Zurück   Trojaner-Board > Malware entfernen > Log-Analyse und Auswertung

Log-Analyse und Auswertung: Hijacker? Statt Google nur noch "Mystart"

Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.

Antwort
Alt 30.07.2012, 22:26   #1
DarkAlb
 
Hijacker? Statt Google nur noch "Mystart" - Standard

Hijacker? Statt Google nur noch "Mystart"



Hallo miteinander!
Seit heute Nachmittag habe ich folgendes Problem. Bei Google Chrome wird nun nicht mehr mit Google gesucht, sondern mit "Mystart". Also immer wenn ich in der Addressleiste ein Suchwort eingebe erscheint nun nicht mehr Google sondern die andere Seite. Im Netz habe ich gelesen, dass es sich hierbei um einen Hijacker handeln könnte. Nun bitte ich um Hilfe, um dieses Problem los zu werden.

Danke schon mal im Voraus!


P.S. die Logfiles hänge ich an diesen Post an.

Alt 30.07.2012, 23:36   #2
t'john
/// Helfer-Team
 
Hijacker? Statt Google nur noch "Mystart" - Standard

Hijacker? Statt Google nur noch "Mystart"





Fixen mit OTL

Lade (falls noch nicht vorhanden) OTL von Oldtimer herunter und speichere es auf Deinem Desktop (nicht woanders hin).

  • Deaktiviere etwaige Virenscanner wie Avira, Kaspersky etc.
  • Starte die OTL.exe.
    Vista- und Windows 7-User starten mit Rechtsklick auf das Programm-Icon und wählen "Als Administrator ausführen".
  • Kopiere folgendes Skript in das Textfeld unterhalb von Benuterdefinierte Scans/Fixes:


Code:
ATTFilter
:OTL
SRV - [2012.06.06 09:14:32 | 000,185,856 | ---- | M] () [Auto | Running] -- C:\Programme\Web Assistant\ExtensionUpdaterService.exe -- (Web Assistant Updater) 
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} 
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&form=HPNTDF&pc=HPNTDF&src=IE-SearchBox 
IE:64bit: - HKLM\..\SearchScopes\{2fa28606-de77-4029-af96-b231e3b8f827}: "URL" = http://eu.ask.com/web?q={searchterms}&l=dis&o=HPNTDF 
IE:64bit: - HKLM\..\SearchScopes\{b7fca997-d0fb-4fe0-8afd-255e89cf9671}: "URL" = http://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPNTDF 
IE:64bit: - HKLM\..\SearchScopes\{d43b3890-80c7-4010-a95d-1e77b5924dc3}: "URL" = http://de.wikipedia.org/wiki/Special:Search?search={searchTerms} 
IE:64bit: - HKLM\..\SearchScopes\{D944BB61-2E34-4DBF-A683-47E505C587DC}: "URL" = http://rover.ebay.com/rover/1/707-111076-19270-3/4?mpre=http://shop.ebay.com/?_nkw={searchTerms} 
IE:64bit: - HKLM\..\SearchScopes\{E3CAB253-91D2-4E19-8299-9D00624396ED}: "URL" = http://www.amazon.de/s/ref=azs_osd_ieade?ie=UTF-8&tag=hp-de2-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms} 
IE - HKLM\..\URLSearchHook: {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Program Files (x86)\DVDVideoSoftTB\prxtbDVDV.dll (Conduit Ltd.) 
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} 
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&form=HPNTDF&pc=HPNTDF&src=IE-SearchBox 
IE - HKLM\..\SearchScopes\{2fa28606-de77-4029-af96-b231e3b8f827}: "URL" = http://eu.ask.com/web?q={searchterms}&l=dis&o=HPNTDF 
IE - HKLM\..\SearchScopes\{b7fca997-d0fb-4fe0-8afd-255e89cf9671}: "URL" = http://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPNTDF 
IE - HKLM\..\SearchScopes\{d43b3890-80c7-4010-a95d-1e77b5924dc3}: "URL" = http://de.wikipedia.org/wiki/Special:Search?search={searchTerms} 
IE - HKLM\..\SearchScopes\{D944BB61-2E34-4DBF-A683-47E505C587DC}: "URL" = http://rover.ebay.com/rover/1/707-111076-19270-3/4?mpre=http://shop.ebay.com/?_nkw={searchTerms} 
IE - HKLM\..\SearchScopes\{E3CAB253-91D2-4E19-8299-9D00624396ED}: "URL" = http://www.amazon.de/s/ref=azs_osd_ieade?ie=UTF-8&tag=hp-de2-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms} 
IE - HKCU\..\URLSearchHook: {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Program Files (x86)\DVDVideoSoftTB\prxtbDVDV.dll (Conduit Ltd.) 
IE - HKCU\..\SearchScopes,DefaultScope = {CFF4DB9B-135F-47c0-9269-B4C6572FD61A} 
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&form=HPNTDF&pc=HPNTDF&src=IE-SearchBox 
IE - HKCU\..\SearchScopes\{2fa28606-de77-4029-af96-b231e3b8f827}: "URL" = http://eu.ask.com/web?q={searchterms}&l=dis&o=HPNTDF 
IE - HKCU\..\SearchScopes\{b7fca997-d0fb-4fe0-8afd-255e89cf9671}: "URL" = http://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPNTDF 
IE - HKCU\..\SearchScopes\{CFF4DB9B-135F-47c0-9269-B4C6572FD61A}: "URL" = http://mystart.incredibar.com/mb139/?search={searchTerms}&loc=IB_DS&a=6PQF3cjo8Q&i=26 
IE - HKCU\..\SearchScopes\{d43b3890-80c7-4010-a95d-1e77b5924dc3}: "URL" = http://de.wikipedia.org/wiki/Special:Search?search={searchTerms} 
IE - HKCU\..\SearchScopes\{D944BB61-2E34-4DBF-A683-47E505C587DC}: "URL" = http://rover.ebay.com/rover/1/707-111076-19270-3/4?mpre=http://shop.ebay.com/?_nkw={searchTerms} 
IE - HKCU\..\SearchScopes\{E3CAB253-91D2-4E19-8299-9D00624396ED}: "URL" = http://www.amazon.de/s/ref=azs_osd_ieade?ie=UTF-8&tag=hp-de2-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms} 
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local 
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found 
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Admin\AppData\Local\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.) 
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Admin\AppData\Local\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.) 
64bit-FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{336D0C35-8A85-403a-B9D2-65C292C39087}: C:\PROGRAM FILES\WEB ASSISTANT\FIREFOX [2012.07.30 18:33:49 | 000,000,000 | ---D | M] 
CHR - Extension: Web Assistant = C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd\2.0.0.455_0\ 
O2:64bit: - BHO: (Web Assistant) - {336D0C35-8A85-403a-B9D2-65C292C39087} - C:\Programme\Web Assistant\Extension64.dll () 
O2 - BHO: (&Yahoo! Toolbar Helper) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.) 
O2 - BHO: (Web Assistant) - {336D0C35-8A85-403a-B9D2-65C292C39087} - C:\Programme\Web Assistant\Extension32.dll () 
O2 - BHO: (DVDVideoSoftTB Toolbar) - {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Program Files (x86)\DVDVideoSoftTB\prxtbDVDV.dll (Conduit Ltd.) 
O2 - BHO: (SingleInstance Class) - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll (Yahoo! Inc) 
O3 - HKLM\..\Toolbar: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\18.7.2.3\coIEPlg.dll (Symantec Corporation) 
O3 - HKCU\..\Toolbar\WebBrowser: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\18.7.2.3\coIEPlg.dll (Symantec Corporation) 
O4 - HKLM..\Run: [] File not found 
O4 - HKLM..\Run: [DivXUpdate] C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe () 
O4 - HKCU..\Run: [KiesHelper] C:\Program Files (x86)\Samsung\Kies\KiesHelper.exe /s File not found 
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 
O8:64bit: - Extra context menu item: An OneNote s&enden - res://C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105 File not found 
O8:64bit: - Extra context menu item: Nach Microsoft E&xcel exportieren - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000 File not found 
O8 - Extra context menu item: An OneNote s&enden - res://C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105 File not found 
O8 - Extra context menu item: Nach Microsoft E&xcel exportieren - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000 File not found 
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found 
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found 
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. 
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. 
O32 - HKLM CDRom: AutoRun - 1 
[2012.07.30 21:25:12 | 000,000,000 | ---D | C] -- C:\ProgramData\XoftSpySE 
[2012.07.30 18:34:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Premium 
[2012.07.30 18:32:53 | 000,000,000 | ---D | C] -- C:\ProgramData\InstallMate 
 

[2012.07.18 10:24:39 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\gs 
[2012.07.30 21:54:00 | 000,001,120 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-417976372-1407297461-3350789735-1000UA.job 
[2012.07.30 21:48:26 | 000,000,000 | ---- | M] () -- C:\Users\Admin\defogger_reenable 
[2012.07.30 17:26:54 | 000,001,068 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-417976372-1407297461-3350789735-1000Core.job 
[2012.07.30 10:23:19 | 000,000,332 | ---- | M] () -- C:\Windows\tasks\HPCeeScheduleForAdmin.job 
[2012.07.29 15:34:25 | 000,000,336 | ---- | M] () -- C:\Windows\tasks\HPCeeScheduleForAS-HP$.job 

[2012.03.28 22:11:08 | 000,030,568 | ---- | C] () -- C:\Windows\MusiccityDownload.exe 
:Files

ipconfig /flushdns /c
:Commands
[purity]
[emptytemp]
[emptyflash]
         
  • Schließe alle Programme.
  • Klicke auf den Fix Button.
  • Wenn OTL einen Neustart verlangt, bitte zulassen.
  • Kopiere den Inhalt des Logfiles hier in Code-Tags in Deinen Thread.
    Nachträglich kannst Du das Logfile hier einsehen => C:\_OTL\MovedFiles\<datum_nummer.log>

Hinweis für Mitleser: Obiges OTL-Script ist ausschließlich für diesen User in dieser Situtation erstellt worden.
Auf keinen Fall auf anderen Rechnern anwenden, das kann andere Systeme nachhaltig schädigen!
__________________

__________________

Alt 31.07.2012, 12:07   #3
DarkAlb
 
Hijacker? Statt Google nur noch "Mystart" - Standard

Hijacker? Statt Google nur noch "Mystart"



Hey!

Danke für deine schnelle Hilfe!

Hier das Log:
PHP-Code:
All processes killed
========== OTL ==========
ErrorNo service named Web Assistant Updater was found to stop!
Service\Driver key Web Assistant Updater not found.
File C:\Programme\Web Assistant\ExtensionUpdaterService.exe not found.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /value set successfully!
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2fa28606-de77-4029-af96-b231e3b8f827}\ not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2fa28606-de77-4029-af96-b231e3b8f827}\ not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{b7fca997-d0fb-4fe0-8afd-255e89cf9671}\ not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{b7fca997-d0fb-4fe0-8afd-255e89cf9671}\ not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{d43b3890-80c7-4010-a95d-1e77b5924dc3}\ not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{d43b3890-80c7-4010-a95d-1e77b5924dc3}\ not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{D944BB61-2E34-4DBF-A683-47E505C587DC}\ not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D944BB61-2E34-4DBF-A683-47E505C587DC}\ not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{E3CAB253-91D2-4E19-8299-9D00624396ED}\ not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E3CAB253-91D2-4E19-8299-9D00624396ED}\ not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\{872b5b88-9db5-4310-bdd0-ac189557e5f5not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{872b5b88-9db5-4310-bdd0-ac189557e5f5}\ not found.
File C:\Program Files (x86)\DVDVideoSoftTB\prxtbDVDV.dll not found.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /value set successfully!
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2fa28606-de77-4029-af96-b231e3b8f827}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2fa28606-de77-4029-af96-b231e3b8f827}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{b7fca997-d0fb-4fe0-8afd-255e89cf9671}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{b7fca997-d0fb-4fe0-8afd-255e89cf9671}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{d43b3890-80c7-4010-a95d-1e77b5924dc3}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{d43b3890-80c7-4010-a95d-1e77b5924dc3}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{D944BB61-2E34-4DBF-A683-47E505C587DC}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D944BB61-2E34-4DBF-A683-47E505C587DC}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{E3CAB253-91D2-4E19-8299-9D00624396ED}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E3CAB253-91D2-4E19-8299-9D00624396ED}\ not found.
Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\{872b5b88-9db5-4310-bdd0-ac189557e5f5not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{872b5b88-9db5-4310-bdd0-ac189557e5f5}\ not found.
File C:\Program Files (x86)\DVDVideoSoftTB\prxtbDVDV.dll not found.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /value set successfully!
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2fa28606-de77-4029-af96-b231e3b8f827}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2fa28606-de77-4029-af96-b231e3b8f827}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{b7fca997-d0fb-4fe0-8afd-255e89cf9671}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{b7fca997-d0fb-4fe0-8afd-255e89cf9671}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{CFF4DB9B-135F-47c0-9269-B4C6572FD61A}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CFF4DB9B-135F-47c0-9269-B4C6572FD61A}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{d43b3890-80c7-4010-a95d-1e77b5924dc3}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{d43b3890-80c7-4010-a95d-1e77b5924dc3}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{D944BB61-2E34-4DBF-A683-47E505C587DC}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D944BB61-2E34-4DBF-A683-47E505C587DC}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{E3CAB253-91D2-4E19-8299-9D00624396ED}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E3CAB253-91D2-4E19-8299-9D00624396ED}\ not found.
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable|dword:/value set successfully!
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyOverride| /value set successfully!
Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@Apple.com/iTunes,version=\ not found.
Registry key HKEY_CURRENT_USER\Software\MozillaPlugins\@tools.google.com/Google Update;version=3not found.
File C:\Users\Admin\AppData\Local\Google\Update\1.3.21.115\npGoogleUpdate3.dll not found.
Registry key HKEY_CURRENT_USER\Software\MozillaPlugins\@tools.google.com/Google Update;version=9not found.
File C:\Users\Admin\AppData\Local\Google\Update\1.3.21.115\npGoogleUpdate3.dll not found.
File C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd\2.0.0.455_0 not found.
64bit-Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{336D0C35-8A85-403a-B9D2-65C292C39087}\ not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{336D0C35-8A85-403a-B9D2-65C292C39087}\ not found.
File C:\Programme\Web Assistant\Extension64.dll not found.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4efb-9B51-7695ECA05670}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{02478D38-C3F9-4efb-9B51-7695ECA05670}\ not found.
File C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn\yt.dll not found.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{336D0C35-8A85-403a-B9D2-65C292C39087}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{336D0C35-8A85-403a-B9D2-65C292C39087}\ not found.
File C:\Programme\Web Assistant\Extension32.dll not found.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{872b5b88-9db5-4310-bdd0-ac189557e5f5}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{872b5b88-9db5-4310-bdd0-ac189557e5f5}\ not found.
File C:\Program Files (x86)\DVDVideoSoftTB\prxtbDVDV.dll not found.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FDAD4DA1-61A2-4FD8-9C17-86F7AC245081}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{FDAD4DA1-61A2-4FD8-9C17-86F7AC245081}\ not found.
File C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CAdeleted successfully.
Unable to delete registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA}\ .
File move failedC:\Program Files (x86)\Norton Internet Security\Engine\18.7.2.3\coIEPlg.dll scheduled to be moved on reboot.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CAnot found.
Unable to delete registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA}\ .
File move failedC:\Program Files (x86)\Norton Internet Security\Engine\18.7.2.3\coIEPlg.dll scheduled to be moved on reboot.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\ not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\DivXUpdate not found.
File C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\KiesHelper not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoActiveDesktop not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoActiveDesktopChanges not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\\ConsentPromptBehaviorAdmin not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\\ConsentPromptBehaviorUser not found.
64bit-Registry key HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\An OneNote s&endennot found.
64bit-Registry key HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\Nach Microsoft E&xcel exportierennot found.
Registry key HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\An OneNote s&endennot found.
Registry key HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\Nach Microsoft E&xcel exportierennot found.
64bit-Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\VMApplet:/pagefile deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\VMApplet:/pagefile deleted successfully.
64bit-Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\\WebCheck not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E6FB5E20-DE35-11CF-9C87-00AA005127ED}\ not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\\WebCheck not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E6FB5E20-DE35-11CF-9C87-00AA005127ED}\ not found.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Cdrom\\AutoRun|DWORD:/value set successfully!
Folder C:\ProgramData\XoftSpySEnot found.
Folder C:\ProgramData\Premiumnot found.
Folder C:\ProgramData\InstallMatenot found.
Folder C:\Program Files (x86)\gsnot found.
File C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-417976372-1407297461-3350789735-1000UA.job not found.
File C:\Users\Admin\defogger_reenable not found.
File C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-417976372-1407297461-3350789735-1000Core.job not found.
File C:\Windows\tasks\HPCeeScheduleForAdmin.job not found.
File C:\Windows\tasks\HPCeeScheduleForAS-HP$.job not found.
File C:\Windows\MusiccityDownload.exe not found.
========== 
FILES ==========
[
color=#A23BEC]< ipconfig /flushdns /c >[/color]
Windows-IP-Konfiguration
Der DNS
-Aufl”sungscache wurde geleert.
C:\Users\Admin\Desktop\cmd.bat deleted successfully.
C:\Users\Admin\Desktop\cmd.txt deleted successfully.
========== 
COMMANDS ==========
 
[
EMPTYTEMP]
 
UserAdmin
->Temp folder emptied138005 bytes
->Temporary Internet Files folder emptied0 bytes
->Java cache emptied0 bytes
->Google Chrome cache emptied7302733 bytes
->Flash cache emptied379 bytes
 
User
All Users
 
User
: Default
->
Temp folder emptied0 bytes
->Temporary Internet Files folder emptied0 bytes
 
User
: Default User
 
User
: Public
 
%
systemdrive% .tmp files removed0 bytes
%systemroot% .tmp files removed0 bytes
%systemroot%\System32 .tmp files removed0 bytes
%systemroot%\System32 (64bit) .tmp files removed0 bytes
%systemroot%\System32\drivers .tmp files removed0 bytes
Windows Temp folder emptied
15124 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied0 bytes
%systemroot%\sysnative\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment folder emptied0 bytes
RecycleBin emptied
0 bytes
 
Total Files Cleaned 
7,00 mb
 
 
[EMPTYFLASH]
 
UserAdmin
->Flash cache emptied0 bytes
 
User
All Users
 
User
: Default
 
User: Default User
 
User
: Public
 
Total Flash Files Cleaned 0,00 mb
 
 
OTL by OldTimer 
Version 3.2.55.0 log created on 07312012_120103

Files
\Folders moved on Reboot...
File move failedC:\Program Files (x86)\Norton Internet Security\Engine\18.7.2.3\coIEPlg.dll scheduled to be moved on reboot.
C:\Users\Admin\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.

PendingFileRenameOperations files...
[
2012.06.07 14:46:24 000,436,192 R--- | M] (Symantec CorporationC:\Program Files (x86)\Norton Internet Security\Engine\18.7.2.3\coIEPlg.dll MD5=3656CEB53172661E261C95EC71944FB4
File C
:\Users\Admin\AppData\Local\Temp\FXSAPIDebugLogFile.txt not found!

Registry entries deleted on Reboot... 
__________________

Alt 31.07.2012, 13:02   #4
t'john
/// Helfer-Team
 
Hijacker? Statt Google nur noch "Mystart" - Standard

Hijacker? Statt Google nur noch "Mystart"



Sehr gut!


1. Schritt
Bitte einen Vollscan mit Malwarebytes Anti-Malware machen und Log posten.
Denk daran, dass Malwarebytes vor jedem Scan manuell aktualisiert werden muss!

Malwarebytes Anti-Malware
- Anwendbar auf Windows 2000, XP, Vista und 7.
- Installiere das Programm in den vorgegebenen Pfad.
- Aktiviere "Komplett Scan durchführen" => Scan.
- Wähle alle verfügbaren Laufwerke (ausser CD/DVD) aus und starte den Scan.
- Funde bitte löschen lassen oder in Quarantäne.
- Wenn der Scan beendet ist, klicke auf "Zeige Resultate".
danach:

2. Schritt

Downloade Dir bitte AdwCleaner auf deinen Desktop.

  • Starte die adwcleaner.exe mit einem Doppelklick.
  • Klicke auf Search.
  • Nach Ende des Suchlaufs öffnet sich eine Textdatei.
  • Poste mir den Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner[R1].txt.
__________________
Mfg, t'john
Das TB unterstützen

Alt 31.07.2012, 16:13   #5
DarkAlb
 
Hijacker? Statt Google nur noch "Mystart" - Standard

Hijacker? Statt Google nur noch "Mystart"



Malwarebytes hat 12 Dateien gefunden, die ich dann auch gleich gelöscht habe.

Hier meine Logs:

PHP-Code:
Malwarebytes Anti-Malware 1.62.0.1300
www
.malwarebytes.org

Datenbank Version
v2012.07.31.09

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
Admin 
:: AS-HP [Administrator]

31.07.2012 15:01:58
mbam
-log-2012-07-31 (15-01-58).txt

Art des Suchlaufs
Vollständiger Suchlauf (C:\|D:\|F:\|Q:\|)
Aktivierte SuchlaufeinstellungenSpeicher Autostart Registrierung Dateisystem Heuristiks/Extra HeuristiKs/Shuriken PUP PUM
Deaktivierte Suchlaufeinstellungen
P2P
Durchsuchte Objekte
380370
Laufzeit
1 Stunde(n), 3 Minute(n), 16 Sekunde(n)

Infizierte Speicherprozesse0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel5
HKCR
\CLSID\{FDB71DFD-EC34-E08E-EBEF-5E280BD70604} (PUP.DownloadnSave) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FDB71DFD-EC34-E08E-EBEF-5E280BD70604} (PUP.DownloadnSave) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCR\TypeLib\{C2CF0D01-7657-48AA-98C9-AE5E64757FCC} (PUP.DownloadnSave) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCR\Interface\{BBA74401-6D6F-4BBD-9F65-E8623814F3BB} (PUP.DownloadnSave) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A8B0DBDE-8119-48B0-8088-D12DA01C36BA} (PUP.DownloadnSave) -> Erfolgreich gelöscht und in Quarantäne gestellt.

Infizierte Registrierungswerte0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse1
C
:\ProgramData\DownloadnSave (PUP.DownloadnSave) -> Erfolgreich gelöscht und in Quarantäne gestellt.

Infizierte Dateien6
C
:\ProgramData\DownloadnSave\bhoclass.dll (PUP.DownloadnSave) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\ProgramData\DownloadnSave\content.js (PUP.DownloadnSave) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\ProgramData\DownloadnSave\background.html (PUP.DownloadnSave) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\ProgramData\DownloadnSave\dpgkoeinjnkgcieloaioiohencfcjjjc.crx (PUP.DownloadnSave) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\ProgramData\DownloadnSave\settings.ini (PUP.DownloadnSave) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\ProgramData\DownloadnSave\uninstall.exe (PUP.DownloadnSave) -> Erfolgreich gelöscht und in Quarantäne gestellt.

(
Ende
und:

PHP-Code:
# AdwCleaner v1.703 - Logfile created 07/31/2012 at 16:22:26
# Updated 20/07/2012 by Xplode
# Operating system : Windows 7 Home Premium Service Pack 1 (64 bits)
# User : Admin - AS-HP
# Running from : C:\Users\Admin\Downloads\adwcleaner.exe
# Option [Search]


***** [Services] *****


***** [
Files Folders] *****

Folder Found C:\Users\Admin\AppData\Local\Conduit
Folder Found 
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd
Folder Found 
C:\Users\Admin\AppData\LocalLow\boost_interprocess
Folder Found 
C:\Users\Admin\AppData\LocalLow\Conduit
Folder Found 
C:\Users\Admin\AppData\LocalLow\DVDVideoSoftTB
Folder Found 
C:\ProgramData\boost_interprocess
Folder Found 
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DownloadnSave
Folder Found 
C:\Program Files\Web Assistant
Folder Found 
C:\Program Files (x86)\Conduit
Folder Found 
C:\Program Files (x86)\DVDVideoSoftTB

***** [Registry] *****
[*] 
Key Found HKLM\SOFTWARE\Classes\Toolbar.CT2269050
Key Found 
HKCU\Software\AppDataLow\Software\Conduit
Key Found 
HKCU\Software\AppDataLow\Software\SmartBar
Key Found 
HKCU\Software\AppDataLow\Toolbar
Key Found 
HKCU\Software\IM
Key Found 
HKCU\Software\ImInstaller
Key Found 
HKCU\Software\Softonic
Key Found 
HKLM\SOFTWARE\Classes\AppID\Extension.DLL
Key Found 
HKLM\SOFTWARE\Classes\bhoclass.bho.bhoclass.bho
Key Found 
HKLM\SOFTWARE\Classes\bhoclass.bho.bhoclass.bho.1.0
Key Found 
HKLM\SOFTWARE\Classes\Extension.ExtensionHelperObject
Key Found 
HKLM\SOFTWARE\Classes\Extension.ExtensionHelperObject.1
Key Found 
HKLM\SOFTWARE\Conduit
Key Found 
HKLM\SOFTWARE\DVDVideoSoftTB
Key Found 
HKLM\SOFTWARE\Google\Chrome\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd
Key Found 
HKLM\SOFTWARE\Microsoft\Tracing\IncredibarToolbar_RASAPI32
Key Found 
HKLM\SOFTWARE\Microsoft\Tracing\IncredibarToolbar_RASMANCS
Key Found 
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DVDVideoSoftTB Toolbar
Key Found 
HKLM\SOFTWARE\Web Assistant
Value Found 
HKLM\SOFTWARE\Mozilla\Firefox\extensions [{336D0C35-8A85-403a-B9D2-65C292C39087}]
[
x64Key Found HKCU\Software\AppDataLow\Software\Conduit
[x64Key Found HKCU\Software\AppDataLow\Software\SmartBar
[x64Key Found HKCU\Software\AppDataLow\Toolbar
[x64Key Found HKCU\Software\IM
[x64Key Found HKCU\Software\ImInstaller
[x64Key Found HKCU\Software\Softonic
[x64Key Found HKLM\SOFTWARE\Classes\AppID\Extension.DLL
[x64Key Found HKLM\SOFTWARE\Classes\bhoclass.bho.bhoclass.bho
[x64Key Found HKLM\SOFTWARE\Classes\bhoclass.bho.bhoclass.bho.1.0
[x64Key Found HKLM\SOFTWARE\Classes\Extension.ExtensionHelperObject
[x64Key Found HKLM\SOFTWARE\Classes\Extension.ExtensionHelperObject.1
[x64Key Found HKLM\SOFTWARE\Google\Chrome\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd
[x64Key Found HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{336D0C35-8A85-403a-B9D2-65C292C39087}_is1
[x64Key Found HKLM\SOFTWARE\Web Assistant
[x64Value Found HKLM\SOFTWARE\Mozilla\Firefox\extensions [{336D0C35-8A85-403a-B9D2-65C292C39087}]

***** [
Registre GUID] *****

Key Found HKLM\SOFTWARE\Classes\AppID\{608D3067-77E8-463D-9084-908966806826}
Key Found HKLM\SOFTWARE\Classes\AppID\{B302A1BD-0157-49FA-90F1-4E94F22C7B4B}
Key Found HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Key Found HKLM\SOFTWARE\Classes\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Key Found HKLM\SOFTWARE\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}
Key Found HKLM\SOFTWARE\Classes\CLSID\{D3F69D07-0AEE-47AF-87D0-1A67D4F70C68}
Key Found HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Key Found HKLM\SOFTWARE\Classes\Interface\{A36867C6-302D-49FC-9D8E-1EB037B5F1AB}
Key Found HKLM\SOFTWARE\Classes\Interface\{D2F39980-399F-492E-8D88-5FF7CCB3B47F}
Key Found HKLM\SOFTWARE\Classes\TypeLib\{1D5A4199-956E-49BC-B89F-6A35C57C0D13}
Key Found HKLM\SOFTWARE\Classes\TypeLib\{2D5E2D34-BED5-4B9F-9793-A31E26E6806E}
Key Found HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D3F69D07-0AEE-47AF-87D0-1A67D4F70C68}
Key Found HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{872B5B88-9DB5-4310-BDD0-AC189557E5F5}
Key Found HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{872B5B88-9DB5-4310-BDD0-AC189557E5F5}
[
x64Key Found HKLM\SOFTWARE\Classes\AppID\{608D3067-77E8-463D-9084-908966806826}
[
x64Key Found HKLM\SOFTWARE\Classes\AppID\{B302A1BD-0157-49FA-90F1-4E94F22C7B4B}
[
x64Key Found HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
[
x64Key Found HKLM\SOFTWARE\Classes\Interface\{A36867C6-302D-49FC-9D8E-1EB037B5F1AB}
[
x64Key Found HKLM\SOFTWARE\Classes\Interface\{BBA74401-6D6F-4BBD-9F65-E8623814F3BB}
[
x64Key Found HKLM\SOFTWARE\Classes\Interface\{D2F39980-399F-492E-8D88-5FF7CCB3B47F}
[
x64Key Found HKLM\SOFTWARE\Classes\TypeLib\{1D5A4199-956E-49BC-B89F-6A35C57C0D13}
[
x64Key Found HKLM\SOFTWARE\Classes\TypeLib\{2D5E2D34-BED5-4B9F-9793-A31E26E6806E}
[
x64Key Found HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{872B5B88-9DB5-4310-BDD0-AC189557E5F5}
[
x64Key Found HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{872B5B88-9DB5-4310-BDD0-AC189557E5F5}

***** [
Internet Browsers] *****

-\\ 
Internet Explorer v9.0.8112.16421

[HKCU\Software\Microsoft\Internet Explorer\Main Start Page] = hxxp://mystart.incredibar.com/mb139?a=6PQF3cjo8Q&i=26

-\\ Google Chrome v20.0.1132.57

File 
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Found 
:       "icon_url""hxxp://mystart.incredibar.com/mb139/favicon.ico",
Found :       "keyword""mystart.incredibar.com/mb139",
Found :       "name""MyStart Search",
Found :       "search_url""hxxp://mystart.incredibar.com/mb139/?loc=IB_DS&search={searchTerms}&a=6PQF3cjo8[...]
Found :                "
update_url": "hxxp://autoupdate.chromewebtb.conduit-services.com/?productId=CT226905[...]

*************************

AdwCleaner[R1].txt - [6269 octets] - [31/07/2012 16:11:00]
AdwCleaner[R2].txt - [6250 octets] - [31/07/2012 16:22:27]

########## EOF - C:\AdwCleaner[R2].txt - [6378 octets] ########## 


Geändert von DarkAlb (31.07.2012 um 16:23 Uhr)

Alt 31.07.2012, 16:44   #6
t'john
/// Helfer-Team
 
Hijacker? Statt Google nur noch "Mystart" - Standard

Hijacker? Statt Google nur noch "Mystart"



Sehr gut!


  • Schließe alle offenen Programme und Browser.
  • Starte die adwcleaner.exe mit einem Doppelklick.
  • Klicke auf Delete.
  • Bestätige jeweils mit Ok.
  • Dein Rechner wird neu gestartet. Nach dem Neustart öffnet sich eine Textdatei.
  • Poste mir den Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner[S1].txt.




danach:


Malware-Scan mit Emsisoft Anti-Malware

Lade die Gratisversion von => Emsisoft Anti-Malware herunter und installiere das Programm.
Lade über Jetzt Updaten die aktuellen Signaturen herunter.
Wähle den Freeware-Modus aus.

Wähle Detail Scan und starte über den Button Scan die Überprüfung des Computers.
Am Ende des Scans nichts loeschen lassen!. Mit Klick auf Bericht speichern das Logfile auf dem Desktop speichern und hier in den Thread posten.

Anleitung: http://www.trojaner-board.de/103809-...i-malware.html
__________________
--> Hijacker? Statt Google nur noch "Mystart"

Alt 31.07.2012, 22:08   #7
DarkAlb
 
Hijacker? Statt Google nur noch "Mystart" - Standard

Hijacker? Statt Google nur noch "Mystart"



PHP-Code:
# AdwCleaner v1.703 - Logfile created 07/31/2012 at 20:25:01
# Updated 20/07/2012 by Xplode
# Operating system : Windows 7 Home Premium Service Pack 1 (64 bits)
# User : Admin - AS-HP
# Running from : C:\Users\Admin\Downloads\adwcleaner (1).exe
# Option [Delete]


***** [Services] *****


***** [
Files Folders] *****

Folder Deleted C:\Users\Admin\AppData\Local\Conduit
Folder Deleted 
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd
Folder Deleted 
C:\Users\Admin\AppData\LocalLow\boost_interprocess
Folder Deleted 
C:\Users\Admin\AppData\LocalLow\Conduit
Folder Deleted 
C:\Users\Admin\AppData\LocalLow\DVDVideoSoftTB
Folder Deleted 
C:\ProgramData\boost_interprocess
Folder Deleted 
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DownloadnSave
Folder Deleted 
C:\Program Files\Web Assistant
Folder Deleted 
C:\Program Files (x86)\Conduit
Folder Deleted 
C:\Program Files (x86)\DVDVideoSoftTB

***** [Registry] *****
[*] 
Key Deleted HKLM\SOFTWARE\Classes\Toolbar.CT2269050
Key Deleted 
HKCU\Software\AppDataLow\Software\Conduit
Key Deleted 
HKCU\Software\AppDataLow\Software\SmartBar
Key Deleted 
HKCU\Software\AppDataLow\Toolbar
Key Deleted 
HKCU\Software\IM
Key Deleted 
HKCU\Software\ImInstaller
Key Deleted 
HKCU\Software\Softonic
Key Deleted 
HKLM\SOFTWARE\Classes\AppID\Extension.DLL
Key Deleted 
HKLM\SOFTWARE\Classes\bhoclass.bho.bhoclass.bho
Key Deleted 
HKLM\SOFTWARE\Classes\bhoclass.bho.bhoclass.bho.1.0
Key Deleted 
HKLM\SOFTWARE\Classes\Extension.ExtensionHelperObject
Key Deleted 
HKLM\SOFTWARE\Classes\Extension.ExtensionHelperObject.1
Key Deleted 
HKLM\SOFTWARE\Conduit
Key Deleted 
HKLM\SOFTWARE\DVDVideoSoftTB
Key Deleted 
HKLM\SOFTWARE\Google\Chrome\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd
Key Deleted 
HKLM\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\0563B8630D62D75ABBC8AB1E4BDFB5A899B24D43
Key Deleted 
HKLM\SOFTWARE\Microsoft\Tracing\IncredibarToolbar_RASAPI32
Key Deleted 
HKLM\SOFTWARE\Microsoft\Tracing\IncredibarToolbar_RASMANCS
Key Deleted 
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DVDVideoSoftTB Toolbar
Key Deleted 
HKLM\SOFTWARE\Web Assistant
Value Deleted 
HKLM\SOFTWARE\Mozilla\Firefox\extensions [{336D0C35-8A85-403a-B9D2-65C292C39087}]
[
x64Key Deleted HKLM\SOFTWARE\Google\Chrome\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd
[x64Key Deleted HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{336D0C35-8A85-403a-B9D2-65C292C39087}_is1
[x64Key Deleted HKLM\SOFTWARE\Web Assistant

***** [Registre GUID] *****

Key Deleted HKLM\SOFTWARE\Classes\AppID\{608D3067-77E8-463D-9084-908966806826}
Key Deleted HKLM\SOFTWARE\Classes\AppID\{B302A1BD-0157-49FA-90F1-4E94F22C7B4B}
Key Deleted HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Key Deleted HKLM\SOFTWARE\Classes\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Key Deleted HKLM\SOFTWARE\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}
Key Deleted HKLM\SOFTWARE\Classes\CLSID\{D3F69D07-0AEE-47AF-87D0-1A67D4F70C68}
Key Deleted HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Key Deleted HKLM\SOFTWARE\Classes\Interface\{A36867C6-302D-49FC-9D8E-1EB037B5F1AB}
Key Deleted HKLM\SOFTWARE\Classes\Interface\{D2F39980-399F-492E-8D88-5FF7CCB3B47F}
Key Deleted HKLM\SOFTWARE\Classes\TypeLib\{1D5A4199-956E-49BC-B89F-6A35C57C0D13}
Key Deleted HKLM\SOFTWARE\Classes\TypeLib\{2D5E2D34-BED5-4B9F-9793-A31E26E6806E}
Key Deleted HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D3F69D07-0AEE-47AF-87D0-1A67D4F70C68}
Key Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{872B5B88-9DB5-4310-BDD0-AC189557E5F5}
Key Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{872B5B88-9DB5-4310-BDD0-AC189557E5F5}
[
x64Key Deleted HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
[
x64Key Deleted HKLM\SOFTWARE\Classes\Interface\{A36867C6-302D-49FC-9D8E-1EB037B5F1AB}
[
x64Key Deleted HKLM\SOFTWARE\Classes\Interface\{BBA74401-6D6F-4BBD-9F65-E8623814F3BB}
[
x64Key Deleted HKLM\SOFTWARE\Classes\Interface\{D2F39980-399F-492E-8D88-5FF7CCB3B47F}

***** [
Internet Browsers] *****

-\\ 
Internet Explorer v9.0.8112.16421

Replaced 
: [HKCU\Software\Microsoft\Internet Explorer\Main Start Page] = hxxp://mystart.incredibar.com/mb139?a=6PQF3cjo8Q&i=26 --> hxxp://www.google.com

-\\ Google Chrome v20.0.1132.57

File 
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Deleted 
:       "icon_url""hxxp://mystart.incredibar.com/mb139/favicon.ico",
Deleted :       "keyword""mystart.incredibar.com/mb139",
Deleted :       "name""MyStart Search",
Deleted :       "search_url""hxxp://mystart.incredibar.com/mb139/?loc=IB_DS&search={searchTerms}&a=6PQF3cjo8[...]
Deleted :                "
update_url": "hxxp://autoupdate.chromewebtb.conduit-services.com/?productId=CT226905[...]

*************************

AdwCleaner[R1].txt - [6269 octets] - [31/07/2012 16:11:00]
AdwCleaner[R2].txt - [6329 octets] - [31/07/2012 16:22:27]
AdwCleaner[S1].txt - [5219 octets] - [31/07/2012 20:25:01]

########## EOF - C:\AdwCleaner[S1].txt - [5347 octets] ########## 

PHP-Code:
Emsisoft Anti-Malware Version 6.6
Letztes Update
31.07.2012 20:29:18

Scan Einstellungen
:

Scan MethodeDetail Scan
Objekte
RootkitsSpeicherTracesC:\, D:\, F:\, Q:\
Archiv ScanAn
ADS Scan
An

Scan Beginn
:    31.07.2012 21:21:27

C
:\Program Files (x86)\Optimizer Pro\OptimizerPro.exe     gefundenTrojan.Win32.SpeedingUpMyPC.AMN!E1
C
:\HP\Bin\EndProcess.exe     gefundenRiskware.Win32.KillApp!E1

Gescannt    616647
Gefunden    2

Scan Ende
:    31.07.2012 22:06:03
Scan Zeit
:    0:44:36 

Alt 31.07.2012, 22:58   #8
t'john
/// Helfer-Team
 
Hijacker? Statt Google nur noch "Mystart" - Standard

Hijacker? Statt Google nur noch "Mystart"



Sehr gut!


Deinstalliere:
Emsisoft Anti-Malware


ESET Online Scanner

Vorbereitung

  • Schließe evtl. vorhandene externe Festplatten und/oder sonstigen Wechselmedien (z. B. evtl. vorhandene USB-Sticks) an den Rechner an.
  • Bitte während des Online-Scans Anti-Virus-Programm und Firewall deaktivieren.
  • Vista/Win7-User: Bitte den Browser unbedingt als Administrator starten.
Los geht's

  • Lade und starte Eset Smartinstaller
  • Haken setzen bei YES, I accept the Terms of Use.
  • Klick auf Start.
  • Haken setzen bei Remove found threads und Scan archives.
  • Klick auf Start.
  • Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Finish drücken.
  • Browser schließen.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (manchmal auch C:\Programme\Eset\log.txt) suchen und mit Deinem Editor öffnen.
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset
__________________
Mfg, t'john
Das TB unterstützen

Alt 01.08.2012, 01:08   #9
DarkAlb
 
Hijacker? Statt Google nur noch "Mystart" - Standard

Hijacker? Statt Google nur noch "Mystart"



ESETSmartInstaller@High as downloader log:
all ok
# version=7
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6583
# api_version=3.0.2
# EOSSerial=08d995e6a4162646ad1184ca0929777f
# end=finished
# remove_checked=true
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2012-07-31 11:06:11
# local_time=2012-08-01 01:06:11 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=512 16777215 100 0 0 0 0 0
# compatibility_mode=3584 16777215 100 0 0 0 0 0
# compatibility_mode=5893 16776574 100 94 8416606 95399912 0 0
# compatibility_mode=8192 67108863 100 0 109 109 0 0
# scanned=195033
# found=1
# cleaned=1
# scan_time=5908
C:\Program Files (x86)\Optimizer Pro\OptimizerPro.exe a variant of Win32/SpeedingUpMyPC application (cleaned by deleting - quarantined) 00000000000000000000000000000000 C

Alt 01.08.2012, 01:09   #10
t'john
/// Helfer-Team
 
Hijacker? Statt Google nur noch "Mystart" - Standard

Hijacker? Statt Google nur noch "Mystart"



Java aktualisieren

Dein Java ist nicht mehr aktuell. Älter Versionen enthalten Sicherheitslücken, die von Malware missbraucht werden können.
  • Downloade dir bitte die neueste Java-Version von hier
  • Speichere die jxpiinstall.exe
  • Schließe alle laufenden Programme. Speziell deinen Browser.
  • Starte die jxpiinstall.exe. Diese wird den Installer für die neueste Java Version ( Java 7 Update 5 ) herunter laden.
  • Wenn die Installation beendet wurde
    Start --> Systemsteuerung --> Programme und deinstalliere alle älteren Java Versionen.
  • Starte deinen Rechner neu sobald alle älteren Versionen deinstalliert wurden.
Nach dem Neustart
  • Öffne erneut die Systemsteuerung --> Programme und klicke auf das Java Symbol.
  • Im Reiter Allgemein, klicke unter Temporäre Internetdateien auf Einstellungen.
  • Klicke auf Dateien löschen....
  • Gehe sicher das überall ein Hacken gesetzt ist und klicke OK.
  • Klicke erneut OK.


Dann so einstellen: http://www.trojaner-board.de/105213-...tellungen.html
__________________
Mfg, t'john
Das TB unterstützen

Alt 01.08.2012, 08:03   #11
DarkAlb
 
Hijacker? Statt Google nur noch "Mystart" - Standard

Hijacker? Statt Google nur noch "Mystart"



Hey

Hab etz alles so gemacht wie beschrieben - was nun?

Alt 01.08.2012, 13:42   #12
t'john
/// Helfer-Team
 
Hijacker? Statt Google nur noch "Mystart" - Standard

Hijacker? Statt Google nur noch "Mystart"



Sehr gut!

damit bist Du sauber und entlassen!


Tool-Bereinigung mit OTL


Wir werden nun die CleanUp!-Funktion von OTL nutzen, um die meisten Programme, die wir zur Bereinigung installiert haben, wieder von Deinem System zu löschen.
  • Bitte lade Dir (falls noch nicht vorhanden) OTL von OldTimer herunter.
  • Speichere es auf Deinem Desktop.
  • Doppelklick auf OTL.exe um das Programm auszuführen.
    Vista- und Windows 7-User starten mit Rechtsklick auf das Programm-Icon und wählen "Als Administrator ausführen".
  • Klicke auf den Button "Bereinigung"
  • OTL fragt eventuell nach einem Neustart.
    Sollte es dies tun, so lasse dies bitte zu.
Anmerkung: Nach dem Neustart werden OTL und andere Helferprogramme, die Du im Laufe der Bereinigung heruntergeladen hast, nicht mehr vorhanden sein. Sie wurden entfernt. Es ist daher Ok, wenn diese Programme nicht mehr vorhanden sind. Sollten noch welche übrig geblieben sein, lösche sie manuell.


Zurücksetzen der Sicherheitszonen

Lasse die Sicherheitszonen wieder zurücksetzen, da diese manipuliert wurden um den Browser für weitere Angriffe zu öffnen.
Gehe dabei so vor: http://www.trojaner-board.de/111805-...ecksetzen.html


Aufräumen mit CCleaner

Lasse mit CCleaner (Download) (Anleitung) Fehler in der

  • Registry beheben (mehrmals, solange bis keine Fehler mehr gefunden werden) und
  • temporäre Dateien löschen.




Lektuere zum abarbeiten:
http://www.trojaner-board.de/90880-d...tallation.html
http://www.trojaner-board.de/105213-...tellungen.html
PluginCheck
http://www.trojaner-board.de/96344-a...-rechners.html
Secunia Online Software Inspector
http://www.trojaner-board.de/71715-k...iendungen.html
http://www.trojaner-board.de/83238-a...sschalten.html
__________________
Mfg, t'john
Das TB unterstützen

Alt 01.08.2012, 15:14   #13
DarkAlb
 
Hijacker? Statt Google nur noch "Mystart" - Standard

Hijacker? Statt Google nur noch "Mystart"



Hey!

Bin ich wirklich schon sauber?

Das Problem besteht nämlich weiterhin. Bis auf deine letzten Ratschläge habe ich alles so gemacht wie beschrieben. Aber die "Mystart" Suche geht nicht weg.

Ich habe etz auch ein Problem mit dem Filehippochecker! Der stürzt immer ab

Alt 01.08.2012, 15:42   #14
t'john
/// Helfer-Team
 
Hijacker? Statt Google nur noch "Mystart" - Standard

Hijacker? Statt Google nur noch "Mystart"



Laut Logs ist mystart weg.

Gut, dann weitergehts:


TDSSKiller von Kaspersky
- Lade den TDSSKiller und entpacke das Archiv auf Deinen Desktop.
- Vergewissere Dich, dass die TDSSKiller.exe direkt auf dem Desktop liegt (nicht in einem Ordner auf dem Desktop).
- deaktiviere vorübergehend dein AntiVirus-Programm
- Starte die TDSSKiller.exe durch Doppelklick.
- Nach Beendigung der Arbeit schlägt das Tool vor, das System neu zu starten.
- Bestätige das ggfs. mit Y(es).
- Beim Hochfahren des Systems führt der Treiber alle geplanten Operationen aus löscht sich danach.
- Poste den Inhalt von C:\TDSSKiller.txt hier in den Thread.
Hier findest Du eine ausführlichere TDSSKiller Anleitung.
__________________
Mfg, t'john
Das TB unterstützen

Alt 01.08.2012, 16:51   #15
DarkAlb
 
Hijacker? Statt Google nur noch "Mystart" - Standard

Hijacker? Statt Google nur noch "Mystart"



PHP-Code:
16:50:24.0397 5804    TDSS rootkit removing tool 2.7.48.0 Jul 24 2012 13:16:32
16
:50:24.0803 5804    ============================================================
16:50:24.0803 5804    Current date time2012/08/01 16:50:24.0803
16
:50:24.0803 5804    SystemInfo:
16:50:24.0803 5804    
16
:50:24.0803 5804    OS Version6.1.7601 ServicePack1.0
16
:50:24.0803 5804    Product typeWorkstation
16
:50:24.0803 5804    ComputerName: AS-HP
16
:50:24.0803 5804    UserNameAdmin
16
:50:24.0803 5804    Windows directoryC:\Windows
16
:50:24.0803 5804    System windows directoryC:\Windows
16
:50:24.0803 5804    Running under WOW64
16
:50:24.0803 5804    Processor architectureIntel x64
16
:50:24.0803 5804    Number of processors8
16
:50:24.0803 5804    Page size0x1000
16
:50:24.0803 5804    Boot typeNormal boot
16
:50:24.0803 5804    ============================================================
16:50:25.0396 5804    Drive \Device\Harddisk0\DR0 Size0xE8E0DB6000 (931.51 Gb), SectorSize0x200Cylinders0x1DB01SectorsPerTrack0x3FTracksPerCylinder0xFFType 'K0'Flags 0x00000040
16
:50:25.0396 5804    ============================================================
16:50:25.0396 5804    \Device\Harddisk0\DR0:
16:50:25.0396 5804    MBR partitions:
16:50:25.0396 5804    \Device\Harddisk0\DR0\Partition0MBRType 0x7StartLBA 0x800BlocksNum 0x63800
16
:50:25.0396 5804    \Device\Harddisk0\DR0\Partition1MBRType 0x7StartLBA 0x64000BlocksNum 0x727F8000
16
:50:25.0396 5804    \Device\Harddisk0\DR0\Partition2MBRType 0x7StartLBA 0x7285C000BlocksNum 0x1E77000
16
:50:25.0396 5804    \Device\Harddisk0\DR0\Partition3MBRType 0xCStartLBA 0x746D3000BlocksNum 0x335B0
16
:50:25.0396 5804    ============================================================
16:50:25.0427 5804    C: <-> \Device\Harddisk0\DR0\Partition1
16
:50:25.0474 5804    D: <-> \Device\Harddisk0\DR0\Partition2
16
:50:25.0489 5804    F: <-> \Device\Harddisk0\DR0\Partition3
16
:50:25.0489 5804    ============================================================
16:50:25.0489 5804    Initialize success
16
:50:25.0489 5804    ============================================================
16:50:28.0219 1316    ============================================================
16:50:28.0219 1316    Scan started
16
:50:28.0219 1316    ModeManual
16:50:28.0219 1316    ============================================================
16:50:28.0594 1316    1394ohci        (a87d604aea360176311474c87a63bb88C:\Windows\system32\drivers\1394ohci.sys
16
:50:28.0609 1316    1394ohci ok
16
:50:28.0734 1316    a2acc           (2d6434e957f7cfa0035c20890f77bbc6C:\PROGRAM FILES (X86)\EMSISOFT ANTI-MALWARE\a2accx64.sys
16
:50:28.0734 1316    a2acc ok
16
:50:29.0108 1316    a2AntiMalware   (0d050186cf421131b43d00024bd9b8bbC:\Program Files (x86)\Emsisoft Anti-Malware\a2service.exe
16
:50:29.0124 1316    a2AntiMalware ok
16
:50:29.0249 1316    A2DDA           (3044d0f3feb9ffe8bc953d8f34b5b504C:\Program Files (x86)\Emsisoft Anti-Malware\a2ddax64.sys
16
:50:29.0249 1316    A2DDA ok
16
:50:29.0374 1316    Accelerometer   (5c368f4b04ed2a923e6afca2d37baff5C:\Windows\system32\DRIVERS\Accelerometer.sys
16
:50:29.0374 1316    Accelerometer ok
16
:50:29.0436 1316    ACPI            (d81d9e70b8a6dd14d42d7b4efa65d5f2C:\Windows\system32\drivers\ACPI.sys
16
:50:29.0436 1316    ACPI ok
16
:50:29.0467 1316    AcpiPmi         (99f8e788246d495ce3794d7e7821d2caC:\Windows\system32\drivers\acpipmi.sys
16
:50:29.0467 1316    AcpiPmi ok
16
:50:29.0561 1316    AdobeARMservice (62b7936f9036dd6ed36e6a7efa805dc0C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
16
:50:29.0561 1316    AdobeARMservice ok
16
:50:29.0608 1316    adp94xx         (2f6b34b83843f0c5118b63ac634f5bf4C:\Windows\system32\drivers\adp94xx.sys
16
:50:29.0623 1316    adp94xx ok
16
:50:29.0670 1316    adpahci         (597f78224ee9224ea1a13d6350ced962C:\Windows\system32\drivers\adpahci.sys
16
:50:29.0686 1316    adpahci ok
16
:50:29.0717 1316    adpu320         (e109549c90f62fb570b9540c4b148e54C:\Windows\system32\drivers\adpu320.sys
16
:50:29.0717 1316    adpu320 ok
16
:50:29.0748 1316    AeLookupSvc     (4b78b431f225fd8624c5655cb1de7b61C:\Windows\System32\aelupsvc.dll
16
:50:29.0748 1316    AeLookupSvc ok
16
:50:29.0842 1316    AESTFilters     (a6fb9db8f1a86861d955fd6975977ae0C:\Program Files\IDT\WDM\AESTSr64.exe
16
:50:29.0842 1316    AESTFilters ok
16
:50:29.0904 1316    AFD             (1c7857b62de5994a75b054a9fd4c3825C:\Windows\system32\drivers\afd.sys
16
:50:29.0920 1316    AFD ok
16
:50:29.0951 1316    agp440          (608c14dba7299d8cb6ed035a68a15799C:\Windows\system32\drivers\agp440.sys
16
:50:29.0951 1316    agp440 ok
16
:50:29.0998 1316    ALG             (3290d6946b5e30e70414990574883ddbC:\Windows\System32\alg.exe
16
:50:29.0998 1316    ALG ok
16
:50:30.0013 1316    aliide          (5812713a477a3ad7363c7438ca2ee038C:\Windows\system32\drivers\aliide.sys
16
:50:30.0013 1316    aliide ok
16
:50:30.0076 1316    AMD External Events Utility (9c616ba191b80f5cd1a1b9553e107100C:\Windows\system32\atiesrxx.exe
16
:50:30.0076 1316    AMD External Events Utility ok
16
:50:30.0122 1316    amdide          (1ff8b4431c353ce385c875f194924c0cC:\Windows\system32\drivers\amdide.sys
16
:50:30.0122 1316    amdide ok
16
:50:30.0169 1316    AmdK8           (7024f087cff1833a806193ef9d22cda9C:\Windows\system32\drivers\amdk8.sys
16
:50:30.0169 1316    AmdK8 ok
16
:50:30.0590 1316    amdkmdag        (5165e83751b8ff40e5e4925996fcc506C:\Windows\system32\DRIVERS\atikmdag.sys
16
:50:30.0637 1316    amdkmdag ok
16
:50:30.0762 1316    amdkmdap        (86ab3cf484260c4318f3a6e8b035f422C:\Windows\system32\DRIVERS\atikmpag.sys
16
:50:30.0778 1316    amdkmdap ok
16
:50:30.0793 1316    AmdPPM          (1e56388b3fe0d031c44144eb8c4d6217C:\Windows\system32\drivers\amdppm.sys
16
:50:30.0809 1316    AmdPPM ok
16
:50:30.0856 1316    amdsata         (d4121ae6d0c0e7e13aa221aa57ef2d49C:\Windows\system32\drivers\amdsata.sys
16
:50:30.0856 1316    amdsata ok
16
:50:30.0887 1316    amdsbs          (f67f933e79241ed32ff46a4f29b5120bC:\Windows\system32\drivers\amdsbs.sys
16
:50:30.0887 1316    amdsbs ok
16
:50:30.0918 1316    amdxata         (540daf1cea6094886d72126fd7c33048C:\Windows\system32\drivers\amdxata.sys
16
:50:30.0934 1316    amdxata ok
16
:50:30.0980 1316    AppID           (89a69c3f2f319b43379399547526d952C:\Windows\system32\drivers\appid.sys
16
:50:30.0980 1316    AppID ok
16
:50:31.0012 1316    AppIDSvc        (0bc381a15355a3982216f7172f545de1C:\Windows\System32\appidsvc.dll
16
:50:31.0012 1316    AppIDSvc ok
16
:50:31.0043 1316    Appinfo         (3977d4a871ca0d4f2ed1e7db46829731C:\Windows\System32\appinfo.dll
16
:50:31.0058 1316    Appinfo ok
16
:50:31.0152 1316    Apple Mobile Device (f401929ee0cc92bfe7f15161ca535383C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
16
:50:31.0152 1316    Apple Mobile Device ok
16
:50:31.0183 1316    arc             (c484f8ceb1717c540242531db7845c4eC:\Windows\system32\drivers\arc.sys
16
:50:31.0183 1316    arc ok
16
:50:31.0214 1316    arcsas          (019af6924aefe7839f61c830227fe79cC:\Windows\system32\drivers\arcsas.sys
16
:50:31.0214 1316    arcsas ok
16
:50:31.0246 1316    AsyncMac        (769765ce2cc62867468cea93969b2242C:\Windows\system32\DRIVERS\asyncmac.sys
16
:50:31.0246 1316    AsyncMac ok
16
:50:31.0292 1316    atapi           (02062c0b390b7729edc9e69c680a6f3cC:\Windows\system32\drivers\atapi.sys
16
:50:31.0292 1316    atapi ok
16
:50:31.0355 1316    atksgt          (fc0e8778c000291caf60eb88c011e931C:\Windows\system32\DRIVERS\atksgt.sys
16
:50:31.0370 1316    atksgt ok
16
:50:31.0433 1316    AudioEndpointBuilder (f23fef6d569fce88671949894a8becf1C:\Windows\System32\Audiosrv.dll
16
:50:31.0433 1316    AudioEndpointBuilder ok
16
:50:31.0448 1316    AudioSrv        (f23fef6d569fce88671949894a8becf1C:\Windows\System32\Audiosrv.dll
16
:50:31.0448 1316    AudioSrv ok
16
:50:31.0495 1316    AxInstSV        (a6bf31a71b409dfa8cac83159e1e2affC:\Windows\System32\AxInstSV.dll
16
:50:31.0495 1316    AxInstSV ok
16
:50:31.0542 1316    b06bdrv         (3e5b191307609f7514148c6832bb0842C:\Windows\system32\drivers\bxvbda.sys
16
:50:31.0542 1316    b06bdrv ok
16
:50:31.0620 1316    b57nd60a        (b5ace6968304a3900eeb1ebfd9622df2C:\Windows\system32\DRIVERS\b57nd60a.sys
16
:50:31.0620 1316    b57nd60a ok
16
:50:31.0729 1316    BBSvc           (93ee7d9c35ae7e9ffda148d7805f1421C:\Program Files (x86)\Microsoft\BingBar\BBSvc.EXE
16
:50:31.0729 1316    BBSvc ok
16
:50:31.0823 1316    BCM43XX         (9e84a931dbee0292e38ed672f6293a99C:\Windows\system32\DRIVERS\bcmwl664.sys
16
:50:31.0838 1316    BCM43XX ok
16
:50:31.0870 1316    BDESVC          (fde360167101b4e45a96f939f388aeb0C:\Windows\System32\bdesvc.dll
16
:50:31.0885 1316    BDESVC ok
16
:50:31.0932 1316    Beep            (16a47ce2decc9b099349a5f840654746C:\Windows\system32\drivers\Beep.sys
16
:50:31.0932 1316    Beep ok
16
:50:31.0994 1316    BFE             (82974d6a2fd19445cc5171fc378668a4C:\Windows\System32\bfe.dll
16
:50:32.0010 1316    BFE ok
16
:50:32.0291 1316    BHDrvx64        (c8ab71a5102d0fc103f6dfc750005137C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.7.1.5\Definitions\BASHDefs\20120711.002\BHDrvx64.sys
16
:50:32.0306 1316    BHDrvx64 ok
16
:50:32.0416 1316    BITS            (1ea7969e3271cbc59e1730697dc74682C:\Windows\System32\qmgr.dll
16
:50:32.0431 1316    BITS ok
16
:50:32.0478 1316    blbdrive        (61583ee3c3a17003c4acd0475646b4d3C:\Windows\system32\drivers\blbdrive.sys
16
:50:32.0478 1316    blbdrive ok
16
:50:32.0696 1316    Bluetooth Device Manager (94a6341079918db7bf799ee897bd2563C:\Program Files\Motorola\Bluetooth\devmgrsrv.exe
16
:50:32.0712 1316    Bluetooth Device Manager ok
16
:50:32.0837 1316    Bluetooth Media Service (7e76bf0972822a9b63fd55a73df3eed6C:\Program Files\Motorola\Bluetooth\audiosrv.exe
16
:50:32.0852 1316    Bluetooth Media Service ok
16
:50:32.0899 1316    Bluetooth OBEX Service (f7d36e135bf9274bb3435f95e7fad339C:\Program Files\Motorola\Bluetooth\obexsrv.exe
16
:50:32.0915 1316    Bluetooth OBEX Service ok
16
:50:32.0977 1316    Bonjour Service (ebbcd5dfbb1de70e8f4af8fa59e401fdC:\Program Files\Bonjour\mDNSResponder.exe
16
:50:32.0993 1316    Bonjour Service ok
16
:50:33.0102 1316    bowser          (6c02a83164f5cc0a262f4199f0871cf5C:\Windows\system32\DRIVERS\bowser.sys
16
:50:33.0102 1316    bowser ok
16
:50:33.0133 1316    BrFiltLo        (f09eee9edc320b5e1501f749fde686c8C:\Windows\system32\drivers\BrFiltLo.sys
16
:50:33.0133 1316    BrFiltLo ok
16
:50:33.0164 1316    BrFiltUp        (b114d3098e9bdb8bea8b053685831be6C:\Windows\system32\drivers\BrFiltUp.sys
16
:50:33.0164 1316    BrFiltUp ok
16
:50:33.0196 1316    Browser         (8ef0d5c41ec907751b8429162b1239edC:\Windows\System32\browser.dll
16
:50:33.0211 1316    Browser ok
16
:50:33.0242 1316    Brserid         (43bea8d483bf1870f018e2d02e06a5bdC:\Windows\System32\Drivers\Brserid.sys
16
:50:33.0242 1316    Brserid ok
16
:50:33.0274 1316    BrSerWdm        (a6eca2151b08a09caceca35c07f05b42C:\Windows\System32\Drivers\BrSerWdm.sys
16
:50:33.0274 1316    BrSerWdm ok
16
:50:33.0305 1316    BrUsbMdm        (b79968002c277e869cf38bd22cd61524C:\Windows\System32\Drivers\BrUsbMdm.sys
16
:50:33.0305 1316    BrUsbMdm ok
16
:50:33.0320 1316    BrUsbSer        (a87528880231c54e75ea7a44943b38bfC:\Windows\System32\Drivers\BrUsbSer.sys
16
:50:33.0336 1316    BrUsbSer ok
16
:50:33.0383 1316    BthEnum         (cf98190a94f62e405c8cb255018b2315C:\Windows\system32\drivers\BthEnum.sys
16
:50:33.0383 1316    BthEnum ok
16
:50:33.0414 1316    BTHMODEM        (9da669f11d1f894ab4eb69bf546a42e8C:\Windows\system32\drivers\bthmodem.sys
16
:50:33.0430 1316    BTHMODEM ok
16
:50:33.0461 1316    BthPan          (02dd601b708dd0667e1331fa8518e9ffC:\Windows\system32\DRIVERS\bthpan.sys
16
:50:33.0461 1316    BthPan ok
16
:50:33.0508 1316    BTHPORT         (64c198198501f7560ee41d8d1efa7952C:\Windows\System32\Drivers\BTHport.sys
16
:50:33.0523 1316    BTHPORT ok
16
:50:33.0570 1316    bthserv         (95f9c2976059462cbbf227f7aab10de9C:\Windows\system32\bthserv.dll
16
:50:33.0570 1316    bthserv ok
16
:50:33.0601 1316    BTHUSB          (f188b7394d81010767b6df3178519a37C:\Windows\System32\Drivers\BTHUSB.sys
16
:50:33.0617 1316    BTHUSB ok
16
:50:33.0648 1316    BTMCOM          (6d3ff2b480f7ab8da103cbc7fbeacd48C:\Windows\system32\Drivers\btmcom.sys
16
:50:33.0648 1316    BTMCOM ok
16
:50:33.0695 1316    BTMUSB          (b64cfabe65e241c784bb9f301795449bC:\Windows\system32\Drivers\btmusb.sys
16
:50:33.0710 1316    BTMUSB ok
16
:50:33.0804 1316    ccSet_NIS       (0e1737a63aec0f6de231bb59836c0a11C:\Windows\system32\drivers\NISx64\1307010.005\ccSetx64.sys
16
:50:33.0804 1316    ccSet_NIS ok
16
:50:33.0851 1316    cdfs            (b8bd2bb284668c84865658c77574381aC:\Windows\system32\DRIVERS\cdfs.sys
16
:50:33.0851 1316    cdfs ok
16
:50:33.0898 1316    cdrom           (f036ce71586e93d94dab220d7bdf4416C:\Windows\system32\DRIVERS\cdrom.sys
16
:50:33.0898 1316    cdrom ok
16
:50:33.0944 1316    CertPropSvc     (f17d1d393bbc69c5322fbfafaca28c7fC:\Windows\System32\certprop.dll
16
:50:33.0944 1316    CertPropSvc ok
16
:50:33.0976 1316    circlass        (d7cd5c4e1b71fa62050515314cfb52cfC:\Windows\system32\drivers\circlass.sys
16
:50:33.0976 1316    circlass ok
16
:50:34.0038 1316    CLFS            (fe1ec06f2253f691fe36217c592a0206C:\Windows\system32\CLFS.sys
16
:50:34.0038 1316    CLFS ok
16
:50:34.0132 1316    CLKMSVC10_38F51D56 (524dc3807cb1746225f9d26add19c319C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe
16
:50:34.0147 1316    CLKMSVC10_38F51D56 ok
16
:50:34.0225 1316    clr_optimization_v2.0.50727_32 (d88040f816fda31c3b466f0fa0918f29C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
16
:50:34.0225 1316    clr_optimization_v2.0.50727_32 ok
16
:50:34.0319 1316    clr_optimization_v2.0.50727_64 (d1ceea2b47cb998321c579651ce3e4f8C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
16
:50:34.0319 1316    clr_optimization_v2.0.50727_64 ok
16
:50:34.0397 1316    clr_optimization_v4.0.30319_32 (c5a75eb48e2344abdc162bda79e16841C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
16
:50:34.0397 1316    clr_optimization_v4.0.30319_32 ok
16
:50:34.0459 1316    clr_optimization_v4.0.30319_64 (c6f9af94dcd58122a4d7e89db6bed29dC:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
16
:50:34.0459 1316    clr_optimization_v4.0.30319_64 ok
16
:50:34.0568 1316    clwvd           (50f92c943f18b070f166d019dfab3d9aC:\Windows\system32\DRIVERS\clwvd.sys
16
:50:34.0568 1316    clwvd ok
16
:50:34.0600 1316    CmBatt          (0840155d0bddf1190f84a663c284bd33C:\Windows\system32\drivers\CmBatt.sys
16
:50:34.0600 1316    CmBatt ok
16
:50:34.0615 1316    cmdide          (e19d3f095812725d88f9001985b94eddC:\Windows\system32\drivers\cmdide.sys
16
:50:34.0615 1316    cmdide ok
16
:50:34.0678 1316    CNG             (9ac4f97c2d3e93367e2148ea940cd2cdC:\Windows\system32\Drivers\cng.sys
16
:50:34.0693 1316    CNG ok
16
:50:34.0724 1316    Compbatt        (102de219c3f61415f964c88e9085ad14C:\Windows\system32\drivers\compbatt.sys
16
:50:34.0740 1316    Compbatt ok
16
:50:34.0771 1316    CompositeBus    (03edb043586cceba243d689bdda370a8C:\Windows\system32\drivers\CompositeBus.sys
16
:50:34.0771 1316    CompositeBus ok
16
:50:34.0787 1316    COMSysApp ok
16
:50:34.0802 1316    crcdisk         (1c827878a998c18847245fe1f34ee597C:\Windows\system32\drivers\crcdisk.sys
16
:50:34.0818 1316    crcdisk ok
16
:50:34.0849 1316    CryptSvc        (4f5414602e2544a4554d95517948b705C:\Windows\system32\cryptsvc.dll
16
:50:34.0849 1316    CryptSvc ok
16
:50:34.0990 1316    cvhsvc          (72794d112cbaff3bc0c29bf7350d4741C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
16
:50:34.0990 1316    cvhsvc ok
16
:50:35.0068 1316    DcomLaunch      (5c627d1b1138676c0a7ab2c2c190d123C:\Windows\system32\rpcss.dll
16
:50:35.0083 1316    DcomLaunch ok
16
:50:35.0130 1316    defragsvc       (3cec7631a84943677aa8fa8ee5b6b43dC:\Windows\System32\defragsvc.dll
16
:50:35.0130 1316    defragsvc ok
16
:50:35.0177 1316    DfsC            (9bb2ef44eaa163b29c4a4587887a0fe4C:\Windows\system32\Drivers\dfsc.sys
16
:50:35.0177 1316    DfsC ok
16
:50:35.0224 1316    dg_ssudbus      (6060106ce00f32f63f1a73160e46e9d2C:\Windows\system32\DRIVERS\ssudbus.sys
16
:50:35.0224 1316    dg_ssudbus ok
16
:50:35.0270 1316    Dhcp            (43d808f5d9e1a18e5eeb5ebc83969e4eC:\Windows\system32\dhcpcore.dll
16
:50:35.0286 1316    Dhcp ok
16
:50:35.0302 1316    discache        (13096b05847ec78f0977f2c0f79e9ab3C:\Windows\system32\drivers\discache.sys
16
:50:35.0302 1316    discache ok
16
:50:35.0364 1316    Disk            (9819eee8b5ea3784ec4af3b137a5244cC:\Windows\system32\drivers\disk.sys
16
:50:35.0364 1316    Disk ok
16
:50:35.0395 1316    Dnscache        (16835866aaa693c7d7fceba8fff706e4C:\Windows\System32\dnsrslvr.dll
16
:50:35.0395 1316    Dnscache ok
16
:50:35.0426 1316    dot3svc         (b1fb3ddca0fdf408750d5843591afbc6C:\Windows\System32\dot3svc.dll
16
:50:35.0442 1316    dot3svc ok
16
:50:35.0489 1316    Dot4            (b42ed0320c6e41102fde0005154849bbC:\Windows\system32\DRIVERS\Dot4.sys
16
:50:35.0489 1316    Dot4 ok
16
:50:35.0536 1316    Dot4Print       (e9f5969233c5d89f3c35e3a66a52a361C:\Windows\system32\DRIVERS\Dot4Prt.sys
16
:50:35.0536 1316    Dot4Print ok
16
:50:35.0567 1316    dot4usb         (fd05a02b0370bc3000f402e543ca5814C:\Windows\system32\DRIVERS\dot4usb.sys
16
:50:35.0567 1316    dot4usb ok
16
:50:35.0598 1316    DPS             (b26f4f737e8f9df4f31af6cf31d05820C:\Windows\system32\dps.dll
16
:50:35.0598 1316    DPS ok
16
:50:35.0629 1316    drmkaud         (9b19f34400d24df84c858a421c205754C:\Windows\system32\drivers\drmkaud.sys
16
:50:35.0629 1316    drmkaud ok
16
:50:35.0676 1316    dsNcAdpt        (3eef0b3489edbf725564e17c77cabafdC:\Windows\system32\DRIVERS\dsNcAdpt.sys
16
:50:35.0676 1316    dsNcAdpt ok
16
:50:35.0801 1316    dsNcService     (bc4851b8cd478b93fcaedb95052a824dC:\Program Files (x86)\Juniper Networks\Common Files\dsNcService.exe
16
:50:35.0816 1316    dsNcService ok
16
:50:35.0879 1316    DXGKrnl         (f5bee30450e18e6b83a5012c100616fdC:\Windows\System32\drivers\dxgkrnl.sys
16
:50:35.0894 1316    DXGKrnl ok
16
:50:35.0926 1316    EapHost         (e2dda8726da9cb5b2c4000c9018a9633C:\Windows\System32\eapsvc.dll
16
:50:35.0926 1316    EapHost ok
16
:50:36.0066 1316    ebdrv           (dc5d737f51be844d8c82c695eb17372fC:\Windows\system32\drivers\evbda.sys
16
:50:36.0082 1316    ebdrv ok
16
:50:36.0191 1316    eeCtrl          (ba6420c1f7070ed8f1ba372844f3e1ecC:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys
16
:50:36.0206 1316    eeCtrl ok
16
:50:36.0316 1316    EFS             (c118a82cd78818c29ab228366ebf81c3C:\Windows\System32\lsass.exe
16
:50:36.0331 1316    EFS ok
16
:50:36.0425 1316    ehRecvr         (c4002b6b41975f057d98c439030cea07C:\Windows\ehome\ehRecvr.exe
16
:50:36.0425 1316    ehRecvr ok
16
:50:36.0472 1316    ehSched         (4705e8ef9934482c5bb488ce28afc681C:\Windows\ehome\ehsched.exe
16
:50:36.0472 1316    ehSched ok
16
:50:36.0550 1316    elxstor         (0e5da5369a0fcaea12456dd852545184C:\Windows\system32\drivers\elxstor.sys
16
:50:36.0550 1316    elxstor ok
16
:50:36.0659 1316    EraserUtilRebootDrv (1343df3451bc0c442dc69837c6fba21bC:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys
16
:50:36.0659 1316    EraserUtilRebootDrv ok
16
:50:36.0674 1316    ErrDev          (34a3c54752046e79a126e15c51db409bC:\Windows\system32\drivers\errdev.sys
16
:50:36.0674 1316    ErrDev ok
16
:50:36.0737 1316    EventSystem     (4166f82be4d24938977dd1746be9b8a0C:\Windows\system32\es.dll
16
:50:36.0752 1316    EventSystem ok
16
:50:36.0799 1316    exfat           (a510c654ec00c1e9bdd91eeb3a59823bC:\Windows\system32\drivers\exfat.sys
16
:50:36.0799 1316    exfat ok
16
:50:36.0815 1316    ezSharedSvc ok
16
:50:36.0862 1316    fastfat         (0adc83218b66a6db380c330836f3e36dC:\Windows\system32\drivers\fastfat.sys
16
:50:36.0862 1316    fastfat ok
16
:50:36.0971 1316    Fax             (dbefd454f8318a0ef691fdd2eaab44ebC:\Windows\system32\fxssvc.exe
16
:50:36.0986 1316    Fax ok
16
:50:37.0018 1316    fdc             (d765d19cd8ef61f650c384f62fac00abC:\Windows\system32\drivers\fdc.sys
16
:50:37.0018 1316    fdc ok
16
:50:37.0049 1316    fdPHost         (0438cab2e03f4fb61455a7956026fe86C:\Windows\system32\fdPHost.dll
16
:50:37.0049 1316    fdPHost ok
16
:50:37.0064 1316    FDResPub        (802496cb59a30349f9a6dd22d6947644C:\Windows\system32\fdrespub.dll
16
:50:37.0064 1316    FDResPub ok
16
:50:37.0111 1316    FileInfo        (655661be46b5f5f3fd454e2c3095b930C:\Windows\system32\drivers\fileinfo.sys
16
:50:37.0111 1316    FileInfo ok
16
:50:37.0127 1316    Filetrace       (5f671ab5bc87eea04ec38a6cd5962a47C:\Windows\system32\drivers\filetrace.sys
16
:50:37.0127 1316    Filetrace ok
16
:50:37.0158 1316    flpydisk        (c172a0f53008eaeb8ea33fe10e177af5C:\Windows\system32\drivers\flpydisk.sys
16
:50:37.0158 1316    flpydisk ok
16
:50:37.0205 1316    FltMgr          (da6b67270fd9db3697b20fce94950741C:\Windows\system32\drivers\fltmgr.sys
16
:50:37.0205 1316    FltMgr ok
16
:50:37.0267 1316    FontCache       (5c4cb4086fb83115b153e47add961a0cC:\Windows\system32\FntCache.dll
16
:50:37.0283 1316    FontCache ok
16
:50:37.0361 1316    FontCache3.0.0.0 (a8b7f3818ab65695e3a0bb3279f6dce6C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
16
:50:37.0361 1316    FontCache3.0.0.0 ok
16
:50:37.0486 1316    FPLService      (6aa4e6b4ea50620ab622a048394c4aa2C:\Program Files (x86)\HP SimplePass 2011\TrueSuiteService.exe
16
:50:37.0486 1316    FPLService ok
16
:50:37.0564 1316    FsDepends       (d43703496149971890703b4b1b723eacC:\Windows\system32\drivers\FsDepends.sys
16
:50:37.0564 1316    FsDepends ok
16
:50:37.0595 1316    Fs_Rec          (6bd9295cc032dd3077c671fccf579a7bC:\Windows\system32\drivers\Fs_Rec.sys
16
:50:37.0595 1316    Fs_Rec ok
16
:50:37.0657 1316    fvevol          (1f7b25b858fa27015169fe95e54108edC:\Windows\system32\DRIVERS\fvevol.sys
16
:50:37.0657 1316    fvevol ok
16
:50:37.0704 1316    gagp30kx        (8c778d335c9d272cfd3298ab02abe3b6C:\Windows\system32\drivers\gagp30kx.sys
16
:50:37.0704 1316    gagp30kx ok
16
:50:37.0782 1316    GamesAppService (c403c5db49a0f9aaf4f2128edc0106d8C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe
16
:50:37.0782 1316    GamesAppService ok
16
:50:37.0829 1316    GEARAspiWDM     (e403aacf8c7bb11375122d2464560311C:\Windows\system32\DRIVERS\GEARAspiWDM.sys
16
:50:37.0829 1316    GEARAspiWDM ok
16
:50:37.0922 1316    gpsvc           (277bbc7e1aa1ee957f573a10eca7ef3aC:\Windows\System32\gpsvc.dll
16
:50:37.0938 1316    gpsvc ok
16
:50:37.0985 1316    hcw85cir        (f2523ef6460fc42405b12248338ab2f0C:\Windows\system32\drivers\hcw85cir.sys
16
:50:37.0985 1316    hcw85cir ok
16
:50:38.0016 1316    HdAudAddService (975761c778e33cd22498059b91e7373aC:\Windows\system32\drivers\HdAudio.sys
16
:50:38.0032 1316    HdAudAddService ok
16
:50:38.0063 1316    HDAudBus        (97bfed39b6b79eb12cddbfeed51f56bbC:\Windows\system32\DRIVERS\HDAudBus.sys
16
:50:38.0063 1316    HDAudBus ok
16
:50:38.0063 1316    HidBatt         (78e86380454a7b10a5eb255dc44a355fC:\Windows\system32\drivers\HidBatt.sys
16
:50:38.0063 1316    HidBatt ok
16
:50:38.0110 1316    HidBth          (7fd2a313f7afe5c4dab14798c48dd104C:\Windows\system32\drivers\hidbth.sys
16
:50:38.0110 1316    HidBth ok
16
:50:38.0141 1316    HidIr           (0a77d29f311b88cfae3b13f9c1a73825C:\Windows\system32\drivers\hidir.sys
16
:50:38.0141 1316    HidIr ok
16
:50:38.0156 1316    hidserv         (bd9eb3958f213f96b97b1d897dee006dC:\Windows\system32\hidserv.dll
16
:50:38.0172 1316    hidserv ok
16
:50:38.0203 1316    HidUsb          (9592090a7e2b61cd582b612b6df70536C:\Windows\system32\DRIVERS\hidusb.sys
16
:50:38.0203 1316    HidUsb ok
16
:50:38.0250 1316    hkmsvc          (387e72e739e15e3d37907a86d9ff98e2C:\Windows\system32\kmsvc.dll
16
:50:38.0250 1316    hkmsvc ok
16
:50:38.0297 1316    HomeGroupListener (efdfb3dd38a4376f93e7985173813abdC:\Windows\system32\ListSvc.dll
16
:50:38.0312 1316    HomeGroupListener ok
16
:50:38.0344 1316    HomeGroupProvider (908acb1f594274965a53926b10c81e89C:\Windows\system32\provsvc.dll
16
:50:38.0359 1316    HomeGroupProvider ok
16
:50:38.0468 1316    HP Support Assistant Service (13bb1114451c63bfb41ba7daa4d70a29C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe
16
:50:38.0468 1316    HP Support Assistant Service ok
16
:50:38.0578 1316    HPAuto          (7b8c1b09c11e8db7c4480abd7d17e821C:\Program Files\Hewlett-Packard\HP Auto\HPAuto.exe
16
:50:38.0593 1316    HPAuto ok
16
:50:38.0656 1316    HPClientSvc     (6a181452d4e240b8ecc7614b9a19bde9C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe
16
:50:38.0656 1316    HPClientSvc ok
16
:50:38.0749 1316    hpCMSrv         (e040f0064d39f73bb4995d494f3dcbb8C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\hpCMSrv.exe
16
:50:38.0765 1316    hpCMSrv ok
16
:50:38.0827 1316    HPDrvMntSvc.exe (b19ff523b533a3f198b9239e1749c940C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe
16
:50:38.0827 1316    HPDrvMntSvc.exe ok
16
:50:38.0952 1316    hpdskflt        (4e0bec0f78096ffd6d3314b497fc49d3C:\Windows\system32\DRIVERS\hpdskflt.sys
16
:50:38.0952 1316    hpdskflt ok
16
:50:39.0014 1316    hpqwmiex        (01091b900e15878b4434f9c726c4541dC:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
16
:50:39.0030 1316    hpqwmiex ok
16
:50:39.0077 1316    HpSAMD          (39d2abcd392f3d8a6dce7b60ae7b8efcC:\Windows\system32\drivers\HpSAMD.sys
16
:50:39.0077 1316    HpSAMD ok
16
:50:39.0108 1316    hpsrv           (fc7c13b5a9e9be23b7ae72bbc7fdb278C:\Windows\system32\Hpservice.exe
16
:50:39.0108 1316    hpsrv ok
16
:50:39.0170 1316    HPWMISVC        (f630dd7564ebb7248a13b1cc774d9ea6C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
16
:50:39.0170 1316    HPWMISVC ok
16
:50:39.0233 1316    HTTP            (0ea7de1acb728dd5a369fd742d6eee28C:\Windows\system32\drivers\HTTP.sys
16
:50:39.0248 1316    HTTP ok
16
:50:39.0264 1316    hwpolicy        (a5462bd6884960c9dc85ed49d34ff392C:\Windows\system32\drivers\hwpolicy.sys
16
:50:39.0264 1316    hwpolicy ok
16
:50:39.0311 1316    i8042prt        (fa55c73d4affa7ee23ac4be53b4592d3C:\Windows\system32\DRIVERS\i8042prt.sys
16
:50:39.0311 1316    i8042prt ok
16
:50:39.0358 1316    iaStor          (d469b77687e12fe43e344806740b624dC:\Windows\system32\DRIVERS\iaStor.sys
16
:50:39.0358 1316    iaStor ok
16
:50:39.0467 1316    IAStorDataMgrSvc (983fc69644ddf0486c8dfea262948d1aC:\Program Files (x86)\Intel\Intel(RRapid Storage Technology\IAStorDataMgrSvc.exe
16
:50:39.0467 1316    IAStorDataMgrSvc ok
16
:50:39.0514 1316    iaStorV         (aaaf44db3bd0b9d1fb6969b23ecc8366C:\Windows\system32\drivers\iaStorV.sys
16
:50:39.0514 1316    iaStorV ok
16
:50:39.0623 1316    idsvc           (5988fc40f8db5b0739cd1e3a5d0d78bdC:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
16
:50:39.0638 1316    idsvc ok
16
:50:39.0888 1316    IDSVia64        (ce0bf35c79e03bb89da6b14fac838605C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.7.1.5\Definitions\IPSDefs\20120731.001\IDSvia64.sys
16
:50:39.0888 1316    IDSVia64 ok
16
:50:39.0997 1316    iirsp           (5c18831c61933628f5bb0ea2675b9d21C:\Windows\system32\drivers\iirsp.sys
16
:50:39.0997 1316    iirsp ok
16
:50:40.0060 1316    IKEEXT          (fcd84c381e0140af901e58d48882d26bC:\Windows\System32\ikeext.dll
16
:50:40.0075 1316    IKEEXT ok
16
:50:40.0138 1316    IntcDAud        (fc727061c0f47c8059e88e05d5c8e381C:\Windows\system32\DRIVERS\IntcDAud.sys
16
:50:40.0138 1316    IntcDAud ok
16
:50:40.0169 1316    intelide        (f00f20e70c6ec3aa366910083a0518aaC:\Windows\system32\drivers\intelide.sys
16
:50:40.0169 1316    intelide ok
16
:50:40.0590 1316    intelkmd        (efe5a0af39a8e179624117c521f1e012C:\Windows\system32\DRIVERS\igdpmd64.sys
16
:50:40.0652 1316    intelkmd ok
16
:50:40.0746 1316    intelppm        (ada036632c664caa754079041cf1f8c1C:\Windows\system32\DRIVERS\intelppm.sys
16
:50:40.0762 1316    intelppm ok
16
:50:40.0793 1316    IPBusEnum       (098a91c54546a3b878dad6a7e90a455bC:\Windows\system32\ipbusenum.dll
16
:50:40.0808 1316    IPBusEnum ok
16
:50:40.0824 1316    IpFilterDriver  (c9f0e1bd74365a8771590e9008d22ab6C:\Windows\system32\DRIVERS\ipfltdrv.sys
16
:50:40.0824 1316    IpFilterDriver ok
16
:50:40.0871 1316    iphlpsvc        (a34a587fffd45fa649fba6d03784d257C:\Windows\System32\iphlpsvc.dll
16
:50:40.0871 1316    iphlpsvc ok
16
:50:40.0902 1316    IPMIDRV         (0fc1aea580957aa8817b8f305d18ca3aC:\Windows\system32\drivers\IPMIDrv.sys
16
:50:40.0902 1316    IPMIDRV ok
16
:50:40.0902 1316    IPNAT           (af9b39a7e7b6caa203b3862582e9f2d0C:\Windows\system32\drivers\ipnat.sys
16
:50:40.0902 1316    IPNAT ok
16
:50:41.0011 1316    iPod Service    (a9ab99ee7d39725eafec82732d2b3271C:\Program Files\iPod\bin\iPodService.exe
16
:50:41.0027 1316    iPod Service ok
16
:50:41.0058 1316    IRENUM          (3abf5e7213eb28966d55d58b515d5ce9C:\Windows\system32\drivers\irenum.sys
16
:50:41.0058 1316    IRENUM ok
16
:50:41.0089 1316    isapnp          (2f7b28dc3e1183e5eb418df55c204f38C:\Windows\system32\drivers\isapnp.sys
16
:50:41.0089 1316    isapnp ok
16
:50:41.0105 1316    iScsiPrt        (d931d7309deb2317035b07c9f9e6b0bdC:\Windows\system32\drivers\msiscsi.sys
16
:50:41.0120 1316    iScsiPrt ok
16
:50:41.0214 1316    JuniperAccessService (7a76b6f9c12fee9e0dd68362ee6c9930C:\Program Files (x86)\Common Files\Juniper Networks\JUNS\dsAccessService.exe
16
:50:41.0230 1316    JuniperAccessService ok
16
:50:41.0230 1316    kbdclass        (bc02336f1cba7dcc7d1213bb588a68a5C:\Windows\system32\DRIVERS\kbdclass.sys
16
:50:41.0230 1316    kbdclass ok
16
:50:41.0276 1316    kbdhid          (0705eff5b42a9db58548eec3b26bb484C:\Windows\system32\drivers\kbdhid.sys
16
:50:41.0276 1316    kbdhid ok
16
:50:41.0323 1316    KeyIso          (c118a82cd78818c29ab228366ebf81c3C:\Windows\system32\lsass.exe
16
:50:41.0323 1316    KeyIso ok
16
:50:41.0354 1316    KSecDD          (97a7070aea4c058b6418519e869a63b4C:\Windows\system32\Drivers\ksecdd.sys
16
:50:41.0354 1316    KSecDD ok
16
:50:41.0386 1316    KSecPkg         (26c43a7c2862447ec59deda188d1da07C:\Windows\system32\Drivers\ksecpkg.sys
16
:50:41.0386 1316    KSecPkg ok
16
:50:41.0417 1316    ksthunk         (6869281e78cb31a43e969f06b57347c4C:\Windows\system32\drivers\ksthunk.sys
16
:50:41.0417 1316    ksthunk ok
16
:50:41.0448 1316    KtmRm           (6ab66e16aa859232f64deb66887a8c9cC:\Windows\system32\msdtckrm.dll
16
:50:41.0464 1316    KtmRm ok
16
:50:41.0510 1316    LanmanServer    (d9f42719019740baa6d1c6d536cbdaa6C:\Windows\system32\srvsvc.dll
16
:50:41.0510 1316    LanmanServer ok
16
:50:41.0542 1316    LanmanWorkstation (851a1382eed3e3a7476db004f4ee3e1aC:\Windows\System32\wkssvc.dll
16
:50:41.0542 1316    LanmanWorkstation ok
16
:50:41.0588 1316    lirsgt          (156ab2e56dc3ca0b582e3362e07cded7C:\Windows\system32\DRIVERS\lirsgt.sys
16
:50:41.0588 1316    lirsgt ok
16
:50:41.0651 1316    lltdio          (1538831cf8ad2979a04c423779465827C:\Windows\system32\DRIVERS\lltdio.sys
16
:50:41.0651 1316    lltdio ok
16
:50:41.0698 1316    lltdsvc         (c1185803384ab3feed115f79f109427fC:\Windows\System32\lltdsvc.dll
16
:50:41.0698 1316    lltdsvc ok
16
:50:41.0729 1316    lmhosts         (f993a32249b66c9d622ea5592a8b76b8C:\Windows\System32\lmhsvc.dll
16
:50:41.0744 1316    lmhosts ok
16
:50:41.0854 1316    LMS             (d7e0bed3ea21d7bddd410ade51708d90C:\Program Files (x86)\Intel\Intel(RManagement Engine Components\LMS\LMS.exe
16
:50:41.0854 1316    LMS ok
16
:50:41.0900 1316    LSI_FC          (1a93e54eb0ece102495a51266dcdb6a6C:\Windows\system32\drivers\lsi_fc.sys
16
:50:41.0900 1316    LSI_FC ok
16
:50:41.0932 1316    LSI_SAS         (1047184a9fdc8bdbff857175875ee810C:\Windows\system32\drivers\lsi_sas.sys
16
:50:41.0932 1316    LSI_SAS ok
16
:50:41.0947 1316    LSI_SAS2        (30f5c0de1ee8b5bc9306c1f0e4a75f93C:\Windows\system32\drivers\lsi_sas2.sys
16
:50:41.0947 1316    LSI_SAS2 ok
16
:50:41.0963 1316    LSI_SCSI        (0504eacaff0d3c8aed161c4b0d369d4aC:\Windows\system32\drivers\lsi_scsi.sys
16
:50:41.0963 1316    LSI_SCSI ok
16
:50:41.0994 1316    luafv           (43d0f98e1d56ccddb0d5254cff7b356eC:\Windows\system32\drivers\luafv.sys
16
:50:41.0994 1316    luafv ok
16
:50:42.0041 1316    Mcx2Svc         (0be09cd858abf9df6ed259d57a1a1663C:\Windows\system32\Mcx2Svc.dll
16
:50:42.0056 1316    Mcx2Svc ok
16
:50:42.0088 1316    megasas         (a55805f747c6edb6a9080d7c633bd0f4C:\Windows\system32\drivers\megasas.sys
16
:50:42.0088 1316    megasas ok
16
:50:42.0103 1316    MegaSR          (baf74ce0072480c3b6b7c13b2a94d6b3C:\Windows\system32\drivers\MegaSR.sys
16
:50:42.0119 1316    MegaSR ok
16
:50:42.0166 1316    MEIx64          (a6518dcc42f7a6e999bb3bea8fd87567C:\Windows\system32\DRIVERS\HECIx64.sys
16
:50:42.0166 1316    MEIx64 ok
16
:50:42.0212 1316    MMCSS           (e40e80d0304a73e8d269f7141d77250bC:\Windows\system32\mmcss.dll
16
:50:42.0212 1316    MMCSS ok
16
:50:42.0259 1316    Modem           (800ba92f7010378b09f9ed9270f07137C:\Windows\system32\drivers\modem.sys
16
:50:42.0259 1316    Modem ok
16
:50:42.0290 1316    monitor         (b03d591dc7da45ece20b3b467e6aadaaC:\Windows\system32\DRIVERS\monitor.sys
16
:50:42.0290 1316    monitor ok
16
:50:42.0322 1316    mouclass        (7d27ea49f3c1f687d357e77a470aea99C:\Windows\system32\DRIVERS\mouclass.sys
16
:50:42.0322 1316    mouclass ok
16
:50:42.0353 1316    mouhid          (d3bf052c40b0c4166d9fd86a4288c1e6C:\Windows\system32\DRIVERS\mouhid.sys
16
:50:42.0353 1316    mouhid ok
16
:50:42.0415 1316    mountmgr        (32e7a3d591d671a6df2db515a5cbe0faC:\Windows\system32\drivers\mountmgr.sys
16
:50:42.0415 1316    mountmgr ok
16
:50:42.0446 1316    mpio            (a44b420d30bd56e145d6a2bc8768ec58C:\Windows\system32\drivers\mpio.sys
16
:50:42.0446 1316    mpio ok
16
:50:42.0462 1316    mpsdrv          (6c38c9e45ae0ea2fa5e551f2ed5e978fC:\Windows\system32\drivers\mpsdrv.sys
16
:50:42.0462 1316    mpsdrv ok
16
:50:42.0556 1316    MpsSvc          (54ffc9c8898113ace189d4aa7199d2c1C:\Windows\system32\mpssvc.dll
16
:50:42.0571 1316    MpsSvc ok
16
:50:42.0587 1316    MRxDAV          (dc722758b8261e1abafd31a3c0a66380C:\Windows\system32\drivers\mrxdav.sys
16
:50:42.0587 1316    MRxDAV ok
16
:50:42.0618 1316    mrxsmb          (a5d9106a73dc88564c825d317cac68acC:\Windows\system32\DRIVERS\mrxsmb.sys
16
:50:42.0618 1316    mrxsmb ok
16
:50:42.0649 1316    mrxsmb10        (d711b3c1d5f42c0c2415687be09fc163C:\Windows\system32\DRIVERS\mrxsmb10.sys
16
:50:42.0649 1316    mrxsmb10 ok
16
:50:42.0680 1316    mrxsmb20        (9423e9d355c8d303e76b8cfbd8a5c30cC:\Windows\system32\DRIVERS\mrxsmb20.sys
16
:50:42.0680 1316    mrxsmb20 ok
16
:50:42.0712 1316    msahci          (c25f0bafa182cbca2dd3c851c2e75796C:\Windows\system32\drivers\msahci.sys
16
:50:42.0712 1316    msahci ok
16
:50:42.0727 1316    msdsm           (db801a638d011b9633829eb6f663c900C:\Windows\system32\drivers\msdsm.sys
16
:50:42.0743 1316    msdsm ok
16
:50:42.0774 1316    MSDTC           (de0ece52236cfa3ed2dbfc03f28253a8C:\Windows\System32\msdtc.exe
16
:50:42.0774 1316    MSDTC ok
16
:50:42.0805 1316    Msfs            (aa3fb40e17ce1388fa1bedab50ea8f96C:\Windows\system32\drivers\Msfs.sys
16
:50:42.0805 1316    Msfs ok
16
:50:42.0821 1316    mshidkmdf       (f9d215a46a8b9753f61767fa72a20326C:\Windows\System32\drivers\mshidkmdf.sys
16
:50:42.0821 1316    mshidkmdf ok
16
:50:42.0836 1316    msisadrv        (d916874bbd4f8b07bfb7fa9b3ccae29dC:\Windows\system32\drivers\msisadrv.sys
16
:50:42.0836 1316    msisadrv ok
16
:50:42.0883 1316    MSiSCSI         (808e98ff49b155c522e6400953177b08C:\Windows\system32\iscsiexe.dll
16
:50:42.0883 1316    MSiSCSI ok
16
:50:42.0883 1316    msiserver ok
16
:50:42.0930 1316    MSKSSRV         (49ccf2c4fea34ffad8b1b59d49439366C:\Windows\system32\drivers\MSKSSRV.sys
16
:50:42.0930 1316    MSKSSRV ok
16
:50:42.0946 1316    MSPCLOCK        (bdd71ace35a232104ddd349ee70e1ab3C:\Windows\system32\drivers\MSPCLOCK.sys
16
:50:42.0946 1316    MSPCLOCK ok
16
:50:42.0961 1316    MSPQM           (4ed981241db27c3383d72092b618a1d0C:\Windows\system32\drivers\MSPQM.sys
16
:50:42.0961 1316    MSPQM ok
16
:50:43.0008 1316    MsRPC           (759a9eeb0fa9ed79da1fb7d4ef78866dC:\Windows\system32\drivers\MsRPC.sys
16
:50:43.0008 1316    MsRPC ok
16
:50:43.0039 1316    mssmbios        (0eed230e37515a0eaee3c2e1bc97b288C:\Windows\system32\drivers\mssmbios.sys
16
:50:43.0039 1316    mssmbios ok
16
:50:43.0070 1316    MSTEE           (2e66f9ecb30b4221a318c92ac2250779C:\Windows\system32\drivers\MSTEE.sys
16
:50:43.0070 1316    MSTEE ok
16
:50:43.0070 1316    MTConfig        (7ea404308934e675bffde8edf0757bcdC:\Windows\system32\drivers\MTConfig.sys
16
:50:43.0070 1316    MTConfig ok
16
:50:43.0102 1316    Mup             (f9a18612fd3526fe473c1bda678d61c8C:\Windows\system32\Drivers\mup.sys
16
:50:43.0102 1316    Mup ok
16
:50:43.0148 1316    napagent        (582ac6d9873e31dfa28a4547270862ddC:\Windows\system32\qagentRT.dll
16
:50:43.0148 1316    napagent ok
16
:50:43.0195 1316    NativeWifiP     (1ea3749c4114db3e3161156ffffa6b33C:\Windows\system32\DRIVERS\nwifi.sys
16
:50:43.0211 1316    NativeWifiP ok
16
:50:43.0336 1316    NAVENG          (8043d41f881d6ace40b854ad6e32217fC:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.7.1.5\Definitions\VirusDefs\20120731.033\ENG64.SYS
16
:50:43.0336 1316    NAVENG ok
16
:50:43.0445 1316    NAVEX15         (9a9ab2fc45d701daed465d14980f1305C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.7.1.5\Definitions\VirusDefs\20120731.033\EX64.SYS
16
:50:43.0460 1316    NAVEX15 ok
16
:50:43.0601 1316    NDIS            (c38b8ae57f78915905064a9a24dc1586C:\Windows\system32\drivers\ndis.sys
16
:50:43.0616 1316    NDIS ok
16
:50:43.0663 1316    NdisCap         (9f9a1f53aad7da4d6fef5bb73ab811acC:\Windows\system32\DRIVERS\ndiscap.sys
16
:50:43.0663 1316    NdisCap ok
16
:50:43.0679 1316    NdisTapi        (30639c932d9fef22b31268fe25a1b6e5C:\Windows\system32\DRIVERS\ndistapi.sys
16
:50:43.0679 1316    NdisTapi ok
16
:50:43.0694 1316    Ndisuio         (136185f9fb2cc61e573e676aa5402356C:\Windows\system32\DRIVERS\ndisuio.sys
16
:50:43.0694 1316    Ndisuio ok
16
:50:43.0741 1316    NdisWan         (53f7305169863f0a2bddc49e116c2e11C:\Windows\system32\DRIVERS\ndiswan.sys
16
:50:43.0741 1316    NdisWan ok
16
:50:43.0772 1316    NDProxy         (015c0d8e0e0421b4cfd48cffe2825879C:\Windows\system32\drivers\NDProxy.sys
16
:50:43.0772 1316    NDProxy ok
16
:50:43.0819 1316    NetBIOS         (86743d9f5d2b1048062b14b1d84501c4C:\Windows\system32\DRIVERS\netbios.sys
16
:50:43.0819 1316    NetBIOS ok
16
:50:43.0850 1316    NetBT           (09594d1089c523423b32a4229263f068C:\Windows\system32\DRIVERS\netbt.sys
16
:50:43.0850 1316    NetBT ok
16
:50:43.0897 1316    Netlogon        (c118a82cd78818c29ab228366ebf81c3C:\Windows\system32\lsass.exe
16
:50:43.0897 1316    Netlogon ok
16
:50:43.0944 1316    Netman          (847d3ae376c0817161a14a82c8922a9eC:\Windows\System32\netman.dll
16
:50:43.0960 1316    Netman ok
16
:50:44.0053 1316    NetMsmqActivator (3e5a36127e201ddf663176b66828fafeC:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe
16
:50:44.0053 1316    NetMsmqActivator ok
16
:50:44.0069 1316    NetPipeActivator (3e5a36127e201ddf663176b66828fafeC:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe
16
:50:44.0069 1316    NetPipeActivator ok
16
:50:44.0116 1316    netprofm        (5f28111c648f1e24f7dbc87cdeb091b8C:\Windows\System32\netprofm.dll
16
:50:44.0131 1316    netprofm ok
16
:50:44.0256 1316    netr28x         (813b7c722ba97e703d375aba170e16ccC:\Windows\system32\DRIVERS\netr28x.sys
16
:50:44.0256 1316    netr28x ok
16
:50:44.0396 1316    NetTcpActivator (3e5a36127e201ddf663176b66828fafeC:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe
16
:50:44.0396 1316    NetTcpActivator ok
16
:50:44.0396 1316    NetTcpPortSharing (3e5a36127e201ddf663176b66828fafeC:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe
16
:50:44.0396 1316    NetTcpPortSharing ok
16
:50:44.0506 1316    nfrd960         (77889813be4d166cdab78ddba990da92C:\Windows\system32\drivers\nfrd960.sys
16
:50:44.0506 1316    nfrd960 ok
16
:50:44.0693 1316    NIS             (c6948f034d7edabcfa2234d399fc78bcC:\Program Files (x86)\Norton Internet Security\Engine\19.7.1.5\ccSvcHst.exe
16
:50:44.0708 1316    NIS ok
16
:50:44.0771 1316    NlaSvc          (1ee99a89cc788ada662441d1e9830529C:\Windows\System32\nlasvc.dll
16
:50:44.0771 1316    NlaSvc ok
16
:50:44.0802 1316    Npfs            (1e4c4ab5c9b8dd13179bbdc75a2a01f7C:\Windows\system32\drivers\Npfs.sys
16
:50:44.0802 1316    Npfs ok
16
:50:44.0818 1316    nsi             (d54bfdf3e0c953f823b3d0bfe4732528C:\Windows\system32\nsisvc.dll
16
:50:44.0818 1316    nsi ok
16
:50:44.0833 1316    nsiproxy        (e7f5ae18af4168178a642a9247c63001C:\Windows\system32\drivers\nsiproxy.sys
16
:50:44.0833 1316    nsiproxy ok
16
:50:44.0927 1316    Ntfs            (a2f74975097f52a00745f9637451fdd8C:\Windows\system32\drivers\Ntfs.sys
16
:50:44.0942 1316    Ntfs ok
16
:50:45.0052 1316    Null            (9899284589f75fa8724ff3d16aed75c1C:\Windows\system32\drivers\Null.sys
16
:50:45.0052 1316    Null ok
16
:50:45.0098 1316    nusb3hub        (158ad24745bd85ba9be3c51c38f48c32C:\Windows\system32\DRIVERS\nusb3hub.sys
16
:50:45.0098 1316    nusb3hub ok
16
:50:45.0114 1316    nusb3xhc        (d40a13b2c0891e218f9523b376955db6C:\Windows\system32\DRIVERS\nusb3xhc.sys
16
:50:45.0114 1316    nusb3xhc ok
16
:50:45.0192 1316    NVENETFD        (a85b4f2ef3a7304a5399ef0526423040C:\Windows\system32\DRIVERS\nvm62x64.sys
16
:50:45.0192 1316    NVENETFD ok
16
:50:45.0254 1316    nvraid          (0a92cb65770442ed0dc44834632f66adC:\Windows\system32\drivers\nvraid.sys
16
:50:45.0254 1316    nvraid ok
16
:50:45.0270 1316    nvstor          (dab0e87525c10052bf65f06152f37e4aC:\Windows\system32\drivers\nvstor.sys
16
:50:45.0270 1316    nvstor ok
16
:50:45.0332 1316    nv_agp          (270d7cd42d6e3979f6dd0146650f0e05C:\Windows\system32\drivers\nv_agp.sys
16
:50:45.0332 1316    nv_agp ok
16
:50:45.0348 1316    ohci1394        (3589478e4b22ce21b41fa1bfc0b8b8a0C:\Windows\system32\drivers\ohci1394.sys
16
:50:45.0348 1316    ohci1394 ok
16
:50:45.0457 1316    ose             (9d10f99a6712e28f8acd5641e3a7ea6bC:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
16
:50:45.0457 1316    ose ok
16
:50:45.0722 1316    osppsvc         (61bffb5f57ad12f83ab64b7181829b34C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
16
:50:45.0754 1316    osppsvc ok
16
:50:45.0863 1316    p2pimsvc        (3eac4455472cc2c97107b5291e0dcafeC:\Windows\system32\pnrpsvc.dll
16
:50:45.0863 1316    p2pimsvc ok
16
:50:45.0894 1316    p2psvc          (927463ecb02179f88e4b9a17568c63c3C:\Windows\system32\p2psvc.dll
16
:50:45.0894 1316    p2psvc ok
16
:50:45.0956 1316    Parport         (0086431c29c35be1dbc43f52cc273887C:\Windows\system32\drivers\parport.sys
16
:50:45.0956 1316    Parport ok
16
:50:46.0003 1316    partmgr         (e9766131eeade40a27dc27d2d68fba9cC:\Windows\system32\drivers\partmgr.sys
16
:50:46.0003 1316    partmgr ok
16
:50:46.0034 1316    PcaSvc          (3aeaa8b561e63452c655dc0584922257C:\Windows\System32\pcasvc.dll
16
:50:46.0034 1316    PcaSvc ok
16
:50:46.0081 1316    pci             (94575c0571d1462a0f70bde6bd6ee6b3C:\Windows\system32\drivers\pci.sys
16
:50:46.0081 1316    pci ok
16
:50:46.0097 1316    pciide          (b5b8b5ef2e5cb34df8dcf8831e3534faC:\Windows\system32\drivers\pciide.sys
16
:50:46.0097 1316    pciide ok
16
:50:46.0128 1316    pcmcia          (b2e81d4e87ce48589f98cb8c05b01f2fC:\Windows\system32\drivers\pcmcia.sys
16
:50:46.0144 1316    pcmcia ok
16
:50:46.0159 1316    pcw             (d6b9c2e1a11a3a4b26a182ffef18f603C:\Windows\system32\drivers\pcw.sys
16
:50:46.0159 1316    pcw ok
16
:50:46.0206 1316    PEAUTH          (68769c3356b3be5d1c732c97b9a80d6eC:\Windows\system32\drivers\peauth.sys
16
:50:46.0222 1316    PEAUTH ok
16
:50:46.0315 1316    PerfHost        (e495e408c93141e8fc72dc0c6046ddfaC:\Windows\SysWow64\perfhost.exe
16
:50:46.0315 1316    PerfHost ok
16
:50:46.0456 1316    pla             (c7cf6a6e137463219e1259e3f0f0dd6cC:\Windows\system32\pla.dll
16
:50:46.0471 1316    pla ok
16
:50:46.0534 1316    PlugPlay        (25fbdef06c4d92815b353f6e792c8129C:\Windows\system32\umpnpmgr.dll
16
:50:46.0549 1316    PlugPlay ok
16
:50:46.0565 1316    PnkBstrA ok
16
:50:46.0596 1316    PNRPAutoReg     (7195581cec9bb7d12abe54036acc2e38C:\Windows\system32\pnrpauto.dll
16
:50:46.0596 1316    PNRPAutoReg ok
16
:50:46.0627 1316    PNRPsvc         (3eac4455472cc2c97107b5291e0dcafeC:\Windows\system32\pnrpsvc.dll
16
:50:46.0627 1316    PNRPsvc ok
16
:50:46.0690 1316    PolicyAgent     (4f15d75adf6156bf56eced6d4a55c389C:\Windows\System32\ipsecsvc.dll
16
:50:46.0690 1316    PolicyAgent ok
16
:50:46.0736 1316    Power           (6ba9d927dded70bd1a9caded45f8b184C:\Windows\system32\umpo.dll
16
:50:46.0752 1316    Power ok
16
:50:46.0783 1316    PptpMiniport    (f92a2c41117a11a00be01ca01a7fcde9C:\Windows\system32\DRIVERS\raspptp.sys
16
:50:46.0799 1316    PptpMiniport ok
16
:50:46.0814 1316    Processor       (0d922e23c041efb1c3fac2a6f943c9bfC:\Windows\system32\drivers\processr.sys
16
:50:46.0814 1316    Processor ok
16
:50:46.0846 1316    ProfSvc         (53e83f1f6cf9d62f32801cf66d8352a8C:\Windows\system32\profsvc.dll
16
:50:46.0846 1316    ProfSvc ok
16
:50:46.0892 1316    ProtectedStorage (c118a82cd78818c29ab228366ebf81c3C:\Windows\system32\lsass.exe
16
:50:46.0892 1316    ProtectedStorage ok
16
:50:46.0939 1316    Psched          (0557cf5a2556bd58e26384169d72438dC:\Windows\system32\DRIVERS\pacer.sys
16
:50:46.0939 1316    Psched ok
16
:50:46.0986 1316    PSI             (fb46e9a827a8799ebd7bfa9128c91f37C:\Windows\system32\DRIVERS\psi_mf.sys
16
:50:46.0986 1316    PSI ok
16
:50:47.0095 1316    ql2300          (a53a15a11ebfd21077463ee2c7afeef0C:\Windows\system32\drivers\ql2300.sys
16
:50:47.0111 1316    ql2300 ok
16
:50:47.0236 1316    ql40xx          (4f6d12b51de1aaeff7dc58c4d75423c8C:\Windows\system32\drivers\ql40xx.sys
16
:50:47.0236 1316    ql40xx ok
16
:50:47.0282 1316    QWAVE           (906191634e99aea92c4816150bda3732C:\Windows\system32\qwave.dll
16
:50:47.0298 1316    QWAVE ok
16
:50:47.0329 1316    QWAVEdrv        (76707bb36430888d9ce9d705398adb6cC:\Windows\system32\drivers\qwavedrv.sys
16
:50:47.0329 1316    QWAVEdrv ok
16
:50:47.0360 1316    RasAcd          (5a0da8ad5762fa2d91678a8a01311704C:\Windows\system32\DRIVERS\rasacd.sys
16
:50:47.0360 1316    RasAcd ok
16
:50:47.0392 1316    RasAgileVpn     (7ecff9b22276b73f43a99a15a6094e90C:\Windows\system32\DRIVERS\AgileVpn.sys
16
:50:47.0392 1316    RasAgileVpn ok
16
:50:47.0454 1316    RasAuto         (8f26510c5383b8dbe976de1cd00fc8c7C:\Windows\System32\rasauto.dll
16
:50:47.0454 1316    RasAuto ok
16
:50:47.0501 1316    Rasl2tp         (471815800ae33e6f1c32fb1b97c490caC:\Windows\system32\DRIVERS\rasl2tp.sys
16
:50:47.0501 1316    Rasl2tp ok
16
:50:47.0548 1316    RasMan          (ee867a0870fc9e4972ba9eaad35651e2C:\Windows\System32\rasmans.dll
16
:50:47.0563 1316    RasMan ok
16
:50:47.0579 1316    RasPppoe        (855c9b1cd4756c5e9a2aa58a15f58c25C:\Windows\system32\DRIVERS\raspppoe.sys
16
:50:47.0594 1316    RasPppoe ok
16
:50:47.0610 1316    RasSstp         (e8b1e447b008d07ff47d016c2b0eeecbC:\Windows\system32\DRIVERS\rassstp.sys
16
:50:47.0610 1316    RasSstp ok
16
:50:47.0641 1316    rdbss           (77f665941019a1594d887a74f301fa2fC:\Windows\system32\DRIVERS\rdbss.sys
16
:50:47.0641 1316    rdbss ok
16
:50:47.0672 1316    rdpbus          (302da2a0539f2cf54d7c6cc30c1f2d8dC:\Windows\system32\drivers\rdpbus.sys
16
:50:47.0688 1316    rdpbus ok
16
:50:47.0704 1316    RDPCDD          (cea6cc257fc9b7715f1c2b4849286d24C:\Windows\system32\DRIVERS\RDPCDD.sys
16
:50:47.0719 1316    RDPCDD ok
16
:50:47.0735 1316    RDPENCDD        (bb5971a4f00659529a5c44831af22365C:\Windows\system32\drivers\rdpencdd.sys
16
:50:47.0735 1316    RDPENCDD ok
16
:50:47.0766 1316    RDPREFMP        (216f3fa57533d98e1f74ded70113177aC:\Windows\system32\drivers\rdprefmp.sys
16
:50:47.0766 1316    RDPREFMP ok
16
:50:47.0797 1316    RDPWD           (e61608aa35e98999af9aaeeea6114b0aC:\Windows\system32\drivers\RDPWD.sys
16
:50:47.0797 1316    RDPWD ok
16
:50:47.0828 1316    rdyboost        (34ed295fa0121c241bfef24764fc4520C:\Windows\system32\drivers\rdyboost.sys
16
:50:47.0828 1316    rdyboost ok
16
:50:47.0860 1316    RemoteAccess    (254fb7a22d74e5511c73a3f6d802f192C:\Windows\System32\mprdim.dll
16
:50:47.0860 1316    RemoteAccess ok
16
:50:47.0891 1316    RemoteRegistry  (e4d94f24081440b5fc5aa556c7c62702C:\Windows\system32\regsvc.dll
16
:50:47.0906 1316    RemoteRegistry ok
16
:50:47.0953 1316    RFCOMM          (3dd798846e2c28102b922c56e71b7932C:\Windows\system32\DRIVERS\rfcomm.sys
16
:50:47.0953 1316    RFCOMM ok
16
:50:47.0984 1316    RpcEptMapper    (e4dc58cf7b3ea515ae917ff0d402a7bbC:\Windows\System32\RpcEpMap.dll
16
:50:47.0984 1316    RpcEptMapper ok
16
:50:48.0031 1316    RpcLocator      (d5ba242d4cf8e384db90e6a8ed850b8cC:\Windows\system32\locator.exe
16
:50:48.0031 1316    RpcLocator ok
16
:50:48.0078 1316    RpcSs           (5c627d1b1138676c0a7ab2c2c190d123C:\Windows\system32\rpcss.dll
16
:50:48.0094 1316    RpcSs ok
16
:50:48.0156 1316    RSPCIESTOR      (d5c3e1629a3f7f0857d27949252b94ceC:\Windows\system32\DRIVERS\RtsPStor.sys
16
:50:48.0156 1316    RSPCIESTOR ok
16
:50:48.0187 1316    rspndr          (ddc86e4f8e7456261e637e3552e804ffC:\Windows\system32\DRIVERS\rspndr.sys
16
:50:48.0187 1316    rspndr ok
16
:50:48.0250 1316    RTL8167         (ed5873f7dfb2f96d37f13322211b6bdcC:\Windows\system32\DRIVERS\Rt64win7.sys
16
:50:48.0265 1316    RTL8167 ok
16
:50:48.0312 1316    SamSs           (c118a82cd78818c29ab228366ebf81c3C:\Windows\system32\lsass.exe
16
:50:48.0312 1316    SamSs ok
16
:50:48.0343 1316    sbp2port        (ac03af3329579fffb455aa2daabbe22bC:\Windows\system32\drivers\sbp2port.sys
16
:50:48.0343 1316    sbp2port ok
16
:50:48.0390 1316    SCardSvr        (9b7395789e3791a3b6d000fe6f8b131eC:\Windows\System32\SCardSvr.dll
16
:50:48.0390 1316    SCardSvr ok
16
:50:48.0421 1316    scfilter        (253f38d0d7074c02ff8deb9836c97d2bC:\Windows\system32\DRIVERS\scfilter.sys
16
:50:48.0421 1316    scfilter ok
16
:50:48.0484 1316    Schedule        (262f6592c3299c005fd6bec90fc4463aC:\Windows\system32\schedsvc.dll
16
:50:48.0499 1316    Schedule ok
16
:50:48.0530 1316    SCPolicySvc     (f17d1d393bbc69c5322fbfafaca28c7fC:\Windows\System32\certprop.dll
16
:50:48.0530 1316    SCPolicySvc ok
16
:50:48.0577 1316    sdbus           (111e0ebc0ad79cb0fa014b907b231cf0C:\Windows\system32\DRIVERS\sdbus.sys
16
:50:48.0577 1316    sdbus ok
16
:50:48.0608 1316    SDRSVC          (6ea4234dc55346e0709560fe7c2c1972C:\Windows\System32\SDRSVC.dll
16
:50:48.0624 1316    SDRSVC ok
16
:50:48.0702 1316    SeaPort         (cc781378e7eda615d2cdca3b17829fa4C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE
16
:50:48.0702 1316    SeaPort ok
16
:50:48.0733 1316    secdrv          (3ea8a16169c26afbeb544e0e48421186C:\Windows\system32\drivers\secdrv.sys
16
:50:48.0733 1316    secdrv ok
16
:50:48.0764 1316    seclogon        (bc617a4e1b4fa8df523a061739a0bd87C:\Windows\system32\seclogon.dll
16
:50:48.0764 1316    seclogon ok
16
:50:48.0858 1316    Secunia PSI Agent (64d9cac9c60ee8c2d7aeb33d6503d8bcC:\Program Files (x86)\Secunia\PSI\PSIA.exe
16
:50:48.0874 1316    Secunia PSI Agent ok
16
:50:48.0920 1316    Secunia Update Agent (791729c12f58d65489645624bef6e5f5C:\Program Files (x86)\Secunia\PSI\sua.exe
16
:50:48.0936 1316    Secunia Update Agent ok
16
:50:49.0030 1316    SENS            (c32ab8fa018ef34c0f113bd501436d21C:\Windows\System32\sens.dll
16
:50:49.0045 1316    SENS ok
16
:50:49.0092 1316    SensrSvc        (0336cffafaab87a11541f1cf1594b2b2C:\Windows\system32\sensrsvc.dll
16
:50:49.0108 1316    SensrSvc ok
16
:50:49.0170 1316    Serenum         (cb624c0035412af0debec78c41f5ca1bC:\Windows\system32\drivers\serenum.sys
16
:50:49.0170 1316    Serenum ok
16
:50:49.0170 1316    Serial          (c1d8e28b2c2adfaec4ba89e9fda69bd6C:\Windows\system32\drivers\serial.sys
16
:50:49.0186 1316    Serial ok
16
:50:49.0201 1316    sermouse        (1c545a7d0691cc4a027396535691c3e3C:\Windows\system32\drivers\sermouse.sys
16
:50:49.0201 1316    sermouse ok
16
:50:49.0232 1316    SessionEnv      (0b6231bf38174a1628c4ac812cc75804C:\Windows\system32\sessenv.dll
16
:50:49.0248 1316    SessionEnv ok
16
:50:49.0248 1316    sffdisk         (a554811bcd09279536440c964ae35bbfC:\Windows\system32\drivers\sffdisk.sys
16
:50:49.0264 1316    sffdisk ok
16
:50:49.0279 1316    sffp_mmc        (ff414f0baefeba59bc6c04b3db0b87bfC:\Windows\system32\drivers\sffp_mmc.sys
16
:50:49.0279 1316    sffp_mmc ok
16
:50:49.0279 1316    sffp_sd         (dd85b78243a19b59f0637dcf284da63cC:\Windows\system32\drivers\sffp_sd.sys
16
:50:49.0279 1316    sffp_sd ok
16
:50:49.0310 1316    sfloppy         (a9d601643a1647211a1ee2ec4e433ff4C:\Windows\system32\drivers\sfloppy.sys
16
:50:49.0310 1316    sfloppy ok
16
:50:49.0388 1316    Sftfs           (c6cc9297bd53e5229653303e556aa539C:\Windows\system32\DRIVERS\Sftfslh.sys
16
:50:49.0388 1316    Sftfs ok
16
:50:49.0482 1316    sftlist         (13693b6354dd6e72dc5131da7d764b90C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
16
:50:49.0498 1316    sftlist ok
16
:50:49.0529 1316    Sftplay         (390aa7bc52cee43f6790cdea1e776703C:\Windows\system32\DRIVERS\Sftplaylh.sys
16
:50:49.0529 1316    Sftplay ok
16
:50:49.0544 1316    Sftredir        (617e29a0b0a2807466560d4c4e338d3eC:\Windows\system32\DRIVERS\Sftredirlh.sys
16
:50:49.0544 1316    Sftredir ok
16
:50:49.0576 1316    Sftvol          (8f571f016fa1976f445147e9e6c8ae9bC:\Windows\system32\DRIVERS\Sftvollh.sys
16
:50:49.0576 1316    Sftvol ok
16
:50:49.0607 1316    sftvsa          (c3cddd18f43d44ab713cf8c4916f7696C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
16
:50:49.0607 1316    sftvsa ok
16
:50:49.0654 1316    SharedAccess    (b95f6501a2f8b2e78c697fec401970ceC:\Windows\System32\ipnathlp.dll
16
:50:49.0669 1316    SharedAccess ok
16
:50:49.0716 1316    ShellHWDetection (aaf932b4011d14052955d4b212a4da8dC:\Windows\System32\shsvcs.dll
16
:50:49.0732 1316    ShellHWDetection ok
16
:50:49.0763 1316    SiSRaid2        (843caf1e5fde1ffd5ff768f23a51e2e1C:\Windows\system32\drivers\SiSRaid2.sys
16
:50:49.0763 1316    SiSRaid2 ok
16
:50:49.0763 1316    SiSRaid4        (6a6c106d42e9ffff8b9fcb4f754f6da4C:\Windows\system32\drivers\sisraid4.sys
16
:50:49.0778 1316    SiSRaid4 ok
16
:50:49.0966 1316    Skype C2C Service (0f97e7a47a52f4a36969f0fc319654c2C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
16
:50:49.0981 1316    Skype C2C Service ok
16
:50:50.0044 1316    SkypeUpdate     (6128e98eaaed364ed1a32708d2fd22cbC:\Program Files (x86)\Skype\Updater\Updater.exe
16
:50:50.0044 1316    SkypeUpdate ok
16
:50:50.0168 1316    Smb             (548260a7b8654e024dc30bf8a7c5baa4C:\Windows\system32\DRIVERS\smb.sys
16
:50:50.0168 1316    Smb ok
16
:50:50.0215 1316    SNMPTRAP        (6313f223e817cc09aa41811daa7f541dC:\Windows\System32\snmptrap.exe
16
:50:50.0215 1316    SNMPTRAP ok
16
:50:50.0246 1316    spldr           (b9e31e5cacdfe584f34f730a677803f9C:\Windows\system32\drivers\spldr.sys
16
:50:50.0246 1316    spldr ok
16
:50:50.0293 1316    Spooler         (b96c17b5dc1424d56eea3a99e97428cdC:\Windows\System32\spoolsv.exe
16
:50:50.0293 1316    Spooler ok
16
:50:50.0465 1316    sppsvc          (e17e0188bb90fae42d83e98707efa59cC:\Windows\system32\sppsvc.exe
16
:50:50.0480 1316    sppsvc ok
16
:50:50.0590 1316    sppuinotify     (93d7d61317f3d4bc4f4e9f8a96a7de45C:\Windows\system32\sppuinotify.dll
16
:50:50.0590 1316    sppuinotify ok
16
:50:50.0730 1316    SRTSP           (06b9a7ba94356ec5207c5ddb59540378C:\Windows\System32\Drivers\NISx64\1307010.005\SRTSP64.SYS
16
:50:50.0730 1316    SRTSP ok
16
:50:50.0792 1316    SRTSPX          (fbb8945a61e55a2345d12487c74a9d76C:\Windows\system32\drivers\NISx64\1307010.005\SRTSPX64.SYS
16
:50:50.0792 1316    SRTSPX ok
16
:50:50.0839 1316    srv             (441fba48bff01fdb9d5969ebc1838f0bC:\Windows\system32\DRIVERS\srv.sys
16
:50:50.0855 1316    srv ok
16
:50:50.0886 1316    srv2            (b4adebbf5e3677cce9651e0f01f7cc28C:\Windows\system32\DRIVERS\srv2.sys
16
:50:50.0902 1316    srv2 ok
16
:50:50.0948 1316    SrvHsfHDA       (0c4540311e11664b245a263e1154cef8C:\Windows\system32\DRIVERS\VSTAZL6.SYS
16
:50:50.0948 1316    SrvHsfHDA ok
16
:50:50.0995 1316    SrvHsfV92       (02071d207a9858fbe3a48cbfd59c4a04C:\Windows\system32\DRIVERS\VSTDPV6.SYS
16
:50:50.0995 1316    SrvHsfV92 ok
16
:50:51.0136 1316    SrvHsfWinac     (18e40c245dbfaf36fd0134a7ef2df396C:\Windows\system32\DRIVERS\VSTCNXT6.SYS
16
:50:51.0136 1316    SrvHsfWinac ok
16
:50:51.0182 1316    srvnet          (27e461f0be5bff5fc737328f749538c3C:\Windows\system32\DRIVERS\srvnet.sys
16
:50:51.0182 1316    srvnet ok
16
:50:51.0245 1316    SSDPSRV         (51b52fbd583cde8aa9ba62b8b4298f33C:\Windows\System32\ssdpsrv.dll
16
:50:51.0245 1316    SSDPSRV ok
16
:50:51.0276 1316    SstpSvc         (ab7aebf58dad8daab7a6c45e6a8885cbC:\Windows\system32\sstpsvc.dll
16
:50:51.0276 1316    SstpSvc ok
16
:50:51.0338 1316    ssudmdm         (855335bf5792e56164f98c012e3d92ddC:\Windows\system32\DRIVERS\ssudmdm.sys
16
:50:51.0338 1316    ssudmdm ok
16
:50:51.0401 1316    ssudserd        (5347940cdd29b66c0fc1747274ba5ff0C:\Windows\system32\DRIVERS\ssudserd.sys
16
:50:51.0401 1316    ssudserd ok
16
:50:51.0494 1316    STacSV          (20e27aa5bcc01c2149830c05fe22f675C:\Program Files\IDT\WDM\STacSV64.exe
16
:50:51.0494 1316    STacSV ok
16
:50:51.0572 1316    Steam Client Service ok
16
:50:51.0604 1316    stexstor        (f3817967ed533d08327dc73bc4d5542aC:\Windows\system32\drivers\stexstor.sys
16
:50:51.0604 1316    stexstor ok
16
:50:51.0666 1316    STHDA           (beb37ce4e7456f5efa52d783d1e06d8cC:\Windows\system32\DRIVERS\stwrt64.sys
16
:50:51.0682 1316    STHDA ok
16
:50:51.0713 1316    StillCam        (decacb6921ded1a38642642685d77dacC:\Windows\system32\DRIVERS\serscan.sys
16
:50:51.0713 1316    StillCam ok
16
:50:51.0775 1316    stisvc          (8dd52e8e6128f4b2da92ce27402871c1C:\Windows\System32\wiaservc.dll
16
:50:51.0791 1316    stisvc ok
16
:50:51.0806 1316    swenum          (d01ec09b6711a5f8e7e6564a4d0fbc90C:\Windows\system32\drivers\swenum.sys
16
:50:51.0806 1316    swenum ok
16
:50:51.0853 1316    swprv           (e08e46fdd841b7184194011ca1955a0bC:\Windows\System32\swprv.dll
16
:50:51.0869 1316    swprv ok
16
:50:51.0947 1316    SymDS           (8b2430762099598da40686f754632efdC:\Windows\system32\drivers\NISx64\1307010.005\SYMDS64.SYS
16
:50:51.0947 1316    SymDS ok
16
:50:52.0040 1316    SymEFA          (f90c7a190399165d3ab2245048d34786C:\Windows\system32\drivers\NISx64\1307010.005\SYMEFA64.SYS
16
:50:52.0056 1316    SymEFA ok
16
:50:52.0072 1316    SymEvent        (898bb48c797483420df523b2bbc1ecdbC:\Windows\system32\Drivers\SYMEVENT64x86.SYS
16
:50:52.0072 1316    SymEvent ok
16
:50:52.0134 1316    SymIRON         (5013a76caaa1d7cf1c55214b490b4e35C:\Windows\system32\drivers\NISx64\1307010.005\Ironx64.SYS
16
:50:52.0134 1316    SymIRON ok
16
:50:52.0243 1316    SymNetS         (3911bd0e68c010e5438a87706abbe9abC:\Windows\System32\Drivers\NISx64\1307010.005\SYMNETS.SYS
16
:50:52.0243 1316    SymNetS ok
16
:50:52.0321 1316    SynTP           (ac3cc98b1bdb6540021d3ffb105ac2b9C:\Windows\system32\DRIVERS\SynTP.sys
16
:50:52.0321 1316    SynTP ok
16
:50:52.0430 1316    SysMain         (bf9ccc0bf39b418c8d0ae8b05cf95b7dC:\Windows\system32\sysmain.dll
16
:50:52.0446 1316    SysMain ok
16
:50:52.0540 1316    TabletInputService (e3c61fd7b7c2557e1f1b0b4cec713585C:\Windows\System32\TabSvc.dll
16
:50:52.0540 1316    TabletInputService ok
16
:50:52.0571 1316    TapiSrv         (40f0849f65d13ee87b9a9ae3c1dd6823C:\Windows\System32\tapisrv.dll
16
:50:52.0571 1316    TapiSrv ok
16
:50:52.0586 1316    TBS             (1be03ac720f4d302ea01d40f588162f6C:\Windows\System32\tbssvc.dll
16
:50:52.0586 1316    TBS ok
16
:50:52.0696 1316    Tcpip           (acb82bda8f46c84f465c1afa517dc4b9C:\Windows\system32\drivers\tcpip.sys
16
:50:52.0711 1316    Tcpip ok
16
:50:52.0898 1316    TCPIP6          (acb82bda8f46c84f465c1afa517dc4b9C:\Windows\system32\DRIVERS\tcpip.sys
16
:50:52.0914 1316    TCPIP6 ok
16
:50:53.0008 1316    tcpipreg        (df687e3d8836bfb04fcc0615bf15a519C:\Windows\system32\drivers\tcpipreg.sys
16
:50:53.0023 1316    tcpipreg ok
16
:50:53.0039 1316    TDPIPE          (3371d21011695b16333a3934340c4e7cC:\Windows\system32\drivers\tdpipe.sys
16
:50:53.0039 1316    TDPIPE ok
16
:50:53.0070 1316    TDTCP           (51c5eceb1cdee2468a1748be550cfbc8C:\Windows\system32\drivers\tdtcp.sys
16
:50:53.0070 1316    TDTCP ok
16
:50:53.0117 1316    tdx             (ddad5a7ab24d8b65f8d724f5c20fd806C:\Windows\system32\DRIVERS\tdx.sys
16
:50:53.0117 1316    tdx ok
16
:50:53.0132 1316    TermDD          (561e7e1f06895d78de991e01dd0fb6e5C:\Windows\system32\drivers\termdd.sys
16
:50:53.0132 1316    TermDD ok
16
:50:53.0210 1316    TermService     (2e648163254233755035b46dd7b89123C:\Windows\System32\termsrv.dll
16
:50:53.0226 1316    TermService ok
16
:50:53.0242 1316    Themes          (f0344071948d1a1fa732231785a0664cC:\Windows\system32\themeservice.dll
16
:50:53.0242 1316    Themes ok
16
:50:53.0273 1316    THREADORDER     (e40e80d0304a73e8d269f7141d77250bC:\Windows\system32\mmcss.dll
16
:50:53.0273 1316    THREADORDER ok
16
:50:53.0335 1316    TrkWks          (7e7afd841694f6ac397e99d75cead49dC:\Windows\System32\trkwks.dll
16
:50:53.0335 1316    TrkWks ok
16
:50:53.0413 1316    truecrypt       (370a6907ddf79532a39319492b1fa38aC:\Windows\system32\drivers\truecrypt.sys
16
:50:53.0413 1316    truecrypt ok
16
:50:53.0476 1316    TrustedInstaller (773212b2aaa24c1e31f10246b15b276cC:\Windows\servicing\TrustedInstaller.exe
16
:50:53.0476 1316    TrustedInstaller ok
16
:50:53.0522 1316    tssecsrv        (ce18b2cdfc837c99e5fae9ca6cba5d30C:\Windows\system32\DRIVERS\tssecsrv.sys
16
:50:53.0522 1316    tssecsrv ok
16
:50:53.0554 1316    TsUsbFlt        (d11c783e3ef9a3c52c0ebe83cc5000e9C:\Windows\system32\drivers\tsusbflt.sys
16
:50:53.0554 1316    TsUsbFlt ok
16
:50:53.0569 1316    TsUsbGD         (9cc2ccae8a84820eaecb886d477cbcb8C:\Windows\system32\drivers\TsUsbGD.sys
16
:50:53.0569 1316    TsUsbGD ok
16
:50:53.0616 1316    tunnel          (3566a8daafa27af944f5d705eaa64894C:\Windows\system32\DRIVERS\tunnel.sys
16
:50:53.0616 1316    tunnel ok
16
:50:53.0647 1316    uagp35          (b4dd609bd7e282bfc683cec7eaaaad67C:\Windows\system32\drivers\uagp35.sys
16
:50:53.0647 1316    uagp35 ok
16
:50:53.0678 1316    udfs            (ff4232a1a64012baa1fd97c7b67df593C:\Windows\system32\DRIVERS\udfs.sys
16
:50:53.0694 1316    udfs ok
16
:50:53.0725 1316    UI0Detect       (3cbdec8d06b9968aba702eba076364a1C:\Windows\system32\UI0Detect.exe
16
:50:53.0725 1316    UI0Detect ok
16
:50:53.0756 1316    uliagpkx        (4bfe1bc28391222894cbf1e7d0e42320C:\Windows\system32\drivers\uliagpkx.sys
16
:50:53.0756 1316    uliagpkx ok
16
:50:53.0788 1316    umbus           (dc54a574663a895c8763af0fa1ff7561C:\Windows\system32\DRIVERS\umbus.sys
16
:50:53.0788 1316    umbus ok
16
:50:53.0819 1316    UmPass          (b2e8e8cb557b156da5493bbddcc1474dC:\Windows\system32\drivers\umpass.sys
16
:50:53.0819 1316    UmPass ok
16
:50:54.0022 1316    UNS             (a678e5ddd974903dd71f503bdcaca218C:\Program Files (x86)\Intel\Intel(RManagement Engine Components\UNS\UNS.exe
16
:50:54.0037 1316    UNS ok
16
:50:54.0162 1316    upnphost        (d47ec6a8e81633dd18d2436b19baf6deC:\Windows\System32\upnphost.dll
16
:50:54.0178 1316    upnphost ok
16
:50:54.0256 1316    USBAAPL64       (fb251567f41bc61988b26731dec19e4bC:\Windows\system32\Drivers\usbaapl64.sys
16
:50:54.0256 1316    USBAAPL64 ok
16
:50:54.0287 1316    usbccgp         (6f1a3157a1c89435352ceb543cdb359cC:\Windows\system32\DRIVERS\usbccgp.sys
16
:50:54.0287 1316    usbccgp ok
16
:50:54.0334 1316    usbcir          (af0892a803fdda7492f595368e3b68e7C:\Windows\system32\drivers\usbcir.sys
16
:50:54.0349 1316    usbcir ok
16
:50:54.0365 1316    usbehci         (c025055fe7b87701eb042095df1a2d7bC:\Windows\system32\drivers\usbehci.sys
16
:50:54.0365 1316    usbehci ok
16
:50:54.0412 1316    usbhub          (287c6c9410b111b68b52ca298f7b8c24C:\Windows\system32\DRIVERS\usbhub.sys
16
:50:54.0412 1316    usbhub ok
16
:50:54.0443 1316    usbohci         (9840fc418b4cbd632d3d0a667a725c31C:\Windows\system32\drivers\usbohci.sys
16
:50:54.0443 1316    usbohci ok
16
:50:54.0474 1316    usbprint        (73188f58fb384e75c4063d29413cee3dC:\Windows\system32\DRIVERS\usbprint.sys
16
:50:54.0474 1316    usbprint ok
16
:50:54.0505 1316    usbscan         (aaa2513c8aed8b54b189fd0c6b1634c0C:\Windows\system32\DRIVERS\usbscan.sys
16
:50:54.0505 1316    usbscan ok
16
:50:54.0536 1316    USBSTOR         (fed648b01349a3c8395a5169db5fb7d6C:\Windows\system32\drivers\USBSTOR.SYS
16
:50:54.0536 1316    USBSTOR ok
16
:50:54.0568 1316    usbuhci         (62069a34518bcf9c1fd9e74b3f6db7cdC:\Windows\system32\drivers\usbuhci.sys
16
:50:54.0568 1316    usbuhci ok
16
:50:54.0614 1316    usbvideo        (454800c2bc7f3927ce030141ee4f4c50C:\Windows\system32\Drivers\usbvideo.sys
16
:50:54.0614 1316    usbvideo ok
16
:50:54.0646 1316    UxSms           (edbb23cbcf2cdf727d64ff9b51a6070eC:\Windows\System32\uxsms.dll
16
:50:54.0646 1316    UxSms ok
16
:50:54.0692 1316    VaultSvc        (c118a82cd78818c29ab228366ebf81c3C:\Windows\system32\lsass.exe
16
:50:54.0692 1316    VaultSvc ok
16
:50:54.0724 1316    vdrvroot        (c5c876ccfc083ff3b128f933823e87bdC:\Windows\system32\drivers\vdrvroot.sys
16
:50:54.0724 1316    vdrvroot ok
16
:50:54.0786 1316    vds             (8d6b481601d01a456e75c3210f1830beC:\Windows\System32\vds.exe
16
:50:54.0786 1316    vds ok
16
:50:54.0817 1316    vga             (da4da3f5e02943c2dc8c6ed875de68ddC:\Windows\system32\DRIVERS\vgapnp.sys
16
:50:54.0817 1316    vga ok
16
:50:54.0833 1316    VgaSave         (53e92a310193cb3c03bea963de7d9cfcC:\Windows\System32\drivers\vga.sys
16
:50:54.0848 1316    VgaSave ok
16
:50:54.0864 1316    vhdmp           (2ce2df28c83aeaf30084e1b1eb253cbbC:\Windows\system32\drivers\vhdmp.sys
16
:50:54.0864 1316    vhdmp ok
16
:50:54.0880 1316    viaide          (e5689d93ffe4e5d66c0178761240dd54C:\Windows\system32\drivers\viaide.sys
16
:50:54.0880 1316    viaide ok
16
:50:54.0895 1316    volmgr          (d2aafd421940f640b407aefaaebd91b0C:\Windows\system32\drivers\volmgr.sys
16
:50:54.0895 1316    volmgr ok
16
:50:54.0926 1316    volmgrx         (a255814907c89be58b79ef2f189b843bC:\Windows\system32\drivers\volmgrx.sys
16
:50:54.0926 1316    volmgrx ok
16
:50:54.0942 1316    volsnap         (0d08d2f3b3ff84e433346669b5e0f639C:\Windows\system32\drivers\volsnap.sys
16
:50:54.0942 1316    volsnap ok
16
:50:54.0973 1316    vsmraid         (5e2016ea6ebaca03c04feac5f330d997C:\Windows\system32\drivers\vsmraid.sys
16
:50:54.0973 1316    vsmraid ok
16
:50:55.0051 1316    VSS             (b60ba0bc31b0cb414593e169f6f21cc2C:\Windows\system32\vssvc.exe
16
:50:55.0082 1316    VSS ok
16
:50:55.0176 1316    vwifibus        (36d4720b72b5c5d9cb2b9c29e9df67a1C:\Windows\system32\DRIVERS\vwifibus.sys
16
:50:55.0176 1316    vwifibus ok
16
:50:55.0207 1316    vwififlt        (6a3d66263414ff0d6fa754c646612f3fC:\Windows\system32\DRIVERS\vwififlt.sys
16
:50:55.0207 1316    vwififlt ok
16
:50:55.0270 1316    W32Time         (1c9d80cc3849b3788048078c26486e1aC:\Windows\system32\w32time.dll
16
:50:55.0270 1316    W32Time ok
16
:50:55.0301 1316    WacomPen        (4e9440f4f152a7b944cb1663d3935a3eC:\Windows\system32\drivers\wacompen.sys
16
:50:55.0301 1316    WacomPen ok
16
:50:55.0348 1316    WANARP          (356afd78a6ed4457169241ac3965230cC:\Windows\system32\DRIVERS\wanarp.sys
16
:50:55.0348 1316    WANARP ok
16
:50:55.0348 1316    Wanarpv6        (356afd78a6ed4457169241ac3965230cC:\Windows\system32\DRIVERS\wanarp.sys
16
:50:55.0348 1316    Wanarpv6 ok
16
:50:55.0441 1316    wbengine        (78f4e7f5c56cb9716238eb57da4b6a75C:\Windows\system32\wbengine.exe
16
:50:55.0457 1316    wbengine ok
16
:50:55.0566 1316    WbioSrvc        (3aa101e8edab2db4131333f4325c76a3C:\Windows\System32\wbiosrvc.dll
16
:50:55.0566 1316    WbioSrvc ok
16
:50:55.0582 1316    wcncsvc         (7368a2afd46e5a4481d1de9d14848eddC:\Windows\System32\wcncsvc.dll
16
:50:55.0597 1316    wcncsvc ok
16
:50:55.0613 1316    WcsPlugInService (20f7441334b18cee52027661df4a6129C:\Windows\System32\WcsPlugInService.dll
16
:50:55.0613 1316    WcsPlugInService ok
16
:50:55.0660 1316    Wd              (72889e16ff12ba0f235467d6091b17dcC:\Windows\system32\drivers\wd.sys
16
:50:55.0660 1316    Wd ok
16
:50:55.0691 1316    Wdf01000        (441bd2d7b4f98134c3a4f9fa570fd250C:\Windows\system32\drivers\Wdf01000.sys
16
:50:55.0706 1316    Wdf01000 ok
16
:50:55.0722 1316    WdiServiceHost  (bf1fc3f79b863c914687a737c2f3d681C:\Windows\system32\wdi.dll
16
:50:55.0722 1316    WdiServiceHost ok
16
:50:55.0722 1316    WdiSystemHost   (bf1fc3f79b863c914687a737c2f3d681C:\Windows\system32\wdi.dll
16
:50:55.0722 1316    WdiSystemHost ok
16
:50:55.0769 1316    WebClient       (3db6d04e1c64272f8b14eb8bc4616280C:\Windows\System32\webclnt.dll
16
:50:55.0784 1316    WebClient ok
16
:50:55.0800 1316    Wecsvc          (c749025a679c5103e575e3b48e092c43C:\Windows\system32\wecsvc.dll
16
:50:55.0816 1316    Wecsvc ok
16
:50:55.0847 1316    wercplsupport   (7e591867422dc788b9e5bd337a669a08C:\Windows\System32\wercplsupport.dll
16
:50:55.0862 1316    wercplsupport ok
16
:50:55.0894 1316    WerSvc          (6d137963730144698cbd10f202e9f251C:\Windows\System32\WerSvc.dll
16
:50:55.0894 1316    WerSvc ok
16
:50:55.0956 1316    WfpLwf          (611b23304bf067451a9fdee01fbdd725C:\Windows\system32\DRIVERS\wfplwf.sys
16
:50:55.0956 1316    WfpLwf ok
16
:50:55.0972 1316    WIMMount        (05ecaec3e4529a7153b3136ceb49f0ecC:\Windows\system32\drivers\wimmount.sys
16
:50:55.0972 1316    WIMMount ok
16
:50:56.0018 1316    WinDefend ok
16
:50:56.0018 1316    WinHttpAutoProxySvc ok
16
:50:56.0096 1316    Winmgmt         (19b07e7e8915d701225da41cb3877306C:\Windows\system32\wbem\WMIsvc.dll
16
:50:56.0096 1316    Winmgmt ok
16
:50:56.0252 1316    WinRM           (bcb1310604aa415c4508708975b3931eC:\Windows\system32\WsmSvc.dll
16
:50:56.0268 1316    WinRM ok
16
:50:56.0377 1316    WinUsb          (fe88b288356e7b47b74b13372add906dC:\Windows\system32\DRIVERS\WinUSB.sys
16
:50:56.0377 1316    WinUsb ok
16
:50:56.0440 1316    Wlansvc         (4fada86e62f18a1b2f42ba18ae24e6aaC:\Windows\System32\wlansvc.dll
16
:50:56.0455 1316    Wlansvc ok
16
:50:56.0518 1316    wlcrasvc        (06c8fa1cf39de6a735b54d906ba791c6C:\Program Files\Windows Live\Mesh\wlcrasvc.exe
16
:50:56.0518 1316    wlcrasvc ok
16
:50:56.0674 1316    wlidsvc         (7e47c328fc4768cb8beafbcfafa70362C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
16
:50:56.0705 1316    wlidsvc ok
16
:50:56.0814 1316    WmiAcpi         (f6ff8944478594d0e414d3f048f0d778C:\Windows\system32\drivers\wmiacpi.sys
16
:50:56.0814 1316    WmiAcpi ok
16
:50:56.0892 1316    wmiApSrv        (38b84c94c5a8af291adfea478ae54f93C:\Windows\system32\wbem\WmiApSrv.exe
16
:50:56.0892 1316    wmiApSrv ok
16
:50:56.0954 1316    WMPNetworkSvc ok
16
:50:56.0986 1316    WPCSvc          (96c6e7100d724c69fcf9e7bf590d1dcaC:\Windows\System32\wpcsvc.dll
16
:50:57.0001 1316    WPCSvc ok
16
:50:57.0032 1316    WPDBusEnum      (93221146d4ebbf314c29b23cd6cc391dC:\Windows\system32\wpdbusenum.dll
16
:50:57.0032 1316    WPDBusEnum ok
16
:50:57.0064 1316    ws2ifsl         (6bcc1d7d2fd2453957c5479a32364e52C:\Windows\system32\drivers\ws2ifsl.sys
16
:50:57.0064 1316    ws2ifsl ok
16
:50:57.0095 1316    wscsvc          (e8b1fe6669397d1772d8196df0e57a9eC:\Windows\System32\wscsvc.dll
16
:50:57.0110 1316    wscsvc ok
16
:50:57.0142 1316    WSDPrintDevice  (8d918b1db190a4d9b1753a66fa8c96e8C:\Windows\system32\DRIVERS\WSDPrint.sys
16
:50:57.0142 1316    WSDPrintDevice ok
16
:50:57.0157 1316    WSearch ok
16
:50:57.0282 1316    wuauserv        (d9ef901dca379cfe914e9fa13b73b4c4C:\Windows\system32\wuaueng.dll
16
:50:57.0298 1316    wuauserv ok
16
:50:57.0407 1316    WudfPf          (d3381dc54c34d79b22cee0d65ba91b7cC:\Windows\system32\drivers\WudfPf.sys
16
:50:57.0407 1316    WudfPf ok
16
:50:57.0469 1316    WUDFRd          (cf8d590be3373029d57af80914190682C:\Windows\system32\DRIVERS\WUDFRd.sys
16
:50:57.0469 1316    WUDFRd ok
16
:50:57.0500 1316    wudfsvc         (7a95c95b6c4cf292d689106bcae49543C:\Windows\System32\WUDFSvc.dll
16
:50:57.0500 1316    wudfsvc ok
16
:50:57.0547 1316    WwanSvc         (9a3452b3c2a46c073166c5cf49fad1aeC:\Windows\System32\wwansvc.dll
16
:50:57.0547 1316    WwanSvc ok
16
:50:57.0610 1316    MBR (0x1B8)     (a36c5e4f47e84449ff07ed3517b43a31) \Device\Harddisk0\DR0
16
:50:57.0781 1316    \Device\Harddisk0\DR0 ok
16
:50:57.0797 1316    Boot (0x1200)   (f2027c0d5b282ad713bfa10774fab56d) \Device\Harddisk0\DR0\Partition0
16
:50:57.0797 1316    \Device\Harddisk0\DR0\Partition0 ok
16
:50:57.0812 1316    Boot (0x1200)   (dc2a08377bdde661c0870f2aace00d48) \Device\Harddisk0\DR0\Partition1
16
:50:57.0812 1316    \Device\Harddisk0\DR0\Partition1 ok
16
:50:57.0844 1316    Boot (0x1200)   (40a6203b21a9eb6c207d35ce32be357c) \Device\Harddisk0\DR0\Partition2
16
:50:57.0859 1316    \Device\Harddisk0\DR0\Partition2 ok
16
:50:57.0875 1316    Boot (0x1200)   (b47fb38cc2921fb20648806b4b814265) \Device\Harddisk0\DR0\Partition3
16
:50:57.0875 1316    \Device\Harddisk0\DR0\Partition3 ok
16
:50:57.0875 1316    ============================================================
16:50:57.0875 1316    Scan finished
16
:50:57.0875 1316    ============================================================
16:50:57.0890 7680    Detected object count0
16
:50:57.0890 7680    Actual detected object count

Antwort

Themen zu Hijacker? Statt Google nur noch "Mystart"
ander, andere, chrome, eingebe, erschein, erscheint, folge, folgendes, gesuch, gesucht, google, google chrome, heute, hierbei, hijacker, hänge, logfiles, miteinander, mystart, nicht mehr, otl-log



Ähnliche Themen: Hijacker? Statt Google nur noch "Mystart"


  1. Diverse Malware ("CoolSaleCoupon", "ddownlloaditkeep", "omiga-plus", "SaveSense", "SaleItCoupon"); lahmer PC & viel Werbung!
    Plagegeister aller Art und deren Bekämpfung - 11.01.2015 (16)
  2. "Fehler: Server nicht gefunden" immer noch nach "WAJAM.A.1"-Befall
    Plagegeister aller Art und deren Bekämpfung - 05.11.2014 (15)
  3. Windows 8.1: Avira findet "TR/Swrort.A.10259" in "C:\Program Files (x86)\Google\Chrome\Application\old_chrome.exe"
    Plagegeister aller Art und deren Bekämpfung - 23.07.2014 (3)
  4. Statt angeklicktem Links (via Buttons z. B. "weiter") öffnet sich Avira-Werbewebsite
    Plagegeister aller Art und deren Bekämpfung - 20.03.2014 (1)
  5. statt Google-Homepage jetzt "awsomehp.com" bei Firefox/Virus?
    Plagegeister aller Art und deren Bekämpfung - 08.03.2014 (15)
  6. Win 8.1: Internetzugriff "umgeleitet" oder langsam, Google will Captcha, statt FritzBox russische Seite
    Log-Analyse und Auswertung - 10.01.2014 (9)
  7. "monstermarketplace.com" Infektion und ihre Folgen; "Anti-Virus-Blocker"," unsichtbare Toolbars" + "Browser-Hijacker" von selbst installiert
    Log-Analyse und Auswertung - 16.11.2013 (21)
  8. da warens nur noch 3: "assembly\GAC_32(64)\Desktop.ini" & "Fehlercode 0x80070424"
    Plagegeister aller Art und deren Bekämpfung - 02.10.2013 (17)
  9. Firefox "Neuer Tab": mixidj.delta-search.com statt leerer Adresszeile
    Plagegeister aller Art und deren Bekämpfung - 11.05.2013 (8)
  10. Hijacker? Statt Google nur noch "Mystart"
    Log-Analyse und Auswertung - 01.08.2012 (1)
  11. Statt Google nur "yourtribe.ru"
    Log-Analyse und Auswertung - 30.11.2010 (13)
  12. "Results5.google.de" statt normales Suchergebnis
    Plagegeister aller Art und deren Bekämpfung - 21.06.2010 (6)
  13. Bundesdatenschützer plädiert für "Quick Freeze" statt Vorratsdatenspeicherung
    Nachrichten - 14.06.2010 (0)
  14. "Ziel speichern unter" speichert statt wmv datei nur ein html Dokument
    Alles rund um Windows - 26.12.2009 (1)
  15. Fehlalarme bei Escan - betreffend "gain.gator" und "SmitFraud Browser Hijacker"
    Log-Analyse und Auswertung - 16.12.2008 (2)
  16. Hijacker - über google nur "nette Seiten"
    Plagegeister aller Art und deren Bekämpfung - 10.12.2008 (1)
  17. eTrust fand "einen" Trojaner, danach AntiVir noch "vier"..!!??
    Plagegeister aller Art und deren Bekämpfung - 26.12.2005 (5)

Zum Thema Hijacker? Statt Google nur noch "Mystart" - Hallo miteinander! Seit heute Nachmittag habe ich folgendes Problem. Bei Google Chrome wird nun nicht mehr mit Google gesucht, sondern mit "Mystart". Also immer wenn ich in der Addressleiste ein - Hijacker? Statt Google nur noch "Mystart"...
Archiv
Du betrachtest: Hijacker? Statt Google nur noch "Mystart" auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.