Blocked IP - Browser zeigt manche Seiten nicht an

efkey1982 · 12.03.2012, 21:49

Hallo zusammen,

ich habe das problem, dass in allen browsern (iexplorer, firefox, etc) bestimmte Seiten (z.B. .to oder .in Endungen) nicht mehr angezeigt werden. Es wird dann nur eine weiße Seite oder der Hinweis angezeigt, dass die Verbindung nicht hergestellt werden konnte.
Auf anderen rechnern mit selben internetzugang (IP) sind diese seiten allerdings abrufbar. Also kein routerproblem.

weiter habe ich bereits folgende programme übers system laufen lassen: trendmicro housecall, spybot s&d, panda activescan, anti-malware.

Hier das Log von anti-maleware:

Code:

ATTFilter

2012/03/12 18:55:40 +0100	FRED	afred	MESSAGE	Starting protection
2012/03/12 18:55:42 +0100	FRED	afred	MESSAGE	Protection started successfully
2012/03/12 18:55:45 +0100	FRED	afred	MESSAGE	Starting IP protection
2012/03/12 18:55:46 +0100	FRED	afred	MESSAGE	IP Protection started successfully
2012/03/12 19:01:35 +0100	FRED	afred	MESSAGE	Executing scheduled update:  Daily
2012/03/12 19:01:41 +0100	FRED	afred	MESSAGE	Starting database refresh
2012/03/12 19:01:41 +0100	FRED	afred	MESSAGE	Scheduled update executed successfully:  database updated from version v2012.03.11.07 to version v2012.03.12.05
2012/03/12 19:01:41 +0100	FRED	afred	MESSAGE	Stopping IP protection
2012/03/12 19:02:20 +0100	FRED	afred	MESSAGE	IP Protection stopped
2012/03/12 19:02:22 +0100	FRED	afred	MESSAGE	Database refreshed successfully
2012/03/12 19:02:22 +0100	FRED	afred	MESSAGE	Starting IP protection
2012/03/12 19:02:23 +0100	FRED	afred	MESSAGE	IP Protection started successfully
2012/03/12 19:05:35 +0100	FRED	afred	IP-BLOCK	109.163.231.88 (Type: outgoing, Port: 51206, Process: firefox.exe)
2012/03/12 19:05:35 +0100	FRED	afred	IP-BLOCK	109.163.231.88 (Type: outgoing, Port: 51208, Process: firefox.exe)
2012/03/12 19:05:35 +0100	FRED	afred	IP-BLOCK	109.163.231.88 (Type: outgoing, Port: 51210, Process: firefox.exe)
2012/03/12 19:05:35 +0100	FRED	afred	IP-BLOCK	109.163.231.88 (Type: outgoing, Port: 51212, Process: firefox.exe)
2012/03/12 19:06:23 +0100	FRED	afred	IP-BLOCK	109.163.231.88 (Type: outgoing, Port: 51236, Process: firefox.exe)
2012/03/12 19:06:23 +0100	FRED	afred	IP-BLOCK	109.163.231.88 (Type: outgoing, Port: 51238, Process: firefox.exe)
2012/03/12 19:06:23 +0100	FRED	afred	IP-BLOCK	109.163.231.88 (Type: outgoing, Port: 51240, Process: firefox.exe)
2012/03/12 19:06:23 +0100	FRED	afred	IP-BLOCK	109.163.231.88 (Type: outgoing, Port: 51264, Process: firefox.exe)
2012/03/12 19:06:31 +0100	FRED	afred	IP-BLOCK	109.163.231.88 (Type: outgoing, Port: 51268, Process: firefox.exe)
2012/03/12 19:14:00 +0100	FRED	afred	IP-BLOCK	46.17.100.67 (Type: outgoing, Port: 52426, Process: firefox.exe)
2012/03/12 19:14:00 +0100	FRED	afred	IP-BLOCK	46.17.100.67 (Type: outgoing, Port: 52428, Process: firefox.exe)
2012/03/12 19:14:00 +0100	FRED	afred	IP-BLOCK	46.17.100.67 (Type: outgoing, Port: 52430, Process: firefox.exe)
2012/03/12 19:14:00 +0100	FRED	afred	IP-BLOCK	46.17.100.67 (Type: outgoing, Port: 52434, Process: firefox.exe)
2012/03/12 19:14:00 +0100	FRED	afred	IP-BLOCK	46.17.100.67 (Type: outgoing, Port: 52436, Process: firefox.exe)
2012/03/12 19:14:24 +0100	FRED	afred	IP-BLOCK	109.163.231.88 (Type: outgoing, Port: 52468, Process: firefox.exe)
2012/03/12 19:14:24 +0100	FRED	afred	IP-BLOCK	109.163.231.88 (Type: outgoing, Port: 52470, Process: firefox.exe)
2012/03/12 19:14:24 +0100	FRED	afred	IP-BLOCK	109.163.231.88 (Type: outgoing, Port: 52472, Process: firefox.exe)
2012/03/12 19:14:32 +0100	FRED	afred	IP-BLOCK	109.163.231.88 (Type: outgoing, Port: 52474, Process: firefox.exe)
2012/03/12 19:17:53 +0100	FRED	afred	IP-BLOCK	109.163.231.88 (Type: outgoing, Port: 52686, Process: opera.exe)
2012/03/12 19:17:53 +0100	FRED	afred	IP-BLOCK	109.163.231.88 (Type: outgoing, Port: 52687, Process: opera.exe)
2012/03/12 19:17:53 +0100	FRED	afred	IP-BLOCK	109.163.231.88 (Type: outgoing, Port: 52688, Process: opera.exe)
2012/03/12 19:17:53 +0100	FRED	afred	IP-BLOCK	109.163.231.88 (Type: outgoing, Port: 52690, Process: opera.exe)
2012/03/12 19:18:01 +0100	FRED	afred	IP-BLOCK	109.163.231.88 (Type: outgoing, Port: 52691, Process: opera.exe)
2012/03/12 19:18:01 +0100	FRED	afred	IP-BLOCK	109.163.231.88 (Type: outgoing, Port: 52692, Process: opera.exe)
2012/03/12 19:18:01 +0100	FRED	afred	IP-BLOCK	109.163.231.88 (Type: outgoing, Port: 52693, Process: opera.exe)
2012/03/12 19:18:01 +0100	FRED	afred	IP-BLOCK	109.163.231.88 (Type: outgoing, Port: 52694, Process: opera.exe)
2012/03/12 19:20:01 +0100	FRED	afred	IP-BLOCK	109.163.231.88 (Type: outgoing, Port: 52784, Process: firefox.exe)
2012/03/12 19:20:17 +0100	FRED	afred	IP-BLOCK	109.163.231.88 (Type: outgoing, Port: 52798, Process: firefox.exe)
2012/03/12 19:20:25 +0100	FRED	afred	IP-BLOCK	109.163.231.88 (Type: outgoing, Port: 52800, Process: firefox.exe)
2012/03/12 19:21:29 +0100	FRED	afred	IP-BLOCK	109.163.226.203 (Type: outgoing, Port: 52855, Process: opera.exe)
2012/03/12 19:21:29 +0100	FRED	afred	IP-BLOCK	109.163.226.203 (Type: outgoing, Port: 52857, Process: opera.exe)
2012/03/12 19:21:29 +0100	FRED	afred	IP-BLOCK	109.163.226.203 (Type: outgoing, Port: 52858, Process: opera.exe)
2012/03/12 19:21:29 +0100	FRED	afred	IP-BLOCK	109.163.226.203 (Type: outgoing, Port: 52860, Process: opera.exe)
2012/03/12 19:33:47 +0100	FRED	afred	IP-BLOCK	109.163.226.203 (Type: outgoing, Port: 53477, Process: opera.exe)
2012/03/12 19:33:47 +0100	FRED	afred	IP-BLOCK	109.163.226.203 (Type: outgoing, Port: 53478, Process: opera.exe)
2012/03/12 19:33:47 +0100	FRED	afred	IP-BLOCK	109.163.226.203 (Type: outgoing, Port: 53479, Process: opera.exe)
2012/03/12 19:33:47 +0100	FRED	afred	IP-BLOCK	109.163.226.203 (Type: outgoing, Port: 53481, Process: opera.exe)
2012/03/12 19:47:23 +0100	FRED	afred	IP-BLOCK	109.163.231.88 (Type: outgoing, Port: 54034, Process: firefox.exe)
2012/03/12 19:54:12 +0100	FRED	afred	IP-BLOCK	109.163.231.88 (Type: outgoing, Port: 54716, Process: firefox.exe)
2012/03/12 19:56:14 +0100	FRED	afred	IP-BLOCK	109.163.231.88 (Type: outgoing, Port: 54791, Process: iexplore.exe)
2012/03/12 19:56:14 +0100	FRED	afred	IP-BLOCK	109.163.231.88 (Type: outgoing, Port: 54792, Process: iexplore.exe)
2012/03/12 19:56:14 +0100	FRED	afred	IP-BLOCK	109.163.231.88 (Type: outgoing, Port: 54793, Process: iexplore.exe)
2012/03/12 19:56:14 +0100	FRED	afred	IP-BLOCK	109.163.231.88 (Type: outgoing, Port: 54794, Process: iexplore.exe)
2012/03/12 19:59:29 +0100	FRED	afred	IP-BLOCK	91.205.96.166 (Type: outgoing, Port: 54993, Process: firefox.exe)
2012/03/12 19:59:29 +0100	FRED	afred	IP-BLOCK	91.205.96.166 (Type: outgoing, Port: 54995, Process: firefox.exe)
2012/03/12 19:59:29 +0100	FRED	afred	IP-BLOCK	91.205.96.166 (Type: outgoing, Port: 54997, Process: firefox.exe)
2012/03/12 19:59:29 +0100	FRED	afred	IP-BLOCK	91.205.96.166 (Type: outgoing, Port: 55001, Process: firefox.exe)
2012/03/12 19:59:29 +0100	FRED	afred	IP-BLOCK	91.205.96.166 (Type: outgoing, Port: 55003, Process: firefox.exe)
2012/03/12 20:00:10 +0100	FRED	afred	IP-BLOCK	91.205.96.166 (Type: outgoing, Port: 55025, Process: firefox.exe)
2012/03/12 20:00:59 +0100	FRED	afred	IP-BLOCK	91.205.96.166 (Type: outgoing, Port: 55049, Process: firefox.exe)
2012/03/12 20:01:15 +0100	FRED	afred	IP-BLOCK	91.205.96.166 (Type: outgoing, Port: 55056, Process: firefox.exe)
2012/03/12 20:01:39 +0100	FRED	afred	IP-BLOCK	91.205.96.165 (Type: outgoing, Port: 55064, Process: firefox.exe)
2012/03/12 20:01:39 +0100	FRED	afred	IP-BLOCK	91.205.96.165 (Type: outgoing, Port: 55066, Process: firefox.exe)
2012/03/12 20:01:39 +0100	FRED	afred	IP-BLOCK	91.205.96.165 (Type: outgoing, Port: 55068, Process: firefox.exe)
2012/03/12 20:01:39 +0100	FRED	afred	IP-BLOCK	91.205.96.165 (Type: outgoing, Port: 55070, Process: firefox.exe)
2012/03/12 20:01:39 +0100	FRED	afred	IP-BLOCK	91.205.96.165 (Type: outgoing, Port: 55072, Process: firefox.exe)
2012/03/12 20:02:12 +0100	FRED	afred	IP-BLOCK	91.205.96.165 (Type: outgoing, Port: 55082, Process: firefox.exe)
2012/03/12 20:09:23 +0100	FRED	afred	IP-BLOCK	109.163.226.203 (Type: outgoing, Port: 55372, Process: opera.exe)
2012/03/12 20:09:23 +0100	FRED	afred	IP-BLOCK	109.163.226.203 (Type: outgoing, Port: 55373, Process: opera.exe)
2012/03/12 20:09:23 +0100	FRED	afred	IP-BLOCK	109.163.226.203 (Type: outgoing, Port: 55375, Process: opera.exe)
2012/03/12 20:09:23 +0100	FRED	afred	IP-BLOCK	109.163.226.203 (Type: outgoing, Port: 55376, Process: opera.exe)
2012/03/12 21:37:58 +0100	FRED	afred	IP-BLOCK	208.73.210.29 (Type: outgoing, Port: 56481, Process: iexplore.exe)
2012/03/12 21:37:58 +0100	FRED	afred	IP-BLOCK	208.73.210.29 (Type: outgoing, Port: 56480, Process: iexplore.exe)
2012/03/12 21:37:58 +0100	FRED	afred	IP-BLOCK	208.73.210.29 (Type: outgoing, Port: 56479, Process: iexplore.exe)
2012/03/12 21:37:58 +0100	FRED	afred	IP-BLOCK	208.73.210.29 (Type: outgoing, Port: 56478, Process: iexplore.exe)
2012/03/12 21:37:58 +0100	FRED	afred	IP-BLOCK	208.73.210.29 (Type: outgoing, Port: 56485, Process: iexplore.exe)
2012/03/12 21:37:58 +0100	FRED	afred	IP-BLOCK	208.73.210.29 (Type: outgoing, Port: 56484, Process: iexplore.exe)
2012/03/12 21:37:58 +0100	FRED	afred	IP-BLOCK	208.73.210.29 (Type: outgoing, Port: 56482, Process: iexplore.exe)
2012/03/12 21:37:58 +0100	FRED	afred	IP-BLOCK	208.73.210.29 (Type: outgoing, Port: 56483, Process: iexplore.exe)
2012/03/12 21:37:58 +0100	FRED	afred	IP-BLOCK	208.73.210.29 (Type: outgoing, Port: 56486, Process: iexplore.exe)
2012/03/12 21:37:58 +0100	FRED	afred	IP-BLOCK	208.73.210.29 (Type: outgoing, Port: 56487, Process: iexplore.exe)
2012/03/12 21:37:58 +0100	FRED	afred	IP-BLOCK	208.73.210.29 (Type: outgoing, Port: 56488, Process: iexplore.exe)
2012/03/12 21:37:58 +0100	FRED	afred	IP-BLOCK	208.73.210.29 (Type: outgoing, Port: 56489, Process: iexplore.exe)
2012/03/12 21:37:58 +0100	FRED	afred	IP-BLOCK	208.73.210.29 (Type: outgoing, Port: 56490, Process: iexplore.exe)
2012/03/12 21:37:58 +0100	FRED	afred	IP-BLOCK	208.73.210.29 (Type: outgoing, Port: 56491, Process: iexplore.exe)
2012/03/12 21:37:58 +0100	FRED	afred	IP-BLOCK	208.73.210.29 (Type: outgoing, Port: 56492, Process: iexplore.exe)
2012/03/12 21:37:58 +0100	FRED	afred	IP-BLOCK	208.73.210.29 (Type: outgoing, Port: 56493, Process: iexplore.exe)
2012/03/12 21:37:59 +0100	FRED	afred	IP-BLOCK	208.73.210.29 (Type: outgoing, Port: 56494, Process: iexplore.exe)
2012/03/12 21:37:59 +0100	FRED	afred	IP-BLOCK	208.73.210.29 (Type: outgoing, Port: 56495, Process: iexplore.exe)
2012/03/12 21:37:59 +0100	FRED	afred	IP-BLOCK	208.73.210.29 (Type: outgoing, Port: 56496, Process: iexplore.exe)
2012/03/12 21:37:59 +0100	FRED	afred	IP-BLOCK	208.73.210.29 (Type: outgoing, Port: 56497, Process: iexplore.exe)
2012/03/12 21:37:59 +0100	FRED	afred	IP-BLOCK	208.73.210.29 (Type: outgoing, Port: 56498, Process: iexplore.exe)
2012/03/12 21:37:59 +0100	FRED	afred	IP-BLOCK	208.73.210.29 (Type: outgoing, Port: 56499, Process: iexplore.exe)
2012/03/12 21:37:59 +0100	FRED	afred	IP-BLOCK	208.73.210.29 (Type: outgoing, Port: 56500, Process: iexplore.exe)
2012/03/12 21:37:59 +0100	FRED	afred	IP-BLOCK	208.73.210.29 (Type: outgoing, Port: 56501, Process: iexplore.exe)
2012/03/12 21:37:59 +0100	FRED	afred	IP-BLOCK	208.73.210.29 (Type: outgoing, Port: 56502, Process: iexplore.exe)
2012/03/12 21:37:59 +0100	FRED	afred	IP-BLOCK	208.73.210.29 (Type: outgoing, Port: 56503, Process: iexplore.exe)
2012/03/12 21:37:59 +0100	FRED	afred	IP-BLOCK	208.73.210.29 (Type: outgoing, Port: 56504, Process: iexplore.exe)
2012/03/12 21:37:59 +0100	FRED	afred	IP-BLOCK	208.73.210.29 (Type: outgoing, Port: 56505, Process: iexplore.exe)
2012/03/12 21:37:59 +0100	FRED	afred	IP-BLOCK	208.73.210.29 (Type: outgoing, Port: 56506, Process: iexplore.exe)
2012/03/12 21:37:59 +0100	FRED	afred	IP-BLOCK	208.73.210.29 (Type: outgoing, Port: 56507, Process: iexplore.exe)
2012/03/12 21:37:59 +0100	FRED	afred	IP-BLOCK	208.73.210.29 (Type: outgoing, Port: 56512, Process: iexplore.exe)
2012/03/12 21:37:59 +0100	FRED	afred	IP-BLOCK	208.73.210.29 (Type: outgoing, Port: 56513, Process: iexplore.exe)
2012/03/12 21:37:59 +0100	FRED	afred	IP-BLOCK	208.73.210.29 (Type: outgoing, Port: 56509, Process: iexplore.exe)
2012/03/12 21:37:59 +0100	FRED	afred	IP-BLOCK	208.73.210.29 (Type: outgoing, Port: 56508, Process: iexplore.exe)
2012/03/12 21:37:59 +0100	FRED	afred	IP-BLOCK	208.73.210.29 (Type: outgoing, Port: 56510, Process: iexplore.exe)
2012/03/12 21:37:59 +0100	FRED	afred	IP-BLOCK	208.73.210.29 (Type: outgoing, Port: 56511, Process: iexplore.exe)
2012/03/12 21:37:59 +0100	FRED	afred	IP-BLOCK	208.73.210.29 (Type: outgoing, Port: 56515, Process: iexplore.exe)
2012/03/12 21:37:59 +0100	FRED	afred	IP-BLOCK	208.73.210.29 (Type: outgoing, Port: 56514, Process: iexplore.exe)
2012/03/12 21:37:59 +0100	FRED	afred	IP-BLOCK	208.73.210.29 (Type: outgoing, Port: 56516, Process: iexplore.exe)
2012/03/12 21:37:59 +0100	FRED	afred	IP-BLOCK	208.73.210.29 (Type: outgoing, Port: 56517, Process: iexplore.exe)
2012/03/12 21:37:59 +0100	FRED	afred	IP-BLOCK	208.73.210.29 (Type: outgoing, Port: 56518, Process: iexplore.exe)
2012/03/12 21:37:59 +0100	FRED	afred	IP-BLOCK	208.73.210.29 (Type: outgoing, Port: 56519, Process: iexplore.exe)
2012/03/12 21:37:59 +0100	FRED	afred	IP-BLOCK	208.73.210.29 (Type: outgoing, Port: 56520, Process: iexplore.exe)
2012/03/12 21:37:59 +0100	FRED	afred	IP-BLOCK	208.73.210.29 (Type: outgoing, Port: 56521, Process: iexplore.exe)
2012/03/12 21:37:59 +0100	FRED	afred	IP-BLOCK	208.73.210.29 (Type: outgoing, Port: 56522, Process: iexplore.exe)
2012/03/12 21:38:15 +0100	FRED	afred	IP-BLOCK	208.73.210.29 (Type: outgoing, Port: 56539, Process: iexplore.exe)
2012/03/12 21:38:15 +0100	FRED	afred	IP-BLOCK	208.73.210.29 (Type: outgoing, Port: 56540, Process: iexplore.exe)
2012/03/12 21:38:15 +0100	FRED	afred	IP-BLOCK	208.73.210.29 (Type: outgoing, Port: 56541, Process: iexplore.exe)
2012/03/12 21:38:15 +0100	FRED	afred	IP-BLOCK	208.73.210.29 (Type: outgoing, Port: 56542, Process: iexplore.exe)
2012/03/12 21:38:15 +0100	FRED	afred	IP-BLOCK	208.73.210.29 (Type: outgoing, Port: 56543, Process: iexplore.exe)
2012/03/12 21:38:15 +0100	FRED	afred	IP-BLOCK	208.73.210.29 (Type: outgoing, Port: 56544, Process: iexplore.exe)
2012/03/12 21:38:15 +0100	FRED	afred	IP-BLOCK	208.73.210.29 (Type: outgoing, Port: 56545, Process: iexplore.exe)
2012/03/12 21:38:15 +0100	FRED	afred	IP-BLOCK	208.73.210.29 (Type: outgoing, Port: 56546, Process: iexplore.exe)
2012/03/12 21:38:15 +0100	FRED	afred	IP-BLOCK	208.73.210.29 (Type: outgoing, Port: 56547, Process: iexplore.exe)
2012/03/12 21:38:15 +0100	FRED	afred	IP-BLOCK	208.73.210.29 (Type: outgoing, Port: 56548, Process: iexplore.exe)
2012/03/12 21:38:15 +0100	FRED	afred	IP-BLOCK	208.73.210.29 (Type: outgoing, Port: 56549, Process: iexplore.exe)
2012/03/12 21:38:15 +0100	FRED	afred	IP-BLOCK	208.73.210.29 (Type: outgoing, Port: 56550, Process: iexplore.exe)
2012/03/12 21:38:15 +0100	FRED	afred	IP-BLOCK	208.73.210.29 (Type: outgoing, Port: 56551, Process: iexplore.exe)
2012/03/12 21:38:15 +0100	FRED	afred	IP-BLOCK	208.73.210.29 (Type: outgoing, Port: 56552, Process: iexplore.exe)
2012/03/12 21:38:15 +0100	FRED	afred	IP-BLOCK	208.73.210.29 (Type: outgoing, Port: 56553, Process: iexplore.exe)
2012/03/12 21:38:15 +0100	FRED	afred	IP-BLOCK	208.73.210.29 (Type: outgoing, Port: 56555, Process: iexplore.exe)
2012/03/12 21:38:15 +0100	FRED	afred	IP-BLOCK	208.73.210.29 (Type: outgoing, Port: 56554, Process: iexplore.exe)
2012/03/12 21:38:15 +0100	FRED	afred	IP-BLOCK	208.73.210.29 (Type: outgoing, Port: 56556, Process: iexplore.exe)
2012/03/12 21:38:15 +0100	FRED	afred	IP-BLOCK	208.73.210.29 (Type: outgoing, Port: 56557, Process: iexplore.exe)
2012/03/12 21:38:15 +0100	FRED	afred	IP-BLOCK	208.73.210.29 (Type: outgoing, Port: 56558, Process: iexplore.exe)
2012/03/12 21:38:15 +0100	FRED	afred	IP-BLOCK	208.73.210.29 (Type: outgoing, Port: 56559, Process: iexplore.exe)
2012/03/12 21:38:15 +0100	FRED	afred	IP-BLOCK	208.73.210.29 (Type: outgoing, Port: 56560, Process: iexplore.exe)
2012/03/12 21:38:15 +0100	FRED	afred	IP-BLOCK	208.73.210.29 (Type: outgoing, Port: 56561, Process: iexplore.exe)
2012/03/12 21:38:15 +0100	FRED	afred	IP-BLOCK	208.73.210.29 (Type: outgoing, Port: 56563, Process: iexplore.exe)
2012/03/12 21:38:15 +0100	FRED	afred	IP-BLOCK	208.73.210.29 (Type: outgoing, Port: 56562, Process: iexplore.exe)
2012/03/12 21:38:15 +0100	FRED	afred	IP-BLOCK	208.73.210.29 (Type: outgoing, Port: 56565, Process: iexplore.exe)
2012/03/12 21:38:15 +0100	FRED	afred	IP-BLOCK	208.73.210.29 (Type: outgoing, Port: 56564, Process: iexplore.exe)
2012/03/12 21:38:15 +0100	FRED	afred	IP-BLOCK	208.73.210.29 (Type: outgoing, Port: 56566, Process: iexplore.exe)
2012/03/12 21:38:15 +0100	FRED	afred	IP-BLOCK	208.73.210.29 (Type: outgoing, Port: 56568, Process: iexplore.exe)
2012/03/12 21:38:15 +0100	FRED	afred	IP-BLOCK	208.73.210.29 (Type: outgoing, Port: 56567, Process: iexplore.exe)
2012/03/12 21:38:15 +0100	FRED	afred	IP-BLOCK	208.73.210.29 (Type: outgoing, Port: 56569, Process: iexplore.exe)
2012/03/12 21:38:15 +0100	FRED	afred	IP-BLOCK	208.73.210.29 (Type: outgoing, Port: 56571, Process: iexplore.exe)
2012/03/12 21:38:15 +0100	FRED	afred	IP-BLOCK	208.73.210.29 (Type: outgoing, Port: 56570, Process: iexplore.exe)
2012/03/12 21:38:15 +0100	FRED	afred	IP-BLOCK	208.73.210.29 (Type: outgoing, Port: 56572, Process: iexplore.exe)
2012/03/12 21:38:15 +0100	FRED	afred	IP-BLOCK	208.73.210.29 (Type: outgoing, Port: 56573, Process: iexplore.exe)
2012/03/12 21:38:15 +0100	FRED	afred	IP-BLOCK	208.73.210.29 (Type: outgoing, Port: 56574, Process: iexplore.exe)
2012/03/12 21:38:15 +0100	FRED	afred	IP-BLOCK	208.73.210.29 (Type: outgoing, Port: 56575, Process: iexplore.exe)
2012/03/12 21:38:15 +0100	FRED	afred	IP-BLOCK	208.73.210.29 (Type: outgoing, Port: 56576, Process: iexplore.exe)
2012/03/12 21:38:15 +0100	FRED	afred	IP-BLOCK	208.73.210.29 (Type: outgoing, Port: 56578, Process: iexplore.exe)
2012/03/12 21:38:15 +0100	FRED	afred	IP-BLOCK	208.73.210.29 (Type: outgoing, Port: 56577, Process: iexplore.exe)
2012/03/12 21:38:15 +0100	FRED	afred	IP-BLOCK	208.73.210.29 (Type: outgoing, Port: 56579, Process: iexplore.exe)
2012/03/12 21:38:15 +0100	FRED	afred	IP-BLOCK	208.73.210.29 (Type: outgoing, Port: 56580, Process: iexplore.exe)
2012/03/12 21:38:15 +0100	FRED	afred	IP-BLOCK	208.73.210.29 (Type: outgoing, Port: 56582, Process: iexplore.exe)
2012/03/12 21:38:15 +0100	FRED	afred	IP-BLOCK	208.73.210.29 (Type: outgoing, Port: 56581, Process: iexplore.exe)
2012/03/12 21:38:15 +0100	FRED	afred	IP-BLOCK	208.73.210.29 (Type: outgoing, Port: 56583, Process: iexplore.exe)
2012/03/12 21:38:15 +0100	FRED	afred	IP-BLOCK	208.73.210.29 (Type: outgoing, Port: 56584, Process: iexplore.exe)
2012/03/12 21:38:15 +0100	FRED	afred	IP-BLOCK	208.73.210.29 (Type: outgoing, Port: 56585, Process: iexplore.exe)
2012/03/12 21:38:15 +0100	FRED	afred	IP-BLOCK	208.73.210.29 (Type: outgoing, Port: 56586, Process: iexplore.exe)
2012/03/12 21:38:15 +0100	FRED	afred	IP-BLOCK	208.73.210.29 (Type: outgoing, Port: 56587, Process: iexplore.exe)
2012/03/12 21:38:15 +0100	FRED	afred	IP-BLOCK	208.73.210.29 (Type: outgoing, Port: 56589, Process: iexplore.exe)
2012/03/12 21:38:15 +0100	FRED	afred	IP-BLOCK	208.73.210.29 (Type: outgoing, Port: 56588, Process: iexplore.exe)
2012/03/12 21:38:15 +0100	FRED	afred	IP-BLOCK	208.73.210.29 (Type: outgoing, Port: 56590, Process: iexplore.exe)

Ich hoffe mir kann hier jemand helfen!!

Vielen Dank an Alle im Voraus!

FK

Psychotic · 13.03.2012, 08:22

Um eine genauere Analyse zu ermöglichen, befolge bitte diesen Link:

An alle Hilfesuchenden! Was muss ich vor Eröffnung eines Themas beachten?

Psychotic · 14.03.2012, 23:11

Hallo, benötigst Du noch weiterhin Hilfe ? Sollte ich innerhalb der nächsten 24 Stunden keine Antwort von dir erhalten, werde ich dein Thema aus meinen Abos nehmen und bekomme dadurch keine Nachricht über neue Antworten. Das Verschwinden der Symptome bedeutet nicht, dass dein System schon sauber ist

efkey1982 · 14.03.2012, 23:47

Hallo PsYcHoTiC,

danke für die Anleitung. Anbei die Log Files:

[CODE].DDS Logfile:
DDS Logfile:

Code:

ATTFilter

DDS (Ver_2011-08-26.01) - NTFSAMD64 
Internet Explorer: 9.0.8112.16421  BrowserJavaVersion: 1.6.0_22
Run by afred at 23:39:52 on 2012-03-14
Microsoft Windows 7 Professional   6.1.7601.1.1252.49.1031.18.6135.4235 [GMT 1:00]
.
AV: Avira Desktop *Enabled/Updated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
SP: Avira Desktop *Enabled/Updated* {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files (x86)\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe
C:\Windows\SysWOW64\svchost.exe -k Akamai
C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Windows\system32\taskhost.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\PrintIsolationHost.exe
C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files (x86)\EXPERTool\TBPANEL.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Program Files\Digiarty\Air_Playit\airplayit.exe
C:\Program Files (x86)\Hotspot Shield\bin\openvpnas.exe
C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files (x86)\Hotspot Shield\HssWPR\hsssrv.exe
C:\Program Files (x86)\Hotspot Shield\bin\hsswd.exe
C:\Windows\System32\svchost.exe -k HPZ12
C:\Windows\System32\svchost.exe -k HPZ12
C:\Windows\SysWOW64\PnkBstrA.exe
C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe
C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Windows\system32\svchost.exe -k imgsvc
C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe
C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesService64.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesApp64.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
C:\Program Files\Digiarty\Air_Playit\AirPS.exe
C:\Windows\system32\conhost.exe
C:\Windows\system32\conhost.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Program Files (x86)\Hotspot Shield\bin\openvpntray.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\DllHost.exe
C:\Windows\System32\svchost.exe -k WerSvcGroup
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
C:\Windows\system32\sppsvc.exe
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\system32\DllHost.exe
C:\Windows\system32\DllHost.exe
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\conhost.exe
C:\Windows\SysWOW64\cscript.exe
C:\Windows\system32\wbem\wmiprvse.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://www.google.de/
uInternet Settings,ProxyOverride = *.local
uURLSearchHooks: H - No File
BHO: Octh Class: {000123b4-9b42-4900-b3f7-f4b073efc214} - C:\Program Files (x86)\Orbitdownloader\orbitcth.dll
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
BHO: Spybot-S&D IE Protection: {53707962-6f74-2d53-2644-206d7942484f} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll
BHO: Groove GFS Browser Helper: {72853161-30c5-4d22-b7f9-0bbc1d38a37e} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL
BHO: DownloadStudio IE Add-on: {8170d7dc-bdd6-461e-88eb-f047257898c9} - C:\Program Files (x86)\Conceiva\DownloadStudio\DLMonitr.dll
BHO: Windows Live ID-Anmelde-Hilfsprogramm: {9030d464-4c02-4abf-8ecc-5164760863c6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
BHO: Windows Live Messenger Companion Helper: {9fdde16b-836f-4806-ab1f-1455cbeff289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll
BHO: Skype Browser Helper: {ae805869-2e5c-4ed4-8f7b-f1f7851a4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
BHO: Office Document Cache Handler: {b4f3a835-0e21-4959-ba22-42b3008e02ff} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
BHO: Hotspot Shield Class: {f9e4a054-e9b1-4bc3-83a3-76a1ae736170} - C:\Program Files (x86)\Hotspot Shield\HssIE\HssIE.dll
TB: DAEMON Tools Toolbar: {32099aac-c132-4136-9e9a-4e364a424e17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll
TB: Grab Pro: {c55bbcd6-41ad-48ad-9953-3609c48eacc7} - C:\Program Files (x86)\Orbitdownloader\GrabPro.dll
TB: DownloadStudio IE Toolbar: {cb789373-04d5-4ef4-9c16-871463fd0830} - C:\Program Files (x86)\Conceiva\DownloadStudio\WebDLBar.dll
TB: {47833539-D0C5-4125-9FA8-0819E2EAAC93} - No File
TB: {1392B8D2-5C05-419F-A8F6-B9F15A596612} - No File
TB: {30F9B915-B755-4826-820B-08FBA6BD249D} - No File
uRun: [GAINWARD] C:\Program Files (x86)\EXPERTool\TBPanel.exe /A
uRun: [Digiarty_Software_AirPlayit] "C:\Program Files\Digiarty\Air_Playit\airplayit.exe" -min
uRun: [SpybotSD TeaTimer] C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe
mRun: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
mRun: [Cisco AnyConnect Secure Mobility Agent for Windows] "C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe" -minimized
mRun: [AppleSyncNotifier] C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe
mRun: [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
mRun: [Malwarebytes' Anti-Malware] "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
mPolicies-explorer: NoActiveDesktop = 1 (0x1)
mPolicies-explorer: NoActiveDesktopChanges = 1 (0x1)
mPolicies-system: ConsentPromptBehaviorAdmin = 5 (0x5)
mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
IE: {0000036B-C524-4050-81A0-243669A86B9F} - {B63DBA5F-523F-4B9C-A43D-65DF1977EAD3} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll
IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
IE: {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll
DPF: {166B1BCA-3F9C-11CF-8075-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
TCP: DhcpNameServer = 80.69.100.174 80.69.100.198 192.168.1.1
TCP: Interfaces\{27364107-21B3-480F-8821-304B933F546D} : DhcpNameServer = 10.72.32.1
TCP: Interfaces\{29E73DAB-886E-44F7-A1EB-90A4DEB1D723} : DhcpNameServer = 80.69.100.174 80.69.100.198 192.168.1.1
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
SEH: Groove GFS Stub Execution Hook: {b5a7f190-dda6-4420-b3ba-52453494e6cd} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL
{000123B4-9B42-4900-B3F7-F4B073EFC214}
{18DF081C-E8AD-4283-A596-FA578C2EBDC3}
{53707962-6F74-2D53-2644-206D7942484F}
{72853161-30C5-4D22-B7F9-0BBC1D38A37E}
{8170D7DC-BDD6-461e-88EB-F047257898C9}
{9030D464-4C02-4ABF-8ECC-5164760863C6}
{9FDDE16B-836F-4806-AB1F-1455CBEFF289}
{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
{B4F3A835-0E21-4959-BA22-42B3008E02FF}
{DBC80044-A445-435b-BC74-9C25C1C588A9}
{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}
{32099AAC-C132-4136-9E9A-4E364A424E17}
{C55BBCD6-41AD-48AD-9953-3609C48EACC7}
{CB789373-04D5-4ef4-9C16-871463FD0830}
TB-X64: {47833539-D0C5-4125-9FA8-0819E2EAAC93} - No File
TB-X64: {1392B8D2-5C05-419F-A8F6-B9F15A596612} - No File
TB-X64: {30F9B915-B755-4826-820B-08FBA6BD249D} - No File
mRun-x64: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
mRun-x64: [Cisco AnyConnect Secure Mobility Agent for Windows] "C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe" -minimized
mRun-x64: [AppleSyncNotifier] C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe
mRun-x64: [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
mRun-x64: [Malwarebytes' Anti-Malware] "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
SEH-X64: {B5A7F190-DDA6-4420-B3BA-52453494E6CD}: Groove GFS Stub Execution Hook
.
================= FIREFOX ===================
.
FF - ProfilePath - C:\Users\afred\AppData\Roaming\Mozilla\Firefox\Profiles\og2fjfxt.default\
FF - prefs.js: browser.startup.homepage - www.google.de
FF - prefs.js: network.proxy.type - 0
FF - component: C:\Program Files (x86)\Orbitdownloader\addons\OneClickYouTubeDownloader\components\GrabXpcom.dll
FF - component: C:\Users\afred\AppData\Roaming\Mozilla\Firefox\Profiles\og2fjfxt.default\extensions\{0851d9cd-87db-4a0d-a792-097dc9071486}\components\DownloadStudioNativeWrapper.dll
FF - plugin: C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL
FF - plugin: C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL
FF - plugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll
FF - plugin: C:\Program Files (x86)\Google\Update\1.2.183.39\npGoogleOneClick8.dll
FF - plugin: C:\Program Files (x86)\Google\Update\1.3.21.53\npGoogleUpdate3.dll
FF - plugin: C:\Program Files (x86)\Google\Update\1.3.21.57\npGoogleUpdate3.dll
FF - plugin: C:\Program Files (x86)\Google\Update\1.3.21.65\npGoogleUpdate3.dll
FF - plugin: C:\Program Files (x86)\Google\Update\1.3.21.69\npGoogleUpdate3.dll
FF - plugin: C:\Program Files (x86)\Google\Update\1.3.21.79\npGoogleUpdate3.dll
FF - plugin: C:\Program Files (x86)\Google\Update\1.3.21.99\npGoogleUpdate3.dll
FF - plugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll
FF - plugin: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll
FF - plugin: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll
FF - plugin: C:\Program Files (x86)\Total Immersion\DFusionHomeWebPlugIn\NPDFusionWebFirefox.dll
FF - plugin: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
FF - plugin: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - C:\Program Files (x86)\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
FF - Ext: DownloadStudio Integration: {0851d9cd-87db-4a0d-a792-097dc9071486} - %profile%\extensions\{0851d9cd-87db-4a0d-a792-097dc9071486}
FF - Ext: JavaString Helper: {184AA5E6-741D-464a-820E-94B3ABC2F3B4} - C:\Users\afred\AppData\Roaming\01009
FF - Ext: JavaString Helper: {184AA5E6-741D-464a-820E-94B3ABC2F3B4} - C:\Users\afred\AppData\Roaming\01009
.
---- FIREFOX POLICIES ----
FF - user.js: nglayout.initialpaint.delay - 600
FF - user.js: content.notify.interval - 600000
FF - user.js: content.max.tokenizing.time - 1800000
FF - user.js: content.switch.threshold - 600000
FF - user.js: network.http.max-persistent-connections-per-server - 4
FF - user.js: yahoo.homepage.dontask - true
============= SERVICES / DRIVERS ===============
.
R1 avkmgr;avkmgr;C:\Windows\system32\DRIVERS\avkmgr.sys --> C:\Windows\system32\DRIVERS\avkmgr.sys [?]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;C:\Windows\system32\DRIVERS\dtsoftbus01.sys --> C:\Windows\system32\DRIVERS\dtsoftbus01.sys [?]
R2 avgntflt;avgntflt;C:\Windows\system32\DRIVERS\avgntflt.sys --> C:\Windows\system32\DRIVERS\avgntflt.sys [?]
R3 acsock;acsock;C:\Windows\system32\DRIVERS\acsock64.sys --> C:\Windows\system32\DRIVERS\acsock64.sys [?]
R3 appliandMP;appliandMP;C:\Windows\system32\DRIVERS\appliand.sys --> C:\Windows\system32\DRIVERS\appliand.sys [?]
R3 MBAMProtector;MBAMProtector;\??\C:\Windows\system32\drivers\mbam.sys --> C:\Windows\system32\drivers\mbam.sys [?]
R3 MBfilt;MBfilt;C:\Windows\system32\drivers\MBfilt64.sys --> C:\Windows\system32\drivers\MBfilt64.sys [?]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver;C:\Windows\system32\drivers\nvhda64v.sys --> C:\Windows\system32\drivers\nvhda64v.sys [?]
R3 RTL8167;Realtek 8167 NT Driver;C:\Windows\system32\DRIVERS\Rt64win7.sys --> C:\Windows\system32\DRIVERS\Rt64win7.sys [?]
R3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesDriver64.sys [2011-11-8 11856]
S3 appliand;Applian Network Service;C:\Windows\system32\DRIVERS\appliand.sys --> C:\Windows\system32\DRIVERS\appliand.sys [?]
S3 fssfltr;fssfltr;C:\Windows\system32\DRIVERS\fssfltr.sys --> C:\Windows\system32\DRIVERS\fssfltr.sys [?]
S3 jakndis;Jaksta Service;C:\Windows\system32\DRIVERS\jakndis.sys --> C:\Windows\system32\DRIVERS\jakndis.sys [?]
S3 jakndisMP;jakndisMP;C:\Windows\system32\DRIVERS\jakndis.sys --> C:\Windows\system32\DRIVERS\jakndis.sys [?]
S3 TsUsbFlt;TsUsbFlt;C:\Windows\system32\drivers\tsusbflt.sys --> C:\Windows\system32\drivers\tsusbflt.sys [?]
S3 USBAAPL64;Apple Mobile USB Driver;C:\Windows\system32\Drivers\usbaapl64.sys --> C:\Windows\system32\Drivers\usbaapl64.sys [?]
.
=============== Created Last 30 ================
.
2050-10-15 08:21:13	328704	----a-w-	C:\Windows\IsUn0407.exe
2050-10-15 08:18:57	--------	d-----w-	C:\Program Files (x86)\HP
2012-03-13 22:44:30	5559152	----a-w-	C:\Windows\System32\ntoskrnl.exe
2012-03-13 22:44:30	3968368	----a-w-	C:\Windows\SysWow64\ntkrnlpa.exe
2012-03-13 22:44:29	3913584	----a-w-	C:\Windows\SysWow64\ntoskrnl.exe
2012-03-13 19:41:58	8643640	----a-w-	C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{81F0E09E-24EC-45F1-9EF5-446B0246E239}\mpengine.dll
2012-03-13 19:41:47	3145728	----a-w-	C:\Windows\System32\win32k.sys
2012-03-13 19:41:45	1544192	----a-w-	C:\Windows\System32\DWrite.dll
2012-03-13 19:41:45	1077248	----a-w-	C:\Windows\SysWow64\DWrite.dll
2012-03-13 19:41:04	9216	----a-w-	C:\Windows\System32\rdrmemptylst.exe
2012-03-13 19:41:04	77312	----a-w-	C:\Windows\System32\rdpwsx.dll
2012-03-13 19:41:04	149504	----a-w-	C:\Windows\System32\rdpcorekmts.dll
2012-03-13 19:40:56	826880	----a-w-	C:\Windows\SysWow64\rdpcore.dll
2012-03-13 19:40:56	23552	----a-w-	C:\Windows\System32\drivers\tdtcp.sys
2012-03-13 19:40:56	210944	----a-w-	C:\Windows\System32\drivers\rdpwd.sys
2012-03-13 19:40:56	1031680	----a-w-	C:\Windows\System32\rdpcore.dll
2012-03-12 18:30:58	--------	d-----w-	C:\ProgramData\Spybot - Search & Destroy
2012-03-12 18:30:58	--------	d-----w-	C:\Program Files (x86)\Spybot - Search & Destroy
2012-03-12 18:17:32	--------	d-----w-	C:\Users\afred\AppData\Local\Opera
2012-03-11 12:51:30	--------	d-----w-	C:\Users\afred\AppData\Roaming\AdobeMuse
2012-03-11 12:51:27	--------	d-----w-	C:\Program Files (x86)\Muse
2012-02-29 00:22:38	--------	d-----w-	C:\Users\afred\AppData\Roaming\Malwarebytes
2012-02-29 00:22:32	--------	d-----w-	C:\ProgramData\Malwarebytes
2012-02-29 00:22:31	23152	----a-w-	C:\Windows\System32\drivers\mbam.sys
2012-02-29 00:22:31	--------	d-----w-	C:\Program Files (x86)\Malwarebytes' Anti-Malware
2012-02-27 22:19:23	--------	d-----w-	C:\Users\afred\AppData\Roaming\UAs
2012-02-27 21:50:50	5528	----a-w-	C:\Users\afred\AppData\Roaming\BAcroIEHelpe079.dll
2012-02-27 21:50:44	--------	d-----w-	C:\Users\afred\AppData\Roaming\01009
2012-02-26 20:07:07	--------	d-----w-	C:\Users\afred\AppData\Roaming\01008
2012-02-26 20:07:03	136	----a-w-	C:\Users\afred\AppData\Roaming\srvblck2.tmp
2012-02-26 20:06:58	--------	d-----w-	C:\Users\afred\AppData\Roaming\xmldm
2012-02-26 20:06:53	--------	d-----w-	C:\Users\afred\AppData\Roaming\kock
2012-02-16 21:35:59	887296	----a-w-	C:\Program Files\Internet Explorer\iedvtool.dll
2012-02-16 21:35:59	678912	----a-w-	C:\Program Files (x86)\Internet Explorer\iedvtool.dll
2012-02-16 21:35:59	1390080	----a-w-	C:\Windows\System32\wininet.dll
2012-02-16 21:35:59	1127424	----a-w-	C:\Windows\SysWow64\wininet.dll
2012-02-16 19:39:44	509952	----a-w-	C:\Windows\System32\ntshrui.dll
2012-02-16 19:39:44	442880	----a-w-	C:\Windows\SysWow64\ntshrui.dll
2012-02-16 19:39:43	515584	----a-w-	C:\Windows\System32\timedate.cpl
2012-02-16 19:39:43	478720	----a-w-	C:\Windows\SysWow64\timedate.cpl
2012-02-16 19:39:40	498688	----a-w-	C:\Windows\System32\drivers\afd.sys
2012-02-16 19:39:36	690688	----a-w-	C:\Windows\SysWow64\msvcrt.dll
2012-02-16 19:39:36	634880	----a-w-	C:\Windows\System32\msvcrt.dll
2012-02-16 11:09:41	--------	d-----w-	C:\Users\afred\AppData\Roaming\mkvtoolnix
.
==================== Find3M  ====================
.
2012-02-23 08:18:36	279656	------w-	C:\Windows\System32\MpSigStub.exe
.
============= FINISH: 23:41:57,73 ===============

--- --- ---

--- --- ---

Code:

ATTFilter

.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_2011-08-26.01)
.
Microsoft Windows 7 Professional 
Boot Device: \Device\HarddiskVolume1
Install Date: 19.06.2010 22:38:01
System Uptime: 14.03.2012 23:35:21 (0 hours ago)
.
Motherboard: MICRO-STAR INTERNATIONAL CO.,LTD |  | P55-GD65 (MS-7583)  
Processor: Intel(R) Core(TM) i5 CPU         760  @ 2.80GHz | CPU 1 | 2801/133mhz
.
==== Disk Partitions =========================
.
C: is FIXED (NTFS) - 1397 GiB total, 593,843 GiB free.
D: is CDROM ()
E: is CDROM ()
F: is CDROM ()
G: is FIXED (NTFS) - 2794 GiB total, 1383,922 GiB free.
H: is CDROM ()
.
==== Disabled Device Manager Items =============
.
Class GUID: {4d36e972-e325-11ce-bfc1-08002be10318}
Description: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64
Device ID: ROOT\NET\0000
Manufacturer: Cisco Systems
Name: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64
PNP Device ID: ROOT\NET\0000
Service: vpnva
.
==== System Restore Points ===================
.
RP324: 13.03.2012 20:41:16 - Windows Update
RP325: 13.03.2012 23:41:56 - Windows Update
.
==== Installed Programs ======================
.
 Update for Microsoft Office 2007 (KB2508958)
AAVUpdateManager
Adobe AIR
Adobe Fireworks CS5
Adobe Flash Player 10 ActiveX
Adobe Flash Player 10 Plugin
Adobe Media Player
Adobe Reader 9.4.0 - Deutsch
Adobe Shockwave Player 11.5
Advanced PDF Password Recovery
Akamai NetSession Interface
Akamai NetSession Interface Service
Anno 1404
ANNO 1404 - Venedig
ANNO 1404 Venedig Entwickler-Tools
ANNO 2070
Apple Application Support
Apple Software Update
Assassin's Creed
Assassin's Creed Brotherhood
Avira Free Antivirus
Cisco AnyConnect Secure Mobility Client
Cisco AnyConnect Secure Mobility Client 
Click to Call with Skype
Command & Conquer™ 4 Tiberian Twilight
D3DX10
DAEMON Tools Lite
DAEMON Tools Toolbar
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition
Die Siedler 7
DownloadStudio
Dropbox
EXPERTool 7.11
Finanz-Rundschau
Flash Handout v1.0 Evaluation
GetFLV Pro 8.9.8.2
GmbHR
Google Chrome
Google Earth Plug-in
Google Update Helper
Hotspot Shield 2.24
Java Auto Updater
Java(TM) 6 Update 22
JDownloader
Junk Mail filter update
K-Lite Codec Pack 7.2.0 (Full)
klickTel Routenplaner Deutschland und Europa Sommer 2011
Magic ISO Maker v5.5 (build 0281)
Malwarebytes Anti-Malware Version 1.60.1.1000
MathType 6
Mesh Runtime
Messenger Companion
Microsoft .NET Framework 4 Multi-Targeting Pack
Microsoft Expression Blend 3 SDK
Microsoft Expression Blend 4
Microsoft Expression Blend SDK for .NET 4
Microsoft Expression Blend SDK for Silverlight 4
Microsoft Expression Design 4
Microsoft Expression Encoder 4
Microsoft Expression Encoder 4 Screen Capture Codec
Microsoft Expression Studio 4
Microsoft Expression Web 4
Microsoft Expression Web 4 Service Pack 2
Microsoft Games for Windows - LIVE Redistributable
Microsoft Games for Windows Marketplace
Microsoft Office 2007 Service Pack 3 (SP3)
Microsoft Office 2010 Service Pack 1 (SP1)
Microsoft Office Access MUI (German) 2010
Microsoft Office Excel MUI (German) 2010
Microsoft Office File Validation Add-In
Microsoft Office Groove MUI (German) 2010
Microsoft Office InfoPath MUI (German) 2010
Microsoft Office OneNote MUI (German) 2010
Microsoft Office Outlook Connector
Microsoft Office Outlook MUI (German) 2010
Microsoft Office PowerPoint MUI (German) 2010
Microsoft Office Professional Plus 2010
Microsoft Office Proof (English) 2007
Microsoft Office Proof (English) 2010
Microsoft Office Proof (French) 2007
Microsoft Office Proof (French) 2010
Microsoft Office Proof (German) 2007
Microsoft Office Proof (German) 2010
Microsoft Office Proof (Italian) 2007
Microsoft Office Proof (Italian) 2010
Microsoft Office Proofing (German) 2007
Microsoft Office Proofing (German) 2010
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
Microsoft Office Publisher MUI (German) 2010
Microsoft Office Shared MUI (German) 2007
Microsoft Office Shared MUI (German) 2010
Microsoft Office Visio 2007 Service Pack 3 (SP3)
Microsoft Office Visio MUI (German) 2007
Microsoft Office Visio Professional 2007
Microsoft Office Word MUI (German) 2010
Microsoft Silverlight
Microsoft Silverlight 3 SDK
Microsoft Silverlight 4 SDK
Microsoft SQL Server 2005 Compact Edition [ENU]
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219
Microsoft_VC80_ATL_x86
Microsoft_VC80_CRT_x86
Microsoft_VC80_MFC_x86
Microsoft_VC80_MFCLOC_x86
Microsoft_VC90_ATL_x86
Microsoft_VC90_CRT_x86
Microsoft_VC90_MFC_x86
MKVToolNix 5.3.0
Mozilla Firefox (3.6.27)
Mozilla Thunderbird 9.0.1 (x86 de)
Mp3tag v2.49a
MSVCRT
MSVCRT_amd64
Muse (code name)
NVIDIA PhysX
NVIDIA Stereoscopic 3D Driver
Opera 11.61
Orbit Downloader
PDF24 Creator 3.5.3
PDFTiger
PDFTigerDriver
QuickTime
Realtek Ethernet Controller Driver For Windows 7
Realtek High Definition Audio Driver
Replay Video Capture 5
Rosetta Stone Version 3
Security Update for Microsoft .NET Framework 4 Client Profile (KB2160841)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2446708)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2633870)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)
Security Update for Microsoft .NET Framework 4 Client Profile DEU Language Pack (KB2478663)
Security Update for Microsoft .NET Framework 4 Client Profile DEU Language Pack (KB2518870)
Security Update for Microsoft .NET Framework 4 Extended (KB2416472)
Security Update for Microsoft .NET Framework 4 Extended (KB2487367)
Security Update for Microsoft .NET Framework 4 Extended (KB2656351)
Security Update for Microsoft Expression Design 4 (KB2667730)
Security Update for Microsoft Office 2007 suites (KB2596785) 32-Bit Edition
Security Update for Microsoft Office 2010 (KB2553091)
Security Update for Microsoft Office 2010 (KB2553096)
Security Update for Microsoft Office 2010 (KB2589320) 32-Bit Edition
Security Update for Microsoft PowerPoint 2010 (KB2553185) 32-Bit Edition
Security Update for Microsoft SharePoint Workspace 2010 (KB2566445)
Security Update for Microsoft Visio Viewer 2010 (KB2597170) 32-Bit Edition
Skype™ 5.5
SpeedFan (remove only)
Spybot - Search & Destroy
Steam
t@x 2011
TeamViewer 6
TeamViewer 7
Total Immersion D'Fusion @Home Web Plug-In
TuneUp Utilities 2012
TuneUp Utilities Language Pack (de-DE)
Ubisoft Game Launcher
Update for 2007 Microsoft Office System (KB967642)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871)
Update for Microsoft .NET Framework 4 Client Profile (KB2473228)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217)
Update for Microsoft .NET Framework 4 Extended (KB2468871)
Update for Microsoft .NET Framework 4 Extended (KB2533523)
Update for Microsoft .NET Framework 4 Extended (KB2600217)
Update for Microsoft Excel 2010 (KB2553439) 32-Bit Edition
Update for Microsoft Office 2010 (KB2553065)
Update for Microsoft Office 2010 (KB2553092)
Update for Microsoft Office 2010 (KB2553181) 32-Bit Edition
Update for Microsoft Office 2010 (KB2553270) 32-Bit Edition
Update for Microsoft Office 2010 (KB2553310) 32-Bit Edition
Update for Microsoft Office 2010 (KB2553385) 32-Bit Edition
Update for Microsoft Office 2010 (KB2566458)
Update for Microsoft Office 2010 (KB2596964) 32-Bit Edition
Update for Microsoft Office 2010 (KB2597091) 32-Bit Edition
Update for Microsoft OneNote 2010 (KB2553290) 32-Bit Edition
Update for Microsoft Outlook 2010 (KB2553323) 32-Bit Edition
Update for Microsoft Outlook Social Connector (KB2583935)
VLC media player 1.1.4
VLC Streamer 1.36
Windows Live Communications Platform
Windows Live Essentials
Windows Live Fotogalerie
Windows Live Installer
Windows Live Mail
Windows Live Mesh
Windows Live Mesh ActiveX control for remote connections
Windows Live Messenger Companion Core
Windows Live Movie Maker
Windows Live Photo Common
Windows Live Photo Gallery
Windows Live PIMT Platform
Windows Live SOXE
Windows Live SOXE Definitions
Windows Live UX Platform
Windows Live UX Platform Language Pack
Windows Live Writer
Windows Live Writer Resources
WPF Toolkit February 2010 (Version 3.5.50211.1)
.
==== End Of File ===========================

Ich hoffe das bringt ein wenig Licht ins Dunkele....

Danke für die Hilfe!

Psychotic · 15.03.2012, 08:07

Schritt 1: aswMBR

Downloade dir bitte aswMBR.exe und speichere die Datei auf deinem Desktop.

Starte die aswMBR.exe - (aswMBR.exe Anleitung) Vista und Win7 User mit Rechtsklick "als Admininstartor starten"
Das Tool wird dich fragen, ob Du mit der aktuellen Virendefinition von AVAST! dein System scannen willst. Beantworte diese Frage bitte mit Ja. ( Sollte deine Firewall fragen, bitte den Zugriff auf das Internet zulassen ) Der Download der Definitionen kann je nach Verbindung eine Weile dauern.
Klicke auf Scan.
Warte bitte bis Scan finished successfully im DOS Fenster steht.
Drücke auf Save Log und speichere diese auf dem Desktop.

Poste mir die aswMBR.txt in deiner nächsten Antwort. Wichtig: Drücke keinesfalls einen der Fix Buttons ohne Anweisung Hinweis: Sollte der Scan Button ausgeblendet sein, schließe das Tool und starte es erneut. Sollte es erneut nicht klappen teile mir das bitte mit.

Schritt 2: Scan mit TDSS-Killer

Lese bitte folgende Anweisungen genau. Wir wollen hier noch nichts "fixen" sondern nur einen Scan Report sehen. Downloade dir bitte TDSSKiller.exe und speichere diese Datei auf dem Desktop

Starte die TDSSKiller.exe
Drücke Start Scan
Sollten infizierte Objekte gefunden werden, wähle keinesfalls Cure. Wähle Skip und speichere das Logfile. TDSSKiller wird eine Logfile auf deinem Systemlaufwerk speichern ( Meistens C:\ ) Als Beispiel: C:\TDSSKiller.<version_date_time>log.txt

Poste den Inhalt bitte hier in deinen Thread.

efkey1982 · 15.03.2012, 16:18

Hallp PsYcHoTiC,

habe beide Programme laufen lassen und folgende Logs erhalten:

Schritt 1: aswMBR

Code:

ATTFilter

aswMBR version 0.9.9.1665 Copyright(c) 2011 AVAST Software
Run date: 2012-03-15 16:14:06
-----------------------------
16:14:06.556    OS Version: Windows x64 6.1.7601 Service Pack 1
16:14:06.556    Number of processors: 4 586 0x1E05
16:14:06.556    ComputerName: FRED  UserName: 
16:14:09.068    Initialize success
16:14:17.522    Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP2T0L0-2
16:14:17.522    Disk 0 Vendor: SAMSUNG_HD154UI 1AG01118 Size: 1430799MB BusType: 3
16:14:17.538    Disk 0 MBR read successfully
16:14:17.538    Disk 0 MBR scan
16:14:17.538    Disk 0 Windows 7 default MBR code
16:14:17.616    Disk 0 Partition 1 80 (A) 07    HPFS/NTFS NTFS          100 MB offset 2048
16:14:17.616    Disk 0 Partition 2 00     07    HPFS/NTFS NTFS      1430697 MB offset 206848
16:14:17.647    Disk 0 scanning C:\Windows\system32\drivers
16:14:28.224    Service scanning
16:14:34.464    Service MSICDSetup D:\CDriver64.sys **LOCKED** 21
16:14:41.000    Modules scanning
16:14:41.000    Disk 0 trace - called modules:
16:14:41.031    ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys ataport.SYS pciide.sys PCIIDEX.SYS hal.dll atapi.sys 
16:14:41.031    1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa800622e060]
16:14:41.047    3 CLASSPNP.SYS[fffff8800165143f] -> nt!IofCallDriver -> [0xfffffa8005faa580]
16:14:41.047    5 ACPI.sys[fffff88000e0b7a1] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP2T0L0-2[0xfffffa8005fdb060]
16:14:41.047    Scan finished successfully
16:14:58.301    Disk 0 MBR has been saved successfully to "C:\Users\afred\Desktop\MBR.dat"
16:14:58.301    The log file has been saved successfully to "C:\Users\afred\Desktop\aswMBR.txt"

TDSS-Killer:

Code:

ATTFilter

16:15:17.0940 3584	TDSS rootkit removing tool 2.7.20.0 Mar  9 2012 17:10:43
16:15:18.0018 3584	============================================================
16:15:18.0018 3584	Current date / time: 2012/03/15 16:15:18.0018
16:15:18.0018 3584	SystemInfo:
16:15:18.0018 3584	
16:15:18.0018 3584	OS Version: 6.1.7601 ServicePack: 1.0
16:15:18.0018 3584	Product type: Workstation
16:15:18.0018 3584	ComputerName: FRED
16:15:18.0018 3584	UserName: afred
16:15:18.0018 3584	Windows directory: C:\Windows
16:15:18.0018 3584	System windows directory: C:\Windows
16:15:18.0018 3584	Running under WOW64
16:15:18.0018 3584	Processor architecture: Intel x64
16:15:18.0018 3584	Number of processors: 4
16:15:18.0018 3584	Page size: 0x1000
16:15:18.0018 3584	Boot type: Normal boot
16:15:18.0018 3584	============================================================
16:15:19.0157 3584	Drive \Device\Harddisk0\DR0 - Size: 0x15D50F66000 (1397.27 Gb), SectorSize: 0x200, Cylinders: 0x2C881, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
16:15:19.0157 3584	Drive \Device\Harddisk1\DR2 - Size: 0x2BAA1476000 (2794.52 Gb), SectorSize: 0x200, Cylinders: 0x59101, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W'
16:15:19.0188 3584	\Device\Harddisk0\DR0:
16:15:19.0188 3584	MBR used
16:15:19.0188 3584	\Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x32000
16:15:19.0188 3584	\Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x32800, BlocksNum 0xAEA54800
16:15:19.0188 3584	\Device\Harddisk1\DR2:
16:15:19.0188 3584	GPT used
16:15:19.0188 3584	\Device\Harddisk1\DR2\Partition0: GPT, TypeGUID: {E3C9E316-0B5C-4DB8-817D-F92DF00215AE}, UniqueGUID: {5B306EB3-0D2F-46D1-BD7B-36773BBD4677}, Name: Microsoft reserved partition, StartLBA 0x22, BlocksNum 0x40000
16:15:19.0188 3584	\Device\Harddisk1\DR2\Partition1: GPT, TypeGUID: {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}, UniqueGUID: {B12D7074-CEB6-462C-990D-64F61A513056}, Name: Basic data partition, StartLBA 0x40800, BlocksNum 0x5D4C9800
16:15:19.0235 3584	Initialize success
16:15:19.0235 3584	============================================================
16:15:22.0090 4232	============================================================
16:15:22.0090 4232	Scan started
16:15:22.0090 4232	Mode: Manual; 
16:15:22.0090 4232	============================================================
16:15:22.0963 4232	Scan interrupted by user!
16:15:22.0963 4232	Scan interrupted by user!
16:15:22.0963 4232	Scan interrupted by user!
16:15:22.0963 4232	============================================================
16:15:22.0963 4232	Scan finished
16:15:22.0963 4232	============================================================
16:15:22.0963 4220	Detected object count: 0
16:15:22.0963 4220	Actual detected object count: 0
16:15:32.0027 3880	============================================================
16:15:32.0027 3880	Scan started
16:15:32.0027 3880	Mode: Manual; 
16:15:32.0027 3880	============================================================
16:15:32.0557 3880	1394ohci        (a87d604aea360176311474c87a63bb88) C:\Windows\system32\drivers\1394ohci.sys
16:15:32.0573 3880	1394ohci - ok
16:15:32.0651 3880	ACPI            (d81d9e70b8a6dd14d42d7b4efa65d5f2) C:\Windows\system32\drivers\ACPI.sys
16:15:32.0651 3880	ACPI - ok
16:15:32.0667 3880	AcpiPmi         (99f8e788246d495ce3794d7e7821d2ca) C:\Windows\system32\drivers\acpipmi.sys
16:15:32.0667 3880	AcpiPmi - ok
16:15:32.0854 3880	acsock          (e42f90b27bdddd611fa7040afd256fda) C:\Windows\system32\DRIVERS\acsock64.sys
16:15:32.0854 3880	acsock - ok
16:15:32.0916 3880	adp94xx         (2f6b34b83843f0c5118b63ac634f5bf4) C:\Windows\system32\DRIVERS\adp94xx.sys
16:15:32.0916 3880	adp94xx - ok
16:15:32.0932 3880	adpahci         (597f78224ee9224ea1a13d6350ced962) C:\Windows\system32\DRIVERS\adpahci.sys
16:15:32.0947 3880	adpahci - ok
16:15:32.0963 3880	adpu320         (e109549c90f62fb570b9540c4b148e54) C:\Windows\system32\DRIVERS\adpu320.sys
16:15:32.0963 3880	adpu320 - ok
16:15:33.0010 3880	AFD             (1c7857b62de5994a75b054a9fd4c3825) C:\Windows\system32\drivers\afd.sys
16:15:33.0010 3880	AFD - ok
16:15:33.0025 3880	agp440          (608c14dba7299d8cb6ed035a68a15799) C:\Windows\system32\drivers\agp440.sys
16:15:33.0025 3880	agp440 - ok
16:15:33.0057 3880	aliide          (5812713a477a3ad7363c7438ca2ee038) C:\Windows\system32\drivers\aliide.sys
16:15:33.0057 3880	aliide - ok
16:15:33.0072 3880	amdide          (1ff8b4431c353ce385c875f194924c0c) C:\Windows\system32\drivers\amdide.sys
16:15:33.0072 3880	amdide - ok
16:15:33.0088 3880	AmdK8           (7024f087cff1833a806193ef9d22cda9) C:\Windows\system32\DRIVERS\amdk8.sys
16:15:33.0088 3880	AmdK8 - ok
16:15:33.0119 3880	AmdPPM          (1e56388b3fe0d031c44144eb8c4d6217) C:\Windows\system32\DRIVERS\amdppm.sys
16:15:33.0119 3880	AmdPPM - ok
16:15:33.0135 3880	amdsata         (d4121ae6d0c0e7e13aa221aa57ef2d49) C:\Windows\system32\drivers\amdsata.sys
16:15:33.0135 3880	amdsata - ok
16:15:33.0150 3880	amdsbs          (f67f933e79241ed32ff46a4f29b5120b) C:\Windows\system32\DRIVERS\amdsbs.sys
16:15:33.0150 3880	amdsbs - ok
16:15:33.0166 3880	amdxata         (540daf1cea6094886d72126fd7c33048) C:\Windows\system32\drivers\amdxata.sys
16:15:33.0166 3880	amdxata - ok
16:15:33.0244 3880	AppID           (89a69c3f2f319b43379399547526d952) C:\Windows\system32\drivers\appid.sys
16:15:33.0244 3880	AppID - ok
16:15:33.0306 3880	appliand        (1b1a533f3be2a540c8f58f14b2886a97) C:\Windows\system32\DRIVERS\appliand.sys
16:15:33.0306 3880	appliand - ok
16:15:33.0306 3880	appliandMP      (1b1a533f3be2a540c8f58f14b2886a97) C:\Windows\system32\DRIVERS\appliand.sys
16:15:33.0306 3880	appliandMP - ok
16:15:33.0337 3880	arc             (c484f8ceb1717c540242531db7845c4e) C:\Windows\system32\DRIVERS\arc.sys
16:15:33.0337 3880	arc - ok
16:15:33.0353 3880	arcsas          (019af6924aefe7839f61c830227fe79c) C:\Windows\system32\DRIVERS\arcsas.sys
16:15:33.0353 3880	arcsas - ok
16:15:33.0369 3880	AsyncMac        (769765ce2cc62867468cea93969b2242) C:\Windows\system32\DRIVERS\asyncmac.sys
16:15:33.0369 3880	AsyncMac - ok
16:15:33.0384 3880	atapi           (02062c0b390b7729edc9e69c680a6f3c) C:\Windows\system32\drivers\atapi.sys
16:15:33.0384 3880	atapi - ok
16:15:33.0415 3880	atksgt          (fc0e8778c000291caf60eb88c011e931) C:\Windows\system32\DRIVERS\atksgt.sys
16:15:33.0415 3880	atksgt - ok
16:15:33.0447 3880	avgntflt        (aa8f79a1bdfc03b3bc70c44ab00589b4) C:\Windows\system32\DRIVERS\avgntflt.sys
16:15:33.0447 3880	avgntflt - ok
16:15:33.0478 3880	avipbb          (852e3c0a60d368c487949e55ad52a47f) C:\Windows\system32\DRIVERS\avipbb.sys
16:15:33.0478 3880	avipbb - ok
16:15:33.0493 3880	avkmgr          (248db59fc86de44d2779f4c7fb1a567d) C:\Windows\system32\DRIVERS\avkmgr.sys
16:15:33.0493 3880	avkmgr - ok
16:15:33.0525 3880	b06bdrv         (3e5b191307609f7514148c6832bb0842) C:\Windows\system32\DRIVERS\bxvbda.sys
16:15:33.0540 3880	b06bdrv - ok
16:15:33.0571 3880	b57nd60a        (b5ace6968304a3900eeb1ebfd9622df2) C:\Windows\system32\DRIVERS\b57nd60a.sys
16:15:33.0571 3880	b57nd60a - ok
16:15:33.0603 3880	Beep            (16a47ce2decc9b099349a5f840654746) C:\Windows\system32\drivers\Beep.sys
16:15:33.0603 3880	Beep - ok
16:15:33.0618 3880	blbdrive        (61583ee3c3a17003c4acd0475646b4d3) C:\Windows\system32\DRIVERS\blbdrive.sys
16:15:33.0618 3880	blbdrive - ok
16:15:33.0649 3880	bowser          (6c02a83164f5cc0a262f4199f0871cf5) C:\Windows\system32\DRIVERS\bowser.sys
16:15:33.0649 3880	bowser - ok
16:15:33.0681 3880	BrFiltLo        (f09eee9edc320b5e1501f749fde686c8) C:\Windows\system32\DRIVERS\BrFiltLo.sys
16:15:33.0681 3880	BrFiltLo - ok
16:15:33.0696 3880	BrFiltUp        (b114d3098e9bdb8bea8b053685831be6) C:\Windows\system32\DRIVERS\BrFiltUp.sys
16:15:33.0696 3880	BrFiltUp - ok
16:15:33.0712 3880	Brserid         (43bea8d483bf1870f018e2d02e06a5bd) C:\Windows\System32\Drivers\Brserid.sys
16:15:33.0712 3880	Brserid - ok
16:15:33.0727 3880	BrSerWdm        (a6eca2151b08a09caceca35c07f05b42) C:\Windows\System32\Drivers\BrSerWdm.sys
16:15:33.0727 3880	BrSerWdm - ok
16:15:33.0743 3880	BrUsbMdm        (b79968002c277e869cf38bd22cd61524) C:\Windows\System32\Drivers\BrUsbMdm.sys
16:15:33.0743 3880	BrUsbMdm - ok
16:15:33.0774 3880	BrUsbSer        (a87528880231c54e75ea7a44943b38bf) C:\Windows\System32\Drivers\BrUsbSer.sys
16:15:33.0774 3880	BrUsbSer - ok
16:15:33.0790 3880	BTHMODEM        (9da669f11d1f894ab4eb69bf546a42e8) C:\Windows\system32\DRIVERS\bthmodem.sys
16:15:33.0790 3880	BTHMODEM - ok
16:15:33.0805 3880	cdfs            (b8bd2bb284668c84865658c77574381a) C:\Windows\system32\DRIVERS\cdfs.sys
16:15:33.0805 3880	cdfs - ok
16:15:33.0837 3880	cdrom           (f036ce71586e93d94dab220d7bdf4416) C:\Windows\system32\DRIVERS\cdrom.sys
16:15:33.0837 3880	cdrom - ok
16:15:33.0868 3880	circlass        (d7cd5c4e1b71fa62050515314cfb52cf) C:\Windows\system32\DRIVERS\circlass.sys
16:15:33.0868 3880	circlass - ok
16:15:33.0899 3880	CLFS            (fe1ec06f2253f691fe36217c592a0206) C:\Windows\system32\CLFS.sys
16:15:33.0899 3880	CLFS - ok
16:15:33.0930 3880	CmBatt          (0840155d0bddf1190f84a663c284bd33) C:\Windows\system32\DRIVERS\CmBatt.sys
16:15:33.0930 3880	CmBatt - ok
16:15:33.0961 3880	cmdide          (e19d3f095812725d88f9001985b94edd) C:\Windows\system32\drivers\cmdide.sys
16:15:33.0961 3880	cmdide - ok
16:15:34.0008 3880	CNG             (c4943b6c962e4b82197542447ad599f4) C:\Windows\system32\Drivers\cng.sys
16:15:34.0008 3880	CNG - ok
16:15:34.0039 3880	Compbatt        (102de219c3f61415f964c88e9085ad14) C:\Windows\system32\DRIVERS\compbatt.sys
16:15:34.0055 3880	Compbatt - ok
16:15:34.0086 3880	CompositeBus    (03edb043586cceba243d689bdda370a8) C:\Windows\system32\drivers\CompositeBus.sys
16:15:34.0086 3880	CompositeBus - ok
16:15:34.0102 3880	crcdisk         (1c827878a998c18847245fe1f34ee597) C:\Windows\system32\DRIVERS\crcdisk.sys
16:15:34.0102 3880	crcdisk - ok
16:15:34.0164 3880	CSC             (54da3dfd29ed9f1619b6f53f3ce55e49) C:\Windows\system32\drivers\csc.sys
16:15:34.0164 3880	CSC - ok
16:15:34.0195 3880	DfsC            (9bb2ef44eaa163b29c4a4587887a0fe4) C:\Windows\system32\Drivers\dfsc.sys
16:15:34.0195 3880	DfsC - ok
16:15:34.0211 3880	discache        (13096b05847ec78f0977f2c0f79e9ab3) C:\Windows\system32\drivers\discache.sys
16:15:34.0211 3880	discache - ok
16:15:34.0211 3880	Disk            (9819eee8b5ea3784ec4af3b137a5244c) C:\Windows\system32\DRIVERS\disk.sys
16:15:34.0211 3880	Disk - ok
16:15:34.0305 3880	dot4            (b42ed0320c6e41102fde0005154849bb) C:\Windows\system32\DRIVERS\Dot4.sys
16:15:34.0305 3880	dot4 - ok
16:15:34.0336 3880	Dot4Print       (e9f5969233c5d89f3c35e3a66a52a361) C:\Windows\system32\DRIVERS\Dot4Prt.sys
16:15:34.0336 3880	Dot4Print - ok
16:15:34.0367 3880	dot4usb         (fd05a02b0370bc3000f402e543ca5814) C:\Windows\system32\DRIVERS\dot4usb.sys
16:15:34.0367 3880	dot4usb - ok
16:15:34.0383 3880	drmkaud         (9b19f34400d24df84c858a421c205754) C:\Windows\system32\drivers\drmkaud.sys
16:15:34.0383 3880	drmkaud - ok
16:15:34.0414 3880	dtsoftbus01     (fb9bef3401ee5ecc2603311b9c64f44a) C:\Windows\system32\DRIVERS\dtsoftbus01.sys
16:15:34.0414 3880	dtsoftbus01 - ok
16:15:34.0445 3880	DXGKrnl         (f5bee30450e18e6b83a5012c100616fd) C:\Windows\System32\drivers\dxgkrnl.sys
16:15:34.0445 3880	DXGKrnl - ok
16:15:34.0523 3880	ebdrv           (dc5d737f51be844d8c82c695eb17372f) C:\Windows\system32\DRIVERS\evbda.sys
16:15:34.0554 3880	ebdrv - ok
16:15:34.0570 3880	elxstor         (0e5da5369a0fcaea12456dd852545184) C:\Windows\system32\DRIVERS\elxstor.sys
16:15:34.0570 3880	elxstor - ok
16:15:34.0601 3880	ErrDev          (34a3c54752046e79a126e15c51db409b) C:\Windows\system32\drivers\errdev.sys
16:15:34.0601 3880	ErrDev - ok
16:15:34.0617 3880	exfat           (a510c654ec00c1e9bdd91eeb3a59823b) C:\Windows\system32\drivers\exfat.sys
16:15:34.0617 3880	exfat - ok
16:15:34.0648 3880	fastfat         (0adc83218b66a6db380c330836f3e36d) C:\Windows\system32\drivers\fastfat.sys
16:15:34.0648 3880	fastfat - ok
16:15:34.0679 3880	fdc             (d765d19cd8ef61f650c384f62fac00ab) C:\Windows\system32\DRIVERS\fdc.sys
16:15:34.0679 3880	fdc - ok
16:15:34.0695 3880	FileInfo        (655661be46b5f5f3fd454e2c3095b930) C:\Windows\system32\drivers\fileinfo.sys
16:15:34.0710 3880	FileInfo - ok
16:15:34.0710 3880	Filetrace       (5f671ab5bc87eea04ec38a6cd5962a47) C:\Windows\system32\drivers\filetrace.sys
16:15:34.0710 3880	Filetrace - ok
16:15:34.0757 3880	flpydisk        (c172a0f53008eaeb8ea33fe10e177af5) C:\Windows\system32\DRIVERS\flpydisk.sys
16:15:34.0757 3880	flpydisk - ok
16:15:34.0788 3880	FltMgr          (da6b67270fd9db3697b20fce94950741) C:\Windows\system32\drivers\fltmgr.sys
16:15:34.0788 3880	FltMgr - ok
16:15:34.0819 3880	FsDepends       (d43703496149971890703b4b1b723eac) C:\Windows\system32\drivers\FsDepends.sys
16:15:34.0819 3880	FsDepends - ok
16:15:34.0866 3880	fssfltr         (6c06701bf1db05405804d7eb610991ce) C:\Windows\system32\DRIVERS\fssfltr.sys
16:15:34.0866 3880	fssfltr - ok
16:15:34.0897 3880	Fs_Rec          (e95ef8547de20cf0603557c0cf7a9462) C:\Windows\system32\drivers\Fs_Rec.sys
16:15:34.0897 3880	Fs_Rec - ok
16:15:34.0913 3880	fvevol          (1f7b25b858fa27015169fe95e54108ed) C:\Windows\system32\DRIVERS\fvevol.sys
16:15:34.0913 3880	fvevol - ok
16:15:34.0929 3880	gagp30kx        (8c778d335c9d272cfd3298ab02abe3b6) C:\Windows\system32\DRIVERS\gagp30kx.sys
16:15:34.0929 3880	gagp30kx - ok
16:15:34.0975 3880	GEARAspiWDM     (e403aacf8c7bb11375122d2464560311) C:\Windows\system32\DRIVERS\GEARAspiWDM.sys
16:15:34.0975 3880	GEARAspiWDM - ok
16:15:35.0007 3880	hcw85cir        (f2523ef6460fc42405b12248338ab2f0) C:\Windows\system32\drivers\hcw85cir.sys
16:15:35.0007 3880	hcw85cir - ok
16:15:35.0069 3880	HdAudAddService (975761c778e33cd22498059b91e7373a) C:\Windows\system32\drivers\HdAudio.sys
16:15:35.0069 3880	HdAudAddService - ok
16:15:35.0085 3880	HDAudBus        (97bfed39b6b79eb12cddbfeed51f56bb) C:\Windows\system32\drivers\HDAudBus.sys
16:15:35.0085 3880	HDAudBus - ok
16:15:35.0116 3880	HidBatt         (78e86380454a7b10a5eb255dc44a355f) C:\Windows\system32\DRIVERS\HidBatt.sys
16:15:35.0116 3880	HidBatt - ok
16:15:35.0131 3880	HidBth          (7fd2a313f7afe5c4dab14798c48dd104) C:\Windows\system32\DRIVERS\hidbth.sys
16:15:35.0131 3880	HidBth - ok
16:15:35.0163 3880	HidIr           (0a77d29f311b88cfae3b13f9c1a73825) C:\Windows\system32\DRIVERS\hidir.sys
16:15:35.0163 3880	HidIr - ok
16:15:35.0194 3880	HidUsb          (9592090a7e2b61cd582b612b6df70536) C:\Windows\system32\DRIVERS\hidusb.sys
16:15:35.0194 3880	HidUsb - ok
16:15:35.0209 3880	HpSAMD          (39d2abcd392f3d8a6dce7b60ae7b8efc) C:\Windows\system32\drivers\HpSAMD.sys
16:15:35.0209 3880	HpSAMD - ok
16:15:35.0256 3880	HssDrv          (a60c877e1cd3aa2e4e5ccd8af305c0f1) C:\Windows\system32\DRIVERS\HssDrv.sys
16:15:35.0256 3880	HssDrv - ok
16:15:35.0319 3880	HTTP            (0ea7de1acb728dd5a369fd742d6eee28) C:\Windows\system32\drivers\HTTP.sys
16:15:35.0319 3880	HTTP - ok
16:15:35.0350 3880	hwpolicy        (a5462bd6884960c9dc85ed49d34ff392) C:\Windows\system32\drivers\hwpolicy.sys
16:15:35.0350 3880	hwpolicy - ok
16:15:35.0365 3880	i8042prt        (fa55c73d4affa7ee23ac4be53b4592d3) C:\Windows\system32\drivers\i8042prt.sys
16:15:35.0365 3880	i8042prt - ok
16:15:35.0412 3880	iaStorV         (aaaf44db3bd0b9d1fb6969b23ecc8366) C:\Windows\system32\drivers\iaStorV.sys
16:15:35.0412 3880	iaStorV - ok
16:15:35.0443 3880	iirsp           (5c18831c61933628f5bb0ea2675b9d21) C:\Windows\system32\DRIVERS\iirsp.sys
16:15:35.0443 3880	iirsp - ok
16:15:35.0506 3880	IntcAzAudAddService (c1e2d46eb6e533dd087c684d33411f4a) C:\Windows\system32\drivers\RTKVHD64.sys
16:15:35.0521 3880	IntcAzAudAddService - ok
16:15:35.0537 3880	intelide        (f00f20e70c6ec3aa366910083a0518aa) C:\Windows\system32\drivers\intelide.sys
16:15:35.0537 3880	intelide - ok
16:15:35.0568 3880	intelppm        (ada036632c664caa754079041cf1f8c1) C:\Windows\system32\DRIVERS\intelppm.sys
16:15:35.0568 3880	intelppm - ok
16:15:35.0615 3880	IpFilterDriver  (c9f0e1bd74365a8771590e9008d22ab6) C:\Windows\system32\DRIVERS\ipfltdrv.sys
16:15:35.0631 3880	IpFilterDriver - ok
16:15:35.0662 3880	IPMIDRV         (0fc1aea580957aa8817b8f305d18ca3a) C:\Windows\system32\drivers\IPMIDrv.sys
16:15:35.0662 3880	IPMIDRV - ok
16:15:35.0677 3880	IPNAT           (af9b39a7e7b6caa203b3862582e9f2d0) C:\Windows\system32\drivers\ipnat.sys
16:15:35.0677 3880	IPNAT - ok
16:15:35.0724 3880	IRENUM          (3abf5e7213eb28966d55d58b515d5ce9) C:\Windows\system32\drivers\irenum.sys
16:15:35.0724 3880	IRENUM - ok
16:15:35.0740 3880	isapnp          (2f7b28dc3e1183e5eb418df55c204f38) C:\Windows\system32\drivers\isapnp.sys
16:15:35.0740 3880	isapnp - ok
16:15:35.0755 3880	iScsiPrt        (d931d7309deb2317035b07c9f9e6b0bd) C:\Windows\system32\drivers\msiscsi.sys
16:15:35.0755 3880	iScsiPrt - ok
16:15:35.0802 3880	jakndis         (a0436b027fac16b6b1d4933783207c51) C:\Windows\system32\DRIVERS\jakndis.sys
16:15:35.0802 3880	jakndis - ok
16:15:35.0833 3880	jakndisMP       (a0436b027fac16b6b1d4933783207c51) C:\Windows\system32\DRIVERS\jakndis.sys
16:15:35.0833 3880	jakndisMP - ok
16:15:35.0849 3880	kbdclass        (bc02336f1cba7dcc7d1213bb588a68a5) C:\Windows\system32\drivers\kbdclass.sys
16:15:35.0849 3880	kbdclass - ok
16:15:35.0880 3880	kbdhid          (0705eff5b42a9db58548eec3b26bb484) C:\Windows\system32\drivers\kbdhid.sys
16:15:35.0880 3880	kbdhid - ok
16:15:35.0927 3880	KSecDD          (da1e991a61cfdd755a589e206b97644b) C:\Windows\system32\Drivers\ksecdd.sys
16:15:35.0927 3880	KSecDD - ok
16:15:35.0958 3880	KSecPkg         (7e33198d956943a4f11a5474c1e9106f) C:\Windows\system32\Drivers\ksecpkg.sys
16:15:35.0958 3880	KSecPkg - ok
16:15:35.0989 3880	ksthunk         (6869281e78cb31a43e969f06b57347c4) C:\Windows\system32\drivers\ksthunk.sys
16:15:35.0989 3880	ksthunk - ok
16:15:36.0052 3880	lirsgt          (156ab2e56dc3ca0b582e3362e07cded7) C:\Windows\system32\DRIVERS\lirsgt.sys
16:15:36.0052 3880	lirsgt - ok
16:15:36.0067 3880	lltdio          (1538831cf8ad2979a04c423779465827) C:\Windows\system32\DRIVERS\lltdio.sys
16:15:36.0067 3880	lltdio - ok
16:15:36.0083 3880	LSI_FC          (1a93e54eb0ece102495a51266dcdb6a6) C:\Windows\system32\DRIVERS\lsi_fc.sys
16:15:36.0083 3880	LSI_FC - ok
16:15:36.0130 3880	LSI_SAS         (1047184a9fdc8bdbff857175875ee810) C:\Windows\system32\DRIVERS\lsi_sas.sys
16:15:36.0130 3880	LSI_SAS - ok
16:15:36.0177 3880	LSI_SAS2        (30f5c0de1ee8b5bc9306c1f0e4a75f93) C:\Windows\system32\DRIVERS\lsi_sas2.sys
16:15:36.0177 3880	LSI_SAS2 - ok
16:15:36.0192 3880	LSI_SCSI        (0504eacaff0d3c8aed161c4b0d369d4a) C:\Windows\system32\DRIVERS\lsi_scsi.sys
16:15:36.0192 3880	LSI_SCSI - ok
16:15:36.0208 3880	luafv           (43d0f98e1d56ccddb0d5254cff7b356e) C:\Windows\system32\drivers\luafv.sys
16:15:36.0208 3880	luafv - ok
16:15:36.0255 3880	MBAMProtector   (79da94b35371b9e7104460c7693dcb2c) C:\Windows\system32\drivers\mbam.sys
16:15:36.0255 3880	MBAMProtector - ok
16:15:36.0286 3880	MBfilt          (8ff2d95cba49b405c5de27039ff0bf35) C:\Windows\system32\drivers\MBfilt64.sys
16:15:36.0286 3880	MBfilt - ok
16:15:36.0301 3880	megasas         (a55805f747c6edb6a9080d7c633bd0f4) C:\Windows\system32\DRIVERS\megasas.sys
16:15:36.0301 3880	megasas - ok
16:15:36.0333 3880	MegaSR          (baf74ce0072480c3b6b7c13b2a94d6b3) C:\Windows\system32\DRIVERS\MegaSR.sys
16:15:36.0333 3880	MegaSR - ok
16:15:36.0364 3880	Modem           (800ba92f7010378b09f9ed9270f07137) C:\Windows\system32\drivers\modem.sys
16:15:36.0364 3880	Modem - ok
16:15:36.0364 3880	monitor         (b03d591dc7da45ece20b3b467e6aadaa) C:\Windows\system32\DRIVERS\monitor.sys
16:15:36.0364 3880	monitor - ok
16:15:36.0411 3880	mouclass        (7d27ea49f3c1f687d357e77a470aea99) C:\Windows\system32\DRIVERS\mouclass.sys
16:15:36.0411 3880	mouclass - ok
16:15:36.0426 3880	mouhid          (d3bf052c40b0c4166d9fd86a4288c1e6) C:\Windows\system32\DRIVERS\mouhid.sys
16:15:36.0426 3880	mouhid - ok
16:15:36.0442 3880	mountmgr        (32e7a3d591d671a6df2db515a5cbe0fa) C:\Windows\system32\drivers\mountmgr.sys
16:15:36.0442 3880	mountmgr - ok
16:15:36.0473 3880	mpio            (a44b420d30bd56e145d6a2bc8768ec58) C:\Windows\system32\drivers\mpio.sys
16:15:36.0473 3880	mpio - ok
16:15:36.0504 3880	mpsdrv          (6c38c9e45ae0ea2fa5e551f2ed5e978f) C:\Windows\system32\drivers\mpsdrv.sys
16:15:36.0504 3880	mpsdrv - ok
16:15:36.0535 3880	MRxDAV          (dc722758b8261e1abafd31a3c0a66380) C:\Windows\system32\drivers\mrxdav.sys
16:15:36.0535 3880	MRxDAV - ok
16:15:36.0567 3880	mrxsmb          (a5d9106a73dc88564c825d317cac68ac) C:\Windows\system32\DRIVERS\mrxsmb.sys
16:15:36.0567 3880	mrxsmb - ok
16:15:36.0598 3880	mrxsmb10        (d711b3c1d5f42c0c2415687be09fc163) C:\Windows\system32\DRIVERS\mrxsmb10.sys
16:15:36.0598 3880	mrxsmb10 - ok
16:15:36.0613 3880	mrxsmb20        (9423e9d355c8d303e76b8cfbd8a5c30c) C:\Windows\system32\DRIVERS\mrxsmb20.sys
16:15:36.0613 3880	mrxsmb20 - ok
16:15:36.0629 3880	msahci          (c25f0bafa182cbca2dd3c851c2e75796) C:\Windows\system32\drivers\msahci.sys
16:15:36.0629 3880	msahci - ok
16:15:36.0660 3880	msdsm           (db801a638d011b9633829eb6f663c900) C:\Windows\system32\drivers\msdsm.sys
16:15:36.0660 3880	msdsm - ok
16:15:36.0676 3880	Msfs            (aa3fb40e17ce1388fa1bedab50ea8f96) C:\Windows\system32\drivers\Msfs.sys
16:15:36.0676 3880	Msfs - ok
16:15:36.0691 3880	mshidkmdf       (f9d215a46a8b9753f61767fa72a20326) C:\Windows\System32\drivers\mshidkmdf.sys
16:15:36.0691 3880	mshidkmdf - ok
16:15:36.0691 3880	MSICDSetup - ok
16:15:36.0707 3880	msisadrv        (d916874bbd4f8b07bfb7fa9b3ccae29d) C:\Windows\system32\drivers\msisadrv.sys
16:15:36.0707 3880	msisadrv - ok
16:15:36.0738 3880	MSKSSRV         (49ccf2c4fea34ffad8b1b59d49439366) C:\Windows\system32\drivers\MSKSSRV.sys
16:15:36.0738 3880	MSKSSRV - ok
16:15:36.0754 3880	MSPCLOCK        (bdd71ace35a232104ddd349ee70e1ab3) C:\Windows\system32\drivers\MSPCLOCK.sys
16:15:36.0754 3880	MSPCLOCK - ok
16:15:36.0769 3880	MSPQM           (4ed981241db27c3383d72092b618a1d0) C:\Windows\system32\drivers\MSPQM.sys
16:15:36.0769 3880	MSPQM - ok
16:15:36.0847 3880	MsRPC           (759a9eeb0fa9ed79da1fb7d4ef78866d) C:\Windows\system32\drivers\MsRPC.sys
16:15:36.0847 3880	MsRPC - ok
16:15:36.0879 3880	mssmbios        (0eed230e37515a0eaee3c2e1bc97b288) C:\Windows\system32\drivers\mssmbios.sys
16:15:36.0879 3880	mssmbios - ok
16:15:36.0894 3880	MSTEE           (2e66f9ecb30b4221a318c92ac2250779) C:\Windows\system32\drivers\MSTEE.sys
16:15:36.0894 3880	MSTEE - ok
16:15:36.0910 3880	MTConfig        (7ea404308934e675bffde8edf0757bcd) C:\Windows\system32\DRIVERS\MTConfig.sys
16:15:36.0910 3880	MTConfig - ok
16:15:36.0910 3880	Mup             (f9a18612fd3526fe473c1bda678d61c8) C:\Windows\system32\Drivers\mup.sys
16:15:36.0910 3880	Mup - ok
16:15:36.0941 3880	NativeWifiP     (1ea3749c4114db3e3161156ffffa6b33) C:\Windows\system32\DRIVERS\nwifi.sys
16:15:36.0957 3880	NativeWifiP - ok
16:15:37.0019 3880	NDIS            (79b47fd40d9a817e932f9d26fac0a81c) C:\Windows\system32\drivers\ndis.sys
16:15:37.0019 3880	NDIS - ok
16:15:37.0050 3880	NdisCap         (9f9a1f53aad7da4d6fef5bb73ab811ac) C:\Windows\system32\DRIVERS\ndiscap.sys
16:15:37.0050 3880	NdisCap - ok
16:15:37.0081 3880	NdisTapi        (30639c932d9fef22b31268fe25a1b6e5) C:\Windows\system32\DRIVERS\ndistapi.sys
16:15:37.0081 3880	NdisTapi - ok
16:15:37.0113 3880	Ndisuio         (136185f9fb2cc61e573e676aa5402356) C:\Windows\system32\DRIVERS\ndisuio.sys
16:15:37.0113 3880	Ndisuio - ok
16:15:37.0144 3880	NdisWan         (53f7305169863f0a2bddc49e116c2e11) C:\Windows\system32\DRIVERS\ndiswan.sys
16:15:37.0144 3880	NdisWan - ok
16:15:37.0175 3880	NDProxy         (015c0d8e0e0421b4cfd48cffe2825879) C:\Windows\system32\drivers\NDProxy.sys
16:15:37.0175 3880	NDProxy - ok
16:15:37.0191 3880	NetBIOS         (86743d9f5d2b1048062b14b1d84501c4) C:\Windows\system32\DRIVERS\netbios.sys
16:15:37.0191 3880	NetBIOS - ok
16:15:37.0222 3880	NetBT           (09594d1089c523423b32a4229263f068) C:\Windows\system32\DRIVERS\netbt.sys
16:15:37.0222 3880	NetBT - ok
16:15:37.0253 3880	nfrd960         (77889813be4d166cdab78ddba990da92) C:\Windows\system32\DRIVERS\nfrd960.sys
16:15:37.0253 3880	nfrd960 - ok
16:15:37.0269 3880	Npfs            (1e4c4ab5c9b8dd13179bbdc75a2a01f7) C:\Windows\system32\drivers\Npfs.sys
16:15:37.0269 3880	Npfs - ok
16:15:37.0284 3880	nsiproxy        (e7f5ae18af4168178a642a9247c63001) C:\Windows\system32\drivers\nsiproxy.sys
16:15:37.0284 3880	nsiproxy - ok
16:15:37.0331 3880	Ntfs            (a2f74975097f52a00745f9637451fdd8) C:\Windows\system32\drivers\Ntfs.sys
16:15:37.0347 3880	Ntfs - ok
16:15:37.0362 3880	Null            (9899284589f75fa8724ff3d16aed75c1) C:\Windows\system32\drivers\Null.sys
16:15:37.0362 3880	Null - ok
16:15:37.0393 3880	NVHDA           (e20abd5b229760158f753ca90b97e090) C:\Windows\system32\drivers\nvhda64v.sys
16:15:37.0393 3880	NVHDA - ok
16:15:37.0596 3880	nvlddmkm        (e55cab397f77d5208db18a78b1b7c0d5) C:\Windows\system32\DRIVERS\nvlddmkm.sys
16:15:37.0643 3880	nvlddmkm - ok
16:15:37.0690 3880	nvraid          (0a92cb65770442ed0dc44834632f66ad) C:\Windows\system32\drivers\nvraid.sys
16:15:37.0690 3880	nvraid - ok
16:15:37.0721 3880	nvstor          (dab0e87525c10052bf65f06152f37e4a) C:\Windows\system32\drivers\nvstor.sys
16:15:37.0721 3880	nvstor - ok
16:15:37.0752 3880	nv_agp          (270d7cd42d6e3979f6dd0146650f0e05) C:\Windows\system32\drivers\nv_agp.sys
16:15:37.0752 3880	nv_agp - ok
16:15:37.0799 3880	ohci1394        (3589478e4b22ce21b41fa1bfc0b8b8a0) C:\Windows\system32\drivers\ohci1394.sys
16:15:37.0799 3880	ohci1394 - ok
16:15:37.0893 3880	Parport         (0086431c29c35be1dbc43f52cc273887) C:\Windows\system32\DRIVERS\parport.sys
16:15:37.0893 3880	Parport - ok
16:15:37.0971 3880	partmgr         (871eadac56b0a4c6512bbe32753ccf79) C:\Windows\system32\drivers\partmgr.sys
16:15:37.0971 3880	partmgr - ok
16:15:37.0971 3880	pci             (94575c0571d1462a0f70bde6bd6ee6b3) C:\Windows\system32\drivers\pci.sys
16:15:37.0971 3880	pci - ok
16:15:37.0986 3880	pciide          (b5b8b5ef2e5cb34df8dcf8831e3534fa) C:\Windows\system32\drivers\pciide.sys
16:15:37.0986 3880	pciide - ok
16:15:38.0002 3880	pcmcia          (b2e81d4e87ce48589f98cb8c05b01f2f) C:\Windows\system32\DRIVERS\pcmcia.sys
16:15:38.0017 3880	pcmcia - ok
16:15:38.0017 3880	pcw             (d6b9c2e1a11a3a4b26a182ffef18f603) C:\Windows\system32\drivers\pcw.sys
16:15:38.0017 3880	pcw - ok
16:15:38.0049 3880	PEAUTH          (68769c3356b3be5d1c732c97b9a80d6e) C:\Windows\system32\drivers\peauth.sys
16:15:38.0049 3880	PEAUTH - ok
16:15:38.0127 3880	Point64         (4f0878fd62d5f7444c5f1c4c66d9d293) C:\Windows\system32\DRIVERS\point64.sys
16:15:38.0127 3880	Point64 - ok
16:15:38.0173 3880	PptpMiniport    (f92a2c41117a11a00be01ca01a7fcde9) C:\Windows\system32\DRIVERS\raspptp.sys
16:15:38.0173 3880	PptpMiniport - ok
16:15:38.0205 3880	Processor       (0d922e23c041efb1c3fac2a6f943c9bf) C:\Windows\system32\DRIVERS\processr.sys
16:15:38.0205 3880	Processor - ok
16:15:38.0236 3880	Psched          (0557cf5a2556bd58e26384169d72438d) C:\Windows\system32\DRIVERS\pacer.sys
16:15:38.0236 3880	Psched - ok
16:15:38.0267 3880	ql2300          (a53a15a11ebfd21077463ee2c7afeef0) C:\Windows\system32\DRIVERS\ql2300.sys
16:15:38.0283 3880	ql2300 - ok
16:15:38.0314 3880	ql40xx          (4f6d12b51de1aaeff7dc58c4d75423c8) C:\Windows\system32\DRIVERS\ql40xx.sys
16:15:38.0314 3880	ql40xx - ok
16:15:38.0329 3880	QWAVEdrv        (76707bb36430888d9ce9d705398adb6c) C:\Windows\system32\drivers\qwavedrv.sys
16:15:38.0345 3880	QWAVEdrv - ok
16:15:38.0361 3880	RasAcd          (5a0da8ad5762fa2d91678a8a01311704) C:\Windows\system32\DRIVERS\rasacd.sys
16:15:38.0361 3880	RasAcd - ok
16:15:38.0392 3880	RasAgileVpn     (7ecff9b22276b73f43a99a15a6094e90) C:\Windows\system32\DRIVERS\AgileVpn.sys
16:15:38.0392 3880	RasAgileVpn - ok
16:15:38.0407 3880	Rasl2tp         (471815800ae33e6f1c32fb1b97c490ca) C:\Windows\system32\DRIVERS\rasl2tp.sys
16:15:38.0407 3880	Rasl2tp - ok
16:15:38.0423 3880	RasPppoe        (855c9b1cd4756c5e9a2aa58a15f58c25) C:\Windows\system32\DRIVERS\raspppoe.sys
16:15:38.0423 3880	RasPppoe - ok
16:15:38.0439 3880	RasSstp         (e8b1e447b008d07ff47d016c2b0eeecb) C:\Windows\system32\DRIVERS\rassstp.sys
16:15:38.0439 3880	RasSstp - ok
16:15:38.0470 3880	rdbss           (77f665941019a1594d887a74f301fa2f) C:\Windows\system32\DRIVERS\rdbss.sys
16:15:38.0470 3880	rdbss - ok
16:15:38.0470 3880	rdpbus          (302da2a0539f2cf54d7c6cc30c1f2d8d) C:\Windows\system32\DRIVERS\rdpbus.sys
16:15:38.0470 3880	rdpbus - ok
16:15:38.0501 3880	RDPCDD          (cea6cc257fc9b7715f1c2b4849286d24) C:\Windows\system32\DRIVERS\RDPCDD.sys
16:15:38.0501 3880	RDPCDD - ok
16:15:38.0517 3880	RDPDR           (1b6163c503398b23ff8b939c67747683) C:\Windows\system32\drivers\rdpdr.sys
16:15:38.0517 3880	RDPDR - ok
16:15:38.0532 3880	RDPENCDD        (bb5971a4f00659529a5c44831af22365) C:\Windows\system32\drivers\rdpencdd.sys
16:15:38.0532 3880	RDPENCDD - ok
16:15:38.0548 3880	RDPREFMP        (216f3fa57533d98e1f74ded70113177a) C:\Windows\system32\drivers\rdprefmp.sys
16:15:38.0548 3880	RDPREFMP - ok
16:15:38.0579 3880	RDPWD           (6d76e6433574b058adcb0c50df834492) C:\Windows\system32\drivers\RDPWD.sys
16:15:38.0579 3880	RDPWD - ok
16:15:38.0626 3880	rdyboost        (34ed295fa0121c241bfef24764fc4520) C:\Windows\system32\drivers\rdyboost.sys
16:15:38.0626 3880	rdyboost - ok
16:15:38.0657 3880	RimUsb          (7b04c9843921ab1f695fb395422c5360) C:\Windows\system32\Drivers\RimUsb_AMD64.sys
16:15:38.0657 3880	RimUsb - ok
16:15:38.0688 3880	rspndr          (ddc86e4f8e7456261e637e3552e804ff) C:\Windows\system32\DRIVERS\rspndr.sys
16:15:38.0688 3880	rspndr - ok
16:15:38.0751 3880	RTL8167         (4b42bc58294e83a6a92ec8b88c14c4a3) C:\Windows\system32\DRIVERS\Rt64win7.sys
16:15:38.0751 3880	RTL8167 - ok
16:15:38.0782 3880	s3cap           (e60c0a09f997826c7627b244195ab581) C:\Windows\system32\drivers\vms3cap.sys
16:15:38.0782 3880	s3cap - ok
16:15:38.0813 3880	sbp2port        (ac03af3329579fffb455aa2daabbe22b) C:\Windows\system32\drivers\sbp2port.sys
16:15:38.0813 3880	sbp2port - ok
16:15:38.0860 3880	scfilter        (253f38d0d7074c02ff8deb9836c97d2b) C:\Windows\system32\DRIVERS\scfilter.sys
16:15:38.0860 3880	scfilter - ok
16:15:38.0891 3880	secdrv          (3ea8a16169c26afbeb544e0e48421186) C:\Windows\system32\drivers\secdrv.sys
16:15:38.0891 3880	secdrv - ok
16:15:38.0891 3880	Serenum         (cb624c0035412af0debec78c41f5ca1b) C:\Windows\system32\DRIVERS\serenum.sys
16:15:38.0891 3880	Serenum - ok
16:15:38.0922 3880	Serial          (c1d8e28b2c2adfaec4ba89e9fda69bd6) C:\Windows\system32\DRIVERS\serial.sys
16:15:38.0922 3880	Serial - ok
16:15:38.0969 3880	sermouse        (1c545a7d0691cc4a027396535691c3e3) C:\Windows\system32\DRIVERS\sermouse.sys
16:15:38.0969 3880	sermouse - ok
16:15:39.0000 3880	sffdisk         (a554811bcd09279536440c964ae35bbf) C:\Windows\system32\drivers\sffdisk.sys
16:15:39.0000 3880	sffdisk - ok
16:15:39.0016 3880	sffp_mmc        (ff414f0baefeba59bc6c04b3db0b87bf) C:\Windows\system32\drivers\sffp_mmc.sys
16:15:39.0016 3880	sffp_mmc - ok
16:15:39.0047 3880	sffp_sd         (dd85b78243a19b59f0637dcf284da63c) C:\Windows\system32\drivers\sffp_sd.sys
16:15:39.0047 3880	sffp_sd - ok
16:15:39.0047 3880	sfloppy         (a9d601643a1647211a1ee2ec4e433ff4) C:\Windows\system32\DRIVERS\sfloppy.sys
16:15:39.0047 3880	sfloppy - ok
16:15:39.0078 3880	SiSRaid2        (843caf1e5fde1ffd5ff768f23a51e2e1) C:\Windows\system32\DRIVERS\SiSRaid2.sys
16:15:39.0078 3880	SiSRaid2 - ok
16:15:39.0094 3880	SiSRaid4        (6a6c106d42e9ffff8b9fcb4f754f6da4) C:\Windows\system32\DRIVERS\sisraid4.sys
16:15:39.0094 3880	SiSRaid4 - ok
16:15:39.0125 3880	Smb             (548260a7b8654e024dc30bf8a7c5baa4) C:\Windows\system32\DRIVERS\smb.sys
16:15:39.0125 3880	Smb - ok
16:15:39.0141 3880	speedfan - ok
16:15:39.0156 3880	spldr           (b9e31e5cacdfe584f34f730a677803f9) C:\Windows\system32\drivers\spldr.sys
16:15:39.0156 3880	spldr - ok
16:15:39.0234 3880	sptd            (602884696850c86434530790b110e8eb) C:\Windows\System32\Drivers\sptd.sys
16:15:39.0234 3880	sptd - ok
16:15:39.0265 3880	srv             (441fba48bff01fdb9d5969ebc1838f0b) C:\Windows\system32\DRIVERS\srv.sys
16:15:39.0265 3880	srv - ok
16:15:39.0297 3880	srv2            (b4adebbf5e3677cce9651e0f01f7cc28) C:\Windows\system32\DRIVERS\srv2.sys
16:15:39.0297 3880	srv2 - ok
16:15:39.0297 3880	srvnet          (27e461f0be5bff5fc737328f749538c3) C:\Windows\system32\DRIVERS\srvnet.sys
16:15:39.0297 3880	srvnet - ok
16:15:39.0359 3880	stexstor        (f3817967ed533d08327dc73bc4d5542a) C:\Windows\system32\DRIVERS\stexstor.sys
16:15:39.0359 3880	stexstor - ok
16:15:39.0375 3880	storflt         (7785dc213270d2fc066538daf94087e7) C:\Windows\system32\drivers\vmstorfl.sys
16:15:39.0375 3880	storflt - ok
16:15:39.0406 3880	storvsc         (d34e4943d5ac096c8edeebfd80d76e23) C:\Windows\system32\drivers\storvsc.sys
16:15:39.0406 3880	storvsc - ok
16:15:39.0421 3880	swenum          (d01ec09b6711a5f8e7e6564a4d0fbc90) C:\Windows\system32\drivers\swenum.sys
16:15:39.0421 3880	swenum - ok
16:15:39.0546 3880	taphss          (f33fdc72298df4bf9813a55d21f4eb31) C:\Windows\system32\DRIVERS\taphss.sys
16:15:39.0546 3880	taphss - ok
16:15:39.0562 3880	TBPanel - ok
16:15:39.0624 3880	Tcpip           (fc62769e7bff2896035aeed399108162) C:\Windows\system32\drivers\tcpip.sys
16:15:39.0640 3880	Tcpip - ok
16:15:39.0671 3880	TCPIP6          (fc62769e7bff2896035aeed399108162) C:\Windows\system32\DRIVERS\tcpip.sys
16:15:39.0671 3880	TCPIP6 - ok
16:15:39.0718 3880	tcpipreg        (df687e3d8836bfb04fcc0615bf15a519) C:\Windows\system32\drivers\tcpipreg.sys
16:15:39.0718 3880	tcpipreg - ok
16:15:39.0733 3880	TDPIPE          (3371d21011695b16333a3934340c4e7c) C:\Windows\system32\drivers\tdpipe.sys
16:15:39.0733 3880	TDPIPE - ok
16:15:39.0796 3880	TDTCP           (51c5eceb1cdee2468a1748be550cfbc8) C:\Windows\system32\drivers\tdtcp.sys
16:15:39.0796 3880	TDTCP - ok
16:15:39.0843 3880	tdx             (ddad5a7ab24d8b65f8d724f5c20fd806) C:\Windows\system32\DRIVERS\tdx.sys
16:15:39.0843 3880	tdx - ok
16:15:39.0874 3880	TermDD          (561e7e1f06895d78de991e01dd0fb6e5) C:\Windows\system32\drivers\termdd.sys
16:15:39.0874 3880	TermDD - ok
16:15:39.0921 3880	tssecsrv        (ce18b2cdfc837c99e5fae9ca6cba5d30) C:\Windows\system32\DRIVERS\tssecsrv.sys
16:15:39.0921 3880	tssecsrv - ok
16:15:39.0952 3880	TsUsbFlt        (d11c783e3ef9a3c52c0ebe83cc5000e9) C:\Windows\system32\drivers\tsusbflt.sys
16:15:39.0952 3880	TsUsbFlt - ok
16:15:40.0045 3880	TuneUpUtilitiesDrv (dcc94c51d27c7ec0dadeca8f64c94fcf) C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesDriver64.sys
16:15:40.0045 3880	TuneUpUtilitiesDrv - ok
16:15:40.0077 3880	tunnel          (3566a8daafa27af944f5d705eaa64894) C:\Windows\system32\DRIVERS\tunnel.sys
16:15:40.0077 3880	tunnel - ok
16:15:40.0123 3880	uagp35          (b4dd609bd7e282bfc683cec7eaaaad67) C:\Windows\system32\DRIVERS\uagp35.sys
16:15:40.0123 3880	uagp35 - ok
16:15:40.0186 3880	udfs            (ff4232a1a64012baa1fd97c7b67df593) C:\Windows\system32\DRIVERS\udfs.sys
16:15:40.0186 3880	udfs - ok
16:15:40.0217 3880	uliagpkx        (4bfe1bc28391222894cbf1e7d0e42320) C:\Windows\system32\drivers\uliagpkx.sys
16:15:40.0217 3880	uliagpkx - ok
16:15:40.0264 3880	umbus           (dc54a574663a895c8763af0fa1ff7561) C:\Windows\system32\DRIVERS\umbus.sys
16:15:40.0264 3880	umbus - ok
16:15:40.0295 3880	UmPass          (b2e8e8cb557b156da5493bbddcc1474d) C:\Windows\system32\DRIVERS\umpass.sys
16:15:40.0295 3880	UmPass - ok
16:15:40.0342 3880	USBAAPL64       (aa33fc47ed58c34e6e9261e4f850b7eb) C:\Windows\system32\Drivers\usbaapl64.sys
16:15:40.0342 3880	USBAAPL64 - ok
16:15:40.0373 3880	usbccgp         (6f1a3157a1c89435352ceb543cdb359c) C:\Windows\system32\DRIVERS\usbccgp.sys
16:15:40.0373 3880	usbccgp - ok
16:15:40.0404 3880	usbcir          (af0892a803fdda7492f595368e3b68e7) C:\Windows\system32\drivers\usbcir.sys
16:15:40.0404 3880	usbcir - ok
16:15:40.0420 3880	usbehci         (c025055fe7b87701eb042095df1a2d7b) C:\Windows\system32\drivers\usbehci.sys
16:15:40.0420 3880	usbehci - ok
16:15:40.0435 3880	usbhub          (287c6c9410b111b68b52ca298f7b8c24) C:\Windows\system32\DRIVERS\usbhub.sys
16:15:40.0435 3880	usbhub - ok
16:15:40.0467 3880	usbohci         (9840fc418b4cbd632d3d0a667a725c31) C:\Windows\system32\drivers\usbohci.sys
16:15:40.0467 3880	usbohci - ok
16:15:40.0482 3880	usbprint        (73188f58fb384e75c4063d29413cee3d) C:\Windows\system32\DRIVERS\usbprint.sys
16:15:40.0482 3880	usbprint - ok
16:15:40.0498 3880	USBSTOR         (fed648b01349a3c8395a5169db5fb7d6) C:\Windows\system32\DRIVERS\USBSTOR.SYS
16:15:40.0498 3880	USBSTOR - ok
16:15:40.0529 3880	usbuhci         (62069a34518bcf9c1fd9e74b3f6db7cd) C:\Windows\system32\drivers\usbuhci.sys
16:15:40.0529 3880	usbuhci - ok
16:15:40.0545 3880	vdrvroot        (c5c876ccfc083ff3b128f933823e87bd) C:\Windows\system32\drivers\vdrvroot.sys
16:15:40.0545 3880	vdrvroot - ok
16:15:40.0560 3880	vga             (da4da3f5e02943c2dc8c6ed875de68dd) C:\Windows\system32\DRIVERS\vgapnp.sys
16:15:40.0560 3880	vga - ok
16:15:40.0591 3880	VgaSave         (53e92a310193cb3c03bea963de7d9cfc) C:\Windows\System32\drivers\vga.sys
16:15:40.0591 3880	VgaSave - ok
16:15:40.0607 3880	vhdmp           (2ce2df28c83aeaf30084e1b1eb253cbb) C:\Windows\system32\drivers\vhdmp.sys
16:15:40.0607 3880	vhdmp - ok
16:15:40.0623 3880	viaide          (e5689d93ffe4e5d66c0178761240dd54) C:\Windows\system32\drivers\viaide.sys
16:15:40.0623 3880	viaide - ok
16:15:40.0638 3880	vmbus           (86ea3e79ae350fea5331a1303054005f) C:\Windows\system32\drivers\vmbus.sys
16:15:40.0638 3880	vmbus - ok
16:15:40.0669 3880	VMBusHID        (7de90b48f210d29649380545db45a187) C:\Windows\system32\drivers\VMBusHID.sys
16:15:40.0669 3880	VMBusHID - ok
16:15:40.0669 3880	volmgr          (d2aafd421940f640b407aefaaebd91b0) C:\Windows\system32\drivers\volmgr.sys
16:15:40.0669 3880	volmgr - ok
16:15:40.0701 3880	volmgrx         (a255814907c89be58b79ef2f189b843b) C:\Windows\system32\drivers\volmgrx.sys
16:15:40.0701 3880	volmgrx - ok
16:15:40.0716 3880	volsnap         (0d08d2f3b3ff84e433346669b5e0f639) C:\Windows\system32\drivers\volsnap.sys
16:15:40.0716 3880	volsnap - ok
16:15:40.0763 3880	vpnva           (845dae50510383b7f6aca73ce2099048) C:\Windows\system32\DRIVERS\vpnva64.sys
16:15:40.0763 3880	vpnva - ok
16:15:40.0794 3880	vsmraid         (5e2016ea6ebaca03c04feac5f330d997) C:\Windows\system32\DRIVERS\vsmraid.sys
16:15:40.0794 3880	vsmraid - ok
16:15:40.0810 3880	vwifibus        (36d4720b72b5c5d9cb2b9c29e9df67a1) C:\Windows\System32\drivers\vwifibus.sys
16:15:40.0810 3880	vwifibus - ok
16:15:40.0841 3880	WacomPen        (4e9440f4f152a7b944cb1663d3935a3e) C:\Windows\system32\DRIVERS\wacompen.sys
16:15:40.0841 3880	WacomPen - ok
16:15:40.0872 3880	WANARP          (356afd78a6ed4457169241ac3965230c) C:\Windows\system32\DRIVERS\wanarp.sys
16:15:40.0872 3880	WANARP - ok
16:15:40.0872 3880	Wanarpv6        (356afd78a6ed4457169241ac3965230c) C:\Windows\system32\DRIVERS\wanarp.sys
16:15:40.0872 3880	Wanarpv6 - ok
16:15:40.0903 3880	Wd              (72889e16ff12ba0f235467d6091b17dc) C:\Windows\system32\DRIVERS\wd.sys
16:15:40.0903 3880	Wd - ok
16:15:40.0935 3880	Wdf01000        (441bd2d7b4f98134c3a4f9fa570fd250) C:\Windows\system32\drivers\Wdf01000.sys
16:15:40.0935 3880	Wdf01000 - ok
16:15:40.0966 3880	WfpLwf          (611b23304bf067451a9fdee01fbdd725) C:\Windows\system32\DRIVERS\wfplwf.sys
16:15:40.0966 3880	WfpLwf - ok
16:15:40.0997 3880	WIMMount        (05ecaec3e4529a7153b3136ceb49f0ec) C:\Windows\system32\drivers\wimmount.sys
16:15:40.0997 3880	WIMMount - ok
16:15:41.0028 3880	WinUsb          (fe88b288356e7b47b74b13372add906d) C:\Windows\system32\DRIVERS\WinUsb.sys
16:15:41.0028 3880	WinUsb - ok
16:15:41.0059 3880	WmiAcpi         (f6ff8944478594d0e414d3f048f0d778) C:\Windows\system32\drivers\wmiacpi.sys
16:15:41.0059 3880	WmiAcpi - ok
16:15:41.0091 3880	ws2ifsl         (6bcc1d7d2fd2453957c5479a32364e52) C:\Windows\system32\drivers\ws2ifsl.sys
16:15:41.0091 3880	ws2ifsl - ok
16:15:41.0122 3880	WudfPf          (d3381dc54c34d79b22cee0d65ba91b7c) C:\Windows\system32\drivers\WudfPf.sys
16:15:41.0122 3880	WudfPf - ok
16:15:41.0137 3880	WUDFRd          (cf8d590be3373029d57af80914190682) C:\Windows\system32\DRIVERS\WUDFRd.sys
16:15:41.0137 3880	WUDFRd - ok
16:15:41.0153 3880	MBR (0x1B8)     (a36c5e4f47e84449ff07ed3517b43a31) \Device\Harddisk0\DR0
16:15:41.0231 3880	\Device\Harddisk0\DR0 - ok
16:15:41.0231 3880	MBR (0x1B8)     (a36c5e4f47e84449ff07ed3517b43a31) \Device\Harddisk1\DR2
16:15:41.0231 3880	\Device\Harddisk1\DR2 - ok
16:15:41.0231 3880	Boot (0x1200)   (cce5fba9030ceff0d693779fa7d41e24) \Device\Harddisk0\DR0\Partition0
16:15:41.0231 3880	\Device\Harddisk0\DR0\Partition0 - ok
16:15:41.0247 3880	Boot (0x1200)   (78f344a78e28526e4d0af28f9215492a) \Device\Harddisk0\DR0\Partition1
16:15:41.0247 3880	\Device\Harddisk0\DR0\Partition1 - ok
16:15:41.0247 3880	Boot (0x1200)   (b1e27aa018409de6bfd73f8afb883a65) \Device\Harddisk1\DR2\Partition0
16:15:41.0247 3880	\Device\Harddisk1\DR2\Partition0 - ok
16:15:41.0247 3880	Boot (0x1200)   (a756cc34cfeaf016f35ad4d8e76fcd1b) \Device\Harddisk1\DR2\Partition1
16:15:41.0247 3880	\Device\Harddisk1\DR2\Partition1 - ok
16:15:41.0247 3880	============================================================
16:15:41.0247 3880	Scan finished
16:15:41.0247 3880	============================================================
16:15:41.0262 4796	Detected object count: 0
16:15:41.0262 4796	Actual detected object count: 0

Danke für die Hilfe!!

Psychotic · 15.03.2012, 16:33

CKScan

Downloade dir bitte CKScanner

Wichtig: Speichere die Datei am Desktop.

Doppelklick auf die CKScanner.exe und klicke auf Search For Files.
Danach klick auf Save List To File.
Es wird eine Box aufpoppen was dir mitteilt das die Datei gespeichert wurde (file saved)
Öffne die CKFiles.txt auf deinem Desktop und poste den Inhalt hier.

efkey1982 · 15.03.2012, 16:53

Hi,

hier die ckfiles.txt:

Code:

ATTFilter

CKScanner - Additional Security Risks - These are not necessarily bad
c:\program files (x86)\empire total war\data\ui\campaign ui\pips\military-crackdown-repression.tga
c:\program files (x86)\jdownloader\jd\plugins\hoster\crackedcom.class
c:\users\afred\downloads\mathtype6\math type 6\mt6 keygen\thumbs.db
c:\users\afred\downloads\rosetta stone v3.3.5\crack\rosettastoneversion3.exe
c:\users\afred\downloads\rosetta stone v3.3.5\crack\neuer ordner\rosettastoneversion3.exe
scanner sequence 3.EM.11.IXNAHJ
 ----- EOF -----

Vieleicht noch als Nachtrag ich hatte vor nicht all zu langer Zeit den Bundestrojaner auf dem Rechner und ihn erfolgreich entfernt, denke ich....

Psychotic · 15.03.2012, 16:55

Zitat:

c:\users\afred\downloads\rosetta stone v3.3.5\crack\rosettastoneversion3.exe
c:\users\afred\downloads\rosetta stone v3.3.5\crack\neuer ordner\rosettastoneversion3.exe

Alleine der Besuch auf Seiten, welche diese Dateien zum Download anbieten, beinhaltet ein hohes Risiko sich zu infizieren.

Wenn Du den Crack startest, startest du eine ausführbare Datei aus einer sehr dubiosen Quelle. Im Quellcode der Datei kann alles mögliche stehen. ( z.B downloaden und ausführen von Malware Dateien )
Dies ist einer der Hauptgründe wie man sich infiziert.

Ausserdem sind Cracks usw illegal und das ist genauso Diebstahl wie in einem Laden.

Darum haben wir uns darauf geeinigt,

Falls wir Hinweise auf illegal erworbene Software finden, werden wir den Support ohne jegliche Diskussion beenden.

Deshalb beschränkt sich unsere Hilfe für dich auf eine Anleitung zur Neuinstallation und Absicherung des Systems
__________________

Psychotic · 15.03.2012, 16:57

Illegale Software - Support eingestellt
Dieses Thema wurde aus den Abos gelöscht. Somit bekomm ich keine Benachrichtigung über neue Antworten.

Jeder andere bitte hier klicken und einen eigenen Thread erstellen

efkey1982 · 15.03.2012, 17:02

Hallo PsYcHoTiC,

ich habe gerade mal nachgesehen, was das für eine Datei ist, da ich die nicht kenne vom Namen her. Sie kommt von einem USB Stick dessen Inhalt ich bei mir auf der Festplatte gespeichert habe (Irgendwas von einem Komilitonen der Platz auf dem Stick brauchte). Sorry, ich kenne rosettastone nicht wirklich, hört sich an wie ein Prono Name.

Also, sollte das irgendwas illegales sein, tut es mir leid und ich werd es löschen, bzw. dem Kumpel auf seinen Stick ziehen und den Ordner löschen. Ich finde euer Forum echt klasse und würde mich freuen, wenn ich weiter hilfe erhalten könnte.

VG efkey1982

13.03.2012, 08:22	#2
Psychotic /// Malwareteam	Blocked IP - Browser zeigt manche Seiten nicht an Um eine genauere Analyse zu ermöglichen, befolge bitte diesen Link: An alle Hilfesuchenden! Was muss ich vor Eröffnung eines Themas beachten? __________________ __________________

14.03.2012, 23:11	#3
Psychotic /// Malwareteam	Blocked IP - Browser zeigt manche Seiten nicht an Hallo, benötigst Du noch weiterhin Hilfe ? Sollte ich innerhalb der nächsten 24 Stunden keine Antwort von dir erhalten, werde ich dein Thema aus meinen Abos nehmen und bekomme dadurch keine Nachricht über neue Antworten. Das Verschwinden der Symptome bedeutet nicht, dass dein System schon sauber ist __________________ __________________

Blocked IP - Browser zeigt manche Seiten nicht an

Plagegeister aller Art und deren Bekämpfung: Blocked IP - Browser zeigt manche Seiten nicht an