703 1136 InCDFs - ok
15:24:47.0703 1136 InCDPass - ok
15:24:47.0703 1136 InCDRm - ok
15:24:47.0718 1136 ini910u - ok
15:24:48.0984 1136 [ 19D3781892A3794672CD1962F3D8D3B8 ] IntcAzAudAddService E:\WINDOWS\system32\drivers\RtkHDAud.sys
15:24:49.0015 1136 IntcAzAudAddService - ok
15:24:49.0015 1136 IntelIde - ok
15:24:49.0046 1136 [ 4C7D2750158ED6E7AD642D97BFFAE351 ] intelppm E:\WINDOWS\system32\DRIVERS\intelppm.sys
15:24:49.0046 1136 intelppm - ok
15:24:49.0062 1136 [ 3BB22519A194418D5FEC05D800A19AD0 ] ip6fw E:\WINDOWS\system32\drivers\ip6fw.sys
15:24:49.0078 1136 ip6fw - ok
15:24:49.0109 1136 [ 731F22BA402EE4B62748ADAF6363C182 ] IpFilterDriver E:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
15:24:49.0109 1136 IpFilterDriver - ok
15:24:49.0125 1136 [ B87AB476DCF76E72010632B5550955F5 ] IpInIp E:\WINDOWS\system32\DRIVERS\ipinip.sys
15:24:49.0140 1136 IpInIp - ok
15:24:49.0187 1136 [ CC748EA12C6EFFDE940EE98098BF96BB ] IpNat E:\WINDOWS\system32\DRIVERS\ipnat.sys
15:24:49.0187 1136 IpNat - ok
15:24:49.0218 1136 [ 23C74D75E36E7158768DD63D92789A91 ] IPSec E:\WINDOWS\system32\DRIVERS\ipsec.sys
15:24:49.0250 1136 IPSec - ok
15:24:49.0265 1136 [ C93C9FF7B04D772627A3646D89F7BF89 ] IRENUM E:\WINDOWS\system32\DRIVERS\irenum.sys
15:24:49.0265 1136 IRENUM - ok
15:24:49.0296 1136 [ 6DFB88F64135C525433E87648BDA30DE ] isapnp E:\WINDOWS\system32\DRIVERS\isapnp.sys
15:24:49.0312 1136 isapnp - ok
15:24:49.0375 1136 [ B7A5FADF67136FDA7E8F25303565B674 ] ithsgt E:\WINDOWS\system32\DRIVERS\ithsgt.sys
15:24:49.0421 1136 ithsgt - ok
15:24:49.0531 1136 [ 5739F2821D49975CEDE6BF0153D0CF01 ] JavaQuickStarterService E:\Programme\Java\jre7\bin\jqs.exe
15:24:49.0546 1136 JavaQuickStarterService - ok
15:24:49.0562 1136 [ 1704D8C4C8807B889E43C649B478A452 ] Kbdclass E:\WINDOWS\system32\DRIVERS\kbdclass.sys
15:24:49.0562 1136 Kbdclass - ok
15:24:49.0625 1136 [ 692BCF44383D056AED41B045A323D378 ] kmixer E:\WINDOWS\system32\drivers\kmixer.sys
15:24:49.0671 1136 kmixer - ok
15:24:49.0718 1136 [ B467646C54CC746128904E1654C750C1 ] KSecDD E:\WINDOWS\system32\drivers\KSecDD.sys
15:24:49.0750 1136 KSecDD - ok
15:24:49.0796 1136 [ 2BBDCB79900990F0716DFCB714E72DE7 ] lanmanserver E:\WINDOWS\System32\srvsvc.dll
15:24:49.0828 1136 lanmanserver - ok
15:24:49.0875 1136 [ 1869B14B06B44B44AF70548E1EA3303F ] lanmanworkstation E:\WINDOWS\System32\wkssvc.dll
15:24:49.0906 1136 lanmanworkstation - ok
15:24:49.0906 1136 lbrtfdc - ok
15:24:49.0937 1136 [ 16767EA492B5D140E1DE3679A65EAE74 ] lilsgt E:\WINDOWS\system32\DRIVERS\lilsgt.sys
15:24:49.0937 1136 lilsgt - ok
15:24:49.0968 1136 [ F8A7212D0864EF5E9185FB95E6623F4D ] lirsgt E:\WINDOWS\system32\DRIVERS\lirsgt.sys
15:24:49.0968 1136 lirsgt - ok
15:24:50.0000 1136 [ 636714B7D43C8D0C80449123FD266920 ] LmHosts E:\WINDOWS\System32\lmhsvc.dll
15:24:50.0000 1136 LmHosts - ok
15:24:50.0015 1136 [ B7550A7107281D170CE85524B1488C98 ] Messenger E:\WINDOWS\System32\msgsvc.dll
15:24:50.0031 1136 Messenger - ok
15:24:50.0046 1136 [ 4AE068242760A1FB6E1A44BF4E16AFA6 ] mnmdd E:\WINDOWS\system32\drivers\mnmdd.sys
15:24:50.0062 1136 mnmdd - ok
15:24:50.0078 1136 [ C2F1D365FD96791B037EE504868065D3 ] mnmsrvc E:\WINDOWS\System32\mnmsrvc.exe
15:24:50.0093 1136 mnmsrvc - ok
15:24:50.0109 1136 [ 6FB74EBD4EC57A6F1781DE3852CC3362 ] Modem E:\WINDOWS\system32\drivers\Modem.sys
15:24:50.0125 1136 Modem - ok
15:24:50.0156 1136 [ C741717B0A18813DD7D12085937CEE72 ] motccgp E:\WINDOWS\system32\DRIVERS\motccgp.sys
15:24:50.0171 1136 motccgp - ok
15:24:50.0171 1136 [ B812DA6605CAF02641312F1F65C75419 ] motccgpfl E:\WINDOWS\system32\DRIVERS\motccgpfl.sys
15:24:50.0187 1136 motccgpfl - ok
15:24:50.0203 1136 [ 54FEE02961C70FD9D4D7E2F87AFA23FA ] motmodem E:\WINDOWS\system32\DRIVERS\motmodem.sys
15:24:50.0218 1136 motmodem - ok
15:24:50.0281 1136 [ BB9DE58AC6513DA62C005D92E2DB4981 ] MotoConnect Service E:\Programme\Motorola\MotoConnectService\MotoConnectService.exe
15:24:50.0296 1136 MotoConnect Service - ok
15:24:50.0312 1136 [ FD8C2CEF7AD8B23C6714103D621FAC1F ] MotoSwitchService E:\WINDOWS\system32\DRIVERS\motswch.sys
15:24:50.0312 1136 MotoSwitchService - ok
15:24:50.0328 1136 [ 2136CCA3D1BF7C0248E5366B1A6C24E3 ] motusbdevice E:\WINDOWS\system32\DRIVERS\motusbdevice.sys
15:24:50.0328 1136 motusbdevice - ok
15:24:50.0343 1136 [ B24CE8005DEAB254C0251E15CB71D802 ] Mouclass E:\WINDOWS\system32\DRIVERS\mouclass.sys
15:24:50.0359 1136 Mouclass - ok
15:24:50.0375 1136 [ 66A6F73C74E1791464160A7065CE711A ] mouhid E:\WINDOWS\system32\DRIVERS\mouhid.sys
15:24:50.0375 1136 mouhid - ok
15:24:50.0406 1136 [ A80B9A0BAD1B73637DBCBBA7DF72D3FD ] MountMgr E:\WINDOWS\system32\drivers\MountMgr.sys
15:24:50.0406 1136 MountMgr - ok
15:24:50.0468 1136 [ 7EDBBB9351A38C6BB0FE98CFD44DB430 ] MozillaMaintenance E:\Programme\Mozilla Maintenance Service\maintenanceservice.exe
15:24:50.0500 1136 MozillaMaintenance - ok
15:24:50.0515 1136 mraid35x - ok
15:24:50.0562 1136 [ 11D42BB6206F33FBB3BA0288D3EF81BD ] MRxDAV E:\WINDOWS\system32\DRIVERS\mrxdav.sys
15:24:50.0609 1136 MRxDAV - ok
15:24:50.0734 1136 [ 7D304A5EB4344EBEEAB53A2FE3FFB9F0 ] MRxSmb E:\WINDOWS\system32\DRIVERS\mrxsmb.sys
15:24:50.0859 1136 MRxSmb - ok
15:24:50.0890 1136 [ 35A031AF38C55F92D28AA03EE9F12CC9 ] MSDTC E:\WINDOWS\System32\msdtc.exe
15:24:50.0890 1136 MSDTC - ok
15:24:50.0906 1136 [ C941EA2454BA8350021D774DAF0F1027 ] Msfs E:\WINDOWS\system32\drivers\Msfs.sys
15:24:50.0906 1136 Msfs - ok
15:24:50.0906 1136 MSIServer - ok
15:24:50.0921 1136 [ D1575E71568F4D9E14CA56B7B0453BF1 ] MSKSSRV E:\WINDOWS\system32\drivers\MSKSSRV.sys
15:24:50.0921 1136 MSKSSRV - ok
15:24:50.0937 1136 [ 325BB26842FC7CCC1FCCE2C457317F3E ] MSPCLOCK E:\WINDOWS\system32\drivers\MSPCLOCK.sys
15:24:50.0953 1136 MSPCLOCK - ok
15:24:50.0953 1136 [ BAD59648BA099DA4A17680B39730CB3D ] MSPQM E:\WINDOWS\system32\drivers\MSPQM.sys
15:24:50.0953 1136 MSPQM - ok
15:24:50.0968 1136 [ AF5F4F3F14A8EA2C26DE30F7A1E17136 ] mssmbios E:\WINDOWS\system32\DRIVERS\mssmbios.sys
15:24:50.0968 1136 mssmbios - ok
15:24:51.0000 1136 [ E53736A9E30C45FA9E7B5EAC55056D1D ] MSTEE E:\WINDOWS\system32\drivers\MSTEE.sys
15:24:51.0000 1136 MSTEE - ok
15:24:51.0031 1136 [ DE6A75F5C270E756C5508D94B6CF68F5 ] Mup E:\WINDOWS\system32\drivers\Mup.sys
15:24:51.0078 1136 Mup - ok
15:24:51.0109 1136 [ 5B50F1B2A2ED47D560577B221DA734DB ] NABTSFEC E:\WINDOWS\system32\DRIVERS\NABTSFEC.sys
15:24:51.0140 1136 NABTSFEC - ok
15:24:51.0250 1136 [ 46BB15AE2AC7D025D6D2567B876817BD ] napagent E:\WINDOWS\System32\qagentrt.dll
15:24:51.0343 1136 napagent - ok
15:24:51.0390 1136 [ 1DF7F42665C94B825322FAE71721130D ] NDIS E:\WINDOWS\system32\drivers\NDIS.sys
15:24:51.0453 1136 NDIS - ok
15:24:51.0468 1136 [ 7FF1F1FD8609C149AA432F95A8163D97 ] NdisIP E:\WINDOWS\system32\DRIVERS\NdisIP.sys
15:24:51.0468 1136 NdisIP - ok
15:24:51.0500 1136 [ 0109C4F3850DFBAB279542515386AE22 ] NdisTapi E:\WINDOWS\system32\DRIVERS\ndistapi.sys
15:24:51.0515 1136 NdisTapi - ok
15:24:51.0531 1136 [ F927A4434C5028758A842943EF1A3849 ] Ndisuio E:\WINDOWS\system32\DRIVERS\ndisuio.sys
15:24:51.0546 1136 Ndisuio - ok
15:24:51.0578 1136 [ EDC1531A49C80614B2CFDA43CA8659AB ] NdisWan E:\WINDOWS\system32\DRIVERS\ndiswan.sys
15:24:51.0593 1136 NdisWan - ok
15:24:51.0640 1136 [ 9282BD12DFB069D3889EB3FCC1000A9B ] NDProxy E:\WINDOWS\system32\drivers\NDProxy.sys
15:24:51.0656 1136 NDProxy - ok
15:24:51.0656 1136 [ 5D81CF9A2F1A3A756B66CF684911CDF0 ] NetBIOS E:\WINDOWS\system32\DRIVERS\netbios.sys
15:24:51.0671 1136 NetBIOS - ok
15:24:51.0734 1136 [ 74B2B2F5BEA5E9A3DC021D685551BD3D ] NetBT E:\WINDOWS\system32\DRIVERS\netbt.sys
15:24:51.0781 1136 NetBT - ok
15:24:51.0828 1136 [ 8ACE4251BFFD09CE75679FE940E996CC ] NetDDE E:\WINDOWS\system32\netdde.exe
15:24:51.0859 1136 NetDDE - ok
15:24:51.0890 1136 [ 8ACE4251BFFD09CE75679FE940E996CC ] NetDDEdsdm E:\WINDOWS\system32\netdde.exe
15:24:51.0890 1136 NetDDEdsdm - ok
15:24:51.0890 1136 [ AFB8261B56CBA0D86AEB6DF682AF9785 ] Netlogon E:\WINDOWS\System32\lsass.exe
15:24:51.0906 1136 Netlogon - ok
15:24:51.0953 1136 [ E6D88F1F6745BF00B57E7855A2AB696C ] Netman E:\WINDOWS\System32\netman.dll
15:24:52.0015 1136 Netman - ok
15:24:52.0062 1136 [ D34612C5D02D026535B3095D620626AE ] NetTcpPortSharing E:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
15:24:52.0109 1136 NetTcpPortSharing - ok
15:24:52.0187 1136 [ F1B67B6B0751AE0E6E964B02821206A3 ] Nla E:\WINDOWS\System32\mswsock.dll
15:24:52.0187 1136 Nla - ok
15:24:52.0187 1136 [ 1E421A6BCF2203CC61B821ADA9DE878B ] nm E:\WINDOWS\system32\DRIVERS\NMnt.sys
15:24:52.0203 1136 nm - ok
15:24:52.0234 1136 [ 3182D64AE053D6FB034F44B6DEF8034A ] Npfs E:\WINDOWS\system32\drivers\Npfs.sys
15:24:52.0250 1136 Npfs - ok
15:24:52.0421 1136 [ 78A08DD6A8D65E697C18E1DB01C5CDCA ] Ntfs E:\WINDOWS\system32\drivers\Ntfs.sys
15:24:52.0609 1136 Ntfs - ok
15:24:52.0625 1136 [ AFB8261B56CBA0D86AEB6DF682AF9785 ] NtLmSsp E:\WINDOWS\System32\lsass.exe
15:24:52.0625 1136 NtLmSsp - ok
15:24:52.0765 1136 [ 56AF4064996FA5BAC9C449B1514B4770 ] NtmsSvc E:\WINDOWS\system32\ntmssvc.dll
15:24:52.0890 1136 NtmsSvc - ok
15:24:52.0906 1136 [ 73C1E1F395918BC2C6DD67AF7591A3AD ] Null E:\WINDOWS\system32\drivers\Null.sys
15:24:52.0906 1136 Null - ok
15:24:54.0890 1136 [ F85E109844787668CE8AAB54EF14362A ] nv E:\WINDOWS\system32\DRIVERS\nv4_mini.sys
15:24:56.0843 1136 nv - ok
15:24:56.0906 1136 [ CC9275DB74AD57AC0C3EE823F9922298 ] nvsvc E:\WINDOWS\system32\nvsvc32.exe
15:24:56.0921 1136 nvsvc - ok
15:24:56.0937 1136 [ B305F3FAD35083837EF46A0BBCE2FC57 ] NwlnkFlt E:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
15:24:56.0953 1136 NwlnkFlt - ok
15:24:56.0968 1136 [ C99B3415198D1AAB7227F2C88FD664B9 ] NwlnkFwd E:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
15:24:56.0968 1136 NwlnkFwd - ok
15:24:57.0015 1136 [ 7A56CF3E3F12E8AF599963B16F50FB6A ] ose E:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE
15:24:57.0046 1136 ose - ok
15:24:57.0093 1136 [ F84785660305B9B903FB3BCA8BA29837 ] Parport E:\WINDOWS\system32\DRIVERS\parport.sys
15:24:57.0109 1136 Parport - ok
15:24:57.0125 1136 [ BEB3BA25197665D82EC7065B724171C6 ] PartMgr E:\WINDOWS\system32\drivers\PartMgr.sys
15:24:57.0140 1136 PartMgr - ok
15:24:57.0156 1136 [ C2BF987829099A3EAA2CA6A0A90ECB4F ] ParVdm E:\WINDOWS\system32\drivers\ParVdm.sys
15:24:57.0156 1136 ParVdm - ok
15:24:57.0187 1136 [ 387E8DEDC343AA2D1EFBC30580273ACD ] PCI E:\WINDOWS\system32\DRIVERS\pci.sys
15:24:57.0218 1136 PCI - ok
15:24:57.0218 1136 PCIDump - ok
15:24:57.0218 1136 [ 59BA86D9A61CBCF4DF8E598C331F5B82 ] PCIIde E:\WINDOWS\system32\DRIVERS\pciide.sys
15:24:57.0218 1136 PCIIde - ok
15:24:57.0265 1136 [ A2A966B77D61847D61A3051DF87C8C97 ] Pcmcia E:\WINDOWS\system32\drivers\Pcmcia.sys
15:24:57.0296 1136 Pcmcia - ok
15:24:57.0296 1136 PDCOMP - ok
15:24:57.0296 1136 PDFRAME - ok
15:24:57.0312 1136 PDRELI - ok
15:24:57.0312 1136 PDRFRAME - ok
15:24:57.0312 1136 perc2 - ok
15:24:57.0312 1136 perc2hib - ok
15:24:57.0359 1136 [ A3EDBE9053889FB24AB22492472B39DC ] PlugPlay E:\WINDOWS\system32\services.exe
15:24:57.0359 1136 PlugPlay - ok
15:24:57.0375 1136 [ AFB8261B56CBA0D86AEB6DF682AF9785 ] PolicyAgent E:\WINDOWS\System32\lsass.exe
15:24:57.0375 1136 PolicyAgent - ok
15:24:57.0406 1136 [ EFEEC01B1D3CF84F16DDD24D9D9D8F99 ] PptpMiniport E:\WINDOWS\system32\DRIVERS\raspptp.sys
15:24:57.0421 1136 PptpMiniport - ok
15:24:57.0437 1136 [ 2CB55427C58679F49AD600FCCBA76360 ] Processor E:\WINDOWS\system32\DRIVERS\processr.sys
15:24:57.0453 1136 Processor - ok
15:24:57.0453 1136 [ AFB8261B56CBA0D86AEB6DF682AF9785 ] ProtectedStorage E:\WINDOWS\system32\lsass.exe
15:24:57.0453 1136 ProtectedStorage - ok
15:24:57.0484 1136 [ 09298EC810B07E5D582CB3A3F9255424 ] PSched E:\WINDOWS\system32\DRIVERS\psched.sys
15:24:57.0500 1136 PSched - ok
15:24:57.0515 1136 [ 80D317BD1C3DBC5D4FE7B1678C60CADD ] Ptilink E:\WINDOWS\system32\DRIVERS\ptilink.sys
15:24:57.0515 1136 Ptilink - ok
15:24:57.0531 1136 ql1080 - ok
15:24:57.0531 1136 Ql10wnt - ok
15:24:57.0531 1136 ql12160 - ok
15:24:57.0531 1136 ql1240 - ok
15:24:57.0531 1136 ql1280 - ok
15:24:57.0531 1136 [ FE0D99D6F31E4FAD8159F690D68DED9C ] RasAcd E:\WINDOWS\system32\DRIVERS\rasacd.sys
15:24:57.0546 1136 RasAcd - ok
15:24:57.0593 1136 [ F5BA6CACCDB66C8F048E867563203246 ] RasAuto E:\WINDOWS\System32\rasauto.dll
15:24:57.0625 1136 RasAuto - ok
15:24:57.0640 1136 [ 11B4A627BC9614B885C4969BFA5FF8A6 ] Rasl2tp E:\WINDOWS\system32\DRIVERS\rasl2tp.sys
15:24:57.0656 1136 Rasl2tp - ok
15:24:57.0718 1136 [ F9A7B66EA345726EDB5862A46B1ECCD5 ] RasMan E:\WINDOWS\System32\rasmans.dll
15:24:57.0718 1136 RasMan - ok
15:24:57.0734 1136 [ 5BC962F2654137C9909C3D4603587DEE ] RasPppoe E:\WINDOWS\system32\DRIVERS\raspppoe.sys
15:24:57.0750 1136 RasPppoe - ok
15:24:57.0765 1136 [ FDBB1D60066FCFBB7452FD8F9829B242 ] Raspti E:\WINDOWS\system32\DRIVERS\raspti.sys
15:24:57.0765 1136 Raspti - ok
15:24:57.0828 1136 [ 7AD224AD1A1437FE28D89CF22B17780A ] Rdbss E:\WINDOWS\system32\DRIVERS\rdbss.sys
15:24:57.0875 1136 Rdbss - ok
15:24:57.0875 1136 [ 4912D5B403614CE99C28420F75353332 ] RDPCDD E:\WINDOWS\system32\DRIVERS\RDPCDD.sys
15:24:57.0875 1136 RDPCDD - ok
15:24:57.0937 1136 [ 43AF5212BD8FB5BA6EED9754358BD8F7 ] RDPWD E:\WINDOWS\system32\drivers\RDPWD.sys
15:24:57.0984 1136 RDPWD - ok
15:24:58.0031 1136 [ 263AF18AF0F3DB99F574C95F284CCEC9 ] RDSessMgr E:\WINDOWS\system32\sessmgr.exe
15:24:58.0078 1136 RDSessMgr - ok
15:24:58.0093 1136 [ ED761D453856F795A7FE056E42C36365 ] redbook E:\WINDOWS\system32\DRIVERS\redbook.sys
15:24:58.0109 1136 redbook - ok
15:24:58.0156 1136 [ 0E97EC96D6942CEEC2D188CC2EB69A01 ] RemoteAccess E:\WINDOWS\System32\mprdim.dll
15:24:58.0171 1136 RemoteAccess - ok
15:24:58.0203 1136 [ 2A02E21867497DF20B8FC95631395169 ] RpcLocator E:\WINDOWS\System32\locator.exe
15:24:58.0234 1136 RpcLocator - ok
15:24:58.0343 1136 [ 3127AFBF2C1ED0AB14A1BBB7AAECB85B ] RpcSs E:\WINDOWS\system32\rpcss.dll
15:24:58.0343 1136 RpcSs - ok
15:24:58.0406 1136 [ 4BDD71B4B521521499DFD14735C4F398 ] RSVP E:\WINDOWS\System32\rsvp.exe
15:24:58.0437 1136 RSVP - ok
15:24:58.0500 1136 [ F0A21C62B9B835E1C96268EAAE31D239 ] RTLE8023xp E:\WINDOWS\system32\DRIVERS\Rtenicxp.sys
15:24:58.0531 1136 RTLE8023xp - ok
15:24:58.0578 1136 [ 395F8A964B7412DE019AAEFE95C9637C ] RTLWUSB E:\WINDOWS\system32\DRIVERS\RTL8187.sys
15:24:58.0640 1136 RTLWUSB - ok
15:24:58.0656 1136 [ AFB8261B56CBA0D86AEB6DF682AF9785 ] SamSs E:\WINDOWS\system32\lsass.exe
15:24:58.0656 1136 SamSs - ok
15:24:58.0687 1136 [ DCEC079FAD95D36C8DD5CB6D779DFE32 ] SCardSvr E:\WINDOWS\System32\SCardSvr.exe
15:24:58.0718 1136 SCardSvr - ok
15:24:58.0781 1136 [ A050194A44D7FA8D7186ED2F4E8367AE ] Schedule E:\WINDOWS\system32\schedsvc.dll
15:24:58.0843 1136 Schedule - ok
15:24:58.0875 1136 [ 90A3935D05B494A5A39D37E71F09A677 ] Secdrv E:\WINDOWS\system32\DRIVERS\secdrv.sys
15:24:58.0875 1136 Secdrv - ok
15:24:58.0890 1136 [ BEE4CFD1D48C23B44CF4B974B0B79B2B ] seclogon E:\WINDOWS\System32\seclogon.dll
15:24:58.0890 1136 seclogon - ok
15:24:58.0921 1136 [ 2AAC9B6ED9EDDFFB721D6452E34D67E3 ] SENS E:\WINDOWS\system32\sens.dll
15:24:58.0921 1136 SENS - ok
15:24:58.0937 1136 [ 0F29512CCD6BEAD730039FB4BD2C85CE ] serenum E:\WINDOWS\system32\DRIVERS\serenum.sys
15:24:58.0953 1136 serenum - ok
15:24:58.0968 1136 [ CF24EB4F0412C82BCD1F4F35A025E31D ] Serial E:\WINDOWS\system32\DRIVERS\serial.sys
15:24:58.0984 1136 Serial - ok
15:24:59.0000 1136 [ 8E6B8C671615D126FDC553D1E2DE5562 ] Sfloppy E:\WINDOWS\system32\drivers\Sfloppy.sys
15:24:59.0000 1136 Sfloppy - ok
15:24:59.0125 1136 [ CAD058D5F8B889A87CA3EB3CF624DCEF ] SharedAccess E:\WINDOWS\System32\ipnathlp.dll
15:24:59.0156 1136 SharedAccess - ok
15:24:59.0187 1136 [ 2DB7D303C36DDD055215052F118E8E75 ] ShellHWDetection E:\WINDOWS\System32\shsvcs.dll
15:24:59.0187 1136 ShellHWDetection - ok
15:24:59.0203 1136 Simbad - ok
15:24:59.0218 1136 [ 866D538EBE33709A5C9F5C62B73B7D14 ] SLIP E:\WINDOWS\system32\DRIVERS\SLIP.sys
15:24:59.0218 1136 SLIP - ok
15:24:59.0218 1136 Sparrow - ok
15:24:59.0250 1136 [ 9F70CD5EDCC4EFC48AE21E04FB03BE9D ] speedfan E:\WINDOWS\system32\speedfan.sys
15:24:59.0265 1136 speedfan - ok
15:24:59.0281 1136 [ AB8B92451ECB048A4D1DE7C3FFCB4A9F ] splitter E:\WINDOWS\system32\drivers\splitter.sys
15:24:59.0296 1136 splitter - ok
15:24:59.0328 1136 [ 60784F891563FB1B767F70117FC2428F ] Spooler E:\WINDOWS\system32\spoolsv.exe
15:24:59.0343 1136 Spooler - ok
15:24:59.0359 1136 [ 50FA898F8C032796D3B1B9951BB5A90F ] sr E:\WINDOWS\system32\DRIVERS\sr.sys
15:24:59.0390 1136 sr - ok
15:24:59.0437 1136 [ FE77A85495065F3AD59C5C65B6C54182 ] srservice E:\WINDOWS\System32\srsvc.dll
15:24:59.0484 1136 srservice - ok
15:24:59.0593 1136 [ 47DDFC2F003F7F9F0592C6874962A2E7 ] Srv E:\WINDOWS\system32\DRIVERS\srv.sys
15:24:59.0687 1136 Srv - ok
15:24:59.0718 1136 [ 4DF5B05DFAEC29E13E1ED6F6EE12C500 ] SSDPSRV E:\WINDOWS\System32\ssdpsrv.dll
15:24:59.0718 1136 SSDPSRV - ok
15:24:59.0750 1136 [ A36EE93698802CD899F98BFD553D8185 ] ssmdrv E:\WINDOWS\system32\DRIVERS\ssmdrv.sys
15:24:59.0750 1136 ssmdrv - ok
15:24:59.0859 1136 [ BC2C5985611C5356B24AEB370953DED9 ] stisvc E:\WINDOWS\system32\wiaservc.dll
15:24:59.0937 1136 stisvc - ok
15:24:59.0953 1136 [ 77813007BA6265C4B6098187E6ED79D2 ] streamip E:\WINDOWS\system32\DRIVERS\StreamIP.sys
15:24:59.0968 1136 streamip - ok
15:24:59.0984 1136 [ 3941D127AEF12E93ADDF6FE6EE027E0F ] swenum E:\WINDOWS\system32\DRIVERS\swenum.sys
15:25:00.0000 1136 swenum - ok
15:25:00.0015 1136 [ 8CE882BCC6CF8A62F2B2323D95CB3D01 ] swmidi E:\WINDOWS\system32\drivers\swmidi.sys
15:25:00.0031 1136 swmidi - ok
15:25:00.0046 1136 SwPrv - ok
15:25:00.0046 1136 symc810 - ok
15:25:00.0046 1136 symc8xx - ok
15:25:00.0046 1136 sym_hi - ok
15:25:00.0046 1136 sym_u3 - ok
15:25:00.0062 1136 [ 8B83F3ED0F1688B4958F77CD6D2BF290 ] sysaudio E:\WINDOWS\system32\drivers\sysaudio.sys
15:25:00.0078 1136 sysaudio - ok
15:25:00.0125 1136 [ 2903FFFA2523926D6219428040DCE6B9 ] SysmonLog E:\WINDOWS\system32\smlogsvc.exe
15:25:00.0156 1136 SysmonLog - ok
15:25:00.0156 1136 SystemStoreService - ok
15:25:00.0218 1136 [ 05903CAC4B98908D55EA5774775B382E ] TapiSrv E:\WINDOWS\System32\tapisrv.dll
15:25:00.0250 1136 TapiSrv - ok
15:25:00.0359 1136 [ 9AEFA14BD6B182D61E3119FA5F436D3D ] Tcpip E:\WINDOWS\system32\DRIVERS\tcpip.sys
15:25:00.0453 1136 Tcpip - ok
15:25:00.0468 1136 [ 6471A66807F5E104E4885F5B67349397 ] TDPIPE E:\WINDOWS\system32\drivers\TDPIPE.sys
15:25:00.0468 1136 TDPIPE - ok
15:25:00.0484 1136 [ C56B6D0402371CF3700EB322EF3AAF61 ] TDTCP E:\WINDOWS\system32\drivers\TDTCP.sys
15:25:00.0484 1136 TDTCP - ok
15:25:00.0500 1136 [ 88155247177638048422893737429D9E ] TermDD E:\WINDOWS\system32\DRIVERS\termdd.sys
15:25:00.0515 1136 TermDD - ok
15:25:00.0625 1136 [ B7DE02C863D8F5A005A7BF375375A6A4 ] TermService E:\WINDOWS\System32\termsrv.dll
15:25:00.0703 1136 TermService - ok
15:25:00.0750 1136 [ 2DB7D303C36DDD055215052F118E8E75 ] Themes E:\WINDOWS\System32\shsvcs.dll
15:25:00.0750 1136 Themes - ok
15:25:00.0750 1136 TosIde - ok
15:25:00.0781 1136 [ 626504572B175867F30F3215C04B3E2F ] TrkWks E:\WINDOWS\system32\trkwks.dll
15:25:00.0796 1136 TrkWks - ok
15:25:00.0828 1136 [ 5787B80C2E3C5E2F56C2A233D91FA2C9 ] Udfs E:\WINDOWS\system32\drivers\Udfs.sys
15:25:00.0843 1136 Udfs - ok
15:25:00.0843 1136 ultra - ok
15:25:00.0953 1136 [ 402DDC88356B1BAC0EE3DD1580C76A31 ] Update E:\WINDOWS\system32\DRIVERS\update.sys
15:25:01.0062 1136 Update - ok
15:25:01.0125 1136 [ 1DFD8975D8C89214B98D9387C1125B49 ] upnphost E:\WINDOWS\System32\upnphost.dll
15:25:01.0171 1136 upnphost - ok
15:25:01.0187 1136 [ 9B11E6118958E63E1FEF129466E2BDA7 ] UPS E:\WINDOWS\System32\ups.exe
15:25:01.0187 1136 UPS - ok
15:25:01.0218 1136 [ 173F317CE0DB8E21322E71B7E60A27E8 ] usbccgp E:\WINDOWS\system32\DRIVERS\usbccgp.sys
15:25:01.0234 1136 usbccgp - ok
15:25:01.0265 1136 [ 65DCF09D0E37D4C6B11B5B0B76D470A7 ] usbehci E:\WINDOWS\system32\DRIVERS\usbehci.sys
15:25:01.0265 1136 usbehci - ok
15:25:01.0296 1136 [ 1AB3CDDE553B6E064D2E754EFE20285C ] usbhub E:\WINDOWS\system32\DRIVERS\usbhub.sys
15:25:01.0312 1136 usbhub - ok
15:25:01.0343 1136 [ A717C8721046828520C9EDF31288FC00 ] usbprint E:\WINDOWS\system32\DRIVERS\usbprint.sys
15:25:01.0343 1136 usbprint - ok
15:25:01.0375 1136 [ A0B8CF9DEB1184FBDD20784A58FA75D4 ] usbscan E:\WINDOWS\system32\DRIVERS\usbscan.sys
15:25:01.0375 1136 usbscan - ok
15:25:01.0390 1136 [ A32426D9B14A089EAA1D922E0C5801A9 ] usbstor E:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
15:25:01.0406 1136 usbstor - ok
15:25:01.0421 1136 [ 26496F9DEE2D787FC3E61AD54821FFE6 ] usbuhci E:\WINDOWS\system32\DRIVERS\usbuhci.sys
15:25:01.0421 1136 usbuhci - ok
15:25:01.0468 1136 [ 63BBFCA7F390F4C49ED4B96BFB1633E0 ] usbvideo E:\WINDOWS\system32\Drivers\usbvideo.sys
15:25:01.0500 1136 usbvideo - ok
15:25:01.0515 1136 [ 0D3A8FAFCEACD8B7625CD549757A7DF1 ] VgaSave E:\WINDOWS\System32\drivers\vga.sys
15:25:01.0515 1136 VgaSave - ok
15:25:01.0531 1136 ViaIde - ok
15:25:01.0546 1136 [ A5A712F4E880874A477AF790B5186E1D ] VolSnap E:\WINDOWS\system32\drivers\VolSnap.sys
15:25:01.0578 1136 VolSnap - ok
15:25:01.0656 1136 [ 68F106273BE29E7B7EF8266977268E78 ] VSS E:\WINDOWS\System32\vssvc.exe
15:25:01.0750 1136 VSS - ok
15:25:01.0796 1136 [ 7B353059E665F8B7AD2BBEAEF597CF45 ] W32Time E:\WINDOWS\System32\w32time.dll
15:25:01.0843 1136 W32Time - ok
15:25:01.0859 1136 [ E20B95BAEDB550F32DD489265C1DA1F6 ] Wanarp E:\WINDOWS\system32\DRIVERS\wanarp.sys
15:25:01.0875 1136 Wanarp - ok
15:25:02.0015 1136 [ BBCFEAB7E871CDDAC2D397EE7FA91FDC ] Wdf01000 E:\WINDOWS\system32\Drivers\wdf01000.sys
15:25:02.0156 1136 Wdf01000 - ok
15:25:02.0156 1136 WDICA - ok
15:25:02.0187 1136 [ 6768ACF64B18196494413695F0C3A00F ] wdmaud E:\WINDOWS\system32\drivers\wdmaud.sys
15:25:02.0218 1136 wdmaud - ok
15:25:02.0234 1136 [ 81727C9873E3905A2FFC1EBD07265002 ] WebClient E:\WINDOWS\System32\webclnt.dll
15:25:02.0250 1136 WebClient - ok
15:25:02.0328 1136 [ 6F3F3973D97714CC5F906A19FE883729 ] winmgmt E:\WINDOWS\system32\wbem\WMIsvc.dll
15:25:02.0359 1136 winmgmt - ok
15:25:02.0421 1136 [ 6E18978B749F0696A774DE3F2CB142DD ] WmdmPmSN E:\WINDOWS\System32\mspmsnsv.dll
15:25:02.0437 1136 WmdmPmSN - ok
15:25:02.0484 1136 [ 93908111BA57A6E60EC2FA2DE202105C ] WmiApSrv E:\WINDOWS\System32\wbem\wmiapsrv.exe
15:25:02.0484 1136 WmiApSrv - ok
15:25:02.0515 1136 [ 300B3E84FAF1A5C1F791C159BA28035D ] wscsvc E:\WINDOWS\system32\wscsvc.dll
15:25:02.0546 1136 wscsvc - ok
15:25:02.0578 1136 [ C98B39829C2BBD34E454150633C62C78 ] WSTCODEC E:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS
15:25:02.0578 1136 WSTCODEC - ok
15:25:02.0593 1136 [ 7B4FE05202AA6BF9F4DFD0E6A0D8A085 ] wuauserv E:\WINDOWS\system32\wuauserv.dll
15:25:02.0593 1136 wuauserv - ok
15:25:02.0734 1136 [ C4F109C005F6725162D2D12CA751E4A7 ] WZCSVC E:\WINDOWS\System32\wzcsvc.dll
15:25:02.0859 1136 WZCSVC - ok
15:25:02.0921 1136 [ 0ADA34871A2E1CD2CAAFED1237A47750 ] xmlprov E:\WINDOWS\System32\xmlprov.dll
15:25:02.0953 1136 xmlprov - ok
15:25:02.0953 1136 ================ Scan global ===============================
15:25:02.0984 1136 [ 2C60091CA5F67C3032EAB3B30390C27F ] E:\WINDOWS\system32\basesrv.dll
15:25:03.0093 1136 [ E62178BC21EAC63A3B9A2DBD46C1B505 ] E:\WINDOWS\system32\winsrv.dll
15:25:03.0250 1136 [ E62178BC21EAC63A3B9A2DBD46C1B505 ] E:\WINDOWS\system32\winsrv.dll
15:25:03.0281 1136 [ A3EDBE9053889FB24AB22492472B39DC ] E:\WINDOWS\system32\services.exe
15:25:03.0296 1136 [Global] - ok
15:25:03.0296 1136 ================ Scan MBR ==================================
15:25:03.0312 1136 [ 72B8CE41AF0DE751C946802B3ED844B4 ] \Device\Harddisk0\DR0
15:25:03.0500 1136 \Device\Harddisk0\DR0 - ok
15:25:03.0953 1136 [ 671B81004FDD1588FA9ED1331C9CECA9 ] \Device\Harddisk1\DR1
15:25:03.0953 1136 \Device\Harddisk1\DR1 - ok
15:25:03.0953 1136 ================ Scan VBR ==================================
15:25:03.0953 1136 [ B77F3B7DEF69127A6350AED12931FA16 ] \Device\Harddisk0\DR0\Partition1
15:25:03.0953 1136 \Device\Harddisk0\DR0\Partition1 - ok
15:25:03.0968 1136 [ 7F638D383DE2576E900905F82CA34495 ] \Device\Harddisk0\DR0\Partition2
15:25:03.0984 1136 \Device\Harddisk0\DR0\Partition2 - ok
15:25:03.0984 1136 [ 8BE54C17F6656664FFB3ED8F244D655E ] \Device\Harddisk0\DR0\Partition3
15:25:03.0984 1136 \Device\Harddisk0\DR0\Partition3 - ok
15:25:03.0984 1136 [ CE7CA84E7E4DA1C3509C48E3B2A2F4CE ] \Device\Harddisk1\DR1\Partition1
15:25:03.0984 1136 \Device\Harddisk1\DR1\Partition1 - ok
15:25:03.0984 1136 ============================================================
15:25:03.0984 1136 Scan finished
15:25:03.0984 1136 ============================================================
15:25:04.0000 0544 Detected object count: 0
15:25:04.0000 0544 Actual detected object count: 0
15:25:18.0812 3284 Deinitialize success

markusg · 23.05.2013, 14:33

ist auch nicht laut Anleitung konfiguriert, bitte noch mal.

Jak113 · 23.05.2013, 14:40

Sry, übersehen.

und jetzt sieht das schon ganz anders aus:

15:34:50.0296 3724 TDSS rootkit removing tool 2.8.16.0 Feb 11 2013 18:50:42
15:34:50.0625 3724 ============================================================
15:34:50.0625 3724 Current date / time: 2013/05/23 15:34:50.0625
15:34:50.0625 3724 SystemInfo:
15:34:50.0625 3724
15:34:50.0625 3724 OS Version: 5.1.2600 ServicePack: 3.0
15:34:50.0625 3724 Product type: Workstation
15:34:50.0625 3724 ComputerName: PC-ARBEITSZIMME
15:34:50.0625 3724 UserName: ***
15:34:50.0625 3724 Windows directory: E:\WINDOWS
15:34:50.0625 3724 System windows directory: E:\WINDOWS
15:34:50.0625 3724 Processor architecture: Intel x86
15:34:50.0625 3724 Number of processors: 4
15:34:50.0625 3724 Page size: 0x1000
15:34:50.0625 3724 Boot type: Normal boot
15:34:50.0625 3724 ============================================================
15:34:51.0515 3724 Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 (465.76 Gb), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000054
15:34:51.0984 3724 Drive \Device\Harddisk1\DR1 - Size: 0xE8E0DB6000 (931.51 Gb), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000054
15:34:52.0046 3724 ============================================================
15:34:52.0046 3724 \Device\Harddisk0\DR0:
15:34:52.0046 3724 MBR partitions:
15:34:52.0046 3724 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x61A7927
15:34:52.0062 3724 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x61A79A5, BlocksNum 0x9E5329F
15:34:52.0062 3724 \Device\Harddisk0\DR0\Partition3: MBR, Type 0x7, StartLBA 0xFFFAC44, BlocksNum 0x2A389FFD
15:34:52.0062 3724 \Device\Harddisk1\DR1:
15:34:52.0062 3724 MBR partitions:
15:34:52.0062 3724 \Device\Harddisk1\DR1\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x74705982
15:34:52.0062 3724 ============================================================
15:34:52.0078 3724 E: <-> \Device\Harddisk0\DR0\Partition1
15:34:52.0109 3724 F: <-> \Device\Harddisk0\DR0\Partition2
15:34:52.0140 3724 G: <-> \Device\Harddisk1\DR1\Partition1
15:34:52.0265 3724 C: <-> \Device\Harddisk0\DR0\Partition3
15:34:52.0265 3724 ============================================================
15:34:52.0265 3724 Initialize success
15:34:52.0265 3724 ============================================================
15:35:41.0859 0808 ============================================================
15:35:41.0859 0808 Scan started
15:35:41.0859 0808 Mode: Manual; SigCheck; TDLFS;
15:35:41.0859 0808 ============================================================
15:35:42.0812 0808 ================ Scan system memory ========================
15:35:42.0812 0808 System memory - ok
15:35:42.0812 0808 ================ Scan services =============================
15:35:43.0046 0808 Abiosdsk - ok
15:35:43.0046 0808 abp480n5 - ok
15:35:43.0125 0808 [ ADC420616C501B45D26C0FD3EF1E54E4 ] ACDaemon E:\Programme\Gemeinsame Dateien\ArcSoft\Connection Service\Bin\ACService.exe
15:35:43.0234 0808 ACDaemon - ok
15:35:43.0296 0808 [ E6F53D6C0DEA3D375362265E175CA638 ] acedrv11 E:\WINDOWS\system32\drivers\acedrv11.sys
15:35:43.0296 0808 acedrv11 - ok
15:35:43.0375 0808 [ AC407F1A62C3A300B4F2B5A9F1D55B2C ] ACPI E:\WINDOWS\system32\DRIVERS\ACPI.sys
15:35:46.0515 0808 ACPI - ok
15:35:46.0531 0808 [ 9E1CA3160DAFB159CA14F83B1E317F75 ] ACPIEC E:\WINDOWS\system32\drivers\ACPIEC.sys
15:35:46.0640 0808 ACPIEC - ok
15:35:46.0750 0808 [ F040037B149FD0F5A5044AE563390FA7 ] AdobeFlashPlayerUpdateSvc E:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
15:35:46.0765 0808 AdobeFlashPlayerUpdateSvc - ok
15:35:46.0765 0808 adpu160m - ok
15:35:46.0828 0808 [ 8BED39E3C35D6A489438B8141717A557 ] aec E:\WINDOWS\system32\drivers\aec.sys
15:35:46.0921 0808 aec - ok
15:35:46.0953 0808 [ 30BB1BDE595CA65FD5549462080D94E5 ] AegisP E:\WINDOWS\system32\DRIVERS\AegisP.sys
15:35:46.0968 0808 AegisP ( UnsignedFile.Multi.Generic ) - warning
15:35:46.0968 0808 AegisP - detected UnsignedFile.Multi.Generic (1)
15:35:47.0046 0808 [ 1E44BC1E83D8FD2305F8D452DB109CF9 ] AFD E:\WINDOWS\System32\drivers\afd.sys
15:35:47.0078 0808 AFD - ok
15:35:47.0078 0808 Aha154x - ok
15:35:47.0093 0808 aic78u2 - ok
15:35:47.0093 0808 aic78xx - ok
15:35:47.0109 0808 [ 738D80CC01D7BC7584BE917B7F544394 ] Alerter E:\WINDOWS\system32\alrsvc.dll
15:35:47.0187 0808 Alerter - ok
15:35:47.0203 0808 [ 190CD73D4984F94D823F9444980513E5 ] ALG E:\WINDOWS\System32\alg.exe
15:35:47.0265 0808 ALG - ok
15:35:47.0265 0808 AliIde - ok
15:35:47.0281 0808 amsint - ok
15:35:47.0375 0808 [ D9A92E6DD41C5ADC045AE485026AA40C ] AntiVirSchedulerService E:\Programme\Avira\AntiVir Desktop\sched.exe
15:35:47.0390 0808 AntiVirSchedulerService - ok
15:35:47.0437 0808 [ 66A7A38F7C439153B758548375EB9E5E ] AntiVirService E:\Programme\Avira\AntiVir Desktop\avguard.exe
15:35:47.0437 0808 AntiVirService - ok
15:35:47.0453 0808 AppMgmt - ok
15:35:47.0453 0808 asc - ok
15:35:47.0453 0808 asc3350p - ok
15:35:47.0453 0808 asc3550 - ok
15:35:47.0531 0808 [ 0E5E4957549056E2BF2C49F4F6B601AD ] aspnet_state E:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
15:35:47.0546 0808 aspnet_state - ok
15:35:47.0562 0808 [ B153AFFAC761E7F5FCFA822B9C4E97BC ] AsyncMac E:\WINDOWS\system32\DRIVERS\asyncmac.sys
15:35:47.0640 0808 AsyncMac - ok
15:35:47.0687 0808 [ 9F3A2F5AA6875C72BF062C712CFA2674 ] atapi E:\WINDOWS\system32\DRIVERS\atapi.sys
15:35:47.0750 0808 atapi - ok
15:35:47.0765 0808 Atdisk - ok
15:35:47.0843 0808 [ F0D933B42CD0594048E4D5200AE9E417 ] atksgt E:\WINDOWS\system32\DRIVERS\atksgt.sys
15:35:47.0859 0808 atksgt - ok
15:35:47.0890 0808 [ 9916C1225104BA14794209CFA8012159 ] Atmarpc E:\WINDOWS\system32\DRIVERS\atmarpc.sys
15:35:47.0953 0808 Atmarpc - ok
15:35:47.0984 0808 [ 58ED0D5452DF7BE732193E7999C6B9A4 ] AudioSrv E:\WINDOWS\System32\audiosrv.dll
15:35:48.0062 0808 AudioSrv - ok
15:35:48.0078 0808 [ D9F724AA26C010A217C97606B160ED68 ] audstub E:\WINDOWS\system32\DRIVERS\audstub.sys
15:35:48.0140 0808 audstub - ok
15:35:48.0187 0808 [ 87425709A251386064C99B684BF96F72 ] avgntflt E:\WINDOWS\system32\DRIVERS\avgntflt.sys
15:35:48.0203 0808 avgntflt - ok
15:35:48.0265 0808 [ D50FBA68163BC498F2C136E0E5BA8E2F ] avipbb E:\WINDOWS\system32\DRIVERS\avipbb.sys
15:35:48.0265 0808 avipbb - ok
15:35:48.0312 0808 [ CB8741CD7B126499FED40C9B197F6AC5 ] avkmgr E:\WINDOWS\system32\DRIVERS\avkmgr.sys
15:35:48.0312 0808 avkmgr - ok
15:35:48.0328 0808 [ DA1F27D85E0D1525F6621372E7B685E9 ] Beep E:\WINDOWS\system32\drivers\Beep.sys
15:35:48.0406 0808 Beep - ok
15:35:48.0531 0808 [ D6F603772A789BB3228F310D650B8BD1 ] BITS E:\WINDOWS\System32\qmgr.dll
15:35:48.0671 0808 BITS - ok
15:35:48.0703 0808 [ D3FACB34FFF5DB91ADB70987838F8BA7 ] Brother XP spl Service E:\WINDOWS\System32\brsvc01a.exe
15:35:48.0765 0808 Brother XP spl Service - ok
15:35:48.0796 0808 [ B71549F23736ADF83A571061C47777FD ] Browser E:\WINDOWS\System32\browser.dll
15:35:48.0859 0808 Browser - ok
15:35:48.0875 0808 [ 92A964547B96D697E5E9ED43B4297F5A ] BrScnUsb E:\WINDOWS\system32\Drivers\BrScnUsb.sys
15:35:48.0921 0808 BrScnUsb - ok
15:35:48.0937 0808 [ 90A673FC8E12A79AFBED2576F6A7AAF9 ] cbidf2k E:\WINDOWS\system32\drivers\cbidf2k.sys
15:35:49.0015 0808 cbidf2k - ok
15:35:49.0031 0808 [ 0BE5AEF125BE881C4F854C554F2B025C ] CCDECODE E:\WINDOWS\system32\DRIVERS\CCDECODE.sys
15:35:49.0109 0808 CCDECODE - ok
15:35:49.0109 0808 cd20xrnt - ok
15:35:49.0140 0808 [ C1B486A7658353D33A10CC15211A873B ] Cdaudio E:\WINDOWS\system32\drivers\Cdaudio.sys
15:35:49.0218 0808 Cdaudio - ok
15:35:49.0265 0808 [ C885B02847F5D2FD45A24E219ED93B32 ] Cdfs E:\WINDOWS\system32\drivers\Cdfs.sys
15:35:49.0328 0808 Cdfs - ok
15:35:49.0359 0808 [ 1F4260CC5B42272D71F79E570A27A4FE ] Cdrom E:\WINDOWS\system32\DRIVERS\cdrom.sys
15:35:49.0421 0808 Cdrom - ok
15:35:49.0437 0808 Changer - ok
15:35:49.0453 0808 [ 28E3040D1F1CA2008CD6B29DFEBC9A5E ] cisvc E:\WINDOWS\System32\cisvc.exe
15:35:49.0515 0808 cisvc - ok
15:35:49.0546 0808 [ 778A30ED3C134EB7E406AFC407E9997D ] ClipSrv E:\WINDOWS\system32\clipsrv.exe
15:35:49.0625 0808 ClipSrv - ok
15:35:49.0656 0808 [ D87ACAED61E417BBA546CED5E7E36D9C ] clr_optimization_v2.0.50727_32 E:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
15:35:49.0656 0808 clr_optimization_v2.0.50727_32 - ok
15:35:49.0656 0808 CmdIde - ok
15:35:49.0671 0808 COMSysApp - ok
15:35:49.0671 0808 Cpqarray - ok
15:35:49.0687 0808 [ 611F824E5C703A5A899F84C5F1699E4D ] CryptSvc E:\WINDOWS\System32\cryptsvc.dll
15:35:49.0765 0808 CryptSvc - ok
15:35:49.0765 0808 dac2w2k - ok
15:35:49.0765 0808 dac960nt - ok
15:35:49.0875 0808 [ 3127AFBF2C1ED0AB14A1BBB7AAECB85B ] DcomLaunch E:\WINDOWS\system32\rpcss.dll
15:35:49.0984 0808 DcomLaunch - ok
15:35:50.0031 0808 [ C29A1C9B75BA38FA37F8C44405DEC360 ] Dhcp E:\WINDOWS\System32\dhcpcsvc.dll
15:35:50.0109 0808 Dhcp - ok
15:35:50.0125 0808 [ 044452051F3E02E7963599FC8F4F3E25 ] Disk E:\WINDOWS\system32\DRIVERS\disk.sys
15:35:50.0234 0808 Disk - ok
15:35:50.0234 0808 dmadmin - ok
15:35:50.0453 0808 [ 0DCFC8395A99FECBB1EF771CEC7FE4EA ] dmboot E:\WINDOWS\system32\drivers\dmboot.sys
15:35:50.0671 0808 dmboot - ok
15:35:50.0718 0808 [ 53720AB12B48719D00E327DA470A619A ] dmio E:\WINDOWS\system32\drivers\dmio.sys
15:35:50.0781 0808 dmio - ok
15:35:50.0796 0808 [ E9317282A63CA4D188C0DF5E09C6AC5F ] dmload E:\WINDOWS\system32\drivers\dmload.sys
15:35:50.0859 0808 dmload - ok
15:35:50.0890 0808 [ 25C83FFBBA13B554EB6D59A9B2E2EE78 ] dmserver E:\WINDOWS\System32\dmserver.dll
15:35:50.0968 0808 dmserver - ok
15:35:51.0000 0808 [ 8A208DFCF89792A484E76C40E5F50B45 ] DMusic E:\WINDOWS\system32\drivers\DMusic.sys
15:35:51.0078 0808 DMusic - ok
15:35:51.0109 0808 [ 407F3227AC618FD1CA54B335B083DE07 ] Dnscache E:\WINDOWS\System32\dnsrslvr.dll
15:35:51.0171 0808 Dnscache - ok
15:35:51.0234 0808 [ 676E36C4FF5BCEA1900F44182B9723E6 ] Dot3svc E:\WINDOWS\System32\dot3svc.dll
15:35:51.0312 0808 Dot3svc - ok
15:35:51.0312 0808 dpti2o - ok
15:35:51.0328 0808 [ 8F5FCFF8E8848AFAC920905FBD9D33C8 ] drmkaud E:\WINDOWS\system32\drivers\drmkaud.sys
15:35:51.0390 0808 drmkaud - ok
15:35:51.0421 0808 [ 4E4F2FDDAB0A0736D7671134DCCE91FB ] EapHost E:\WINDOWS\System32\eapsvc.dll
15:35:51.0500 0808 EapHost - ok
15:35:51.0531 0808 [ D82414EC520453EFE2EBA936F6A9115A ] EAPPkt E:\WINDOWS\system32\DRIVERS\EAPPkt.sys
15:35:51.0531 0808 EAPPkt ( UnsignedFile.Multi.Generic ) - warning
15:35:51.0531 0808 EAPPkt - detected UnsignedFile.Multi.Generic (1)
15:35:51.0562 0808 [ 59C9E1336A4508F059827D638E924C62 ] ElbyCDFL E:\WINDOWS\system32\Drivers\ElbyCDFL.sys
15:35:51.0562 0808 ElbyCDFL ( UnsignedFile.Multi.Generic ) - warning
15:35:51.0562 0808 ElbyCDFL - detected UnsignedFile.Multi.Generic (1)
15:35:51.0578 0808 [ 389823DB299B350F2EE830D47376EEAC ] ElbyCDIO E:\WINDOWS\system32\Drivers\ElbyCDIO.sys
15:35:51.0593 0808 ElbyCDIO ( UnsignedFile.Multi.Generic ) - warning
15:35:51.0593 0808 ElbyCDIO - detected UnsignedFile.Multi.Generic (1)
15:35:51.0609 0808 [ C4143FC2F7D39A5A8B1CFE0BC4BD8A9E ] ElbyVCD E:\WINDOWS\system32\DRIVERS\ElbyVCD.sys
15:35:51.0609 0808 ElbyVCD ( UnsignedFile.Multi.Generic ) - warning
15:35:51.0609 0808 ElbyVCD - detected UnsignedFile.Multi.Generic (1)
15:35:51.0640 0808 [ 877C18558D70587AA7823A1A308AC96B ] ERSvc E:\WINDOWS\System32\ersvc.dll
15:35:51.0718 0808 ERSvc - ok
15:35:51.0765 0808 [ A3EDBE9053889FB24AB22492472B39DC ] Eventlog E:\WINDOWS\system32\services.exe
15:35:51.0781 0808 Eventlog - ok
15:35:51.0859 0808 [ AF4F6B5739D18CA7972AB53E091CBC74 ] EventSystem E:\WINDOWS\System32\es.dll
15:35:51.0890 0808 EventSystem - ok
15:35:51.0937 0808 [ 38D332A6D56AF32635675F132548343E ] Fastfat E:\WINDOWS\system32\drivers\Fastfat.sys
15:35:52.0000 0808 Fastfat - ok
15:35:52.0062 0808 [ 2DB7D303C36DDD055215052F118E8E75 ] FastUserSwitchingCompatibility E:\WINDOWS\System32\shsvcs.dll
15:35:52.0093 0808 FastUserSwitchingCompatibility - ok
15:35:52.0125 0808 [ 92CDD60B6730B9F50F6A1A0C1F8CDC81 ] Fdc E:\WINDOWS\system32\drivers\Fdc.sys
15:35:52.0203 0808 Fdc - ok
15:35:52.0234 0808 [ B0678A548587C5F1967B0D70BACAD6C1 ] Fips E:\WINDOWS\system32\drivers\Fips.sys
15:35:52.0296 0808 Fips - ok
15:35:52.0312 0808 [ 9D27E7B80BFCDF1CDD9B555862D5E7F0 ] Flpydisk E:\WINDOWS\system32\drivers\Flpydisk.sys
15:35:52.0375 0808 Flpydisk - ok
15:35:52.0421 0808 [ B2CF4B0786F8212CB92ED2B50C6DB6B0 ] FltMgr E:\WINDOWS\system32\drivers\fltmgr.sys
15:35:52.0484 0808 FltMgr - ok
15:35:52.0546 0808 [ 8BA7C024070F2B7FDD98ED8A4BA41789 ] FontCache3.0.0.0 E:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
15:35:52.0546 0808 FontCache3.0.0.0 - ok
15:35:52.0562 0808 [ 3E1E2BD4F39B0E2B7DC4F4D2BCC2779A ] Fs_Rec E:\WINDOWS\system32\drivers\Fs_Rec.sys
15:35:52.0625 0808 Fs_Rec - ok
15:35:52.0656 0808 [ 8F1955CE42E1484714B542F341647778 ] Ftdisk E:\WINDOWS\system32\DRIVERS\ftdisk.sys
15:35:52.0734 0808 Ftdisk - ok
15:35:52.0734 0808 [ 77EBF3E9386DAA51551AF429052D88D0 ] giveio E:\WINDOWS\system32\giveio.sys
15:35:52.0750 0808 giveio ( UnsignedFile.Multi.Generic ) - warning
15:35:52.0750 0808 giveio - detected UnsignedFile.Multi.Generic (1)
15:35:52.0781 0808 [ 0A02C63C8B144BD8C86B103DEE7C86A2 ] Gpc E:\WINDOWS\system32\DRIVERS\msgpc.sys
15:35:52.0843 0808 Gpc - ok
15:35:52.0890 0808 [ 573C7D0A32852B48F3058CFD8026F511 ] HDAudBus E:\WINDOWS\system32\DRIVERS\HDAudBus.sys
15:35:52.0968 0808 HDAudBus - ok
15:35:53.0031 0808 [ CB66BF85BF599BEFD6C6A57C2E20357F ] helpsvc E:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll
15:35:53.0093 0808 helpsvc - ok
15:35:53.0093 0808 HidServ - ok
15:35:53.0109 0808 [ CCF82C5EC8A7326C3066DE870C06DAF1 ] HidUsb E:\WINDOWS\system32\DRIVERS\hidusb.sys
15:35:53.0187 0808 HidUsb - ok
15:35:53.0218 0808 [ ED29F14101523A6E0E808107405D452C ] hkmsvc E:\WINDOWS\System32\kmsvc.dll
15:35:53.0296 0808 hkmsvc - ok
15:35:53.0296 0808 hpn - ok
15:35:53.0296 0808 hpt3xx - ok
15:35:53.0390 0808 [ F80A415EF82CD06FFAF0D971528EAD38 ] HTTP E:\WINDOWS\system32\Drivers\HTTP.sys
15:35:53.0421 0808 HTTP - ok
15:35:53.0437 0808 [ 9E4ADB854CEBCFB81A4B36718FEECD16 ] HTTPFilter E:\WINDOWS\System32\w3ssl.dll
15:35:53.0500 0808 HTTPFilter - ok
15:35:53.0500 0808 i2omgmt - ok
15:35:53.0500 0808 i2omp - ok
15:35:53.0531 0808 [ E283B97CFBEB86C1D86BAED5F7846A92 ] i8042prt E:\WINDOWS\system32\DRIVERS\i8042prt.sys
15:35:53.0609 0808 i8042prt - ok
15:35:53.0671 0808 [ 6F95324909B502E2651442C1548AB12F ] IDriverT E:\Programme\Gemeinsame Dateien\InstallShield\Driver\1050\Intel 32\IDriverT.exe
15:35:53.0687 0808 IDriverT ( UnsignedFile.Multi.Generic ) - warning
15:35:53.0687 0808 IDriverT - detected UnsignedFile.Multi.Generic (1)
15:35:53.0968 0808 [ C01AC32DC5C03076CFB852CB5DA5229C ] idsvc E:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
15:35:54.0187 0808 idsvc - ok
15:35:54.0203 0808 [ 083A052659F5310DD8B6A6CB05EDCF8E ] Imapi E:\WINDOWS\system32\DRIVERS\imapi.sys
15:35:54.0281 0808 Imapi - ok
15:35:54.0343 0808 [ D4B413AA210C21E46AEDD2BA5B68D38E ] ImapiService E:\WINDOWS\System32\imapi.exe
15:35:54.0406 0808 ImapiService - ok
15:35:54.0421 0808 InCDFs - ok
15:35:54.0421 0808 InCDPass - ok
15:35:54.0421 0808 InCDRm - ok
15:35:54.0421 0808 ini910u - ok
15:35:55.0703 0808 [ 19D3781892A3794672CD1962F3D8D3B8 ] IntcAzAudAddService E:\WINDOWS\system32\drivers\RtkHDAud.sys
15:35:57.0046 0808 IntcAzAudAddService - ok
15:35:57.0046 0808 IntelIde - ok
15:35:57.0078 0808 [ 4C7D2750158ED6E7AD642D97BFFAE351 ] intelppm E:\WINDOWS\system32\DRIVERS\intelppm.sys
15:35:57.0156 0808 intelppm - ok
15:35:57.0171 0808 [ 3BB22519A194418D5FEC05D800A19AD0 ] ip6fw E:\WINDOWS\system32\drivers\ip6fw.sys
15:35:57.0250 0808 ip6fw - ok
15:35:57.0265 0808 [ 731F22BA402EE4B62748ADAF6363C182 ] IpFilterDriver E:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
15:35:57.0343 0808 IpFilterDriver - ok
15:35:57.0359 0808 [ B87AB476DCF76E72010632B5550955F5 ] IpInIp E:\WINDOWS\system32\DRIVERS\ipinip.sys
15:35:57.0421 0808 IpInIp - ok
15:35:57.0468 0808 [ CC748EA12C6EFFDE940EE98098BF96BB ] IpNat E:\WINDOWS\system32\DRIVERS\ipnat.sys
15:35:57.0546 0808 IpNat - ok
15:35:57.0593 0808 [ 23C74D75E36E7158768DD63D92789A91 ] IPSec E:\WINDOWS\system32\DRIVERS\ipsec.sys
15:35:57.0656 0808 IPSec - ok
15:35:57.0671 0808 [ C93C9FF7B04D772627A3646D89F7BF89 ] IRENUM E:\WINDOWS\system32\DRIVERS\irenum.sys
15:35:57.0703 0808 IRENUM - ok
15:35:57.0734 0808 [ 6DFB88F64135C525433E87648BDA30DE ] isapnp E:\WINDOWS\system32\DRIVERS\isapnp.sys
15:35:57.0812 0808 isapnp - ok
15:35:57.0875 0808 [ B7A5FADF67136FDA7E8F25303565B674 ] ithsgt E:\WINDOWS\system32\DRIVERS\ithsgt.sys
15:35:57.0890 0808 ithsgt ( UnsignedFile.Multi.Generic ) - warning
15:35:57.0890 0808 ithsgt - detected UnsignedFile.Multi.Generic (1)
15:35:58.0000 0808 [ 5739F2821D49975CEDE6BF0153D0CF01 ] JavaQuickStarterService E:\Programme\Java\jre7\bin\jqs.exe
15:35:58.0015 0808 JavaQuickStarterService - ok
15:35:58.0031 0808 [ 1704D8C4C8807B889E43C649B478A452 ] Kbdclass E:\WINDOWS\system32\DRIVERS\kbdclass.sys
15:35:58.0093 0808 Kbdclass - ok
15:35:58.0156 0808 [ 692BCF44383D056AED41B045A323D378 ] kmixer E:\WINDOWS\system32\drivers\kmixer.sys
15:35:58.0234 0808 kmixer - ok
15:35:58.0281 0808 [ B467646C54CC746128904E1654C750C1 ] KSecDD E:\WINDOWS\system32\drivers\KSecDD.sys
15:35:58.0343 0808 KSecDD - ok
15:35:58.0390 0808 [ 2BBDCB79900990F0716DFCB714E72DE7 ] lanmanserver E:\WINDOWS\System32\srvsvc.dll
15:35:58.0421 0808 lanmanserver - ok
15:35:58.0468 0808 [ 1869B14B06B44B44AF70548E1EA3303F ] lanmanworkstation E:\WINDOWS\System32\wkssvc.dll
15:35:58.0500 0808 lanmanworkstation - ok
15:35:58.0500 0808 lbrtfdc - ok
15:35:58.0531 0808 [ 16767EA492B5D140E1DE3679A65EAE74 ] lilsgt E:\WINDOWS\system32\DRIVERS\lilsgt.sys
15:35:58.0531 0808 lilsgt ( UnsignedFile.Multi.Generic ) - warning
15:35:58.0531 0808 lilsgt - detected UnsignedFile.Multi.Generic (1)
15:35:58.0562 0808 [ F8A7212D0864EF5E9185FB95E6623F4D ] lirsgt E:\WINDOWS\system32\DRIVERS\lirsgt.sys
15:35:58.0578 0808 lirsgt - ok
15:35:58.0593 0808 [ 636714B7D43C8D0C80449123FD266920 ] LmHosts E:\WINDOWS\System32\lmhsvc.dll
15:35:58.0671 0808 LmHosts - ok
15:35:58.0687 0808 [ B7550A7107281D170CE85524B1488C98 ] Messenger E:\WINDOWS\System32\msgsvc.dll
15:35:58.0765 0808 Messenger - ok
15:35:58.0781 0808 [ 4AE068242760A1FB6E1A44BF4E16AFA6 ] mnmdd E:\WINDOWS\system32\drivers\mnmdd.sys
15:35:58.0859 0808 mnmdd - ok
15:35:58.0890 0808 [ C2F1D365FD96791B037EE504868065D3 ] mnmsrvc E:\WINDOWS\System32\mnmsrvc.exe
15:35:58.0953 0808 mnmsrvc - ok
15:35:58.0984 0808 [ 6FB74EBD4EC57A6F1781DE3852CC3362 ] Modem E:\WINDOWS\system32\drivers\Modem.sys
15:35:59.0062 0808 Modem - ok
15:35:59.0078 0808 [ C741717B0A18813DD7D12085937CEE72 ] motccgp E:\WINDOWS\system32\DRIVERS\motccgp.sys
15:35:59.0328 0808 motccgp - ok
15:35:59.0343 0808 [ B812DA6605CAF02641312F1F65C75419 ] motccgpfl E:\WINDOWS\system32\DRIVERS\motccgpfl.sys
15:35:59.0375 0808 motccgpfl - ok
15:35:59.0406 0808 [ 54FEE02961C70FD9D4D7E2F87AFA23FA ] motmodem E:\WINDOWS\system32\DRIVERS\motmodem.sys
15:35:59.0421 0808 motmodem - ok
15:35:59.0468 0808 [ BB9DE58AC6513DA62C005D92E2DB4981 ] MotoConnect Service E:\Programme\Motorola\MotoConnectService\MotoConnectService.exe
15:35:59.0484 0808 MotoConnect Service - ok
15:35:59.0484 0808 [ FD8C2CEF7AD8B23C6714103D621FAC1F ] MotoSwitchService E:\WINDOWS\system32\DRIVERS\motswch.sys
15:35:59.0515 0808 MotoSwitchService - ok
15:35:59.0515 0808 [ 2136CCA3D1BF7C0248E5366B1A6C24E3 ] motusbdevice E:\WINDOWS\system32\DRIVERS\motusbdevice.sys
15:35:59.0546 0808 motusbdevice - ok
15:35:59.0562 0808 [ B24CE8005DEAB254C0251E15CB71D802 ] Mouclass E:\WINDOWS\system32\DRIVERS\mouclass.sys
15:35:59.0625 0808 Mouclass - ok
15:35:59.0640 0808 [ 66A6F73C74E1791464160A7065CE711A ] mouhid E:\WINDOWS\system32\DRIVERS\mouhid.sys
15:35:59.0718 0808 mouhid - ok
15:35:59.0734 0808 [ A80B9A0BAD1B73637DBCBBA7DF72D3FD ] MountMgr E:\WINDOWS\system32\drivers\MountMgr.sys
15:35:59.0812 0808 MountMgr - ok
15:35:59.0875 0808 [ 7EDBBB9351A38C6BB0FE98CFD44DB430 ] MozillaMaintenance E:\Programme\Mozilla Maintenance Service\maintenanceservice.exe
15:35:59.0890 0808 MozillaMaintenance - ok
15:35:59.0890 0808 mraid35x - ok
15:35:59.0937 0808 [ 11D42BB6206F33FBB3BA0288D3EF81BD ] MRxDAV E:\WINDOWS\system32\DRIVERS\mrxdav.sys
15:36:00.0000 0808 MRxDAV - ok
15:36:00.0140 0808 [ 7D304A5EB4344EBEEAB53A2FE3FFB9F0 ] MRxSmb E:\WINDOWS\system32\DRIVERS\mrxsmb.sys
15:36:00.0218 0808 MRxSmb - ok
15:36:00.0250 0808 [ 35A031AF38C55F92D28AA03EE9F12CC9 ] MSDTC E:\WINDOWS\System32\msdtc.exe
15:36:00.0312 0808 MSDTC - ok
15:36:00.0328 0808 [ C941EA2454BA8350021D774DAF0F1027 ] Msfs E:\WINDOWS\system32\drivers\Msfs.sys
15:36:00.0390 0808 Msfs - ok
15:36:00.0390 0808 MSIServer - ok
15:36:00.0421 0808 [ D1575E71568F4D9E14CA56B7B0453BF1 ] MSKSSRV E:\WINDOWS\system32\drivers\MSKSSRV.sys
15:36:00.0484 0808 MSKSSRV - ok
15:36:00.0500 0808 [ 325BB26842FC7CCC1FCCE2C457317F3E ] MSPCLOCK E:\WINDOWS\system32\drivers\MSPCLOCK.sys
15:36:00.0578 0808 MSPCLOCK - ok
15:36:00.0593 0808 [ BAD59648BA099DA4A17680B39730CB3D ] MSPQM E:\WINDOWS\system32\drivers\MSPQM.sys
15:36:00.0656 0808 MSPQM - ok
15:36:00.0671 0808 [ AF5F4F3F14A8EA2C26DE30F7A1E17136 ] mssmbios E:\WINDOWS\system32\DRIVERS\mssmbios.sys
15:36:00.0734 0808 mssmbios - ok
15:36:00.0765 0808 [ E53736A9E30C45FA9E7B5EAC55056D1D ] MSTEE E:\WINDOWS\system32\drivers\MSTEE.sys
15:36:00.0828 0808 MSTEE - ok
15:36:00.0875 0808 [ DE6A75F5C270E756C5508D94B6CF68F5 ] Mup E:\WINDOWS\system32\drivers\Mup.sys
15:36:00.0890 0808 Mup - ok
15:36:00.0921 0808 [ 5B50F1B2A2ED47D560577B221DA734DB ] NABTSFEC E:\WINDOWS\system32\DRIVERS\NABTSFEC.sys
15:36:01.0000 0808 NABTSFEC - ok
15:36:01.0109 0808 [ 46BB15AE2AC7D025D6D2567B876817BD ] napagent E:\WINDOWS\System32\qagentrt.dll
15:36:01.0187 0808 napagent - ok
15:36:01.0250 0808 [ 1DF7F42665C94B825322FAE71721130D ] NDIS E:\WINDOWS\system32\drivers\NDIS.sys
15:36:01.0312 0808 NDIS - ok
15:36:01.0343 0808 [ 7FF1F1FD8609C149AA432F95A8163D97 ] NdisIP E:\WINDOWS\system32\DRIVERS\NdisIP.sys
15:36:01.0406 0808 NdisIP - ok
15:36:01.0437 0808 [ 0109C4F3850DFBAB279542515386AE22 ] NdisTapi E:\WINDOWS\system32\DRIVERS\ndistapi.sys
15:36:01.0453 0808 NdisTapi - ok
15:36:01.0484 0808 [ F927A4434C5028758A842943EF1A3849 ] Ndisuio E:\WINDOWS\system32\DRIVERS\ndisuio.sys
15:36:01.0546 0808 Ndisuio - ok
15:36:01.0578 0808 [ EDC1531A49C80614B2CFDA43CA8659AB ] NdisWan E:\WINDOWS\system32\DRIVERS\ndiswan.sys
15:36:01.0640 0808 NdisWan - ok
15:36:01.0671 0808 [ 9282BD12DFB069D3889EB3FCC1000A9B ] NDProxy E:\WINDOWS\system32\drivers\NDProxy.sys
15:36:01.0703 0808 NDProxy - ok
15:36:01.0718 0808 [ 5D81CF9A2F1A3A756B66CF684911CDF0 ] NetBIOS E:\WINDOWS\system32\DRIVERS\netbios.sys
15:36:01.0796 0808 NetBIOS - ok
15:36:01.0843 0808 [ 74B2B2F5BEA5E9A3DC021D685551BD3D ] NetBT E:\WINDOWS\system32\DRIVERS\netbt.sys
15:36:01.0906 0808 NetBT - ok
15:36:01.0953 0808 [ 8ACE4251BFFD09CE75679FE940E996CC ] NetDDE E:\WINDOWS\system32\netdde.exe
15:36:02.0031 0808 NetDDE - ok
15:36:02.0046 0808 [ 8ACE4251BFFD09CE75679FE940E996CC ] NetDDEdsdm E:\WINDOWS\system32\netdde.exe
15:36:02.0140 0808 NetDDEdsdm - ok
15:36:02.0156 0808 [ AFB8261B56CBA0D86AEB6DF682AF9785 ] Netlogon E:\WINDOWS\System32\lsass.exe
15:36:02.0218 0808 Netlogon - ok
15:36:02.0281 0808 [ E6D88F1F6745BF00B57E7855A2AB696C ] Netman E:\WINDOWS\System32\netman.dll
15:36:02.0343 0808 Netman - ok
15:36:02.0406 0808 [ D34612C5D02D026535B3095D620626AE ] NetTcpPortSharing E:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
15:36:02.0406 0808 NetTcpPortSharing - ok
15:36:02.0484 0808 [ F1B67B6B0751AE0E6E964B02821206A3 ] Nla E:\WINDOWS\System32\mswsock.dll
15:36:02.0500 0808 Nla - ok
15:36:02.0531 0808 [ 1E421A6BCF2203CC61B821ADA9DE878B ] nm E:\WINDOWS\system32\DRIVERS\NMnt.sys
15:36:02.0593 0808 nm - ok
15:36:02.0625 0808 [ 3182D64AE053D6FB034F44B6DEF8034A ] Npfs E:\WINDOWS\system32\drivers\Npfs.sys
15:36:02.0687 0808 Npfs - ok
15:36:02.0843 0808 [ 78A08DD6A8D65E697C18E1DB01C5CDCA ] Ntfs E:\WINDOWS\system32\drivers\Ntfs.sys
15:36:02.0984 0808 Ntfs - ok
15:36:03.0000 0808 [ AFB8261B56CBA0D86AEB6DF682AF9785 ] NtLmSsp E:\WINDOWS\System32\lsass.exe
15:36:03.0062 0808 NtLmSsp - ok
15:36:03.0187 0808 [ 56AF4064996FA5BAC9C449B1514B4770 ] NtmsSvc E:\WINDOWS\system32\ntmssvc.dll
15:36:03.0328 0808 NtmsSvc - ok
15:36:03.0546 0808 [ 73C1E1F395918BC2C6DD67AF7591A3AD ] Null E:\WINDOWS\system32\drivers\Null.sys
15:36:03.0609 0808 Null - ok
15:36:05.0609 0808 [ F85E109844787668CE8AAB54EF14362A ] nv E:\WINDOWS\system32\DRIVERS\nv4_mini.sys
15:36:07.0656 0808 nv - ok
15:36:07.0734 0808 [ CC9275DB74AD57AC0C3EE823F9922298 ] nvsvc E:\WINDOWS\system32\nvsvc32.exe
15:36:07.0750 0808 nvsvc ( UnsignedFile.Multi.Generic ) - warning
15:36:07.0750 0808 nvsvc - detected UnsignedFile.Multi.Generic (1)
15:36:07.0765 0808 [ B305F3FAD35083837EF46A0BBCE2FC57 ] NwlnkFlt E:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
15:36:07.0843 0808 NwlnkFlt - ok
15:36:07.0859 0808 [ C99B3415198D1AAB7227F2C88FD664B9 ] NwlnkFwd E:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
15:36:07.0937 0808 NwlnkFwd - ok
15:36:07.0984 0808 [ 7A56CF3E3F12E8AF599963B16F50FB6A ] ose E:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE
15:36:07.0984 0808 ose - ok
15:36:08.0031 0808 [ F84785660305B9B903FB3BCA8BA29837 ] Parport E:\WINDOWS\system32\DRIVERS\parport.sys
15:36:08.0109 0808 Parport - ok
15:36:08.0125 0808 [ BEB3BA25197665D82EC7065B724171C6 ] PartMgr E:\WINDOWS\system32\drivers\PartMgr.sys
15:36:08.0203 0808 PartMgr - ok
15:36:08.0218 0808 [ C2BF987829099A3EAA2CA6A0A90ECB4F ] ParVdm E:\WINDOWS\system32\drivers\ParVdm.sys
15:36:08.0281 0808 ParVdm - ok
15:36:08.0312 0808 [ 387E8DEDC343AA2D1EFBC30580273ACD ] PCI E:\WINDOWS\system32\DRIVERS\pci.sys
15:36:08.0390 0808 PCI - ok
15:36:08.0390 0808 PCIDump - ok
15:36:08.0406 0808 [ 59BA86D9A61CBCF4DF8E598C331F5B82 ] PCIIde E:\WINDOWS\system32\DRIVERS\pciide.sys
15:36:08.0468 0808 PCIIde - ok
15:36:08.0515 0808 [ A2A966B77D61847D61A3051DF87C8C97 ] Pcmcia E:\WINDOWS\system32\drivers\Pcmcia.sys
15:36:08.0578 0808 Pcmcia - ok
15:36:08.0578 0808 PDCOMP - ok
15:36:08.0578 0808 PDFRAME - ok
15:36:08.0578 0808 PDRELI - ok
15:36:08.0578 0808 PDRFRAME - ok
15:36:08.0578 0808 perc2 - ok
15:36:08.0578 0808 perc2hib - ok
15:36:08.0625 0808 [ A3EDBE9053889FB24AB22492472B39DC ] PlugPlay E:\WINDOWS\system32\services.exe
15:36:08.0640 0808 PlugPlay - ok
15:36:08.0656 0808 [ AFB8261B56CBA0D86AEB6DF682AF9785 ] PolicyAgent E:\WINDOWS\System32\lsass.exe
15:36:08.0718 0808 PolicyAgent - ok
15:36:08.0734 0808 [ EFEEC01B1D3CF84F16DDD24D9D9D8F99 ] PptpMiniport E:\WINDOWS\system32\DRIVERS\raspptp.sys
15:36:08.0812 0808 PptpMiniport - ok
15:36:08.0828 0808 [ 2CB55427C58679F49AD600FCCBA76360 ] Processor E:\WINDOWS\system32\DRIVERS\processr.sys
15:36:08.0890 0808 Processor - ok
15:36:08.0906 0808 [ AFB8261B56CBA0D86AEB6DF682AF9785 ] ProtectedStorage E:\WINDOWS\system32\lsass.exe
15:36:08.0968 0808 ProtectedStorage - ok
15:36:08.0984 0808 [ 09298EC810B07E5D582CB3A3F9255424 ] PSched E:\WINDOWS\system32\DRIVERS\psched.sys
15:36:09.0046 0808 PSched - ok
15:36:09.0078 0808 [ 80D317BD1C3DBC5D4FE7B1678C60CADD ] Ptilink E:\WINDOWS\system32\DRIVERS\ptilink.sys
15:36:09.0140 0808 Ptilink - ok
15:36:09.0140 0808 ql1080 - ok
15:36:09.0140 0808 Ql10wnt - ok
15:36:09.0140 0808 ql12160 - ok
15:36:09.0156 0808 ql1240 - ok
15:36:09.0156 0808 ql1280 - ok
15:36:09.0156 0808 [ FE0D99D6F31E4FAD8159F690D68DED9C ] RasAcd E:\WINDOWS\system32\DRIVERS\rasacd.sys
15:36:09.0234 0808 RasAcd - ok
15:36:09.0265 0808 [ F5BA6CACCDB66C8F048E867563203246 ] RasAuto E:\WINDOWS\System32\rasauto.dll
15:36:09.0343 0808 RasAuto - ok
15:36:09.0359 0808 [ 11B4A627BC9614B885C4969BFA5FF8A6 ] Rasl2tp E:\WINDOWS\system32\DRIVERS\rasl2tp.sys
15:36:09.0421 0808 Rasl2tp - ok
15:36:09.0484 0808 [ F9A7B66EA345726EDB5862A46B1ECCD5 ] RasMan E:\WINDOWS\System32\rasmans.dll
15:36:09.0562 0808 RasMan - ok
15:36:09.0578 0808 [ 5BC962F2654137C9909C3D4603587DEE ] RasPppoe E:\WINDOWS\system32\DRIVERS\raspppoe.sys
15:36:09.0640 0808 RasPppoe - ok
15:36:09.0656 0808 [ FDBB1D60066FCFBB7452FD8F9829B242 ] Raspti E:\WINDOWS\system32\DRIVERS\raspti.sys
15:36:09.0718 0808 Raspti - ok
15:36:09.0765 0808 [ 7AD224AD1A1437FE28D89CF22B17780A ] Rdbss E:\WINDOWS\system32\DRIVERS\rdbss.sys
15:36:09.0843 0808 Rdbss - ok
15:36:09.0859 0808 [ 4912D5B403614CE99C28420F75353332 ] RDPCDD E:\WINDOWS\system32\DRIVERS\RDPCDD.sys
15:36:09.0921 0808 RDPCDD - ok
15:36:09.0984 0808 [ 43AF5212BD8FB5BA6EED9754358BD8F7 ] RDPWD E:\WINDOWS\system32\drivers\RDPWD.sys
15:36:10.0015 0808 RDPWD - ok
15:36:10.0078 0808 [ 263AF18AF0F3DB99F574C95F284CCEC9 ] RDSessMgr E:\WINDOWS\system32\sessmgr.exe
15:36:10.0140 0808 RDSessMgr - ok
15:36:10.0171 0808 [ ED761D453856F795A7FE056E42C36365 ] redbook E:\WINDOWS\system32\DRIVERS\redbook.sys
15:36:10.0250 0808 redbook - ok
15:36:10.0265 0808 [ 0E97EC96D6942CEEC2D188CC2EB69A01 ] RemoteAccess E:\WINDOWS\System32\mprdim.dll
15:36:10.0343 0808 RemoteAccess - ok
15:36:10.0375 0808 [ 2A02E21867497DF20B8FC95631395169 ] RpcLocator E:\WINDOWS\System32\locator.exe
15:36:10.0453 0808 RpcLocator - ok
15:36:10.0546 0808 [ 3127AFBF2C1ED0AB14A1BBB7AAECB85B ] RpcSs E:\WINDOWS\system32\rpcss.dll
15:36:10.0671 0808 RpcSs - ok
15:36:10.0734 0808 [ 4BDD71B4B521521499DFD14735C4F398 ] RSVP E:\WINDOWS\System32\rsvp.exe
15:36:10.0796 0808 RSVP - ok
15:36:10.0859 0808 [ F0A21C62B9B835E1C96268EAAE31D239 ] RTLE8023xp E:\WINDOWS\system32\DRIVERS\Rtenicxp.sys
15:36:10.0921 0808 RTLE8023xp - ok
15:36:10.0968 0808 [ 395F8A964B7412DE019AAEFE95C9637C ] RTLWUSB E:\WINDOWS\system32\DRIVERS\RTL8187.sys
15:36:11.0015 0808 RTLWUSB - ok
15:36:11.0031 0808 [ AFB8261B56CBA0D86AEB6DF682AF9785 ] SamSs E:\WINDOWS\system32\lsass.exe
15:36:11.0093 0808 SamSs - ok
15:36:11.0140 0808 [ DCEC079FAD95D36C8DD5CB6D779DFE32 ] SCardSvr E:\WINDOWS\System32\SCardSvr.exe
15:36:11.0250 0808 SCardSvr - ok
15:36:11.0328 0808 [ A050194A44D7FA8D7186ED2F4E8367AE ] Schedule E:\WINDOWS\system32\schedsvc.dll
15:36:11.0406 0808 Schedule - ok
15:36:11.0421 0808 [ 90A3935D05B494A5A39D37E71F09A677 ] Secdrv E:\WINDOWS\system32\DRIVERS\secdrv.sys
15:36:11.0453 0808 Secdrv - ok
15:36:11.0468 0808 [ BEE4CFD1D48C23B44CF4B974B0B79B2B ] seclogon E:\WINDOWS\System32\seclogon.dll
15:36:11.0531 0808 seclogon - ok
15:36:11.0546 0808 [ 2AAC9B6ED9EDDFFB721D6452E34D67E3 ] SENS E:\WINDOWS\system32\sens.dll
15:36:11.0625 0808 SENS - ok
15:36:11.0640 0808 [ 0F29512CCD6BEAD730039FB4BD2C85CE ] serenum E:\WINDOWS\system32\DRIVERS\serenum.sys
15:36:11.0703 0808 serenum - ok
15:36:11.0718 0808 [ CF24EB4F0412C82BCD1F4F35A025E31D ] Serial E:\WINDOWS\system32\DRIVERS\serial.sys
15:36:11.0781 0808 Serial - ok
15:36:11.0796 0808 [ 8E6B8C671615D126FDC553D1E2DE5562 ] Sfloppy E:\WINDOWS\system32\drivers\Sfloppy.sys
15:36:11.0859 0808 Sfloppy - ok
15:36:11.0984 0808 [ CAD058D5F8B889A87CA3EB3CF624DCEF ] SharedAccess E:\WINDOWS\System32\ipnathlp.dll
15:36:12.0140 0808 SharedAccess - ok
15:36:12.0187 0808 [ 2DB7D303C36DDD055215052F118E8E75 ] ShellHWDetection E:\WINDOWS\System32\shsvcs.dll
15:36:12.0203 0808 ShellHWDetection - ok
15:36:12.0203 0808 Simbad - ok
15:36:12.0218 0808 [ 866D538EBE33709A5C9F5C62B73B7D14 ] SLIP E:\WINDOWS\system32\DRIVERS\SLIP.sys
15:36:12.0296 0808 SLIP - ok
15:36:12.0296 0808 Sparrow - ok
15:36:12.0328 0808 [ 9F70CD5EDCC4EFC48AE21E04FB03BE9D ] speedfan E:\WINDOWS\system32\speedfan.sys
15:36:12.0328 0808 speedfan - ok
15:36:12.0359 0808 [ AB8B92451ECB048A4D1DE7C3FFCB4A9F ] splitter E:\WINDOWS\system32\drivers\splitter.sys
15:36:12.0421 0808 splitter - ok
15:36:12.0453 0808 [ 60784F891563FB1B767F70117FC2428F ] Spooler E:\WINDOWS\system32\spoolsv.exe
15:36:12.0500 0808 Spooler - ok
15:36:12.0515 0808 [ 50FA898F8C032796D3B1B9951BB5A90F ] sr E:\WINDOWS\system32\DRIVERS\sr.sys
15:36:12.0562 0808 sr - ok
15:36:12.0625 0808 [ FE77A85495065F3AD59C5C65B6C54182 ] srservice E:\WINDOWS\System32\srsvc.dll
15:36:12.0656 0808 srservice - ok
15:36:12.0765 0808 [ 47DDFC2F003F7F9F0592C6874962A2E7 ] Srv E:\WINDOWS\system32\DRIVERS\srv.sys
15:36:12.0875 0808 Srv - ok
15:36:12.0906 0808 [ 4DF5B05DFAEC29E13E1ED6F6EE12C500 ] SSDPSRV E:\WINDOWS\System32\ssdpsrv.dll
15:36:12.0937 0808 SSDPSRV - ok
15:36:12.0968 0808 [ A36EE93698802CD899F98BFD553D8185 ] ssmdrv E:\WINDOWS\system32\DRIVERS\ssmdrv.sys
15:36:12.0984 0808 ssmdrv - ok
15:36:13.0078 0808 [ BC2C5985611C5356B24AEB370953DED9 ] stisvc E:\WINDOWS\system32\wiaservc.dll
15:36:13.0234 0808 stisvc - ok
15:36:13.0265 0808 [ 77813007BA6265C4B6098187E6ED79D2 ] streamip E:\WINDOWS\system32\DRIVERS\StreamIP.sys
15:36:13.0328 0808 streamip - ok
15:36:13.0343 0808 [ 3941D127AEF12E93ADDF6FE6EE027E0F ] swenum E:\WINDOWS\system32\DRIVERS\swenum.sys
15:36:13.0421 0808 swenum - ok
15:36:13.0468 0808 [ 8CE882BCC6CF8A62F2B2323D95CB3D01 ] swmidi E:\WINDOWS\system32\drivers\swmidi.sys
15:36:13.0546 0808 swmidi - ok
15:36:13.0546 0808 SwPrv - ok
15:36:13.0546 0808 symc810 - ok
15:36:13.0546 0808 symc8xx - ok
15:36:13.0546 0808 sym_hi - ok
15:36:13.0546 0808 sym_u3 - ok
15:36:13.0578 0808 [ 8B83F3ED0F1688B4958F77CD6D2BF290 ] sysaudio E:\WINDOWS\system32\drivers\sysaudio.sys
15:36:13.0640 0808 sysaudio - ok
15:36:13.0687 0808 [ 2903FFFA2523926D6219428040DCE6B9 ] SysmonLog E:\WINDOWS\system32\smlogsvc.exe
15:36:13.0750 0808 SysmonLog - ok
15:36:13.0750 0808 SystemStoreService - ok
15:36:13.0828 0808 [ 05903CAC4B98908D55EA5774775B382E ] TapiSrv E:\WINDOWS\System32\tapisrv.dll
15:36:13.0890 0808 TapiSrv - ok
15:36:14.0000 0808 [ 9AEFA14BD6B182D61E3119FA5F436D3D ] Tcpip E:\WINDOWS\system32\DRIVERS\tcpip.sys
15:36:14.0093 0808 Tcpip - ok
15:36:14.0125 0808 [ 6471A66807F5E104E4885F5B67349397 ] TDPIPE E:\WINDOWS\system32\drivers\TDPIPE.sys
15:36:14.0203 0808 TDPIPE - ok
15:36:14.0218 0808 [ C56B6D0402371CF3700EB322EF3AAF61 ] TDTCP E:\WINDOWS\system32\drivers\TDTCP.sys
15:36:14.0281 0808 TDTCP - ok
15:36:14.0296 0808 [ 88155247177638048422893737429D9E ] TermDD E:\WINDOWS\system32\DRIVERS\termdd.sys
15:36:14.0359 0808 TermDD - ok
15:36:14.0453 0808 [ B7DE02C863D8F5A005A7BF375375A6A4 ] TermService E:\WINDOWS\System32\termsrv.dll
15:36:14.0531 0808 TermService - ok
15:36:14.0562 0808 [ 2DB7D303C36DDD055215052F118E8E75 ] Themes E:\WINDOWS\System32\shsvcs.dll
15:36:14.0578 0808 Themes - ok
15:36:14.0578 0808 TosIde - ok
15:36:14.0609 0808 [ 626504572B175867F30F3215C04B3E2F ] TrkWks E:\WINDOWS\system32\trkwks.dll
15:36:14.0687 0808 TrkWks - ok
15:36:14.0718 0808 [ 5787B80C2E3C5E2F56C2A233D91FA2C9 ] Udfs E:\WINDOWS\system32\drivers\Udfs.sys
15:36:14.0781 0808 Udfs - ok
15:36:14.0781 0808 ultra - ok
15:36:14.0890 0808 [ 402DDC88356B1BAC0EE3DD1580C76A31 ] Update E:\WINDOWS\system32\DRIVERS\update.sys
15:36:15.0031 0808 Update - ok
15:36:15.0093 0808 [ 1DFD8975D8C89214B98D9387C1125B49 ] upnphost E:\WINDOWS\System32\upnphost.dll
15:36:15.0156 0808 upnphost - ok
15:36:15.0171 0808 [ 9B11E6118958E63E1FEF129466E2BDA7 ] UPS E:\WINDOWS\System32\ups.exe
15:36:15.0250 0808 UPS - ok
15:36:15.0265 0808 [ 173F317CE0DB8E21322E71B7E60A27E8 ] usbccgp E:\WINDOWS\system32\DRIVERS\usbccgp.sys
15:36:15.0328 0808 usbccgp - ok
15:36:15.0359 0808 [ 65DCF09D0E37D4C6B11B5B0B76D470A7 ] usbehci E:\WINDOWS\system32\DRIVERS\usbehci.sys
15:36:15.0421 0808 usbehci - ok
15:36:15.0453 0808 [ 1AB3CDDE553B6E064D2E754EFE20285C ] usbhub E:\WINDOWS\system32\DRIVERS\usbhub.sys
15:36:15.0531 0808 usbhub - ok
15:36:15.0562 0808 [ A717C8721046828520C9EDF31288FC00 ] usbprint E:\WINDOWS\system32\DRIVERS\usbprint.sys
15:36:15.0625 0808 usbprint - ok
15:36:15.0671 0808 [ A0B8CF9DEB1184FBDD20784A58FA75D4 ] usbscan E:\WINDOWS\system32\DRIVERS\usbscan.sys
15:36:15.0750 0808 usbscan - ok
15:36:15.0765 0808 [ A32426D9B14A089EAA1D922E0C5801A9 ] usbstor E:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
15:36:15.0843 0808 usbstor - ok
15:36:15.0875 0808 [ 26496F9DEE2D787FC3E61AD54821FFE6 ] usbuhci E:\WINDOWS\system32\DRIVERS\usbuhci.sys
15:36:15.0937 0808 usbuhci - ok
15:36:16.0000 0808 [ 63BBFCA7F390F4C49ED4B96BFB1633E0 ] usbvideo E:\WINDOWS\system32\Drivers\usbvideo.sys
15:36:16.0062 0808 usbvideo - ok
15:36:16.0078 0808 [ 0D3A8FAFCEACD8B7625CD549757A7DF1 ] VgaSave E:\WINDOWS\System32\drivers\vga.sys
15:36:16.0140 0808 VgaSave - ok
15:36:16.0140 0808 ViaIde - ok
15:36:16.0187 0808 [ A5A712F4E880874A477AF790B5186E1D ] VolSnap E:\WINDOWS\system32\drivers\VolSnap.sys
15:36:16.0265 0808 VolSnap - ok
15:36:16.0359 0808 [ 68F106273BE29E7B7EF8266977268E78 ] VSS E:\WINDOWS\System32\vssvc.exe
15:36:16.0546 0808 VSS - ok
15:36:16.0609 0808 [ 7B353059E665F8B7AD2BBEAEF597CF45 ] W32Time E:\WINDOWS\System32\w32time.dll
15:36:16.0671 0808 W32Time - ok
15:36:16.0703 0808 [ E20B95BAEDB550F32DD489265C1DA1F6 ] Wanarp E:\WINDOWS\system32\DRIVERS\wanarp.sys
15:36:16.0765 0808 Wanarp - ok
15:36:16.0921 0808 [ BBCFEAB7E871CDDAC2D397EE7FA91FDC ] Wdf01000 E:\WINDOWS\system32\Drivers\wdf01000.sys
15:36:17.0000 0808 Wdf01000 - ok
15:36:17.0000 0808 WDICA - ok
15:36:17.0031 0808 [ 6768ACF64B18196494413695F0C3A00F ] wdmaud E:\WINDOWS\system32\drivers\wdmaud.sys
15:36:17.0093 0808 wdmaud - ok
15:36:17.0140 0808 [ 81727C9873E3905A2FFC1EBD07265002 ] WebClient E:\WINDOWS\System32\webclnt.dll
15:36:17.0234 0808 WebClient - ok
15:36:17.0312 0808 [ 6F3F3973D97714CC5F906A19FE883729 ] winmgmt E:\WINDOWS\system32\wbem\WMIsvc.dll
15:36:17.0390 0808 winmgmt - ok
15:36:17.0406 0808 [ 6E18978B749F0696A774DE3F2CB142DD ] WmdmPmSN E:\WINDOWS\System32\mspmsnsv.dll
15:36:17.0468 0808 WmdmPmSN - ok
15:36:17.0515 0808 [ 93908111BA57A6E60EC2FA2DE202105C ] WmiApSrv E:\WINDOWS\System32\wbem\wmiapsrv.exe
15:36:17.0578 0808 WmiApSrv - ok
15:36:17.0625 0808 [ 300B3E84FAF1A5C1F791C159BA28035D ] wscsvc E:\WINDOWS\system32\wscsvc.dll
15:36:17.0703 0808 wscsvc - ok
15:36:17.0718 0808 [ C98B39829C2BBD34E454150633C62C78 ] WSTCODEC E:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS
15:36:17.0796 0808 WSTCODEC - ok
15:36:17.0812 0808 [ 7B4FE05202AA6BF9F4DFD0E6A0D8A085 ] wuauserv E:\WINDOWS\system32\wuauserv.dll
15:36:17.0890 0808 wuauserv - ok
15:36:18.0015 0808 [ C4F109C005F6725162D2D12CA751E4A7 ] WZCSVC E:\WINDOWS\System32\wzcsvc.dll
15:36:18.0171 0808 WZCSVC - ok
15:36:18.0234 0808 [ 0ADA34871A2E1CD2CAAFED1237A47750 ] xmlprov E:\WINDOWS\System32\xmlprov.dll
15:36:18.0312 0808 xmlprov - ok
15:36:18.0312 0808 ================ Scan global ===============================
15:36:18.0343 0808 [ 2C60091CA5F67C3032EAB3B30390C27F ] E:\WINDOWS\system32\basesrv.dll
15:36:18.0437 0808 [ E62178BC21EAC63A3B9A2DBD46C1B505 ] E:\WINDOWS\system32\winsrv.dll
15:36:18.0515 0808 [ E62178BC21EAC63A3B9A2DBD46C1B505 ] E:\WINDOWS\system32\winsrv.dll
15:36:18.0562 0808 [ A3EDBE9053889FB24AB22492472B39DC ] E:\WINDOWS\system32\services.exe
15:36:18.0562 0808 [Global] - ok
15:36:18.0562 0808 ================ Scan MBR ==================================
15:36:18.0578 0808 [ 72B8CE41AF0DE751C946802B3ED844B4 ] \Device\Harddisk0\DR0
15:36:18.0890 0808 \Device\Harddisk0\DR0 - ok
15:36:19.0359 0808 [ 671B81004FDD1588FA9ED1331C9CECA9 ] \Device\Harddisk1\DR1
15:36:19.0437 0808 \Device\Harddisk1\DR1 - ok
15:36:19.0437 0808 ================ Scan VBR ==================================
15:36:19.0437 0808 [ B77F3B7DEF69127A6350AED12931FA16 ] \Device\Harddisk0\DR0\Partition1
15:36:19.0437 0808 \Device\Harddisk0\DR0\Partition1 - ok
15:36:19.0437 0808 [ 7F638D383DE2576E900905F82CA34495 ] \Device\Harddisk0\DR0\Partition2
15:36:19.0437 0808 \Device\Harddisk0\DR0\Partition2 - ok
15:36:19.0453 0808 [ 8BE54C17F6656664FFB3ED8F244D655E ] \Device\Harddisk0\DR0\Partition3
15:36:19.0453 0808 \Device\Harddisk0\DR0\Partition3 - ok
15:36:19.0453 0808 [ CE7CA84E7E4DA1C3509C48E3B2A2F4CE ] \Device\Harddisk1\DR1\Partition1
15:36:19.0453 0808 \Device\Harddisk1\DR1\Partition1 - ok
15:36:19.0453 0808 ============================================================
15:36:19.0453 0808 Scan finished
15:36:19.0453 0808 ============================================================
15:36:19.0562 1624 Detected object count: 10
15:36:19.0562 1624 Actual detected object count: 10
15:38:06.0406 1624 AegisP ( UnsignedFile.Multi.Generic ) - skipped by user
15:38:06.0406 1624 AegisP ( UnsignedFile.Multi.Generic ) - User select action: Skip
15:38:06.0406 1624 EAPPkt ( UnsignedFile.Multi.Generic ) - skipped by user
15:38:06.0406 1624 EAPPkt ( UnsignedFile.Multi.Generic ) - User select action: Skip
15:38:06.0406 1624 ElbyCDFL ( UnsignedFile.Multi.Generic ) - skipped by user
15:38:06.0406 1624 ElbyCDFL ( UnsignedFile.Multi.Generic ) - User select action: Skip
15:38:06.0406 1624 ElbyCDIO ( UnsignedFile.Multi.Generic ) - skipped by user
15:38:06.0406 1624 ElbyCDIO ( UnsignedFile.Multi.Generic ) - User select action: Skip
15:38:06.0406 1624 ElbyVCD ( UnsignedFile.Multi.Generic ) - skipped by user
15:38:06.0406 1624 ElbyVCD ( UnsignedFile.Multi.Generic ) - User select action: Skip
15:38:06.0406 1624 giveio ( UnsignedFile.Multi.Generic ) - skipped by user
15:38:06.0406 1624 giveio ( UnsignedFile.Multi.Generic ) - User select action: Skip
15:38:06.0406 1624 IDriverT ( UnsignedFile.Multi.Generic ) - skipped by user
15:38:06.0406 1624 IDriverT ( UnsignedFile.Multi.Generic ) - User select action: Skip
15:38:06.0406 1624 ithsgt ( UnsignedFile.Multi.Generic ) - skipped by user
15:38:06.0406 1624 ithsgt ( UnsignedFile.Multi.Generic ) - User select action: Skip
15:38:06.0406 1624 lilsgt ( UnsignedFile.Multi.Generic ) - skipped by user
15:38:06.0406 1624 lilsgt ( UnsignedFile.Multi.Generic ) - User select action: Skip
15:38:06.0406 1624 nvsvc ( UnsignedFile.Multi.Generic ) - skipped by user
15:38:06.0406 1624 nvsvc ( UnsignedFile.Multi.Generic ) - User select action: Skip
15:38:12.0500 1760 Deinitialize success

markusg · 23.05.2013, 14:42

Aber immernoch sauber
Scan mit Combofix

WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link

WICHTIG: Speichere Combofix auf deinem Desktop.

Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.

Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.

Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!

Wenn Combofix fertig ist, wird es ein Logfile erstellen.

Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).

Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.

Jak113 · 23.05.2013, 14:54

Ja, das Programm meckert:
Erst meinte es, dass mein Echtzeitscanner noch an sei - was aber nicht der Fall war. (Habe ich ignoriert)
Jetzt kommt die Meldung mein PC verfüge nicht über die Microsoft-Wiederherstellungskonsole.
Soll ich diese mit ComboFix herunterladen?

markusg · 23.05.2013, 16:21

ja.

Jak113 · 23.05.2013, 16:41

So, hier das Lofile von Combofix (ich weiß leider nicht was CODE-Tags sind):

Combofix Logfile:

Code:

ATTFilter

ComboFix 13-05-23.02 - *** 23.05.2013  17:24:36.1.4 - x86
Microsoft Windows XP Home Edition  5.1.2600.3.1252.49.1031.18.3263.2839 [GMT 2:00]
ausgeführt von:: e:\dokumente und einstellungen\***\Desktop\ComboFix.exe
AV: Avira Desktop *Enabled/Updated* {AD166499-45F9-482A-A743-FDD3350758C7}
.
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
e:\dokumente und einstellungen\All Users\Anwendungsdaten\Tages
e:\dokumente und einstellungen\All Users\Anwendungsdaten\Tages\100663612\Serial.txt
e:\dokumente und einstellungen\All Users\Anwendungsdaten\Tages\Priv.xey
e:\dokumente und einstellungen\***\4.0
e:\dokumente und einstellungen\***\jucheck.exe
e:\dokumente und einstellungen\***\WindowsUpdate.exe
.
.
(((((((((((((((((((((((   Dateien erstellt von 2013-04-23 bis 2013-05-23  ))))))))))))))))))))))))))))))
.
.
2013-05-23 11:12 . 2013-05-23 11:23	--------	d-----w-	E:\_OTL
2013-05-04 18:26 . 2013-05-04 18:26	--------	d-----w-	e:\dokumente und einstellungen\***\Lokale Einstellungen\Anwendungsdaten\Mozilla
2013-05-04 18:26 . 2013-05-04 18:26	--------	d-----w-	e:\programme\Mozilla Maintenance Service
2013-04-29 13:32 . 2013-04-29 13:32	--------	d-----w-	e:\dokumente und einstellungen\All Users\Anwendungsdaten\Malwarebytes
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-05-15 17:34 . 2012-04-03 16:47	692104	----a-w-	e:\windows\system32\FlashPlayerApp.exe
2013-05-15 17:34 . 2011-05-16 12:11	71048	----a-w-	e:\windows\system32\FlashPlayerCPLApp.cpl
2013-04-23 07:24 . 2013-04-23 07:24	144896	----a-w-	e:\windows\system32\javacpl.cpl
2013-04-23 07:24 . 2013-04-23 07:24	94112	----a-w-	e:\windows\system32\WindowsAccessBridge.dll
2013-04-23 07:24 . 2012-08-22 19:39	866720	----a-w-	e:\windows\system32\npdeployJava1.dll
2013-04-23 07:24 . 2010-09-19 08:07	788896	----a-w-	e:\windows\system32\deployJava1.dll
2013-04-16 22:16 . 2009-07-25 20:08	43520	----a-w-	e:\windows\system32\licmgr10.dll
2013-04-16 22:16 . 2009-07-25 20:08	920064	----a-w-	e:\windows\system32\wininet.dll
2013-04-16 22:16 . 2009-07-25 20:08	1469440	------w-	e:\windows\system32\inetcpl.cpl
2013-04-12 23:28 . 2009-07-25 20:15	385024	----a-w-	e:\windows\system32\html.iec
2013-04-12 14:00 . 2001-08-18 12:00	1876480	----a-w-	e:\windows\system32\win32k.sys
2013-04-09 12:19 . 2009-07-26 08:11	281760	----a-w-	e:\windows\system32\drivers\atksgt.sys
2013-04-09 09:36 . 2009-07-26 08:11	25888	----a-w-	e:\windows\system32\drivers\lirsgt.sys
2013-03-28 07:25 . 2013-03-26 09:24	84744	----a-w-	e:\windows\system32\drivers\avgntflt.sys
2013-03-28 07:25 . 2013-03-26 09:24	37352	----a-w-	e:\windows\system32\drivers\avkmgr.sys
2013-03-28 07:25 . 2013-03-26 09:24	135136	----a-w-	e:\windows\system32\drivers\avipbb.sys
2013-03-08 08:36 . 2001-08-18 12:00	293888	----a-w-	e:\windows\system32\winsrv.dll
2013-03-07 15:56 . 2001-08-18 04:28	2031104	----a-w-	e:\windows\system32\ntkrnlpa.exe
2013-03-07 15:56 . 2001-08-18 12:00	2152448	----a-w-	e:\windows\system32\ntoskrnl.exe
2013-02-27 07:56 . 2009-07-25 20:08	2067456	----a-w-	e:\windows\system32\mstscax.dll
2013-04-10 06:57 . 2013-05-04 18:26	263064	----a-w-	e:\programme\mozilla firefox\components\browsercomps.dll
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"nwiz"="e:\programme\NVIDIA Corporation\nView\nwiz.exe" [2009-07-08 1657376]
"NvCplDaemon"="e:\windows\system32\NvCpl.dll" [2009-07-14 13877248]
"NvMediaCenter"="e:\windows\system32\NvMcTray.dll" [2009-07-14 86016]
"RTHDCPL"="RTHDCPL.EXE" [2008-10-28 17331200]
"CloneCDElbyCDFL"="e:\programme\Elaborate Bytes\CloneCD\ElbyCheck.exe" [2002-11-02 45056]
"NeroFilterCheck"="e:\windows\system32\NeroCheck.exe" [2001-07-09 155648]
"ArcSoft Connection Service"="e:\programme\Gemeinsame Dateien\ArcSoft\Connection Service\Bin\ACDaemon.exe" [2010-10-27 207424]
"APSDaemon"="e:\programme\Gemeinsame Dateien\Apple\Apple Application Support\APSDaemon.exe" [2012-10-11 59280]
"QuickTime Task"="e:\programme\QuickTime\qttask.exe" [2012-10-25 421888]
"avgnt"="e:\programme\Avira\AntiVir Desktop\avgnt.exe" [2013-05-06 345312]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="e:\windows\System32\CTFMON.EXE" [2008-04-14 15360]
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"e:\\Programme\\Nero\\Nero 7\\Nero ShowTime\\ShowTime.exe"=
"g:\\Spiele\\Anno 1701\\Anno1701.exe"=
"e:\\Programme\\Gemeinsame Dateien\\Apple\\Apple Application Support\\WebKit2WebProcess.exe"=
.
R0 ElbyVCD;ElbyVCD;e:\windows\system32\drivers\ElbyVCD.sys [28.11.2002 12:43 22016]
R1 avkmgr;avkmgr;e:\windows\system32\drivers\avkmgr.sys [26.03.2013 11:24 37352]
R2 acedrv11;acedrv11;e:\windows\system32\drivers\acedrv11.sys [24.02.2010 12:22 185472]
R2 AntiVirSchedulerService;Avira Planer;e:\programme\Avira\AntiVir Desktop\sched.exe [26.03.2013 11:24 86752]
R2 EAPPkt;Realtek EAPPkt Protocol;e:\windows\system32\drivers\EAPPkt.sys [25.07.2009 15:28 38144]
R2 MotoConnect Service;MotoConnect Service;e:\programme\Motorola\MotoConnectService\MotoConnectService.exe [17.02.2013 20:32 91392]
R3 RTLWUSB;Realtek RTL8187 Wireless 802.11g 54Mbps USB 2.0 Network Adapter;e:\windows\system32\drivers\RTL8187.sys [25.07.2009 15:27 194304]
S2 SystemStoreService;System Store Service;"e:\programme\Freemium\SystemStore\SystemStore.exe"  -displayname "System Store Service" -servicename:SystemStoreService --> e:\programme\Freemium\SystemStore\SystemStore.exe [?]
S3 motccgp;Motorola USB Composite Device Driver;e:\windows\system32\drivers\motccgp.sys [17.02.2013 20:32 19712]
S3 motccgpfl;MotCcgpFlService;e:\windows\system32\drivers\motccgpfl.sys [17.02.2013 20:32 8320]
S3 motusbdevice;Motorola USB Dev Driver;e:\windows\system32\drivers\motusbdevice.sys [17.02.2013 20:32 9472]
.
--- Andere Dienste/Treiber im Speicher ---
.
*NewlyCreated* - 01631012
*NewlyCreated* - 14016576
*Deregistered* - 01631012
*Deregistered* - 14016576
.
Inhalt des "geplante Tasks" Ordners
.
2013-05-23 e:\windows\Tasks\Adobe Flash Player Updater.job
- e:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-03 17:35]
.
2013-05-16 e:\windows\Tasks\AppleSoftwareUpdate.job
- e:\programme\Apple Software Update\SoftwareUpdate.exe [2011-06-01 15:57]
.
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = about:blank
uInternet Connection Wizard,ShellNext = iexplore
IE: Nach Microsoft &Excel exportieren - e:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
TCP: DhcpNameServer = 192.168.2.1 192.168.2.1
DPF: Microsoft XML Parser for Java - file://e:\windows\Java\classes\xmldso.cab
FF - ProfilePath - e:\dokumente und einstellungen\***\Anwendungsdaten\Mozilla\Firefox\Profiles\ha8d8sef.default\
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, hxxp://www.gmer.net
Rootkit scan 2013-05-23 17:29
Windows 5.1.2600 Service Pack 3 NTFS
.
Scanne versteckte Prozesse... 
.
Scanne versteckte Autostarteinträge... 
.
Scanne versteckte Dateien... 
.
Scan erfolgreich abgeschlossen
versteckte Dateien: 0
.
**************************************************************************
.
[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\SystemStoreService]
"ImagePath"="\"e:\programme\Freemium\SystemStore\SystemStore.exe\"  -displayname \"System Store Service\" -servicename:SystemStoreService"
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@e:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil32_11_7_700_202_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="e:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil32_11_7_700_202_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
Zeit der Fertigstellung: 2013-05-23  17:31:00
ComboFix-quarantined-files.txt  2013-05-23 15:30
.
Vor Suchlauf: 8 Verzeichnis(se), 20.997.496.832 Bytes frei
Nach Suchlauf: 10 Verzeichnis(se), 21.415.768.064 Bytes frei
.
WindowsXP-KB310994-SP2-Home-BootDisk-DEU.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Home Edition" /fastdetect
.
- - End Of File - - AC30A9C37E20BA9FE21D7CF587161847

--- --- ---

markusg · 23.05.2013, 16:53

Hi,

lade den CCleaner standard:
CCleaner - Download - Filepony
falls der CCleaner
bereits instaliert, überspringen.
öffnen, Tools (extras),uninstall Llist, als txt speichern. öffnen.
hinter, jedes von dir benötigte programm, schreibe notwendig.
hinter, jedes, von dir nicht benötigte, unnötig.
hinter, dir unbekannte, unbekannt.
liste posten.

Jak113 · 23.05.2013, 17:17

Hier kommt die Liste . ich hoffe ich habe alles richtig gemacht!

Adobe Flash Player 11 ActiveX Adobe Systems Incorporated 19.05.2013 11.7.700.202 notwendig
Anno 1701 Sunflowers 29.08.2012 1.00 unnötig
Anti-Twin (Installation 23.12.2012) Joerg Rosenthal, Germany 23.12.2012 unnötig
Apple Application Support Apple Inc. 13.12.2012 66,77MB 2.3 unbekannt
Apple Software Update Apple Inc. 17.04.2012 2,38MB 2.1.3.127 unbekannt
ArcSoft TotalMedia Backup ArcSoft 16.04.2010 1.5.21.3 notwendig
Avira Free Antivirus Avira 17.05.2013 13.0.0.3640 notwendig
AVS DVD Player version 2.4 Online Media Technologies Ltd. 03.09.2009 notwendig
AVS4YOU Software Navigator 1.2 Online Media Technologies Ltd. 03.09.2009 unbekannt
CCleaner Piriform 23.04.2013 4.01 notwendig
CloneCD Elaborate Bytes 28.09.2009 unnötig
Compatibility Pack für 2007 Office System Microsoft Corporation 02.02.2011 64,95MB 12.0.6021.5000 notwendig
Die Gilde 11.01.2011 unnötig
Die Gilde Update 1.05 Beta 3 11.01.2011 unnötig
Die Gilde Update v1.04a 11.01.2011 unnötig
Drakensang dtp 21.07.2012 unnötig
Drakensang - Am Fluss der Zeit dtp 06.10.2012 unnötig
Drakensang - Phileassons Geheimnis dtp 06.11.2012 unnötig
DVD Shrink 3.2 DVD Shrink 28.09.2009 unnötig
EAX4 Unified Redist Creative Labs 04.10.2011 0,16MB 4.001 unbekannt
ElsterFormular Landesfinanzdirektion Thüringen 07.03.2013 14.1.20130301 notwendig
Free YouTube Download version 3.2.1.320 DVDVideoSoft Ltd. 07.04.2013 3.2.1.320 notwendig
Free YouTube to MP3 Converter version 3.12.1.320 DVDVideoSoft Ltd. 07.04.2013 3.12.1.320 notwendig
GIMP 2.6.7 07.12.2009 notwendig
Gothic 20.07.2012 unnötig
Gothic II JoWooD Productions Software AG 23.05.2013 unnötig
Gothic II - Die Nacht des Raben JoWooD Productions Software AG 07.05.2010 unnötig
Gothic III JoWooD Productions Software AG 02.02.2013 1.0.0 unnötig
Gothic_Patch unnötig
HdR Die Rückkehr des Königs tm 19.11.2012 unnötig
IsoBuster 2.7 Smart Projects 05.01.2010 2.7 unnötig
Jagged Alliance 2 Wildfire 08.09.2011 unnötig
Java 7 Update 21 Oracle 23.04.2013 130,00MB 7.0.210 notwendig
MAGIX Music Maker for MySpace 15.0.1.8 (D) MAGIX AG 04.04.2011 15.0.1.8 unnötig
Mesquite Mesquite Project 12.01.2010 1.1 notwendig
Microsoft .NET Framework 2.0 Service Pack 2 Microsoft Corporation 15.05.2013 185,00MB 2.2.30729 unbekannt
Microsoft .NET Framework 3.0 Service Pack 2 Microsoft Corporation 10.01.2013 253,00MB 3.2.30729 unbekannt
Microsoft .NET Framework 3.5 SP1 Microsoft Corporation 10.01.2013 unbekannt
Microsoft Office Professional Edition 2003 Microsoft Corporation 25.07.2009 217,00MB 11.0.5614.0 unbekannt
Microsoft Visual C++ 2005 Redistributable Microsoft Corporation 26.07.2009 5,21MB 8.0.56336 unbekannt
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 Microsoft Corporation 25.07.2009 10,28MB 9.0.30729 unbekannt
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 Microsoft Corporation 27.03.2010 10,19MB 9.0.30729.4148 unbekannt
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 Microsoft Corporation 28.07.2011 10,20MB 9.0.30729.6161 unbekannt
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 Microsoft Corporation 17.10.2011 11,13MB 10.0.40219 unbekannt
MotoConnect Motorola 17.02.2013 2,35MB 1.1.21 unbekannt
Motorola Driver Installation 4.4.0 Motorola Inc. 17.02.2013 3,30MB 4.4.0 unbekannt
Mozilla Firefox 20.0.1 (x86 de) Mozilla 04.05.2013 20.0.1 unnötig
Mozilla Maintenance Service Mozilla 04.05.2013 20.0.1 unnötig
MSXML 4.0 SP2 (KB954430) Microsoft Corporation 18.10.2009 2,69MB 4.20.9870.0 unbekannt
MSXML 4.0 SP2 (KB973688) Microsoft Corporation 25.11.2009 2,79MB 4.20.9876.0 unbekannt
MSXML4 Parser Microsoft Game Studios 17.10.2009 1,25MB 1.0.0 unbekannt
MuseScore 1.1 MuseScore score typesetter Werner Schweer and Others 06.10.2011 1.1.0 unnötig
Music Editor Free MEF GmbH. 04.04.2011 unnötig
Nero 7 Demo Nero AG 28.09.2009 281,00MB 7.00.2423 notwendig
NVIDIA Drivers NVIDIA Corporation 23.05.2013 1.4 notwendig
NVIDIA nView Desktop Manager NVIDIA Corporation 25.07.2009 125.14 notwendig
NVIDIA PhysX NVIDIA Corporation 15.05.2012 121,00MB 9.09.0814 notwendig
Oblivion Bethesda Softworks 13.01.2012 1.2.0416 unnötig
PDF-Viewer Tracker Software Products Ltd 26.07.2009 2.0.42.2 notwendig
PDFCreator Frank Heindörfer, Philip Chinery 07.12.2009 0.9.8 notwendig
ProtectDisc Driver, Version 11 ProtectDisc Software GmbH 27.12.2012 11.0.0.14 unbekannt
QuickTime Apple Inc. 13.12.2012 73,18MB 7.73.80.64 unnötig
REALTEK GbE & FE Ethernet PCI-E NIC Driver Realtek 26.07.2009 1.17.0000 notwendig
Realtek High Definition Audio Driver Realtek Semiconductor Corp. 26.07.2009 5.10.0.5730 notwendig
Recuva Piriform 07.04.2013 1.45 unnötig
Risen Deep Silver 09.04.2013 1.00.0000 unnötig
Sid Meier's Civilization 4 Complete Firaxis Games 03.03.2011 1.74 unnötig
SpeedFan (remove only) 22.03.2013 unnötig
Spellforce 2 Gold JoWooD Productions Software AG 05.05.2013 1.00.0000 notwendig
Stronghold 07.07.2012 unnötig
Sun ODF Plugin for Microsoft Office 3.2 Sun Microsystems 14.11.2010 222,00MB 3.2.9483 unbekannt
TES Construction Set 07.07.2012 unbekannt
VLC media player 1.1.11 VideoLAN 28.01.2012 1.1.11 notwendig
Windows Genuine Advantage Validation Tool (KB892130) Microsoft Corporation 29.04.2013 unbekannt
Windows Internet Explorer 8 Microsoft Corporation 25.07.2009 20090308.140743 notwendig
Windows XP Service Pack 3 Microsoft Corporation 25.07.2009 20080414.031514 notwendig
WinRAR 05.01.2011 notwendig
XP Codec Pack 31.08.2009 notwendig
Zoner Photo Studio 9 ZONER software 01.12.2009 unnötig

23.05.2013, 11:44	#2
markusg /// Malware-holic	IExplorer öffnet bei Googlelinks falsche Seiten Hi, poste alle bisherigen Avira und Malwarebytes Funde: http://www.trojaner-board.de/125889-...en-posten.html __________________ __________________

23.05.2013, 14:33	#8
markusg /// Malware-holic	IExplorer öffnet bei Googlelinks falsche Seiten ist auch nicht laut Anleitung konfiguriert, bitte noch mal. __________________ -Verdächtige mails bitte an uns zur Analyse weiterleiten: markusg.trojaner-board@web.de Weiterleiten Anleitung: http://markusg.trojaner-board.de Mails bitte vorerst nach obiger Anleitung an markusg.trojaner-board@web.de Weiterleiten Wenn Ihr uns unterstützen möchtet

23.05.2013, 16:21	#12
markusg /// Malware-holic	IExplorer öffnet bei Googlelinks falsche Seiten ja. __________________ -Verdächtige mails bitte an uns zur Analyse weiterleiten: markusg.trojaner-board@web.de Weiterleiten Anleitung: http://markusg.trojaner-board.de Mails bitte vorerst nach obiger Anleitung an markusg.trojaner-board@web.de Weiterleiten Wenn Ihr uns unterstützen möchtet

IExplorer öffnet bei Googlelinks falsche Seiten

Log-Analyse und Auswertung: IExplorer öffnet bei Googlelinks falsche Seiten