Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung

Plagegeister aller Art und deren Bekämpfung: Windows-Systemblockierung paysave

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

Antwort
Alt 03.04.2012, 14:17   #16
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Windows-Systemblockierung paysave - Standard

Windows-Systemblockierung paysave



Und du hast das Fixlog nicht gepostet
__________________
Logfiles bitte immer in CODE-Tags posten

Alt 03.04.2012, 22:05   #17
MR_FRE
 
Windows-Systemblockierung paysave - Standard

Windows-Systemblockierung paysave



hier die fix-log
__________________


Alt 04.04.2012, 11:29   #18
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Windows-Systemblockierung paysave - Standard

Windows-Systemblockierung paysave



Bitte nun (im normalen Windows-Modus) dieses Tool von Kaspersky (TDSS-Killer) ausführen und das Log posten, Anleitung und Downloadlink hier => http://www.trojaner-board.de/82358-t...entfernen.html

Hinweis: Bitte den Virenscanner abstellen bevor du den TDSS-Killer ausführst, denn v.a. Avira meldet im TDSS-Tool oft einen Fehalalrm!

Das Tool so einstellen wie unten im Bild angegeben - klick auf change parameters und setze die Haken wie im folgenden Screenshot abgebildet,
Dann auf Start Scan klicken und wenn es durch ist auf den Button Report klicken um das Log anzuzeigen. Dieses bitte komplett posten.
Wenn du das Log nicht findest oder den Inhalt kopieren und in dein Posting übertragen kannst, dann schau bitte direkt auf deiner Windows-Systempartition (meistens Laufwerk C nach, da speichert der TDSS-Killer seine Logs.

Hinweis: Bitte nichts voreilig mit dem TDSS-Killer löschen! Falls Objekte vom TDSS-Killer bemängelt werden, alle mit der Aktion "skip" behandeln und hier nur das Log posten!

__________________
__________________

Alt 04.04.2012, 13:12   #19
MR_FRE
 
Windows-Systemblockierung paysave - Standard

Windows-Systemblockierung paysave



Code:
ATTFilter
14:09:50.0570 5848	TDSS rootkit removing tool 2.7.25.0 Apr  3 2012 13:42:32
14:09:50.0835 5848	============================================================
14:09:50.0835 5848	Current date / time: 2012/04/04 14:09:50.0835
14:09:50.0835 5848	SystemInfo:
14:09:50.0835 5848	
14:09:50.0835 5848	OS Version: 6.1.7601 ServicePack: 1.0
14:09:50.0835 5848	Product type: Workstation
14:09:50.0835 5848	ComputerName: EFFENBERGER-PC
14:09:50.0835 5848	UserName: Effenberger
14:09:50.0835 5848	Windows directory: C:\Windows
14:09:50.0835 5848	System windows directory: C:\Windows
14:09:50.0835 5848	Running under WOW64
14:09:50.0835 5848	Processor architecture: Intel x64
14:09:50.0835 5848	Number of processors: 4
14:09:50.0835 5848	Page size: 0x1000
14:09:50.0835 5848	Boot type: Normal boot
14:09:50.0835 5848	============================================================
14:09:51.0069 5848	Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 (465.76 Gb), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
14:09:51.0085 5848	\Device\Harddisk0\DR0:
14:09:51.0085 5848	MBR used
14:09:51.0085 5848	\Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x32000
14:09:51.0085 5848	\Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x32800, BlocksNum 0x33D53000
14:09:51.0085 5848	\Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x33D85800, BlocksNum 0x6400000
14:09:51.0147 5848	Initialize success
14:09:51.0147 5848	============================================================
14:10:04.0064 3580	============================================================
14:10:04.0064 3580	Scan started
14:10:04.0064 3580	Mode: Manual; SigCheck; TDLFS; 
14:10:04.0064 3580	============================================================
14:10:04.0329 3580	1394ohci        (a87d604aea360176311474c87a63bb88) C:\Windows\system32\drivers\1394ohci.sys
14:10:04.0423 3580	1394ohci - ok
14:10:04.0454 3580	ACPI            (d81d9e70b8a6dd14d42d7b4efa65d5f2) C:\Windows\system32\drivers\ACPI.sys
14:10:04.0470 3580	ACPI - ok
14:10:04.0485 3580	AcpiPmi         (99f8e788246d495ce3794d7e7821d2ca) C:\Windows\system32\drivers\acpipmi.sys
14:10:04.0548 3580	AcpiPmi - ok
14:10:04.0641 3580	AdobeARMservice (62b7936f9036dd6ed36e6a7efa805dc0) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
14:10:04.0641 3580	AdobeARMservice - ok
14:10:04.0735 3580	adp94xx         (2f6b34b83843f0c5118b63ac634f5bf4) C:\Windows\system32\drivers\adp94xx.sys
14:10:04.0766 3580	adp94xx - ok
14:10:04.0797 3580	adpahci         (597f78224ee9224ea1a13d6350ced962) C:\Windows\system32\drivers\adpahci.sys
14:10:04.0813 3580	adpahci - ok
14:10:04.0844 3580	adpu320         (e109549c90f62fb570b9540c4b148e54) C:\Windows\system32\drivers\adpu320.sys
14:10:04.0860 3580	adpu320 - ok
14:10:04.0891 3580	AeLookupSvc     (4b78b431f225fd8624c5655cb1de7b61) C:\Windows\System32\aelupsvc.dll
14:10:05.0031 3580	AeLookupSvc - ok
14:10:05.0125 3580	AFD             (1c7857b62de5994a75b054a9fd4c3825) C:\Windows\system32\drivers\afd.sys
14:10:05.0156 3580	AFD - ok
14:10:05.0218 3580	agp440          (608c14dba7299d8cb6ed035a68a15799) C:\Windows\system32\drivers\agp440.sys
14:10:05.0218 3580	agp440 - ok
14:10:05.0250 3580	ALG             (3290d6946b5e30e70414990574883ddb) C:\Windows\System32\alg.exe
14:10:05.0312 3580	ALG - ok
14:10:05.0343 3580	aliide          (5812713a477a3ad7363c7438ca2ee038) C:\Windows\system32\drivers\aliide.sys
14:10:05.0359 3580	aliide - ok
14:10:05.0421 3580	AMD External Events Utility (c08ade825268d291afe06eda71415c7d) C:\Windows\system32\atiesrxx.exe
14:10:05.0484 3580	AMD External Events Utility - ok
14:10:05.0593 3580	amdide          (1ff8b4431c353ce385c875f194924c0c) C:\Windows\system32\drivers\amdide.sys
14:10:05.0593 3580	amdide - ok
14:10:05.0640 3580	AmdK8           (7024f087cff1833a806193ef9d22cda9) C:\Windows\system32\drivers\amdk8.sys
14:10:05.0655 3580	AmdK8 - ok
14:10:05.0842 3580	amdkmdag        (f59a32a90c4f96189cd74473f7be572b) C:\Windows\system32\DRIVERS\atikmdag.sys
14:10:06.0030 3580	amdkmdag - ok
14:10:06.0061 3580	amdkmdap        (0327723d45a7bb7c1fe4835eb784ac61) C:\Windows\system32\DRIVERS\atikmpag.sys
14:10:06.0092 3580	amdkmdap - ok
14:10:06.0139 3580	AmdPPM          (1e56388b3fe0d031c44144eb8c4d6217) C:\Windows\system32\drivers\amdppm.sys
14:10:06.0154 3580	AmdPPM - ok
14:10:06.0201 3580	amdsata         (d4121ae6d0c0e7e13aa221aa57ef2d49) C:\Windows\system32\drivers\amdsata.sys
14:10:06.0217 3580	amdsata - ok
14:10:06.0248 3580	amdsbs          (f67f933e79241ed32ff46a4f29b5120b) C:\Windows\system32\drivers\amdsbs.sys
14:10:06.0248 3580	amdsbs - ok
14:10:06.0279 3580	amdxata         (540daf1cea6094886d72126fd7c33048) C:\Windows\system32\drivers\amdxata.sys
14:10:06.0295 3580	amdxata - ok
14:10:06.0451 3580	AntiVirSchedulerService (a122d68ea2541453f787f341877cb40b) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
14:10:06.0466 3580	AntiVirSchedulerService - ok
14:10:06.0498 3580	AntiVirService  (2fe359edeb34efcf42574752f8aebd3f) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
14:10:06.0498 3580	AntiVirService - ok
14:10:06.0576 3580	AppID           (89a69c3f2f319b43379399547526d952) C:\Windows\system32\drivers\appid.sys
14:10:06.0732 3580	AppID - ok
14:10:06.0747 3580	AppIDSvc        (0bc381a15355a3982216f7172f545de1) C:\Windows\System32\appidsvc.dll
14:10:06.0778 3580	AppIDSvc - ok
14:10:06.0810 3580	Appinfo         (3977d4a871ca0d4f2ed1e7db46829731) C:\Windows\System32\appinfo.dll
14:10:06.0872 3580	Appinfo - ok
14:10:06.0950 3580	Apple Mobile Device (7ef47644b74ebe721cc32211d3c35e76) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
14:10:06.0950 3580	Apple Mobile Device - ok
14:10:07.0028 3580	arc             (c484f8ceb1717c540242531db7845c4e) C:\Windows\system32\drivers\arc.sys
14:10:07.0044 3580	arc - ok
14:10:07.0059 3580	arcsas          (019af6924aefe7839f61c830227fe79c) C:\Windows\system32\drivers\arcsas.sys
14:10:07.0059 3580	arcsas - ok
14:10:07.0106 3580	asmthub3        (d6d2bb2f4f5868549dde75f3146bc84e) C:\Windows\system32\drivers\asmthub3.sys
14:10:07.0402 3580	asmthub3 - ok
14:10:07.0434 3580	asmtxhci        (1e758172367dc2a3653f16586d62a3f0) C:\Windows\system32\drivers\asmtxhci.sys
14:10:07.0449 3580	asmtxhci - ok
14:10:07.0527 3580	aspnet_state    (9217d874131ae6ff8f642f124f00a555) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
14:10:07.0527 3580	aspnet_state - ok
14:10:07.0558 3580	AsyncMac        (769765ce2cc62867468cea93969b2242) C:\Windows\system32\DRIVERS\asyncmac.sys
14:10:07.0605 3580	AsyncMac - ok
14:10:07.0652 3580	atapi           (02062c0b390b7729edc9e69c680a6f3c) C:\Windows\system32\drivers\atapi.sys
14:10:07.0668 3580	atapi - ok
14:10:07.0730 3580	AtiHDAudioService (dbb487d09f56c674430ac454fd8bcab9) C:\Windows\system32\drivers\AtihdW76.sys
14:10:07.0746 3580	AtiHDAudioService - ok
14:10:07.0777 3580	AudioEndpointBuilder (f23fef6d569fce88671949894a8becf1) C:\Windows\System32\Audiosrv.dll
14:10:07.0855 3580	AudioEndpointBuilder - ok
14:10:07.0855 3580	AudioSrv        (f23fef6d569fce88671949894a8becf1) C:\Windows\System32\Audiosrv.dll
14:10:07.0886 3580	AudioSrv - ok
14:10:07.0980 3580	Autodesk Content Service (1992c2a1867d95aa3a0802539358d162) C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe
14:10:07.0980 3580	Autodesk Content Service - ok
14:10:08.0073 3580	avgntflt        (aa8f79a1bdfc03b3bc70c44ab00589b4) C:\Windows\system32\DRIVERS\avgntflt.sys
14:10:08.0073 3580	avgntflt - ok
14:10:08.0120 3580	avipbb          (852e3c0a60d368c487949e55ad52a47f) C:\Windows\system32\DRIVERS\avipbb.sys
14:10:08.0136 3580	avipbb - ok
14:10:08.0136 3580	avkmgr          (248db59fc86de44d2779f4c7fb1a567d) C:\Windows\system32\DRIVERS\avkmgr.sys
14:10:08.0151 3580	avkmgr - ok
14:10:08.0182 3580	AxInstSV        (a6bf31a71b409dfa8cac83159e1e2aff) C:\Windows\System32\AxInstSV.dll
14:10:08.0260 3580	AxInstSV - ok
14:10:08.0307 3580	b06bdrv         (3e5b191307609f7514148c6832bb0842) C:\Windows\system32\drivers\bxvbda.sys
14:10:08.0338 3580	b06bdrv - ok
14:10:08.0370 3580	b57nd60a        (b5ace6968304a3900eeb1ebfd9622df2) C:\Windows\system32\DRIVERS\b57nd60a.sys
14:10:08.0401 3580	b57nd60a - ok
14:10:08.0448 3580	BDESVC          (fde360167101b4e45a96f939f388aeb0) C:\Windows\System32\bdesvc.dll
14:10:08.0479 3580	BDESVC - ok
14:10:08.0510 3580	Beep            (16a47ce2decc9b099349a5f840654746) C:\Windows\system32\drivers\Beep.sys
14:10:08.0572 3580	Beep - ok
14:10:08.0619 3580	BFE             (82974d6a2fd19445cc5171fc378668a4) C:\Windows\System32\bfe.dll
14:10:08.0682 3580	BFE - ok
14:10:08.0728 3580	BITS            (1ea7969e3271cbc59e1730697dc74682) C:\Windows\System32\qmgr.dll
14:10:08.0775 3580	BITS - ok
14:10:08.0806 3580	blbdrive        (61583ee3c3a17003c4acd0475646b4d3) C:\Windows\system32\drivers\blbdrive.sys
14:10:08.0838 3580	blbdrive - ok
14:10:08.0916 3580	Bonjour Service (ebbcd5dfbb1de70e8f4af8fa59e401fd) C:\Program Files\Bonjour\mDNSResponder.exe
14:10:08.0947 3580	Bonjour Service - ok
14:10:08.0994 3580	bowser          (6c02a83164f5cc0a262f4199f0871cf5) C:\Windows\system32\DRIVERS\bowser.sys
14:10:09.0025 3580	bowser - ok
14:10:09.0072 3580	BrFiltLo        (f09eee9edc320b5e1501f749fde686c8) C:\Windows\system32\drivers\BrFiltLo.sys
14:10:09.0103 3580	BrFiltLo - ok
14:10:09.0134 3580	BrFiltUp        (b114d3098e9bdb8bea8b053685831be6) C:\Windows\system32\drivers\BrFiltUp.sys
14:10:09.0150 3580	BrFiltUp - ok
14:10:09.0181 3580	Browser         (8ef0d5c41ec907751b8429162b1239ed) C:\Windows\System32\browser.dll
14:10:09.0228 3580	Browser - ok
14:10:09.0259 3580	Brserid         (43bea8d483bf1870f018e2d02e06a5bd) C:\Windows\System32\Drivers\Brserid.sys
14:10:09.0274 3580	Brserid - ok
14:10:09.0306 3580	BrSerWdm        (a6eca2151b08a09caceca35c07f05b42) C:\Windows\System32\Drivers\BrSerWdm.sys
14:10:09.0337 3580	BrSerWdm - ok
14:10:09.0368 3580	BrUsbMdm        (b79968002c277e869cf38bd22cd61524) C:\Windows\System32\Drivers\BrUsbMdm.sys
14:10:09.0399 3580	BrUsbMdm - ok
14:10:09.0415 3580	BrUsbSer        (a87528880231c54e75ea7a44943b38bf) C:\Windows\System32\Drivers\BrUsbSer.sys
14:10:09.0446 3580	BrUsbSer - ok
14:10:09.0477 3580	BTHMODEM        (9da669f11d1f894ab4eb69bf546a42e8) C:\Windows\system32\drivers\bthmodem.sys
14:10:09.0493 3580	BTHMODEM - ok
14:10:09.0524 3580	bthserv         (95f9c2976059462cbbf227f7aab10de9) C:\Windows\system32\bthserv.dll
14:10:09.0555 3580	bthserv - ok
14:10:09.0586 3580	cdfs            (b8bd2bb284668c84865658c77574381a) C:\Windows\system32\DRIVERS\cdfs.sys
14:10:09.0649 3580	cdfs - ok
14:10:09.0680 3580	cdrom           (f036ce71586e93d94dab220d7bdf4416) C:\Windows\system32\drivers\cdrom.sys
14:10:09.0711 3580	cdrom - ok
14:10:09.0742 3580	CertPropSvc     (f17d1d393bbc69c5322fbfafaca28c7f) C:\Windows\System32\certprop.dll
14:10:09.0805 3580	CertPropSvc - ok
14:10:09.0836 3580	circlass        (d7cd5c4e1b71fa62050515314cfb52cf) C:\Windows\system32\drivers\circlass.sys
14:10:09.0867 3580	circlass - ok
14:10:09.0914 3580	CLFS            (fe1ec06f2253f691fe36217c592a0206) C:\Windows\system32\CLFS.sys
14:10:09.0930 3580	CLFS - ok
14:10:09.0976 3580	clr_optimization_v2.0.50727_32 (d88040f816fda31c3b466f0fa0918f29) C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
14:10:09.0992 3580	clr_optimization_v2.0.50727_32 - ok
14:10:10.0039 3580	clr_optimization_v2.0.50727_64 (d1ceea2b47cb998321c579651ce3e4f8) C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
14:10:10.0054 3580	clr_optimization_v2.0.50727_64 - ok
14:10:10.0101 3580	clr_optimization_v4.0.30319_32 (c5a75eb48e2344abdc162bda79e16841) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
14:10:10.0117 3580	clr_optimization_v4.0.30319_32 - ok
14:10:10.0132 3580	clr_optimization_v4.0.30319_64 (c6f9af94dcd58122a4d7e89db6bed29d) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
14:10:10.0148 3580	clr_optimization_v4.0.30319_64 - ok
14:10:10.0210 3580	CmBatt          (0840155d0bddf1190f84a663c284bd33) C:\Windows\system32\drivers\CmBatt.sys
14:10:10.0242 3580	CmBatt - ok
14:10:10.0257 3580	cmdide          (e19d3f095812725d88f9001985b94edd) C:\Windows\system32\drivers\cmdide.sys
14:10:10.0273 3580	cmdide - ok
14:10:10.0304 3580	CNG             (c4943b6c962e4b82197542447ad599f4) C:\Windows\system32\Drivers\cng.sys
14:10:10.0335 3580	CNG - ok
14:10:10.0366 3580	Compbatt        (102de219c3f61415f964c88e9085ad14) C:\Windows\system32\drivers\compbatt.sys
14:10:10.0382 3580	Compbatt - ok
14:10:10.0413 3580	CompositeBus    (03edb043586cceba243d689bdda370a8) C:\Windows\system32\drivers\CompositeBus.sys
14:10:10.0444 3580	CompositeBus - ok
14:10:10.0460 3580	COMSysApp - ok
14:10:10.0491 3580	crcdisk         (1c827878a998c18847245fe1f34ee597) C:\Windows\system32\drivers\crcdisk.sys
14:10:10.0507 3580	crcdisk - ok
14:10:10.0538 3580	CryptSvc        (15597883fbe9b056f276ada3ad87d9af) C:\Windows\system32\cryptsvc.dll
14:10:10.0585 3580	CryptSvc - ok
14:10:10.0616 3580	DcomLaunch      (5c627d1b1138676c0a7ab2c2c190d123) C:\Windows\system32\rpcss.dll
14:10:10.0663 3580	DcomLaunch - ok
14:10:10.0678 3580	defragsvc       (3cec7631a84943677aa8fa8ee5b6b43d) C:\Windows\System32\defragsvc.dll
14:10:10.0741 3580	defragsvc - ok
14:10:10.0788 3580	DfsC            (9bb2ef44eaa163b29c4a4587887a0fe4) C:\Windows\system32\Drivers\dfsc.sys
14:10:10.0819 3580	DfsC - ok
14:10:10.0834 3580	Dhcp            (43d808f5d9e1a18e5eeb5ebc83969e4e) C:\Windows\system32\dhcpcore.dll
14:10:10.0897 3580	Dhcp - ok
14:10:10.0912 3580	discache        (13096b05847ec78f0977f2c0f79e9ab3) C:\Windows\system32\drivers\discache.sys
14:10:10.0959 3580	discache - ok
14:10:11.0006 3580	Disk            (9819eee8b5ea3784ec4af3b137a5244c) C:\Windows\system32\drivers\disk.sys
14:10:11.0022 3580	Disk - ok
14:10:11.0053 3580	Dnscache        (16835866aaa693c7d7fceba8fff706e4) C:\Windows\System32\dnsrslvr.dll
14:10:11.0084 3580	Dnscache - ok
14:10:11.0115 3580	dot3svc         (b1fb3ddca0fdf408750d5843591afbc6) C:\Windows\System32\dot3svc.dll
14:10:11.0178 3580	dot3svc - ok
14:10:11.0178 3580	DPS             (b26f4f737e8f9df4f31af6cf31d05820) C:\Windows\system32\dps.dll
14:10:11.0209 3580	DPS - ok
14:10:11.0256 3580	drmkaud         (9b19f34400d24df84c858a421c205754) C:\Windows\system32\drivers\drmkaud.sys
14:10:11.0271 3580	drmkaud - ok
14:10:11.0318 3580	DXGKrnl         (f5bee30450e18e6b83a5012c100616fd) C:\Windows\System32\drivers\dxgkrnl.sys
14:10:11.0349 3580	DXGKrnl - ok
14:10:11.0365 3580	EapHost         (e2dda8726da9cb5b2c4000c9018a9633) C:\Windows\System32\eapsvc.dll
14:10:11.0396 3580	EapHost - ok
14:10:11.0474 3580	ebdrv           (dc5d737f51be844d8c82c695eb17372f) C:\Windows\system32\drivers\evbda.sys
14:10:11.0536 3580	ebdrv - ok
14:10:11.0583 3580	EFS             (c118a82cd78818c29ab228366ebf81c3) C:\Windows\System32\lsass.exe
14:10:11.0614 3580	EFS - ok
14:10:11.0677 3580	ehRecvr         (c4002b6b41975f057d98c439030cea07) C:\Windows\ehome\ehRecvr.exe
14:10:11.0739 3580	ehRecvr - ok
14:10:11.0755 3580	ehSched         (4705e8ef9934482c5bb488ce28afc681) C:\Windows\ehome\ehsched.exe
14:10:11.0802 3580	ehSched - ok
14:10:11.0864 3580	elxstor         (0e5da5369a0fcaea12456dd852545184) C:\Windows\system32\drivers\elxstor.sys
14:10:11.0895 3580	elxstor - ok
14:10:11.0911 3580	ErrDev          (34a3c54752046e79a126e15c51db409b) C:\Windows\system32\drivers\errdev.sys
14:10:11.0942 3580	ErrDev - ok
14:10:11.0973 3580	EventSystem     (4166f82be4d24938977dd1746be9b8a0) C:\Windows\system32\es.dll
14:10:12.0036 3580	EventSystem - ok
14:10:12.0082 3580	exfat           (a510c654ec00c1e9bdd91eeb3a59823b) C:\Windows\system32\drivers\exfat.sys
14:10:12.0129 3580	exfat - ok
14:10:12.0160 3580	fastfat         (0adc83218b66a6db380c330836f3e36d) C:\Windows\system32\drivers\fastfat.sys
14:10:12.0176 3580	fastfat - ok
14:10:12.0207 3580	Fax             (dbefd454f8318a0ef691fdd2eaab44eb) C:\Windows\system32\fxssvc.exe
14:10:12.0238 3580	Fax - ok
14:10:12.0270 3580	fdc             (d765d19cd8ef61f650c384f62fac00ab) C:\Windows\system32\drivers\fdc.sys
14:10:12.0301 3580	fdc - ok
14:10:12.0332 3580	fdPHost         (0438cab2e03f4fb61455a7956026fe86) C:\Windows\system32\fdPHost.dll
14:10:12.0379 3580	fdPHost - ok
14:10:12.0394 3580	FDResPub        (802496cb59a30349f9a6dd22d6947644) C:\Windows\system32\fdrespub.dll
14:10:12.0426 3580	FDResPub - ok
14:10:12.0472 3580	FileInfo        (655661be46b5f5f3fd454e2c3095b930) C:\Windows\system32\drivers\fileinfo.sys
14:10:12.0472 3580	FileInfo - ok
14:10:12.0488 3580	Filetrace       (5f671ab5bc87eea04ec38a6cd5962a47) C:\Windows\system32\drivers\filetrace.sys
14:10:12.0519 3580	Filetrace - ok
14:10:12.0597 3580	FLEXnet Licensing Service 64 (5cee6cd43ae5844c49300ea0b1e557ee) C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe
14:10:12.0644 3580	FLEXnet Licensing Service 64 - ok
14:10:12.0706 3580	flpydisk        (c172a0f53008eaeb8ea33fe10e177af5) C:\Windows\system32\drivers\flpydisk.sys
14:10:12.0738 3580	flpydisk - ok
14:10:12.0769 3580	FltMgr          (da6b67270fd9db3697b20fce94950741) C:\Windows\system32\drivers\fltmgr.sys
14:10:12.0784 3580	FltMgr - ok
14:10:12.0816 3580	FontCache       (5c4cb4086fb83115b153e47add961a0c) C:\Windows\system32\FntCache.dll
14:10:12.0847 3580	FontCache - ok
14:10:12.0925 3580	FontCache3.0.0.0 (a8b7f3818ab65695e3a0bb3279f6dce6) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
14:10:12.0940 3580	FontCache3.0.0.0 - ok
14:10:12.0972 3580	FsDepends       (d43703496149971890703b4b1b723eac) C:\Windows\system32\drivers\FsDepends.sys
14:10:12.0972 3580	FsDepends - ok
14:10:13.0003 3580	Fs_Rec          (e95ef8547de20cf0603557c0cf7a9462) C:\Windows\system32\drivers\Fs_Rec.sys
14:10:13.0018 3580	Fs_Rec - ok
14:10:13.0050 3580	fvevol          (1f7b25b858fa27015169fe95e54108ed) C:\Windows\system32\DRIVERS\fvevol.sys
14:10:13.0065 3580	fvevol - ok
14:10:13.0096 3580	gagp30kx        (8c778d335c9d272cfd3298ab02abe3b6) C:\Windows\system32\drivers\gagp30kx.sys
14:10:13.0112 3580	gagp30kx - ok
14:10:13.0128 3580	GEARAspiWDM     (e403aacf8c7bb11375122d2464560311) C:\Windows\system32\DRIVERS\GEARAspiWDM.sys
14:10:13.0143 3580	GEARAspiWDM - ok
14:10:13.0174 3580	gpsvc           (277bbc7e1aa1ee957f573a10eca7ef3a) C:\Windows\System32\gpsvc.dll
14:10:13.0252 3580	gpsvc - ok
14:10:13.0346 3580	gupdate         (f02a533f517eb38333cb12a9e8963773) C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
14:10:13.0346 3580	gupdate - ok
14:10:13.0362 3580	gupdatem        (f02a533f517eb38333cb12a9e8963773) C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
14:10:13.0377 3580	gupdatem - ok
14:10:13.0377 3580	gusvc           (cc839e8d766cc31a7710c9f38cf3e375) C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
14:10:13.0393 3580	gusvc - ok
14:10:13.0471 3580	hcw85cir        (f2523ef6460fc42405b12248338ab2f0) C:\Windows\system32\drivers\hcw85cir.sys
14:10:13.0502 3580	hcw85cir - ok
14:10:13.0549 3580	HdAudAddService (975761c778e33cd22498059b91e7373a) C:\Windows\system32\drivers\HdAudio.sys
14:10:13.0580 3580	HdAudAddService - ok
14:10:13.0627 3580	HDAudBus        (97bfed39b6b79eb12cddbfeed51f56bb) C:\Windows\system32\drivers\HDAudBus.sys
14:10:13.0658 3580	HDAudBus - ok
14:10:13.0689 3580	HidBatt         (78e86380454a7b10a5eb255dc44a355f) C:\Windows\system32\drivers\HidBatt.sys
14:10:13.0720 3580	HidBatt - ok
14:10:13.0736 3580	HidBth          (7fd2a313f7afe5c4dab14798c48dd104) C:\Windows\system32\drivers\hidbth.sys
14:10:13.0767 3580	HidBth - ok
14:10:13.0798 3580	HidIr           (0a77d29f311b88cfae3b13f9c1a73825) C:\Windows\system32\drivers\hidir.sys
14:10:13.0830 3580	HidIr - ok
14:10:13.0845 3580	hidserv         (bd9eb3958f213f96b97b1d897dee006d) C:\Windows\system32\hidserv.dll
14:10:13.0908 3580	hidserv - ok
14:10:13.0939 3580	HidUsb          (9592090a7e2b61cd582b612b6df70536) C:\Windows\system32\DRIVERS\hidusb.sys
14:10:13.0954 3580	HidUsb - ok
14:10:13.0970 3580	hkmsvc          (387e72e739e15e3d37907a86d9ff98e2) C:\Windows\system32\kmsvc.dll
14:10:14.0032 3580	hkmsvc - ok
14:10:14.0064 3580	HomeGroupListener (efdfb3dd38a4376f93e7985173813abd) C:\Windows\system32\ListSvc.dll
14:10:14.0095 3580	HomeGroupListener - ok
14:10:14.0126 3580	HomeGroupProvider (908acb1f594274965a53926b10c81e89) C:\Windows\system32\provsvc.dll
14:10:14.0157 3580	HomeGroupProvider - ok
14:10:14.0188 3580	HpSAMD          (39d2abcd392f3d8a6dce7b60ae7b8efc) C:\Windows\system32\drivers\HpSAMD.sys
14:10:14.0204 3580	HpSAMD - ok
14:10:14.0251 3580	HTTP            (0ea7de1acb728dd5a369fd742d6eee28) C:\Windows\system32\drivers\HTTP.sys
14:10:14.0313 3580	HTTP - ok
14:10:14.0344 3580	hwpolicy        (a5462bd6884960c9dc85ed49d34ff392) C:\Windows\system32\drivers\hwpolicy.sys
14:10:14.0344 3580	hwpolicy - ok
14:10:14.0376 3580	i8042prt        (fa55c73d4affa7ee23ac4be53b4592d3) C:\Windows\system32\DRIVERS\i8042prt.sys
14:10:14.0391 3580	i8042prt - ok
14:10:14.0422 3580	iaStor          (2fdaec4b02729c48c0fd1b0b4695995b) C:\Windows\system32\drivers\iaStor.sys
14:10:14.0438 3580	iaStor - ok
14:10:14.0532 3580	IAStorDataMgrSvc (d41861e56e7552c13674d7f147a02464) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
14:10:14.0547 3580	IAStorDataMgrSvc - ok
14:10:14.0594 3580	iaStorV         (aaaf44db3bd0b9d1fb6969b23ecc8366) C:\Windows\system32\drivers\iaStorV.sys
14:10:14.0610 3580	iaStorV - ok
14:10:14.0688 3580	idsvc           (5988fc40f8db5b0739cd1e3a5d0d78bd) C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
14:10:14.0719 3580	idsvc - ok
14:10:14.0844 3580	igfx            (a87261ef1546325b559374f5689cf5bc) C:\Windows\system32\DRIVERS\igdkmd64.sys
14:10:14.0984 3580	igfx - ok
14:10:15.0031 3580	iirsp           (5c18831c61933628f5bb0ea2675b9d21) C:\Windows\system32\drivers\iirsp.sys
14:10:15.0031 3580	iirsp - ok
14:10:15.0078 3580	IKEEXT          (fcd84c381e0140af901e58d48882d26b) C:\Windows\System32\ikeext.dll
14:10:15.0156 3580	IKEEXT - ok
14:10:15.0280 3580	IntcAzAudAddService (cb7dadef3d83fe2c12655a0bdcba99f2) C:\Windows\system32\drivers\RTKVHD64.sys
14:10:15.0390 3580	IntcAzAudAddService - ok
14:10:15.0421 3580	intelide        (f00f20e70c6ec3aa366910083a0518aa) C:\Windows\system32\drivers\intelide.sys
14:10:15.0436 3580	intelide - ok
14:10:15.0468 3580	intelppm        (ada036632c664caa754079041cf1f8c1) C:\Windows\system32\DRIVERS\intelppm.sys
14:10:15.0483 3580	intelppm - ok
14:10:15.0514 3580	IPBusEnum       (098a91c54546a3b878dad6a7e90a455b) C:\Windows\system32\ipbusenum.dll
14:10:15.0577 3580	IPBusEnum - ok
14:10:15.0592 3580	IpFilterDriver  (c9f0e1bd74365a8771590e9008d22ab6) C:\Windows\system32\DRIVERS\ipfltdrv.sys
14:10:15.0639 3580	IpFilterDriver - ok
14:10:15.0686 3580	iphlpsvc        (a34a587fffd45fa649fba6d03784d257) C:\Windows\System32\iphlpsvc.dll
14:10:15.0733 3580	iphlpsvc - ok
14:10:15.0764 3580	IPMIDRV         (0fc1aea580957aa8817b8f305d18ca3a) C:\Windows\system32\drivers\IPMIDrv.sys
14:10:15.0795 3580	IPMIDRV - ok
14:10:15.0811 3580	IPNAT           (af9b39a7e7b6caa203b3862582e9f2d0) C:\Windows\system32\drivers\ipnat.sys
14:10:15.0858 3580	IPNAT - ok
14:10:15.0936 3580	iPod Service    (50d6ccc6ff5561f9f56946b3e6164fb8) C:\Program Files\iPod\bin\iPodService.exe
14:10:15.0967 3580	iPod Service - ok
14:10:16.0045 3580	IRENUM          (3abf5e7213eb28966d55d58b515d5ce9) C:\Windows\system32\drivers\irenum.sys
14:10:16.0076 3580	IRENUM - ok
14:10:16.0123 3580	isapnp          (2f7b28dc3e1183e5eb418df55c204f38) C:\Windows\system32\drivers\isapnp.sys
14:10:16.0123 3580	isapnp - ok
14:10:16.0154 3580	iScsiPrt        (d931d7309deb2317035b07c9f9e6b0bd) C:\Windows\system32\drivers\msiscsi.sys
14:10:16.0170 3580	iScsiPrt - ok
14:10:16.0216 3580	kbdclass        (bc02336f1cba7dcc7d1213bb588a68a5) C:\Windows\system32\DRIVERS\kbdclass.sys
14:10:16.0232 3580	kbdclass - ok
14:10:16.0263 3580	kbdhid          (0705eff5b42a9db58548eec3b26bb484) C:\Windows\system32\drivers\kbdhid.sys
14:10:16.0294 3580	kbdhid - ok
14:10:16.0310 3580	KeyIso          (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe
14:10:16.0326 3580	KeyIso - ok
14:10:16.0341 3580	KSecDD          (da1e991a61cfdd755a589e206b97644b) C:\Windows\system32\Drivers\ksecdd.sys
14:10:16.0357 3580	KSecDD - ok
14:10:16.0372 3580	KSecPkg         (7e33198d956943a4f11a5474c1e9106f) C:\Windows\system32\Drivers\ksecpkg.sys
14:10:16.0388 3580	KSecPkg - ok
14:10:16.0435 3580	ksthunk         (6869281e78cb31a43e969f06b57347c4) C:\Windows\system32\drivers\ksthunk.sys
14:10:16.0482 3580	ksthunk - ok
14:10:16.0528 3580	KtmRm           (6ab66e16aa859232f64deb66887a8c9c) C:\Windows\system32\msdtckrm.dll
14:10:16.0575 3580	KtmRm - ok
14:10:16.0606 3580	LanmanServer    (d9f42719019740baa6d1c6d536cbdaa6) C:\Windows\system32\srvsvc.dll
14:10:16.0638 3580	LanmanServer - ok
14:10:16.0653 3580	LanmanWorkstation (851a1382eed3e3a7476db004f4ee3e1a) C:\Windows\System32\wkssvc.dll
14:10:16.0716 3580	LanmanWorkstation - ok
14:10:16.0762 3580	lltdio          (1538831cf8ad2979a04c423779465827) C:\Windows\system32\DRIVERS\lltdio.sys
14:10:16.0809 3580	lltdio - ok
14:10:16.0840 3580	lltdsvc         (c1185803384ab3feed115f79f109427f) C:\Windows\System32\lltdsvc.dll
14:10:16.0872 3580	lltdsvc - ok
14:10:16.0903 3580	lmhosts         (f993a32249b66c9d622ea5592a8b76b8) C:\Windows\System32\lmhsvc.dll
14:10:16.0965 3580	lmhosts - ok
14:10:17.0028 3580	LMS             (1584deeae5aa0e3fb045f3d0eac585ea) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
14:10:17.0043 3580	LMS - ok
14:10:17.0074 3580	LSI_FC          (1a93e54eb0ece102495a51266dcdb6a6) C:\Windows\system32\drivers\lsi_fc.sys
14:10:17.0090 3580	LSI_FC - ok
14:10:17.0121 3580	LSI_SAS         (1047184a9fdc8bdbff857175875ee810) C:\Windows\system32\drivers\lsi_sas.sys
14:10:17.0137 3580	LSI_SAS - ok
14:10:17.0152 3580	LSI_SAS2        (30f5c0de1ee8b5bc9306c1f0e4a75f93) C:\Windows\system32\drivers\lsi_sas2.sys
14:10:17.0168 3580	LSI_SAS2 - ok
14:10:17.0184 3580	LSI_SCSI        (0504eacaff0d3c8aed161c4b0d369d4a) C:\Windows\system32\drivers\lsi_scsi.sys
14:10:17.0199 3580	LSI_SCSI - ok
14:10:17.0230 3580	luafv           (43d0f98e1d56ccddb0d5254cff7b356e) C:\Windows\system32\drivers\luafv.sys
14:10:17.0277 3580	luafv - ok
14:10:17.0324 3580	Mcx2Svc         (0be09cd858abf9df6ed259d57a1a1663) C:\Windows\system32\Mcx2Svc.dll
14:10:17.0355 3580	Mcx2Svc - ok
14:10:17.0386 3580	megasas         (a55805f747c6edb6a9080d7c633bd0f4) C:\Windows\system32\drivers\megasas.sys
14:10:17.0386 3580	megasas - ok
14:10:17.0433 3580	MegaSR          (baf74ce0072480c3b6b7c13b2a94d6b3) C:\Windows\system32\drivers\MegaSR.sys
14:10:17.0449 3580	MegaSR - ok
14:10:17.0480 3580	MEIx64          (a6518dcc42f7a6e999bb3bea8fd87567) C:\Windows\system32\drivers\HECIx64.sys
14:10:17.0496 3580	MEIx64 - ok
14:10:17.0542 3580	MemeoBackgroundService (8a43d23ace2e8c95a2d87b6e9599deda) C:\Program Files (x86)\Memeo\AutoBackup\MemeoBackgroundService.exe
14:10:17.0542 3580	MemeoBackgroundService - ok
14:10:17.0574 3580	MMCSS           (e40e80d0304a73e8d269f7141d77250b) C:\Windows\system32\mmcss.dll
14:10:17.0636 3580	MMCSS - ok
14:10:17.0683 3580	Modem           (800ba92f7010378b09f9ed9270f07137) C:\Windows\system32\drivers\modem.sys
14:10:17.0730 3580	Modem - ok
14:10:17.0761 3580	monitor         (b03d591dc7da45ece20b3b467e6aadaa) C:\Windows\system32\DRIVERS\monitor.sys
14:10:17.0792 3580	monitor - ok
14:10:17.0839 3580	mouclass        (7d27ea49f3c1f687d357e77a470aea99) C:\Windows\system32\DRIVERS\mouclass.sys
14:10:17.0854 3580	mouclass - ok
14:10:17.0886 3580	mouhid          (d3bf052c40b0c4166d9fd86a4288c1e6) C:\Windows\system32\DRIVERS\mouhid.sys
14:10:17.0917 3580	mouhid - ok
14:10:17.0964 3580	mountmgr        (32e7a3d591d671a6df2db515a5cbe0fa) C:\Windows\system32\drivers\mountmgr.sys
14:10:17.0979 3580	mountmgr - ok
14:10:17.0995 3580	mpio            (a44b420d30bd56e145d6a2bc8768ec58) C:\Windows\system32\drivers\mpio.sys
14:10:18.0010 3580	mpio - ok
14:10:18.0026 3580	mpsdrv          (6c38c9e45ae0ea2fa5e551f2ed5e978f) C:\Windows\system32\drivers\mpsdrv.sys
14:10:18.0088 3580	mpsdrv - ok
14:10:18.0135 3580	MpsSvc          (54ffc9c8898113ace189d4aa7199d2c1) C:\Windows\system32\mpssvc.dll
14:10:18.0182 3580	MpsSvc - ok
14:10:18.0213 3580	MRxDAV          (dc722758b8261e1abafd31a3c0a66380) C:\Windows\system32\drivers\mrxdav.sys
14:10:18.0244 3580	MRxDAV - ok
14:10:18.0260 3580	mrxsmb          (a5d9106a73dc88564c825d317cac68ac) C:\Windows\system32\DRIVERS\mrxsmb.sys
14:10:18.0307 3580	mrxsmb - ok
14:10:18.0338 3580	mrxsmb10        (d711b3c1d5f42c0c2415687be09fc163) C:\Windows\system32\DRIVERS\mrxsmb10.sys
14:10:18.0385 3580	mrxsmb10 - ok
14:10:18.0400 3580	mrxsmb20        (9423e9d355c8d303e76b8cfbd8a5c30c) C:\Windows\system32\DRIVERS\mrxsmb20.sys
14:10:18.0432 3580	mrxsmb20 - ok
14:10:18.0463 3580	msahci          (c25f0bafa182cbca2dd3c851c2e75796) C:\Windows\system32\drivers\msahci.sys
14:10:18.0463 3580	msahci - ok
14:10:18.0494 3580	msdsm           (db801a638d011b9633829eb6f663c900) C:\Windows\system32\drivers\msdsm.sys
14:10:18.0510 3580	msdsm - ok
14:10:18.0541 3580	MSDTC           (de0ece52236cfa3ed2dbfc03f28253a8) C:\Windows\System32\msdtc.exe
14:10:18.0556 3580	MSDTC - ok
14:10:18.0588 3580	Msfs            (aa3fb40e17ce1388fa1bedab50ea8f96) C:\Windows\system32\drivers\Msfs.sys
14:10:18.0634 3580	Msfs - ok
14:10:18.0681 3580	mshidkmdf       (f9d215a46a8b9753f61767fa72a20326) C:\Windows\System32\drivers\mshidkmdf.sys
14:10:18.0728 3580	mshidkmdf - ok
14:10:18.0759 3580	msisadrv        (d916874bbd4f8b07bfb7fa9b3ccae29d) C:\Windows\system32\drivers\msisadrv.sys
14:10:18.0759 3580	msisadrv - ok
14:10:18.0790 3580	MSiSCSI         (808e98ff49b155c522e6400953177b08) C:\Windows\system32\iscsiexe.dll
14:10:18.0806 3580	MSiSCSI - ok
14:10:18.0822 3580	msiserver - ok
14:10:18.0853 3580	MSKSSRV         (49ccf2c4fea34ffad8b1b59d49439366) C:\Windows\system32\drivers\MSKSSRV.sys
14:10:18.0900 3580	MSKSSRV - ok
14:10:18.0931 3580	MSPCLOCK        (bdd71ace35a232104ddd349ee70e1ab3) C:\Windows\system32\drivers\MSPCLOCK.sys
14:10:18.0978 3580	MSPCLOCK - ok
14:10:19.0009 3580	MSPQM           (4ed981241db27c3383d72092b618a1d0) C:\Windows\system32\drivers\MSPQM.sys
14:10:19.0024 3580	MSPQM - ok
14:10:19.0056 3580	MsRPC           (759a9eeb0fa9ed79da1fb7d4ef78866d) C:\Windows\system32\drivers\MsRPC.sys
14:10:19.0071 3580	MsRPC - ok
14:10:19.0102 3580	mssmbios        (0eed230e37515a0eaee3c2e1bc97b288) C:\Windows\system32\drivers\mssmbios.sys
14:10:19.0102 3580	mssmbios - ok
14:10:19.0134 3580	MSTEE           (2e66f9ecb30b4221a318c92ac2250779) C:\Windows\system32\drivers\MSTEE.sys
14:10:19.0149 3580	MSTEE - ok
14:10:19.0180 3580	MTConfig        (7ea404308934e675bffde8edf0757bcd) C:\Windows\system32\drivers\MTConfig.sys
14:10:19.0196 3580	MTConfig - ok
14:10:19.0227 3580	Mup             (f9a18612fd3526fe473c1bda678d61c8) C:\Windows\system32\Drivers\mup.sys
14:10:19.0227 3580	Mup - ok
14:10:19.0258 3580	napagent        (582ac6d9873e31dfa28a4547270862dd) C:\Windows\system32\qagentRT.dll
14:10:19.0305 3580	napagent - ok
14:10:19.0336 3580	NativeWifiP     (1ea3749c4114db3e3161156ffffa6b33) C:\Windows\system32\DRIVERS\nwifi.sys
14:10:19.0383 3580	NativeWifiP - ok
14:10:19.0430 3580	NDIS            (79b47fd40d9a817e932f9d26fac0a81c) C:\Windows\system32\drivers\ndis.sys
14:10:19.0461 3580	NDIS - ok
14:10:19.0477 3580	NdisCap         (9f9a1f53aad7da4d6fef5bb73ab811ac) C:\Windows\system32\DRIVERS\ndiscap.sys
14:10:19.0508 3580	NdisCap - ok
14:10:19.0524 3580	NdisTapi        (30639c932d9fef22b31268fe25a1b6e5) C:\Windows\system32\DRIVERS\ndistapi.sys
14:10:19.0570 3580	NdisTapi - ok
14:10:19.0602 3580	Ndisuio         (136185f9fb2cc61e573e676aa5402356) C:\Windows\system32\DRIVERS\ndisuio.sys
14:10:19.0633 3580	Ndisuio - ok
14:10:19.0664 3580	NdisWan         (53f7305169863f0a2bddc49e116c2e11) C:\Windows\system32\DRIVERS\ndiswan.sys
14:10:19.0726 3580	NdisWan - ok
14:10:19.0742 3580	NDProxy         (015c0d8e0e0421b4cfd48cffe2825879) C:\Windows\system32\drivers\NDProxy.sys
14:10:19.0789 3580	NDProxy - ok
14:10:19.0820 3580	NetBIOS         (86743d9f5d2b1048062b14b1d84501c4) C:\Windows\system32\DRIVERS\netbios.sys
14:10:19.0882 3580	NetBIOS - ok
14:10:19.0898 3580	NetBT           (09594d1089c523423b32a4229263f068) C:\Windows\system32\DRIVERS\netbt.sys
14:10:19.0960 3580	NetBT - ok
14:10:19.0992 3580	Netlogon        (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe
14:10:20.0007 3580	Netlogon - ok
14:10:20.0038 3580	Netman          (847d3ae376c0817161a14a82c8922a9e) C:\Windows\System32\netman.dll
14:10:20.0085 3580	Netman - ok
14:10:20.0163 3580	NetMsmqActivator (d22cd77d4f0d63d1169bb35911bff12d) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
14:10:20.0179 3580	NetMsmqActivator - ok
14:10:20.0194 3580	NetPipeActivator (d22cd77d4f0d63d1169bb35911bff12d) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
14:10:20.0210 3580	NetPipeActivator - ok
14:10:20.0241 3580	netprofm        (5f28111c648f1e24f7dbc87cdeb091b8) C:\Windows\System32\netprofm.dll
14:10:20.0304 3580	netprofm - ok
14:10:20.0382 3580	NetTcpActivator (d22cd77d4f0d63d1169bb35911bff12d) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
14:10:20.0382 3580	NetTcpActivator - ok
14:10:20.0382 3580	NetTcpPortSharing (d22cd77d4f0d63d1169bb35911bff12d) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
14:10:20.0397 3580	NetTcpPortSharing - ok
14:10:20.0444 3580	nfrd960         (77889813be4d166cdab78ddba990da92) C:\Windows\system32\drivers\nfrd960.sys
14:10:20.0460 3580	nfrd960 - ok
14:10:20.0491 3580	NlaSvc          (1ee99a89cc788ada662441d1e9830529) C:\Windows\System32\nlasvc.dll
14:10:20.0553 3580	NlaSvc - ok
14:10:20.0584 3580	Npfs            (1e4c4ab5c9b8dd13179bbdc75a2a01f7) C:\Windows\system32\drivers\Npfs.sys
14:10:20.0631 3580	Npfs - ok
14:10:20.0647 3580	nsi             (d54bfdf3e0c953f823b3d0bfe4732528) C:\Windows\system32\nsisvc.dll
14:10:20.0709 3580	nsi - ok
14:10:20.0725 3580	nsiproxy        (e7f5ae18af4168178a642a9247c63001) C:\Windows\system32\drivers\nsiproxy.sys
14:10:20.0772 3580	nsiproxy - ok
14:10:20.0803 3580	Ntfs            (a2f74975097f52a00745f9637451fdd8) C:\Windows\system32\drivers\Ntfs.sys
14:10:20.0865 3580	Ntfs - ok
14:10:20.0881 3580	Null            (9899284589f75fa8724ff3d16aed75c1) C:\Windows\system32\drivers\Null.sys
14:10:20.0896 3580	Null - ok
14:10:20.0943 3580	nvraid          (0a92cb65770442ed0dc44834632f66ad) C:\Windows\system32\drivers\nvraid.sys
14:10:20.0943 3580	nvraid - ok
14:10:20.0959 3580	nvstor          (dab0e87525c10052bf65f06152f37e4a) C:\Windows\system32\drivers\nvstor.sys
14:10:20.0974 3580	nvstor - ok
14:10:21.0006 3580	nv_agp          (270d7cd42d6e3979f6dd0146650f0e05) C:\Windows\system32\drivers\nv_agp.sys
14:10:21.0021 3580	nv_agp - ok
14:10:21.0037 3580	ohci1394        (3589478e4b22ce21b41fa1bfc0b8b8a0) C:\Windows\system32\drivers\ohci1394.sys
14:10:21.0068 3580	ohci1394 - ok
14:10:21.0115 3580	p2pimsvc        (3eac4455472cc2c97107b5291e0dcafe) C:\Windows\system32\pnrpsvc.dll
14:10:21.0130 3580	p2pimsvc - ok
14:10:21.0177 3580	p2psvc          (927463ecb02179f88e4b9a17568c63c3) C:\Windows\system32\p2psvc.dll
14:10:21.0208 3580	p2psvc - ok
14:10:21.0224 3580	Parport         (0086431c29c35be1dbc43f52cc273887) C:\Windows\system32\drivers\parport.sys
14:10:21.0255 3580	Parport - ok
14:10:21.0286 3580	partmgr         (871eadac56b0a4c6512bbe32753ccf79) C:\Windows\system32\drivers\partmgr.sys
14:10:21.0302 3580	partmgr - ok
14:10:21.0318 3580	PcaSvc          (3aeaa8b561e63452c655dc0584922257) C:\Windows\System32\pcasvc.dll
14:10:21.0349 3580	PcaSvc - ok
14:10:21.0380 3580	pci             (94575c0571d1462a0f70bde6bd6ee6b3) C:\Windows\system32\drivers\pci.sys
14:10:21.0380 3580	pci - ok
14:10:21.0396 3580	pciide          (b5b8b5ef2e5cb34df8dcf8831e3534fa) C:\Windows\system32\drivers\pciide.sys
14:10:21.0411 3580	pciide - ok
14:10:21.0427 3580	pcmcia          (b2e81d4e87ce48589f98cb8c05b01f2f) C:\Windows\system32\drivers\pcmcia.sys
14:10:21.0442 3580	pcmcia - ok
14:10:21.0474 3580	pcw             (d6b9c2e1a11a3a4b26a182ffef18f603) C:\Windows\system32\drivers\pcw.sys
14:10:21.0489 3580	pcw - ok
14:10:21.0505 3580	PEAUTH          (68769c3356b3be5d1c732c97b9a80d6e) C:\Windows\system32\drivers\peauth.sys
14:10:21.0583 3580	PEAUTH - ok
14:10:21.0630 3580	PerfHost        (e495e408c93141e8fc72dc0c6046ddfa) C:\Windows\SysWow64\perfhost.exe
14:10:21.0661 3580	PerfHost - ok
14:10:21.0708 3580	pla             (c7cf6a6e137463219e1259e3f0f0dd6c) C:\Windows\system32\pla.dll
14:10:21.0786 3580	pla - ok
14:10:21.0832 3580	PlugPlay        (25fbdef06c4d92815b353f6e792c8129) C:\Windows\system32\umpnpmgr.dll
14:10:21.0879 3580	PlugPlay - ok
14:10:21.0910 3580	PNRPAutoReg     (7195581cec9bb7d12abe54036acc2e38) C:\Windows\system32\pnrpauto.dll
14:10:21.0942 3580	PNRPAutoReg - ok
14:10:21.0973 3580	PNRPsvc         (3eac4455472cc2c97107b5291e0dcafe) C:\Windows\system32\pnrpsvc.dll
14:10:21.0988 3580	PNRPsvc - ok
14:10:22.0020 3580	PolicyAgent     (4f15d75adf6156bf56eced6d4a55c389) C:\Windows\System32\ipsecsvc.dll
14:10:22.0066 3580	PolicyAgent - ok
14:10:22.0082 3580	Power           (6ba9d927dded70bd1a9caded45f8b184) C:\Windows\system32\umpo.dll
14:10:22.0113 3580	Power - ok
14:10:22.0160 3580	PptpMiniport    (f92a2c41117a11a00be01ca01a7fcde9) C:\Windows\system32\DRIVERS\raspptp.sys
14:10:22.0207 3580	PptpMiniport - ok
14:10:22.0238 3580	Processor       (0d922e23c041efb1c3fac2a6f943c9bf) C:\Windows\system32\drivers\processr.sys
14:10:22.0254 3580	Processor - ok
14:10:22.0285 3580	ProfSvc         (5c78838b4d166d1a27db3a8a820c799a) C:\Windows\system32\profsvc.dll
14:10:22.0332 3580	ProfSvc - ok
14:10:22.0363 3580	ProtectedStorage (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe
14:10:22.0378 3580	ProtectedStorage - ok
14:10:22.0410 3580	Psched          (0557cf5a2556bd58e26384169d72438d) C:\Windows\system32\DRIVERS\pacer.sys
14:10:22.0425 3580	Psched - ok
14:10:22.0488 3580	ql2300          (a53a15a11ebfd21077463ee2c7afeef0) C:\Windows\system32\drivers\ql2300.sys
14:10:22.0534 3580	ql2300 - ok
14:10:22.0566 3580	ql40xx          (4f6d12b51de1aaeff7dc58c4d75423c8) C:\Windows\system32\drivers\ql40xx.sys
14:10:22.0581 3580	ql40xx - ok
14:10:22.0612 3580	QWAVE           (906191634e99aea92c4816150bda3732) C:\Windows\system32\qwave.dll
14:10:22.0628 3580	QWAVE - ok
14:10:22.0644 3580	QWAVEdrv        (76707bb36430888d9ce9d705398adb6c) C:\Windows\system32\drivers\qwavedrv.sys
14:10:22.0675 3580	QWAVEdrv - ok
14:10:22.0706 3580	RasAcd          (5a0da8ad5762fa2d91678a8a01311704) C:\Windows\system32\DRIVERS\rasacd.sys
14:10:22.0753 3580	RasAcd - ok
14:10:22.0784 3580	RasAgileVpn     (7ecff9b22276b73f43a99a15a6094e90) C:\Windows\system32\DRIVERS\AgileVpn.sys
14:10:22.0846 3580	RasAgileVpn - ok
14:10:22.0878 3580	RasAuto         (8f26510c5383b8dbe976de1cd00fc8c7) C:\Windows\System32\rasauto.dll
14:10:22.0924 3580	RasAuto - ok
14:10:22.0956 3580	Rasl2tp         (471815800ae33e6f1c32fb1b97c490ca) C:\Windows\system32\DRIVERS\rasl2tp.sys
14:10:22.0987 3580	Rasl2tp - ok
14:10:23.0034 3580	RasMan          (ee867a0870fc9e4972ba9eaad35651e2) C:\Windows\System32\rasmans.dll
14:10:23.0065 3580	RasMan - ok
14:10:23.0096 3580	RasPppoe        (855c9b1cd4756c5e9a2aa58a15f58c25) C:\Windows\system32\DRIVERS\raspppoe.sys
14:10:23.0143 3580	RasPppoe - ok
14:10:23.0174 3580	RasSstp         (e8b1e447b008d07ff47d016c2b0eeecb) C:\Windows\system32\DRIVERS\rassstp.sys
14:10:23.0205 3580	RasSstp - ok
14:10:23.0221 3580	rdbss           (77f665941019a1594d887a74f301fa2f) C:\Windows\system32\DRIVERS\rdbss.sys
14:10:23.0252 3580	rdbss - ok
14:10:23.0268 3580	rdpbus          (302da2a0539f2cf54d7c6cc30c1f2d8d) C:\Windows\system32\drivers\rdpbus.sys
14:10:23.0299 3580	rdpbus - ok
14:10:23.0330 3580	RDPCDD          (cea6cc257fc9b7715f1c2b4849286d24) C:\Windows\system32\DRIVERS\RDPCDD.sys
14:10:23.0392 3580	RDPCDD - ok
14:10:23.0408 3580	RDPENCDD        (bb5971a4f00659529a5c44831af22365) C:\Windows\system32\drivers\rdpencdd.sys
14:10:23.0439 3580	RDPENCDD - ok
14:10:23.0486 3580	RDPREFMP        (216f3fa57533d98e1f74ded70113177a) C:\Windows\system32\drivers\rdprefmp.sys
14:10:23.0533 3580	RDPREFMP - ok
14:10:23.0564 3580	RDPWD           (6d76e6433574b058adcb0c50df834492) C:\Windows\system32\drivers\RDPWD.sys
14:10:23.0580 3580	RDPWD - ok
14:10:23.0626 3580	rdyboost        (34ed295fa0121c241bfef24764fc4520) C:\Windows\system32\drivers\rdyboost.sys
14:10:23.0642 3580	rdyboost - ok
14:10:23.0673 3580	RemoteAccess    (254fb7a22d74e5511c73a3f6d802f192) C:\Windows\System32\mprdim.dll
14:10:23.0720 3580	RemoteAccess - ok
14:10:23.0751 3580	RemoteRegistry  (e4d94f24081440b5fc5aa556c7c62702) C:\Windows\system32\regsvc.dll
14:10:23.0798 3580	RemoteRegistry - ok
14:10:23.0829 3580	RpcEptMapper    (e4dc58cf7b3ea515ae917ff0d402a7bb) C:\Windows\System32\RpcEpMap.dll
14:10:23.0860 3580	RpcEptMapper - ok
14:10:23.0892 3580	RpcLocator      (d5ba242d4cf8e384db90e6a8ed850b8c) C:\Windows\system32\locator.exe
14:10:23.0923 3580	RpcLocator - ok
14:10:23.0954 3580	RpcSs           (5c627d1b1138676c0a7ab2c2c190d123) C:\Windows\system32\rpcss.dll
14:10:24.0001 3580	RpcSs - ok
14:10:24.0032 3580	rspndr          (ddc86e4f8e7456261e637e3552e804ff) C:\Windows\system32\DRIVERS\rspndr.sys
14:10:24.0094 3580	rspndr - ok
14:10:24.0141 3580	RTL8167         (ee082e06a82ff630351d1e0ebbd3d8d0) C:\Windows\system32\DRIVERS\Rt64win7.sys
14:10:24.0157 3580	RTL8167 - ok
14:10:24.0204 3580	RTL8192su       (b3f36b4b3f192ea87ddc119f3a0b3e45) C:\Windows\system32\DRIVERS\RTL8192su.sys
14:10:24.0219 3580	RTL8192su - ok
14:10:24.0250 3580	SamSs           (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe
14:10:24.0266 3580	SamSs - ok
14:10:24.0282 3580	sbp2port        (ac03af3329579fffb455aa2daabbe22b) C:\Windows\system32\drivers\sbp2port.sys
14:10:24.0297 3580	sbp2port - ok
14:10:24.0344 3580	SCardSvr        (9b7395789e3791a3b6d000fe6f8b131e) C:\Windows\System32\SCardSvr.dll
14:10:24.0375 3580	SCardSvr - ok
14:10:24.0406 3580	scfilter        (253f38d0d7074c02ff8deb9836c97d2b) C:\Windows\system32\DRIVERS\scfilter.sys
14:10:24.0438 3580	scfilter - ok
14:10:24.0469 3580	Schedule        (262f6592c3299c005fd6bec90fc4463a) C:\Windows\system32\schedsvc.dll
14:10:24.0516 3580	Schedule - ok
14:10:24.0547 3580	SCPolicySvc     (f17d1d393bbc69c5322fbfafaca28c7f) C:\Windows\System32\certprop.dll
14:10:24.0578 3580	SCPolicySvc - ok
14:10:24.0594 3580	SDRSVC          (6ea4234dc55346e0709560fe7c2c1972) C:\Windows\System32\SDRSVC.dll
14:10:24.0625 3580	SDRSVC - ok
14:10:24.0687 3580	secdrv          (3ea8a16169c26afbeb544e0e48421186) C:\Windows\system32\drivers\secdrv.sys
14:10:24.0734 3580	secdrv - ok
14:10:24.0765 3580	seclogon        (bc617a4e1b4fa8df523a061739a0bd87) C:\Windows\system32\seclogon.dll
14:10:24.0796 3580	seclogon - ok
14:10:24.0828 3580	SENS            (c32ab8fa018ef34c0f113bd501436d21) C:\Windows\System32\sens.dll
14:10:24.0859 3580	SENS - ok
14:10:24.0890 3580	SensrSvc        (0336cffafaab87a11541f1cf1594b2b2) C:\Windows\system32\sensrsvc.dll
14:10:24.0906 3580	SensrSvc - ok
14:10:24.0968 3580	Serenum         (cb624c0035412af0debec78c41f5ca1b) C:\Windows\system32\drivers\serenum.sys
14:10:24.0984 3580	Serenum - ok
14:10:25.0030 3580	Serial          (c1d8e28b2c2adfaec4ba89e9fda69bd6) C:\Windows\system32\drivers\serial.sys
14:10:25.0046 3580	Serial - ok
14:10:25.0108 3580	sermouse        (1c545a7d0691cc4a027396535691c3e3) C:\Windows\system32\drivers\sermouse.sys
14:10:25.0124 3580	sermouse - ok
14:10:25.0171 3580	SessionEnv      (0b6231bf38174a1628c4ac812cc75804) C:\Windows\system32\sessenv.dll
14:10:25.0233 3580	SessionEnv - ok
14:10:25.0264 3580	sffdisk         (a554811bcd09279536440c964ae35bbf) C:\Windows\system32\drivers\sffdisk.sys
14:10:25.0280 3580	sffdisk - ok
14:10:25.0296 3580	sffp_mmc        (ff414f0baefeba59bc6c04b3db0b87bf) C:\Windows\system32\drivers\sffp_mmc.sys
14:10:25.0311 3580	sffp_mmc - ok
14:10:25.0327 3580	sffp_sd         (dd85b78243a19b59f0637dcf284da63c) C:\Windows\system32\drivers\sffp_sd.sys
14:10:25.0358 3580	sffp_sd - ok
14:10:25.0405 3580	sfloppy         (a9d601643a1647211a1ee2ec4e433ff4) C:\Windows\system32\drivers\sfloppy.sys
14:10:25.0436 3580	sfloppy - ok
14:10:25.0467 3580	SharedAccess    (b95f6501a2f8b2e78c697fec401970ce) C:\Windows\System32\ipnathlp.dll
14:10:25.0514 3580	SharedAccess - ok
14:10:25.0545 3580	ShellHWDetection (aaf932b4011d14052955d4b212a4da8d) C:\Windows\System32\shsvcs.dll
14:10:25.0592 3580	ShellHWDetection - ok
14:10:25.0639 3580	SiSRaid2        (843caf1e5fde1ffd5ff768f23a51e2e1) C:\Windows\system32\drivers\SiSRaid2.sys
14:10:25.0639 3580	SiSRaid2 - ok
14:10:25.0670 3580	SiSRaid4        (6a6c106d42e9ffff8b9fcb4f754f6da4) C:\Windows\system32\drivers\sisraid4.sys
14:10:25.0670 3580	SiSRaid4 - ok
14:10:25.0701 3580	Smb             (548260a7b8654e024dc30bf8a7c5baa4) C:\Windows\system32\DRIVERS\smb.sys
14:10:25.0764 3580	Smb - ok
14:10:25.0810 3580	SNMPTRAP        (6313f223e817cc09aa41811daa7f541d) C:\Windows\System32\snmptrap.exe
14:10:25.0842 3580	SNMPTRAP - ok
14:10:25.0873 3580	spldr           (b9e31e5cacdfe584f34f730a677803f9) C:\Windows\system32\drivers\spldr.sys
14:10:25.0873 3580	spldr - ok
14:10:25.0888 3580	Spooler         (b96c17b5dc1424d56eea3a99e97428cd) C:\Windows\System32\spoolsv.exe
14:10:25.0935 3580	Spooler - ok
14:10:25.0982 3580	sppsvc          (e17e0188bb90fae42d83e98707efa59c) C:\Windows\system32\sppsvc.exe
14:10:26.0044 3580	sppsvc - ok
14:10:26.0060 3580	sppuinotify     (93d7d61317f3d4bc4f4e9f8a96a7de45) C:\Windows\system32\sppuinotify.dll
14:10:26.0091 3580	sppuinotify - ok
14:10:26.0138 3580	srv             (441fba48bff01fdb9d5969ebc1838f0b) C:\Windows\system32\DRIVERS\srv.sys
14:10:26.0200 3580	srv - ok
14:10:26.0216 3580	srv2            (b4adebbf5e3677cce9651e0f01f7cc28) C:\Windows\system32\DRIVERS\srv2.sys
14:10:26.0247 3580	srv2 - ok
14:10:26.0278 3580	srvnet          (27e461f0be5bff5fc737328f749538c3) C:\Windows\system32\DRIVERS\srvnet.sys
14:10:26.0294 3580	srvnet - ok
14:10:26.0325 3580	SSDPSRV         (51b52fbd583cde8aa9ba62b8b4298f33) C:\Windows\System32\ssdpsrv.dll
14:10:26.0388 3580	SSDPSRV - ok
14:10:26.0403 3580	SstpSvc         (ab7aebf58dad8daab7a6c45e6a8885cb) C:\Windows\system32\sstpsvc.dll
14:10:26.0466 3580	SstpSvc - ok
14:10:26.0497 3580	stexstor        (f3817967ed533d08327dc73bc4d5542a) C:\Windows\system32\drivers\stexstor.sys
14:10:26.0512 3580	stexstor - ok
14:10:26.0544 3580	stisvc          (8dd52e8e6128f4b2da92ce27402871c1) C:\Windows\System32\wiaservc.dll
14:10:26.0575 3580	stisvc - ok
14:10:26.0622 3580	swenum          (d01ec09b6711a5f8e7e6564a4d0fbc90) C:\Windows\system32\drivers\swenum.sys
14:10:26.0637 3580	swenum - ok
14:10:26.0653 3580	swprv           (e08e46fdd841b7184194011ca1955a0b) C:\Windows\System32\swprv.dll
14:10:26.0731 3580	swprv - ok
14:10:26.0762 3580	SysMain         (bf9ccc0bf39b418c8d0ae8b05cf95b7d) C:\Windows\system32\sysmain.dll
14:10:26.0840 3580	SysMain - ok
14:10:26.0856 3580	TabletInputService (e3c61fd7b7c2557e1f1b0b4cec713585) C:\Windows\System32\TabSvc.dll
14:10:26.0902 3580	TabletInputService - ok
14:10:26.0934 3580	TapiSrv         (40f0849f65d13ee87b9a9ae3c1dd6823) C:\Windows\System32\tapisrv.dll
14:10:26.0996 3580	TapiSrv - ok
14:10:27.0012 3580	TBS             (1be03ac720f4d302ea01d40f588162f6) C:\Windows\System32\tbssvc.dll
14:10:27.0043 3580	TBS - ok
14:10:27.0121 3580	Tcpip           (fc62769e7bff2896035aeed399108162) C:\Windows\system32\drivers\tcpip.sys
14:10:27.0168 3580	Tcpip - ok
14:10:27.0214 3580	TCPIP6          (fc62769e7bff2896035aeed399108162) C:\Windows\system32\DRIVERS\tcpip.sys
14:10:27.0246 3580	TCPIP6 - ok
14:10:27.0277 3580	tcpipreg        (df687e3d8836bfb04fcc0615bf15a519) C:\Windows\system32\drivers\tcpipreg.sys
14:10:27.0324 3580	tcpipreg - ok
14:10:27.0339 3580	TDPIPE          (3371d21011695b16333a3934340c4e7c) C:\Windows\system32\drivers\tdpipe.sys
14:10:27.0355 3580	TDPIPE - ok
14:10:27.0402 3580	TDTCP           (51c5eceb1cdee2468a1748be550cfbc8) C:\Windows\system32\drivers\tdtcp.sys
14:10:27.0417 3580	TDTCP - ok
14:10:27.0433 3580	tdx             (ddad5a7ab24d8b65f8d724f5c20fd806) C:\Windows\system32\DRIVERS\tdx.sys
14:10:27.0480 3580	tdx - ok
14:10:27.0526 3580	TermDD          (561e7e1f06895d78de991e01dd0fb6e5) C:\Windows\system32\drivers\termdd.sys
14:10:27.0542 3580	TermDD - ok
14:10:27.0573 3580	TermService     (2e648163254233755035b46dd7b89123) C:\Windows\System32\termsrv.dll
14:10:27.0636 3580	TermService - ok
14:10:27.0667 3580	Themes          (f0344071948d1a1fa732231785a0664c) C:\Windows\system32\themeservice.dll
14:10:27.0667 3580	Themes - ok
14:10:27.0698 3580	THREADORDER     (e40e80d0304a73e8d269f7141d77250b) C:\Windows\system32\mmcss.dll
14:10:27.0729 3580	THREADORDER - ok
14:10:27.0745 3580	TrkWks          (7e7afd841694f6ac397e99d75cead49d) C:\Windows\System32\trkwks.dll
14:10:27.0776 3580	TrkWks - ok
14:10:27.0823 3580	TrustedInstaller (773212b2aaa24c1e31f10246b15b276c) C:\Windows\servicing\TrustedInstaller.exe
14:10:27.0870 3580	TrustedInstaller - ok
14:10:27.0916 3580	tssecsrv        (ce18b2cdfc837c99e5fae9ca6cba5d30) C:\Windows\system32\DRIVERS\tssecsrv.sys
14:10:27.0979 3580	tssecsrv - ok
14:10:28.0010 3580	TsUsbFlt        (d11c783e3ef9a3c52c0ebe83cc5000e9) C:\Windows\system32\drivers\tsusbflt.sys
14:10:28.0041 3580	TsUsbFlt - ok
14:10:28.0072 3580	TsUsbGD         (9cc2ccae8a84820eaecb886d477cbcb8) C:\Windows\system32\drivers\TsUsbGD.sys
14:10:28.0088 3580	TsUsbGD - ok
14:10:28.0119 3580	tunnel          (3566a8daafa27af944f5d705eaa64894) C:\Windows\system32\DRIVERS\tunnel.sys
14:10:28.0166 3580	tunnel - ok
14:10:28.0182 3580	uagp35          (b4dd609bd7e282bfc683cec7eaaaad67) C:\Windows\system32\drivers\uagp35.sys
14:10:28.0197 3580	uagp35 - ok
14:10:28.0213 3580	udfs            (ff4232a1a64012baa1fd97c7b67df593) C:\Windows\system32\DRIVERS\udfs.sys
14:10:28.0275 3580	udfs - ok
14:10:28.0306 3580	UI0Detect       (3cbdec8d06b9968aba702eba076364a1) C:\Windows\system32\UI0Detect.exe
14:10:28.0338 3580	UI0Detect - ok
14:10:28.0384 3580	uliagpkx        (4bfe1bc28391222894cbf1e7d0e42320) C:\Windows\system32\drivers\uliagpkx.sys
14:10:28.0384 3580	uliagpkx - ok
14:10:28.0431 3580	umbus           (dc54a574663a895c8763af0fa1ff7561) C:\Windows\system32\DRIVERS\umbus.sys
14:10:28.0462 3580	umbus - ok
14:10:28.0494 3580	UmPass          (b2e8e8cb557b156da5493bbddcc1474d) C:\Windows\system32\drivers\umpass.sys
14:10:28.0509 3580	UmPass - ok
14:10:28.0618 3580	UNS             (fc43877b4625f6eb773c98233eb625c5) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
14:10:28.0681 3580	UNS - ok
14:10:28.0696 3580	upnphost        (d47ec6a8e81633dd18d2436b19baf6de) C:\Windows\System32\upnphost.dll
14:10:28.0759 3580	upnphost - ok
14:10:28.0821 3580	USBAAPL64       (aa33fc47ed58c34e6e9261e4f850b7eb) C:\Windows\system32\Drivers\usbaapl64.sys
14:10:28.0837 3580	USBAAPL64 ( UnsignedFile.Multi.Generic ) - warning
14:10:28.0837 3580	USBAAPL64 - detected UnsignedFile.Multi.Generic (1)
14:10:28.0884 3580	usbccgp         (6f1a3157a1c89435352ceb543cdb359c) C:\Windows\system32\DRIVERS\usbccgp.sys
14:10:28.0930 3580	usbccgp - ok
14:10:28.0962 3580	usbcir          (af0892a803fdda7492f595368e3b68e7) C:\Windows\system32\drivers\usbcir.sys
14:10:28.0993 3580	usbcir - ok
14:10:29.0008 3580	usbehci         (c025055fe7b87701eb042095df1a2d7b) C:\Windows\system32\drivers\usbehci.sys
14:10:29.0040 3580	usbehci - ok
14:10:29.0071 3580	usbhub          (287c6c9410b111b68b52ca298f7b8c24) C:\Windows\system32\DRIVERS\usbhub.sys
14:10:29.0086 3580	usbhub - ok
14:10:29.0118 3580	usbohci         (9840fc418b4cbd632d3d0a667a725c31) C:\Windows\system32\drivers\usbohci.sys
14:10:29.0133 3580	usbohci - ok
14:10:29.0180 3580	usbprint        (73188f58fb384e75c4063d29413cee3d) C:\Windows\system32\DRIVERS\usbprint.sys
14:10:29.0211 3580	usbprint - ok
14:10:29.0274 3580	usbscan         (aaa2513c8aed8b54b189fd0c6b1634c0) C:\Windows\system32\DRIVERS\usbscan.sys
14:10:29.0305 3580	usbscan - ok
14:10:29.0320 3580	USBSTOR         (fed648b01349a3c8395a5169db5fb7d6) C:\Windows\system32\DRIVERS\USBSTOR.SYS
14:10:29.0367 3580	USBSTOR - ok
14:10:29.0398 3580	usbuhci         (62069a34518bcf9c1fd9e74b3f6db7cd) C:\Windows\system32\drivers\usbuhci.sys
14:10:29.0430 3580	usbuhci - ok
14:10:29.0461 3580	UxSms           (edbb23cbcf2cdf727d64ff9b51a6070e) C:\Windows\System32\uxsms.dll
14:10:29.0492 3580	UxSms - ok
14:10:29.0523 3580	VaultSvc        (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe
14:10:29.0523 3580	VaultSvc - ok
14:10:29.0554 3580	vdrvroot        (c5c876ccfc083ff3b128f933823e87bd) C:\Windows\system32\drivers\vdrvroot.sys
14:10:29.0570 3580	vdrvroot - ok
14:10:29.0586 3580	vds             (8d6b481601d01a456e75c3210f1830be) C:\Windows\System32\vds.exe
14:10:29.0632 3580	vds - ok
14:10:29.0664 3580	vga             (da4da3f5e02943c2dc8c6ed875de68dd) C:\Windows\system32\DRIVERS\vgapnp.sys
14:10:29.0679 3580	vga - ok
14:10:29.0710 3580	VgaSave         (53e92a310193cb3c03bea963de7d9cfc) C:\Windows\System32\drivers\vga.sys
14:10:29.0773 3580	VgaSave - ok
14:10:29.0804 3580	vhdmp           (2ce2df28c83aeaf30084e1b1eb253cbb) C:\Windows\system32\drivers\vhdmp.sys
14:10:29.0820 3580	vhdmp - ok
14:10:29.0851 3580	viaide          (e5689d93ffe4e5d66c0178761240dd54) C:\Windows\system32\drivers\viaide.sys
14:10:29.0851 3580	viaide - ok
14:10:29.0898 3580	volmgr          (d2aafd421940f640b407aefaaebd91b0) C:\Windows\system32\drivers\volmgr.sys
14:10:29.0913 3580	volmgr - ok
14:10:29.0944 3580	volmgrx         (a255814907c89be58b79ef2f189b843b) C:\Windows\system32\drivers\volmgrx.sys
14:10:29.0960 3580	volmgrx - ok
14:10:29.0991 3580	volsnap         (0d08d2f3b3ff84e433346669b5e0f639) C:\Windows\system32\drivers\volsnap.sys
14:10:30.0007 3580	volsnap - ok
14:10:30.0038 3580	vsmraid         (5e2016ea6ebaca03c04feac5f330d997) C:\Windows\system32\drivers\vsmraid.sys
14:10:30.0054 3580	vsmraid - ok
14:10:30.0100 3580	VSS             (b60ba0bc31b0cb414593e169f6f21cc2) C:\Windows\system32\vssvc.exe
14:10:30.0178 3580	VSS - ok
14:10:30.0225 3580	vwifibus        (36d4720b72b5c5d9cb2b9c29e9df67a1) C:\Windows\system32\DRIVERS\vwifibus.sys
14:10:30.0256 3580	vwifibus - ok
14:10:30.0288 3580	vwififlt        (6a3d66263414ff0d6fa754c646612f3f) C:\Windows\system32\DRIVERS\vwififlt.sys
14:10:30.0319 3580	vwififlt - ok
14:10:30.0366 3580	W32Time         (1c9d80cc3849b3788048078c26486e1a) C:\Windows\system32\w32time.dll
14:10:30.0412 3580	W32Time - ok
14:10:30.0444 3580	WacomPen        (4e9440f4f152a7b944cb1663d3935a3e) C:\Windows\system32\drivers\wacompen.sys
14:10:30.0459 3580	WacomPen - ok
14:10:30.0506 3580	WANARP          (356afd78a6ed4457169241ac3965230c) C:\Windows\system32\DRIVERS\wanarp.sys
14:10:30.0568 3580	WANARP - ok
14:10:30.0584 3580	Wanarpv6        (356afd78a6ed4457169241ac3965230c) C:\Windows\system32\DRIVERS\wanarp.sys
14:10:30.0615 3580	Wanarpv6 - ok
14:10:30.0662 3580	watchmi         (261a725f8acedda695c7fff6d6ede6b5) C:\Program Files (x86)\watchmi\TvdService.exe
14:10:30.0693 3580	watchmi ( UnsignedFile.Multi.Generic ) - warning
14:10:30.0693 3580	watchmi - detected UnsignedFile.Multi.Generic (1)
14:10:30.0740 3580	wbengine        (78f4e7f5c56cb9716238eb57da4b6a75) C:\Windows\system32\wbengine.exe
14:10:30.0802 3580	wbengine - ok
14:10:30.0834 3580	WbioSrvc        (3aa101e8edab2db4131333f4325c76a3) C:\Windows\System32\wbiosrvc.dll
14:10:30.0849 3580	WbioSrvc - ok
14:10:30.0865 3580	wcncsvc         (7368a2afd46e5a4481d1de9d14848edd) C:\Windows\System32\wcncsvc.dll
14:10:30.0896 3580	wcncsvc - ok
14:10:30.0912 3580	WcsPlugInService (20f7441334b18cee52027661df4a6129) C:\Windows\System32\WcsPlugInService.dll
14:10:30.0958 3580	WcsPlugInService - ok
14:10:31.0005 3580	Wd              (72889e16ff12ba0f235467d6091b17dc) C:\Windows\system32\drivers\wd.sys
14:10:31.0005 3580	Wd - ok
14:10:31.0052 3580	Wdf01000        (441bd2d7b4f98134c3a4f9fa570fd250) C:\Windows\system32\drivers\Wdf01000.sys
14:10:31.0083 3580	Wdf01000 - ok
14:10:31.0099 3580	WdiServiceHost  (bf1fc3f79b863c914687a737c2f3d681) C:\Windows\system32\wdi.dll
14:10:31.0177 3580	WdiServiceHost - ok
14:10:31.0177 3580	WdiSystemHost   (bf1fc3f79b863c914687a737c2f3d681) C:\Windows\system32\wdi.dll
14:10:31.0192 3580	WdiSystemHost - ok
14:10:31.0224 3580	WebClient       (3db6d04e1c64272f8b14eb8bc4616280) C:\Windows\System32\webclnt.dll
14:10:31.0255 3580	WebClient - ok
14:10:31.0255 3580	Wecsvc          (c749025a679c5103e575e3b48e092c43) C:\Windows\system32\wecsvc.dll
14:10:31.0286 3580	Wecsvc - ok
14:10:31.0317 3580	wercplsupport   (7e591867422dc788b9e5bd337a669a08) C:\Windows\System32\wercplsupport.dll
14:10:31.0364 3580	wercplsupport - ok
14:10:31.0395 3580	WerSvc          (6d137963730144698cbd10f202e9f251) C:\Windows\System32\WerSvc.dll
14:10:31.0426 3580	WerSvc - ok
14:10:31.0489 3580	WfpLwf          (611b23304bf067451a9fdee01fbdd725) C:\Windows\system32\DRIVERS\wfplwf.sys
14:10:31.0520 3580	WfpLwf - ok
14:10:31.0536 3580	WIMMount        (05ecaec3e4529a7153b3136ceb49f0ec) C:\Windows\system32\drivers\wimmount.sys
14:10:31.0536 3580	WIMMount - ok
14:10:31.0567 3580	WinDefend - ok
14:10:31.0567 3580	WinHttpAutoProxySvc - ok
14:10:31.0629 3580	Winmgmt         (19b07e7e8915d701225da41cb3877306) C:\Windows\system32\wbem\WMIsvc.dll
14:10:31.0676 3580	Winmgmt - ok
14:10:31.0738 3580	WinRM           (bcb1310604aa415c4508708975b3931e) C:\Windows\system32\WsmSvc.dll
14:10:31.0801 3580	WinRM - ok
14:10:31.0848 3580	WinUsb          (fe88b288356e7b47b74b13372add906d) C:\Windows\system32\DRIVERS\WinUsb.sys
14:10:31.0879 3580	WinUsb - ok
14:10:31.0926 3580	Wlansvc         (4fada86e62f18a1b2f42ba18ae24e6aa) C:\Windows\System32\wlansvc.dll
14:10:31.0972 3580	Wlansvc - ok
14:10:32.0019 3580	wlcrasvc        (06c8fa1cf39de6a735b54d906ba791c6) C:\Program Files\Windows Live\Mesh\wlcrasvc.exe
14:10:32.0035 3580	wlcrasvc - ok
14:10:32.0113 3580	wlidsvc         (2bacd71123f42cea603f4e205e1ae337) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
14:10:32.0175 3580	wlidsvc - ok
14:10:32.0238 3580	WmiAcpi         (f6ff8944478594d0e414d3f048f0d778) C:\Windows\system32\drivers\wmiacpi.sys
14:10:32.0269 3580	WmiAcpi - ok
14:10:32.0331 3580	wmiApSrv        (38b84c94c5a8af291adfea478ae54f93) C:\Windows\system32\wbem\WmiApSrv.exe
14:10:32.0362 3580	wmiApSrv - ok
14:10:32.0409 3580	WMPNetworkSvc - ok
14:10:32.0425 3580	WPCSvc          (96c6e7100d724c69fcf9e7bf590d1dca) C:\Windows\System32\wpcsvc.dll
14:10:32.0456 3580	WPCSvc - ok
14:10:32.0472 3580	WPDBusEnum      (93221146d4ebbf314c29b23cd6cc391d) C:\Windows\system32\wpdbusenum.dll
14:10:32.0487 3580	WPDBusEnum - ok
14:10:32.0534 3580	ws2ifsl         (6bcc1d7d2fd2453957c5479a32364e52) C:\Windows\system32\drivers\ws2ifsl.sys
14:10:32.0596 3580	ws2ifsl - ok
14:10:32.0612 3580	wscsvc          (e8b1fe6669397d1772d8196df0e57a9e) C:\Windows\System32\wscsvc.dll
14:10:32.0628 3580	wscsvc - ok
14:10:32.0643 3580	WSearch - ok
14:10:32.0659 3580	wsvd            (82e8f5aa03df7dbdb8a33f700d5d8cda) C:\Windows\system32\DRIVERS\wsvd.sys
14:10:32.0674 3580	wsvd - ok
14:10:32.0721 3580	wuauserv        (9df12edbc698b0bc353b3ef84861e430) C:\Windows\system32\wuaueng.dll
14:10:32.0830 3580	wuauserv - ok
14:10:32.0862 3580	WudfPf          (d3381dc54c34d79b22cee0d65ba91b7c) C:\Windows\system32\drivers\WudfPf.sys
14:10:32.0893 3580	WudfPf - ok
14:10:32.0924 3580	WUDFRd          (cf8d590be3373029d57af80914190682) C:\Windows\system32\DRIVERS\WUDFRd.sys
14:10:32.0955 3580	WUDFRd - ok
14:10:32.0986 3580	wudfsvc         (7a95c95b6c4cf292d689106bcae49543) C:\Windows\System32\WUDFSvc.dll
14:10:33.0002 3580	wudfsvc - ok
14:10:33.0018 3580	WwanSvc         (9a3452b3c2a46c073166c5cf49fad1ae) C:\Windows\System32\wwansvc.dll
14:10:33.0049 3580	WwanSvc - ok
14:10:33.0080 3580	MBR (0x1B8)     (eb2571b16b316c9fe5aa1c4797ff61ee) \Device\Harddisk0\DR0
14:10:34.0671 3580	\Device\Harddisk0\DR0 - ok
14:10:34.0702 3580	Boot (0x1200)   (619a03a875d85497d559fa3e19e9de27) \Device\Harddisk0\DR0\Partition0
14:10:34.0702 3580	\Device\Harddisk0\DR0\Partition0 - ok
14:10:34.0718 3580	Boot (0x1200)   (dc01d6940eccfb560d0027e5a877383b) \Device\Harddisk0\DR0\Partition1
14:10:34.0718 3580	\Device\Harddisk0\DR0\Partition1 - ok
14:10:34.0734 3580	Boot (0x1200)   (60493bfdb0879334bfeb5a7cca6fd67a) \Device\Harddisk0\DR0\Partition2
14:10:34.0734 3580	\Device\Harddisk0\DR0\Partition2 - ok
14:10:34.0734 3580	============================================================
14:10:34.0734 3580	Scan finished
14:10:34.0734 3580	============================================================
14:10:34.0749 4860	Detected object count: 2
14:10:34.0749 4860	Actual detected object count: 2
14:10:50.0833 4860	USBAAPL64 ( UnsignedFile.Multi.Generic ) - skipped by user
14:10:50.0833 4860	USBAAPL64 ( UnsignedFile.Multi.Generic ) - User select action: Skip 
14:10:50.0833 4860	watchmi ( UnsignedFile.Multi.Generic ) - skipped by user
14:10:50.0833 4860	watchmi ( UnsignedFile.Multi.Generic ) - User select action: Skip
         

Alt 04.04.2012, 13:25   #20
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Windows-Systemblockierung paysave - Standard

Windows-Systemblockierung paysave



Dann bitte jetzt CF ausführen:

ComboFix

Ein Leitfaden und Tutorium zur Nutzung von ComboFix
  • Schliesse alle Programme, vor allem dein Antivirenprogramm und andere Hintergrundwächter sowie deinen Internetbrowser.
  • Starte combofix.exe von deinem Desktop aus, bestätige die Warnmeldungen, führe die Updates durch (falls vorgeschlagen), installiere die Wiederherstellungskonsole (falls vorgeschlagen) und lass dein System durchsuchen.
    Vermeide es auch während Combofix läuft die Maus und Tastatur zu benutzen.
  • Im Anschluss öffnet sich automatisch eine combofix.txt, diesen Inhalt bitte kopieren ([Strg]a, [Strg]c) und in deinen Beitrag einfügen ([Strg]v). Die Datei findest du außerdem unter: C:\ComboFix.txt.
Wichtiger Hinweis:
Combofix darf ausschließlich ausgeführt werden, wenn ein Kompetenzler dies ausdrücklich empfohlen hat!

Es sollte nie auf eigene Initiative hin ausgeführt werden! Eine falsche Benutzung kann ernsthafte Computerprobleme nach sich ziehen und eine Bereinigung der Infektion noch erschweren.

Solltest du nach der Ausführung von Combofix Probleme beim Starten von Anwendungen haben und Meldungen erhalten wie

Zitat:
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
startest du Windows dann manuell neu und die Fehlermeldungen sollten nicht mehr auftauchen.

__________________
Logfiles bitte immer in CODE-Tags posten

Alt 04.04.2012, 16:21   #21
MR_FRE
 
Windows-Systemblockierung paysave - Standard

Windows-Systemblockierung paysave



Code:
ATTFilter
ComboFix 12-04-04.02 - Effenberger 04.04.2012  16:35:43.1.4 - x64
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.49.1031.18.6126.4599 [GMT 2:00]
ausgeführt von:: c:\users\Effenberger\Desktop\ComboFix.exe
AV: Avira Desktop *Disabled/Updated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
SP: Avira Desktop *Disabled/Updated* {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
(((((((((((((((((((((((   Dateien erstellt von 2012-03-04 bis 2012-04-04  ))))))))))))))))))))))))))))))
.
.
2012-04-04 14:39 . 2012-04-04 14:39	--------	d-----w-	c:\users\Default\AppData\Local\temp
2012-04-04 14:31 . 2002-07-25 15:06	282624	----a-w-	c:\program files (x86)\Common Files\InstallShield\UpdateService\agent.exe
2012-04-04 14:30 . 2012-04-04 14:30	--------	d-----w-	c:\programdata\UDL
2012-04-04 14:29 . 2012-04-04 14:29	--------	d-----w-	c:\program files (x86)\EPSON Print CD
2012-04-04 14:28 . 2003-02-27 14:12	696320	----a-w-	c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iKernel.dll
2012-04-04 14:28 . 2002-12-05 12:10	155648	----a-w-	c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iuser.dll
2012-04-04 14:28 . 2002-12-02 13:22	5632	----a-w-	c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\DotNetInstaller.exe
2012-04-04 14:28 . 2002-12-02 11:33	57344	----a-w-	c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\ctor.dll
2012-04-04 14:28 . 2002-12-02 11:33	237568	----a-w-	c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iscript.dll
2012-04-04 14:28 . 2012-04-04 14:28	282756	----a-w-	c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\setup.dll
2012-04-04 14:28 . 2012-04-04 14:28	163972	----a-w-	c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iGdi.dll
2012-04-04 12:59 . 2006-10-30 22:10	120992	----a-w-	c:\windows\SysWow64\EpPicPrt.dll
2012-04-04 12:59 . 2006-10-19 22:10	80024	----a-w-	c:\windows\SysWow64\PICSDK.dll
2012-04-04 12:59 . 2006-10-19 22:10	501912	----a-w-	c:\windows\SysWow64\PICSDK2.dll
2012-04-04 12:59 . 2006-10-19 22:10	108704	----a-w-	c:\windows\SysWow64\PICEntry.dll
2012-04-04 12:59 . 2006-10-30 22:10	71840	----a-w-	c:\windows\SysWow64\EPPicMgr.dll
2012-04-04 12:59 . 2012-04-04 12:59	--------	d-----w-	c:\users\Effenberger\AppData\Roaming\InstallShield
2012-04-04 12:51 . 2012-04-04 12:51	--------	d-----w-	c:\users\Effenberger\AppData\Roaming\EPSON
2012-04-04 12:27 . 2012-04-04 12:27	--------	d-----w-	c:\program files\EPSON
2012-04-04 12:26 . 2012-04-04 14:29	--------	d-----w-	c:\program files (x86)\epson
2012-04-04 12:26 . 2007-04-17 22:00	101888	----a-w-	c:\windows\system32\esxcwiad.dll
2012-04-03 20:55 . 2012-04-03 20:55	--------	d-----w-	c:\program files (x86)\7-Zip
2012-04-03 20:54 . 2012-03-20 01:51	8669240	----a-w-	c:\programdata\Microsoft\Windows Defender\Definition Updates\{1F2AE9E3-EAB6-44A2-9261-F33BBED2E3DD}\mpengine.dll
2012-04-02 19:35 . 2012-04-02 19:35	--------	d-----w-	C:\_OTL
2012-04-02 19:30 . 2012-04-02 19:30	--------	d-----w-	c:\users\Effenberger\AppData\Roaming\Avira
2012-04-02 19:25 . 2012-01-31 06:56	97312	----a-w-	c:\windows\system32\drivers\avgntflt.sys
2012-04-02 19:25 . 2012-01-31 06:56	132320	----a-w-	c:\windows\system32\drivers\avipbb.sys
2012-04-02 19:25 . 2011-09-16 14:08	27760	----a-w-	c:\windows\system32\drivers\avkmgr.sys
2012-04-02 19:25 . 2012-04-02 19:25	--------	d-----w-	c:\programdata\Avira
2012-04-02 19:25 . 2012-04-02 19:25	--------	d-----w-	c:\program files (x86)\Avira
2012-04-02 19:18 . 2012-04-02 19:18	--------	d-----w-	c:\users\Effenberger\AppData\Roaming\OpenOffice.org
2012-04-02 19:17 . 2012-04-02 19:17	--------	d-----w-	c:\program files (x86)\OpenOffice.org 3
2012-04-02 10:27 . 2012-04-02 10:27	--------	d-----w-	c:\program files\iPod
2012-04-02 10:27 . 2012-04-02 10:28	--------	d-----w-	c:\program files\iTunes
2012-04-02 10:27 . 2012-04-02 10:28	--------	d-----w-	c:\program files (x86)\iTunes
2012-03-28 10:06 . 2012-03-28 10:06	592824	----a-w-	c:\program files (x86)\Mozilla Firefox\gkmedias.dll
2012-03-28 10:06 . 2012-03-28 10:06	44472	----a-w-	c:\program files (x86)\Mozilla Firefox\mozglue.dll
2012-03-27 13:21 . 2012-03-27 13:21	--------	d-----w-	c:\program files (x86)\ESET
2012-03-27 12:45 . 2012-03-27 12:45	--------	d-----w-	c:\users\Effenberger\AppData\Roaming\Malwarebytes
2012-03-27 12:45 . 2012-03-27 12:45	--------	d-----w-	c:\program files (x86)\Malwarebytes' Anti-Malware
2012-03-27 12:45 . 2012-03-27 12:45	--------	d-----w-	c:\programdata\Malwarebytes
2012-03-27 12:45 . 2011-12-10 13:24	23152	----a-w-	c:\windows\system32\drivers\mbam.sys
2012-03-27 12:41 . 2012-03-27 12:41	--------	d-----w-	c:\users\Effenberger\AppData\Local\ElevatedDiagnostics
2012-03-26 15:50 . 2012-03-26 15:50	--------	d-----w-	c:\users\Effenberger\AppData\Local\Diagnostics
2012-03-26 15:35 . 2009-07-30 00:36	540192	----a-w-	c:\windows\system32\NVUNINST.EXE
2012-03-22 15:12 . 2012-03-22 16:01	--------	d-----w-	c:\users\Effenberger\AppData\Roaming\CyberLink
2012-03-21 19:35 . 2012-03-14 16:23	65024	----a-w-	c:\windows\system32\pdfcmon.dll
2012-03-21 19:35 . 2005-04-15 18:58	1071088	----a-w-	c:\windows\SysWow64\MSCOMCTL.OCX
2012-03-21 19:35 . 2004-03-08 23:00	662288	----a-w-	c:\windows\SysWow64\MSCOMCT2.OCX
2012-03-21 19:35 . 1998-06-23 23:00	137000	----a-w-	c:\windows\SysWow64\MSMAPI32.OCX
2012-03-21 19:35 . 2012-03-21 19:35	--------	d-----w-	c:\program files (x86)\PDFCreator
2012-03-21 19:35 . 1998-07-06 16:56	125712	----a-w-	c:\windows\SysWow64\VB6DE.DLL
2012-03-21 19:35 . 1998-07-06 16:55	158208	----a-w-	c:\windows\SysWow64\MSCMCDE.DLL
2012-03-21 19:35 . 1998-07-06 16:55	64512	----a-w-	c:\windows\SysWow64\MSCC2DE.DLL
2012-03-21 19:35 . 1998-07-05 23:00	23552	----a-w-	c:\windows\SysWow64\MSMPIDE.DLL
2012-03-21 02:08 . 2012-03-21 02:08	--------	d-----w-	c:\program files (x86)\GUM4AD7.tmp
2012-03-14 04:40 . 2011-11-19 15:20	5559152	----a-w-	c:\windows\system32\ntoskrnl.exe
2012-03-14 04:40 . 2011-11-19 14:50	3968368	----a-w-	c:\windows\SysWow64\ntkrnlpa.exe
2012-03-14 04:40 . 2011-11-19 14:50	3913584	----a-w-	c:\windows\SysWow64\ntoskrnl.exe
2012-03-14 04:31 . 2012-02-03 04:34	3145728	----a-w-	c:\windows\system32\win32k.sys
2012-03-14 04:31 . 2012-02-10 06:36	1544192	----a-w-	c:\windows\system32\DWrite.dll
2012-03-14 04:31 . 2012-02-10 05:38	1077248	----a-w-	c:\windows\SysWow64\DWrite.dll
2012-03-13 17:38 . 2012-02-17 06:38	1031680	----a-w-	c:\windows\system32\rdpcore.dll
2012-03-13 17:38 . 2012-02-17 05:34	826880	----a-w-	c:\windows\SysWow64\rdpcore.dll
2012-03-13 17:38 . 2012-02-17 04:58	210944	----a-w-	c:\windows\system32\drivers\rdpwd.sys
2012-03-13 17:38 . 2012-02-17 04:57	23552	----a-w-	c:\windows\system32\drivers\tdtcp.sys
2012-03-13 17:38 . 2012-01-25 06:38	77312	----a-w-	c:\windows\system32\rdpwsx.dll
2012-03-13 17:38 . 2012-01-25 06:38	149504	----a-w-	c:\windows\system32\rdpcorekmts.dll
2012-03-13 17:38 . 2012-01-25 06:33	9216	----a-w-	c:\windows\system32\rdrmemptylst.exe
2012-03-12 18:36 . 2012-03-12 18:36	--------	d-----w-	c:\program files (x86)\Common Files\McNeel Shared
2012-03-12 18:36 . 2012-03-12 18:36	--------	d-----w-	c:\program files (x86)\Rhinoceros 4.0
2012-03-10 12:29 . 2012-03-10 12:29	--------	d-----w-	c:\programdata\McAfee
2012-03-10 12:29 . 2012-03-10 12:29	--------	d-----w-	c:\windows\system32\Macromed
2012-03-05 14:46 . 2012-03-05 14:46	--------	d-----w-	c:\users\Effenberger\AppData\Local\Mozilla
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-03-10 12:29 . 2011-08-22 17:09	414368	----a-w-	c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2012-02-23 07:18 . 2010-11-21 03:27	279656	------w-	c:\windows\system32\MpSigStub.exe
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-21 1475584]
"swg"="c:\program files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2012-02-18 39408]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"IAStorIcon"="c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" [2011-05-20 284440]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-01-03 843712]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2011-10-14 343168]
"CLMLServer"="c:\program files (x86)\CyberLink\Power2Go\CLMLSvc.exe" [2010-08-03 107816]
"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2012-02-20 59240]
"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2012-03-27 421736]
"avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2012-01-31 258512]
.
c:\users\Effenberger\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OpenOffice.org 3.3.lnk - c:\program files (x86)\OpenOffice.org 3\program\quickstart.exe [2010-12-13 1198592]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
watchmi tray.lnk - c:\windows\Installer\{409DC300-28AF-468F-9624-1F3309701881}\SHCT_TRAY_PROGRAMG_A10D8603999C4E9488776EF2533C58C9.exe [2012-2-18 300928]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages	REG_MULTI_SZ   	kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 gupdate;Google Update-Dienst (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-02-18 136176]
R3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64;c:\program files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [2012-02-20 1431888]
R3 gupdatem;Google Update-Dienst (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-02-18 136176]
R3 RTL8192su;Realtek RTL8192SU Wireless LAN 802.11n USB 2.0 Network Adapter;c:\windows\system32\DRIVERS\RTL8192su.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [x]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys [x]
R3 wsvd;wsvd;c:\windows\system32\DRIVERS\wsvd.sys [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-23 57184]
S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys [x]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x]
S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-01-03 63928]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [x]
S2 AntiVirSchedulerService;Avira Planer;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [2012-01-31 86224]
S2 Autodesk Content Service;Autodesk Content Service;c:\program files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [2011-02-02 18656]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2011-05-20 13592]
S2 MemeoBackgroundService;MemeoBackgroundService;c:\program files (x86)\Memeo\AutoBackup\MemeoBackgroundService.exe [2011-09-28 25824]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2011-03-11 2656280]
S2 watchmi;watchmi service;c:\program files (x86)\watchmi\TvdService.exe [2011-10-07 70144]
S3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atikmdag.sys [x]
S3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [x]
S3 asmthub3;ASMedia USB3 Hub Service;c:\windows\system32\drivers\asmthub3.sys [x]
S3 asmtxhci;ASMEDIA XHCI Service;c:\windows\system32\drivers\asmtxhci.sys [x]
S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys [x]
S3 MEIx64;Intel(R) Management Engine Interface;c:\windows\system32\drivers\HECIx64.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [x]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*NewlyCreated* - WS2IFSL
.
Inhalt des "geplante Tasks" Ordners
.
2012-04-04 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-02-18 12:47]
.
2012-04-04 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-02-18 12:47]
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2011-08-16 12673128]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"LoadAppInit_DLLs"=0x0
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.google.com/ig/redirectdomain?brand=MDNF&bmod=MDNF
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = *.local
IE: {{0B65DCC9-1740-43dc-B19C-4F309FB6A6CA} - hxxp://rover.ebay.com/rover/1/707-37276-17534-31/4
TCP: DhcpNameServer = 192.168.2.1
FF - ProfilePath - c:\users\Effenberger\AppData\Roaming\Mozilla\Firefox\Profiles\qxrl2vay.default\
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.htm\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ChromeHTML"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.html\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ChromeHTML"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.shtml\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ChromeHTML"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xht\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ChromeHTML"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xhtml\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ChromeHTML"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil11f_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil11f_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11f.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11f.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11f.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11f.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\program files (x86)\Avira\AntiVir Desktop\avguard.exe
c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\program files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2012-04-04  16:43:54 - PC wurde neu gestartet
ComboFix-quarantined-files.txt  2012-04-04 14:43
.
Vor Suchlauf: 8 Verzeichnis(se), 381.736.480.768 Bytes frei
Nach Suchlauf: 11 Verzeichnis(se), 381.575.446.528 Bytes frei
.
- - End Of File - - 61EC623981052EAC03FE2EEAA279DA77
         

Alt 04.04.2012, 21:53   #22
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Windows-Systemblockierung paysave - Standard

Windows-Systemblockierung paysave



Downloade dir bitte aswMBR.exe und speichere die Datei auf deinem Desktop.

Hinweis: Bitte den Virenscanner abstellen bevor du aswMBR ausführst, denn v.a. Avira meldet darin oft einen Fehalalrm!
  • Starte die aswMBR.exe Vista und Win7 User aswMBR per Rechtsklick "als Administrator ausführen"
  • Das Tool wird dich fragen, ob Du mit der aktuellen Virendefinition von AVAST! dein System scannen willst. Beantworte diese Frage bitte mit Ja. (Sollte deine Firewall fragen, bitte den Zugriff auf das Internet zulassen) Der Download der Definitionen kann je nach Verbindung eine Weile dauern.
  • Klicke auf Scan.
  • Warte bitte bis Scan finished successfully im DOS Fenster steht.
  • Drücke auf Save Log und speichere diese auf dem Desktop.
Poste mir die aswMBR.txt in deiner nächsten Antwort. Wichtig: Drücke keinesfalls einen der Fix Buttons ohne Anweisung Hinweis: Sollte der Scan Button ausgeblendet sein, schließe das Tool und starte es erneut. Sollte es erneut nicht klappen teile mir das bitte mit.

Noch ein Hinweis: Sollte aswMBR abstürzen und es kommt eine Meldung wie "aswMBR.exe funktioniert nicht mehr, dann mach Folgendes:
Starte aswMBR neu, wähle unten links im Drop-Down-Menü (unten links im Fenster von aswMBR) bei "AV scan" (none) aus und klick nochmal auf den Scan-Button.
__________________
Logfiles bitte immer in CODE-Tags posten

Alt 05.04.2012, 12:32   #23
MR_FRE
 
Windows-Systemblockierung paysave - Standard

Windows-Systemblockierung paysave



Code:
ATTFilter
aswMBR version 0.9.9.1665 Copyright(c) 2011 AVAST Software
Run date: 2012-04-05 13:15:36
-----------------------------
13:15:36.094    OS Version: Windows x64 6.1.7601 Service Pack 1
13:15:36.094    Number of processors: 4 586 0x2A07
13:15:36.094    ComputerName: EFFENBERGER-PC  UserName: Effenberger
13:15:38.184    Initialize success
13:19:18.140    AVAST engine defs: 12040500
13:24:09.189    Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1
13:24:09.189    Disk 0 Vendor: WDC_WD50 15.0 Size: 476940MB BusType: 3
13:24:09.205    Disk 0 MBR read successfully
13:24:09.205    Disk 0 MBR scan
13:24:09.205    Disk 0 unknown MBR code
13:24:09.220    Disk 0 Partition 1 80 (A) 07    HPFS/NTFS NTFS          100 MB offset 2048
13:24:09.236    Disk 0 Partition 2 00     07    HPFS/NTFS NTFS       424614 MB offset 206848
13:24:09.252    Disk 0 Partition 3 00     07    HPFS/NTFS NTFS        51200 MB offset 869816320
13:24:09.267    Disk 0 Partition 4 00     12  Compaq diag NTFS         1024 MB offset 974673920
13:24:09.314    Disk 0 scanning C:\Windows\system32\drivers
13:24:15.850    Service scanning
13:24:30.312    Modules scanning
13:24:30.312    Disk 0 trace - called modules:
13:24:30.327    ntoskrnl.exe CLASSPNP.SYS disk.sys iaStor.sys hal.dll 
13:24:30.327    1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa80087d5060]
13:24:30.343    3 CLASSPNP.SYS[fffff88001d6f43f] -> nt!IofCallDriver -> \Device\Ide\IAAStorageDevice-1[0xfffffa8005f5f050]
13:24:31.279    AVAST engine scan C:\Windows
13:24:33.120    AVAST engine scan C:\Windows\system32
13:26:12.570    AVAST engine scan C:\Windows\system32\drivers
13:26:20.479    AVAST engine scan C:\Users\Effenberger
13:27:02.053    AVAST engine scan C:\ProgramData
13:27:54.937    Scan finished successfully
13:31:01.358    Disk 0 MBR has been saved successfully to "C:\Users\Effenberger\Desktop\MBR.dat"
13:31:01.358    The log file has been saved successfully to "C:\Users\Effenberger\Desktop\aswMBR.txt"
         

Alt 05.04.2012, 14:01   #24
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Windows-Systemblockierung paysave - Standard

Windows-Systemblockierung paysave



Wir sollten den MBR fixen, sichere für den Fall der Fälle ALLE wichtigen Daten, auch wenn meistens alles glatt geht.

Hinweis: Mach bitte NICHT den MBR-Fix, wenn du noch andere Betriebssysteme wie zB Ubuntu installiert hast, ein MBR-Fix mit Windows-Tools macht ein parallel installiertes (Dualboot) Linux unbootbar.
Mach den Fix auch dann nicht, wenn du zB mit TrueCrypt oder anderen Verschlüsselungsprogrammen eine Vollverschlüsselung der Windowspartition bzw. gesamten Festplatte hast


Starte nach der Datensicherung aswmbr erneut und klick auf den Button FIXMBR.

Hinweis: Bitte den Virenscanner abstellen bevor du aswMBR ausführst, denn v.a. Avira meldet darin oft einen Fehalalrm!

Anschließend Windows neu starten und ein neues Log mit aswMBR machen.
__________________
Logfiles bitte immer in CODE-Tags posten

Alt 06.04.2012, 15:43   #25
MR_FRE
 
Windows-Systemblockierung paysave - Standard

Windows-Systemblockierung paysave



Code:
ATTFilter
aswMBR version 0.9.9.1665 Copyright(c) 2011 AVAST Software
Run date: 2012-04-06 16:30:52
-----------------------------
16:30:52.068    OS Version: Windows x64 6.1.7601 Service Pack 1
16:30:52.068    Number of processors: 4 586 0x2A07
16:30:52.068    ComputerName: EFFENBERGER-PC  UserName: Effenberger
16:30:54.112    Initialize success
16:30:57.404    AVAST engine defs: 12040500
16:31:04.564    Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1
16:31:04.564    Disk 0 Vendor: WDC_WD50 15.0 Size: 476940MB BusType: 3
16:31:04.580    Disk 0 MBR read successfully
16:31:04.580    Disk 0 MBR scan
16:31:04.595    Disk 0 Windows 7 default MBR code
16:31:04.595    Disk 0 Partition 1 80 (A) 07    HPFS/NTFS NTFS          100 MB offset 2048
16:31:04.595    Disk 0 Partition 2 00     07    HPFS/NTFS NTFS       424614 MB offset 206848
16:31:04.626    Disk 0 Partition 3 00     07    HPFS/NTFS NTFS        51200 MB offset 869816320
16:31:04.642    Disk 0 Partition 4 00     12  Compaq diag NTFS         1024 MB offset 974673920
16:31:04.689    Disk 0 scanning C:\Windows\system32\drivers
16:31:12.146    Service scanning
16:31:29.633    Modules scanning
16:31:29.633    Disk 0 trace - called modules:
16:31:29.649    ntoskrnl.exe CLASSPNP.SYS disk.sys iaStor.sys hal.dll 
16:31:29.649    1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa80087d7060]
16:31:29.664    3 CLASSPNP.SYS[fffff88001da043f] -> nt!IofCallDriver -> \Device\Ide\IAAStorageDevice-1[0xfffffa8005f0f050]
16:31:31.521    AVAST engine scan C:\Windows
16:31:34.048    AVAST engine scan C:\Windows\system32
16:33:31.173    AVAST engine scan C:\Windows\system32\drivers
16:33:39.815    AVAST engine scan C:\Users\Effenberger
16:34:29.704    AVAST engine scan C:\ProgramData
16:35:25.084    Scan finished successfully
16:42:04.821    Disk 0 MBR has been saved successfully to "C:\Users\Effenberger\Desktop\MBR.dat"
16:42:04.821    The log file has been saved successfully to "C:\Users\Effenberger\Desktop\aswMBR1.txt"
         

Alt 06.04.2012, 15:46   #26
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Windows-Systemblockierung paysave - Standard

Windows-Systemblockierung paysave



Sieht ok aus. Mach bitte zur Kontrolle Vollscans mit Malwarebytes und SUPERAntiSpyware und poste die Logs.
Denk dran beide Tools zu updaten vor dem Scan!!
__________________
Logfiles bitte immer in CODE-Tags posten

Alt 06.04.2012, 16:42   #27
MR_FRE
 
Windows-Systemblockierung paysave - Standard

Windows-Systemblockierung paysave



Code:
ATTFilter
Malwarebytes Anti-Malware 1.60.1.1000
www.malwarebytes.org

Datenbank Version: v2012.04.06.05

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
Effenberger :: EFFENBERGER-PC [Administrator]

06.04.2012 17:05:32
mbam-log-2012-04-06 (17-05-32).txt

Art des Suchlaufs: Vollständiger Suchlauf
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 365309
Laufzeit: 24 Minute(n), 44 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 0
(Keine bösartigen Objekte gefunden)

(Ende)
         

Alt 06.04.2012, 16:54   #28
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Windows-Systemblockierung paysave - Standard

Windows-Systemblockierung paysave



Ok, fehlt noch das andere Log
__________________
Logfiles bitte immer in CODE-Tags posten

Alt 06.04.2012, 19:02   #29
MR_FRE
 
Windows-Systemblockierung paysave - Standard

Windows-Systemblockierung paysave



Code:
ATTFilter
SUPERAntiSpyware Scan Log
hxxp://www.superantispyware.com

Generated 04/06/2012 at 06:43 PM

Application Version : 5.0.1146

Core Rules Database Version : 8424
Trace Rules Database Version: 6236

Scan type       : Complete Scan
Total Scan Time : 00:57:46

Operating System Information
Windows 7 Home Premium 64-bit, Service Pack 1 (Build 6.01.7601)
UAC On - Administrator

Memory items scanned      : 853
Memory threats detected   : 0
Registry items scanned    : 66628
Registry threats detected : 0
File items scanned        : 253138
File threats detected     : 289

Adware.Tracking Cookie
	C:\Users\Effenberger\AppData\Roaming\Microsoft\Windows\Cookies\KAZP2L02.txt [ /mediaplex.com ]
	C:\Users\Effenberger\AppData\Roaming\Microsoft\Windows\Cookies\K60P8Q68.txt [ /tracking.quisma.com ]
	C:\Users\Effenberger\AppData\Roaming\Microsoft\Windows\Cookies\FQKUU9R2.txt [ /apmebf.com ]
	C:\Users\Effenberger\AppData\Roaming\Microsoft\Windows\Cookies\NKGWTI2E.txt [ /fastclick.net ]
	C:\USERS\EFFENBERGER\AppData\Roaming\Microsoft\Windows\Cookies\Low\DIA3CCT3.txt [ Cookie:effenberger@smartadserver.com/ ]
	C:\USERS\EFFENBERGER\AppData\Roaming\Microsoft\Windows\Cookies\Low\7KTD8LWU.txt [ Cookie:effenberger@eas4.emediate.eu/ ]
	C:\USERS\EFFENBERGER\AppData\Roaming\Microsoft\Windows\Cookies\Low\WFTH0W60.txt [ Cookie:effenberger@im.banner.t-online.de/ ]
	C:\USERS\EFFENBERGER\AppData\Roaming\Microsoft\Windows\Cookies\Low\15QM6D3I.txt [ Cookie:effenberger@adtech.de/ ]
	C:\USERS\EFFENBERGER\AppData\Roaming\Microsoft\Windows\Cookies\Low\L3LCGH82.txt [ Cookie:effenberger@adfarm1.adition.com/ ]
	C:\USERS\EFFENBERGER\AppData\Roaming\Microsoft\Windows\Cookies\Low\2K1Y0ATZ.txt [ Cookie:effenberger@ad3.adfarm1.adition.com/ ]
	C:\USERS\EFFENBERGER\Cookies\K60P8Q68.txt [ Cookie:effenberger@tracking.quisma.com/ ]
	C:\USERS\EFFENBERGER\Cookies\FQKUU9R2.txt [ Cookie:effenberger@apmebf.com/ ]
	C:\USERS\EFFENBERGER\Cookies\NKGWTI2E.txt [ Cookie:effenberger@fastclick.net/ ]
	www.sunporno.com [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	.enoratraffic.com [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	www.sunporno.com [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	ad.dyntracker.de [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	www.googleadservices.com [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	www.sunporno.com [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	.sunporno.com [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	.sunporno.com [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	.sunporno.com [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	.sunporno.com [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	.sunporno.com [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	.exoclick.com [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	accounts.google.com [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	accounts.youtube.com [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	.xiti.com [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	.im.banner.t-online.de [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	.adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	.adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	.tracking.quisma.com [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	.revsci.net [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	.adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	.adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	.adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	.adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	.adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	.adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	.adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	.adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	.adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	.adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	.adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	.adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	ad4.adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	.adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	.adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	.adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	ad2.adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	.adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	.apmebf.com [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	.mediaplex.com [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	.amazon-adsystem.com [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	.amazon-adsystem.com [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	.doubleclick.net [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	www.googleadservices.com [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	.webmasterplan.com [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	.webmasterplan.com [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	.revsci.net [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	.revsci.net [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	.revsci.net [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	.revsci.net [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	.revsci.net [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	.webmasterplan.com [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	.webmasterplan.com [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	.zanox.com [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	.webmasterplan.com [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	ad.zanox.com [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	track.effiliation.com [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	track.effiliation.com [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	track.effiliation.com [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	track.effiliation.com [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	track.effiliation.com [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	.invitemedia.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	tracking.mlsat02.de [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.doubleclick.net [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.tracking.mindshare.de [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.tracking.quisma.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	tracking.quisma.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.specificclick.net [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.tradetracker.net [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.imrworldwide.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.imrworldwide.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.webmasterplan.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.tribalfusion.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.ru4.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.ru4.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	tracking.quisma.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	tracking.quisma.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	tracking.quisma.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	tracking.quisma.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.media6degrees.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.media6degrees.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.adtech.de [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.apmebf.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.mediaplex.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.revsci.net [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.im.banner.t-online.de [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.xiti.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	track.effiliation.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	ad.yieldmanager.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.webmasterplan.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.webmasterplan.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	ad.dyntracker.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.im.banner.t-online.de [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.invitemedia.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.atdmt.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.atdmt.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.webmasterplan.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.euros4click.de [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	www.netdebit-counter.de [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.insightexpressai.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.insightexpressai.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.insightexpressai.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.insightexpressai.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.insightexpressai.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.insightexpressai.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.insightexpressai.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	www.pornhub.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	www.pornhub.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.pornhub.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.exoclick.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.pornhub.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.pornhub.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.pornhub.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.pornhub.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.pornhub.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	ads.trafficjunky.net [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.serving-sys.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.serving-sys.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	adx.chip.de [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	adx.chip.de [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	adx.chip.de [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	adx.chip.de [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.tracking.quisma.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	ad3.adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	eas.apm.emediate.eu [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.smartadserver.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.mediaplex.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.im.banner.t-online.de [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.fastclick.net [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.webmasterplan.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.webmasterplan.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	www.zanox-affiliate.de [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.adxvalue.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.webmasterplan.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.tracking.quisma.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	tracking.quisma.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	ad.yieldmanager.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	ad.yieldmanager.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	ad.yieldmanager.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.apmebf.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	count.asnetworks.de [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.realmedia.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.realmedia.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.trafficmp.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.interclick.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.collective-media.net [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.interclick.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.zedo.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.zedo.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.zedo.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.zedo.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.adserver.adtechus.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.realmedia.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.zedo.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.zedo.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.adbrite.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.adbrite.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	network.realmedia.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.trafficmp.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.clickfuse.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.interclick.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.invitemedia.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.invitemedia.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.invitemedia.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.invitemedia.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	tracking.mobile.de [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.webmasterplan.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.clickfuse.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.revsci.net [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.invitemedia.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	ad2.adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.webmasterplan.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.webmasterplan.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.serving-sys.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	ad.dyntracker.de [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.bs.serving-sys.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.questionmarket.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	a.visualrevenue.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.im.banner.t-online.de [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.tradedoubler.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	ad4.adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.tracking.quisma.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.webmasterplan.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	track.effiliation.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	track.effiliation.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	track.effiliation.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	track.effiliation.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	track.effiliation.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.serving-sys.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.serving-sys.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.revsci.net [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.revsci.net [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.revsci.net [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.revsci.net [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.webmasterplan.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	ad.dyntracker.de [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.zanox.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.zanox-affiliate.de [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	ad.dyntracker.de [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.doubleclick.net [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.webmasterplan.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.webmasterplan.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.tradedoubler.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.tradedoubler.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.unitymedia.de [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.unitymedia.de [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.tracking.quisma.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.tracking.quisma.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.traffictrack.de [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	ad.yieldmanager.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	ad.yieldmanager.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.adtech.de [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	eas.apm.emediate.eu [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.adtech.de [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	.fastclick.net [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	ww251.smartadserver.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	adserver.flughafen-stuttgart.de [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
	ad.zanox.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
         

Alt 06.04.2012, 20:03   #30
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Windows-Systemblockierung paysave - Standard

Windows-Systemblockierung paysave



Sieht ok aus, da wurden nur Cookies gefunden.
Cookies sind keine Schädlinge direkt, aber es besteht die Gefahr der missbräuchlichen Verwendung (eindeutige Wiedererkennung zB für gezielte Werbung o.ä. => HTTP-Cookie )


Wegen Cookies und anderer Dinge im Web: Um die Pest von vornherein zu blocken (also TrackingCookies, Werbebanner etc.) müsstest du dir mal sowas wie MVPS Hosts File anschauen => Blocking Unwanted Parasites with a Hosts File - sinnvollerweise solltest du alle 4 Wochen mal bei MVPS nachsehen, ob er eine neue Hosts Datei herausgebracht hat.

Ansonsten gibt es noch gute Cookiemanager, Erweiterungen für den Firefox zB wäre da CookieCuller http://filepony.de/download-cookie_culler/
Wenn du aber damit leben kannst, dich bei jeder Browsersession überall neu einzuloggen (zB Facebook, Ebay, GMX, oder auch Trojaner-Board) dann stell den Browser einfach so ein, dass einfach alles beim Beenden des Browser inkl. Cookies gelöscht wird.

Ich halte es so, dass ich zum "wilden Surfen" den Opera-Browser oder Chromium unter meinem Linux verwende. Mein Hauptbrowser (Firefox) speichert nur die Cookies von den Sites die ich auch will, alles andere lehne ich manuell ab (der FF fragt mich immer) - die anderen Browser nehmen alles an Cookies zwar an, aber spätestens beim nächsten Start von Opera oder Chromium sind keine Cookies mehr da.

Ist dein System nun wieder in Ordnung oder gibt's noch andere Funde oder Probleme?
__________________
Logfiles bitte immer in CODE-Tags posten

Antwort

Themen zu Windows-Systemblockierung paysave
eingefangen, fordert, gefangen, gen, hallo zusammen, troja, trojaner, windowssystem, zusammen





Zum Thema Windows-Systemblockierung paysave - Und du hast das Fixlog nicht gepostet - Windows-Systemblockierung paysave...
Archiv
Du betrachtest: Windows-Systemblockierung paysave auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.