| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Put Optional Dateien gefunden...Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
08.08.2013, 20:10
| #1 |
 |  Put Optional Dateien gefunden... hi, ich habe heut mal Malwarebyte laufen lassen und er hat mir 31 Dateien angezeigt, die allesamt von Put.Optional stammen und auch so beginnen. Was kann ich da jetzt am besten gegen machen, sprich was ist jetzt in welcher Reihenfolge zu bewerkstelligen, um da ziemlich sicher gehen zu können. Hier mal der Logfile: Code:
ATTFilter Malwarebytes Anti-Malware 1.75.0.1300 www.malwarebytes.org Datenbank Version: v2013.08.08.05 Windows 7 Service Pack 1 x64 NTFS Internet Explorer 10.0.9200.16635 Sino :: SINO-PC [Administrator] 08.08.2013 17:09:34 mbam-log-2013-08-08 (17-09-34).txt Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|) Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 615261 Laufzeit: 1 Stunde(n), 12 Minute(n), 45 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 1 HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{2A5A2A90-3B30-4E6E-A955-2F232C6EF517} (PUP.WebCake) -> Erfolgreich gelöscht und in Quarantäne gestellt. Infizierte Registrierungswerte: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: 0 (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: 3 C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\Cache (PUP.Optional.Tarma.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\ProgramData\Tarma Installer (PUP.Optional.Tarma.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504} (PUP.Optional.Tarma.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. Infizierte Dateien: 27 C:\Sandbox\Sino\DefaultBox\user\current\AppData\Local\Temp\CT3067892\statisticsStub.exe (PUP.Optional.Conduit.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Sandbox\Sino\DefaultBox\user\all\Tarma Installer\{C4ED781C-7394-4906-AAFF-D6AB64FF7C38}\Setup.exe (PUP.Optional.Tarma.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Sandbox\Sino\DefaultBox\user\current\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\C1LTXWXS\checktbexist[1].exe (PUP.Optional.Conduit.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Sandbox\Sino\DefaultBox\user\current\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\C1LTXWXS\WebCakesetup[1].exe (PUP.Optional.Yontoo) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Sandbox\Sino\DefaultBox\user\current\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\EUMBQCVO\statisticsstub[1].exe (PUP.Optional.Conduit.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Sandbox\Sino\DefaultBox\user\current\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JQ079JJI\WebCakesetup[1].exe (PUP.Optional.Yontoo) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Sandbox\Sino\DefaultBox\user\current\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\PBSXS798\stublogic[1].exe (PUP.Optional.Conduit.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Sandbox\Sino\DefaultBox\user\current\AppData\Local\Temp\CT3067892\ctbe.exe (PUP.Optional.Conduit.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Sandbox\Sino\DefaultBox\user\current\AppData\Local\Temp\CT3067892\ffLogic.exe (PUP.Optional.Conduit.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\Setup.dat (PUP.Optional.Tarma.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\Setup.exe (PUP.Optional.Tarma.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Sandbox\Sino\DefaultBox\drive\C\Program Files (x86)\Common Files\Umbrella\Umbrella.exe (PUP.Optional.Iminent) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Sandbox\Sino\DefaultBox\drive\C\Windows\Installer\655c97.msi (PUP.Optional.Iminent) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Sandbox\Sino\DefaultBox\user\all\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\Setup.exe (PUP.Optional.Tarma.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Sino\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JQ079JJI\WebCakesetup[1].exe (PUP.Optional.Yontoo) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Sino\AppData\Local\Temp\cUB4foA8.exe.part (PUP.Optional.Conduit.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Sino\AppData\Local\Temp\is1070216317\DeltaTB.exe (PUP.Optional.Babylon.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Sino\AppData\Local\Temp\is1070216317\LyricsWoofer_1060-2021_v116.exe (PUP.Optional.LyricsAd) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Sino\AppData\Local\Temp\is1070216317\Setup-D502DD2B71B5.exe (Trojan.PUP.WebCake.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Sino\AppData\Local\Temp\is1070216317\wajam_validate.exe (PUP.Optional.Wajam.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\_Setup.dll (PUP.Optional.Tarma.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\_Setupx.dll (PUP.Optional.Tarma.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\Setup.ico (PUP.Optional.Tarma.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Sandbox\Sino\DefaultBox\user\current\AppData\Local\Temp\CT3067892\stub.exe (PUP.Optional.Conduit.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Sandbox\Sino\DefaultBox\user\current\AppData\Roaming\Web Cake\WebCakeDesktop.exe (PUP.WebCake.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Sandbox\Sino\DefaultBox\user\current\Downloads\CT3067892_Miniclip.exe (PUP.Optional.Conduit.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Sino\AppData\Local\DownloadGuide\Offers\iminent.exe (PUP.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. (Ende) |
|
08.08.2013, 20:22
| #2 |
| /// Malware-holic   | Put Optional Dateien gefunden... Hi,
__________________laut Log surfst du in der Sandbox, das ist ok. Einige Funde deuten aber darauf hin, dass die Sandbox nicht immer genutzt wird, richtig? das ist gefährlich, bitte immer in der Sandbox arbeiten, bzw surfen! Lass die Sandbox doch immer automatisch leeren. es folgt gleich eine Anweisung zum Programm FRST, bitte beachte die Zusatzaufgabe für die Additionals.txt Empfehlungen fürs Deinstallieren Bitte kopiere die Liste der installierten Programme aus der additions.txt hier in deinen Thread. Notiere mir bitte hinter jede Zeile, ob folgendes Kategorie zutrifft: Unbekannt, Nötig, Unnötig Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:  FRST 64-Bit(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
|
08.08.2013, 20:51
| #3 |
| | Put Optional Dateien gefunden... frst:
__________________FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 08-08-2013
Ran by Sino (administrator) on 08-08-2013 21:50:14
Running from C:\Users\Sino\Downloads
Windows 7 Ultimate Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(AMD) C:\Windows\system32\atiesrxx.exe
(Sandboxie Holdings, LLC) C:\Program Files\Sandboxie\SbieSvc.exe
(AMD) C:\Windows\system32\atieclxx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Sandboxie Holdings, LLC) C:\Program Files\Sandboxie\SbieSvc.exe
(Sandboxie Holdings, LLC) C:\Program Files\Sandboxie\SbieCtrl.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_94.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_94.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13513288 2013-03-29] (Realtek Semiconductor)
MountPoints2: {159472dd-05f7-11e1-844d-6c626d97f52f} - F:\LaunchU3.exe -a
MountPoints2: {58730fe7-9cdb-11e1-b32f-6c626d97f52f} - F:\Start.bat
MountPoints2: {9d63e7dd-b2e3-11e1-8050-6c626d97f52f} - F:\autorun.exe
MountPoints2: {bc26cb68-324f-11e2-a887-6c626d97f52f} - G:\setup.exe -a
MountPoints2: {d24d6a17-afeb-11e2-b8e3-6c626d97f52f} - F:\Setup.exe
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [345144 2013-06-24] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [NPSStartup] - [x]
HKU\Gast\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3672640 2013-03-14] (Disc Soft Ltd)
HKU\Gast\...\Run: [SandboxieControl] - C:\Program Files\Sandboxie\SbieCtrl.exe [759384 2013-06-17] (Sandboxie Holdings, LLC)
HKU\Gast\...\Run: [msnmsgr] - C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe [4272640 2012-09-12] (Microsoft Corporation)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://google.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - {CF2D81E8-1015-476D-9D46-91305E581035} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=AVR-3&o=APN10395&src=kw&q={searchTerms}&locale=&apn_ptnrs=^ABT&apn_dtid=^YYYYYY^YY^DE&apn_uid=8ff60b56-8b01-4d28-a4b3-50fafad0746a&apn_sauid=E4FEA85E-98F2-4E6D-9D6D-68D91422F336
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
FireFox:
========
FF ProfilePath: C:\Users\Sino\AppData\Roaming\Mozilla\Firefox\Profiles\ul9t1wes.default
FF user.js: detected! => C:\Users\Sino\AppData\Roaming\Mozilla\Firefox\Profiles\ul9t1wes.default\user.js
FF SelectedSearchEngine: Google
FF Homepage: google.de
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll ()
FF Plugin: @java.com/DTPlugin,version=10.21.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.0.2 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.0.5 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.0.6 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.0.7 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1202122.dll (Adobe Systems, Inc.)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf - C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf - C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.4.1 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @protectdisc.com/NPMPDRM - C:\Program Files (x86)\Common Files\mpDRM\NPMPDRM.dll ( )
FF Plugin-x32: @videolan.org/vlc,version=2.0.4 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Extension: WOT - C:\Users\Sino\AppData\Roaming\Mozilla\Firefox\Profiles\ul9t1wes.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}
FF Extension: youtubeunblocker - C:\Users\Sino\AppData\Roaming\Mozilla\Firefox\Profiles\ul9t1wes.default\Extensions\youtubeunblocker@unblocker.yt.xpi
FF Extension: No Name - C:\Users\Sino\AppData\Roaming\Mozilla\Firefox\Profiles\ul9t1wes.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF Extension: No Name - C:\Users\Sino\AppData\Roaming\Mozilla\Firefox\Profiles\ul9t1wes.default\Extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi
FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
Chrome:
=======
==================== Services (Whitelisted) =================
R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2013-03-28] (Advanced Micro Devices, Inc.)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [84024 2013-06-24] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [108088 2013-06-24] (Avira Operations GmbH & Co. KG)
R2 SbieSvc; C:\Program Files\Sandboxie\SbieSvc.exe [180824 2013-06-17] (Sandboxie Holdings, LLC)
==================== Drivers (Whitelisted) ====================
R2 AODDriver4.2; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [57472 2012-04-09] (Advanced Micro Devices)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [100712 2013-03-27] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130016 2013-03-27] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-03-27] (Avira Operations GmbH & Co. KG)
S3 cpuz135; C:\Program Files (x86)\CPUID\PC Wizard 2012\pcwiz_x64.sys [23816 2012-02-07] (CPUID)
S3 cpuz135; C:\Program Files (x86)\CPUID\PC Wizard 2012\pcwiz_x64.sys [23816 2012-02-07] (CPUID)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-04-28] (DT Soft Ltd)
S3 NTIOLib_1_0_4; C:\Program Files (x86)\MSI\Live Update 5\NTIOLib_X64.sys [14136 2010-10-22] (MSI)
S3 NTIOLib_1_0_4; C:\Program Files (x86)\MSI\Live Update 5\NTIOLib_X64.sys [14136 2010-10-22] (MSI)
R3 SbieDrv; C:\Program Files\Sandboxie\SbieDrv.sys [198360 2013-06-17] (Sandboxie Holdings, LLC)
R0 sfdrv01; C:\Windows\System32\drivers\sfdrv01.sys [75384 2009-02-03] (Protection Technology (StarForce))
R0 sfvfs02; C:\Windows\System32\drivers\sfvfs02.sys [107384 2007-02-08] (Protection Technology (StarForce))
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [564824 2012-12-26] (Duplex Secure Ltd.)
U3 alhu6wtv; C:\Windows\System32\Drivers\alhu6wtv.sys [0 ] (Advanced Micro Devices)
S3 ALSysIO; \??\C:\Users\Sino\AppData\Local\Temp\ALSysIO64.sys [x]
S3 SANDRA; \??\C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2011.SP5\WNt500x64\Sandra.sys [x]
S1 StarOpen; No ImagePath
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [x]
S3 tsusbhub; system32\drivers\tsusbhub.sys [x]
S3 VGPU; System32\drivers\rdvgkmd.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-08-08 21:50 - 2013-08-08 21:50 - 00000000 ____D C:\FRST
2013-08-08 21:49 - 2013-08-08 21:49 - 01790059 _____ (Farbar) C:\Users\Sino\Downloads\FRST64.exe
2013-08-06 00:24 - 2013-08-06 00:24 - 00000000 ____D C:\Users\Sino\Downloads\d34dp00l-R4F
2013-08-01 05:18 - 2013-08-01 05:18 - 00000000 ____D C:\Users\Sino\Downloads\PA_SportsMachtwechsel-Premium
2013-07-31 01:50 - 2013-08-01 22:34 - 00000000 ____D C:\Users\Sino\AppData\Roaming\The First Templar
2013-07-31 01:50 - 2013-07-31 01:50 - 00000000 ____D C:\ProgramData\RELOADED
2013-07-31 01:45 - 2013-07-31 01:45 - 00000000 ____D C:\Users\Sino\AppData\Roaming\Kalypso Media
2013-07-31 01:40 - 2013-07-31 01:40 - 00000000 ____D C:\Users\Sino\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Kalypso Media
2013-07-31 01:40 - 2013-07-31 01:40 - 00000000 ____D C:\Program Files (x86)\Kalypso Media
2013-07-31 01:33 - 2013-07-31 01:33 - 00043832 _____ C:\Users\Sino\Documents\cc_20130731_013335.reg
2013-07-27 22:49 - 2013-07-27 22:49 - 00000000 ____D C:\Users\Sino\Documents\My Games
2013-07-19 16:58 - 2013-07-19 16:58 - 00000000 ____D C:\Program Files (x86)\SoftwareUpdater
2013-07-18 22:39 - 2013-07-18 22:39 - 00000000 ____D C:\Users\Sino\AppData\Roaming\Media Player Classic
2013-07-14 00:12 - 2013-07-14 00:12 - 00000000 ____D C:\Program Files (x86)\K-Lite Codec Pack
2013-07-14 00:12 - 2012-06-09 19:21 - 00178688 _____ C:\Windows\SysWOW64\unrar.dll
2013-07-14 00:02 - 2013-07-14 00:02 - 00001402 _____ C:\Users\Public\Desktop\Free YouTube to MP3 Converter.lnk
2013-07-14 00:02 - 2013-07-14 00:02 - 00000000 ____D C:\Users\Sino\AppData\Roaming\DVDVideoSoftIEHelpers
2013-07-14 00:02 - 2013-07-14 00:02 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft
2013-07-11 03:05 - 2013-06-12 01:43 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-07-11 03:05 - 2013-06-12 01:43 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-07-11 03:05 - 2013-06-12 01:42 - 02046976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-07-11 03:05 - 2013-06-12 01:42 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-07-11 03:05 - 2013-06-12 01:42 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-07-11 03:05 - 2013-06-12 01:42 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-07-11 03:05 - 2013-06-12 01:42 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-07-11 03:05 - 2013-06-12 01:26 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-07-11 03:05 - 2013-06-12 01:25 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-07-11 03:05 - 2013-06-12 01:25 - 02648576 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-07-11 03:05 - 2013-06-12 01:25 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-07-11 03:05 - 2013-06-12 01:25 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-07-11 03:05 - 2013-06-12 01:25 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-07-11 03:05 - 2013-06-12 01:25 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-07-11 03:05 - 2013-06-12 01:25 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-07-11 03:05 - 2013-06-12 01:25 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-07-11 03:05 - 2013-06-12 00:51 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-07-11 03:05 - 2013-06-12 00:50 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-07-11 03:05 - 2013-06-07 05:22 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-07-11 03:05 - 2013-06-07 04:37 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-07-11 03:04 - 2013-06-12 01:43 - 14329856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-07-11 03:04 - 2013-06-12 01:43 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-07-11 03:04 - 2013-06-12 01:43 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-07-11 03:04 - 2013-06-12 01:43 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-07-11 03:04 - 2013-06-12 01:43 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-07-11 03:04 - 2013-06-12 01:42 - 13760512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-07-11 03:04 - 2013-06-12 01:26 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-07-11 03:04 - 2013-06-12 01:26 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-07-11 03:04 - 2013-06-12 01:25 - 19238912 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-07-11 03:04 - 2013-06-12 01:25 - 15404032 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-07-11 03:04 - 2013-06-12 01:25 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-07-10 22:36 - 2013-06-05 05:34 - 03153920 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-07-10 22:36 - 2013-06-04 08:00 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2013-07-10 22:36 - 2013-06-04 06:53 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2013-07-10 22:36 - 2013-05-06 08:03 - 01887744 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-07-10 22:36 - 2013-05-06 06:56 - 01620480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2013-07-10 22:36 - 2013-04-10 01:34 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2013-07-10 22:36 - 2013-04-03 00:51 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
==================== One Month Modified Files and Folders =======
2013-08-08 21:49 - 2013-08-08 21:49 - 01790059 _____ (Farbar) C:\Users\Sino\Downloads\FRST64.exe
2013-08-08 19:37 - 2013-06-28 13:43 - 00000000 ____D C:\Program Files\SoftwareUpdater
2013-08-08 19:36 - 2013-06-28 13:43 - 00004136 _____ C:\Windows\System32\Tasks\Software Updater Ui
2013-08-08 19:36 - 2009-07-14 06:45 - 00016944 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-08-08 19:36 - 2009-07-14 06:45 - 00016944 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-08-08 19:35 - 2013-06-28 13:43 - 00004196 _____ C:\Windows\System32\Tasks\Software Updater
2013-08-08 19:31 - 2013-06-28 15:51 - 00011704 _____ C:\Windows\PFRO.log
2013-08-08 19:31 - 2013-06-28 13:38 - 00007591 _____ C:\Windows\setupact.log
2013-08-08 19:31 - 2013-05-30 18:39 - 00065536 _____ C:\Windows\system32\Ikeext.etl
2013-08-08 19:31 - 2011-10-31 03:12 - 01066043 _____ C:\Windows\WindowsUpdate.log
2013-08-08 19:31 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-08-08 18:31 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\tracing
2013-08-08 17:09 - 2009-07-14 19:58 - 00654150 _____ C:\Windows\system32\perfh007.dat
2013-08-08 17:09 - 2009-07-14 19:58 - 00130022 _____ C:\Windows\system32\perfc007.dat
2013-08-08 17:09 - 2009-07-14 07:13 - 01498742 _____ C:\Windows\system32\PerfStringBackup.INI
2013-08-06 00:24 - 2013-08-06 00:24 - 00000000 ____D C:\Users\Sino\Downloads\d34dp00l-R4F
2013-08-02 21:10 - 2011-12-30 00:04 - 00000339 _____ C:\Users\Sino\Downloads\Games.txt
2013-08-01 22:34 - 2013-07-31 01:50 - 00000000 ____D C:\Users\Sino\AppData\Roaming\The First Templar
2013-08-01 05:18 - 2013-08-01 05:18 - 00000000 ____D C:\Users\Sino\Downloads\PA_SportsMachtwechsel-Premium
2013-08-01 02:29 - 2012-05-11 18:39 - 00000129 _____ C:\Users\Sino\Downloads\Movies.txt
2013-07-31 12:58 - 2012-04-04 12:50 - 00000290 _____ C:\Windows\Tasks\DLL-files.com Fixer_UPDATES.job
2013-07-31 01:50 - 2013-07-31 01:50 - 00000000 ____D C:\ProgramData\RELOADED
2013-07-31 01:45 - 2013-07-31 01:45 - 00000000 ____D C:\Users\Sino\AppData\Roaming\Kalypso Media
2013-07-31 01:40 - 2013-07-31 01:40 - 00000000 ____D C:\Users\Sino\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Kalypso Media
2013-07-31 01:40 - 2013-07-31 01:40 - 00000000 ____D C:\Program Files (x86)\Kalypso Media
2013-07-31 01:33 - 2013-07-31 01:33 - 00043832 _____ C:\Users\Sino\Documents\cc_20130731_013335.reg
2013-07-29 16:42 - 2012-12-06 22:04 - 00000000 ____D C:\Users\Sino\AppData\Roaming\Skype
2013-07-28 20:36 - 2013-07-08 12:20 - 00000000 ____D C:\Program Files (x86)\JDownloader
2013-07-27 22:49 - 2013-07-27 22:49 - 00000000 ____D C:\Users\Sino\Documents\My Games
2013-07-19 16:58 - 2013-07-19 16:58 - 00000000 ____D C:\Program Files (x86)\SoftwareUpdater
2013-07-18 22:39 - 2013-07-18 22:39 - 00000000 ____D C:\Users\Sino\AppData\Roaming\Media Player Classic
2013-07-18 22:39 - 2011-11-21 21:33 - 00000000 ____D C:\Users\Sino\AppData\Roaming\DVDVideoSoft
2013-07-14 00:12 - 2013-07-14 00:12 - 00000000 ____D C:\Program Files (x86)\K-Lite Codec Pack
2013-07-14 00:02 - 2013-07-14 00:02 - 00001402 _____ C:\Users\Public\Desktop\Free YouTube to MP3 Converter.lnk
2013-07-14 00:02 - 2013-07-14 00:02 - 00000000 ____D C:\Users\Sino\AppData\Roaming\DVDVideoSoftIEHelpers
2013-07-14 00:02 - 2013-07-14 00:02 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft
2013-07-13 17:36 - 2013-06-28 14:48 - 00692104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-07-13 17:36 - 2013-06-28 14:48 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-07-13 17:36 - 2011-11-09 16:01 - 00000000 ____D C:\Users\Sino\AppData\Local\Adobe
2013-07-11 18:12 - 2010-02-10 00:18 - 00000000 ____D C:\Windows\Panther
2013-07-11 18:12 - 2009-07-14 06:45 - 00322632 _____ C:\Windows\system32\FNTCACHE.DAT
2013-07-11 18:11 - 2011-12-27 22:23 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-07-11 18:11 - 2011-12-27 22:23 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2013-07-11 07:04 - 2009-07-14 20:18 - 00000000 ____D C:\Program Files\Windows Journal
2013-07-11 07:04 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Windows Defender
2013-07-11 07:04 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2013-07-11 03:05 - 2010-02-10 00:33 - 78185248 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-08-02 16:49
==================== End Of Log ============================
--- --- --- addition: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 08-08-2013 Ran by Sino at 2013-08-08 21:50:41 Running from C:\Users\Sino\Downloads Boot Mode: Normal ========================================================== ==================== Installed Programs ======================= Adobe Flash Player 11 Plugin (x32 Version: 11.8.800.94) Adobe Shockwave Player 12.0 (x32 Version: 12.0.2.122) AMD Accelerated Video Transcoding (Version: 12.10.100.30328) AMD APP SDK Runtime (Version: 10.0.938.2) AMD Catalyst Install Manager (Version: 8.0.911.0) AMD Drag and Drop Transcoding (Version: 2.00.0000) AMD Fuel (Version: 2013.0328.2218.38225) AMD Media Foundation Decoders (Version: 1.0.80328.2204) AMD VISION Engine Control Center (x32 Version: 2013.0328.2218.38225) Auslogics Disk Defrag (x32 Version: 3.6) Avira Free Antivirus (x32 Version: 13.0.0.3885) Catalyst Control Center - Branding (x32 Version: 1.00.0000) Catalyst Control Center Graphics Previews Common (x32 Version: 2013.0328.2218.38225) Catalyst Control Center Localization All (x32 Version: 2013.0328.2218.38225) CCC Help Chinese Standard (x32 Version: 2013.0328.2217.38225) CCC Help Chinese Traditional (x32 Version: 2013.0328.2217.38225) CCC Help Czech (x32 Version: 2013.0328.2217.38225) CCC Help Danish (x32 Version: 2013.0328.2217.38225) CCC Help Dutch (x32 Version: 2013.0328.2217.38225) CCC Help English (x32 Version: 2013.0328.2217.38225) CCC Help Finnish (x32 Version: 2013.0328.2217.38225) CCC Help French (x32 Version: 2013.0328.2217.38225) CCC Help German (x32 Version: 2013.0328.2217.38225) CCC Help Greek (x32 Version: 2013.0328.2217.38225) CCC Help Hungarian (x32 Version: 2013.0328.2217.38225) CCC Help Italian (x32 Version: 2013.0328.2217.38225) CCC Help Japanese (x32 Version: 2013.0328.2217.38225) CCC Help Korean (x32 Version: 2013.0328.2217.38225) CCC Help Norwegian (x32 Version: 2013.0328.2217.38225) CCC Help Polish (x32 Version: 2013.0328.2217.38225) CCC Help Portuguese (x32 Version: 2013.0328.2217.38225) CCC Help Russian (x32 Version: 2013.0328.2217.38225) CCC Help Spanish (x32 Version: 2013.0328.2217.38225) CCC Help Swedish (x32 Version: 2013.0328.2217.38225) CCC Help Thai (x32 Version: 2013.0328.2217.38225) CCC Help Turkish (x32 Version: 2013.0328.2217.38225) ccc-utility64 (Version: 2013.0328.2218.38225) Core Temp 1.0 RC2 (Version: 1.0) D3DX10 (x32 Version: 15.4.2368.0902) DAEMON Tools Lite (x32 Version: 4.47.1.0333) eaner (Version: 4.03) eReg (x32 Version: 1.20.138.34) FileHippo.com Update Checker (x32) Fotogalerie (x32 Version: 16.4.3505.0912) Foxit Reader (x32 Version: 6.0.3.524) Free Driver Scout (Version: 1.0.0.101) Free Driver Scout (x32 Version: 1.0.0.101) Free YouTube to MP3 Converter version 3.12.7.711 (x32 Version: 3.12.7.711) Halo Combat Evolved (x32) JDownloader 0.9 (x32 Version: 0.9) Junk Mail filter update (x32 Version: 16.4.3505.0912) KC Softwares SUMo (x32 Version: 3.7.0.203) K-Lite Codec Pack 9.9.0 (Full) (x32 Version: 9.9.0) Live Update 5 (x32 Version: 5.0.104) Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300) Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319) Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319) Microsoft Application Error Reporting (Version: 12.0.6015.5000) Microsoft Games for Windows - LIVE Redistributable (x32 Version: 3.5.88.0) Microsoft Silverlight (Version: 5.1.20513.0) Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000) Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (Version: 8.0.50727.4053) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001) Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.56336) Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729 (Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30411 (x32 Version: 9.0.30411) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (x32 Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.51106 (x32 Version: 11.0.51106.1) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.51106 (x32 Version: 11.0.51106.1) Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.51106 (Version: 11.0.51106) Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.51106 (Version: 11.0.51106) Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.51106 (x32 Version: 11.0.51106) Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.51106 (x32 Version: 11.0.51106) Movie Maker (x32 Version: 16.4.3505.0912) Mozilla Firefox 22.0 (x86 de) (x32 Version: 22.0) Mozilla Maintenance Service (x32 Version: 22.0) MSVCRT (x32 Version: 15.4.2862.0708) MSVCRT_amd64 (x32 Version: 15.4.2862.0708) MSVCRT110 (x32 Version: 16.4.1108.0727) MSVCRT110_amd64 (Version: 16.4.1109.0912) MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0) MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0) NBA 2K11 (x32 Version: 1.0.0) OpenAL (x32) OpenOffice.org 3.4.1 (x32 Version: 3.41.9593) Opera 12.15 (x32 Version: 12.15.1748) PC Wizard 2012.2.1 (x32) Photo Gallery (x32 Version: 16.4.3505.0912) Pro Evolution Soccer 2013 (x32 Version: 1.00.0000) Pro Evolution Soccer 2013 Patch 1.01 (x32) Realtek Ethernet Controller Driver For Windows 7 (x32 Version: 7.23.623.2010) Realtek High Definition Audio Driver (x32 Version: 6.0.1.6873) Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.1.28.1) Samsung Mobile phone USB driver Drive Software SAMSUNG USB Driver for Mobile Phones (Version: 1.3.650.0) Sandboxie 4.02 (64-bit) (Version: 4.02) Schlag den Raab - Das 2. Spiel (x32 Version: 1.0) Skype™ 6.5 (x32 Version: 6.5.158) SlimDrivers (x32 Version: 2.2.30423) SopCast 3.5.0 (x32 Version: 3.5.0) swMSM (x32 Version: 12.0.0.1) The First Templar 1.00 (HKCU Version: 1.00) Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1) VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0) VLC media player 2.0.7 (Version: 2.0.7) Windows Live Communications Platform (x32 Version: 16.4.3505.0912) Windows Live Essentials (x32 Version: 16.4.3505.0912) Windows Live Family Safety (Version: 16.4.3505.0912) Windows Live Family Safety (x32 Version: 16.4.3505.0912) Windows Live ID Sign-in Assistant (Version: 7.250.4311.0) Windows Live Installer (x32 Version: 16.4.3505.0912) Windows Live Mail (x32 Version: 16.4.3505.0912) Windows Live Messenger (x32 Version: 16.4.3505.0912) Windows Live MIME IFilter (Version: 16.4.3505.0912) Windows Live Photo Common (x32 Version: 16.4.3505.0912) Windows Live PIMT Platform (x32 Version: 16.4.3505.0912) Windows Live SOXE (x32 Version: 16.4.3505.0912) Windows Live SOXE Definitions (x32 Version: 16.4.3505.0912) Windows Live Sync (x32 Version: 14.0.8117.416) Windows Live UX Platform (x32 Version: 16.4.3505.0912) Windows Live UX Platform Language Pack (x32 Version: 16.4.3505.0912) Windows Live Writer (x32 Version: 16.4.3505.0912) Windows Live Writer Resources (x32 Version: 16.4.3505.0912) WinRAR 4.20 (64-Bit) (Version: 4.20.0) ==================== Restore Points ========================= ==================== Hosts content: ========================== 2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {0747A38D-FDD2-4B72-94BE-D384A0960054} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-06-19] (Piriform Ltd) Task: {09A95407-9F6F-4221-B341-3FC56D69F6AA} - System32\Tasks\Software Updater Ui => C:\Program Files\SoftwareUpdater\SoftwareUpdater.Ui.exe [2013-07-12] () Task: {93F4FB66-ECB3-43F0-B517-50170D497136} - System32\Tasks\Software Updater => C:\Program Files\SoftwareUpdater\SoftwareUpdater.Bootstrapper.exe [2013-07-01] () Task: {C080B6D0-C1CF-4F7E-A7A2-3411B69A9D52} - System32\Tasks\FreeDriverScout => C:\Program Files\Covus Freemium\Free Driver Scout\1Click.exe No File Task: {CE22EFAE-2F1A-45E7-8785-1DD1C8AC7337} - System32\Tasks\DLL-files.com Fixer_UPDATES => C:\Program Files (x86)\Dll-Files.com No File Task: {E13CC810-2F43-4F47-9831-C3E33C246CFA} - System32\Tasks\{BA40FD61-5F24-4AE6-9979-435C9598E4CF} => C:\Program Files (x86)\TrackMania Nations ESWC\TmNationsESWCLauncher.exe No File Task: {F56E8FD2-7A6A-4136-BC3F-A106D5E92D1C} - System32\Tasks\{A8C00319-0EFC-4636-85A0-97AFB84A340C} => C:\Program Files (x86)\TrackMania Nations ESWC\TmNationsESWCLauncher.exe No File Task: {F6C89FB8-C758-4DC2-B2A6-A5BB62E7CDF9} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task Task: C:\Windows\Tasks\DLL-files.com Fixer_UPDATES.job => C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (07/29/2013 05:28:58 AM) (Source: Application Hang) (User: ) Description: Programm CryptLoad.exe, Version 1.1.8.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: 1390 Startzeit: 01ce8c0b61479061 Endzeit: 7 Anwendungspfad: C:\Users\Sino\Downloads\CryptLoad_1.1.8\CryptLoad.exe Berichts-ID: fecc7bb1-f7fe-11e2-b05a-6c626d97f52f Error: (07/07/2013 09:41:27 PM) (Source: Application Hang) (User: ) Description: Programm SbieCtrl.exe, Version 4.2.0.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: 884 Startzeit: 01ce7b26373ce1b9 Endzeit: 15 Anwendungspfad: C:\Program Files\Sandboxie\SbieCtrl.exe Berichts-ID: 33cd7d57-e73d-11e2-a589-6c626d97f52f Error: (07/02/2013 07:21:07 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: firefox.exe, Version: 22.0.0.4917, Zeitstempel: 0x51c06b1b Name des fehlerhaften Moduls: xul.dll, Version: 22.0.0.4917, Zeitstempel: 0x51c06a5b Ausnahmecode: 0xc0000005 Fehleroffset: 0x00173668 ID des fehlerhaften Prozesses: 0x1d4 Startzeit der fehlerhaften Anwendung: 0xfirefox.exe0 Pfad der fehlerhaften Anwendung: firefox.exe1 Pfad des fehlerhaften Moduls: firefox.exe2 Berichtskennung: firefox.exe3 Error: (06/28/2013 01:35:16 PM) (Source: Microsoft-Windows-RestartManager) (User: Sino-PC) Description: Die Anwendung oder der Dienst "AODService" konnte nicht neu gestartet werden. Error: (06/28/2013 01:32:16 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: DLG_free-driver-scout_chip_de-DE.exe, Version: 1.3.1.386, Zeitstempel: 0x51912355 Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.17725, Zeitstempel: 0x4ec4aa8e Ausnahmecode: 0xc0000374 Fehleroffset: 0x00000000000c40f2 ID des fehlerhaften Prozesses: 0x7d8 Startzeit der fehlerhaften Anwendung: 0xDLG_free-driver-scout_chip_de-DE.exe0 Pfad der fehlerhaften Anwendung: DLG_free-driver-scout_chip_de-DE.exe1 Pfad des fehlerhaften Moduls: DLG_free-driver-scout_chip_de-DE.exe2 Berichtskennung: DLG_free-driver-scout_chip_de-DE.exe3 Error: (06/28/2013 01:31:52 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: DLG_free-driver-scout_chip_de-DE.exe, Version: 1.3.1.386, Zeitstempel: 0x51912355 Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.17725, Zeitstempel: 0x4ec4aa8e Ausnahmecode: 0xc0000374 Fehleroffset: 0x00000000000c40f2 ID des fehlerhaften Prozesses: 0xf30 Startzeit der fehlerhaften Anwendung: 0xDLG_free-driver-scout_chip_de-DE.exe0 Pfad der fehlerhaften Anwendung: DLG_free-driver-scout_chip_de-DE.exe1 Pfad des fehlerhaften Moduls: DLG_free-driver-scout_chip_de-DE.exe2 Berichtskennung: DLG_free-driver-scout_chip_de-DE.exe3 Error: (06/28/2013 01:31:17 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: DLG_free-driver-scout_chip_de-DE.exe, Version: 1.3.1.386, Zeitstempel: 0x51912355 Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.17725, Zeitstempel: 0x4ec4aa8e Ausnahmecode: 0xc0000374 Fehleroffset: 0x00000000000c40f2 ID des fehlerhaften Prozesses: 0xca4 Startzeit der fehlerhaften Anwendung: 0xDLG_free-driver-scout_chip_de-DE.exe0 Pfad der fehlerhaften Anwendung: DLG_free-driver-scout_chip_de-DE.exe1 Pfad des fehlerhaften Moduls: DLG_free-driver-scout_chip_de-DE.exe2 Berichtskennung: DLG_free-driver-scout_chip_de-DE.exe3 Error: (06/28/2013 01:30:29 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: pes2013.exe, Version: 1.4.0.0, Zeitstempel: 0x515cba25 Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.17725, Zeitstempel: 0x4ec49b8f Ausnahmecode: 0xc0000005 Fehleroffset: 0x000343d0 ID des fehlerhaften Prozesses: 0xdf4 Startzeit der fehlerhaften Anwendung: 0xpes2013.exe0 Pfad der fehlerhaften Anwendung: pes2013.exe1 Pfad des fehlerhaften Moduls: pes2013.exe2 Berichtskennung: pes2013.exe3 Error: (06/28/2013 01:30:19 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: pes2013.exe, Version: 1.4.0.0, Zeitstempel: 0x515cba25 Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000 Ausnahmecode: 0xc0000005 Fehleroffset: 0x00000000 ID des fehlerhaften Prozesses: 0xf98 Startzeit der fehlerhaften Anwendung: 0xpes2013.exe0 Pfad der fehlerhaften Anwendung: pes2013.exe1 Pfad des fehlerhaften Moduls: pes2013.exe2 Berichtskennung: pes2013.exe3 Error: (06/28/2013 01:30:06 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: pes2013.exe, Version: 1.4.0.0, Zeitstempel: 0x515cba25 Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.17725, Zeitstempel: 0x4ec49b8f Ausnahmecode: 0xc0000005 Fehleroffset: 0x000343d0 ID des fehlerhaften Prozesses: 0x3c4 Startzeit der fehlerhaften Anwendung: 0xpes2013.exe0 Pfad der fehlerhaften Anwendung: pes2013.exe1 Pfad des fehlerhaften Moduls: pes2013.exe2 Berichtskennung: pes2013.exe3 System errors: ============= Error: (08/08/2013 07:31:57 PM) (Source: Service Control Manager) (User: ) Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: StarOpen Error: (08/08/2013 07:31:31 PM) (Source: Application Popup) (User: ) Description: Aufgrund der Inkompatibilität mit diesem System wurde \SystemRoot\SysWow64\Drivers\StarOpen.SYS nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten. Error: (08/08/2013 05:00:52 PM) (Source: Service Control Manager) (User: ) Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: StarOpen Error: (08/08/2013 05:00:22 PM) (Source: Application Popup) (User: ) Description: Aufgrund der Inkompatibilität mit diesem System wurde \SystemRoot\SysWow64\Drivers\StarOpen.SYS nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten. Error: (08/07/2013 03:16:58 PM) (Source: Service Control Manager) (User: ) Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: StarOpen Error: (08/07/2013 03:16:34 PM) (Source: Application Popup) (User: ) Description: Aufgrund der Inkompatibilität mit diesem System wurde \SystemRoot\SysWow64\Drivers\StarOpen.SYS nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten. Error: (08/06/2013 05:00:56 PM) (Source: Service Control Manager) (User: ) Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: StarOpen Error: (08/06/2013 05:00:28 PM) (Source: Application Popup) (User: ) Description: Aufgrund der Inkompatibilität mit diesem System wurde \SystemRoot\SysWow64\Drivers\StarOpen.SYS nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten. Error: (08/06/2013 03:27:21 PM) (Source: Service Control Manager) (User: ) Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: StarOpen Error: (08/06/2013 03:26:52 PM) (Source: Application Popup) (User: ) Description: Aufgrund der Inkompatibilität mit diesem System wurde \SystemRoot\SysWow64\Drivers\StarOpen.SYS nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten. Microsoft Office Sessions: ========================= Error: (07/29/2013 05:28:58 AM) (Source: Application Hang)(User: ) Description: CryptLoad.exe1.1.8.0139001ce8c0b614790617C:\Users\Sino\Downloads\CryptLoad_1.1.8\CryptLoad.exefecc7bb1-f7fe-11e2-b05a-6c626d97f52f Error: (07/07/2013 09:41:27 PM) (Source: Application Hang)(User: ) Description: SbieCtrl.exe4.2.0.088401ce7b26373ce1b915C:\Program Files\Sandboxie\SbieCtrl.exe33cd7d57-e73d-11e2-a589-6c626d97f52f Error: (07/02/2013 07:21:07 PM) (Source: Application Error)(User: ) Description: firefox.exe22.0.0.491751c06b1bxul.dll22.0.0.491751c06a5bc0000005001736681d401ce7747f46d46abC:\Program Files (x86)\Mozilla Firefox\firefox.exeC:\Program Files (x86)\Mozilla Firefox\xul.dllc7a75b3e-e33b-11e2-b9b1-6c626d97f52f Error: (06/28/2013 01:35:16 PM) (Source: Microsoft-Windows-RestartManager)(User: Sino-PC) Description: 0AODAssist.exeAODService03026217818040 Error: (06/28/2013 01:32:16 PM) (Source: Application Error)(User: ) Description: DLG_free-driver-scout_chip_de-DE.exe1.3.1.38651912355ntdll.dll6.1.7601.177254ec4aa8ec000037400000000000c40f27d801ce73f3240571e8C:\Users\Sino\Downloads\DLG_free-driver-scout_chip_de-DE.exeC:\Windows\SYSTEM32\ntdll.dll61cc2beb-dfe6-11e2-befa-6c626d97f52f Error: (06/28/2013 01:31:52 PM) (Source: Application Error)(User: ) Description: DLG_free-driver-scout_chip_de-DE.exe1.3.1.38651912355ntdll.dll6.1.7601.177254ec4aa8ec000037400000000000c40f2f3001ce73f315f6514cC:\Users\Sino\Downloads\DLG_free-driver-scout_chip_de-DE.exeC:\Windows\SYSTEM32\ntdll.dll53baa9ef-dfe6-11e2-befa-6c626d97f52f Error: (06/28/2013 01:31:17 PM) (Source: Application Error)(User: ) Description: DLG_free-driver-scout_chip_de-DE.exe1.3.1.38651912355ntdll.dll6.1.7601.177254ec4aa8ec000037400000000000c40f2ca401ce73f2fb67f744C:\Users\Sino\Downloads\DLG_free-driver-scout_chip_de-DE.exeC:\Windows\SYSTEM32\ntdll.dll3eb4a2a8-dfe6-11e2-befa-6c626d97f52f Error: (06/28/2013 01:30:29 PM) (Source: Application Error)(User: ) Description: pes2013.exe1.4.0.0515cba25ntdll.dll6.1.7601.177254ec49b8fc0000005000343d0df401ce73f2e4b316ebD:\Progs\Programme (x86)\KONAMI\Pro Evolution Soccer 2013\pes2013.exeC:\Windows\SysWOW64\ntdll.dll227e93af-dfe6-11e2-befa-6c626d97f52f Error: (06/28/2013 01:30:19 PM) (Source: Application Error)(User: ) Description: pes2013.exe1.4.0.0515cba25unknown0.0.0.000000000c000000500000000f9801ce73f2de56e9b1D:\Progs\Programme (x86)\KONAMI\Pro Evolution Soccer 2013\pes2013.exeunknown1c30aeb7-dfe6-11e2-befa-6c626d97f52f Error: (06/28/2013 01:30:06 PM) (Source: Application Error)(User: ) Description: pes2013.exe1.4.0.0515cba25ntdll.dll6.1.7601.177254ec49b8fc0000005000343d03c401ce73f2d65eee68D:\Progs\Programme (x86)\KONAMI\Pro Evolution Soccer 2013\pes2013.exeC:\Windows\SysWOW64\ntdll.dll14684ef3-dfe6-11e2-befa-6c626d97f52f CodeIntegrity Errors: =================================== Date: 2013-05-30 17:54:09.992 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\sfvfs02.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2013-05-30 17:54:09.840 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\sfvfs02.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2012-07-11 14:55:41.052 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Users\Sino\AppData\Local\Temp\EverestDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2012-07-11 14:55:41.005 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Users\Sino\AppData\Local\Temp\EverestDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2012-07-11 14:55:40.444 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2012-07-11 14:55:40.397 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. ==================== Memory info =========================== Percentage of memory in use: 35% Total physical RAM: 4095.18 MB Available physical RAM: 2633.32 MB Total Pagefile: 8188.54 MB Available Pagefile: 6471.22 MB Total Virtual: 8192 MB Available Virtual: 8191.8 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:99.9 GB) (Free:7.27 GB) NTFS (Disk=0 Partition=2) Drive d: (Volume) (Fixed) (Total:831.51 GB) (Free:591.63 GB) NTFS (Disk=0 Partition=3) ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: 0D520998) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=100 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=832 GB) - (Type=07 NTFS) ==================== End Of Log ============================ |
|
09.08.2013, 13:34
| #4 |
| /// Malware-holic | Put Optional Dateien gefunden... wo sind die Beschriftungen, um die ich gebeten hab?
__________________ -Verdächtige mails bitte an uns zur Analyse weiterleiten: markusg.trojaner-board@web.de Weiterleiten Anleitung: http://markusg.trojaner-board.de Mails bitte vorerst nach obiger Anleitung an markusg.trojaner-board@web.de Weiterleiten Wenn Ihr uns unterstützen möchtet |
|
09.08.2013, 15:48
| #5 | |
| | Put Optional Dateien gefunden...Zitat:
|
|
09.08.2013, 18:46
| #6 |
| /// Malware-holic | Put Optional Dateien gefunden... Hi, immernoch keine Beschriftung der Software in der additions.txt wie im post2 angefordert :-(
__________________ --> Put Optional Dateien gefunden... |
|
10.08.2013, 14:33
| #7 |
| | Put Optional Dateien gefunden... Doch na klar hatte es schon gestern überarbeitet, also der rest den ich nicht markiert habe sind bekannt und auch von nöten.. |
|
12.08.2013, 15:56
| #8 |
| /// Malware-holic | Put Optional Dateien gefunden... ich sehe da keine beschriftung, heißt das alle sind nötig?
__________________ -Verdächtige mails bitte an uns zur Analyse weiterleiten: markusg.trojaner-board@web.de Weiterleiten Anleitung: http://markusg.trojaner-board.de Mails bitte vorerst nach obiger Anleitung an markusg.trojaner-board@web.de Weiterleiten Wenn Ihr uns unterstützen möchtet |
|
13.08.2013, 04:08
| #9 | |
| | Put Optional Dateien gefunden...Zitat:
Sorry nochmal... edit Schuldige da ist irgendetwas in der Formatierung schief gelaufen, habe jetzt komischerweise öfter das Logfile hier im Thread drin, wohingegen nur eins von mir zusätzlich noch wie gewünscht bearbeitet wurde. Das oberste addition, dort sind die unbekannten markiert. |
|
13.08.2013, 17:43
| #10 |
| /// Malware-holic | Put Optional Dateien gefunden... Sehr gut. es sind 2 Logs zu erstellen, bitte möglichst gleichzeitig posten. 1. Scan mit Combofix
2. Downloade dir bitte  TDSSKiller.exe und speichere diese Datei auf dem Desktop
__________________ -Verdächtige mails bitte an uns zur Analyse weiterleiten: markusg.trojaner-board@web.de Weiterleiten Anleitung: http://markusg.trojaner-board.de Mails bitte vorerst nach obiger Anleitung an markusg.trojaner-board@web.de Weiterleiten Wenn Ihr uns unterstützen möchtet |
|
13.08.2013, 20:39
| #11 |
| | Put Optional Dateien gefunden... Comboix: Code:
ATTFilter ComboFix 13-08-13.02 - Sino 13.08.2013 21:29:06.1.4 - x64
Microsoft Windows 7 Ultimate 6.1.7601.1.1252.49.1031.18.4095.2571 [GMT 2:00]
ausgeführt von:: c:\users\Sino\Downloads\ComboFix.exe
AV: Avira Desktop *Enabled/Updated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
SP: Avira Desktop *Enabled/Updated* {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((( Dateien erstellt von 2013-07-13 bis 2013-08-13 ))))))))))))))))))))))))))))))
.
.
2013-08-13 04:09 . 2013-08-13 04:31 -------- d-----w- c:\users\Sino\AppData\Roaming\vlc
2013-08-08 19:50 . 2013-08-08 19:50 -------- d-----w- C:\FRST
2013-07-30 23:50 . 2013-08-01 20:34 -------- d-----w- c:\users\Sino\AppData\Roaming\The First Templar
2013-07-30 23:50 . 2013-07-30 23:50 -------- d-----w- c:\programdata\RELOADED
2013-07-30 23:45 . 2013-07-30 23:45 -------- d-----w- c:\users\Sino\AppData\Roaming\Kalypso Media
2013-07-30 23:40 . 2013-07-30 23:40 -------- d-----w- c:\program files (x86)\Kalypso Media
2013-07-29 02:49 . 2013-07-29 02:49 -------- d-----w- C:\Downloads
2013-07-19 14:58 . 2013-07-19 14:58 -------- d-----w- c:\program files (x86)\SoftwareUpdater
2013-07-18 20:39 . 2013-07-18 20:39 -------- d-----w- c:\users\Sino\AppData\Roaming\Media Player Classic
.
.
.
(((((((((((((((((((((((((((((((((((( Find3M Bericht ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-07-13 15:36 . 2013-06-28 12:48 71048 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-07-13 15:36 . 2013-06-28 12:48 692104 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2013-07-11 01:05 . 2010-02-09 22:33 78185248 ----a-w- c:\windows\system32\MRT.exe
2013-06-27 05:14 . 2013-06-28 11:44 31816 ----a-w- c:\windows\Launcher.exe
2013-06-24 08:13 . 2013-05-07 12:54 83672 ----a-w- c:\windows\system32\drivers\avnetflt.sys
2013-06-11 23:43 . 2013-07-11 01:04 1767936 ----a-w- c:\windows\SysWow64\wininet.dll
2013-06-11 23:43 . 2013-07-11 01:04 2877440 ----a-w- c:\windows\SysWow64\jscript9.dll
2013-06-11 23:42 . 2013-07-11 01:05 61440 ----a-w- c:\windows\SysWow64\iesetup.dll
2013-06-11 23:42 . 2013-07-11 01:05 109056 ----a-w- c:\windows\SysWow64\iesysprep.dll
2013-06-11 23:26 . 2013-07-11 01:05 51712 ----a-w- c:\windows\system32\ie4uinit.exe
2013-06-11 23:26 . 2013-07-11 01:04 2241024 ----a-w- c:\windows\system32\wininet.dll
2013-06-11 23:26 . 2013-07-11 01:04 1365504 ----a-w- c:\windows\system32\urlmon.dll
2013-06-11 23:25 . 2013-07-11 01:04 19238912 ----a-w- c:\windows\system32\mshtml.dll
2013-06-11 23:25 . 2013-07-11 01:05 603136 ----a-w- c:\windows\system32\msfeeds.dll
2013-06-11 23:25 . 2013-07-11 01:05 855552 ----a-w- c:\windows\system32\jscript.dll
2013-06-11 23:25 . 2013-07-11 01:05 3958784 ----a-w- c:\windows\system32\jscript9.dll
2013-06-11 23:25 . 2013-07-11 01:04 53248 ----a-w- c:\windows\system32\jsproxy.dll
2013-06-11 23:25 . 2013-07-11 01:05 526336 ----a-w- c:\windows\system32\ieui.dll
2013-06-11 23:25 . 2013-07-11 01:05 67072 ----a-w- c:\windows\system32\iesetup.dll
2013-06-11 23:25 . 2013-07-11 01:05 39936 ----a-w- c:\windows\system32\iernonce.dll
2013-06-11 23:25 . 2013-07-11 01:05 2648576 ----a-w- c:\windows\system32\iertutil.dll
2013-06-11 23:25 . 2013-07-11 01:05 136704 ----a-w- c:\windows\system32\iesysprep.dll
2013-06-11 23:25 . 2013-07-11 01:04 15404032 ----a-w- c:\windows\system32\ieframe.dll
2013-06-11 22:51 . 2013-07-11 01:05 71680 ----a-w- c:\windows\SysWow64\RegisterIEPKEYs.exe
2013-06-11 22:50 . 2013-07-11 01:05 89600 ----a-w- c:\windows\system32\RegisterIEPKEYs.exe
2013-06-07 03:22 . 2013-07-11 01:05 2706432 ----a-w- c:\windows\system32\mshtml.tlb
2013-06-07 02:37 . 2013-07-11 01:05 2706432 ----a-w- c:\windows\SysWow64\mshtml.tlb
2013-06-05 03:34 . 2013-07-10 20:36 3153920 ----a-w- c:\windows\system32\win32k.sys
2013-06-04 19:30 . 2013-06-04 19:30 226304 ----a-w- c:\windows\system32\elshyph.dll
2013-06-04 19:30 . 2013-06-04 19:30 185344 ----a-w- c:\windows\SysWow64\elshyph.dll
2013-06-04 19:30 . 2013-06-04 19:30 158720 ----a-w- c:\windows\SysWow64\msls31.dll
2013-06-04 19:30 . 2013-06-04 19:30 1054720 ----a-w- c:\windows\system32\MsSpellCheckingFacility.exe
2013-06-04 19:30 . 2013-06-04 19:30 97280 ----a-w- c:\windows\system32\mshtmled.dll
2013-06-04 19:30 . 2013-06-04 19:30 92160 ----a-w- c:\windows\system32\SetIEInstalledDate.exe
2013-06-04 19:30 . 2013-06-04 19:30 905728 ----a-w- c:\windows\system32\mshtmlmedia.dll
2013-06-04 19:30 . 2013-06-04 19:30 81408 ----a-w- c:\windows\system32\icardie.dll
2013-06-04 19:30 . 2013-06-04 19:30 77312 ----a-w- c:\windows\system32\tdc.ocx
2013-06-04 19:30 . 2013-06-04 19:30 762368 ----a-w- c:\windows\system32\ieapfltr.dll
2013-06-04 19:30 . 2013-06-04 19:30 73728 ----a-w- c:\windows\SysWow64\SetIEInstalledDate.exe
2013-06-04 19:30 . 2013-06-04 19:30 719360 ----a-w- c:\windows\SysWow64\mshtmlmedia.dll
2013-06-04 19:30 . 2013-06-04 19:30 62976 ----a-w- c:\windows\system32\pngfilt.dll
2013-06-04 19:30 . 2013-06-04 19:30 61952 ----a-w- c:\windows\SysWow64\tdc.ocx
2013-06-04 19:30 . 2013-06-04 19:30 599552 ----a-w- c:\windows\system32\vbscript.dll
2013-06-04 19:30 . 2013-06-04 19:30 523264 ----a-w- c:\windows\SysWow64\vbscript.dll
2013-06-04 19:30 . 2013-06-04 19:30 52224 ----a-w- c:\windows\system32\msfeedsbs.dll
2013-06-04 19:30 . 2013-06-04 19:30 51200 ----a-w- c:\windows\system32\imgutil.dll
2013-06-04 19:30 . 2013-06-04 19:30 48640 ----a-w- c:\windows\SysWow64\mshtmler.dll
2013-06-04 19:30 . 2013-06-04 19:30 48640 ----a-w- c:\windows\system32\mshtmler.dll
2013-06-04 19:30 . 2013-06-04 19:30 452096 ----a-w- c:\windows\system32\dxtmsft.dll
2013-06-04 19:30 . 2013-06-04 19:30 441856 ----a-w- c:\windows\system32\html.iec
2013-06-04 19:30 . 2013-06-04 19:30 38400 ----a-w- c:\windows\SysWow64\imgutil.dll
2013-06-04 19:30 . 2013-06-04 19:30 361984 ----a-w- c:\windows\SysWow64\html.iec
2013-06-04 19:30 . 2013-06-04 19:30 281600 ----a-w- c:\windows\system32\dxtrans.dll
2013-06-04 19:30 . 2013-06-04 19:30 27648 ----a-w- c:\windows\system32\licmgr10.dll
2013-06-04 19:30 . 2013-06-04 19:30 270848 ----a-w- c:\windows\system32\iedkcs32.dll
2013-06-04 19:30 . 2013-06-04 19:30 247296 ----a-w- c:\windows\system32\webcheck.dll
2013-06-04 19:30 . 2013-06-04 19:30 235008 ----a-w- c:\windows\system32\url.dll
2013-06-04 19:30 . 2013-06-04 19:30 23040 ----a-w- c:\windows\SysWow64\licmgr10.dll
2013-06-04 19:30 . 2013-06-04 19:30 216064 ----a-w- c:\windows\system32\msls31.dll
2013-06-04 19:30 . 2013-06-04 19:30 197120 ----a-w- c:\windows\system32\msrating.dll
2013-06-04 19:30 . 2013-06-04 19:30 173568 ----a-w- c:\windows\system32\ieUnatt.exe
2013-06-04 19:30 . 2013-06-04 19:30 167424 ----a-w- c:\windows\system32\iexpress.exe
2013-06-04 19:30 . 2013-06-04 19:30 1509376 ----a-w- c:\windows\system32\inetcpl.cpl
2013-06-04 19:30 . 2013-06-04 19:30 150528 ----a-w- c:\windows\SysWow64\iexpress.exe
2013-06-04 19:30 . 2013-06-04 19:30 149504 ----a-w- c:\windows\system32\occache.dll
2013-06-04 19:30 . 2013-06-04 19:30 144896 ----a-w- c:\windows\system32\wextract.exe
2013-06-04 19:30 . 2013-06-04 19:30 1441280 ----a-w- c:\windows\SysWow64\inetcpl.cpl
2013-06-04 19:30 . 2013-06-04 19:30 1400416 ----a-w- c:\windows\system32\ieapfltr.dat
2013-06-04 19:30 . 2013-06-04 19:30 138752 ----a-w- c:\windows\SysWow64\wextract.exe
2013-06-04 19:30 . 2013-06-04 19:30 13824 ----a-w- c:\windows\system32\mshta.exe
2013-06-04 19:30 . 2013-06-04 19:30 137216 ----a-w- c:\windows\SysWow64\ieUnatt.exe
2013-06-04 19:30 . 2013-06-04 19:30 136192 ----a-w- c:\windows\system32\iepeers.dll
2013-06-04 19:30 . 2013-06-04 19:30 135680 ----a-w- c:\windows\system32\IEAdvpack.dll
2013-06-04 19:30 . 2013-06-04 19:30 12800 ----a-w- c:\windows\SysWow64\mshta.exe
2013-06-04 19:30 . 2013-06-04 19:30 12800 ----a-w- c:\windows\system32\msfeedssync.exe
2013-06-04 19:30 . 2013-06-04 19:30 110592 ----a-w- c:\windows\SysWow64\IEAdvpack.dll
2013-06-04 19:30 . 2013-06-04 19:30 102912 ----a-w- c:\windows\system32\inseng.dll
2013-06-04 06:00 . 2013-07-10 20:36 624128 ----a-w- c:\windows\system32\qedit.dll
2013-06-04 04:53 . 2013-07-10 20:36 509440 ----a-w- c:\windows\SysWow64\qedit.dll
2013-04-30 08:30 . 2013-04-30 08:30 901712 ----a-w- c:\program files (x86)\GoforFiles
.
.
(((((((((((((((((((((((((((( Autostartpunkte der Registrierung ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2013-06-24 345144]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"EnableSecureUIAPath"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon]
"Userinit"="userinit.exe"
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R3 ALSysIO;ALSysIO;c:\users\Sino\AppData\Local\Temp\ALSysIO64.sys;c:\users\Sino\AppData\Local\Temp\ALSysIO64.sys [x]
R3 amdiox64;AMD IO Driver;c:\windows\system32\DRIVERS\amdiox64.sys;c:\windows\SYSNATIVE\DRIVERS\amdiox64.sys [x]
R3 cpuz135;cpuz135;c:\program files (x86)\CPUID\PC Wizard 2012\pcwiz_x64.sys;c:\program files (x86)\CPUID\PC Wizard 2012\pcwiz_x64.sys [x]
R3 NTIOLib_1_0_4;NTIOLib_1_0_4;c:\program files (x86)\MSI\Live Update 5\NTIOLib_X64.sys;c:\program files (x86)\MSI\Live Update 5\NTIOLib_X64.sys [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 ss_bbus;SAMSUNG USB Mobile Device (WDM);c:\windows\system32\DRIVERS\ss_bbus.sys;c:\windows\SYSNATIVE\DRIVERS\ss_bbus.sys [x]
R3 ss_bmdfl;SAMSUNG USB Mobile Modem (Filter);c:\windows\system32\DRIVERS\ss_bmdfl.sys;c:\windows\SYSNATIVE\DRIVERS\ss_bmdfl.sys [x]
R3 ss_bmdm;SAMSUNG USB Mobile Modem;c:\windows\system32\DRIVERS\ss_bmdm.sys;c:\windows\SYSNATIVE\DRIVERS\ss_bmdm.sys [x]
R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys;c:\windows\SYSNATIVE\drivers\synth3dvsc.sys [x]
R3 TFsExDisk;TFsExDisk;c:\windows\System32\Drivers\TFsExDisk.sys;c:\windows\SYSNATIVE\Drivers\TFsExDisk.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys;c:\windows\SYSNATIVE\drivers\tsusbhub.sys [x]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x]
R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys;c:\windows\SYSNATIVE\drivers\rdvgkmd.sys [x]
S0 sptd;sptd;c:\windows\\SystemRoot\System32\Drivers\sptd.sys;c:\windows\\SystemRoot\System32\Drivers\sptd.sys [x]
S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys;c:\windows\SYSNATIVE\DRIVERS\avkmgr.sys [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys;c:\windows\SYSNATIVE\DRIVERS\dtsoftbus01.sys [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 AMD FUEL Service;AMD FUEL Service;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [x]
S2 AntiVirSchedulerService;Avira Planer;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [x]
S2 AODDriver4.2;AODDriver4.2;c:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys;c:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [x]
S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys;c:\windows\SYSNATIVE\drivers\AtihdW76.sys [x]
S3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\nusb3hub.sys;c:\windows\SYSNATIVE\DRIVERS\nusb3hub.sys [x]
S3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\nusb3xhc.sys;c:\windows\SYSNATIVE\DRIVERS\nusb3xhc.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
S3 usbfilter;AMD USB Filter Driver;c:\windows\system32\DRIVERS\usbfilter.sys;c:\windows\SYSNATIVE\DRIVERS\usbfilter.sys [x]
.
.
Inhalt des "geplante Tasks" Ordners
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2013-03-29 13513288]
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://google.de/
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = *.local
uSearchAssistant = hxxp://www.google.com
mSearchAssistant =
IE: Free YouTube Download - c:\program files (x86)\Common Files\DVDVideoSoft\plugins\freeytvdownloader.htm
TCP: DhcpNameServer = 192.168.2.1
FF - ProfilePath - c:\users\Sino\AppData\Roaming\Mozilla\Firefox\Profiles\ul9t1wes.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - google.de
FF - ExtSQL: 2013-06-27 18:52; {e4a8a97b-f2ed-450b-b12d-ee082ba24781}; c:\users\Sino\AppData\Roaming\Mozilla\Firefox\Profiles\ul9t1wes.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi
FF - ExtSQL: 2013-07-10 01:47; youtubeunblocker@unblocker.yt; c:\users\Sino\AppData\Roaming\Mozilla\Firefox\Profiles\ul9t1wes.default\extensions\youtubeunblocker@unblocker.yt.xpi
FF - user.js: extensions.shownSelectionUI - true
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Wow6432Node-HKLM-Run-NPSStartup - (no file)
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_USERS\S-1-5-21-1541790503-3271031016-3712771792-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.eml\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLiveMail.Email.1"
.
[HKEY_USERS\S-1-5-21-1541790503-3271031016-3712771792-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vcf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLiveMail.VCard.1"
.
[HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*1*]
@="?????????????????? v1"
.
[HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*1*\CLSID]
@="{E23FE9C6-778E-49D4-B537-38FCDE4887D8}"
.
[HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*2*]
@="?????????????????? v2"
.
[HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*2*\CLSID]
@="{9BE31822-FDAD-461B-AD51-BE1D1C159921}"
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2013-08-13 21:35:50
ComboFix-quarantined-files.txt 2013-08-13 19:35
.
Vor Suchlauf: 10 Verzeichnis(se), 13.805.182.976 Bytes frei
Nach Suchlauf: 13 Verzeichnis(se), 13.732.556.800 Bytes frei
.
- - End Of File - - 281ADC7312470E184709C8F8EB343D82
A36C5E4F47E84449FF07ED3517B43A31
TDSS: Code:
ATTFilter 21:37:30.0088 4900 TDSS rootkit removing tool 2.8.16.0 Feb 11 2013 18:50:42
21:37:30.0229 4900 ============================================================
21:37:30.0229 4900 Current date / time: 2013/08/13 21:37:30.0229
21:37:30.0229 4900 SystemInfo:
21:37:30.0229 4900
21:37:30.0229 4900 OS Version: 6.1.7601 ServicePack: 1.0
21:37:30.0229 4900 Product type: Workstation
21:37:30.0229 4900 ComputerName: SINO-PC
21:37:30.0229 4900 UserName: Sino
21:37:30.0229 4900 Windows directory: C:\Windows
21:37:30.0229 4900 System windows directory: C:\Windows
21:37:30.0229 4900 Running under WOW64
21:37:30.0229 4900 Processor architecture: Intel x64
21:37:30.0229 4900 Number of processors: 4
21:37:30.0229 4900 Page size: 0x1000
21:37:30.0229 4900 Boot type: Normal boot
21:37:30.0229 4900 ============================================================
21:37:31.0165 4900 Drive \Device\Harddisk0\DR0 - Size: 0xE8E0DB6000 (931.51 Gb), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
21:37:31.0165 4900 ============================================================
21:37:31.0165 4900 \Device\Harddisk0\DR0:
21:37:31.0165 4900 MBR partitions:
21:37:31.0165 4900 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x32000
21:37:31.0165 4900 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x32800, BlocksNum 0xC7CE000
21:37:31.0165 4900 \Device\Harddisk0\DR0\Partition3: MBR, Type 0x7, StartLBA 0xC800800, BlocksNum 0x67F05800
21:37:31.0165 4900 ============================================================
21:37:31.0196 4900 C: <-> \Device\Harddisk0\DR0\Partition2
21:37:31.0227 4900 D: <-> \Device\Harddisk0\DR0\Partition3
21:37:31.0227 4900 ============================================================
21:37:31.0227 4900 Initialize success
21:37:31.0227 4900 ============================================================
21:38:00.0571 3960 ============================================================
21:38:00.0571 3960 Scan started
21:38:00.0571 3960 Mode: Manual; SigCheck; TDLFS;
21:38:00.0571 3960 ============================================================
21:38:01.0288 3960 ================ Scan system memory ========================
21:38:01.0288 3960 System memory - ok
21:38:01.0288 3960 ================ Scan services =============================
21:38:01.0413 3960 [ A87D604AEA360176311474C87A63BB88 ] 1394ohci C:\Windows\system32\drivers\1394ohci.sys
21:38:01.0507 3960 1394ohci - ok
21:38:01.0538 3960 [ D81D9E70B8A6DD14D42D7B4EFA65D5F2 ] ACPI C:\Windows\system32\drivers\ACPI.sys
21:38:01.0554 3960 ACPI - ok
21:38:01.0569 3960 [ 99F8E788246D495CE3794D7E7821D2CA ] AcpiPmi C:\Windows\system32\drivers\acpipmi.sys
21:38:01.0600 3960 AcpiPmi - ok
21:38:01.0632 3960 [ 2F6B34B83843F0C5118B63AC634F5BF4 ] adp94xx C:\Windows\system32\DRIVERS\adp94xx.sys
21:38:01.0647 3960 adp94xx - ok
21:38:01.0678 3960 [ 597F78224EE9224EA1A13D6350CED962 ] adpahci C:\Windows\system32\DRIVERS\adpahci.sys
21:38:01.0694 3960 adpahci - ok
21:38:01.0710 3960 [ E109549C90F62FB570B9540C4B148E54 ] adpu320 C:\Windows\system32\DRIVERS\adpu320.sys
21:38:01.0710 3960 adpu320 - ok
21:38:01.0741 3960 [ 4B78B431F225FD8624C5655CB1DE7B61 ] AeLookupSvc C:\Windows\System32\aelupsvc.dll
21:38:01.0788 3960 AeLookupSvc - ok
21:38:01.0819 3960 [ 1C7857B62DE5994A75B054A9FD4C3825 ] AFD C:\Windows\system32\drivers\afd.sys
21:38:01.0850 3960 AFD - ok
21:38:01.0866 3960 [ 608C14DBA7299D8CB6ED035A68A15799 ] agp440 C:\Windows\system32\drivers\agp440.sys
21:38:01.0881 3960 agp440 - ok
21:38:01.0897 3960 [ 3290D6946B5E30E70414990574883DDB ] ALG C:\Windows\System32\alg.exe
21:38:01.0928 3960 ALG - ok
21:38:01.0928 3960 [ 5812713A477A3AD7363C7438CA2EE038 ] aliide C:\Windows\system32\drivers\aliide.sys
21:38:01.0944 3960 aliide - ok
21:38:01.0990 3960 ALSysIO - ok
21:38:02.0053 3960 [ 310F86335B0505DDC6D2DD48E66EF06B ] AMD External Events Utility C:\Windows\system32\atiesrxx.exe
21:38:02.0115 3960 AMD External Events Utility - ok
21:38:02.0178 3960 AMD FUEL Service - ok
21:38:02.0193 3960 [ 1FF8B4431C353CE385C875F194924C0C ] amdide C:\Windows\system32\drivers\amdide.sys
21:38:02.0224 3960 amdide - ok
21:38:02.0256 3960 [ 6A2EEB0C4133B20773BB3DD0B7B377B4 ] amdiox64 C:\Windows\system32\DRIVERS\amdiox64.sys
21:38:02.0318 3960 amdiox64 - ok
21:38:02.0334 3960 [ 7024F087CFF1833A806193EF9D22CDA9 ] AmdK8 C:\Windows\system32\DRIVERS\amdk8.sys
21:38:02.0365 3960 AmdK8 - ok
21:38:02.0583 3960 [ 79CC9BE187E3144E1B58A54B842475E7 ] amdkmdag C:\Windows\system32\DRIVERS\atikmdag.sys
21:38:02.0692 3960 amdkmdag - ok
21:38:02.0708 3960 [ 07561D3B7FD99F6E186C49C2D0628E38 ] amdkmdap C:\Windows\system32\DRIVERS\atikmpag.sys
21:38:02.0739 3960 amdkmdap - ok
21:38:02.0755 3960 [ 1E56388B3FE0D031C44144EB8C4D6217 ] AmdPPM C:\Windows\system32\DRIVERS\amdppm.sys
21:38:02.0770 3960 AmdPPM - ok
21:38:02.0802 3960 [ D4121AE6D0C0E7E13AA221AA57EF2D49 ] amdsata C:\Windows\system32\drivers\amdsata.sys
21:38:02.0802 3960 amdsata - ok
21:38:02.0817 3960 [ F67F933E79241ED32FF46A4F29B5120B ] amdsbs C:\Windows\system32\DRIVERS\amdsbs.sys
21:38:02.0833 3960 amdsbs - ok
21:38:02.0833 3960 [ 540DAF1CEA6094886D72126FD7C33048 ] amdxata C:\Windows\system32\drivers\amdxata.sys
21:38:02.0848 3960 amdxata - ok
21:38:02.0926 3960 [ FE9932692FC61C2203EC9884D414F700 ] AntiVirSchedulerService C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
21:38:02.0958 3960 AntiVirSchedulerService - ok
21:38:02.0989 3960 [ B1F8B58F27971B7E316DD316687886EC ] AntiVirService C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
21:38:03.0004 3960 AntiVirService - ok
21:38:03.0051 3960 [ 5A528A540B1AEE8B1C77ED65094E8CDF ] AODDriver4.2 C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys
21:38:03.0067 3960 AODDriver4.2 - ok
21:38:03.0098 3960 [ 89A69C3F2F319B43379399547526D952 ] AppID C:\Windows\system32\drivers\appid.sys
21:38:03.0207 3960 AppID - ok
21:38:03.0223 3960 [ 0BC381A15355A3982216F7172F545DE1 ] AppIDSvc C:\Windows\System32\appidsvc.dll
21:38:03.0254 3960 AppIDSvc - ok
21:38:03.0270 3960 [ 9D2A2369AB4B08A4905FE72DB104498F ] Appinfo C:\Windows\System32\appinfo.dll
21:38:03.0285 3960 Appinfo - ok
21:38:03.0316 3960 [ 4ABA3E75A76195A3E38ED2766C962899 ] AppMgmt C:\Windows\System32\appmgmts.dll
21:38:03.0332 3960 AppMgmt - ok
21:38:03.0363 3960 [ C484F8CEB1717C540242531DB7845C4E ] arc C:\Windows\system32\DRIVERS\arc.sys
21:38:03.0379 3960 arc - ok
21:38:03.0394 3960 [ 019AF6924AEFE7839F61C830227FE79C ] arcsas C:\Windows\system32\DRIVERS\arcsas.sys
21:38:03.0410 3960 arcsas - ok
21:38:03.0410 3960 [ 769765CE2CC62867468CEA93969B2242 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys
21:38:03.0441 3960 AsyncMac - ok
21:38:03.0457 3960 [ 02062C0B390B7729EDC9E69C680A6F3C ] atapi C:\Windows\system32\drivers\atapi.sys
21:38:03.0472 3960 atapi - ok
21:38:03.0504 3960 [ ED3A041014FBBFDC23D6C04F9C7A5D79 ] AtiHDAudioService C:\Windows\system32\drivers\AtihdW76.sys
21:38:03.0535 3960 AtiHDAudioService - ok
21:38:03.0566 3960 [ 66828FF07CE53217582005540E31F84A ] AtiPcie C:\Windows\system32\DRIVERS\AtiPcie64.sys
21:38:03.0582 3960 AtiPcie - ok
21:38:03.0628 3960 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
21:38:03.0691 3960 AudioEndpointBuilder - ok
21:38:03.0691 3960 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioSrv C:\Windows\System32\Audiosrv.dll
21:38:03.0722 3960 AudioSrv - ok
21:38:03.0753 3960 [ 09E6069EF94B345061B4BD3CEBD974C8 ] avgntflt C:\Windows\system32\DRIVERS\avgntflt.sys
21:38:03.0753 3960 avgntflt - ok
21:38:03.0784 3960 [ 488486DAD09A5B6C6DBB8B990A8B2307 ] avipbb C:\Windows\system32\DRIVERS\avipbb.sys
21:38:03.0784 3960 avipbb - ok
21:38:03.0831 3960 [ 490FA25161BF3E51993EB724ECF0ACEB ] avkmgr C:\Windows\system32\DRIVERS\avkmgr.sys
21:38:03.0831 3960 avkmgr - ok
21:38:03.0862 3960 [ A6BF31A71B409DFA8CAC83159E1E2AFF ] AxInstSV C:\Windows\System32\AxInstSV.dll
21:38:03.0925 3960 AxInstSV - ok
21:38:03.0972 3960 [ 3E5B191307609F7514148C6832BB0842 ] b06bdrv C:\Windows\system32\DRIVERS\bxvbda.sys
21:38:04.0018 3960 b06bdrv - ok
21:38:04.0034 3960 [ B5ACE6968304A3900EEB1EBFD9622DF2 ] b57nd60a C:\Windows\system32\DRIVERS\b57nd60a.sys
21:38:04.0065 3960 b57nd60a - ok
21:38:04.0096 3960 [ FDE360167101B4E45A96F939F388AEB0 ] BDESVC C:\Windows\System32\bdesvc.dll
21:38:04.0112 3960 BDESVC - ok
21:38:04.0128 3960 [ 16A47CE2DECC9B099349A5F840654746 ] Beep C:\Windows\system32\drivers\Beep.sys
21:38:04.0174 3960 Beep - ok
21:38:04.0206 3960 [ 82974D6A2FD19445CC5171FC378668A4 ] BFE C:\Windows\System32\bfe.dll
21:38:04.0237 3960 BFE - ok
21:38:04.0252 3960 [ 1EA7969E3271CBC59E1730697DC74682 ] BITS C:\Windows\system32\qmgr.dll
21:38:04.0284 3960 BITS - ok
21:38:04.0299 3960 [ 61583EE3C3A17003C4ACD0475646B4D3 ] blbdrive C:\Windows\system32\DRIVERS\blbdrive.sys
21:38:04.0315 3960 blbdrive - ok
21:38:04.0346 3960 [ 6C02A83164F5CC0A262F4199F0871CF5 ] bowser C:\Windows\system32\DRIVERS\bowser.sys
21:38:04.0362 3960 bowser - ok
21:38:04.0377 3960 [ F09EEE9EDC320B5E1501F749FDE686C8 ] BrFiltLo C:\Windows\system32\DRIVERS\BrFiltLo.sys
21:38:04.0408 3960 BrFiltLo - ok
21:38:04.0408 3960 [ B114D3098E9BDB8BEA8B053685831BE6 ] BrFiltUp C:\Windows\system32\DRIVERS\BrFiltUp.sys
21:38:04.0424 3960 BrFiltUp - ok
21:38:04.0455 3960 [ 5C2F352A4E961D72518261257AAE204B ] BridgeMP C:\Windows\system32\DRIVERS\bridge.sys
21:38:04.0486 3960 BridgeMP - ok
21:38:04.0518 3960 [ 05F5A0D14A2EE1D8255C2AA0E9E8E694 ] Browser C:\Windows\System32\browser.dll
21:38:04.0518 3960 Browser - ok
21:38:04.0533 3960 [ 43BEA8D483BF1870F018E2D02E06A5BD ] Brserid C:\Windows\System32\Drivers\Brserid.sys
21:38:04.0564 3960 Brserid - ok
21:38:04.0580 3960 [ A6ECA2151B08A09CACECA35C07F05B42 ] BrSerWdm C:\Windows\System32\Drivers\BrSerWdm.sys
21:38:04.0596 3960 BrSerWdm - ok
21:38:04.0596 3960 [ B79968002C277E869CF38BD22CD61524 ] BrUsbMdm C:\Windows\System32\Drivers\BrUsbMdm.sys
21:38:04.0611 3960 BrUsbMdm - ok
21:38:04.0611 3960 [ A87528880231C54E75EA7A44943B38BF ] BrUsbSer C:\Windows\System32\Drivers\BrUsbSer.sys
21:38:04.0611 3960 BrUsbSer - ok
21:38:04.0627 3960 [ 9DA669F11D1F894AB4EB69BF546A42E8 ] BTHMODEM C:\Windows\system32\DRIVERS\bthmodem.sys
21:38:04.0642 3960 BTHMODEM - ok
21:38:04.0658 3960 [ 95F9C2976059462CBBF227F7AAB10DE9 ] bthserv C:\Windows\system32\bthserv.dll
21:38:04.0720 3960 bthserv - ok
21:38:04.0736 3960 [ B8BD2BB284668C84865658C77574381A ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys
21:38:04.0767 3960 cdfs - ok
21:38:04.0783 3960 [ F036CE71586E93D94DAB220D7BDF4416 ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys
21:38:04.0783 3960 cdrom - ok
21:38:04.0814 3960 [ F17D1D393BBC69C5322FBFAFACA28C7F ] CertPropSvc C:\Windows\System32\certprop.dll
21:38:04.0876 3960 CertPropSvc - ok
21:38:04.0876 3960 [ D7CD5C4E1B71FA62050515314CFB52CF ] circlass C:\Windows\system32\DRIVERS\circlass.sys
21:38:04.0892 3960 circlass - ok
21:38:04.0923 3960 [ FE1EC06F2253F691FE36217C592A0206 ] CLFS C:\Windows\system32\CLFS.sys
21:38:04.0939 3960 CLFS - ok
21:38:04.0986 3960 [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
21:38:05.0001 3960 clr_optimization_v2.0.50727_32 - ok
21:38:05.0032 3960 [ D1CEEA2B47CB998321C579651CE3E4F8 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
21:38:05.0048 3960 clr_optimization_v2.0.50727_64 - ok
21:38:05.0110 3960 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
21:38:05.0142 3960 clr_optimization_v4.0.30319_32 - ok
21:38:05.0173 3960 [ C6F9AF94DCD58122A4D7E89DB6BED29D ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
21:38:05.0204 3960 clr_optimization_v4.0.30319_64 - ok
21:38:05.0220 3960 [ 0840155D0BDDF1190F84A663C284BD33 ] CmBatt C:\Windows\system32\DRIVERS\CmBatt.sys
21:38:05.0235 3960 CmBatt - ok
21:38:05.0251 3960 [ E19D3F095812725D88F9001985B94EDD ] cmdide C:\Windows\system32\drivers\cmdide.sys
21:38:05.0251 3960 cmdide - ok
21:38:05.0282 3960 [ 9AC4F97C2D3E93367E2148EA940CD2CD ] CNG C:\Windows\system32\Drivers\cng.sys
21:38:05.0313 3960 CNG - ok
21:38:05.0329 3960 [ 102DE219C3F61415F964C88E9085AD14 ] Compbatt C:\Windows\system32\DRIVERS\compbatt.sys
21:38:05.0344 3960 Compbatt - ok
21:38:05.0360 3960 [ 03EDB043586CCEBA243D689BDDA370A8 ] CompositeBus C:\Windows\system32\drivers\CompositeBus.sys
21:38:05.0376 3960 CompositeBus - ok
21:38:05.0391 3960 COMSysApp - ok
21:38:05.0438 3960 [ 8F5B84350BFC4FE3A65D921B4BD0E737 ] cpuz135 C:\Program Files (x86)\CPUID\PC Wizard 2012\pcwiz_x64.sys
21:38:05.0469 3960 cpuz135 - ok
21:38:05.0485 3960 [ 1C827878A998C18847245FE1F34EE597 ] crcdisk C:\Windows\system32\DRIVERS\crcdisk.sys
21:38:05.0485 3960 crcdisk - ok
21:38:05.0532 3960 [ D8129C49798CBBFB2E4351D4B7B8EF9C ] CryptSvc C:\Windows\system32\cryptsvc.dll
21:38:05.0532 3960 CryptSvc - ok
21:38:05.0594 3960 [ 54DA3DFD29ED9F1619B6F53F3CE55E49 ] CSC C:\Windows\system32\drivers\csc.sys
21:38:05.0625 3960 CSC - ok
21:38:05.0672 3960 [ 3AB183AB4D2C79DCF459CD2C1266B043 ] CscService C:\Windows\System32\cscsvc.dll
21:38:05.0703 3960 CscService - ok
21:38:05.0734 3960 [ 5C627D1B1138676C0A7AB2C2C190D123 ] DcomLaunch C:\Windows\system32\rpcss.dll
21:38:05.0766 3960 DcomLaunch - ok
21:38:05.0781 3960 [ 3CEC7631A84943677AA8FA8EE5B6B43D ] defragsvc C:\Windows\System32\defragsvc.dll
21:38:05.0812 3960 defragsvc - ok
21:38:05.0844 3960 [ 9BB2EF44EAA163B29C4A4587887A0FE4 ] DfsC C:\Windows\system32\Drivers\dfsc.sys
21:38:05.0906 3960 DfsC - ok
21:38:05.0937 3960 [ 43D808F5D9E1A18E5EEB5EBC83969E4E ] Dhcp C:\Windows\system32\dhcpcore.dll
21:38:05.0953 3960 Dhcp - ok
21:38:05.0968 3960 [ 13096B05847EC78F0977F2C0F79E9AB3 ] discache C:\Windows\system32\drivers\discache.sys
21:38:06.0000 3960 discache - ok
21:38:06.0031 3960 [ 9819EEE8B5EA3784EC4AF3B137A5244C ] Disk C:\Windows\system32\DRIVERS\disk.sys
21:38:06.0046 3960 Disk - ok
21:38:06.0078 3960 [ 16835866AAA693C7D7FCEBA8FFF706E4 ] Dnscache C:\Windows\System32\dnsrslvr.dll
21:38:06.0093 3960 Dnscache - ok
21:38:06.0140 3960 [ B1FB3DDCA0FDF408750D5843591AFBC6 ] dot3svc C:\Windows\System32\dot3svc.dll
21:38:06.0218 3960 dot3svc - ok
21:38:06.0249 3960 [ B26F4F737E8F9DF4F31AF6CF31D05820 ] DPS C:\Windows\system32\dps.dll
21:38:06.0265 3960 DPS - ok
21:38:06.0280 3960 [ 9B19F34400D24DF84C858A421C205754 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys
21:38:06.0296 3960 drmkaud - ok
21:38:06.0343 3960 [ 46571ED73AE84469DCA53081D33CF3C8 ] dtsoftbus01 C:\Windows\system32\DRIVERS\dtsoftbus01.sys
21:38:06.0374 3960 dtsoftbus01 - ok
21:38:06.0405 3960 [ AF2E16242AA723F68F461B6EAE2EAD3D ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys
21:38:06.0436 3960 DXGKrnl - ok
21:38:06.0452 3960 [ EDC6E9C057C9D7F83EEA22B4CEF5DCAD ] E1G60 C:\Windows\system32\DRIVERS\E1G6032E.sys
21:38:06.0468 3960 E1G60 - ok
21:38:06.0499 3960 [ E2DDA8726DA9CB5B2C4000C9018A9633 ] EapHost C:\Windows\System32\eapsvc.dll
21:38:06.0514 3960 EapHost - ok
21:38:06.0561 3960 [ DC5D737F51BE844D8C82C695EB17372F ] ebdrv C:\Windows\system32\DRIVERS\evbda.sys
21:38:06.0592 3960 ebdrv - ok
21:38:06.0624 3960 [ C118A82CD78818C29AB228366EBF81C3 ] EFS C:\Windows\System32\lsass.exe
21:38:06.0639 3960 EFS - ok
21:38:06.0670 3960 [ C4002B6B41975F057D98C439030CEA07 ] ehRecvr C:\Windows\ehome\ehRecvr.exe
21:38:06.0717 3960 ehRecvr - ok
21:38:06.0733 3960 [ 4705E8EF9934482C5BB488CE28AFC681 ] ehSched C:\Windows\ehome\ehsched.exe
21:38:06.0764 3960 ehSched - ok
21:38:06.0795 3960 [ 0E5DA5369A0FCAEA12456DD852545184 ] elxstor C:\Windows\system32\DRIVERS\elxstor.sys
21:38:06.0811 3960 elxstor - ok
21:38:06.0826 3960 [ 34A3C54752046E79A126E15C51DB409B ] ErrDev C:\Windows\system32\drivers\errdev.sys
21:38:06.0842 3960 ErrDev - ok
21:38:06.0873 3960 [ 4166F82BE4D24938977DD1746BE9B8A0 ] EventSystem C:\Windows\system32\es.dll
21:38:06.0904 3960 EventSystem - ok
21:38:06.0920 3960 [ A510C654EC00C1E9BDD91EEB3A59823B ] exfat C:\Windows\system32\drivers\exfat.sys
21:38:06.0936 3960 exfat - ok
21:38:06.0951 3960 [ 0ADC83218B66A6DB380C330836F3E36D ] fastfat C:\Windows\system32\drivers\fastfat.sys
21:38:06.0982 3960 fastfat - ok
21:38:07.0045 3960 [ DBEFD454F8318A0EF691FDD2EAAB44EB ] Fax C:\Windows\system32\fxssvc.exe
21:38:07.0092 3960 Fax - ok
21:38:07.0107 3960 [ D765D19CD8EF61F650C384F62FAC00AB ] fdc C:\Windows\system32\DRIVERS\fdc.sys
21:38:07.0123 3960 fdc - ok
21:38:07.0138 3960 [ 0438CAB2E03F4FB61455A7956026FE86 ] fdPHost C:\Windows\system32\fdPHost.dll
21:38:07.0185 3960 fdPHost - ok
21:38:07.0201 3960 [ 802496CB59A30349F9A6DD22D6947644 ] FDResPub C:\Windows\system32\fdrespub.dll
21:38:07.0232 3960 FDResPub - ok
21:38:07.0248 3960 [ 655661BE46B5F5F3FD454E2C3095B930 ] FileInfo C:\Windows\system32\drivers\fileinfo.sys
21:38:07.0263 3960 FileInfo - ok
21:38:07.0263 3960 [ 5F671AB5BC87EEA04EC38A6CD5962A47 ] Filetrace C:\Windows\system32\drivers\filetrace.sys
21:38:07.0294 3960 Filetrace - ok
21:38:07.0310 3960 [ C172A0F53008EAEB8EA33FE10E177AF5 ] flpydisk C:\Windows\system32\DRIVERS\flpydisk.sys
21:38:07.0310 3960 flpydisk - ok
21:38:07.0326 3960 [ DA6B67270FD9DB3697B20FCE94950741 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys
21:38:07.0326 3960 FltMgr - ok
21:38:07.0372 3960 [ C4C183E6551084039EC862DA1C945E3D ] FontCache C:\Windows\system32\FntCache.dll
21:38:07.0404 3960 FontCache - ok
21:38:07.0435 3960 [ A8B7F3818AB65695E3A0BB3279F6DCE6 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
21:38:07.0466 3960 FontCache3.0.0.0 - ok
21:38:07.0466 3960 [ D43703496149971890703B4B1B723EAC ] FsDepends C:\Windows\system32\drivers\FsDepends.sys
21:38:07.0482 3960 FsDepends - ok
21:38:07.0528 3960 [ B16B626996C74B564005BA855C5DEE90 ] fssfltr C:\Windows\system32\DRIVERS\fssfltr.sys
21:38:07.0560 3960 fssfltr - ok
21:38:07.0638 3960 [ 812E1BA5C52A78F13EA6AA10DF708B1D ] fsssvc C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe
21:38:07.0669 3960 fsssvc - ok
21:38:07.0700 3960 [ 6BD9295CC032DD3077C671FCCF579A7B ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys
21:38:07.0700 3960 Fs_Rec - ok
21:38:07.0731 3960 [ 8F6322049018354F45F05A2FD2D4E5E0 ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys
21:38:07.0747 3960 fvevol - ok
21:38:07.0762 3960 [ 8C778D335C9D272CFD3298AB02ABE3B6 ] gagp30kx C:\Windows\system32\DRIVERS\gagp30kx.sys
21:38:07.0762 3960 gagp30kx - ok
21:38:07.0809 3960 [ 277BBC7E1AA1EE957F573A10ECA7EF3A ] gpsvc C:\Windows\System32\gpsvc.dll
21:38:07.0856 3960 gpsvc - ok
21:38:07.0887 3960 [ 1E6438D4EA6E1174A3B3B1EDC4DE660B ] hamachi C:\Windows\system32\DRIVERS\hamachi.sys
21:38:07.0903 3960 hamachi - ok
21:38:07.0918 3960 [ F2523EF6460FC42405B12248338AB2F0 ] hcw85cir C:\Windows\system32\drivers\hcw85cir.sys
21:38:07.0934 3960 hcw85cir - ok
21:38:07.0965 3960 [ 975761C778E33CD22498059B91E7373A ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
21:38:07.0981 3960 HdAudAddService - ok
21:38:08.0012 3960 [ 97BFED39B6B79EB12CDDBFEED51F56BB ] HDAudBus C:\Windows\system32\drivers\HDAudBus.sys
21:38:08.0028 3960 HDAudBus - ok
21:38:08.0043 3960 [ 78E86380454A7B10A5EB255DC44A355F ] HidBatt C:\Windows\system32\DRIVERS\HidBatt.sys
21:38:08.0059 3960 HidBatt - ok
21:38:08.0074 3960 [ 7FD2A313F7AFE5C4DAB14798C48DD104 ] HidBth C:\Windows\system32\DRIVERS\hidbth.sys
21:38:08.0074 3960 HidBth - ok
21:38:08.0090 3960 [ 0A77D29F311B88CFAE3B13F9C1A73825 ] HidIr C:\Windows\system32\DRIVERS\hidir.sys
21:38:08.0106 3960 HidIr - ok
21:38:08.0121 3960 [ BD9EB3958F213F96B97B1D897DEE006D ] hidserv C:\Windows\System32\hidserv.dll
21:38:08.0152 3960 hidserv - ok
21:38:08.0215 3960 [ 9592090A7E2B61CD582B612B6DF70536 ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys
21:38:08.0230 3960 HidUsb - ok
21:38:08.0262 3960 [ 387E72E739E15E3D37907A86D9FF98E2 ] hkmsvc C:\Windows\system32\kmsvc.dll
21:38:08.0308 3960 hkmsvc - ok
21:38:08.0340 3960 [ EFDFB3DD38A4376F93E7985173813ABD ] HomeGroupListener C:\Windows\system32\ListSvc.dll
21:38:08.0371 3960 HomeGroupListener - ok
21:38:08.0386 3960 [ 908ACB1F594274965A53926B10C81E89 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
21:38:08.0402 3960 HomeGroupProvider - ok
21:38:08.0433 3960 [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC ] HpSAMD C:\Windows\system32\drivers\HpSAMD.sys
21:38:08.0449 3960 HpSAMD - ok
21:38:08.0464 3960 [ 0EA7DE1ACB728DD5A369FD742D6EEE28 ] HTTP C:\Windows\system32\drivers\HTTP.sys
21:38:08.0511 3960 HTTP - ok
21:38:08.0542 3960 [ A5462BD6884960C9DC85ED49D34FF392 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys
21:38:08.0542 3960 hwpolicy - ok
21:38:08.0558 3960 [ FA55C73D4AFFA7EE23AC4BE53B4592D3 ] i8042prt C:\Windows\system32\drivers\i8042prt.sys
21:38:08.0574 3960 i8042prt - ok
21:38:08.0620 3960 [ AAAF44DB3BD0B9D1FB6969B23ECC8366 ] iaStorV C:\Windows\system32\drivers\iaStorV.sys
21:38:08.0636 3960 iaStorV - ok
21:38:08.0683 3960 [ 5988FC40F8DB5B0739CD1E3A5D0D78BD ] idsvc C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
21:38:08.0698 3960 idsvc - ok
21:38:08.0714 3960 [ 5C18831C61933628F5BB0EA2675B9D21 ] iirsp C:\Windows\system32\DRIVERS\iirsp.sys
21:38:08.0730 3960 iirsp - ok
21:38:08.0761 3960 [ FCD84C381E0140AF901E58D48882D26B ] IKEEXT C:\Windows\System32\ikeext.dll
21:38:08.0792 3960 IKEEXT - ok
21:38:08.0886 3960 [ CCEDD47ABD068C58C8513DEB785093BB ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHD64.sys
21:38:08.0932 3960 IntcAzAudAddService - ok
21:38:08.0948 3960 [ F00F20E70C6EC3AA366910083A0518AA ] intelide C:\Windows\system32\drivers\intelide.sys
21:38:08.0964 3960 intelide - ok
21:38:08.0979 3960 [ ADA036632C664CAA754079041CF1F8C1 ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys
21:38:08.0979 3960 intelppm - ok
21:38:09.0010 3960 [ 098A91C54546A3B878DAD6A7E90A455B ] IPBusEnum C:\Windows\system32\ipbusenum.dll
21:38:09.0073 3960 IPBusEnum - ok
21:38:09.0088 3960 [ C9F0E1BD74365A8771590E9008D22AB6 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
21:38:09.0120 3960 IpFilterDriver - ok
21:38:09.0151 3960 [ 08C2957BB30058E663720C5606885653 ] iphlpsvc C:\Windows\System32\iphlpsvc.dll
21:38:09.0198 3960 iphlpsvc - ok
21:38:09.0229 3960 [ 0FC1AEA580957AA8817B8F305D18CA3A ] IPMIDRV C:\Windows\system32\drivers\IPMIDrv.sys
21:38:09.0244 3960 IPMIDRV - ok
21:38:09.0260 3960 [ AF9B39A7E7B6CAA203B3862582E9F2D0 ] IPNAT C:\Windows\system32\drivers\ipnat.sys
21:38:09.0291 3960 IPNAT - ok
21:38:09.0322 3960 [ 3ABF5E7213EB28966D55D58B515D5CE9 ] IRENUM C:\Windows\system32\drivers\irenum.sys
21:38:09.0385 3960 IRENUM - ok
21:38:09.0400 3960 [ 2F7B28DC3E1183E5EB418DF55C204F38 ] isapnp C:\Windows\system32\drivers\isapnp.sys
21:38:09.0432 3960 isapnp - ok
21:38:09.0463 3960 [ D931D7309DEB2317035B07C9F9E6B0BD ] iScsiPrt C:\Windows\system32\drivers\msiscsi.sys
21:38:09.0478 3960 iScsiPrt - ok
21:38:09.0494 3960 [ BC02336F1CBA7DCC7D1213BB588A68A5 ] kbdclass C:\Windows\system32\DRIVERS\kbdclass.sys
21:38:09.0494 3960 kbdclass - ok
21:38:09.0525 3960 [ 0705EFF5B42A9DB58548EEC3B26BB484 ] kbdhid C:\Windows\system32\DRIVERS\kbdhid.sys
21:38:09.0525 3960 kbdhid - ok
21:38:09.0541 3960 [ C118A82CD78818C29AB228366EBF81C3 ] KeyIso C:\Windows\system32\lsass.exe
21:38:09.0556 3960 KeyIso - ok
21:38:09.0588 3960 [ 07071C1E3CD8F0F9114AAC8B072CA1E5 ] KMWDFILTER C:\Windows\system32\DRIVERS\KMWDFILTER.sys
21:38:09.0603 3960 KMWDFILTER - ok
21:38:09.0619 3960 [ 97A7070AEA4C058B6418519E869A63B4 ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys
21:38:09.0634 3960 KSecDD - ok
21:38:09.0666 3960 [ 26C43A7C2862447EC59DEDA188D1DA07 ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys
21:38:09.0666 3960 KSecPkg - ok
21:38:09.0681 3960 [ 6869281E78CB31A43E969F06B57347C4 ] ksthunk C:\Windows\system32\drivers\ksthunk.sys
21:38:09.0728 3960 ksthunk - ok
21:38:09.0744 3960 [ 6AB66E16AA859232F64DEB66887A8C9C ] KtmRm C:\Windows\system32\msdtckrm.dll
21:38:09.0775 3960 KtmRm - ok
21:38:09.0806 3960 [ D9F42719019740BAA6D1C6D536CBDAA6 ] LanmanServer C:\Windows\System32\srvsvc.dll
21:38:09.0837 3960 LanmanServer - ok
21:38:09.0884 3960 [ 851A1382EED3E3A7476DB004F4EE3E1A ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
21:38:09.0946 3960 LanmanWorkstation - ok
21:38:09.0978 3960 [ 241F2648ADF090E2A10095BD6D6F5DCB ] LHidFilt C:\Windows\system32\DRIVERS\LHidFilt.Sys
21:38:09.0993 3960 LHidFilt - ok
21:38:10.0009 3960 [ 1538831CF8AD2979A04C423779465827 ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys
21:38:10.0040 3960 lltdio - ok
21:38:10.0071 3960 [ C1185803384AB3FEED115F79F109427F ] lltdsvc C:\Windows\System32\lltdsvc.dll
21:38:10.0134 3960 lltdsvc - ok
21:38:10.0134 3960 [ F993A32249B66C9D622EA5592A8B76B8 ] lmhosts C:\Windows\System32\lmhsvc.dll
21:38:10.0165 3960 lmhosts - ok
21:38:10.0180 3960 [ 342ED5A4B3326014438F36D22D803737 ] LMouFilt C:\Windows\system32\DRIVERS\LMouFilt.Sys
21:38:10.0196 3960 LMouFilt - ok
21:38:10.0227 3960 [ 1A93E54EB0ECE102495A51266DCDB6A6 ] LSI_FC C:\Windows\system32\DRIVERS\lsi_fc.sys
21:38:10.0227 3960 LSI_FC - ok
21:38:10.0243 3960 [ 1047184A9FDC8BDBFF857175875EE810 ] LSI_SAS C:\Windows\system32\DRIVERS\lsi_sas.sys
21:38:10.0243 3960 LSI_SAS - ok
21:38:10.0258 3960 [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93 ] LSI_SAS2 C:\Windows\system32\DRIVERS\lsi_sas2.sys
21:38:10.0258 3960 LSI_SAS2 - ok
21:38:10.0274 3960 [ 0504EACAFF0D3C8AED161C4B0D369D4A ] LSI_SCSI C:\Windows\system32\DRIVERS\lsi_scsi.sys
21:38:10.0290 3960 LSI_SCSI - ok
21:38:10.0305 3960 [ 43D0F98E1D56CCDDB0D5254CFF7B356E ] luafv C:\Windows\system32\drivers\luafv.sys
21:38:10.0321 3960 luafv - ok
21:38:10.0368 3960 [ 29C733E1DE824670DC9315CFC9BDBCD3 ] LUsbFilt C:\Windows\system32\Drivers\LUsbFilt.Sys
21:38:10.0368 3960 LUsbFilt - ok
21:38:10.0383 3960 [ 0BE09CD858ABF9DF6ED259D57A1A1663 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll
21:38:10.0399 3960 Mcx2Svc - ok
21:38:10.0414 3960 [ A55805F747C6EDB6A9080D7C633BD0F4 ] megasas C:\Windows\system32\DRIVERS\megasas.sys
21:38:10.0414 3960 megasas - ok
21:38:10.0430 3960 [ BAF74CE0072480C3B6B7C13B2A94D6B3 ] MegaSR C:\Windows\system32\DRIVERS\MegaSR.sys
21:38:10.0446 3960 MegaSR - ok
21:38:10.0461 3960 [ E40E80D0304A73E8D269F7141D77250B ] MMCSS C:\Windows\system32\mmcss.dll
21:38:10.0492 3960 MMCSS - ok
21:38:10.0492 3960 [ 800BA92F7010378B09F9ED9270F07137 ] Modem C:\Windows\system32\drivers\modem.sys
21:38:10.0508 3960 Modem - ok
21:38:10.0539 3960 [ B03D591DC7DA45ECE20B3B467E6AADAA ] monitor C:\Windows\system32\DRIVERS\monitor.sys
21:38:10.0570 3960 monitor - ok
21:38:10.0602 3960 [ 7D27EA49F3C1F687D357E77A470AEA99 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys
21:38:10.0617 3960 mouclass - ok
21:38:10.0617 3960 [ D3BF052C40B0C4166D9FD86A4288C1E6 ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys
21:38:10.0633 3960 mouhid - ok
21:38:10.0664 3960 [ 32E7A3D591D671A6DF2DB515A5CBE0FA ] mountmgr C:\Windows\system32\drivers\mountmgr.sys
21:38:10.0664 3960 mountmgr - ok
21:38:10.0726 3960 [ 528A5C2570F468155A1B3CF0A2FF5EBD ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
21:38:10.0758 3960 MozillaMaintenance - ok
21:38:10.0773 3960 [ A44B420D30BD56E145D6A2BC8768EC58 ] mpio C:\Windows\system32\drivers\mpio.sys
21:38:10.0773 3960 mpio - ok
21:38:10.0789 3960 [ 6C38C9E45AE0EA2FA5E551F2ED5E978F ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys
21:38:10.0820 3960 mpsdrv - ok
21:38:10.0851 3960 [ 54FFC9C8898113ACE189D4AA7199D2C1 ] MpsSvc C:\Windows\system32\mpssvc.dll
21:38:10.0914 3960 MpsSvc - ok
21:38:10.0929 3960 [ DC722758B8261E1ABAFD31A3C0A66380 ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys
21:38:10.0945 3960 MRxDAV - ok
21:38:10.0976 3960 [ A5D9106A73DC88564C825D317CAC68AC ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys
21:38:10.0992 3960 mrxsmb - ok
21:38:10.0992 3960 [ D711B3C1D5F42C0C2415687BE09FC163 ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys
21:38:11.0007 3960 mrxsmb10 - ok
21:38:11.0023 3960 [ 9423E9D355C8D303E76B8CFBD8A5C30C ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys
21:38:11.0038 3960 mrxsmb20 - ok
21:38:11.0070 3960 [ C25F0BAFA182CBCA2DD3C851C2E75796 ] msahci C:\Windows\system32\drivers\msahci.sys
21:38:11.0085 3960 msahci - ok
21:38:11.0116 3960 [ DB801A638D011B9633829EB6F663C900 ] msdsm C:\Windows\system32\drivers\msdsm.sys
21:38:11.0132 3960 msdsm - ok
21:38:11.0132 3960 [ DE0ECE52236CFA3ED2DBFC03F28253A8 ] MSDTC C:\Windows\System32\msdtc.exe
21:38:11.0163 3960 MSDTC - ok
21:38:11.0194 3960 [ AA3FB40E17CE1388FA1BEDAB50EA8F96 ] Msfs C:\Windows\system32\drivers\Msfs.sys
21:38:11.0226 3960 Msfs - ok
21:38:11.0226 3960 [ F9D215A46A8B9753F61767FA72A20326 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys
21:38:11.0272 3960 mshidkmdf - ok
21:38:11.0272 3960 [ D916874BBD4F8B07BFB7FA9B3CCAE29D ] msisadrv C:\Windows\system32\drivers\msisadrv.sys
21:38:11.0288 3960 msisadrv - ok
21:38:11.0304 3960 [ 808E98FF49B155C522E6400953177B08 ] MSiSCSI C:\Windows\system32\iscsiexe.dll
21:38:11.0335 3960 MSiSCSI - ok
21:38:11.0335 3960 msiserver - ok
21:38:11.0350 3960 [ 49CCF2C4FEA34FFAD8B1B59D49439366 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys
21:38:11.0397 3960 MSKSSRV - ok
21:38:11.0413 3960 [ BDD71ACE35A232104DDD349EE70E1AB3 ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys
21:38:11.0428 3960 MSPCLOCK - ok
21:38:11.0444 3960 [ 4ED981241DB27C3383D72092B618A1D0 ] MSPQM C:\Windows\system32\drivers\MSPQM.sys
21:38:11.0475 3960 MSPQM - ok
21:38:11.0506 3960 [ 759A9EEB0FA9ED79DA1FB7D4EF78866D ] MsRPC C:\Windows\system32\drivers\MsRPC.sys
21:38:11.0506 3960 MsRPC - ok
21:38:11.0538 3960 [ 0EED230E37515A0EAEE3C2E1BC97B288 ] mssmbios C:\Windows\system32\drivers\mssmbios.sys
21:38:11.0538 3960 mssmbios - ok
21:38:11.0553 3960 [ 2E66F9ECB30B4221A318C92AC2250779 ] MSTEE C:\Windows\system32\drivers\MSTEE.sys
21:38:11.0569 3960 MSTEE - ok
21:38:11.0584 3960 [ 7EA404308934E675BFFDE8EDF0757BCD ] MTConfig C:\Windows\system32\DRIVERS\MTConfig.sys
21:38:11.0600 3960 MTConfig - ok
21:38:11.0616 3960 [ F9A18612FD3526FE473C1BDA678D61C8 ] Mup C:\Windows\system32\Drivers\mup.sys
21:38:11.0616 3960 Mup - ok
21:38:11.0647 3960 [ 582AC6D9873E31DFA28A4547270862DD ] napagent C:\Windows\system32\qagentRT.dll
21:38:11.0678 3960 napagent - ok
21:38:11.0709 3960 [ 1EA3749C4114DB3E3161156FFFFA6B33 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys
21:38:11.0725 3960 NativeWifiP - ok
21:38:11.0772 3960 [ 760E38053BF56E501D562B70AD796B88 ] NDIS C:\Windows\system32\drivers\ndis.sys
21:38:11.0787 3960 NDIS - ok
21:38:11.0803 3960 [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys
21:38:11.0818 3960 NdisCap - ok
21:38:11.0834 3960 [ 30639C932D9FEF22B31268FE25A1B6E5 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys
21:38:11.0850 3960 NdisTapi - ok
21:38:11.0881 3960 [ 136185F9FB2CC61E573E676AA5402356 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys
21:38:11.0896 3960 Ndisuio - ok
21:38:11.0928 3960 [ 53F7305169863F0A2BDDC49E116C2E11 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys
21:38:11.0990 3960 NdisWan - ok
21:38:12.0006 3960 [ 015C0D8E0E0421B4CFD48CFFE2825879 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys
21:38:12.0052 3960 NDProxy - ok
21:38:12.0068 3960 [ 86743D9F5D2B1048062B14B1D84501C4 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys
21:38:12.0099 3960 NetBIOS - ok
21:38:12.0099 3960 [ 09594D1089C523423B32A4229263F068 ] NetBT C:\Windows\system32\DRIVERS\netbt.sys
21:38:12.0130 3960 NetBT - ok
21:38:12.0146 3960 [ C118A82CD78818C29AB228366EBF81C3 ] Netlogon C:\Windows\system32\lsass.exe
21:38:12.0146 3960 Netlogon - ok
21:38:12.0177 3960 [ 847D3AE376C0817161A14A82C8922A9E ] Netman C:\Windows\System32\netman.dll
21:38:12.0193 3960 Netman - ok
21:38:12.0224 3960 [ 5F28111C648F1E24F7DBC87CDEB091B8 ] netprofm C:\Windows\System32\netprofm.dll
21:38:12.0240 3960 netprofm - ok
21:38:12.0255 3960 [ 3E5A36127E201DDF663176B66828FAFE ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe
21:38:12.0271 3960 NetTcpPortSharing - ok
21:38:12.0286 3960 [ 77889813BE4D166CDAB78DDBA990DA92 ] nfrd960 C:\Windows\system32\DRIVERS\nfrd960.sys
21:38:12.0286 3960 nfrd960 - ok
21:38:12.0333 3960 [ 8AD77806D336673F270DB31645267293 ] NlaSvc C:\Windows\System32\nlasvc.dll
21:38:12.0364 3960 NlaSvc - ok
21:38:12.0380 3960 [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7 ] Npfs C:\Windows\system32\drivers\Npfs.sys
21:38:12.0411 3960 Npfs - ok
21:38:12.0427 3960 [ D54BFDF3E0C953F823B3D0BFE4732528 ] nsi C:\Windows\system32\nsisvc.dll
21:38:12.0442 3960 nsi - ok
21:38:12.0458 3960 [ E7F5AE18AF4168178A642A9247C63001 ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys
21:38:12.0520 3960 nsiproxy - ok
21:38:12.0583 3960 [ B98F8C6E31CD07B2E6F71F7F648E38C0 ] Ntfs C:\Windows\system32\drivers\Ntfs.sys
21:38:12.0614 3960 Ntfs - ok
21:38:12.0645 3960 [ 1B32C54B95121AB1683C7B83B2DB4B96 ] NTIOLib_1_0_4 C:\Program Files (x86)\MSI\Live Update 5\NTIOLib_X64.sys
21:38:12.0676 3960 NTIOLib_1_0_4 - ok
21:38:12.0692 3960 [ 9899284589F75FA8724FF3D16AED75C1 ] Null C:\Windows\system32\drivers\Null.sys
21:38:12.0723 3960 Null - ok
21:38:12.0754 3960 [ B227E75AD10A142DD326B4CC8D73A6D9 ] nusb3hub C:\Windows\system32\DRIVERS\nusb3hub.sys
21:38:12.0770 3960 nusb3hub - ok
21:38:12.0801 3960 [ 55959DB860E4E484681586824D09E52C ] nusb3xhc C:\Windows\system32\DRIVERS\nusb3xhc.sys
21:38:12.0817 3960 nusb3xhc - ok
21:38:12.0848 3960 [ 0A92CB65770442ED0DC44834632F66AD ] nvraid C:\Windows\system32\drivers\nvraid.sys
21:38:12.0848 3960 nvraid - ok
21:38:12.0864 3960 [ DAB0E87525C10052BF65F06152F37E4A ] nvstor C:\Windows\system32\drivers\nvstor.sys
21:38:12.0879 3960 nvstor - ok
21:38:12.0910 3960 [ 270D7CD42D6E3979F6DD0146650F0E05 ] nv_agp C:\Windows\system32\drivers\nv_agp.sys
21:38:12.0910 3960 nv_agp - ok
21:38:12.0942 3960 [ 3589478E4B22CE21B41FA1BFC0B8B8A0 ] ohci1394 C:\Windows\system32\drivers\ohci1394.sys
21:38:12.0942 3960 ohci1394 - ok
21:38:12.0973 3960 [ 3EAC4455472CC2C97107B5291E0DCAFE ] p2pimsvc C:\Windows\system32\pnrpsvc.dll
21:38:12.0988 3960 p2pimsvc - ok
21:38:13.0004 3960 [ 927463ECB02179F88E4B9A17568C63C3 ] p2psvc C:\Windows\system32\p2psvc.dll
21:38:13.0020 3960 p2psvc - ok
21:38:13.0035 3960 [ 0086431C29C35BE1DBC43F52CC273887 ] Parport C:\Windows\system32\DRIVERS\parport.sys
21:38:13.0035 3960 Parport - ok
21:38:13.0051 3960 [ E9766131EEADE40A27DC27D2D68FBA9C ] partmgr C:\Windows\system32\drivers\partmgr.sys
21:38:13.0066 3960 partmgr - ok
21:38:13.0082 3960 [ 3AEAA8B561E63452C655DC0584922257 ] PcaSvc C:\Windows\System32\pcasvc.dll
21:38:13.0098 3960 PcaSvc - ok
21:38:13.0113 3960 [ 94575C0571D1462A0F70BDE6BD6EE6B3 ] pci C:\Windows\system32\drivers\pci.sys
21:38:13.0113 3960 pci - ok
21:38:13.0129 3960 [ B5B8B5EF2E5CB34DF8DCF8831E3534FA ] pciide C:\Windows\system32\drivers\pciide.sys
21:38:13.0129 3960 pciide - ok
21:38:13.0144 3960 [ B2E81D4E87CE48589F98CB8C05B01F2F ] pcmcia C:\Windows\system32\DRIVERS\pcmcia.sys
21:38:13.0160 3960 pcmcia - ok
21:38:13.0160 3960 [ D6B9C2E1A11A3A4B26A182FFEF18F603 ] pcw C:\Windows\system32\drivers\pcw.sys
21:38:13.0176 3960 pcw - ok
21:38:13.0191 3960 [ 68769C3356B3BE5D1C732C97B9A80D6E ] PEAUTH C:\Windows\system32\drivers\peauth.sys
21:38:13.0222 3960 PEAUTH - ok
21:38:13.0269 3960 [ B9B0A4299DD2D76A4243F75FD54DC680 ] PeerDistSvc C:\Windows\system32\peerdistsvc.dll
21:38:13.0300 3960 PeerDistSvc - ok
21:38:13.0347 3960 [ E495E408C93141E8FC72DC0C6046DDFA ] PerfHost C:\Windows\SysWow64\perfhost.exe
21:38:13.0394 3960 PerfHost - ok
21:38:13.0456 3960 [ C7CF6A6E137463219E1259E3F0F0DD6C ] pla C:\Windows\system32\pla.dll
21:38:13.0519 3960 pla - ok
21:38:13.0550 3960 [ 25FBDEF06C4D92815B353F6E792C8129 ] PlugPlay C:\Windows\system32\umpnpmgr.dll
21:38:13.0581 3960 PlugPlay - ok
21:38:13.0581 3960 [ 7195581CEC9BB7D12ABE54036ACC2E38 ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll
21:38:13.0597 3960 PNRPAutoReg - ok
21:38:13.0597 3960 [ 3EAC4455472CC2C97107B5291E0DCAFE ] PNRPsvc C:\Windows\system32\pnrpsvc.dll
21:38:13.0612 3960 PNRPsvc - ok
21:38:13.0628 3960 [ 4F15D75ADF6156BF56ECED6D4A55C389 ] PolicyAgent C:\Windows\System32\ipsecsvc.dll
21:38:13.0659 3960 PolicyAgent - ok
21:38:13.0690 3960 [ 6BA9D927DDED70BD1A9CADED45F8B184 ] Power C:\Windows\system32\umpo.dll
21:38:13.0768 3960 Power - ok
21:38:13.0800 3960 [ F92A2C41117A11A00BE01CA01A7FCDE9 ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys
21:38:13.0831 3960 PptpMiniport - ok
21:38:13.0846 3960 [ 0D922E23C041EFB1C3FAC2A6F943C9BF ] Processor C:\Windows\system32\DRIVERS\processr.sys
21:38:13.0878 3960 Processor - ok
21:38:13.0893 3960 [ 53E83F1F6CF9D62F32801CF66D8352A8 ] ProfSvc C:\Windows\system32\profsvc.dll
21:38:13.0924 3960 ProfSvc - ok
21:38:13.0940 3960 [ C118A82CD78818C29AB228366EBF81C3 ] ProtectedStorage C:\Windows\system32\lsass.exe
21:38:13.0940 3960 ProtectedStorage - ok
21:38:13.0971 3960 [ 0557CF5A2556BD58E26384169D72438D ] Psched C:\Windows\system32\DRIVERS\pacer.sys
21:38:14.0034 3960 Psched - ok
21:38:14.0112 3960 [ A53A15A11EBFD21077463EE2C7AFEEF0 ] ql2300 C:\Windows\system32\DRIVERS\ql2300.sys
21:38:14.0143 3960 ql2300 - ok
21:38:14.0158 3960 [ 4F6D12B51DE1AAEFF7DC58C4D75423C8 ] ql40xx C:\Windows\system32\DRIVERS\ql40xx.sys
21:38:14.0158 3960 ql40xx - ok
21:38:14.0190 3960 [ 906191634E99AEA92C4816150BDA3732 ] QWAVE C:\Windows\system32\qwave.dll
21:38:14.0190 3960 QWAVE - ok
21:38:14.0205 3960 [ 76707BB36430888D9CE9D705398ADB6C ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys
21:38:14.0221 3960 QWAVEdrv - ok
21:38:14.0221 3960 [ 5A0DA8AD5762FA2D91678A8A01311704 ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys
21:38:14.0268 3960 RasAcd - ok
21:38:14.0283 3960 [ 7ECFF9B22276B73F43A99A15A6094E90 ] RasAgileVpn C:\Windows\system32\DRIVERS\AgileVpn.sys
21:38:14.0299 3960 RasAgileVpn - ok
21:38:14.0314 3960 [ 8F26510C5383B8DBE976DE1CD00FC8C7 ] RasAuto C:\Windows\System32\rasauto.dll
21:38:14.0346 3960 RasAuto - ok
21:38:14.0361 3960 [ 471815800AE33E6F1C32FB1B97C490CA ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys
21:38:14.0408 3960 Rasl2tp - ok
21:38:14.0439 3960 [ EE867A0870FC9E4972BA9EAAD35651E2 ] RasMan C:\Windows\System32\rasmans.dll
21:38:14.0470 3960 RasMan - ok
21:38:14.0486 3960 [ 855C9B1CD4756C5E9A2AA58A15F58C25 ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys
21:38:14.0502 3960 RasPppoe - ok
21:38:14.0517 3960 [ E8B1E447B008D07FF47D016C2B0EEECB ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys
21:38:14.0533 3960 RasSstp - ok
21:38:14.0564 3960 [ 77F665941019A1594D887A74F301FA2F ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys
21:38:14.0595 3960 rdbss - ok
21:38:14.0595 3960 [ 302DA2A0539F2CF54D7C6CC30C1F2D8D ] rdpbus C:\Windows\system32\DRIVERS\rdpbus.sys
21:38:14.0611 3960 rdpbus - ok
21:38:14.0626 3960 [ CEA6CC257FC9B7715F1C2B4849286D24 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys
21:38:14.0642 3960 RDPCDD - ok
21:38:14.0673 3960 [ 1B6163C503398B23FF8B939C67747683 ] RDPDR C:\Windows\system32\drivers\rdpdr.sys
21:38:14.0689 3960 RDPDR - ok
21:38:14.0704 3960 [ BB5971A4F00659529A5C44831AF22365 ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys
21:38:14.0736 3960 RDPENCDD - ok
21:38:14.0751 3960 [ 216F3FA57533D98E1F74DED70113177A ] RDPREFMP C:\Windows\system32\drivers\rdprefmp.sys
21:38:14.0767 3960 RDPREFMP - ok
21:38:14.0845 3960 [ 70CBA1A0C98600A2AA1863479B35CB90 ] RdpVideoMiniport C:\Windows\system32\drivers\rdpvideominiport.sys
21:38:14.0860 3960 RdpVideoMiniport - ok
21:38:14.0892 3960 [ E61608AA35E98999AF9AAEEEA6114B0A ] RDPWD C:\Windows\system32\drivers\RDPWD.sys
21:38:14.0923 3960 RDPWD - ok
21:38:14.0954 3960 [ 34ED295FA0121C241BFEF24764FC4520 ] rdyboost C:\Windows\system32\drivers\rdyboost.sys
21:38:14.0970 3960 rdyboost - ok
21:38:14.0985 3960 [ 254FB7A22D74E5511C73A3F6D802F192 ] RemoteAccess C:\Windows\System32\mprdim.dll
21:38:15.0032 3960 RemoteAccess - ok
21:38:15.0048 3960 [ E4D94F24081440B5FC5AA556C7C62702 ] RemoteRegistry C:\Windows\system32\regsvc.dll
21:38:15.0079 3960 RemoteRegistry - ok
21:38:15.0094 3960 [ E4DC58CF7B3EA515AE917FF0D402A7BB ] RpcEptMapper C:\Windows\System32\RpcEpMap.dll
21:38:15.0126 3960 RpcEptMapper - ok
21:38:15.0141 3960 [ D5BA242D4CF8E384DB90E6A8ED850B8C ] RpcLocator C:\Windows\system32\locator.exe
21:38:15.0141 3960 RpcLocator - ok
21:38:15.0172 3960 [ 5C627D1B1138676C0A7AB2C2C190D123 ] RpcSs C:\Windows\system32\rpcss.dll
21:38:15.0188 3960 RpcSs - ok
21:38:15.0219 3960 [ DDC86E4F8E7456261E637E3552E804FF ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys
21:38:15.0282 3960 rspndr - ok
21:38:15.0313 3960 [ EE082E06A82FF630351D1E0EBBD3D8D0 ] RTL8167 C:\Windows\system32\DRIVERS\Rt64win7.sys
21:38:15.0313 3960 RTL8167 - ok
21:38:15.0344 3960 [ E60C0A09F997826C7627B244195AB581 ] s3cap C:\Windows\system32\drivers\vms3cap.sys
21:38:15.0375 3960 s3cap - ok
21:38:15.0391 3960 [ C118A82CD78818C29AB228366EBF81C3 ] SamSs C:\Windows\system32\lsass.exe
21:38:15.0422 3960 SamSs - ok
21:38:15.0453 3960 SANDRA - ok
21:38:15.0484 3960 [ 78AFA2B244DDF896BF1287B543842452 ] SbieDrv C:\Program Files\Sandboxie\SbieDrv.sys
21:38:15.0516 3960 SbieDrv - ok
21:38:15.0531 3960 [ 654A24D71B9E6201A6A29602D3E23490 ] SbieSvc C:\Program Files\Sandboxie\SbieSvc.exe
21:38:15.0547 3960 SbieSvc - ok
21:38:15.0562 3960 [ AC03AF3329579FFFB455AA2DAABBE22B ] sbp2port C:\Windows\system32\drivers\sbp2port.sys
21:38:15.0578 3960 sbp2port - ok
21:38:15.0594 3960 [ 9B7395789E3791A3B6D000FE6F8B131E ] SCardSvr C:\Windows\System32\SCardSvr.dll
21:38:15.0625 3960 SCardSvr - ok
21:38:15.0640 3960 [ 253F38D0D7074C02FF8DEB9836C97D2B ] scfilter C:\Windows\system32\DRIVERS\scfilter.sys
21:38:15.0672 3960 scfilter - ok
21:38:15.0703 3960 [ 262F6592C3299C005FD6BEC90FC4463A ] Schedule C:\Windows\system32\schedsvc.dll
21:38:15.0734 3960 Schedule - ok
21:38:15.0750 3960 [ F17D1D393BBC69C5322FBFAFACA28C7F ] SCPolicySvc C:\Windows\System32\certprop.dll
21:38:15.0765 3960 SCPolicySvc - ok
21:38:15.0781 3960 [ 6EA4234DC55346E0709560FE7C2C1972 ] SDRSVC C:\Windows\System32\SDRSVC.dll
21:38:15.0812 3960 SDRSVC - ok
21:38:15.0812 3960 [ 3EA8A16169C26AFBEB544E0E48421186 ] secdrv C:\Windows\system32\drivers\secdrv.sys
21:38:15.0843 3960 secdrv - ok
21:38:15.0874 3960 [ BC617A4E1B4FA8DF523A061739A0BD87 ] seclogon C:\Windows\system32\seclogon.dll
21:38:15.0906 3960 seclogon - ok
21:38:15.0921 3960 [ C32AB8FA018EF34C0F113BD501436D21 ] SENS C:\Windows\system32\sens.dll
21:38:15.0952 3960 SENS - ok
21:38:15.0968 3960 [ 0336CFFAFAAB87A11541F1CF1594B2B2 ] SensrSvc C:\Windows\system32\sensrsvc.dll
21:38:15.0999 3960 SensrSvc - ok
21:38:16.0015 3960 [ CB624C0035412AF0DEBEC78C41F5CA1B ] Serenum C:\Windows\system32\DRIVERS\serenum.sys
21:38:16.0046 3960 Serenum - ok
21:38:16.0077 3960 [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6 ] Serial C:\Windows\system32\DRIVERS\serial.sys
21:38:16.0093 3960 Serial - ok
21:38:16.0124 3960 [ 1C545A7D0691CC4A027396535691C3E3 ] sermouse C:\Windows\system32\DRIVERS\sermouse.sys
21:38:16.0155 3960 sermouse - ok
21:38:16.0186 3960 [ 0B6231BF38174A1628C4AC812CC75804 ] SessionEnv C:\Windows\system32\sessenv.dll
21:38:16.0218 3960 SessionEnv - ok
21:38:16.0249 3960 [ 4FCACE92BB0345D58BB96ADBD69F5237 ] sfdrv01 C:\Windows\system32\drivers\sfdrv01.sys
21:38:16.0249 3960 sfdrv01 - ok
21:38:16.0280 3960 [ A554811BCD09279536440C964AE35BBF ] sffdisk C:\Windows\system32\drivers\sffdisk.sys
21:38:16.0296 3960 sffdisk - ok
21:38:16.0311 3960 [ FF414F0BAEFEBA59BC6C04B3DB0B87BF ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys
21:38:16.0342 3960 sffp_mmc - ok
21:38:16.0358 3960 [ DD85B78243A19B59F0637DCF284DA63C ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys
21:38:16.0374 3960 sffp_sd - ok
21:38:16.0374 3960 [ 17F6BD95BF04B924F4C05CE78BEF8AE6 ] sfhlp02 C:\Windows\system32\drivers\sfhlp02.sys
21:38:16.0374 3960 sfhlp02 - ok
21:38:16.0389 3960 [ A9D601643A1647211A1EE2EC4E433FF4 ] sfloppy C:\Windows\system32\DRIVERS\sfloppy.sys
21:38:16.0405 3960 sfloppy - ok
21:38:16.0420 3960 [ F3B72568A6FA36E5D63D30B8186D1C48 ] sfvfs02 C:\Windows\system32\drivers\sfvfs02.sys
21:38:16.0420 3960 sfvfs02 - ok
21:38:16.0452 3960 [ B95F6501A2F8B2E78C697FEC401970CE ] SharedAccess C:\Windows\System32\ipnathlp.dll
21:38:16.0514 3960 SharedAccess - ok
21:38:16.0545 3960 [ AAF932B4011D14052955D4B212A4DA8D ] ShellHWDetection C:\Windows\System32\shsvcs.dll
21:38:16.0576 3960 ShellHWDetection - ok
21:38:16.0592 3960 [ 843CAF1E5FDE1FFD5FF768F23A51E2E1 ] SiSRaid2 C:\Windows\system32\DRIVERS\SiSRaid2.sys
21:38:16.0592 3960 SiSRaid2 - ok
21:38:16.0608 3960 [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4 ] SiSRaid4 C:\Windows\system32\DRIVERS\sisraid4.sys
21:38:16.0608 3960 SiSRaid4 - ok
21:38:16.0670 3960 [ 4E8A4BB5B11D828FF986F6228B1CD3DF ] SkypeUpdate C:\Program Files (x86)\Skype\Updater\Updater.exe
21:38:16.0701 3960 SkypeUpdate - ok
21:38:16.0717 3960 [ 548260A7B8654E024DC30BF8A7C5BAA4 ] Smb C:\Windows\system32\DRIVERS\smb.sys
21:38:16.0764 3960 Smb - ok
21:38:16.0810 3960 [ 6313F223E817CC09AA41811DAA7F541D ] SNMPTRAP C:\Windows\System32\snmptrap.exe
21:38:16.0810 3960 SNMPTRAP - ok
21:38:16.0810 3960 [ B9E31E5CACDFE584F34F730A677803F9 ] spldr C:\Windows\system32\drivers\spldr.sys
21:38:16.0826 3960 spldr - ok
21:38:16.0857 3960 [ 85DAA09A98C9286D4EA2BA8D0E644377 ] Spooler C:\Windows\System32\spoolsv.exe
21:38:16.0888 3960 Spooler - ok
21:38:16.0982 3960 [ E17E0188BB90FAE42D83E98707EFA59C ] sppsvc C:\Windows\system32\sppsvc.exe
21:38:17.0029 3960 sppsvc - ok
21:38:17.0044 3960 [ 93D7D61317F3D4BC4F4E9F8A96A7DE45 ] sppuinotify C:\Windows\system32\sppuinotify.dll
21:38:17.0076 3960 sppuinotify - ok
21:38:17.0138 3960 [ D6AB7C13FCDD2E4CAC35244D2C172D9A ] sptd C:\Windows\System32\Drivers\sptd.sys
21:38:17.0154 3960 sptd - ok
21:38:17.0169 3960 [ 441FBA48BFF01FDB9D5969EBC1838F0B ] srv C:\Windows\system32\DRIVERS\srv.sys
21:38:17.0200 3960 srv - ok
21:38:17.0216 3960 [ B4ADEBBF5E3677CCE9651E0F01F7CC28 ] srv2 C:\Windows\system32\DRIVERS\srv2.sys
21:38:17.0232 3960 srv2 - ok
21:38:17.0263 3960 [ 27E461F0BE5BFF5FC737328F749538C3 ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys
21:38:17.0263 3960 srvnet - ok
21:38:17.0294 3960 [ 51B52FBD583CDE8AA9BA62B8B4298F33 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll
21:38:17.0310 3960 SSDPSRV - ok
21:38:17.0325 3960 [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB ] SstpSvc C:\Windows\system32\sstpsvc.dll
21:38:17.0356 3960 SstpSvc - ok
21:38:17.0388 3960 [ EF806D212D34B0E173BAEB3564D53E37 ] ss_bbus C:\Windows\system32\DRIVERS\ss_bbus.sys
21:38:17.0388 3960 ss_bbus - ok
21:38:17.0419 3960 [ 08B1B34ABEBEB6AC2DEA06900C56411E ] ss_bmdfl C:\Windows\system32\DRIVERS\ss_bmdfl.sys
21:38:17.0419 3960 ss_bmdfl - ok
21:38:17.0434 3960 [ 71A9DA6BEAA4CB54DFB827FB78600A5D ] ss_bmdm C:\Windows\system32\DRIVERS\ss_bmdm.sys
21:38:17.0434 3960 ss_bmdm - ok
21:38:17.0450 3960 StarOpen - ok
21:38:17.0450 3960 [ F3817967ED533D08327DC73BC4D5542A ] stexstor C:\Windows\system32\DRIVERS\stexstor.sys
21:38:17.0466 3960 stexstor - ok
21:38:17.0497 3960 [ 8DD52E8E6128F4B2DA92CE27402871C1 ] stisvc C:\Windows\System32\wiaservc.dll
21:38:17.0528 3960 stisvc - ok
21:38:17.0559 3960 [ 7785DC213270D2FC066538DAF94087E7 ] storflt C:\Windows\system32\drivers\vmstorfl.sys
21:38:17.0559 3960 storflt - ok
21:38:17.0606 3960 [ D34E4943D5AC096C8EDEEBFD80D76E23 ] storvsc C:\Windows\system32\drivers\storvsc.sys
21:38:17.0622 3960 storvsc - ok
21:38:17.0653 3960 [ D01EC09B6711A5F8E7E6564A4D0FBC90 ] swenum C:\Windows\system32\drivers\swenum.sys
21:38:17.0653 3960 swenum - ok
21:38:17.0684 3960 [ E08E46FDD841B7184194011CA1955A0B ] swprv C:\Windows\System32\swprv.dll
21:38:17.0731 3960 swprv - ok
21:38:17.0746 3960 Synth3dVsc - ok
21:38:17.0809 3960 [ BF9CCC0BF39B418C8D0AE8B05CF95B7D ] SysMain C:\Windows\system32\sysmain.dll
21:38:17.0856 3960 SysMain - ok
21:38:17.0871 3960 [ E3C61FD7B7C2557E1F1B0B4CEC713585 ] TabletInputService C:\Windows\System32\TabSvc.dll
21:38:17.0902 3960 TabletInputService - ok
21:38:17.0934 3960 [ 40F0849F65D13EE87B9A9AE3C1DD6823 ] TapiSrv C:\Windows\System32\tapisrv.dll
21:38:17.0980 3960 TapiSrv - ok
21:38:17.0996 3960 [ 1BE03AC720F4D302EA01D40F588162F6 ] TBS C:\Windows\System32\tbssvc.dll
21:38:18.0012 3960 TBS - ok
21:38:18.0074 3960 [ 9849EA3843A2ADBDD1497E97A85D8CAE ] Tcpip C:\Windows\system32\drivers\tcpip.sys
21:38:18.0121 3960 Tcpip - ok
21:38:18.0136 3960 [ 9849EA3843A2ADBDD1497E97A85D8CAE ] TCPIP6 C:\Windows\system32\DRIVERS\tcpip.sys
21:38:18.0168 3960 TCPIP6 - ok
21:38:18.0183 3960 [ 1B16D0BD9841794A6E0CDE0CEF744ABC ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys
21:38:18.0214 3960 tcpipreg - ok
21:38:18.0230 3960 [ 3371D21011695B16333A3934340C4E7C ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys
21:38:18.0277 3960 TDPIPE - ok
21:38:18.0308 3960 [ 51C5ECEB1CDEE2468A1748BE550CFBC8 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys
21:38:18.0324 3960 TDTCP - ok
21:38:18.0355 3960 [ DDAD5A7AB24D8B65F8D724F5C20FD806 ] tdx C:\Windows\system32\DRIVERS\tdx.sys
21:38:18.0386 3960 tdx - ok
21:38:18.0386 3960 [ 561E7E1F06895D78DE991E01DD0FB6E5 ] TermDD C:\Windows\system32\drivers\termdd.sys
21:38:18.0386 3960 TermDD - ok
21:38:18.0433 3960 [ 2E648163254233755035B46DD7B89123 ] TermService C:\Windows\System32\termsrv.dll
21:38:18.0448 3960 TermService - ok
21:38:18.0480 3960 [ 48D9D00C2E0E72C3D4F52772C80355F6 ] TFsExDisk C:\Windows\System32\Drivers\TFsExDisk.sys
21:38:18.0480 3960 TFsExDisk - ok
21:38:18.0495 3960 [ F0344071948D1A1FA732231785A0664C ] Themes C:\Windows\system32\themeservice.dll
21:38:18.0511 3960 Themes - ok
21:38:18.0526 3960 [ E40E80D0304A73E8D269F7141D77250B ] THREADORDER C:\Windows\system32\mmcss.dll
21:38:18.0558 3960 THREADORDER - ok
21:38:18.0573 3960 [ 7E7AFD841694F6AC397E99D75CEAD49D ] TrkWks C:\Windows\System32\trkwks.dll
21:38:18.0604 3960 TrkWks - ok
21:38:18.0651 3960 [ 773212B2AAA24C1E31F10246B15B276C ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
21:38:18.0698 3960 TrustedInstaller - ok
21:38:18.0729 3960 [ CE18B2CDFC837C99E5FAE9CA6CBA5D30 ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys
21:38:18.0745 3960 tssecsrv - ok
21:38:18.0760 3960 [ D11C783E3EF9A3C52C0EBE83CC5000E9 ] TsUsbFlt C:\Windows\system32\drivers\tsusbflt.sys
21:38:18.0792 3960 TsUsbFlt - ok
21:38:18.0792 3960 tsusbhub - ok
21:38:18.0838 3960 [ 3566A8DAAFA27AF944F5D705EAA64894 ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys
21:38:18.0885 3960 tunnel - ok
21:38:18.0901 3960 [ B4DD609BD7E282BFC683CEC7EAAAAD67 ] uagp35 C:\Windows\system32\DRIVERS\uagp35.sys
21:38:18.0916 3960 uagp35 - ok
21:38:18.0932 3960 [ FF4232A1A64012BAA1FD97C7B67DF593 ] udfs C:\Windows\system32\DRIVERS\udfs.sys
21:38:18.0963 3960 udfs - ok
21:38:18.0979 3960 [ 3CBDEC8D06B9968ABA702EBA076364A1 ] UI0Detect C:\Windows\system32\UI0Detect.exe
21:38:18.0979 3960 UI0Detect - ok
21:38:19.0010 3960 [ 4BFE1BC28391222894CBF1E7D0E42320 ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys
21:38:19.0010 3960 uliagpkx - ok
21:38:19.0041 3960 [ DC54A574663A895C8763AF0FA1FF7561 ] umbus C:\Windows\system32\drivers\umbus.sys
21:38:19.0072 3960 umbus - ok
21:38:19.0088 3960 [ B2E8E8CB557B156DA5493BBDDCC1474D ] UmPass C:\Windows\system32\DRIVERS\umpass.sys
21:38:19.0104 3960 UmPass - ok
21:38:19.0119 3960 [ A293DCD756D04D8492A750D03B9A297C ] UmRdpService C:\Windows\System32\umrdp.dll
21:38:19.0135 3960 UmRdpService - ok
21:38:19.0150 3960 [ D47EC6A8E81633DD18D2436B19BAF6DE ] upnphost C:\Windows\System32\upnphost.dll
21:38:19.0213 3960 upnphost - ok
21:38:19.0244 3960 [ C9E9D59C0099A9FF51697E9306A44240 ] USBAAPL64 C:\Windows\system32\Drivers\usbaapl64.sys
21:38:19.0244 3960 USBAAPL64 ( UnsignedFile.Multi.Generic ) - warning
21:38:19.0244 3960 USBAAPL64 - detected UnsignedFile.Multi.Generic (1)
21:38:19.0260 3960 [ 6F1A3157A1C89435352CEB543CDB359C ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys
21:38:19.0306 3960 usbccgp - ok
21:38:19.0338 3960 [ AF0892A803FDDA7492F595368E3B68E7 ] usbcir C:\Windows\system32\drivers\usbcir.sys
21:38:19.0384 3960 usbcir - ok
21:38:19.0400 3960 [ C025055FE7B87701EB042095DF1A2D7B ] usbehci C:\Windows\system32\DRIVERS\usbehci.sys
21:38:19.0431 3960 usbehci - ok
21:38:19.0447 3960 [ 504901430B6E03B99EBB6BF26E0868C6 ] usbfilter C:\Windows\system32\DRIVERS\usbfilter.sys
21:38:19.0447 3960 usbfilter - ok
21:38:19.0478 3960 [ 287C6C9410B111B68B52CA298F7B8C24 ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys
21:38:19.0494 3960 usbhub - ok
21:38:19.0509 3960 [ 9840FC418B4CBD632D3D0A667A725C31 ] usbohci C:\Windows\system32\DRIVERS\usbohci.sys
21:38:19.0509 3960 usbohci - ok
21:38:19.0525 3960 [ 73188F58FB384E75C4063D29413CEE3D ] usbprint C:\Windows\system32\DRIVERS\usbprint.sys
21:38:19.0540 3960 usbprint - ok
21:38:19.0572 3960 [ FED648B01349A3C8395A5169DB5FB7D6 ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS
21:38:19.0587 3960 USBSTOR - ok
21:38:19.0603 3960 [ 62069A34518BCF9C1FD9E74B3F6DB7CD ] usbuhci C:\Windows\system32\drivers\usbuhci.sys
21:38:19.0618 3960 usbuhci - ok
21:38:19.0634 3960 [ EDBB23CBCF2CDF727D64FF9B51A6070E ] UxSms C:\Windows\System32\uxsms.dll
21:38:19.0681 3960 UxSms - ok
21:38:19.0696 3960 [ C118A82CD78818C29AB228366EBF81C3 ] VaultSvc C:\Windows\system32\lsass.exe
21:38:19.0696 3960 VaultSvc - ok
21:38:19.0728 3960 [ C5C876CCFC083FF3B128F933823E87BD ] vdrvroot C:\Windows\system32\drivers\vdrvroot.sys
21:38:19.0728 3960 vdrvroot - ok
21:38:19.0743 3960 [ 8D6B481601D01A456E75C3210F1830BE ] vds C:\Windows\System32\vds.exe
21:38:19.0774 3960 vds - ok
21:38:19.0790 3960 [ DA4DA3F5E02943C2DC8C6ED875DE68DD ] vga C:\Windows\system32\DRIVERS\vgapnp.sys
21:38:19.0790 3960 vga - ok
21:38:19.0806 3960 [ 53E92A310193CB3C03BEA963DE7D9CFC ] VgaSave C:\Windows\System32\drivers\vga.sys
21:38:19.0837 3960 VgaSave - ok
21:38:19.0837 3960 VGPU - ok
21:38:19.0868 3960 [ 2CE2DF28C83AEAF30084E1B1EB253CBB ] vhdmp C:\Windows\system32\drivers\vhdmp.sys
21:38:19.0868 3960 vhdmp - ok
21:38:19.0899 3960 [ E5689D93FFE4E5D66C0178761240DD54 ] viaide C:\Windows\system32\drivers\viaide.sys
21:38:19.0899 3960 viaide - ok
21:38:19.0930 3960 [ 86EA3E79AE350FEA5331A1303054005F ] vmbus C:\Windows\system32\drivers\vmbus.sys
21:38:19.0930 3960 vmbus - ok
21:38:19.0962 3960 [ 7DE90B48F210D29649380545DB45A187 ] VMBusHID C:\Windows\system32\drivers\VMBusHID.sys
21:38:19.0962 3960 VMBusHID - ok
21:38:19.0962 3960 [ D2AAFD421940F640B407AEFAAEBD91B0 ] volmgr C:\Windows\system32\drivers\volmgr.sys
21:38:19.0977 3960 volmgr - ok
21:38:19.0993 3960 [ A255814907C89BE58B79EF2F189B843B ] volmgrx C:\Windows\system32\drivers\volmgrx.sys
21:38:19.0993 3960 volmgrx - ok
21:38:20.0024 3960 [ 0D08D2F3B3FF84E433346669B5E0F639 ] volsnap C:\Windows\system32\drivers\volsnap.sys
21:38:20.0040 3960 volsnap - ok
21:38:20.0071 3960 [ 5E2016EA6EBACA03C04FEAC5F330D997 ] vsmraid C:\Windows\system32\DRIVERS\vsmraid.sys
21:38:20.0086 3960 vsmraid - ok
21:38:20.0149 3960 [ B60BA0BC31B0CB414593E169F6F21CC2 ] VSS C:\Windows\system32\vssvc.exe
21:38:20.0196 3960 VSS - ok
21:38:20.0211 3960 [ 36D4720B72B5C5D9CB2B9C29E9DF67A1 ] vwifibus C:\Windows\System32\drivers\vwifibus.sys
21:38:20.0227 3960 vwifibus - ok
21:38:20.0258 3960 [ 1C9D80CC3849B3788048078C26486E1A ] W32Time C:\Windows\system32\w32time.dll
21:38:20.0274 3960 W32Time - ok
21:38:20.0289 3960 [ 4E9440F4F152A7B944CB1663D3935A3E ] WacomPen C:\Windows\system32\DRIVERS\wacompen.sys
21:38:20.0320 3960 WacomPen - ok
21:38:20.0367 3960 [ 356AFD78A6ED4457169241AC3965230C ] WANARP C:\Windows\system32\DRIVERS\wanarp.sys
21:38:20.0414 3960 WANARP - ok
21:38:20.0430 3960 [ 356AFD78A6ED4457169241AC3965230C ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys
21:38:20.0461 3960 Wanarpv6 - ok
21:38:20.0554 3960 [ 78F4E7F5C56CB9716238EB57DA4B6A75 ] wbengine C:\Windows\system32\wbengine.exe
21:38:20.0601 3960 wbengine - ok
21:38:20.0617 3960 [ 3AA101E8EDAB2DB4131333F4325C76A3 ] WbioSrvc C:\Windows\System32\wbiosrvc.dll
21:38:20.0632 3960 WbioSrvc - ok
21:38:20.0648 3960 [ 7368A2AFD46E5A4481D1DE9D14848EDD ] wcncsvc C:\Windows\System32\wcncsvc.dll
21:38:20.0664 3960 wcncsvc - ok
21:38:20.0679 3960 [ 20F7441334B18CEE52027661DF4A6129 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
21:38:20.0695 3960 WcsPlugInService - ok
21:38:20.0695 3960 [ 72889E16FF12BA0F235467D6091B17DC ] Wd C:\Windows\system32\DRIVERS\wd.sys
21:38:20.0710 3960 Wd - ok
21:38:20.0742 3960 [ 442783E2CB0DA19873B7A63833FF4CB4 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys
21:38:20.0757 3960 Wdf01000 - ok
21:38:20.0773 3960 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiServiceHost C:\Windows\system32\wdi.dll
21:38:20.0804 3960 WdiServiceHost - ok
21:38:20.0804 3960 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiSystemHost C:\Windows\system32\wdi.dll
21:38:20.0820 3960 WdiSystemHost - ok
21:38:20.0851 3960 [ 3DB6D04E1C64272F8B14EB8BC4616280 ] WebClient C:\Windows\System32\webclnt.dll
21:38:20.0866 3960 WebClient - ok
21:38:20.0882 3960 [ C749025A679C5103E575E3B48E092C43 ] Wecsvc C:\Windows\system32\wecsvc.dll
21:38:20.0913 3960 Wecsvc - ok
21:38:20.0929 3960 [ 7E591867422DC788B9E5BD337A669A08 ] wercplsupport C:\Windows\System32\wercplsupport.dll
21:38:20.0976 3960 wercplsupport - ok
21:38:20.0991 3960 [ 6D137963730144698CBD10F202E9F251 ] WerSvc C:\Windows\System32\WerSvc.dll
21:38:21.0007 3960 WerSvc - ok
21:38:21.0022 3960 [ 611B23304BF067451A9FDEE01FBDD725 ] WfpLwf C:\Windows\system32\DRIVERS\wfplwf.sys
21:38:21.0054 3960 WfpLwf - ok
21:38:21.0054 3960 [ 05ECAEC3E4529A7153B3136CEB49F0EC ] WIMMount C:\Windows\system32\drivers\wimmount.sys
21:38:21.0054 3960 WIMMount - ok
21:38:21.0069 3960 WinDefend - ok
21:38:21.0085 3960 WinHttpAutoProxySvc - ok
21:38:21.0116 3960 [ 19B07E7E8915D701225DA41CB3877306 ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll
21:38:21.0163 3960 Winmgmt - ok
21:38:21.0210 3960 [ BCB1310604AA415C4508708975B3931E ] WinRM C:\Windows\system32\WsmSvc.dll
21:38:21.0241 3960 WinRM - ok
21:38:21.0288 3960 [ FE88B288356E7B47B74B13372ADD906D ] WinUsb C:\Windows\system32\DRIVERS\WinUsb.sys
21:38:21.0319 3960 WinUsb - ok
21:38:21.0366 3960 [ 4FADA86E62F18A1B2F42BA18AE24E6AA ] Wlansvc C:\Windows\System32\wlansvc.dll
21:38:21.0412 3960 Wlansvc - ok
21:38:21.0522 3960 [ 357CABBF155AFD1D3926E62539D2A3A7 ] wlidsvc C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
21:38:21.0568 3960 wlidsvc - ok
21:38:21.0584 3960 [ F6FF8944478594D0E414D3F048F0D778 ] WmiAcpi C:\Windows\system32\drivers\wmiacpi.sys
21:38:21.0600 3960 WmiAcpi - ok
21:38:21.0615 3960 [ 38B84C94C5A8AF291ADFEA478AE54F93 ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe
21:38:21.0631 3960 wmiApSrv - ok
21:38:21.0646 3960 WMPNetworkSvc - ok
21:38:21.0662 3960 [ 96C6E7100D724C69FCF9E7BF590D1DCA ] WPCSvc C:\Windows\System32\wpcsvc.dll
21:38:21.0678 3960 WPCSvc - ok
21:38:21.0693 3960 [ 93221146D4EBBF314C29B23CD6CC391D ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll
21:38:21.0724 3960 WPDBusEnum - ok
21:38:21.0724 3960 [ 6BCC1D7D2FD2453957C5479A32364E52 ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys
21:38:21.0756 3960 ws2ifsl - ok
21:38:21.0771 3960 [ E8B1FE6669397D1772D8196DF0E57A9E ] wscsvc C:\Windows\system32\wscsvc.dll
21:38:21.0787 3960 wscsvc - ok
21:38:21.0787 3960 WSearch - ok
21:38:21.0865 3960 [ D9EF901DCA379CFE914E9FA13B73B4C4 ] wuauserv C:\Windows\system32\wuaueng.dll
21:38:21.0896 3960 wuauserv - ok
21:38:21.0927 3960 [ AB886378EEB55C6C75B4F2D14B6C869F ] WudfPf C:\Windows\system32\drivers\WudfPf.sys
21:38:21.0943 3960 WudfPf - ok
21:38:21.0958 3960 [ DDA4CAF29D8C0A297F886BFE561E6659 ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys
21:38:21.0958 3960 WUDFRd - ok
21:38:21.0974 3960 [ B20F051B03A966392364C83F009F7D17 ] wudfsvc C:\Windows\System32\WUDFSvc.dll
21:38:21.0990 3960 wudfsvc - ok
21:38:22.0005 3960 [ FE90B750AB808FB9DD8FBB428B5FF83B ] WwanSvc C:\Windows\System32\wwansvc.dll
21:38:22.0036 3960 WwanSvc - ok
21:38:22.0083 3960 [ 2EE48CFCE7CA8E0DB4C44C7476C0943B ] xusb21 C:\Windows\system32\DRIVERS\xusb21.sys
21:38:22.0114 3960 xusb21 - ok
21:38:22.0130 3960 ================ Scan global ===============================
21:38:22.0161 3960 [ BA0CD8C393E8C9F83354106093832C7B ] C:\Windows\system32\basesrv.dll
21:38:22.0192 3960 [ 0C27239FEA4DB8A2AAC9E502186B7264 ] C:\Windows\system32\winsrv.dll
21:38:22.0208 3960 [ 0C27239FEA4DB8A2AAC9E502186B7264 ] C:\Windows\system32\winsrv.dll
21:38:22.0239 3960 [ D6160F9D869BA3AF0B787F971DB56368 ] C:\Windows\system32\sxssrv.dll
21:38:22.0270 3960 [ 24ACB7E5BE595468E3B9AA488B9B4FCB ] C:\Windows\system32\services.exe
21:38:22.0270 3960 [Global] - ok
21:38:22.0270 3960 ================ Scan MBR ==================================
21:38:22.0286 3960 [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
21:38:22.0442 3960 \Device\Harddisk0\DR0 - ok
21:38:22.0442 3960 ================ Scan VBR ==================================
21:38:22.0442 3960 [ ACCBB55B3FA7974343D586DDC516A848 ] \Device\Harddisk0\DR0\Partition1
21:38:22.0442 3960 \Device\Harddisk0\DR0\Partition1 - ok
21:38:22.0473 3960 [ 926A28D65A9D6E78F5CB42B18F26F8E1 ] \Device\Harddisk0\DR0\Partition2
21:38:22.0473 3960 \Device\Harddisk0\DR0\Partition2 - ok
21:38:22.0489 3960 [ B28F111EA68C85D5260E8EAD65F4B7ED ] \Device\Harddisk0\DR0\Partition3
21:38:22.0489 3960 \Device\Harddisk0\DR0\Partition3 - ok
21:38:22.0489 3960 ============================================================
21:38:22.0489 3960 Scan finished
21:38:22.0489 3960 ============================================================
21:38:22.0504 4684 Detected object count: 1
21:38:22.0504 4684 Actual detected object count: 1
21:38:39.0602 4684 USBAAPL64 ( UnsignedFile.Multi.Generic ) - skipped by user
21:38:39.0602 4684 USBAAPL64 ( UnsignedFile.Multi.Generic ) - User select action: Skip
21:38:44.0641 4144 Deinitialize success
|
|
15.08.2013, 19:19
| #12 |
| /// Malware-holic | Put Optional Dateien gefunden... War nich zuhause gestern, sorry. es sind 3 Logs zu erstellen, möglichst gleichzeitig posten. 1. Downloade Dir bitte  AdwCleaner auf deinen Desktop.
Neustarten. 2. Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
3. HitmanPro - Download - Filepony Hitmanpro laden, doppelklicken, Scannen. Log speichern und posten, bzw als XML exportieren, packen und anhängen. Hitmanpro erst mal schließen
__________________ -Verdächtige mails bitte an uns zur Analyse weiterleiten: markusg.trojaner-board@web.de Weiterleiten Anleitung: http://markusg.trojaner-board.de Mails bitte vorerst nach obiger Anleitung an markusg.trojaner-board@web.de Weiterleiten Wenn Ihr uns unterstützen möchtet |
|
16.08.2013, 02:52
| #13 |
| | Put Optional Dateien gefunden... AdwCleaner: Code:
ATTFilter # AdwCleaner v2.306 - Datei am 16/08/2013 um 03:36:51 erstellt
# Aktualisiert am 19/07/2013 von Xplode
# Betriebssystem : Windows 7 Ultimate Service Pack 1 (64 bits)
# Benutzer : Sino - SINO-PC
# Bootmodus : Normal
# Ausgeführt unter : C:\Users\Sino\Downloads\adwcleaner.exe
# Option [Löschen]
**** [Dienste] ****
***** [Dateien / Ordner] *****
Gelöscht mit Neustart : C:\Program Files\SoftwareUpdater
Ordner Gelöscht : C:\Program Files (x86)\Freemium
Ordner Gelöscht : C:\Program Files (x86)\SoftwareUpdater
Ordner Gelöscht : C:\Users\Sino\AppData\Local\DownloadGuide
Ordner Gelöscht : C:\Users\Sino\AppData\Roaming\dvdvideosoftiehelpers
Ordner Gelöscht : C:\Users\Sino\AppData\Roaming\Freemium
***** [Registrierungsdatenbank] *****
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\LyricsWoofer
Schlüssel Gelöscht : HKCU\Software\InstallCore
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\WebCakeDesktop_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\WebCakeDesktop_RASMANCS
Schlüssel Gelöscht : HKLM\Software\systweak
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{DF84E609-C3A4-49CB-A160-61767DAF8899}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{DF84E609-C3A4-49CB-A160-61767DAF8899}
***** [Internet Browser] *****
-\\ Internet Explorer v10.0.9200.16660
[OK] Die Registrierungsdatenbank ist sauber.
-\\ Mozilla Firefox v22.0 (de)
Datei : C:\Users\Sino\AppData\Roaming\Mozilla\Firefox\Profiles\ul9t1wes.default\prefs.js
C:\Users\Sino\AppData\Roaming\Mozilla\Firefox\Profiles\ul9t1wes.default\user.js ... Gelöscht !
[OK] Die Datei ist sauber.
Datei : C:\Users\Sino2\AppData\Roaming\Mozilla\Firefox\Profiles\pfvp4nqf.default\prefs.js
[OK] Die Datei ist sauber.
Datei : C:\Users\Gast\AppData\Roaming\Mozilla\Firefox\Profiles\4dqrc2py.default\prefs.js
[OK] Die Datei ist sauber.
-\\ Google Chrome v [Version kann nicht ermittelt werden]
Datei : C:\Users\Sino\AppData\Local\Google\Chrome\User Data\Default\Preferences
[OK] Die Datei ist sauber.
-\\ Opera v12.15.1748.0
Datei : C:\Users\Sino\AppData\Roaming\Opera\Opera\operaprefs.ini
[OK] Die Datei ist sauber.
*************************
AdwCleaner[S1].txt - [370 octets] - [16/08/2013 03:36:21]
AdwCleaner[S2].txt - [2300 octets] - [16/08/2013 03:36:51]
########## EOF - C:\AdwCleaner[S2].txt - [2360 octets] ##########
junkware: Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 5.4.6 (08.15.2013:1)
OS: Windows 7 Ultimate x64
Ran by Sino on 16.08.2013 at 3:39:46,91
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Registry Values
~~~ Registry Keys
Failed to delete: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{FB684D26-01F4-4D9D-87CB-F486BEBA56DC}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{0AFD55C8-ADF8-4A33-A6E1-DEDB7A36AEB4}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{FB684D26-01F4-4D9D-87CB-F486BEBA56DC}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\powerpack
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\apnstub_rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\apnstub_rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\askpartnercobrandingtool_rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\askpartnercobrandingtool_rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\AskSLib_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\AskSLib_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\TaskScheduler_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\TaskScheduler_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\LyricsWooferUPD_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\SoftonicDownloader_fuer_filerecovery_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\SoftonicDownloader_fuer_filerecovery_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\SoftonicDownloader_fuer_minecraft_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\SoftonicDownloader_fuer_minecraft_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\apnstub_RASDLG
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\AskSLib_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\AskSLib_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\TaskScheduler_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\TaskScheduler_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\LyricsWooferUPD_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\SoftonicDownloader_fuer_filerecovery_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\SoftonicDownloader_fuer_filerecovery_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\SoftonicDownloader_fuer_minecraft_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\SoftonicDownloader_fuer_minecraft_RASMANCS
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{CF2D81E8-1015-476D-9D46-91305E581035}
~~~ Files
~~~ Folders
Failed to delete: [Folder] "C:\Program Files (x86)\goforfiles"
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{012450E6-AE6F-475E-8868-EADB162C56BC}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{02005274-EA6F-44DE-8778-3479E202DAC7}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{032C3F2B-DA15-4C0D-BDD0-B6BE83B4F9E1}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{04543D8C-D18A-4D67-BA4B-1E5E1AEF18E0}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{05246F49-FC91-4321-AEB2-B41E4D894FBE}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{05439216-637C-489E-B178-B326B5884AFD}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{07D1658B-F01E-48C1-9BBD-575DDAFE51D7}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{096E26E4-B6D8-4005-AE1A-92A3BFD0D06F}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{0A60A246-EB3B-4CE9-BCD1-E0FC518086FE}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{0B28962F-37AB-4342-BDF3-CF32C0CFA5BB}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{0E8FD822-E37E-4057-9012-30FB4FBA02CD}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{0EDFE837-25C1-4595-928E-4F7AD8F73395}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{167D68C7-97AD-43CD-9832-4186CE92662F}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{169BF8F2-B47C-4249-BA34-B49B6915B587}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{16DEE397-D2B0-4988-B3BA-DBC95BA6F243}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{17BC43C6-E6DB-4F55-9B85-7D342730B2D3}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{1ABF9354-1622-43ED-896C-97CF827D316E}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{1C76D5AF-55EC-49F6-8CA2-FA54A11934DD}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{1F276F17-E74C-4BBD-93EA-443791ACF17E}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{23F0E33F-AB91-46E3-A9E3-0B071C694A30}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{2543318F-DCC4-4D79-8C5A-12316997B257}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{2555A437-1129-46C8-A104-9B6441828D74}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{26555691-5821-4CC7-817C-B530A714AB2F}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{2855B7D2-725F-476E-A576-5FB1F64B805E}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{2B2DBAD7-8B95-438F-BB87-9827D3B8760B}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{2BCFB72A-560F-43E7-8A43-C72F84209A79}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{2C0E377B-087F-49AD-802D-71E5E7BEFF95}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{2C26A561-D7F4-4D36-8050-4FDB549D2FA9}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{2CFD0F24-02DC-4E48-BCC4-4D2B400E3AAC}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{2D9A0819-92EF-48C2-806C-4994E5054C10}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{2FC6546B-7BC3-4DA8-A1E7-399C9453CCD5}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{325F0DAA-1B7B-49B6-A2F4-E08118042EB2}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{32FBE12E-8481-42B9-8F43-20BAD3E3EDEB}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{36C1A487-6863-4C8D-BC3B-A79FD65125FC}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{3853B0ED-5461-4F26-920D-2B9CA9CA5B26}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{38E40B9D-92BB-44FA-AE86-299FA4B3D23C}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{3AAA99C0-2B49-43FE-8797-65D0AF8C35B6}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{3AC30196-682F-4E50-BFD4-493F2C2AE891}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{3AE5E10D-FD6B-4B5E-AC7E-849FD3655984}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{3AEA9C1B-3750-4A6F-9637-9093662A0B1C}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{3C7BF3DA-1C41-46B5-93F1-C36C668CACD1}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{3D69EB44-88B7-4928-B017-A51AFD93706E}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{3E96B801-FA9C-4CB6-BE4C-F52668E76F58}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{3EEB9C85-65E0-47F2-8B25-2E27D00719CB}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{3F77A224-1F1A-48C0-B8AE-FEDD82F8E0D2}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{42782D33-DC8E-4C11-91DA-3337E24C9202}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{4279E264-468F-4CD9-B07B-4288FF461048}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{43C16E53-0E7E-470C-96E0-DDD44E3A7E49}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{45F5D0EE-2F4E-4E0B-976F-DADF6DE87DA2}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{4B05F110-4F23-4477-977F-74A9C25EDCC7}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{4BA23BBA-A33E-4066-A6CB-3496BDC7A9FA}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{4C66D4F8-37C2-4B2C-B56E-F5F4E1FDAB55}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{4D6EA776-FD12-4BF4-BF54-1DA81CB6F788}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{4F0E7E85-D0CF-417D-BBE2-DE57F7BB2E88}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{5693B481-5C0D-4F5E-B386-F9BAA8701F90}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{56A9AFED-943A-4EF3-AFDB-EE9D3837F456}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{57401D95-98E3-452C-8BBD-941D50F95BEA}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{58B30EE4-8A92-4A21-8A9A-B2ADC9F812E2}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{5A8309D8-E2EC-473E-9C59-87F57A2B4242}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{5EE01827-128E-42DE-8D9E-0EFF622D58F5}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{601488BB-062B-4B75-ABFF-07A982338BA5}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{605B534C-EFE3-4853-A9AF-797B460BDA8D}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{64B606F2-DABF-4FCD-9FDE-119D40D7F47D}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{6590E2D0-8BD6-41E0-A708-18EE65383135}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{6B1935FA-9DF7-421F-A710-979B384AAE56}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{6B9F78A4-1C41-407F-A2FA-980555DA2FCC}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{74AC4219-4B44-41F6-B0B7-6E28D302EEBB}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{775243AB-A99E-4299-AD1E-A24A1A30ECE9}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{77E152A3-46A1-4766-8B03-62D3F1F8357C}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{7D9862C6-13E7-46B8-B5A0-6736741EAE2C}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{7E15E025-CAC0-4553-B12B-D3303DF9CA28}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{7F7AFFB9-970B-4C2B-B1DB-D93469CCFFC2}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{8207E277-D766-4B7D-AE59-E0DB94A0AFA6}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{8266174F-986A-45FD-A7D2-E7023DA40367}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{83767E7A-B44E-4869-8E84-694FEBCD4485}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{851046FA-EEA4-4B99-B5C2-967950718993}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{8799369B-E706-4985-A3B4-0613F37A1E15}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{8E8078C2-1335-44FD-B981-F8D1A3B66D9C}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{8F53B8F4-70EA-447D-B145-7915E1D47C5D}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{8FE6B17D-E5CD-48D2-9FBA-6AAFA1A36BC7}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{917087B6-FAE6-4CCC-9A33-42B7E3F9122C}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{92EE1ADF-8A38-436C-BC4D-984CCC938B3B}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{9541679F-829A-4C39-9365-8E651DF52BAC}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{9C0A860C-2ACD-4497-A19E-BC80257E4092}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{9CACF90B-0150-4468-938B-CC0323B16059}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{9FEE5328-DB1E-4D86-92C7-E6BD674A2E01}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{A0795275-70E9-4362-83F8-864097573BB8}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{A6112458-0487-4F96-8307-9009CC24E207}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{AAA32C1A-87B7-46F7-96A0-B10B623E4BB1}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{AE4B9336-7220-4FD1-9EF8-9186E077863D}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{AF91CC1D-1AF4-4F65-9C11-3DD86457DF5A}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{B23C1FF6-A71F-4FC2-AABA-78DD8BA5B9E5}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{B394933E-F640-42BB-ADC1-A33F54CA68A8}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{B4131F5D-F41D-4DC5-B0B5-35080B98BE66}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{B56831D3-541E-4C71-BC6C-8ECAEEB35C77}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{B735F21A-09B6-4526-BCDE-B4D5FFCCC25B}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{B7C43523-D026-42F1-AA16-4322D7B52657}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{BA7B4BC7-DF9F-4FEE-9475-06F361752E04}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{BCC9AF7D-9713-4F19-BF80-EB42797BF231}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{BCD21B7B-3AF1-46CE-AC7B-DC732ED30A63}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{BE68931C-D918-468C-A3E6-E3B00C327C00}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{C1C9F832-F4C9-46A3-B6CF-E8FBB76BD1F8}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{C1E72BF6-EE6A-4C55-9933-567112812EE6}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{C28C22C3-4D95-4050-8282-06EC9B9E333B}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{C708B204-DD48-47EF-9864-FC4B0C876D4C}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{C7A8268B-2799-4D91-B831-D8E629855DB1}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{C8BBE534-E003-4F06-B6F8-158FC37B12EE}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{C9732E1C-7742-4D9C-9E24-B4AB09D32971}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{C9EE8F67-0026-4F73-8F4F-BA7ADCAA6583}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{CB6446D3-E703-48C2-A14F-3DFB05384631}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{CF465097-F8FF-4AF8-891D-1B8025C02E9D}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{CFB13607-0BE6-495B-8F6D-5D9F3335BA13}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{D43D542C-D426-4DD6-8AE3-2CF8083C36AD}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{D4EF11CD-E0CF-4797-8D24-5A312739CEEC}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{D5624D76-30BE-44C2-8F83-27A6E1946AC8}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{E05F334D-3B73-4FD1-A0C6-F28E1DAA2821}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{E1785DBC-DD1E-407A-B6E1-A0F037242DCD}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{E2700870-C125-4937-9A43-78F584B1B37B}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{E2F446F1-D78A-4860-BB12-58A515562B06}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{E49C2D05-91B4-4FC5-BA0A-BE3237880FDD}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{E5211500-2E8A-42C4-8698-A39F3874B9C2}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{EA6DE3F4-9829-401B-8583-E1412658A91C}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{EEE2183C-B94A-4510-BDB7-78523C56801C}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{F4CAA381-BEE2-4B6B-972C-07D91FD6CFA0}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{F965C6F4-E150-4BCA-AC4F-CE7D3F7EEC92}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{F98B5818-3DA0-44E1-B25C-48D05171047E}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{FA5DB3C3-4820-4B3D-9D73-9FB35EFB944A}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{FC866152-D0BF-4C7D-A9F9-349723E98F5A}
Successfully deleted: [Empty Folder] C:\Users\Sino\appdata\local\{FE8D46FA-F1E5-41E6-BE72-A6EBEF6456FE}
~~~ FireFox
Emptied folder: C:\Users\Sino\AppData\Roaming\mozilla\firefox\profiles\ul9t1wes.default\minidumps [811 files]
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 16.08.2013 at 3:43:31,87
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Code:
ATTFilter
Hier erstmal die Logfiles. Habe aber noch ne Frage und zwar, was die 2 Logfiles sprich die Combofix und TDSSKiller nun ergeben haben? |
|
19.08.2013, 23:36
| #14 |
| | Put Optional Dateien gefunden... Hi, markusg ich warte auf eine Rückmeldung bezüglich der Logfiles, sind sie im Moment anderweitig sehr unter Zeitdruck ? |
|
21.08.2013, 13:45
| #15 |
| /// Malware-holic | Put Optional Dateien gefunden... Sorry, war unerwarteter Weise nicht zuhause. Kannst du mir ein neues FRST Log posten bitte. sehen bisher alle oki aus soweit, außer der Adware.
__________________ -Verdächtige mails bitte an uns zur Analyse weiterleiten: markusg.trojaner-board@web.de Weiterleiten Anleitung: http://markusg.trojaner-board.de Mails bitte vorerst nach obiger Anleitung an markusg.trojaner-board@web.de Weiterleiten Wenn Ihr uns unterstützen möchtet |
|
| Themen zu Put Optional Dateien gefunden... |
| administrator, anti-malware, appdata, dateien, lyricswoofer, malwarebytes, microsoft, optional, pup.iminent.a, pup.optional., pup.optional.babylon.a, pup.optional.conduit.a, pup.optional.iminent, pup.optional.lyricsad, pup.optional.tarma.a, pup.optional.wajam.a, pup.optional.yontoo, pup.webcake, pup.webcake.a, quarantäne, service, software, tarma, temp, temporary, trojan.pup.webcake.a, version, wajam |
WARNUNG an die MITLESER: 
Linear-Darstellung
