Internet ist extrem langsam / komische Fehlermeldung 502 mit asiatischen Schriftzeichen

cosinus · 23.05.2012, 21:34

Bitte nun (im normalen Windows-Modus) dieses Tool von Kaspersky (TDSS-Killer) ausführen und das Log posten Anleitung und Downloadlink hier => http://www.trojaner-board.de/82358-t...entfernen.html

Hinweis: Bitte den Virenscanner abstellen bevor du den TDSS-Killer ausführst, denn v.a. Avira meldet im TDSS-Tool oft einen Fehalalrm!

Das Tool so einstellen wie unten im Bild angegeben - klick auf change parameters und setze die Haken wie im folgenden Screenshot abgebildet,
Dann auf Start Scan klicken und wenn es durch ist auf den Button Report klicken um das Log anzuzeigen. Dieses bitte komplett posten.
Wenn du das Log nicht findest oder den Inhalt kopieren und in dein Posting übertragen kannst, dann schau bitte direkt auf deiner Windows-Systempartition (meistens Laufwerk C

nach, da speichert der TDSS-Killer seine Logs.

Hinweis: Bitte nichts voreilig mit dem TDSS-Killer löschen! Falls Objekte vom TDSS-Killer bemängelt werden, alle mit der Aktion "skip" behandeln und hier nur das Log posten!

Trox · 23.05.2012, 21:42

Ja shit, 2 Treffer

Gefährlich?

Code:

ATTFilter

22:38:52.0255 2536	TDSS rootkit removing tool 2.7.37.0 May 23 2012 08:15:30
22:38:52.0545 2536	============================================================
22:38:52.0545 2536	Current date / time: 2012/05/23 22:38:52.0545
22:38:52.0545 2536	SystemInfo:
22:38:52.0545 2536	
22:38:52.0545 2536	OS Version: 6.1.7601 ServicePack: 1.0
22:38:52.0545 2536	Product type: Workstation
22:38:52.0545 2536	ComputerName: KUTTINAT0R
22:38:52.0545 2536	UserName: Kutti
22:38:52.0545 2536	Windows directory: C:\Windows
22:38:52.0545 2536	System windows directory: C:\Windows
22:38:52.0545 2536	Running under WOW64
22:38:52.0545 2536	Processor architecture: Intel x64
22:38:52.0545 2536	Number of processors: 4
22:38:52.0545 2536	Page size: 0x1000
22:38:52.0545 2536	Boot type: Normal boot
22:38:52.0545 2536	============================================================
22:38:52.0725 2536	Drive \Device\Harddisk0\DR0 - Size: 0x1BF2976000 (111.79 Gb), SectorSize: 0x200, Cylinders: 0x3901, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
22:38:52.0765 2536	Drive \Device\Harddisk1\DR1 - Size: 0x1D1C1116000 (1863.02 Gb), SectorSize: 0x200, Cylinders: 0x3B601, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
22:38:52.0795 2536	============================================================
22:38:52.0795 2536	\Device\Harddisk0\DR0:
22:38:52.0795 2536	MBR partitions:
22:38:52.0795 2536	\Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x32000
22:38:52.0795 2536	\Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x32800, BlocksNum 0xDF61800
22:38:52.0795 2536	\Device\Harddisk1\DR1:
22:38:52.0795 2536	GPT partitions:
22:38:52.0795 2536	\Device\Harddisk1\DR1\Partition0: GPT, TypeGUID: {E3C9E316-0B5C-4DB8-817D-F92DF00215AE}, UniqueGUID: {4FA3B638-9291-11E0-B72E-002522C2F396}, Name: Microsoft reserved partition, StartLBA 0x22, BlocksNum 0x40000
22:38:52.0795 2536	\Device\Harddisk1\DR1\Partition1: GPT, TypeGUID: {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}, UniqueGUID: {5D353AD9-657D-4635-9369-AF49589875AE}, Name: Basic data partition, StartLBA 0x40800, BlocksNum 0x74E50000
22:38:52.0795 2536	\Device\Harddisk1\DR1\Partition2: GPT, TypeGUID: {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}, UniqueGUID: {6674A099-A8C8-413D-A862-C6168AAA0BE5}, Name: Basic data partition, StartLBA 0x74E90800, BlocksNum 0x3D08F800
22:38:52.0795 2536	\Device\Harddisk1\DR1\Partition3: GPT, TypeGUID: {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}, UniqueGUID: {A39ED7D3-AF47-4BC5-9174-89BFCC795F89}, Name: Basic data partition, StartLBA 0xB1F20000, BlocksNum 0xC350000
22:38:52.0795 2536	\Device\Harddisk1\DR1\Partition4: GPT, TypeGUID: {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}, UniqueGUID: {0C7094C2-A55B-4FF4-B7C3-203F65E367CC}, Name: Basic data partition, StartLBA 0xBE270800, BlocksNum 0x249EF800
22:38:52.0795 2536	\Device\Harddisk1\DR1\Partition5: GPT, TypeGUID: {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}, UniqueGUID: {60E58F79-3B3C-4BF7-9F5F-D544FCB444A6}, Name: Basic data partition, StartLBA 0xE2C60000, BlocksNum 0x61A8000
22:38:52.0795 2536	MBR partitions:
22:38:52.0795 2536	============================================================
22:38:52.0795 2536	C: <-> \Device\Harddisk0\DR0\Partition1
22:38:52.0815 2536	D: <-> \Device\Harddisk1\DR1\Partition4
22:38:52.0865 2536	E: <-> \Device\Harddisk1\DR1\Partition2
22:38:52.0915 2536	F: <-> \Device\Harddisk1\DR1\Partition1
22:38:52.0995 2536	G: <-> \Device\Harddisk1\DR1\Partition5
22:38:53.0035 2536	H: <-> \Device\Harddisk1\DR1\Partition3
22:38:53.0035 2536	============================================================
22:38:53.0035 2536	Initialize success
22:38:53.0035 2536	============================================================
22:39:31.0970 5256	============================================================
22:39:31.0970 5256	Scan started
22:39:31.0970 5256	Mode: Manual; SigCheck; TDLFS; 
22:39:31.0970 5256	============================================================
22:39:32.0157 5256	1394ohci        (a87d604aea360176311474c87a63bb88) C:\Windows\system32\drivers\1394ohci.sys
22:39:32.0188 5256	1394ohci - ok
22:39:32.0204 5256	ACPI            (d81d9e70b8a6dd14d42d7b4efa65d5f2) C:\Windows\system32\drivers\ACPI.sys
22:39:32.0219 5256	ACPI - ok
22:39:32.0219 5256	AcpiPmi         (99f8e788246d495ce3794d7e7821d2ca) C:\Windows\system32\drivers\acpipmi.sys
22:39:32.0235 5256	AcpiPmi - ok
22:39:32.0250 5256	AdobeARMservice (62b7936f9036dd6ed36e6a7efa805dc0) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
22:39:32.0266 5256	AdobeARMservice - ok
22:39:32.0282 5256	adp94xx         (2f6b34b83843f0c5118b63ac634f5bf4) C:\Windows\system32\DRIVERS\adp94xx.sys
22:39:32.0282 5256	adp94xx - ok
22:39:32.0297 5256	adpahci         (597f78224ee9224ea1a13d6350ced962) C:\Windows\system32\DRIVERS\adpahci.sys
22:39:32.0313 5256	adpahci - ok
22:39:32.0328 5256	adpu320         (e109549c90f62fb570b9540c4b148e54) C:\Windows\system32\DRIVERS\adpu320.sys
22:39:32.0328 5256	adpu320 - ok
22:39:32.0344 5256	AeLookupSvc     (4b78b431f225fd8624c5655cb1de7b61) C:\Windows\System32\aelupsvc.dll
22:39:32.0360 5256	AeLookupSvc - ok
22:39:32.0375 5256	AFD             (1c7857b62de5994a75b054a9fd4c3825) C:\Windows\system32\drivers\afd.sys
22:39:32.0391 5256	AFD - ok
22:39:32.0406 5256	agp440          (608c14dba7299d8cb6ed035a68a15799) C:\Windows\system32\drivers\agp440.sys
22:39:32.0406 5256	agp440 - ok
22:39:32.0422 5256	ALG             (3290d6946b5e30e70414990574883ddb) C:\Windows\System32\alg.exe
22:39:32.0422 5256	ALG - ok
22:39:32.0422 5256	aliide          (5812713a477a3ad7363c7438ca2ee038) C:\Windows\system32\drivers\aliide.sys
22:39:32.0438 5256	aliide - ok
22:39:32.0453 5256	AMD External Events Utility (f687d4976eff550fb0be45a5cb19f18f) C:\Windows\system32\atiesrxx.exe
22:39:32.0469 5256	AMD External Events Utility - ok
22:39:32.0469 5256	amdide          (1ff8b4431c353ce385c875f194924c0c) C:\Windows\system32\drivers\amdide.sys
22:39:32.0484 5256	amdide - ok
22:39:32.0484 5256	AmdK8           (7024f087cff1833a806193ef9d22cda9) C:\Windows\system32\DRIVERS\amdk8.sys
22:39:32.0500 5256	AmdK8 - ok
22:39:32.0687 5256	amdkmdag        (74687c33c4ad25a975bbb1ea1e8b3884) C:\Windows\system32\DRIVERS\atikmdag.sys
22:39:32.0765 5256	amdkmdag - ok
22:39:32.0812 5256	amdkmdap        (c7f56ed86327a78e7f8a5cc503a98bd6) C:\Windows\system32\DRIVERS\atikmpag.sys
22:39:32.0828 5256	amdkmdap - ok
22:39:32.0843 5256	AmdPPM          (1e56388b3fe0d031c44144eb8c4d6217) C:\Windows\system32\DRIVERS\amdppm.sys
22:39:32.0859 5256	AmdPPM - ok
22:39:32.0859 5256	amdsata         (d4121ae6d0c0e7e13aa221aa57ef2d49) C:\Windows\system32\drivers\amdsata.sys
22:39:32.0874 5256	amdsata - ok
22:39:32.0890 5256	amdsbs          (f67f933e79241ed32ff46a4f29b5120b) C:\Windows\system32\DRIVERS\amdsbs.sys
22:39:32.0906 5256	amdsbs - ok
22:39:32.0906 5256	amdxata         (540daf1cea6094886d72126fd7c33048) C:\Windows\system32\drivers\amdxata.sys
22:39:32.0921 5256	amdxata - ok
22:39:32.0921 5256	AppID           (89a69c3f2f319b43379399547526d952) C:\Windows\system32\drivers\appid.sys
22:39:32.0984 5256	AppID - ok
22:39:32.0984 5256	AppIDSvc        (0bc381a15355a3982216f7172f545de1) C:\Windows\System32\appidsvc.dll
22:39:32.0999 5256	AppIDSvc - ok
22:39:33.0015 5256	Appinfo         (3977d4a871ca0d4f2ed1e7db46829731) C:\Windows\System32\appinfo.dll
22:39:33.0030 5256	Appinfo - ok
22:39:33.0046 5256	AppMgmt         (4aba3e75a76195a3e38ed2766c962899) C:\Windows\System32\appmgmts.dll
22:39:33.0062 5256	AppMgmt - ok
22:39:33.0062 5256	arc             (c484f8ceb1717c540242531db7845c4e) C:\Windows\system32\DRIVERS\arc.sys
22:39:33.0077 5256	arc - ok
22:39:33.0077 5256	arcsas          (019af6924aefe7839f61c830227fe79c) C:\Windows\system32\DRIVERS\arcsas.sys
22:39:33.0093 5256	arcsas - ok
22:39:33.0093 5256	AsrAppCharger   (912a215ce180a6e7c923c662d7ec777d) C:\Windows\system32\DRIVERS\AsrAppCharger.sys
22:39:33.0108 5256	AsrAppCharger - ok
22:39:33.0124 5256	AsyncMac        (769765ce2cc62867468cea93969b2242) C:\Windows\system32\DRIVERS\asyncmac.sys
22:39:33.0140 5256	AsyncMac - ok
22:39:33.0140 5256	atapi           (02062c0b390b7729edc9e69c680a6f3c) C:\Windows\system32\drivers\atapi.sys
22:39:33.0140 5256	atapi - ok
22:39:33.0186 5256	athr            (d6cad7e5b05055bb8226bdcb1644da27) C:\Windows\system32\DRIVERS\athrx.sys
22:39:33.0218 5256	athr - ok
22:39:33.0264 5256	AtiHdmiService  (2d648572ba9a610952fcafba1e119c2d) C:\Windows\system32\drivers\AtiHdmi.sys
22:39:33.0280 5256	AtiHdmiService - ok
22:39:33.0311 5256	AudioEndpointBuilder (f23fef6d569fce88671949894a8becf1) C:\Windows\System32\Audiosrv.dll
22:39:33.0358 5256	AudioEndpointBuilder - ok
22:39:33.0358 5256	AudioSrv        (f23fef6d569fce88671949894a8becf1) C:\Windows\System32\Audiosrv.dll
22:39:33.0374 5256	AudioSrv - ok
22:39:33.0514 5256	AVGIDSAgent     (6d440ff3f44ca72edfd6176c6d6a89c0) C:\Program Files (x86)\AVG\AVG2012\AVGIDSAgent.exe
22:39:33.0576 5256	AVGIDSAgent - ok
22:39:33.0623 5256	AVGIDSDriver    (e29ea1a0ec7ab9fa2dc7e75a03f12a4f) C:\Windows\system32\DRIVERS\AVGIDSDriver.Sys
22:39:33.0639 5256	AVGIDSDriver - ok
22:39:33.0639 5256	AVGIDSEH        (f823d184b8e8ffb8da3ead45dbf5bd6a) C:\Windows\system32\DRIVERS\AVGIDSEH.Sys
22:39:33.0639 5256	AVGIDSEH - ok
22:39:33.0654 5256	AVGIDSFilter    (ed2b25bd7fe35d1944211968842d30da) C:\Windows\system32\DRIVERS\AVGIDSFilter.Sys
22:39:33.0654 5256	AVGIDSFilter - ok
22:39:33.0670 5256	Avgldx64        (979cf8912449a10b987218bff80a1fa3) C:\Windows\system32\DRIVERS\avgldx64.sys
22:39:33.0670 5256	Avgldx64 - ok
22:39:33.0686 5256	Avgmfx64        (36b1a5843695766eac714daffc5b84d1) C:\Windows\system32\DRIVERS\avgmfx64.sys
22:39:33.0686 5256	Avgmfx64 - ok
22:39:33.0686 5256	Avgrkx64        (1102239fb724527f1febbbbccf6bf313) C:\Windows\system32\DRIVERS\avgrkx64.sys
22:39:33.0701 5256	Avgrkx64 - ok
22:39:33.0717 5256	Avgtdia         (11f36d3ea82d9db9aa05a476a210551b) C:\Windows\system32\DRIVERS\avgtdia.sys
22:39:33.0717 5256	Avgtdia - ok
22:39:33.0732 5256	avgwd           (6699ece24fe4b3f752a66c66a602ee86) C:\Program Files (x86)\AVG\AVG2012\avgwdsvc.exe
22:39:33.0732 5256	avgwd - ok
22:39:33.0748 5256	AxInstSV        (a6bf31a71b409dfa8cac83159e1e2aff) C:\Windows\System32\AxInstSV.dll
22:39:33.0764 5256	AxInstSV - ok
22:39:33.0779 5256	b06bdrv         (3e5b191307609f7514148c6832bb0842) C:\Windows\system32\DRIVERS\bxvbda.sys
22:39:33.0795 5256	b06bdrv - ok
22:39:33.0810 5256	b57nd60a        (b5ace6968304a3900eeb1ebfd9622df2) C:\Windows\system32\DRIVERS\b57nd60a.sys
22:39:33.0826 5256	b57nd60a - ok
22:39:33.0842 5256	BDESVC          (fde360167101b4e45a96f939f388aeb0) C:\Windows\System32\bdesvc.dll
22:39:33.0842 5256	BDESVC - ok
22:39:33.0842 5256	Beep            (16a47ce2decc9b099349a5f840654746) C:\Windows\system32\drivers\Beep.sys
22:39:33.0873 5256	Beep - ok
22:39:33.0888 5256	BFE             (82974d6a2fd19445cc5171fc378668a4) C:\Windows\System32\bfe.dll
22:39:33.0920 5256	BFE - ok
22:39:33.0951 5256	BITS            (1ea7969e3271cbc59e1730697dc74682) C:\Windows\System32\qmgr.dll
22:39:33.0982 5256	BITS - ok
22:39:33.0982 5256	blbdrive        (61583ee3c3a17003c4acd0475646b4d3) C:\Windows\system32\DRIVERS\blbdrive.sys
22:39:33.0998 5256	blbdrive - ok
22:39:33.0998 5256	bowser          (6c02a83164f5cc0a262f4199f0871cf5) C:\Windows\system32\DRIVERS\bowser.sys
22:39:34.0013 5256	bowser - ok
22:39:34.0013 5256	BrFiltLo        (f09eee9edc320b5e1501f749fde686c8) C:\Windows\system32\DRIVERS\BrFiltLo.sys
22:39:34.0029 5256	BrFiltLo - ok
22:39:34.0029 5256	BrFiltUp        (b114d3098e9bdb8bea8b053685831be6) C:\Windows\system32\DRIVERS\BrFiltUp.sys
22:39:34.0044 5256	BrFiltUp - ok
22:39:34.0060 5256	Browser         (8ef0d5c41ec907751b8429162b1239ed) C:\Windows\System32\browser.dll
22:39:34.0076 5256	Browser - ok
22:39:34.0091 5256	Brserid         (43bea8d483bf1870f018e2d02e06a5bd) C:\Windows\System32\Drivers\Brserid.sys
22:39:34.0107 5256	Brserid - ok
22:39:34.0107 5256	BrSerWdm        (a6eca2151b08a09caceca35c07f05b42) C:\Windows\System32\Drivers\BrSerWdm.sys
22:39:34.0122 5256	BrSerWdm - ok
22:39:34.0122 5256	BrUsbMdm        (b79968002c277e869cf38bd22cd61524) C:\Windows\System32\Drivers\BrUsbMdm.sys
22:39:34.0122 5256	BrUsbMdm - ok
22:39:34.0122 5256	BrUsbSer        (a87528880231c54e75ea7a44943b38bf) C:\Windows\System32\Drivers\BrUsbSer.sys
22:39:34.0138 5256	BrUsbSer - ok
22:39:34.0154 5256	BTHMODEM        (9da669f11d1f894ab4eb69bf546a42e8) C:\Windows\system32\DRIVERS\bthmodem.sys
22:39:34.0154 5256	BTHMODEM - ok
22:39:34.0169 5256	bthserv         (95f9c2976059462cbbf227f7aab10de9) C:\Windows\system32\bthserv.dll
22:39:34.0185 5256	bthserv - ok
22:39:34.0200 5256	cdfs            (b8bd2bb284668c84865658c77574381a) C:\Windows\system32\DRIVERS\cdfs.sys
22:39:34.0216 5256	cdfs - ok
22:39:34.0232 5256	cdrom           (f036ce71586e93d94dab220d7bdf4416) C:\Windows\system32\DRIVERS\cdrom.sys
22:39:34.0232 5256	cdrom - ok
22:39:34.0247 5256	CertPropSvc     (f17d1d393bbc69c5322fbfafaca28c7f) C:\Windows\System32\certprop.dll
22:39:34.0263 5256	CertPropSvc - ok
22:39:34.0263 5256	circlass        (d7cd5c4e1b71fa62050515314cfb52cf) C:\Windows\system32\DRIVERS\circlass.sys
22:39:34.0278 5256	circlass - ok
22:39:34.0294 5256	CLFS            (fe1ec06f2253f691fe36217c592a0206) C:\Windows\system32\CLFS.sys
22:39:34.0294 5256	CLFS - ok
22:39:34.0310 5256	clr_optimization_v2.0.50727_32 (d88040f816fda31c3b466f0fa0918f29) C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
22:39:34.0325 5256	clr_optimization_v2.0.50727_32 - ok
22:39:34.0341 5256	clr_optimization_v2.0.50727_64 (d1ceea2b47cb998321c579651ce3e4f8) C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
22:39:34.0341 5256	clr_optimization_v2.0.50727_64 - ok
22:39:34.0356 5256	clr_optimization_v4.0.30319_32 (c5a75eb48e2344abdc162bda79e16841) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
22:39:34.0372 5256	clr_optimization_v4.0.30319_32 - ok
22:39:34.0388 5256	clr_optimization_v4.0.30319_64 (c6f9af94dcd58122a4d7e89db6bed29d) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
22:39:34.0388 5256	clr_optimization_v4.0.30319_64 - ok
22:39:34.0403 5256	CmBatt          (0840155d0bddf1190f84a663c284bd33) C:\Windows\system32\DRIVERS\CmBatt.sys
22:39:34.0403 5256	CmBatt - ok
22:39:34.0403 5256	cmdide          (e19d3f095812725d88f9001985b94edd) C:\Windows\system32\drivers\cmdide.sys
22:39:34.0419 5256	cmdide - ok
22:39:34.0434 5256	CNG             (c4943b6c962e4b82197542447ad599f4) C:\Windows\system32\Drivers\cng.sys
22:39:34.0450 5256	CNG - ok
22:39:34.0450 5256	Compbatt        (102de219c3f61415f964c88e9085ad14) C:\Windows\system32\DRIVERS\compbatt.sys
22:39:34.0450 5256	Compbatt - ok
22:39:34.0466 5256	CompositeBus    (03edb043586cceba243d689bdda370a8) C:\Windows\system32\drivers\CompositeBus.sys
22:39:34.0481 5256	CompositeBus - ok
22:39:34.0481 5256	COMSysApp - ok
22:39:34.0528 5256	cphs            (df3e8c2c443d3618260dff5705ce2df5) C:\Windows\SysWow64\IntelCpHeciSvc.exe
22:39:34.0544 5256	cphs - ok
22:39:34.0544 5256	cpuz130 - ok
22:39:34.0544 5256	crcdisk         (1c827878a998c18847245fe1f34ee597) C:\Windows\system32\DRIVERS\crcdisk.sys
22:39:34.0559 5256	crcdisk - ok
22:39:34.0575 5256	CryptSvc        (15597883fbe9b056f276ada3ad87d9af) C:\Windows\system32\cryptsvc.dll
22:39:34.0606 5256	CryptSvc - ok
22:39:34.0622 5256	CSC             (54da3dfd29ed9f1619b6f53f3ce55e49) C:\Windows\system32\drivers\csc.sys
22:39:34.0637 5256	CSC - ok
22:39:34.0653 5256	CscService      (3ab183ab4d2c79dcf459cd2c1266b043) C:\Windows\System32\cscsvc.dll
22:39:34.0684 5256	CscService - ok
22:39:34.0700 5256	DcomLaunch      (5c627d1b1138676c0a7ab2c2c190d123) C:\Windows\system32\rpcss.dll
22:39:34.0715 5256	DcomLaunch - ok
22:39:34.0731 5256	defragsvc       (3cec7631a84943677aa8fa8ee5b6b43d) C:\Windows\System32\defragsvc.dll
22:39:34.0762 5256	defragsvc - ok
22:39:34.0778 5256	DfsC            (9bb2ef44eaa163b29c4a4587887a0fe4) C:\Windows\system32\Drivers\dfsc.sys
22:39:34.0793 5256	DfsC - ok
22:39:34.0793 5256	Dhcp            (43d808f5d9e1a18e5eeb5ebc83969e4e) C:\Windows\system32\dhcpcore.dll
22:39:34.0824 5256	Dhcp - ok
22:39:34.0824 5256	discache        (13096b05847ec78f0977f2c0f79e9ab3) C:\Windows\system32\drivers\discache.sys
22:39:34.0856 5256	discache - ok
22:39:34.0856 5256	Disk            (9819eee8b5ea3784ec4af3b137a5244c) C:\Windows\system32\DRIVERS\disk.sys
22:39:34.0871 5256	Disk - ok
22:39:34.0871 5256	Dnscache        (16835866aaa693c7d7fceba8fff706e4) C:\Windows\System32\dnsrslvr.dll
22:39:34.0887 5256	Dnscache - ok
22:39:34.0902 5256	dot3svc         (b1fb3ddca0fdf408750d5843591afbc6) C:\Windows\System32\dot3svc.dll
22:39:34.0918 5256	dot3svc - ok
22:39:34.0934 5256	DPS             (b26f4f737e8f9df4f31af6cf31d05820) C:\Windows\system32\dps.dll
22:39:34.0949 5256	DPS - ok
22:39:34.0949 5256	drmkaud         (9b19f34400d24df84c858a421c205754) C:\Windows\system32\drivers\drmkaud.sys
22:39:34.0965 5256	drmkaud - ok
22:39:34.0980 5256	dtsoftbus01     (46571ed73ae84469dca53081d33cf3c8) C:\Windows\system32\DRIVERS\dtsoftbus01.sys
22:39:34.0980 5256	dtsoftbus01 - ok
22:39:35.0012 5256	DXGKrnl         (f5bee30450e18e6b83a5012c100616fd) C:\Windows\System32\drivers\dxgkrnl.sys
22:39:35.0027 5256	DXGKrnl - ok
22:39:35.0043 5256	EapHost         (e2dda8726da9cb5b2c4000c9018a9633) C:\Windows\System32\eapsvc.dll
22:39:35.0058 5256	EapHost - ok
22:39:35.0152 5256	ebdrv           (dc5d737f51be844d8c82c695eb17372f) C:\Windows\system32\DRIVERS\evbda.sys
22:39:35.0199 5256	ebdrv - ok
22:39:35.0246 5256	EFS             (c118a82cd78818c29ab228366ebf81c3) C:\Windows\System32\lsass.exe
22:39:35.0246 5256	EFS - ok
22:39:35.0277 5256	ehRecvr         (c4002b6b41975f057d98c439030cea07) C:\Windows\ehome\ehRecvr.exe
22:39:35.0292 5256	ehRecvr - ok
22:39:35.0308 5256	ehSched         (4705e8ef9934482c5bb488ce28afc681) C:\Windows\ehome\ehsched.exe
22:39:35.0324 5256	ehSched - ok
22:39:35.0339 5256	elxstor         (0e5da5369a0fcaea12456dd852545184) C:\Windows\system32\DRIVERS\elxstor.sys
22:39:35.0355 5256	elxstor - ok
22:39:35.0370 5256	ErrDev          (34a3c54752046e79a126e15c51db409b) C:\Windows\system32\drivers\errdev.sys
22:39:35.0370 5256	ErrDev - ok
22:39:35.0386 5256	EventSystem     (4166f82be4d24938977dd1746be9b8a0) C:\Windows\system32\es.dll
22:39:35.0417 5256	EventSystem - ok
22:39:35.0433 5256	exfat           (a510c654ec00c1e9bdd91eeb3a59823b) C:\Windows\system32\drivers\exfat.sys
22:39:35.0448 5256	exfat - ok
22:39:35.0464 5256	fastfat         (0adc83218b66a6db380c330836f3e36d) C:\Windows\system32\drivers\fastfat.sys
22:39:35.0480 5256	fastfat - ok
22:39:35.0495 5256	Fax             (dbefd454f8318a0ef691fdd2eaab44eb) C:\Windows\system32\fxssvc.exe
22:39:35.0511 5256	Fax - ok
22:39:35.0511 5256	fdc             (d765d19cd8ef61f650c384f62fac00ab) C:\Windows\system32\DRIVERS\fdc.sys
22:39:35.0526 5256	fdc - ok
22:39:35.0526 5256	fdPHost         (0438cab2e03f4fb61455a7956026fe86) C:\Windows\system32\fdPHost.dll
22:39:35.0542 5256	fdPHost - ok
22:39:35.0558 5256	FDResPub        (802496cb59a30349f9a6dd22d6947644) C:\Windows\system32\fdrespub.dll
22:39:35.0573 5256	FDResPub - ok
22:39:35.0589 5256	FileInfo        (655661be46b5f5f3fd454e2c3095b930) C:\Windows\system32\drivers\fileinfo.sys
22:39:35.0589 5256	FileInfo - ok
22:39:35.0589 5256	Filetrace       (5f671ab5bc87eea04ec38a6cd5962a47) C:\Windows\system32\drivers\filetrace.sys
22:39:35.0620 5256	Filetrace - ok
22:39:35.0620 5256	flpydisk        (c172a0f53008eaeb8ea33fe10e177af5) C:\Windows\system32\DRIVERS\flpydisk.sys
22:39:35.0620 5256	flpydisk - ok
22:39:35.0636 5256	FltMgr          (da6b67270fd9db3697b20fce94950741) C:\Windows\system32\drivers\fltmgr.sys
22:39:35.0636 5256	FltMgr - ok
22:39:35.0651 5256	FNETTBOH_305    (fe95ae537b41a7e2f4cfe353064dc4af) C:\Windows\system32\drivers\FNETTBOH_305.SYS
22:39:35.0651 5256	FNETTBOH_305 - ok
22:39:35.0651 5256	FNETURPX        (7c3c4b4c951ec1bdfd4f769d05e2cc68) C:\Windows\system32\drivers\FNETURPX.SYS
22:39:35.0667 5256	FNETURPX - ok
22:39:35.0698 5256	FontCache       (5c4cb4086fb83115b153e47add961a0c) C:\Windows\system32\FntCache.dll
22:39:35.0714 5256	FontCache - ok
22:39:35.0729 5256	FontCache3.0.0.0 (a8b7f3818ab65695e3a0bb3279f6dce6) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
22:39:35.0729 5256	FontCache3.0.0.0 - ok
22:39:35.0729 5256	FsDepends       (d43703496149971890703b4b1b723eac) C:\Windows\system32\drivers\FsDepends.sys
22:39:35.0745 5256	FsDepends - ok
22:39:35.0745 5256	Fs_Rec          (6bd9295cc032dd3077c671fccf579a7b) C:\Windows\system32\drivers\Fs_Rec.sys
22:39:35.0745 5256	Fs_Rec - ok
22:39:35.0760 5256	fvevol          (1f7b25b858fa27015169fe95e54108ed) C:\Windows\system32\DRIVERS\fvevol.sys
22:39:35.0760 5256	fvevol - ok
22:39:35.0776 5256	gagp30kx        (8c778d335c9d272cfd3298ab02abe3b6) C:\Windows\system32\DRIVERS\gagp30kx.sys
22:39:35.0776 5256	gagp30kx - ok
22:39:35.0776 5256	GEARAspiWDM - ok
22:39:35.0807 5256	gpsvc           (277bbc7e1aa1ee957f573a10eca7ef3a) C:\Windows\System32\gpsvc.dll
22:39:35.0838 5256	gpsvc - ok
22:39:35.0838 5256	hcw85cir        (f2523ef6460fc42405b12248338ab2f0) C:\Windows\system32\drivers\hcw85cir.sys
22:39:35.0854 5256	hcw85cir - ok
22:39:35.0854 5256	HdAudAddService (975761c778e33cd22498059b91e7373a) C:\Windows\system32\drivers\HdAudio.sys
22:39:35.0870 5256	HdAudAddService - ok
22:39:35.0870 5256	HDAudBus        (97bfed39b6b79eb12cddbfeed51f56bb) C:\Windows\system32\drivers\HDAudBus.sys
22:39:35.0885 5256	HDAudBus - ok
22:39:35.0885 5256	HidBatt         (78e86380454a7b10a5eb255dc44a355f) C:\Windows\system32\DRIVERS\HidBatt.sys
22:39:35.0901 5256	HidBatt - ok
22:39:35.0901 5256	HidBth          (7fd2a313f7afe5c4dab14798c48dd104) C:\Windows\system32\DRIVERS\hidbth.sys
22:39:35.0916 5256	HidBth - ok
22:39:35.0916 5256	HidIr           (0a77d29f311b88cfae3b13f9c1a73825) C:\Windows\system32\DRIVERS\hidir.sys
22:39:35.0932 5256	HidIr - ok
22:39:35.0932 5256	hidserv         (bd9eb3958f213f96b97b1d897dee006d) C:\Windows\system32\hidserv.dll
22:39:35.0963 5256	hidserv - ok
22:39:35.0963 5256	HidUsb          (9592090a7e2b61cd582b612b6df70536) C:\Windows\system32\DRIVERS\hidusb.sys
22:39:35.0963 5256	HidUsb - ok
22:39:35.0979 5256	hkmsvc          (387e72e739e15e3d37907a86d9ff98e2) C:\Windows\system32\kmsvc.dll
22:39:35.0994 5256	hkmsvc - ok
22:39:36.0010 5256	HomeGroupListener (efdfb3dd38a4376f93e7985173813abd) C:\Windows\system32\ListSvc.dll
22:39:36.0010 5256	HomeGroupListener - ok
22:39:36.0026 5256	HomeGroupProvider (908acb1f594274965a53926b10c81e89) C:\Windows\system32\provsvc.dll
22:39:36.0041 5256	HomeGroupProvider - ok
22:39:36.0041 5256	HpSAMD          (39d2abcd392f3d8a6dce7b60ae7b8efc) C:\Windows\system32\drivers\HpSAMD.sys
22:39:36.0041 5256	HpSAMD - ok
22:39:36.0072 5256	HTTP            (0ea7de1acb728dd5a369fd742d6eee28) C:\Windows\system32\drivers\HTTP.sys
22:39:36.0104 5256	HTTP - ok
22:39:36.0104 5256	hwpolicy        (a5462bd6884960c9dc85ed49d34ff392) C:\Windows\system32\drivers\hwpolicy.sys
22:39:36.0104 5256	hwpolicy - ok
22:39:36.0104 5256	i8042prt        (fa55c73d4affa7ee23ac4be53b4592d3) C:\Windows\system32\drivers\i8042prt.sys
22:39:36.0119 5256	i8042prt - ok
22:39:36.0135 5256	iaStorV         (aaaf44db3bd0b9d1fb6969b23ecc8366) C:\Windows\system32\drivers\iaStorV.sys
22:39:36.0150 5256	iaStorV - ok
22:39:36.0182 5256	idsvc           (5988fc40f8db5b0739cd1e3a5d0d78bd) C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
22:39:36.0197 5256	idsvc - ok
22:39:36.0556 5256	igfx            (276ee9cdab16c50e1df0e4cefa882f5f) C:\Windows\system32\DRIVERS\igdkmd64.sys
22:39:36.0759 5256	igfx - ok
22:39:36.0790 5256	iirsp           (5c18831c61933628f5bb0ea2675b9d21) C:\Windows\system32\DRIVERS\iirsp.sys
22:39:36.0806 5256	iirsp - ok
22:39:36.0821 5256	IKEEXT          (fcd84c381e0140af901e58d48882d26b) C:\Windows\System32\ikeext.dll
22:39:36.0868 5256	IKEEXT - ok
22:39:36.0946 5256	IntcAzAudAddService (a0c2c3d4c03c4fb896cfc53873784178) C:\Windows\system32\drivers\RTKVHD64.sys
22:39:36.0977 5256	IntcAzAudAddService - ok
22:39:37.0024 5256	intelide        (f00f20e70c6ec3aa366910083a0518aa) C:\Windows\system32\drivers\intelide.sys
22:39:37.0024 5256	intelide - ok
22:39:37.0040 5256	intelppm        (ada036632c664caa754079041cf1f8c1) C:\Windows\system32\DRIVERS\intelppm.sys
22:39:37.0040 5256	intelppm - ok
22:39:37.0055 5256	IPBusEnum       (098a91c54546a3b878dad6a7e90a455b) C:\Windows\system32\ipbusenum.dll
22:39:37.0086 5256	IPBusEnum - ok
22:39:37.0086 5256	IpFilterDriver  (c9f0e1bd74365a8771590e9008d22ab6) C:\Windows\system32\DRIVERS\ipfltdrv.sys
22:39:37.0118 5256	IpFilterDriver - ok
22:39:37.0133 5256	iphlpsvc        (a34a587fffd45fa649fba6d03784d257) C:\Windows\System32\iphlpsvc.dll
22:39:37.0149 5256	iphlpsvc - ok
22:39:37.0164 5256	IPMIDRV         (0fc1aea580957aa8817b8f305d18ca3a) C:\Windows\system32\drivers\IPMIDrv.sys
22:39:37.0180 5256	IPMIDRV - ok
22:39:37.0180 5256	IPNAT           (af9b39a7e7b6caa203b3862582e9f2d0) C:\Windows\system32\drivers\ipnat.sys
22:39:37.0211 5256	IPNAT - ok
22:39:37.0211 5256	IRENUM          (3abf5e7213eb28966d55d58b515d5ce9) C:\Windows\system32\drivers\irenum.sys
22:39:37.0227 5256	IRENUM - ok
22:39:37.0227 5256	isapnp          (2f7b28dc3e1183e5eb418df55c204f38) C:\Windows\system32\drivers\isapnp.sys
22:39:37.0242 5256	isapnp - ok
22:39:37.0242 5256	iScsiPrt        (d931d7309deb2317035b07c9f9e6b0bd) C:\Windows\system32\drivers\msiscsi.sys
22:39:37.0258 5256	iScsiPrt - ok
22:39:37.0258 5256	kbdclass        (bc02336f1cba7dcc7d1213bb588a68a5) C:\Windows\system32\DRIVERS\kbdclass.sys
22:39:37.0274 5256	kbdclass - ok
22:39:37.0274 5256	kbdhid          (0705eff5b42a9db58548eec3b26bb484) C:\Windows\system32\DRIVERS\kbdhid.sys
22:39:37.0274 5256	kbdhid - ok
22:39:37.0289 5256	KeyIso          (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe
22:39:37.0289 5256	KeyIso - ok
22:39:37.0305 5256	KSecDD          (da1e991a61cfdd755a589e206b97644b) C:\Windows\system32\Drivers\ksecdd.sys
22:39:37.0305 5256	KSecDD - ok
22:39:37.0320 5256	KSecPkg         (7e33198d956943a4f11a5474c1e9106f) C:\Windows\system32\Drivers\ksecpkg.sys
22:39:37.0320 5256	KSecPkg - ok
22:39:37.0336 5256	ksthunk         (6869281e78cb31a43e969f06b57347c4) C:\Windows\system32\drivers\ksthunk.sys
22:39:37.0352 5256	ksthunk - ok
22:39:37.0367 5256	KtmRm           (6ab66e16aa859232f64deb66887a8c9c) C:\Windows\system32\msdtckrm.dll
22:39:37.0383 5256	KtmRm - ok
22:39:37.0398 5256	LanmanServer    (d9f42719019740baa6d1c6d536cbdaa6) C:\Windows\system32\srvsvc.dll
22:39:37.0430 5256	LanmanServer - ok
22:39:37.0430 5256	LanmanWorkstation (851a1382eed3e3a7476db004f4ee3e1a) C:\Windows\System32\wkssvc.dll
22:39:37.0445 5256	LanmanWorkstation - ok
22:39:37.0461 5256	LGBusEnum       (fa529fb35694c24bf98a9ef67c1cd9d0) C:\Windows\system32\drivers\LGBusEnum.sys
22:39:37.0461 5256	LGBusEnum - ok
22:39:37.0476 5256	LGSHidFilt      (158d22b9ea55c5d7449add199015715e) C:\Windows\system32\DRIVERS\LGSHidFilt.Sys
22:39:37.0476 5256	LGSHidFilt - ok
22:39:37.0476 5256	LGVirHid        (94b29ce153765e768f004fb3440be2b0) C:\Windows\system32\drivers\LGVirHid.sys
22:39:37.0476 5256	LGVirHid - ok
22:39:37.0492 5256	lltdio          (1538831cf8ad2979a04c423779465827) C:\Windows\system32\DRIVERS\lltdio.sys
22:39:37.0508 5256	lltdio - ok
22:39:37.0523 5256	lltdsvc         (c1185803384ab3feed115f79f109427f) C:\Windows\System32\lltdsvc.dll
22:39:37.0554 5256	lltdsvc - ok
22:39:37.0554 5256	lmhosts         (f993a32249b66c9d622ea5592a8b76b8) C:\Windows\System32\lmhsvc.dll
22:39:37.0570 5256	lmhosts - ok
22:39:37.0586 5256	LMS             (9ad4bee2fe76d4ca39ac969b617e94fb) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
22:39:37.0601 5256	LMS - ok
22:39:37.0617 5256	LSI_FC          (1a93e54eb0ece102495a51266dcdb6a6) C:\Windows\system32\DRIVERS\lsi_fc.sys
22:39:37.0617 5256	LSI_FC - ok
22:39:37.0632 5256	LSI_SAS         (1047184a9fdc8bdbff857175875ee810) C:\Windows\system32\DRIVERS\lsi_sas.sys
22:39:37.0632 5256	LSI_SAS - ok
22:39:37.0648 5256	LSI_SAS2        (30f5c0de1ee8b5bc9306c1f0e4a75f93) C:\Windows\system32\DRIVERS\lsi_sas2.sys
22:39:37.0648 5256	LSI_SAS2 - ok
22:39:37.0664 5256	LSI_SCSI        (0504eacaff0d3c8aed161c4b0d369d4a) C:\Windows\system32\DRIVERS\lsi_scsi.sys
22:39:37.0664 5256	LSI_SCSI - ok
22:39:37.0679 5256	luafv           (43d0f98e1d56ccddb0d5254cff7b356e) C:\Windows\system32\drivers\luafv.sys
22:39:37.0695 5256	luafv - ok
22:39:37.0710 5256	MBAMProtector   (dbc08862a71459e74f7538b432c114cc) C:\Windows\system32\drivers\mbam.sys
22:39:37.0710 5256	MBAMProtector - ok
22:39:37.0726 5256	MBAMService     (ba400ed640bca1eae5c727ae17c10207) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
22:39:37.0742 5256	MBAMService - ok
22:39:37.0742 5256	Mcx2Svc         (0be09cd858abf9df6ed259d57a1a1663) C:\Windows\system32\Mcx2Svc.dll
22:39:37.0757 5256	Mcx2Svc - ok
22:39:37.0757 5256	megasas         (a55805f747c6edb6a9080d7c633bd0f4) C:\Windows\system32\DRIVERS\megasas.sys
22:39:37.0757 5256	megasas - ok
22:39:37.0773 5256	MegaSR          (baf74ce0072480c3b6b7c13b2a94d6b3) C:\Windows\system32\DRIVERS\MegaSR.sys
22:39:37.0788 5256	MegaSR - ok
22:39:37.0804 5256	MEIx64          (a6518dcc42f7a6e999bb3bea8fd87567) C:\Windows\system32\DRIVERS\HECIx64.sys
22:39:37.0804 5256	MEIx64 - ok
22:39:37.0820 5256	MMCSS           (e40e80d0304a73e8d269f7141d77250b) C:\Windows\system32\mmcss.dll
22:39:37.0835 5256	MMCSS - ok
22:39:37.0851 5256	Modem           (800ba92f7010378b09f9ed9270f07137) C:\Windows\system32\drivers\modem.sys
22:39:37.0866 5256	Modem - ok
22:39:37.0866 5256	monitor         (b03d591dc7da45ece20b3b467e6aadaa) C:\Windows\system32\DRIVERS\monitor.sys
22:39:37.0882 5256	monitor - ok
22:39:37.0882 5256	mouclass        (7d27ea49f3c1f687d357e77a470aea99) C:\Windows\system32\DRIVERS\mouclass.sys
22:39:37.0898 5256	mouclass - ok
22:39:37.0898 5256	mouhid          (d3bf052c40b0c4166d9fd86a4288c1e6) C:\Windows\system32\DRIVERS\mouhid.sys
22:39:37.0898 5256	mouhid - ok
22:39:37.0913 5256	mountmgr        (32e7a3d591d671a6df2db515a5cbe0fa) C:\Windows\system32\drivers\mountmgr.sys
22:39:37.0913 5256	mountmgr - ok
22:39:37.0929 5256	MozillaMaintenance (96aa8ba23142cc8e2b30f3cae0c80254) C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
22:39:37.0944 5256	MozillaMaintenance - ok
22:39:37.0944 5256	mpio            (a44b420d30bd56e145d6a2bc8768ec58) C:\Windows\system32\drivers\mpio.sys
22:39:37.0960 5256	mpio - ok
22:39:37.0976 5256	mpsdrv          (6c38c9e45ae0ea2fa5e551f2ed5e978f) C:\Windows\system32\drivers\mpsdrv.sys
22:39:37.0991 5256	mpsdrv - ok
22:39:38.0007 5256	MpsSvc          (54ffc9c8898113ace189d4aa7199d2c1) C:\Windows\system32\mpssvc.dll
22:39:38.0038 5256	MpsSvc - ok
22:39:38.0054 5256	MRxDAV          (dc722758b8261e1abafd31a3c0a66380) C:\Windows\system32\drivers\mrxdav.sys
22:39:38.0054 5256	MRxDAV - ok
22:39:38.0069 5256	mrxsmb          (a5d9106a73dc88564c825d317cac68ac) C:\Windows\system32\DRIVERS\mrxsmb.sys
22:39:38.0085 5256	mrxsmb - ok
22:39:38.0100 5256	mrxsmb10        (d711b3c1d5f42c0c2415687be09fc163) C:\Windows\system32\DRIVERS\mrxsmb10.sys
22:39:38.0116 5256	mrxsmb10 - ok
22:39:38.0116 5256	mrxsmb20        (9423e9d355c8d303e76b8cfbd8a5c30c) C:\Windows\system32\DRIVERS\mrxsmb20.sys
22:39:38.0132 5256	mrxsmb20 - ok
22:39:38.0132 5256	msahci          (c25f0bafa182cbca2dd3c851c2e75796) C:\Windows\system32\drivers\msahci.sys
22:39:38.0132 5256	msahci - ok
22:39:38.0147 5256	msdsm           (db801a638d011b9633829eb6f663c900) C:\Windows\system32\drivers\msdsm.sys
22:39:38.0147 5256	msdsm - ok
22:39:38.0163 5256	MSDTC           (de0ece52236cfa3ed2dbfc03f28253a8) C:\Windows\System32\msdtc.exe
22:39:38.0163 5256	MSDTC - ok
22:39:38.0178 5256	Msfs            (aa3fb40e17ce1388fa1bedab50ea8f96) C:\Windows\system32\drivers\Msfs.sys
22:39:38.0194 5256	Msfs - ok
22:39:38.0194 5256	mshidkmdf       (f9d215a46a8b9753f61767fa72a20326) C:\Windows\System32\drivers\mshidkmdf.sys
22:39:38.0210 5256	mshidkmdf - ok
22:39:38.0225 5256	msisadrv        (d916874bbd4f8b07bfb7fa9b3ccae29d) C:\Windows\system32\drivers\msisadrv.sys
22:39:38.0225 5256	msisadrv - ok
22:39:38.0241 5256	MSiSCSI         (808e98ff49b155c522e6400953177b08) C:\Windows\system32\iscsiexe.dll
22:39:38.0256 5256	MSiSCSI - ok
22:39:38.0256 5256	msiserver - ok
22:39:38.0256 5256	MSKSSRV         (49ccf2c4fea34ffad8b1b59d49439366) C:\Windows\system32\drivers\MSKSSRV.sys
22:39:38.0288 5256	MSKSSRV - ok
22:39:38.0288 5256	MSPCLOCK        (bdd71ace35a232104ddd349ee70e1ab3) C:\Windows\system32\drivers\MSPCLOCK.sys
22:39:38.0303 5256	MSPCLOCK - ok
22:39:38.0303 5256	MSPQM           (4ed981241db27c3383d72092b618a1d0) C:\Windows\system32\drivers\MSPQM.sys
22:39:38.0334 5256	MSPQM - ok
22:39:38.0334 5256	MsRPC           (759a9eeb0fa9ed79da1fb7d4ef78866d) C:\Windows\system32\drivers\MsRPC.sys
22:39:38.0350 5256	MsRPC - ok
22:39:38.0350 5256	mssmbios        (0eed230e37515a0eaee3c2e1bc97b288) C:\Windows\system32\drivers\mssmbios.sys
22:39:38.0366 5256	mssmbios - ok
22:39:38.0366 5256	MSTEE           (2e66f9ecb30b4221a318c92ac2250779) C:\Windows\system32\drivers\MSTEE.sys
22:39:38.0381 5256	MSTEE - ok
22:39:38.0381 5256	MTConfig        (7ea404308934e675bffde8edf0757bcd) C:\Windows\system32\DRIVERS\MTConfig.sys
22:39:38.0397 5256	MTConfig - ok
22:39:38.0397 5256	Mup             (f9a18612fd3526fe473c1bda678d61c8) C:\Windows\system32\Drivers\mup.sys
22:39:38.0412 5256	Mup - ok
22:39:38.0428 5256	napagent        (582ac6d9873e31dfa28a4547270862dd) C:\Windows\system32\qagentRT.dll
22:39:38.0444 5256	napagent - ok
22:39:38.0459 5256	NativeWifiP     (1ea3749c4114db3e3161156ffffa6b33) C:\Windows\system32\DRIVERS\nwifi.sys
22:39:38.0475 5256	NativeWifiP - ok
22:39:38.0506 5256	NDIS            (79b47fd40d9a817e932f9d26fac0a81c) C:\Windows\system32\drivers\ndis.sys
22:39:38.0522 5256	NDIS - ok
22:39:38.0537 5256	NdisCap         (9f9a1f53aad7da4d6fef5bb73ab811ac) C:\Windows\system32\DRIVERS\ndiscap.sys
22:39:38.0553 5256	NdisCap - ok
22:39:38.0553 5256	NdisTapi        (30639c932d9fef22b31268fe25a1b6e5) C:\Windows\system32\DRIVERS\ndistapi.sys
22:39:38.0568 5256	NdisTapi - ok
22:39:38.0584 5256	Ndisuio         (136185f9fb2cc61e573e676aa5402356) C:\Windows\system32\DRIVERS\ndisuio.sys
22:39:38.0600 5256	Ndisuio - ok
22:39:38.0615 5256	NdisWan         (53f7305169863f0a2bddc49e116c2e11) C:\Windows\system32\DRIVERS\ndiswan.sys
22:39:38.0631 5256	NdisWan - ok
22:39:38.0631 5256	NDProxy         (015c0d8e0e0421b4cfd48cffe2825879) C:\Windows\system32\drivers\NDProxy.sys
22:39:38.0662 5256	NDProxy - ok
22:39:38.0662 5256	NetBIOS         (86743d9f5d2b1048062b14b1d84501c4) C:\Windows\system32\DRIVERS\netbios.sys
22:39:38.0678 5256	NetBIOS - ok
22:39:38.0693 5256	NetBT           (09594d1089c523423b32a4229263f068) C:\Windows\system32\DRIVERS\netbt.sys
22:39:38.0709 5256	NetBT - ok
22:39:38.0724 5256	Netlogon        (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe
22:39:38.0724 5256	Netlogon - ok
22:39:38.0740 5256	Netman          (847d3ae376c0817161a14a82c8922a9e) C:\Windows\System32\netman.dll
22:39:38.0756 5256	Netman - ok
22:39:38.0787 5256	netprofm        (5f28111c648f1e24f7dbc87cdeb091b8) C:\Windows\System32\netprofm.dll
22:39:38.0802 5256	netprofm - ok
22:39:38.0818 5256	NetTcpPortSharing (3e5a36127e201ddf663176b66828fafe) C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe
22:39:38.0818 5256	NetTcpPortSharing - ok
22:39:38.0834 5256	nfrd960         (77889813be4d166cdab78ddba990da92) C:\Windows\system32\DRIVERS\nfrd960.sys
22:39:38.0834 5256	nfrd960 - ok
22:39:38.0849 5256	NlaSvc          (1ee99a89cc788ada662441d1e9830529) C:\Windows\System32\nlasvc.dll
22:39:38.0880 5256	NlaSvc - ok
22:39:38.0880 5256	Npfs            (1e4c4ab5c9b8dd13179bbdc75a2a01f7) C:\Windows\system32\drivers\Npfs.sys
22:39:38.0896 5256	Npfs - ok
22:39:38.0912 5256	nsi             (d54bfdf3e0c953f823b3d0bfe4732528) C:\Windows\system32\nsisvc.dll
22:39:38.0927 5256	nsi - ok
22:39:38.0927 5256	nsiproxy        (e7f5ae18af4168178a642a9247c63001) C:\Windows\system32\drivers\nsiproxy.sys
22:39:38.0943 5256	nsiproxy - ok
22:39:38.0990 5256	Ntfs            (a2f74975097f52a00745f9637451fdd8) C:\Windows\system32\drivers\Ntfs.sys
22:39:39.0021 5256	Ntfs - ok
22:39:39.0068 5256	Null            (9899284589f75fa8724ff3d16aed75c1) C:\Windows\system32\drivers\Null.sys
22:39:39.0099 5256	Null - ok
22:39:39.0114 5256	nvraid          (0a92cb65770442ed0dc44834632f66ad) C:\Windows\system32\drivers\nvraid.sys
22:39:39.0114 5256	nvraid - ok
22:39:39.0130 5256	nvstor          (dab0e87525c10052bf65f06152f37e4a) C:\Windows\system32\drivers\nvstor.sys
22:39:39.0130 5256	nvstor - ok
22:39:39.0146 5256	nv_agp          (270d7cd42d6e3979f6dd0146650f0e05) C:\Windows\system32\drivers\nv_agp.sys
22:39:39.0146 5256	nv_agp - ok
22:39:39.0177 5256	odserv          (785f487a64950f3cb8e9f16253ba3b7b) C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE
22:39:39.0177 5256	odserv - ok
22:39:39.0192 5256	ohci1394        (3589478e4b22ce21b41fa1bfc0b8b8a0) C:\Windows\system32\drivers\ohci1394.sys
22:39:39.0192 5256	ohci1394 - ok
22:39:39.0208 5256	ose             (5a432a042dae460abe7199b758e8606c) C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
22:39:39.0208 5256	ose - ok
22:39:39.0224 5256	p2pimsvc        (3eac4455472cc2c97107b5291e0dcafe) C:\Windows\system32\pnrpsvc.dll
22:39:39.0239 5256	p2pimsvc - ok
22:39:39.0255 5256	p2psvc          (927463ecb02179f88e4b9a17568c63c3) C:\Windows\system32\p2psvc.dll
22:39:39.0270 5256	p2psvc - ok
22:39:39.0286 5256	Parport         (0086431c29c35be1dbc43f52cc273887) C:\Windows\system32\DRIVERS\parport.sys
22:39:39.0286 5256	Parport - ok
22:39:39.0302 5256	partmgr         (e9766131eeade40a27dc27d2d68fba9c) C:\Windows\system32\drivers\partmgr.sys
22:39:39.0302 5256	partmgr - ok
22:39:39.0317 5256	PcaSvc          (3aeaa8b561e63452c655dc0584922257) C:\Windows\System32\pcasvc.dll
22:39:39.0333 5256	PcaSvc - ok
22:39:39.0348 5256	pci             (94575c0571d1462a0f70bde6bd6ee6b3) C:\Windows\system32\drivers\pci.sys
22:39:39.0348 5256	pci - ok
22:39:39.0348 5256	pciide          (b5b8b5ef2e5cb34df8dcf8831e3534fa) C:\Windows\system32\drivers\pciide.sys
22:39:39.0364 5256	pciide - ok
22:39:39.0380 5256	pcmcia          (b2e81d4e87ce48589f98cb8c05b01f2f) C:\Windows\system32\DRIVERS\pcmcia.sys
22:39:39.0380 5256	pcmcia - ok
22:39:39.0395 5256	pcw             (d6b9c2e1a11a3a4b26a182ffef18f603) C:\Windows\system32\drivers\pcw.sys
22:39:39.0395 5256	pcw - ok
22:39:39.0411 5256	PEAUTH          (68769c3356b3be5d1c732c97b9a80d6e) C:\Windows\system32\drivers\peauth.sys
22:39:39.0442 5256	PEAUTH - ok
22:39:39.0473 5256	PeerDistSvc     (b9b0a4299dd2d76a4243f75fd54dc680) C:\Windows\system32\peerdistsvc.dll
22:39:39.0504 5256	PeerDistSvc - ok
22:39:39.0551 5256	PerfHost        (e495e408c93141e8fc72dc0c6046ddfa) C:\Windows\SysWow64\perfhost.exe
22:39:39.0567 5256	PerfHost - ok
22:39:39.0645 5256	pla             (c7cf6a6e137463219e1259e3f0f0dd6c) C:\Windows\system32\pla.dll
22:39:39.0692 5256	pla - ok
22:39:39.0707 5256	PlugPlay        (25fbdef06c4d92815b353f6e792c8129) C:\Windows\system32\umpnpmgr.dll
22:39:39.0723 5256	PlugPlay - ok
22:39:39.0723 5256	PNRPAutoReg     (7195581cec9bb7d12abe54036acc2e38) C:\Windows\system32\pnrpauto.dll
22:39:39.0738 5256	PNRPAutoReg - ok
22:39:39.0754 5256	PNRPsvc         (3eac4455472cc2c97107b5291e0dcafe) C:\Windows\system32\pnrpsvc.dll
22:39:39.0754 5256	PNRPsvc - ok
22:39:39.0770 5256	PolicyAgent     (4f15d75adf6156bf56eced6d4a55c389) C:\Windows\System32\ipsecsvc.dll
22:39:39.0801 5256	PolicyAgent - ok
22:39:39.0816 5256	Power           (6ba9d927dded70bd1a9caded45f8b184) C:\Windows\system32\umpo.dll
22:39:39.0848 5256	Power - ok
22:39:39.0863 5256	PptpMiniport    (f92a2c41117a11a00be01ca01a7fcde9) C:\Windows\system32\DRIVERS\raspptp.sys
22:39:39.0879 5256	PptpMiniport - ok
22:39:39.0894 5256	Processor       (0d922e23c041efb1c3fac2a6f943c9bf) C:\Windows\system32\DRIVERS\processr.sys
22:39:39.0894 5256	Processor - ok
22:39:39.0910 5256	ProfSvc         (5c78838b4d166d1a27db3a8a820c799a) C:\Windows\system32\profsvc.dll
22:39:39.0926 5256	ProfSvc - ok
22:39:39.0926 5256	ProtectedStorage (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe
22:39:39.0941 5256	ProtectedStorage - ok
22:39:39.0957 5256	Psched          (0557cf5a2556bd58e26384169d72438d) C:\Windows\system32\DRIVERS\pacer.sys
22:39:39.0972 5256	Psched - ok
22:39:40.0019 5256	ql2300          (a53a15a11ebfd21077463ee2c7afeef0) C:\Windows\system32\DRIVERS\ql2300.sys
22:39:40.0050 5256	ql2300 - ok
22:39:40.0082 5256	ql40xx          (4f6d12b51de1aaeff7dc58c4d75423c8) C:\Windows\system32\DRIVERS\ql40xx.sys
22:39:40.0097 5256	ql40xx - ok
22:39:40.0113 5256	QWAVE           (906191634e99aea92c4816150bda3732) C:\Windows\system32\qwave.dll
22:39:40.0128 5256	QWAVE - ok
22:39:40.0144 5256	QWAVEdrv        (76707bb36430888d9ce9d705398adb6c) C:\Windows\system32\drivers\qwavedrv.sys
22:39:40.0144 5256	QWAVEdrv - ok
22:39:40.0160 5256	RasAcd          (5a0da8ad5762fa2d91678a8a01311704) C:\Windows\system32\DRIVERS\rasacd.sys
22:39:40.0175 5256	RasAcd - ok
22:39:40.0191 5256	RasAgileVpn     (7ecff9b22276b73f43a99a15a6094e90) C:\Windows\system32\DRIVERS\AgileVpn.sys
22:39:40.0206 5256	RasAgileVpn - ok
22:39:40.0222 5256	RasAuto         (8f26510c5383b8dbe976de1cd00fc8c7) C:\Windows\System32\rasauto.dll
22:39:40.0238 5256	RasAuto - ok
22:39:40.0253 5256	Rasl2tp         (471815800ae33e6f1c32fb1b97c490ca) C:\Windows\system32\DRIVERS\rasl2tp.sys
22:39:40.0269 5256	Rasl2tp - ok
22:39:40.0284 5256	RasMan          (ee867a0870fc9e4972ba9eaad35651e2) C:\Windows\System32\rasmans.dll
22:39:40.0300 5256	RasMan - ok
22:39:40.0316 5256	RasPppoe        (855c9b1cd4756c5e9a2aa58a15f58c25) C:\Windows\system32\DRIVERS\raspppoe.sys
22:39:40.0331 5256	RasPppoe - ok
22:39:40.0347 5256	RasSstp         (e8b1e447b008d07ff47d016c2b0eeecb) C:\Windows\system32\DRIVERS\rassstp.sys
22:39:40.0362 5256	RasSstp - ok
22:39:40.0378 5256	rdbss           (77f665941019a1594d887a74f301fa2f) C:\Windows\system32\DRIVERS\rdbss.sys
22:39:40.0409 5256	rdbss - ok
22:39:40.0409 5256	rdpbus          (302da2a0539f2cf54d7c6cc30c1f2d8d) C:\Windows\system32\DRIVERS\rdpbus.sys
22:39:40.0409 5256	rdpbus - ok
22:39:40.0409 5256	RDPCDD          (cea6cc257fc9b7715f1c2b4849286d24) C:\Windows\system32\DRIVERS\RDPCDD.sys
22:39:40.0440 5256	RDPCDD - ok
22:39:40.0456 5256	RDPDR           (1b6163c503398b23ff8b939c67747683) C:\Windows\system32\drivers\rdpdr.sys
22:39:40.0456 5256	RDPDR - ok
22:39:40.0456 5256	RDPENCDD        (bb5971a4f00659529a5c44831af22365) C:\Windows\system32\drivers\rdpencdd.sys
22:39:40.0487 5256	RDPENCDD - ok
22:39:40.0487 5256	RDPREFMP        (216f3fa57533d98e1f74ded70113177a) C:\Windows\system32\drivers\rdprefmp.sys
22:39:40.0503 5256	RDPREFMP - ok
22:39:40.0518 5256	RDPWD           (6d76e6433574b058adcb0c50df834492) C:\Windows\system32\drivers\RDPWD.sys
22:39:40.0518 5256	RDPWD - ok
22:39:40.0534 5256	rdyboost        (34ed295fa0121c241bfef24764fc4520) C:\Windows\system32\drivers\rdyboost.sys
22:39:40.0534 5256	rdyboost - ok
22:39:40.0550 5256	RemoteAccess    (254fb7a22d74e5511c73a3f6d802f192) C:\Windows\System32\mprdim.dll
22:39:40.0565 5256	RemoteAccess - ok
22:39:40.0581 5256	RemoteRegistry  (e4d94f24081440b5fc5aa556c7c62702) C:\Windows\system32\regsvc.dll
22:39:40.0612 5256	RemoteRegistry - ok
22:39:40.0612 5256	RpcEptMapper    (e4dc58cf7b3ea515ae917ff0d402a7bb) C:\Windows\System32\RpcEpMap.dll
22:39:40.0643 5256	RpcEptMapper - ok
22:39:40.0643 5256	RpcLocator      (d5ba242d4cf8e384db90e6a8ed850b8c) C:\Windows\system32\locator.exe
22:39:40.0643 5256	RpcLocator - ok
22:39:40.0659 5256	RpcSs           (5c627d1b1138676c0a7ab2c2c190d123) C:\Windows\system32\rpcss.dll
22:39:40.0690 5256	RpcSs - ok
22:39:40.0690 5256	rspndr          (ddc86e4f8e7456261e637e3552e804ff) C:\Windows\system32\DRIVERS\rspndr.sys
22:39:40.0721 5256	rspndr - ok
22:39:40.0737 5256	RTL8167         (f4c374b1c46de294b573bb43723ac3f6) C:\Windows\system32\DRIVERS\Rt64win7.sys
22:39:40.0737 5256	RTL8167 - ok
22:39:40.0752 5256	s3cap           (e60c0a09f997826c7627b244195ab581) C:\Windows\system32\drivers\vms3cap.sys
22:39:40.0752 5256	s3cap - ok
22:39:40.0752 5256	SamSs           (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe
22:39:40.0768 5256	SamSs - ok
22:39:40.0768 5256	sbp2port        (ac03af3329579fffb455aa2daabbe22b) C:\Windows\system32\drivers\sbp2port.sys
22:39:40.0768 5256	sbp2port - ok
22:39:40.0815 5256	SBSDWSCService  (794d4b48dfb6e999537c7c3947863463) C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe
22:39:40.0830 5256	SBSDWSCService - ok
22:39:40.0846 5256	SCardSvr        (9b7395789e3791a3b6d000fe6f8b131e) C:\Windows\System32\SCardSvr.dll
22:39:40.0877 5256	SCardSvr - ok
22:39:40.0877 5256	scfilter        (253f38d0d7074c02ff8deb9836c97d2b) C:\Windows\system32\DRIVERS\scfilter.sys
22:39:40.0908 5256	scfilter - ok
22:39:40.0924 5256	Schedule        (262f6592c3299c005fd6bec90fc4463a) C:\Windows\system32\schedsvc.dll
22:39:40.0971 5256	Schedule - ok
22:39:40.0971 5256	SCPolicySvc     (f17d1d393bbc69c5322fbfafaca28c7f) C:\Windows\System32\certprop.dll
22:39:40.0986 5256	SCPolicySvc - ok
22:39:41.0002 5256	SDRSVC          (6ea4234dc55346e0709560fe7c2c1972) C:\Windows\System32\SDRSVC.dll
22:39:41.0018 5256	SDRSVC - ok
22:39:41.0018 5256	secdrv          (3ea8a16169c26afbeb544e0e48421186) C:\Windows\system32\drivers\secdrv.sys
22:39:41.0033 5256	secdrv - ok
22:39:41.0049 5256	seclogon        (bc617a4e1b4fa8df523a061739a0bd87) C:\Windows\system32\seclogon.dll
22:39:41.0064 5256	seclogon - ok
22:39:41.0080 5256	SENS            (c32ab8fa018ef34c0f113bd501436d21) C:\Windows\System32\sens.dll
22:39:41.0096 5256	SENS - ok
22:39:41.0096 5256	SensrSvc        (0336cffafaab87a11541f1cf1594b2b2) C:\Windows\system32\sensrsvc.dll
22:39:41.0111 5256	SensrSvc - ok
22:39:41.0111 5256	Serenum         (cb624c0035412af0debec78c41f5ca1b) C:\Windows\system32\DRIVERS\serenum.sys
22:39:41.0111 5256	Serenum - ok
22:39:41.0127 5256	Serial          (c1d8e28b2c2adfaec4ba89e9fda69bd6) C:\Windows\system32\DRIVERS\serial.sys
22:39:41.0142 5256	Serial - ok
22:39:41.0142 5256	sermouse        (1c545a7d0691cc4a027396535691c3e3) C:\Windows\system32\DRIVERS\sermouse.sys
22:39:41.0142 5256	sermouse - ok
22:39:41.0158 5256	SessionEnv      (0b6231bf38174a1628c4ac812cc75804) C:\Windows\system32\sessenv.dll
22:39:41.0189 5256	SessionEnv - ok
22:39:41.0189 5256	sffdisk         (a554811bcd09279536440c964ae35bbf) C:\Windows\system32\drivers\sffdisk.sys
22:39:41.0189 5256	sffdisk - ok
22:39:41.0205 5256	sffp_mmc        (ff414f0baefeba59bc6c04b3db0b87bf) C:\Windows\system32\drivers\sffp_mmc.sys
22:39:41.0205 5256	sffp_mmc - ok
22:39:41.0205 5256	sffp_sd         (dd85b78243a19b59f0637dcf284da63c) C:\Windows\system32\drivers\sffp_sd.sys
22:39:41.0220 5256	sffp_sd - ok
22:39:41.0220 5256	sfloppy         (a9d601643a1647211a1ee2ec4e433ff4) C:\Windows\system32\DRIVERS\sfloppy.sys
22:39:41.0220 5256	sfloppy - ok
22:39:41.0236 5256	SharedAccess    (b95f6501a2f8b2e78c697fec401970ce) C:\Windows\System32\ipnathlp.dll
22:39:41.0267 5256	SharedAccess - ok
22:39:41.0283 5256	ShellHWDetection (aaf932b4011d14052955d4b212a4da8d) C:\Windows\System32\shsvcs.dll
22:39:41.0298 5256	ShellHWDetection - ok
22:39:41.0314 5256	SiSRaid2        (843caf1e5fde1ffd5ff768f23a51e2e1) C:\Windows\system32\DRIVERS\SiSRaid2.sys
22:39:41.0314 5256	SiSRaid2 - ok
22:39:41.0330 5256	SiSRaid4        (6a6c106d42e9ffff8b9fcb4f754f6da4) C:\Windows\system32\DRIVERS\sisraid4.sys
22:39:41.0330 5256	SiSRaid4 - ok
22:39:41.0345 5256	Smb             (548260a7b8654e024dc30bf8a7c5baa4) C:\Windows\system32\DRIVERS\smb.sys
22:39:41.0361 5256	Smb - ok
22:39:41.0376 5256	SNMPTRAP        (6313f223e817cc09aa41811daa7f541d) C:\Windows\System32\snmptrap.exe
22:39:41.0376 5256	SNMPTRAP - ok
22:39:41.0376 5256	spldr           (b9e31e5cacdfe584f34f730a677803f9) C:\Windows\system32\drivers\spldr.sys
22:39:41.0392 5256	spldr - ok
22:39:41.0408 5256	Spooler         (b96c17b5dc1424d56eea3a99e97428cd) C:\Windows\System32\spoolsv.exe
22:39:41.0439 5256	Spooler - ok
22:39:41.0532 5256	sppsvc          (e17e0188bb90fae42d83e98707efa59c) C:\Windows\system32\sppsvc.exe
22:39:41.0610 5256	sppsvc - ok
22:39:41.0642 5256	sppuinotify     (93d7d61317f3d4bc4f4e9f8a96a7de45) C:\Windows\system32\sppuinotify.dll
22:39:41.0673 5256	sppuinotify - ok
22:39:41.0688 5256	srv             (441fba48bff01fdb9d5969ebc1838f0b) C:\Windows\system32\DRIVERS\srv.sys
22:39:41.0704 5256	srv - ok
22:39:41.0720 5256	srv2            (b4adebbf5e3677cce9651e0f01f7cc28) C:\Windows\system32\DRIVERS\srv2.sys
22:39:41.0735 5256	srv2 - ok
22:39:41.0751 5256	srvnet          (27e461f0be5bff5fc737328f749538c3) C:\Windows\system32\DRIVERS\srvnet.sys
22:39:41.0751 5256	srvnet - ok
22:39:41.0766 5256	SSDPSRV         (51b52fbd583cde8aa9ba62b8b4298f33) C:\Windows\System32\ssdpsrv.dll
22:39:41.0798 5256	SSDPSRV - ok
22:39:41.0813 5256	SstpSvc         (ab7aebf58dad8daab7a6c45e6a8885cb) C:\Windows\system32\sstpsvc.dll
22:39:41.0829 5256	SstpSvc - ok
22:39:41.0844 5256	StarWindServiceAE (b1691af4a072cb674d600db16dd7308e) C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
22:39:41.0860 5256	StarWindServiceAE ( UnsignedFile.Multi.Generic ) - warning
22:39:41.0860 5256	StarWindServiceAE - detected UnsignedFile.Multi.Generic (1)
22:39:41.0860 5256	stexstor        (f3817967ed533d08327dc73bc4d5542a) C:\Windows\system32\DRIVERS\stexstor.sys
22:39:41.0860 5256	stexstor - ok
22:39:41.0876 5256	stisvc          (8dd52e8e6128f4b2da92ce27402871c1) C:\Windows\System32\wiaservc.dll
22:39:41.0907 5256	stisvc - ok
22:39:41.0907 5256	storflt         (7785dc213270d2fc066538daf94087e7) C:\Windows\system32\drivers\vmstorfl.sys
22:39:41.0907 5256	storflt - ok
22:39:41.0907 5256	StorSvc         (c40841817ef57d491f22eb103da587cc) C:\Windows\system32\storsvc.dll
22:39:41.0922 5256	StorSvc - ok
22:39:41.0922 5256	storvsc         (d34e4943d5ac096c8edeebfd80d76e23) C:\Windows\system32\drivers\storvsc.sys
22:39:41.0938 5256	storvsc - ok
22:39:41.0938 5256	swenum          (d01ec09b6711a5f8e7e6564a4d0fbc90) C:\Windows\system32\drivers\swenum.sys
22:39:41.0938 5256	swenum - ok
22:39:41.0969 5256	SwitchBoard     (f577910a133a592234ebaad3f3afa258) C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
22:39:41.0969 5256	SwitchBoard ( UnsignedFile.Multi.Generic ) - warning
22:39:41.0969 5256	SwitchBoard - detected UnsignedFile.Multi.Generic (1)
22:39:41.0985 5256	swprv           (e08e46fdd841b7184194011ca1955a0b) C:\Windows\System32\swprv.dll
22:39:42.0016 5256	swprv - ok
22:39:42.0063 5256	SysMain         (bf9ccc0bf39b418c8d0ae8b05cf95b7d) C:\Windows\system32\sysmain.dll
22:39:42.0110 5256	SysMain - ok
22:39:42.0141 5256	TabletInputService (e3c61fd7b7c2557e1f1b0b4cec713585) C:\Windows\System32\TabSvc.dll
22:39:42.0172 5256	TabletInputService - ok
22:39:42.0188 5256	TapiSrv         (40f0849f65d13ee87b9a9ae3c1dd6823) C:\Windows\System32\tapisrv.dll
22:39:42.0219 5256	TapiSrv - ok
22:39:42.0234 5256	TBS             (1be03ac720f4d302ea01d40f588162f6) C:\Windows\System32\tbssvc.dll
22:39:42.0250 5256	TBS - ok
22:39:42.0312 5256	Tcpip           (acb82bda8f46c84f465c1afa517dc4b9) C:\Windows\system32\drivers\tcpip.sys
22:39:42.0344 5256	Tcpip - ok
22:39:42.0437 5256	TCPIP6          (acb82bda8f46c84f465c1afa517dc4b9) C:\Windows\system32\DRIVERS\tcpip.sys
22:39:42.0468 5256	TCPIP6 - ok
22:39:42.0500 5256	tcpipreg        (df687e3d8836bfb04fcc0615bf15a519) C:\Windows\system32\drivers\tcpipreg.sys
22:39:42.0531 5256	tcpipreg - ok
22:39:42.0531 5256	TDPIPE          (3371d21011695b16333a3934340c4e7c) C:\Windows\system32\drivers\tdpipe.sys
22:39:42.0531 5256	TDPIPE - ok
22:39:42.0546 5256	TDTCP           (51c5eceb1cdee2468a1748be550cfbc8) C:\Windows\system32\drivers\tdtcp.sys
22:39:42.0546 5256	TDTCP - ok
22:39:42.0562 5256	tdx             (ddad5a7ab24d8b65f8d724f5c20fd806) C:\Windows\system32\DRIVERS\tdx.sys
22:39:42.0578 5256	tdx - ok
22:39:42.0593 5256	TermDD          (561e7e1f06895d78de991e01dd0fb6e5) C:\Windows\system32\drivers\termdd.sys
22:39:42.0593 5256	TermDD - ok
22:39:42.0609 5256	TermService     (2e648163254233755035b46dd7b89123) C:\Windows\System32\termsrv.dll
22:39:42.0640 5256	TermService - ok
22:39:42.0640 5256	Themes          (f0344071948d1a1fa732231785a0664c) C:\Windows\system32\themeservice.dll
22:39:42.0656 5256	Themes - ok
22:39:42.0671 5256	THREADORDER     (e40e80d0304a73e8d269f7141d77250b) C:\Windows\system32\mmcss.dll
22:39:42.0687 5256	THREADORDER - ok
22:39:42.0702 5256	TrkWks          (7e7afd841694f6ac397e99d75cead49d) C:\Windows\System32\trkwks.dll
22:39:42.0718 5256	TrkWks - ok
22:39:42.0734 5256	TrustedInstaller (773212b2aaa24c1e31f10246b15b276c) C:\Windows\servicing\TrustedInstaller.exe
22:39:42.0749 5256	TrustedInstaller - ok
22:39:42.0765 5256	tssecsrv        (ce18b2cdfc837c99e5fae9ca6cba5d30) C:\Windows\system32\DRIVERS\tssecsrv.sys
22:39:42.0780 5256	tssecsrv - ok
22:39:42.0780 5256	TsUsbFlt        (d11c783e3ef9a3c52c0ebe83cc5000e9) C:\Windows\system32\drivers\tsusbflt.sys
22:39:42.0796 5256	TsUsbFlt - ok
22:39:42.0796 5256	tunnel          (3566a8daafa27af944f5d705eaa64894) C:\Windows\system32\DRIVERS\tunnel.sys
22:39:42.0812 5256	tunnel - ok
22:39:42.0827 5256	uagp35          (b4dd609bd7e282bfc683cec7eaaaad67) C:\Windows\system32\DRIVERS\uagp35.sys
22:39:42.0827 5256	uagp35 - ok
22:39:42.0843 5256	udfs            (ff4232a1a64012baa1fd97c7b67df593) C:\Windows\system32\DRIVERS\udfs.sys
22:39:42.0874 5256	udfs - ok
22:39:42.0874 5256	UI0Detect       (3cbdec8d06b9968aba702eba076364a1) C:\Windows\system32\UI0Detect.exe
22:39:42.0890 5256	UI0Detect - ok
22:39:42.0890 5256	uliagpkx        (4bfe1bc28391222894cbf1e7d0e42320) C:\Windows\system32\drivers\uliagpkx.sys
22:39:42.0905 5256	uliagpkx - ok
22:39:42.0905 5256	umbus           (dc54a574663a895c8763af0fa1ff7561) C:\Windows\system32\drivers\umbus.sys
22:39:42.0921 5256	umbus - ok
22:39:42.0921 5256	UmPass          (b2e8e8cb557b156da5493bbddcc1474d) C:\Windows\system32\DRIVERS\umpass.sys
22:39:42.0921 5256	UmPass - ok
22:39:42.0936 5256	UmRdpService    (a293dcd756d04d8492a750d03b9a297c) C:\Windows\System32\umrdp.dll
22:39:42.0936 5256	UmRdpService - ok
22:39:43.0030 5256	UNS             (cd114ce02a10fa79c229770788106842) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
22:39:43.0077 5256	UNS - ok
22:39:43.0124 5256	upnphost        (d47ec6a8e81633dd18d2436b19baf6de) C:\Windows\System32\upnphost.dll
22:39:43.0170 5256	upnphost - ok
22:39:43.0186 5256	usbccgp         (6f1a3157a1c89435352ceb543cdb359c) C:\Windows\system32\DRIVERS\usbccgp.sys
22:39:43.0202 5256	usbccgp - ok
22:39:43.0202 5256	usbcir          (af0892a803fdda7492f595368e3b68e7) C:\Windows\system32\drivers\usbcir.sys
22:39:43.0217 5256	usbcir - ok
22:39:43.0217 5256	usbehci         (c025055fe7b87701eb042095df1a2d7b) C:\Windows\system32\drivers\usbehci.sys
22:39:43.0217 5256	usbehci - ok
22:39:43.0233 5256	usbhub          (287c6c9410b111b68b52ca298f7b8c24) C:\Windows\system32\DRIVERS\usbhub.sys
22:39:43.0248 5256	usbhub - ok
22:39:43.0248 5256	usbohci         (9840fc418b4cbd632d3d0a667a725c31) C:\Windows\system32\drivers\usbohci.sys
22:39:43.0248 5256	usbohci - ok
22:39:43.0264 5256	usbprint        (73188f58fb384e75c4063d29413cee3d) C:\Windows\system32\DRIVERS\usbprint.sys
22:39:43.0264 5256	usbprint - ok
22:39:43.0280 5256	usbscan         (aaa2513c8aed8b54b189fd0c6b1634c0) C:\Windows\system32\DRIVERS\usbscan.sys
22:39:43.0280 5256	usbscan - ok
22:39:43.0295 5256	USBSTOR         (fed648b01349a3c8395a5169db5fb7d6) C:\Windows\system32\DRIVERS\USBSTOR.SYS
22:39:43.0295 5256	USBSTOR - ok
22:39:43.0311 5256	usbuhci         (62069a34518bcf9c1fd9e74b3f6db7cd) C:\Windows\system32\drivers\usbuhci.sys
22:39:43.0311 5256	usbuhci - ok
22:39:43.0311 5256	UxSms           (edbb23cbcf2cdf727d64ff9b51a6070e) C:\Windows\System32\uxsms.dll
22:39:43.0342 5256	UxSms - ok
22:39:43.0342 5256	VaultSvc        (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe
22:39:43.0342 5256	VaultSvc - ok
22:39:43.0358 5256	VClone          (fd911873c0bb6945fa38c16e9a2b58f9) C:\Windows\system32\DRIVERS\VClone.sys
22:39:43.0358 5256	VClone - ok
22:39:43.0358 5256	vdrvroot        (c5c876ccfc083ff3b128f933823e87bd) C:\Windows\system32\drivers\vdrvroot.sys
22:39:43.0373 5256	vdrvroot - ok
22:39:43.0389 5256	vds             (8d6b481601d01a456e75c3210f1830be) C:\Windows\System32\vds.exe
22:39:43.0420 5256	vds - ok
22:39:43.0420 5256	vga             (da4da3f5e02943c2dc8c6ed875de68dd) C:\Windows\system32\DRIVERS\vgapnp.sys
22:39:43.0436 5256	vga - ok
22:39:43.0436 5256	VgaSave         (53e92a310193cb3c03bea963de7d9cfc) C:\Windows\System32\drivers\vga.sys
22:39:43.0451 5256	VgaSave - ok
22:39:43.0467 5256	vhdmp           (2ce2df28c83aeaf30084e1b1eb253cbb) C:\Windows\system32\drivers\vhdmp.sys
22:39:43.0467 5256	vhdmp - ok
22:39:43.0467 5256	viaide          (e5689d93ffe4e5d66c0178761240dd54) C:\Windows\system32\drivers\viaide.sys
22:39:43.0482 5256	viaide - ok
22:39:43.0482 5256	vmbus           (86ea3e79ae350fea5331a1303054005f) C:\Windows\system32\drivers\vmbus.sys
22:39:43.0498 5256	vmbus - ok
22:39:43.0498 5256	VMBusHID        (7de90b48f210d29649380545db45a187) C:\Windows\system32\drivers\VMBusHID.sys
22:39:43.0498 5256	VMBusHID - ok
22:39:43.0514 5256	volmgr          (d2aafd421940f640b407aefaaebd91b0) C:\Windows\system32\drivers\volmgr.sys
22:39:43.0514 5256	volmgr - ok
22:39:43.0529 5256	volmgrx         (a255814907c89be58b79ef2f189b843b) C:\Windows\system32\drivers\volmgrx.sys
22:39:43.0545 5256	volmgrx - ok
22:39:43.0545 5256	volsnap         (0d08d2f3b3ff84e433346669b5e0f639) C:\Windows\system32\drivers\volsnap.sys
22:39:43.0560 5256	volsnap - ok
22:39:43.0576 5256	vsmraid         (5e2016ea6ebaca03c04feac5f330d997) C:\Windows\system32\DRIVERS\vsmraid.sys
22:39:43.0576 5256	vsmraid - ok
22:39:43.0623 5256	VSS             (b60ba0bc31b0cb414593e169f6f21cc2) C:\Windows\system32\vssvc.exe
22:39:43.0670 5256	VSS - ok
22:39:43.0701 5256	vwifibus        (36d4720b72b5c5d9cb2b9c29e9df67a1) C:\Windows\system32\DRIVERS\vwifibus.sys
22:39:43.0716 5256	vwifibus - ok
22:39:43.0716 5256	vwififlt        (6a3d66263414ff0d6fa754c646612f3f) C:\Windows\system32\DRIVERS\vwififlt.sys
22:39:43.0732 5256	vwififlt - ok
22:39:43.0748 5256	W32Time         (1c9d80cc3849b3788048078c26486e1a) C:\Windows\system32\w32time.dll
22:39:43.0779 5256	W32Time - ok
22:39:43.0779 5256	WacomPen        (4e9440f4f152a7b944cb1663d3935a3e) C:\Windows\system32\DRIVERS\wacompen.sys
22:39:43.0794 5256	WacomPen - ok
22:39:43.0794 5256	WANARP          (356afd78a6ed4457169241ac3965230c) C:\Windows\system32\DRIVERS\wanarp.sys
22:39:43.0810 5256	WANARP - ok
22:39:43.0810 5256	Wanarpv6        (356afd78a6ed4457169241ac3965230c) C:\Windows\system32\DRIVERS\wanarp.sys
22:39:43.0826 5256	Wanarpv6 - ok
22:39:43.0872 5256	wbengine        (78f4e7f5c56cb9716238eb57da4b6a75) C:\Windows\system32\wbengine.exe
22:39:43.0919 5256	wbengine - ok
22:39:43.0966 5256	WbioSrvc        (3aa101e8edab2db4131333f4325c76a3) C:\Windows\System32\wbiosrvc.dll
22:39:43.0982 5256	WbioSrvc - ok
22:39:43.0997 5256	wcncsvc         (7368a2afd46e5a4481d1de9d14848edd) C:\Windows\System32\wcncsvc.dll
22:39:44.0013 5256	wcncsvc - ok
22:39:44.0013 5256	WcsPlugInService (20f7441334b18cee52027661df4a6129) C:\Windows\System32\WcsPlugInService.dll
22:39:44.0028 5256	WcsPlugInService - ok
22:39:44.0028 5256	Wd              (72889e16ff12ba0f235467d6091b17dc) C:\Windows\system32\DRIVERS\wd.sys
22:39:44.0044 5256	Wd - ok
22:39:44.0060 5256	Wdf01000        (441bd2d7b4f98134c3a4f9fa570fd250) C:\Windows\system32\drivers\Wdf01000.sys
22:39:44.0075 5256	Wdf01000 - ok
22:39:44.0091 5256	WdiServiceHost  (bf1fc3f79b863c914687a737c2f3d681) C:\Windows\system32\wdi.dll
22:39:44.0106 5256	WdiServiceHost - ok
22:39:44.0106 5256	WdiSystemHost   (bf1fc3f79b863c914687a737c2f3d681) C:\Windows\system32\wdi.dll
22:39:44.0106 5256	WdiSystemHost - ok
22:39:44.0122 5256	WebClient       (3db6d04e1c64272f8b14eb8bc4616280) C:\Windows\System32\webclnt.dll
22:39:44.0138 5256	WebClient - ok
22:39:44.0138 5256	Wecsvc          (c749025a679c5103e575e3b48e092c43) C:\Windows\system32\wecsvc.dll
22:39:44.0169 5256	Wecsvc - ok
22:39:44.0184 5256	wercplsupport   (7e591867422dc788b9e5bd337a669a08) C:\Windows\System32\wercplsupport.dll
22:39:44.0200 5256	wercplsupport - ok
22:39:44.0216 5256	WerSvc          (6d137963730144698cbd10f202e9f251) C:\Windows\System32\WerSvc.dll
22:39:44.0231 5256	WerSvc - ok
22:39:44.0247 5256	WfpLwf          (611b23304bf067451a9fdee01fbdd725) C:\Windows\system32\DRIVERS\wfplwf.sys
22:39:44.0262 5256	WfpLwf - ok
22:39:44.0262 5256	WIMMount        (05ecaec3e4529a7153b3136ceb49f0ec) C:\Windows\system32\drivers\wimmount.sys
22:39:44.0278 5256	WIMMount - ok
22:39:44.0278 5256	WinDefend - ok
22:39:44.0278 5256	WinHttpAutoProxySvc - ok
22:39:44.0294 5256	Winmgmt         (19b07e7e8915d701225da41cb3877306) C:\Windows\system32\wbem\WMIsvc.dll
22:39:44.0309 5256	Winmgmt - ok
22:39:44.0372 5256	WinRM           (bcb1310604aa415c4508708975b3931e) C:\Windows\system32\WsmSvc.dll
22:39:44.0418 5256	WinRM - ok
22:39:44.0481 5256	Wlansvc         (4fada86e62f18a1b2f42ba18ae24e6aa) C:\Windows\System32\wlansvc.dll
22:39:44.0496 5256	Wlansvc - ok
22:39:44.0512 5256	WmiAcpi         (f6ff8944478594d0e414d3f048f0d778) C:\Windows\system32\drivers\wmiacpi.sys
22:39:44.0512 5256	WmiAcpi - ok
22:39:44.0543 5256	wmiApSrv        (38b84c94c5a8af291adfea478ae54f93) C:\Windows\system32\wbem\WmiApSrv.exe
22:39:44.0543 5256	wmiApSrv - ok
22:39:44.0543 5256	WMPNetworkSvc - ok
22:39:44.0559 5256	WPCSvc          (96c6e7100d724c69fcf9e7bf590d1dca) C:\Windows\System32\wpcsvc.dll
22:39:44.0559 5256	WPCSvc - ok
22:39:44.0574 5256	WPDBusEnum      (93221146d4ebbf314c29b23cd6cc391d) C:\Windows\system32\wpdbusenum.dll
22:39:44.0574 5256	WPDBusEnum - ok
22:39:44.0574 5256	ws2ifsl         (6bcc1d7d2fd2453957c5479a32364e52) C:\Windows\system32\drivers\ws2ifsl.sys
22:39:44.0606 5256	ws2ifsl - ok
22:39:44.0621 5256	wscsvc          (e8b1fe6669397d1772d8196df0e57a9e) C:\Windows\System32\wscsvc.dll
22:39:44.0621 5256	wscsvc - ok
22:39:44.0621 5256	WSearch - ok
22:39:44.0699 5256	wuauserv        (9df12edbc698b0bc353b3ef84861e430) C:\Windows\system32\wuaueng.dll
22:39:44.0746 5256	wuauserv - ok
22:39:44.0793 5256	WudfPf          (d3381dc54c34d79b22cee0d65ba91b7c) C:\Windows\system32\drivers\WudfPf.sys
22:39:44.0808 5256	WudfPf - ok
22:39:44.0824 5256	WUDFRd          (cf8d590be3373029d57af80914190682) C:\Windows\system32\DRIVERS\WUDFRd.sys
22:39:44.0855 5256	WUDFRd - ok
22:39:44.0871 5256	wudfsvc         (7a95c95b6c4cf292d689106bcae49543) C:\Windows\System32\WUDFSvc.dll
22:39:44.0886 5256	wudfsvc - ok
22:39:44.0902 5256	WwanSvc         (9a3452b3c2a46c073166c5cf49fad1ae) C:\Windows\System32\wwansvc.dll
22:39:44.0918 5256	WwanSvc - ok
22:39:44.0918 5256	MBR (0x1B8)     (a36c5e4f47e84449ff07ed3517b43a31) \Device\Harddisk0\DR0
22:39:45.0042 5256	\Device\Harddisk0\DR0 - ok
22:39:45.0042 5256	MBR (0x1B8)     (a36c5e4f47e84449ff07ed3517b43a31) \Device\Harddisk1\DR1
22:39:45.0510 5256	\Device\Harddisk1\DR1 - ok
22:39:45.0510 5256	Boot (0x1200)   (3861f9930ddf7e6d750b32dc792d7780) \Device\Harddisk0\DR0\Partition0
22:39:45.0510 5256	\Device\Harddisk0\DR0\Partition0 - ok
22:39:45.0526 5256	Boot (0x1200)   (9749c4f7ad4716c0da0c16e09186ec7c) \Device\Harddisk0\DR0\Partition1
22:39:45.0526 5256	\Device\Harddisk0\DR0\Partition1 - ok
22:39:45.0526 5256	Boot (0x1200)   (b1e27aa018409de6bfd73f8afb883a65) \Device\Harddisk1\DR1\Partition0
22:39:45.0526 5256	\Device\Harddisk1\DR1\Partition0 - ok
22:39:45.0526 5256	Boot (0x1200)   (e438f11ef70cd677f66a3b656b12f195) \Device\Harddisk1\DR1\Partition1
22:39:45.0526 5256	\Device\Harddisk1\DR1\Partition1 - ok
22:39:45.0526 5256	Boot (0x1200)   (3e9b87f4d0a51e122513201ca262f0cf) \Device\Harddisk1\DR1\Partition2
22:39:45.0526 5256	\Device\Harddisk1\DR1\Partition2 - ok
22:39:45.0542 5256	Boot (0x1200)   (e7baf98192e63f3b2b691b12ef9cbed9) \Device\Harddisk1\DR1\Partition3
22:39:45.0542 5256	\Device\Harddisk1\DR1\Partition3 - ok
22:39:45.0542 5256	Boot (0x1200)   (9c20a74263925ec75cb85ed8b94f1777) \Device\Harddisk1\DR1\Partition4
22:39:45.0542 5256	\Device\Harddisk1\DR1\Partition4 - ok
22:39:45.0542 5256	Boot (0x1200)   (a7bd39d4cedf0caf48bf5253c1a8c224) \Device\Harddisk1\DR1\Partition5
22:39:45.0542 5256	\Device\Harddisk1\DR1\Partition5 - ok
22:39:45.0542 5256	============================================================
22:39:45.0542 5256	Scan finished
22:39:45.0542 5256	============================================================
22:39:45.0557 5248	Detected object count: 2
22:39:45.0557 5248	Actual detected object count: 2
22:40:01.0656 5248	StarWindServiceAE ( UnsignedFile.Multi.Generic ) - skipped by user
22:40:01.0656 5248	StarWindServiceAE ( UnsignedFile.Multi.Generic ) - User select action: Skip 
22:40:01.0656 5248	SwitchBoard ( UnsignedFile.Multi.Generic ) - skipped by user
22:40:01.0656 5248	SwitchBoard ( UnsignedFile.Multi.Generic ) - User select action: Skip 
22:40:25.0245 3164	Deinitialize success

cosinus · 23.05.2012, 21:43

Nein das ist ok

Dann bitte jetzt CF ausführen:

ComboFix

Ein Leitfaden und Tutorium zur Nutzung von ComboFix

Lade dir ComboFix hier herunter auf deinen Desktop.

Schliesse alle Programme, vor allem dein Antivirenprogramm und andere Hintergrundwächter sowie deinen Internetbrowser.

Starte combofix.exe von deinem Desktop aus, bestätige die Warnmeldungen, führe die Updates durch (falls vorgeschlagen), installiere die Wiederherstellungskonsole (falls vorgeschlagen) und lass dein System durchsuchen.
Vermeide es auch während Combofix läuft die Maus und Tastatur zu benutzen.

Im Anschluss öffnet sich automatisch eine combofix.txt, diesen Inhalt bitte kopieren ([Strg]a, [Strg]c) und in deinen Beitrag einfügen ([Strg]v). Die Datei findest du außerdem unter: C:\ComboFix.txt.

Wichtiger Hinweis:

Combofix darf ausschließlich ausgeführt werden, wenn ein Kompetenzler dies ausdrücklich empfohlen hat!

Es sollte nie auf eigene Initiative hin ausgeführt werden! Eine falsche Benutzung kann ernsthafte Computerprobleme nach sich ziehen und eine Bereinigung der Infektion noch erschweren.

Solltest du nach der Ausführung von Combofix Probleme beim Starten von Anwendungen haben und Meldungen erhalten wie

Zitat:

Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.

startest du Windows dann manuell neu und die Fehlermeldungen sollten nicht mehr auftauchen.

Trox · 23.05.2012, 22:10

Code:

ATTFilter

ComboFix 12-05-23.05 - Kutti 23.05.2012  23:00:04.1.4 - x64
Microsoft Windows 7 Professional   6.1.7601.1.1252.49.1031.18.8105.6209 [GMT 2:00]
ausgeführt von:: c:\users\Kutti\Downloads\ComboFix.exe
AV: AVG Anti-Virus Free Edition 2012 *Disabled/Updated* {5A2746B1-DEE9-F85A-FBCD-ADB11639C5F0}
SP: AVG Anti-Virus Free Edition 2012 *Disabled/Updated* {E146A755-F8D3-F7D4-C17D-96C36DBE8F4D}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
(((((((((((((((((((((((   Dateien erstellt von 2012-04-23 bis 2012-05-23  ))))))))))))))))))))))))))))))
.
.
2012-05-23 20:07 . 2012-05-23 20:07	--------	d-----w-	C:\_OTL
2012-05-22 14:25 . 2012-05-22 14:25	283200	----a-w-	c:\windows\system32\drivers\dtsoftbus01.sys
2012-05-22 14:25 . 2012-05-22 14:25	--------	d-----w-	c:\program files (x86)\DAEMON Tools Lite
2012-05-13 23:14 . 2012-05-13 23:14	--------	d-----w-	c:\program files (x86)\ MALWAREBYTES ANTI-MALWARE 
2012-05-13 21:19 . 2012-05-13 21:19	--------	d-----w-	c:\users\Kutti\AppData\Roaming\Malwarebytes
2012-05-13 21:19 . 2012-05-13 23:07	--------	d-----w-	c:\programdata\Malwarebytes
2012-05-13 21:19 . 2012-05-13 21:19	--------	d-----w-	c:\program files (x86)\Malwarebytes' Anti-Malware
2012-05-13 21:19 . 2012-04-04 13:56	24904	----a-w-	c:\windows\system32\drivers\mbam.sys
2012-05-13 20:34 . 2012-05-13 20:34	--------	d-----w-	c:\program files (x86)\ESET
2012-05-11 21:40 . 2012-03-30 11:35	1918320	----a-w-	c:\windows\system32\drivers\tcpip.sys
2012-05-11 21:40 . 2012-03-31 06:05	5559664	----a-w-	c:\windows\system32\ntoskrnl.exe
2012-05-11 21:40 . 2012-03-31 04:39	3968368	----a-w-	c:\windows\SysWow64\ntkrnlpa.exe
2012-05-11 21:40 . 2012-03-31 04:39	3913072	----a-w-	c:\windows\SysWow64\ntoskrnl.exe
2012-05-11 21:40 . 2012-03-31 03:10	3146240	----a-w-	c:\windows\system32\win32k.sys
2012-05-11 21:39 . 2012-03-03 06:35	1544704	----a-w-	c:\windows\system32\DWrite.dll
2012-05-11 21:39 . 2012-03-03 05:31	1077248	----a-w-	c:\windows\SysWow64\DWrite.dll
2012-05-11 21:39 . 2012-03-31 05:42	1732096	----a-w-	c:\program files\Windows Journal\NBDoc.DLL
2012-05-11 21:39 . 2012-03-31 05:40	1402880	----a-w-	c:\program files\Windows Journal\JNWDRV.dll
2012-05-11 21:39 . 2012-03-31 05:40	1367552	----a-w-	c:\program files\Common Files\Microsoft Shared\ink\journal.dll
2012-05-11 21:39 . 2012-03-31 05:40	1393664	----a-w-	c:\program files\Windows Journal\JNTFiltr.dll
2012-05-11 21:39 . 2012-03-31 04:29	936960	----a-w-	c:\program files (x86)\Common Files\Microsoft Shared\ink\journal.dll
2012-05-11 21:39 . 2012-03-17 07:58	75120	----a-w-	c:\windows\system32\drivers\partmgr.sys
2012-04-26 13:34 . 2012-04-26 13:43	--------	d-----w-	c:\users\Kutti\AppData\Local\Songbird2
2012-04-26 13:34 . 2012-04-26 13:34	--------	d-----w-	c:\users\Kutti\AppData\Roaming\Songbird2
2012-04-26 13:34 . 2012-01-19 11:21	15664	----a-w-	c:\windows\SysWow64\drivers\GEARAspiWDM.sys
2012-04-26 13:34 . 2012-01-19 11:21	109360	----a-w-	c:\windows\SysWow64\GEARAspi.dll
2012-04-26 13:34 . 2012-04-26 13:34	--------	d-----w-	c:\program files (x86)\Songbird
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-05-10 23:35 . 2012-03-30 05:32	419488	----a-w-	c:\windows\SysWow64\FlashPlayerApp.exe
2012-05-10 23:35 . 2011-06-08 10:56	70304	----a-w-	c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2012-03-01 06:46 . 2012-04-17 06:36	23408	----a-w-	c:\windows\system32\drivers\fs_rec.sys
2012-03-01 06:38 . 2012-04-17 06:36	220672	----a-w-	c:\windows\system32\wintrust.dll
2012-03-01 06:33 . 2012-04-17 06:36	81408	----a-w-	c:\windows\system32\imagehlp.dll
2012-03-01 06:28 . 2012-04-17 06:36	5120	----a-w-	c:\windows\system32\wmi.dll
2012-03-01 05:37 . 2012-04-17 06:36	172544	----a-w-	c:\windows\SysWow64\wintrust.dll
2012-03-01 05:33 . 2012-04-17 06:36	159232	----a-w-	c:\windows\SysWow64\imagehlp.dll
2012-03-01 05:29 . 2012-04-17 06:36	5120	----a-w-	c:\windows\SysWow64\wmi.dll
2012-02-28 06:56 . 2012-04-17 06:36	2311168	----a-w-	c:\windows\system32\jscript9.dll
2012-02-28 06:49 . 2012-04-17 06:36	1390080	----a-w-	c:\windows\system32\wininet.dll
2012-02-28 06:48 . 2012-04-17 06:36	1493504	----a-w-	c:\windows\system32\inetcpl.cpl
2012-02-28 06:42 . 2012-04-17 06:36	2382848	----a-w-	c:\windows\system32\mshtml.tlb
2012-02-28 01:18 . 2012-04-17 06:36	1799168	----a-w-	c:\windows\SysWow64\jscript9.dll
2012-02-28 01:11 . 2012-04-17 06:36	1427456	----a-w-	c:\windows\SysWow64\inetcpl.cpl
2012-02-28 01:11 . 2012-04-17 06:36	1127424	----a-w-	c:\windows\SysWow64\wininet.dll
2012-02-28 01:03 . 2012-04-17 06:36	2382848	----a-w-	c:\windows\SysWow64\mshtml.tlb
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1475584]
"AlcoholAutomount"="c:\program files (x86)\Alcohol Soft\Alcohol 120\axcmd.exe" [2009-09-30 203928]
"DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2012-04-17 3671872]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"AVG_TRAY"="c:\program files (x86)\AVG\AVG2012\avgtray.exe" [2012-01-24 2416480]
"XFastUsb"="c:\program files (x86)\XFastUsb\XFastUsb.exe" [2011-06-08 4942336]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2010-05-27 98304]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-01-03 843712]
"SwitchBoard"="c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe" [2010-02-19 517096]
"AdobeCS5ServiceManager"="c:\program files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" [2010-02-22 406992]
"Malwarebytes' Anti-Malware"="c:\program files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" [2012-04-04 462408]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"Duden Korrektor SysTray"="c:\program files (x86)\Duden\Duden-Rechtschreibprüfung\DKTray.exe" [2011-07-14 332432]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute	REG_MULTI_SZ   	autocheck autochk *\0c:\progra~2\AVG\AVG2012\avgrsa.exe /sync /restart
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2012-04-04 654408]
R2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2011-02-22 2656280]
R3 AVGIDSAgent;AVGIDSAgent;c:\program files (x86)\AVG\AVG2012\AVGIDSAgent.exe [2011-10-12 4433248]
R3 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\DRIVERS\AVGIDSDriver.Sys [x]
R3 AVGIDSFilter;AVGIDSFilter;c:\windows\system32\DRIVERS\AVGIDSFilter.Sys [x]
R3 cphs;Intel(R) Content Protection HECI Service;c:\windows\SysWow64\IntelCpHeciSvc.exe [2012-02-14 276248]
R3 cpuz130;cpuz130;c:\users\Kutti\AppData\Local\Temp\cpuz130\cpuz_x64.sys [x]
R3 LGVirHid;Logitech Gamepanel Virtual HID Device Driver;c:\windows\system32\drivers\LGVirHid.sys [x]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [x]
R3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2012-04-21 129976]
R3 SwitchBoard;SwitchBoard;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
S0 AVGIDSEH;AVGIDSEH;c:\windows\system32\DRIVERS\AVGIDSEH.Sys [x]
S0 Avgrkx64;AVG Anti-Rootkit Driver;c:\windows\system32\DRIVERS\avgrkx64.sys [x]
S1 AsrAppCharger;AsrAppCharger;c:\windows\system32\DRIVERS\AsrAppCharger.sys [x]
S1 Avgldx64;AVG AVI Loader Driver;c:\windows\system32\DRIVERS\avgldx64.sys [x]
S1 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield;c:\windows\system32\DRIVERS\avgmfx64.sys [x]
S1 Avgtdia;AVG TDI Driver;c:\windows\system32\DRIVERS\avgtdia.sys [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [x]
S1 FNETURPX;FNETURPX;c:\windows\system32\drivers\FNETURPX.SYS [x]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x]
S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-01-03 63928]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [x]
S2 avgwd;AVG WatchDog;c:\program files (x86)\AVG\AVG2012\avgwdsvc.exe [2011-08-02 192776]
S2 SBSDWSCService;SBSD Security Center Service;c:\program files (x86)\Spybot - Search & Destroy\SDWinSec.exe [2009-01-26 1153368]
S3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atikmdag.sys [x]
S3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [x]
S3 FNETTBOH_305;FNETTBOH_305;c:\windows\system32\drivers\FNETTBOH_305.SYS [x]
S3 LGBusEnum;Logitech GamePanel Virtual Bus Enumerator Driver;c:\windows\system32\drivers\LGBusEnum.sys [x]
S3 LGSHidFilt;Logitech Gaming KMDF HID Filter Driver;c:\windows\system32\DRIVERS\LGSHidFilt.Sys [x]
S3 MEIx64;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [x]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*NewlyCreated* - WS2IFSL
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\6de2ed6f-0b56-4d57-b0f0-551ec8cbb27f]
2011-07-01 10:38	153232	---ha-w-	c:\programdata\Duden\DKReg.exe
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-11-30 11660904]
"AdobeAAMUpdater-1.0"="c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2011-03-30 499608]
"Launch LCore"="c:\program files\Logitech Gaming Software\LCore.exe" [2011-09-29 110360]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2012-02-14 170264]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2012-02-14 398616]
"Persistence"="c:\windows\system32\igfxpers.exe" [2012-02-14 440600]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"LoadAppInit_DLLs"=0x0
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://search.linkury.com
mLocal Page = c:\windows\SysWOW64\blank.htm
uSearchAssistant = hxxp://cloud-search.linkury.com/results.htm?cx=partner-pub-7890126930977991:1926905636&cof=FORID:11&q={searchTerms}&sa=Search&siteurl=search.linkury.com
TCP: DhcpNameServer = 192.168.178.1
FF - ProfilePath - c:\users\Kutti\AppData\Roaming\Mozilla\Firefox\Profiles\8q14n56l.default\
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Wow6432Node-HKCU-Run-ASRockXTU - (no file)
Wow6432Node-HKCU-Run-AdobeBridge - (no file)
Wow6432Node-HKCU-Run-RESTART_STICKY_NOTES - c:\windows\System32\StikyNot.exe
ShellIconOverlayIdentifiers-{FB314ED9-A251-47B7-93E1-CDD82E34AF8B} - (no file)
ShellIconOverlayIdentifiers-{FB314EDA-A251-47B7-93E1-CDD82E34AF8B} - (no file)
ShellIconOverlayIdentifiers-{FB314EDB-A251-47B7-93E1-CDD82E34AF8B} - (no file)
ShellIconOverlayIdentifiers-{FB314EDC-A251-47B7-93E1-CDD82E34AF8B} - (no file)
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil11e_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil11e_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11e.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11e.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11e.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11e.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\program files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2012-05-23  23:03:52 - PC wurde neu gestartet
ComboFix-quarantined-files.txt  2012-05-23 21:03
.
Vor Suchlauf: 11 Verzeichnis(se), 52.140.462.080 Bytes frei
Nach Suchlauf: 18 Verzeichnis(se), 51.964.043.264 Bytes frei
.
- - End Of File - - B42A70BB510B8080B6B1C34281BDF088

cosinus · 24.05.2012, 20:18

Downloade dir bitte aswMBR.exe und speichere die Datei auf deinem Desktop.

Hinweis: Bitte den Virenscanner abstellen bevor du aswMBR ausführst, denn v.a. Avira meldet darin oft einen Fehalalrm!

Starte die aswMBR.exe Vista und Win7 User aswMBR per Rechtsklick "als Administrator ausführen"
Das Tool wird dich fragen, ob Du mit der aktuellen Virendefinition von AVAST! dein System scannen willst. Beantworte diese Frage bitte mit Ja. (Sollte deine Firewall fragen, bitte den Zugriff auf das Internet zulassen) Der Download der Definitionen kann je nach Verbindung eine Weile dauern.
Klicke auf Scan.
Warte bitte bis Scan finished successfully im DOS Fenster steht.
Drücke auf Save Log und speichere diese auf dem Desktop.

Poste mir die aswMBR.txt in deiner nächsten Antwort. Wichtig: Drücke keinesfalls einen der Fix Buttons ohne Anweisung Hinweis: Sollte der Scan Button ausgeblendet sein, schließe das Tool und starte es erneut. Sollte es erneut nicht klappen teile mir das bitte mit.

Noch ein Hinweis: Sollte aswMBR abstürzen und es kommt eine Meldung wie "aswMBR.exe funktioniert nicht mehr, dann mach Folgendes:
Starte aswMBR neu, wähle unten links im Drop-Down-Menü (unten links im Fenster von aswMBR) bei "AV scan" (none) aus und klick nochmal auf den Scan-Button.

Trox · 24.05.2012, 23:21

Also hier noch das Logfile von aswMBR:
Aber wonach suchen wir denn eigentlich so genau?

Dass das Problem nicht mehr besteht, seit ich meinen Firefox neu installiert habe, hast Du noch im Hinterkopf?

Trotzdem schon mal danke für Deine Gründlichkeit

Code:

ATTFilter

aswMBR version 0.9.9.1665 Copyright(c) 2011 AVAST Software
Run date: 2012-05-25 00:01:35
-----------------------------
00:01:35.218    OS Version: Windows x64 6.1.7601 Service Pack 1
00:01:35.218    Number of processors: 4 586 0x2A07
00:01:35.218    ComputerName: KUTTINAT0R  UserName: Kutti
00:01:35.389    Initialize success
00:03:05.971    AVAST engine defs: 12052401
00:08:46.426    Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP2T0L0-2
00:08:46.426    Disk 0 Vendor: INTEL_SSDSA2CW120G3 4PC10302 Size: 114473MB BusType: 11
00:08:46.426    Disk 1  \Device\Harddisk1\DR1 -> \Device\Ide\IdeDeviceP3T0L0-3
00:08:46.426    Disk 1 Vendor: WDC_WD20EARS-00MVWB0 51.0AB51 Size: 1907729MB BusType: 11
00:08:46.426    Disk 0 MBR read successfully
00:08:46.442    Disk 0 MBR scan
00:08:46.442    Disk 0 Windows 7 default MBR code
00:08:46.442    Disk 0 Partition 1 80 (A) 07    HPFS/NTFS NTFS          100 MB offset 2048
00:08:46.442    Disk 0 Partition 2 00     07    HPFS/NTFS NTFS       114371 MB offset 206848
00:08:46.457    Disk 0 scanning C:\Windows\system32\drivers
00:08:48.641    Service scanning
00:08:53.977    Modules scanning
00:08:53.977    Disk 0 trace - called modules:
00:08:53.992    ntoskrnl.exe CLASSPNP.SYS disk.sys ataport.SYS PCIIDEX.SYS hal.dll msahci.sys 
00:08:53.992    1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa800786c060]
00:08:53.992    3 CLASSPNP.SYS[fffff8800165143f] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP2T0L0-2[0xfffffa8007658060]
00:08:54.164    AVAST engine scan C:\Windows
00:08:54.663    AVAST engine scan C:\Windows\system32
00:09:45.457    AVAST engine scan C:\Windows\system32\drivers
00:09:48.000    AVAST engine scan C:\Users\Kutti
00:10:16.298    AVAST engine scan C:\ProgramData
00:10:26.516    Scan finished successfully
00:14:08.005    Disk 0 MBR has been saved successfully to "C:\Users\Kutti\Desktop\MBR.dat"
00:14:08.005    The log file has been saved successfully to "C:\Users\Kutti\Desktop\aswMBR.txt"

cosinus · 25.05.2012, 10:56

Das sind Routinechecks, beu den heutigen Schädlingen muss man schon immer auf Root- und Bootkits prüfen!

Sieht ok aus. Wir sollten fast durch sein. Mach bitte zur Kontrolle Vollscans mit Malwarebytes und SUPERAntiSpyware und poste die Logs.
Denk dran beide Tools zu updaten vor dem Scan!!

Internet ist extrem langsam / komische Fehlermeldung 502 mit asiatischen Schriftzeichen

Log-Analyse und Auswertung: Internet ist extrem langsam / komische Fehlermeldung 502 mit asiatischen Schriftzeichen