Bitte nun (im normalen Windows-Modus) dieses Tool von Kaspersky (TDSS-Killer) ausführen und das Log posten Anleitung und Downloadlink hier => http://www.trojaner-board.de/82358-t...entfernen.html

Hinweis: Bitte den Virenscanner abstellen bevor du den TDSS-Killer ausführst, denn v.a. Avira meldet im TDSS-Tool oft einen Fehalalrm!

Das Tool so einstellen wie unten im Bild angegeben - klick auf change parameters und setze die Haken wie im folgenden Screenshot abgebildet,
Dann auf Start Scan klicken und wenn es durch ist auf den Button Report klicken um das Log anzuzeigen. Dieses bitte komplett posten.

Wenn du das Log nicht findest oder den Inhalt kopieren und in dein Posting übertragen kannst, dann schau bitte direkt auf deiner Windows-Systempartition ( meistens Laufwerk C: ) nach, da speichert der TDSS-Killer seine Logs.

Hinweis: Bitte nichts voreilig mit dem TDSS-Killer löschen! Falls Objekte vom TDSS-Killer bemängelt werden, alle mit der Aktion "skip" behandeln und hier nur das Log posten!

14:16:37.0350 2492  TDSS rootkit removing tool 2.8.10.0 Sep 17 2012 19:23:24
14:16:37.0771 2492  ============================================================
14:16:37.0771 2492  Current date / time: 2012/09/21 14:16:37.0771
14:16:37.0771 2492  SystemInfo:
14:16:37.0771 2492  
14:16:37.0771 2492  OS Version: 6.1.7601 ServicePack: 1.0
14:16:37.0771 2492  Product type: Workstation
14:16:37.0771 2492  ComputerName: SIBERT-PC
14:16:37.0771 2492  UserName: Sibert
14:16:37.0771 2492  Windows directory: C:\Windows
14:16:37.0771 2492  System windows directory: C:\Windows
14:16:37.0771 2492  Processor architecture: Intel x86
14:16:37.0771 2492  Number of processors: 2
14:16:37.0771 2492  Page size: 0x1000
14:16:37.0771 2492  Boot type: Normal boot
14:16:37.0771 2492  ============================================================
14:16:40.0318 2492  Drive \Device\Harddisk0\DR0 - Size: 0x12A1F16000 (74.53 Gb), SectorSize: 0x200, Cylinders: 0x2601, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050
14:16:40.0318 2492  ============================================================
14:16:40.0318 2492  \Device\Harddisk0\DR0:
14:16:40.0318 2492  MBR partitions:
14:16:40.0318 2492  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x64000
14:16:40.0318 2492  \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x64800, BlocksNum 0x94AA800
14:16:40.0318 2492  ============================================================
14:16:40.0349 2492  C: <-> \Device\Harddisk0\DR0\Partition2
14:16:40.0349 2492  ============================================================
14:16:40.0349 2492  Initialize success
14:16:40.0349 2492  ============================================================
14:17:21.0411 1484  ============================================================
14:17:21.0411 1484  Scan started
14:17:21.0411 1484  Mode: Manual; SigCheck; TDLFS; 
14:17:21.0411 1484  ============================================================
14:17:23.0174 1484  ================ Scan system memory ========================
14:17:23.0174 1484  System memory - ok
14:17:23.0174 1484  ================ Scan services =============================
14:17:23.0704 1484  [ 1B133875B8AA8AC48969BD3458AFE9F5 ] 1394ohci        C:\Windows\system32\drivers\1394ohci.sys
14:17:23.0798 1484  1394ohci - ok
14:17:23.0829 1484  [ CEA80C80BED809AA0DA6FEBC04733349 ] ACPI            C:\Windows\system32\drivers\ACPI.sys
14:17:23.0845 1484  ACPI - ok
14:17:23.0860 1484  [ 1EFBC664ABFF416D1D07DB115DCB264F ] AcpiPmi         C:\Windows\system32\drivers\acpipmi.sys
14:17:23.0923 1484  AcpiPmi - ok
14:17:24.0126 1484  [ D19C4EE2AC7C47B8F5F84FFF1A789D8A ] AdobeARMservice C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
14:17:24.0157 1484  AdobeARMservice - ok
14:17:24.0235 1484  [ A9D3B95E8466BD58EEB8A1154654E162 ] AdobeFlashPlayerUpdateSvc C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
14:17:24.0250 1484  AdobeFlashPlayerUpdateSvc - ok
14:17:24.0391 1484  [ 21E785EBD7DC90A06391141AAC7892FB ] adp94xx         C:\Windows\system32\DRIVERS\adp94xx.sys
14:17:24.0453 1484  adp94xx - ok
14:17:24.0500 1484  [ 0C676BC278D5B59FF5ABD57BBE9123F2 ] adpahci         C:\Windows\system32\DRIVERS\adpahci.sys
14:17:24.0516 1484  adpahci - ok
14:17:24.0547 1484  [ 7C7B5EE4B7B822EC85321FE23A27DB33 ] adpu320         C:\Windows\system32\DRIVERS\adpu320.sys
14:17:24.0547 1484  adpu320 - ok
14:17:24.0640 1484  [ 8B5EEFEEC1E6D1A72A06C526628AD161 ] AeLookupSvc     C:\Windows\System32\aelupsvc.dll
14:17:24.0781 1484  AeLookupSvc - ok
14:17:24.0828 1484  [ 9EBBBA55060F786F0FCAA3893BFA2806 ] AFD             C:\Windows\system32\drivers\afd.sys
14:17:24.0890 1484  AFD - ok
14:17:24.0937 1484  [ 507812C3054C21CEF746B6EE3D04DD6E ] agp440          C:\Windows\system32\drivers\agp440.sys
14:17:24.0968 1484  agp440 - ok
14:17:24.0999 1484  [ 8B30250D573A8F6B4BD23195160D8707 ] aic78xx         C:\Windows\system32\DRIVERS\djsvs.sys
14:17:25.0015 1484  aic78xx - ok
14:17:25.0077 1484  [ 18A54E132947CD98FEA9ACCC57F98F13 ] ALG             C:\Windows\System32\alg.exe
14:17:25.0124 1484  ALG - ok
14:17:25.0218 1484  [ 0D40BCF52EA90FC7DF2AEAB6503DEA44 ] aliide          C:\Windows\system32\drivers\aliide.sys
14:17:25.0233 1484  aliide - ok
14:17:25.0327 1484  [ C4232FADFA9691B85DDA0A7B636C5F6D ] AMD External Events Utility C:\Windows\system32\atiesrxx.exe
14:17:25.0389 1484  AMD External Events Utility - ok
14:17:25.0452 1484  AMD FUEL Service - ok
14:17:25.0483 1484  [ 3C6600A0696E90A463771C7422E23AB5 ] amdagp          C:\Windows\system32\drivers\amdagp.sys
14:17:25.0514 1484  amdagp - ok
14:17:25.0545 1484  [ CD5914170297126B6266860198D1D4F0 ] amdide          C:\Windows\system32\drivers\amdide.sys
14:17:25.0561 1484  amdide - ok
14:17:25.0623 1484  [ FF258424F0B2EF25EB98F04EE386E6E3 ] amdiox86        C:\Windows\system32\DRIVERS\amdiox86.sys
14:17:25.0639 1484  amdiox86 - ok
14:17:25.0701 1484  [ 00DDA200D71BAC534BF56A9DB5DFD666 ] AmdK8           C:\Windows\system32\DRIVERS\amdk8.sys
14:17:25.0717 1484  AmdK8 - ok
14:17:26.0965 1484  [ 10D681E635E81C253FC5DD1A5048B0E9 ] amdkmdag        C:\Windows\system32\DRIVERS\atikmdag.sys
14:17:27.0261 1484  amdkmdag - ok
14:17:27.0355 1484  [ 112A7F24C6535DBD2E90AEF34ECB57A4 ] amdkmdap        C:\Windows\system32\DRIVERS\atikmpag.sys
14:17:27.0417 1484  amdkmdap - ok
14:17:27.0448 1484  [ 3CBF30F5370FDA40DD3E87DF38EA53B6 ] AmdPPM          C:\Windows\system32\DRIVERS\amdppm.sys
14:17:27.0495 1484  AmdPPM - ok
14:17:27.0542 1484  [ D320BF87125326F996D4904FE24300FC ] amdsata         C:\Windows\system32\drivers\amdsata.sys
14:17:27.0573 1484  amdsata - ok
14:17:27.0589 1484  [ EA43AF0C423FF267355F74E7A53BDABA ] amdsbs          C:\Windows\system32\DRIVERS\amdsbs.sys
14:17:27.0604 1484  amdsbs - ok
14:17:27.0620 1484  [ 46387FB17B086D16DEA267D5BE23A2F2 ] amdxata         C:\Windows\system32\drivers\amdxata.sys
14:17:27.0636 1484  amdxata - ok
14:17:27.0698 1484  [ AEA177F783E20150ACE5383EE368DA19 ] AppID           C:\Windows\system32\drivers\appid.sys
14:17:27.0760 1484  AppID - ok
14:17:27.0807 1484  [ 62A9C86CB6085E20DB4823E4E97826F5 ] AppIDSvc        C:\Windows\System32\appidsvc.dll
14:17:27.0885 1484  AppIDSvc - ok
14:17:27.0932 1484  [ FB1959012294D6AD43E5304DF65E3C26 ] Appinfo         C:\Windows\System32\appinfo.dll
14:17:27.0979 1484  Appinfo - ok
14:17:27.0994 1484  [ 2932004F49677BD84DBC72EDB754FFB3 ] arc             C:\Windows\system32\DRIVERS\arc.sys
14:17:28.0010 1484  arc - ok
14:17:28.0041 1484  [ 5D6F36C46FD283AE1B57BD2E9FEB0BC7 ] arcsas          C:\Windows\system32\DRIVERS\arcsas.sys
14:17:28.0057 1484  arcsas - ok
14:17:28.0166 1484  [ 776ACEFA0CA9DF0FAA51A5FB2F435705 ] aspnet_state    C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe
14:17:28.0244 1484  aspnet_state - ok
14:17:28.0260 1484  [ ADD2ADE1C2B285AB8378D2DAAF991481 ] AsyncMac        C:\Windows\system32\DRIVERS\asyncmac.sys
14:17:28.0353 1484  AsyncMac - ok
14:17:28.0384 1484  [ 338C86357871C167A96AB976519BF59E ] atapi           C:\Windows\system32\drivers\atapi.sys
14:17:28.0400 1484  atapi - ok
14:17:28.0899 1484  [ 10D681E635E81C253FC5DD1A5048B0E9 ] atikmdag        C:\Windows\system32\DRIVERS\atikmdag.sys
14:17:29.0040 1484  atikmdag - ok
14:17:29.0102 1484  [ CE3B4E731638D2EF62FCB419BE0D39F0 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
14:17:29.0149 1484  AudioEndpointBuilder - ok
14:17:29.0149 1484  [ CE3B4E731638D2EF62FCB419BE0D39F0 ] Audiosrv        C:\Windows\System32\Audiosrv.dll
14:17:29.0180 1484  Audiosrv - ok
14:17:29.0196 1484  [ 6E30D02AAC9CAC84F421622E3A2F6178 ] AxInstSV        C:\Windows\System32\AxInstSV.dll
14:17:29.0258 1484  AxInstSV - ok
14:17:29.0289 1484  [ 1A231ABEC60FD316EC54C66715543CEC ] b06bdrv         C:\Windows\system32\DRIVERS\bxvbdx.sys
14:17:29.0320 1484  b06bdrv - ok
14:17:29.0352 1484  [ BD8869EB9CDE6BBE4508D869929869EE ] b57nd60x        C:\Windows\system32\DRIVERS\b57nd60x.sys
14:17:29.0383 1484  b57nd60x - ok
14:17:29.0414 1484  [ EE1E9C3BB8228AE423DD38DB69128E71 ] BDESVC          C:\Windows\System32\bdesvc.dll
14:17:29.0461 1484  BDESVC - ok
14:17:29.0492 1484  [ 505506526A9D467307B3C393DEDAF858 ] Beep            C:\Windows\system32\drivers\Beep.sys
14:17:29.0539 1484  Beep - ok
14:17:29.0570 1484  [ 1E2BAC209D184BB851E1A187D8A29136 ] BFE             C:\Windows\System32\bfe.dll
14:17:29.0632 1484  BFE - ok
14:17:29.0679 1484  [ E585445D5021971FAE10393F0F1C3961 ] BITS            C:\Windows\System32\qmgr.dll
14:17:29.0726 1484  BITS - ok
14:17:29.0757 1484  [ 2287078ED48FCFC477B05B20CF38F36F ] blbdrive        C:\Windows\system32\DRIVERS\blbdrive.sys
14:17:29.0773 1484  blbdrive - ok
14:17:29.0804 1484  [ 8F2DA3028D5FCBD1A060A3DE64CD6506 ] bowser          C:\Windows\system32\DRIVERS\bowser.sys
14:17:29.0820 1484  bowser - ok
14:17:29.0835 1484  [ 9F9ACC7F7CCDE8A15C282D3F88B43309 ] BrFiltLo        C:\Windows\system32\DRIVERS\BrFiltLo.sys
14:17:29.0851 1484  BrFiltLo - ok
14:17:29.0882 1484  [ 56801AD62213A41F6497F96DEE83755A ] BrFiltUp        C:\Windows\system32\DRIVERS\BrFiltUp.sys
14:17:29.0898 1484  BrFiltUp - ok
14:17:29.0944 1484  [ 3DAA727B5B0A45039B0E1C9A211B8400 ] Browser         C:\Windows\System32\browser.dll
14:17:30.0007 1484  Browser - ok
14:17:30.0069 1484  [ 845B8CE732E67F3B4133164868C666EA ] Brserid         C:\Windows\System32\Drivers\Brserid.sys
14:17:30.0116 1484  Brserid - ok
14:17:30.0132 1484  [ 203F0B1E73ADADBBB7B7B1FABD901F6B ] BrSerWdm        C:\Windows\System32\Drivers\BrSerWdm.sys
14:17:30.0147 1484  BrSerWdm - ok
14:17:30.0163 1484  [ BD456606156BA17E60A04E18016AE54B ] BrUsbMdm        C:\Windows\System32\Drivers\BrUsbMdm.sys
14:17:30.0178 1484  BrUsbMdm - ok
14:17:30.0194 1484  [ AF72ED54503F717A43268B3CC5FAEC2E ] BrUsbSer        C:\Windows\System32\Drivers\BrUsbSer.sys
14:17:30.0210 1484  BrUsbSer - ok
14:17:30.0225 1484  [ ED3DF7C56CE0084EB2034432FC56565A ] BTHMODEM        C:\Windows\system32\DRIVERS\bthmodem.sys
14:17:30.0241 1484  BTHMODEM - ok
14:17:30.0288 1484  [ 1DF19C96EEF6C29D1C3E1A8678E07190 ] bthserv         C:\Windows\system32\bthserv.dll
14:17:30.0319 1484  bthserv - ok
14:17:30.0366 1484  [ A775A7DC5F5D121E566F5F12B341E0EE ] Bulk1528        C:\Windows\system32\Drivers\Bulk1528.sys
14:17:30.0397 1484  Bulk1528 - ok
14:17:30.0444 1484  [ 94BF1CD4CDF4B02BE835D78CA5104734 ] Ca1528av        C:\Windows\system32\Drivers\Ca1528av.sys
14:17:30.0475 1484  Ca1528av - ok
14:17:30.0506 1484  [ 77EA11B065E0A8AB902D78145CA51E10 ] cdfs            C:\Windows\system32\DRIVERS\cdfs.sys
14:17:30.0537 1484  cdfs - ok
14:17:30.0584 1484  [ BE167ED0FDB9C1FA1133953C18D5A6C9 ] cdrom           C:\Windows\system32\DRIVERS\cdrom.sys
14:17:30.0615 1484  cdrom - ok
14:17:30.0646 1484  [ 319C6B309773D063541D01DF8AC6F55F ] CertPropSvc     C:\Windows\System32\certprop.dll
14:17:30.0678 1484  CertPropSvc - ok
14:17:30.0693 1484  [ 3FE3FE94A34DF6FB06E6418D0F6A0060 ] circlass        C:\Windows\system32\DRIVERS\circlass.sys
14:17:30.0709 1484  circlass - ok
14:17:30.0756 1484  [ 635181E0E9BBF16871BF5380D71DB02D ] CLFS            C:\Windows\system32\CLFS.sys
14:17:30.0787 1484  CLFS - ok
14:17:30.0865 1484  [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
14:17:30.0880 1484  clr_optimization_v2.0.50727_32 - ok
14:17:30.0927 1484  [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
14:17:30.0990 1484  clr_optimization_v4.0.30319_32 - ok
14:17:31.0005 1484  [ DEA805815E587DAD1DD2C502220B5616 ] CmBatt          C:\Windows\system32\DRIVERS\CmBatt.sys
14:17:31.0036 1484  CmBatt - ok
14:17:31.0036 1484  [ C537B1DB64D495B9B4717B4D6D9EDBF2 ] cmdide          C:\Windows\system32\drivers\cmdide.sys
14:17:31.0052 1484  cmdide - ok
14:17:31.0161 1484  [ 247B4CE2DAB1160CD422D532D5241E1F ] CNG             C:\Windows\system32\Drivers\cng.sys
14:17:31.0239 1484  CNG - ok
14:17:31.0255 1484  [ A6023D3823C37043986713F118A89BEE ] Compbatt        C:\Windows\system32\DRIVERS\compbatt.sys
14:17:31.0270 1484  Compbatt - ok
14:17:31.0286 1484  [ CBE8C58A8579CFE5FCCF809E6F114E89 ] CompositeBus    C:\Windows\system32\drivers\CompositeBus.sys
14:17:31.0317 1484  CompositeBus - ok
14:17:31.0333 1484  COMSysApp - ok
14:17:31.0333 1484  [ 2C4EBCFC84A9B44F209DFF6C6E6C61D1 ] crcdisk         C:\Windows\system32\DRIVERS\crcdisk.sys
14:17:31.0348 1484  crcdisk - ok
14:17:31.0426 1484  [ 06E771AA596B8761107AB57E99F128D7 ] CryptSvc        C:\Windows\system32\cryptsvc.dll
14:17:31.0473 1484  CryptSvc - ok
14:17:31.0504 1484  [ 7660F01D3B38ACA1747E397D21D790AF ] DcomLaunch      C:\Windows\system32\rpcss.dll
14:17:31.0551 1484  DcomLaunch - ok
14:17:31.0582 1484  [ 8D6E10A2D9A5EED59562D9B82CF804E1 ] defragsvc       C:\Windows\System32\defragsvc.dll
14:17:31.0629 1484  defragsvc - ok
14:17:31.0660 1484  [ F024449C97EC1E464AAFFDA18593DB88 ] DfsC            C:\Windows\system32\Drivers\dfsc.sys
14:17:31.0692 1484  DfsC - ok
14:17:31.0723 1484  [ E9E01EB683C132F7FA27CD607B8A2B63 ] Dhcp            C:\Windows\system32\dhcpcore.dll
14:17:31.0770 1484  Dhcp - ok
14:17:31.0785 1484  [ 1A050B0274BFB3890703D490F330C0DA ] discache        C:\Windows\system32\drivers\discache.sys
14:17:31.0832 1484  discache - ok
14:17:31.0863 1484  [ 565003F326F99802E68CA78F2A68E9FF ] Disk            C:\Windows\system32\DRIVERS\disk.sys
14:17:31.0879 1484  Disk - ok
14:17:31.0910 1484  [ 33EF4861F19A0736B11314AAD9AE28D0 ] Dnscache        C:\Windows\System32\dnsrslvr.dll
14:17:31.0941 1484  Dnscache - ok
14:17:31.0972 1484  [ 366BA8FB4B7BB7435E3B9EACB3843F67 ] dot3svc         C:\Windows\System32\dot3svc.dll
14:17:32.0004 1484  dot3svc - ok
14:17:32.0035 1484  [ 8EC04CA86F1D68DA9E11952EB85973D6 ] DPS             C:\Windows\system32\dps.dll
14:17:32.0082 1484  DPS - ok
14:17:32.0113 1484  [ B918E7C5F9BF77202F89E1A9539F2EB4 ] drmkaud         C:\Windows\system32\drivers\drmkaud.sys
14:17:32.0144 1484  drmkaud - ok
14:17:32.0175 1484  [ E577B5C4A6BE078E5445CDCFB65BE7AB ] DslMNLwf        C:\Windows\system32\DRIVERS\dslmnlwf.sys
14:17:32.0191 1484  DslMNLwf - ok
14:17:32.0222 1484  [ 23F5D28378A160352BA8F817BD8C71CB ] DXGKrnl         C:\Windows\System32\drivers\dxgkrnl.sys
14:17:32.0253 1484  DXGKrnl - ok
14:17:32.0269 1484  [ 8600142FA91C1B96367D3300AD0F3F3A ] EapHost         C:\Windows\System32\eapsvc.dll
14:17:32.0316 1484  EapHost - ok
14:17:32.0394 1484  [ 024E1B5CAC09731E4D868E64DBFB4AB0 ] ebdrv           C:\Windows\system32\DRIVERS\evbdx.sys
14:17:32.0518 1484  ebdrv - ok
14:17:32.0534 1484  [ 81951F51E318AECC2D68559E47485CC4 ] EFS             C:\Windows\System32\lsass.exe
14:17:32.0596 1484  EFS - ok
14:17:32.0674 1484  [ A8C362018EFC87BEB013EE28F29C0863 ] ehRecvr         C:\Windows\ehome\ehRecvr.exe
14:17:32.0721 1484  ehRecvr - ok
14:17:32.0737 1484  [ D389BFF34F80CAEDE417BF9D1507996A ] ehSched         C:\Windows\ehome\ehsched.exe
14:17:32.0768 1484  ehSched - ok
14:17:32.0815 1484  [ 0ED67910C8C326796FAA00B2BF6D9D3C ] elxstor         C:\Windows\system32\DRIVERS\elxstor.sys
14:17:32.0846 1484  elxstor - ok
14:17:32.0862 1484  [ 8FC3208352DD3912C94367A206AB3F11 ] ErrDev          C:\Windows\system32\drivers\errdev.sys
14:17:32.0877 1484  ErrDev - ok
14:17:32.0924 1484  [ F6916EFC29D9953D5D0DF06882AE8E16 ] EventSystem     C:\Windows\system32\es.dll
14:17:32.0971 1484  EventSystem - ok
14:17:33.0002 1484  [ 2DC9108D74081149CC8B651D3A26207F ] exfat           C:\Windows\system32\drivers\exfat.sys
14:17:33.0033 1484  exfat - ok
14:17:33.0064 1484  Fabs - ok
14:17:33.0096 1484  [ 7E0AB74553476622FB6AE36F73D97D35 ] fastfat         C:\Windows\system32\drivers\fastfat.sys
14:17:33.0127 1484  fastfat - ok
14:17:33.0174 1484  [ 967EA5B213E9984CBE270205DF37755B ] Fax             C:\Windows\system32\fxssvc.exe
14:17:33.0236 1484  Fax - ok
14:17:33.0252 1484  [ E817A017F82DF2A1F8CFDBDA29388B29 ] fdc             C:\Windows\system32\DRIVERS\fdc.sys
14:17:33.0283 1484  fdc - ok
14:17:33.0298 1484  [ F3222C893BD2F5821A0179E5C71E88FB ] fdPHost         C:\Windows\system32\fdPHost.dll
14:17:33.0345 1484  fdPHost - ok
14:17:33.0361 1484  [ 7DBE8CBFE79EFBDEB98C9FB08D3A9A5B ] FDResPub        C:\Windows\system32\fdrespub.dll
14:17:33.0392 1484  FDResPub - ok
14:17:33.0408 1484  [ 6CF00369C97F3CF563BE99BE983D13D8 ] FileInfo        C:\Windows\system32\drivers\fileinfo.sys
14:17:33.0439 1484  FileInfo - ok
14:17:33.0454 1484  [ 42C51DC94C91DA21CB9196EB64C45DB9 ] Filetrace       C:\Windows\system32\drivers\filetrace.sys
14:17:33.0486 1484  Filetrace - ok
14:17:33.0595 1484  [ 5BD96D8C5411ACE71A7EAACAF0EF2903 ] FirebirdServerMAGIXInstance C:\Program Files\Common Files\MAGIX Services\Database\bin\fbserver.exe
14:17:33.0704 1484  FirebirdServerMAGIXInstance ( UnsignedFile.Multi.Generic ) - warning
14:17:33.0704 1484  FirebirdServerMAGIXInstance - detected UnsignedFile.Multi.Generic (1)
14:17:33.0751 1484  [ 87907AA70CB3C56600F1C2FB8841579B ] flpydisk        C:\Windows\system32\DRIVERS\flpydisk.sys
14:17:33.0782 1484  flpydisk - ok
14:17:33.0798 1484  [ 7520EC808E0C35E0EE6F841294316653 ] FltMgr          C:\Windows\system32\drivers\fltmgr.sys
14:17:33.0813 1484  FltMgr - ok
14:17:33.0938 1484  [ B3A5EC6B6B6673DB7E87C2BCDBDDC074 ] FontCache       C:\Windows\system32\FntCache.dll
14:17:34.0016 1484  FontCache - ok
14:17:34.0078 1484  [ E56F39F6B7FDA0AC77A79B0FD3DE1A2F ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
14:17:34.0078 1484  FontCache3.0.0.0 - ok
14:17:34.0110 1484  [ 1A16B57943853E598CFF37FE2B8CBF1D ] FsDepends       C:\Windows\system32\drivers\FsDepends.sys
14:17:34.0125 1484  FsDepends - ok
14:17:34.0141 1484  [ 7DAE5EBCC80E45D3253F4923DC424D05 ] Fs_Rec          C:\Windows\system32\drivers\Fs_Rec.sys
14:17:34.0156 1484  Fs_Rec - ok
14:17:34.0172 1484  [ 8A73E79089B282100B9393B644CB853B ] fvevol          C:\Windows\system32\DRIVERS\fvevol.sys
14:17:34.0203 1484  fvevol - ok
14:17:34.0203 1484  [ 65EE0C7A58B65E74AE05637418153938 ] gagp30kx        C:\Windows\system32\DRIVERS\gagp30kx.sys
14:17:34.0219 1484  gagp30kx - ok
14:17:34.0281 1484  [ E897EAF5ED6BA41E081060C9B447A673 ] gpsvc           C:\Windows\System32\gpsvc.dll
14:17:34.0328 1484  gpsvc - ok
14:17:34.0344 1484  [ C44E3C2BAB6837DB337DDEE7544736DB ] hcw85cir        C:\Windows\system32\drivers\hcw85cir.sys
14:17:34.0406 1484  hcw85cir - ok
14:17:34.0437 1484  [ A5EF29D5315111C80A5C1ABAD14C8972 ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
14:17:34.0468 1484  HdAudAddService - ok
14:17:34.0500 1484  [ 9036377B8A6C15DC2EEC53E489D159B5 ] HDAudBus        C:\Windows\system32\drivers\HDAudBus.sys
14:17:34.0515 1484  HDAudBus - ok
14:17:34.0531 1484  [ 1D58A7F3E11A9731D0EAAAA8405ACC36 ] HidBatt         C:\Windows\system32\DRIVERS\HidBatt.sys
14:17:34.0562 1484  HidBatt - ok
14:17:34.0578 1484  [ 89448F40E6DF260C206A193A4683BA78 ] HidBth          C:\Windows\system32\DRIVERS\hidbth.sys
14:17:34.0609 1484  HidBth - ok
14:17:34.0624 1484  [ CF50B4CF4A4F229B9F3C08351F99CA5E ] HidIr           C:\Windows\system32\DRIVERS\hidir.sys
14:17:34.0640 1484  HidIr - ok
14:17:34.0656 1484  [ 2BC6F6A1992B3A77F5F41432CA6B3B6B ] hidserv         C:\Windows\system32\hidserv.dll
14:17:34.0687 1484  hidserv - ok
14:17:34.0734 1484  [ 10C19F8290891AF023EAEC0832E1EB4D ] HidUsb          C:\Windows\system32\DRIVERS\hidusb.sys
14:17:34.0749 1484  HidUsb - ok
14:17:34.0765 1484  [ 196B4E3F4CCCC24AF836CE58FACBB699 ] hkmsvc          C:\Windows\system32\kmsvc.dll
14:17:34.0796 1484  hkmsvc - ok
14:17:34.0843 1484  [ 6658F4404DE03D75FE3BA09F7ABA6A30 ] HomeGroupListener C:\Windows\system32\ListSvc.dll
14:17:34.0890 1484  HomeGroupListener - ok
14:17:34.0921 1484  [ DBC02D918FFF1CAD628ACBE0C0EAA8E8 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
14:17:34.0952 1484  HomeGroupProvider - ok
14:17:34.0999 1484  [ 295FDC419039090EB8B49FFDBB374549 ] HpSAMD          C:\Windows\system32\drivers\HpSAMD.sys
14:17:34.0999 1484  HpSAMD - ok
14:17:35.0030 1484  [ 871917B07A141BFF43D76D8844D48106 ] HTTP            C:\Windows\system32\drivers\HTTP.sys
14:17:35.0061 1484  HTTP - ok
14:17:35.0108 1484  [ 0C4E035C7F105F1299258C90886C64C5 ] hwpolicy        C:\Windows\system32\drivers\hwpolicy.sys
14:17:35.0108 1484  hwpolicy - ok
14:17:35.0124 1484  [ F151F0BDC47F4A28B1B20A0818EA36D6 ] i8042prt        C:\Windows\system32\drivers\i8042prt.sys
14:17:35.0155 1484  i8042prt - ok
14:17:35.0186 1484  [ 5CD5F9A5444E6CDCB0AC89BD62D8B76E ] iaStorV         C:\Windows\system32\drivers\iaStorV.sys
14:17:35.0202 1484  iaStorV - ok
14:17:35.0264 1484  [ C521D7EB6497BB1AF6AFA89E322FB43C ] idsvc           C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
14:17:35.0311 1484  idsvc - ok
14:17:35.0342 1484  [ 4173FF5708F3236CF25195FECD742915 ] iirsp           C:\Windows\system32\DRIVERS\iirsp.sys
14:17:35.0342 1484  iirsp - ok
14:17:35.0389 1484  [ F95622F161474511B8D80D6B093AA610 ] IKEEXT          C:\Windows\System32\ikeext.dll
14:17:35.0436 1484  IKEEXT - ok
14:17:35.0451 1484  [ A0F12F2C9BA6C72F3987CE780E77C130 ] intelide        C:\Windows\system32\drivers\intelide.sys
14:17:35.0467 1484  intelide - ok
14:17:35.0498 1484  [ 3B514D27BFC4ACCB4037BC6685F766E0 ] intelppm        C:\Windows\system32\DRIVERS\intelppm.sys
14:17:35.0514 1484  intelppm - ok
14:17:35.0545 1484  [ ACB364B9075A45C0736E5C47BE5CAE19 ] IPBusEnum       C:\Windows\system32\ipbusenum.dll
14:17:35.0592 1484  IPBusEnum - ok
14:17:35.0607 1484  [ 709D1761D3B19A932FF0238EA6D50200 ] IpFilterDriver  C:\Windows\system32\DRIVERS\ipfltdrv.sys
14:17:35.0654 1484  IpFilterDriver - ok
14:17:35.0685 1484  [ 4D65A07B795D6674312F879D09AA7663 ] iphlpsvc        C:\Windows\System32\iphlpsvc.dll
14:17:35.0716 1484  iphlpsvc - ok
14:17:35.0748 1484  [ 4BD7134618C1D2A27466A099062547BF ] IPMIDRV         C:\Windows\system32\drivers\IPMIDrv.sys
14:17:35.0779 1484  IPMIDRV - ok
14:17:35.0794 1484  [ A5FA468D67ABCDAA36264E463A7BB0CD ] IPNAT           C:\Windows\system32\drivers\ipnat.sys
14:17:35.0810 1484  IPNAT - ok
14:17:35.0841 1484  [ 42996CFF20A3084A56017B7902307E9F ] IRENUM          C:\Windows\system32\drivers\irenum.sys
14:17:35.0857 1484  IRENUM - ok
14:17:35.0872 1484  [ 1F32BB6B38F62F7DF1A7AB7292638A35 ] isapnp          C:\Windows\system32\drivers\isapnp.sys
14:17:35.0888 1484  isapnp - ok
14:17:35.0919 1484  [ CB7A9ABB12B8415BCE5D74994C7BA3AE ] iScsiPrt        C:\Windows\system32\drivers\msiscsi.sys
14:17:35.0950 1484  iScsiPrt - ok
14:17:35.0966 1484  [ ADEF52CA1AEAE82B50DF86B56413107E ] kbdclass        C:\Windows\system32\drivers\kbdclass.sys
14:17:35.0966 1484  kbdclass - ok
14:17:35.0997 1484  [ 9E3CED91863E6EE98C24794D05E27A71 ] kbdhid          C:\Windows\system32\drivers\kbdhid.sys
14:17:36.0013 1484  kbdhid - ok
14:17:36.0028 1484  [ 81951F51E318AECC2D68559E47485CC4 ] KeyIso          C:\Windows\system32\lsass.exe
14:17:36.0044 1484  KeyIso - ok
14:17:36.0091 1484  [ B7895B4182C0D16F6EFADEB8081E8D36 ] KSecDD          C:\Windows\system32\Drivers\ksecdd.sys
14:17:36.0106 1484  KSecDD - ok
14:17:36.0122 1484  [ D30159AC9237519FBC62C6EC247D2D46 ] KSecPkg         C:\Windows\system32\Drivers\ksecpkg.sys
14:17:36.0138 1484  KSecPkg - ok
14:17:36.0169 1484  [ 89A7B9CC98D0D80C6F31B91C0A310FCD ] KtmRm           C:\Windows\system32\msdtckrm.dll
14:17:36.0216 1484  KtmRm - ok
14:17:36.0262 1484  [ D64AF876D53ECA3668BB97B51B4E70AB ] LanmanServer    C:\Windows\system32\srvsvc.dll
14:17:36.0294 1484  LanmanServer - ok
14:17:36.0340 1484  [ 58405E4F68BA8E4057C6E914F326ABA2 ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
14:17:36.0387 1484  LanmanWorkstation - ok
14:17:36.0434 1484  [ F7611EC07349979DA9B0AE1F18CCC7A6 ] lltdio          C:\Windows\system32\DRIVERS\lltdio.sys
14:17:36.0465 1484  lltdio - ok
14:17:36.0496 1484  [ 5700673E13A2117FA3B9020C852C01E2 ] lltdsvc         C:\Windows\System32\lltdsvc.dll
14:17:36.0528 1484  lltdsvc - ok
14:17:36.0543 1484  [ 55CA01BA19D0006C8F2639B6C045E08B ] lmhosts         C:\Windows\System32\lmhsvc.dll
14:17:36.0574 1484  lmhosts - ok
14:17:36.0606 1484  [ EB119A53CCF2ACC000AC71B065B78FEF ] LSI_FC          C:\Windows\system32\DRIVERS\lsi_fc.sys
14:17:36.0621 1484  LSI_FC - ok
14:17:36.0637 1484  [ 8ADE1C877256A22E49B75D1CC9161F9C ] LSI_SAS         C:\Windows\system32\DRIVERS\lsi_sas.sys
14:17:36.0652 1484  LSI_SAS - ok
14:17:36.0668 1484  [ DC9DC3D3DAA0E276FD2EC262E38B11E9 ] LSI_SAS2        C:\Windows\system32\DRIVERS\lsi_sas2.sys
14:17:36.0684 1484  LSI_SAS2 - ok
14:17:36.0699 1484  [ 0A036C7D7CAB643A7F07135AC47E0524 ] LSI_SCSI        C:\Windows\system32\DRIVERS\lsi_scsi.sys
14:17:36.0715 1484  LSI_SCSI - ok
14:17:36.0746 1484  [ 6703E366CC18D3B6E534F5CF7DF39CEE ] luafv           C:\Windows\system32\drivers\luafv.sys
14:17:36.0777 1484  luafv - ok
14:17:36.0808 1484  [ BFB9EE8EE977EFE85D1A3105ABEF6DD1 ] Mcx2Svc         C:\Windows\system32\Mcx2Svc.dll
14:17:36.0824 1484  Mcx2Svc - ok
14:17:36.0840 1484  [ 0FFF5B045293002AB38EB1FD1FC2FB74 ] megasas         C:\Windows\system32\DRIVERS\megasas.sys
14:17:36.0855 1484  megasas - ok
14:17:36.0871 1484  [ DCBAB2920C75F390CAF1D29F675D03D6 ] MegaSR          C:\Windows\system32\DRIVERS\MegaSR.sys
14:17:36.0886 1484  MegaSR - ok
14:17:36.0918 1484  [ 146B6F43A673379A3C670E86D89BE5EA ] MMCSS           C:\Windows\system32\mmcss.dll
14:17:36.0949 1484  MMCSS - ok
14:17:36.0964 1484  [ F001861E5700EE84E2D4E52C712F4964 ] Modem           C:\Windows\system32\drivers\modem.sys
14:17:36.0996 1484  Modem - ok
14:17:37.0042 1484  [ 79D10964DE86B292320E9DFE02282A23 ] monitor         C:\Windows\system32\DRIVERS\monitor.sys
14:17:37.0058 1484  monitor - ok
14:17:37.0089 1484  [ FB18CC1D4C2E716B6B903B0AC0CC0609 ] mouclass        C:\Windows\system32\drivers\mouclass.sys
14:17:37.0105 1484  mouclass - ok
14:17:37.0120 1484  [ 2C388D2CD01C9042596CF3C8F3C7B24D ] mouhid          C:\Windows\system32\DRIVERS\mouhid.sys
14:17:37.0136 1484  mouhid - ok
14:17:37.0167 1484  [ FC8771F45ECCCFD89684E38842539B9B ] mountmgr        C:\Windows\system32\drivers\mountmgr.sys
14:17:37.0183 1484  mountmgr - ok
14:17:37.0245 1484  [ 46297FA8E30A6007F14118FC2B942FBC ] MozillaMaintenance C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
14:17:37.0261 1484  MozillaMaintenance - ok
14:17:37.0276 1484  [ 2D699FB6E89CE0D8DA14ECC03B3EDFE0 ] mpio            C:\Windows\system32\drivers\mpio.sys
14:17:37.0292 1484  mpio - ok
14:17:37.0308 1484  [ AD2723A7B53DD1AACAE6AD8C0BFBF4D0 ] mpsdrv          C:\Windows\system32\drivers\mpsdrv.sys
14:17:37.0354 1484  mpsdrv - ok
14:17:37.0401 1484  [ 9835584E999D25004E1EE8E5F3E3B881 ] MpsSvc          C:\Windows\system32\mpssvc.dll
14:17:37.0464 1484  MpsSvc - ok
14:17:37.0495 1484  [ CEB46AB7C01C9F825F8CC6BABC18166A ] MRxDAV          C:\Windows\system32\drivers\mrxdav.sys
14:17:37.0510 1484  MRxDAV - ok
14:17:37.0542 1484  [ 5D16C921E3671636C0EBA3BBAAC5FD25 ] mrxsmb          C:\Windows\system32\DRIVERS\mrxsmb.sys
14:17:37.0557 1484  mrxsmb - ok
14:17:37.0573 1484  [ 6D17A4791ACA19328C685D256349FEFC ] mrxsmb10        C:\Windows\system32\DRIVERS\mrxsmb10.sys
14:17:37.0620 1484  mrxsmb10 - ok
14:17:37.0651 1484  [ B81F204D146000BE76651A50670A5E9E ] mrxsmb20        C:\Windows\system32\DRIVERS\mrxsmb20.sys
14:17:37.0666 1484  mrxsmb20 - ok
14:17:37.0682 1484  [ 012C5F4E9349E711E11E0F19A8589F0A ] msahci          C:\Windows\system32\drivers\msahci.sys
14:17:37.0698 1484  msahci - ok
14:17:37.0713 1484  [ 55055F8AD8BE27A64C831322A780A228 ] msdsm           C:\Windows\system32\drivers\msdsm.sys
14:17:37.0729 1484  msdsm - ok
14:17:37.0744 1484  [ E1BCE74A3BD9902B72599C0192A07E27 ] MSDTC           C:\Windows\System32\msdtc.exe
14:17:37.0776 1484  MSDTC - ok
14:17:37.0791 1484  [ DAEFB28E3AF5A76ABCC2C3078C07327F ] Msfs            C:\Windows\system32\drivers\Msfs.sys
14:17:37.0822 1484  Msfs - ok
14:17:37.0838 1484  [ 3E1E5767043C5AF9367F0056295E9F84 ] mshidkmdf       C:\Windows\System32\drivers\mshidkmdf.sys
14:17:37.0885 1484  mshidkmdf - ok
14:17:37.0900 1484  [ 0A4E5757AE09FA9622E3158CC1AEF114 ] msisadrv        C:\Windows\system32\drivers\msisadrv.sys
14:17:37.0916 1484  msisadrv - ok
14:17:37.0947 1484  [ 90F7D9E6B6F27E1A707D4A297F077828 ] MSiSCSI         C:\Windows\system32\iscsiexe.dll
14:17:37.0978 1484  MSiSCSI - ok
14:17:37.0994 1484  msiserver - ok
14:17:38.0010 1484  [ 8C0860D6366AAFFB6C5BB9DF9448E631 ] MSKSSRV         C:\Windows\system32\drivers\MSKSSRV.sys
14:17:38.0041 1484  MSKSSRV - ok
14:17:38.0072 1484  [ 3EA8B949F963562CEDBB549EAC0C11CE ] MSPCLOCK        C:\Windows\system32\drivers\MSPCLOCK.sys
14:17:38.0119 1484  MSPCLOCK - ok
14:17:38.0119 1484  [ F456E973590D663B1073E9C463B40932 ] MSPQM           C:\Windows\system32\drivers\MSPQM.sys
14:17:38.0150 1484  MSPQM - ok
14:17:38.0197 1484  [ 0E008FC4819D238C51D7C93E7B41E560 ] MsRPC           C:\Windows\system32\drivers\MsRPC.sys
14:17:38.0212 1484  MsRPC - ok
14:17:38.0228 1484  [ FC6B9FF600CC585EA38B12589BD4E246 ] mssmbios        C:\Windows\system32\drivers\mssmbios.sys
14:17:38.0244 1484  mssmbios - ok
14:17:38.0259 1484  [ B42C6B921F61A6E55159B8BE6CD54A36 ] MSTEE           C:\Windows\system32\drivers\MSTEE.sys
14:17:38.0290 1484  MSTEE - ok
14:17:38.0290 1484  [ 33599130F44E1F34631CEA241DE8AC84 ] MTConfig        C:\Windows\system32\DRIVERS\MTConfig.sys
14:17:38.0306 1484  MTConfig - ok
14:17:38.0337 1484  [ 159FAD02F64E6381758C990F753BCC80 ] Mup             C:\Windows\system32\Drivers\mup.sys
14:17:38.0353 1484  Mup - ok
14:17:38.0384 1484  [ 61D57A5D7C6D9AFE10E77DAE6E1B445E ] napagent        C:\Windows\system32\qagentRT.dll
14:17:38.0431 1484  napagent - ok
14:17:38.0462 1484  [ 26384429FCD85D83746F63E798AB1480 ] NativeWifiP     C:\Windows\system32\DRIVERS\nwifi.sys
14:17:38.0478 1484  NativeWifiP - ok
14:17:38.0556 1484  [ 8C9C922D71F1CD4DEF73F186416B7896 ] NDIS            C:\Windows\system32\drivers\ndis.sys
14:17:38.0602 1484  NDIS - ok
14:17:38.0618 1484  [ 0E1787AA6C9191D3D319E8BAFE86F80C ] NdisCap         C:\Windows\system32\DRIVERS\ndiscap.sys
14:17:38.0649 1484  NdisCap - ok
14:17:38.0680 1484  [ E4A8AEC125A2E43A9E32AFEEA7C9C888 ] NdisTapi        C:\Windows\system32\DRIVERS\ndistapi.sys
14:17:38.0712 1484  NdisTapi - ok
14:17:38.0727 1484  [ D8A65DAFB3EB41CBB622745676FCD072 ] Ndisuio         C:\Windows\system32\DRIVERS\ndisuio.sys
14:17:38.0758 1484  Ndisuio - ok
14:17:38.0774 1484  [ 38FBE267E7E6983311179230FACB1017 ] NdisWan         C:\Windows\system32\DRIVERS\ndiswan.sys
14:17:38.0821 1484  NdisWan - ok
14:17:38.0852 1484  [ A4BDC541E69674FBFF1A8FF00BE913F2 ] NDProxy         C:\Windows\system32\drivers\NDProxy.sys
14:17:38.0868 1484  NDProxy - ok
14:17:38.0883 1484  [ 80B275B1CE3B0E79909DB7B39AF74D51 ] NetBIOS         C:\Windows\system32\DRIVERS\netbios.sys
14:17:38.0930 1484  NetBIOS - ok
14:17:38.0977 1484  [ 280122DDCF04B378EDD1AD54D71C1E54 ] NetBT           C:\Windows\system32\DRIVERS\netbt.sys
14:17:39.0008 1484  NetBT - ok
14:17:39.0055 1484  [ 81951F51E318AECC2D68559E47485CC4 ] Netlogon        C:\Windows\system32\lsass.exe
14:17:39.0055 1484  Netlogon - ok
14:17:39.0086 1484  [ 7CCCFCA7510684768DA22092D1FA4DB2 ] Netman          C:\Windows\System32\netman.dll
14:17:39.0148 1484  Netman - ok
14:17:39.0211 1484  [ D22CD77D4F0D63D1169BB35911BFF12D ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
14:17:39.0242 1484  NetMsmqActivator - ok
14:17:39.0242 1484  [ D22CD77D4F0D63D1169BB35911BFF12D ] NetPipeActivator C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
14:17:39.0258 1484  NetPipeActivator - ok
14:17:39.0273 1484  [ 8C338238C16777A802D6A9211EB2BA50 ] netprofm        C:\Windows\System32\netprofm.dll
14:17:39.0320 1484  netprofm - ok
14:17:39.0320 1484  [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpActivator C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
14:17:39.0336 1484  NetTcpActivator - ok
14:17:39.0336 1484  [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
14:17:39.0351 1484  NetTcpPortSharing - ok
14:17:39.0382 1484  [ 1D85C4B390B0EE09C7A46B91EFB2C097 ] nfrd960         C:\Windows\system32\DRIVERS\nfrd960.sys
14:17:39.0398 1484  nfrd960 - ok
14:17:39.0414 1484  [ 912084381D30D8B89EC4E293053F4710 ] NlaSvc          C:\Windows\System32\nlasvc.dll
14:17:39.0460 1484  NlaSvc - ok
14:17:39.0476 1484  [ 1DB262A9F8C087E8153D89BEF3D2235F ] Npfs            C:\Windows\system32\drivers\Npfs.sys
14:17:39.0507 1484  Npfs - ok
14:17:39.0554 1484  [ BA387E955E890C8A88306D9B8D06BF17 ] nsi             C:\Windows\system32\nsisvc.dll
14:17:39.0570 1484  nsi - ok
14:17:39.0585 1484  [ E9A0A4D07E53D8FEA2BB8387A3293C58 ] nsiproxy        C:\Windows\system32\drivers\nsiproxy.sys
14:17:39.0632 1484  nsiproxy - ok
14:17:39.0694 1484  [ 81189C3D7763838E55C397759D49007A ] Ntfs            C:\Windows\system32\drivers\Ntfs.sys
14:17:39.0757 1484  Ntfs - ok
14:17:39.0772 1484  [ F9756A98D69098DCA8945D62858A812C ] Null            C:\Windows\system32\drivers\Null.sys
14:17:39.0804 1484  Null - ok
14:17:39.0835 1484  [ B3E25EE28883877076E0E1FF877D02E0 ] nvraid          C:\Windows\system32\drivers\nvraid.sys
14:17:39.0850 1484  nvraid - ok
14:17:39.0882 1484  [ 4380E59A170D88C4F1022EFF6719A8A4 ] nvstor          C:\Windows\system32\drivers\nvstor.sys
14:17:39.0897 1484  nvstor - ok
14:17:39.0913 1484  [ 5A0983915F02BAE73267CC2A041F717D ] nv_agp          C:\Windows\system32\drivers\nv_agp.sys
14:17:39.0913 1484  nv_agp - ok
14:17:39.0928 1484  [ 08A70A1F2CDDE9BB49B885CB817A66EB ] ohci1394        C:\Windows\system32\drivers\ohci1394.sys
14:17:39.0960 1484  ohci1394 - ok
14:17:39.0991 1484  [ 82A8521DDC60710C3D3D3E7325209BEC ] p2pimsvc        C:\Windows\system32\pnrpsvc.dll
14:17:40.0053 1484  p2pimsvc - ok
14:17:40.0084 1484  [ 59C3DDD501E39E006DAC31BF55150D91 ] p2psvc          C:\Windows\system32\p2psvc.dll
14:17:40.0116 1484  p2psvc - ok
14:17:40.0162 1484  [ 2EA877ED5DD9713C5AC74E8EA7348D14 ] Parport         C:\Windows\system32\DRIVERS\parport.sys
14:17:40.0178 1484  Parport - ok
14:17:40.0209 1484  [ 3F34A1B4C5F6475F320C275E63AFCE9B ] partmgr         C:\Windows\system32\drivers\partmgr.sys
14:17:40.0225 1484  partmgr - ok
14:17:40.0256 1484  [ EB0A59F29C19B86479D36B35983DAADC ] Parvdm          C:\Windows\system32\DRIVERS\parvdm.sys
14:17:40.0272 1484  Parvdm - ok
14:17:40.0303 1484  [ 358AB7956D3160000726574083DFC8A6 ] PcaSvc          C:\Windows\System32\pcasvc.dll
14:17:40.0318 1484  PcaSvc - ok
14:17:40.0334 1484  [ 673E55C3498EB970088E812EA820AA8F ] pci             C:\Windows\system32\drivers\pci.sys
14:17:40.0365 1484  pci - ok
14:17:40.0381 1484  [ AFE86F419014DB4E5593F69FFE26CE0A ] pciide          C:\Windows\system32\drivers\pciide.sys
14:17:40.0396 1484  pciide - ok
14:17:40.0412 1484  [ F396431B31693E71E8A80687EF523506 ] pcmcia          C:\Windows\system32\DRIVERS\pcmcia.sys
14:17:40.0428 1484  pcmcia - ok
14:17:40.0443 1484  [ 250F6B43D2B613172035C6747AEEB19F ] pcw             C:\Windows\system32\drivers\pcw.sys
14:17:40.0474 1484  pcw - ok
14:17:40.0506 1484  [ 9E0104BA49F4E6973749A02BF41344ED ] PEAUTH          C:\Windows\system32\drivers\peauth.sys
14:17:40.0568 1484  PEAUTH - ok
14:17:40.0646 1484  [ 414BBA67A3DED1D28437EB66AEB8A720 ] pla             C:\Windows\system32\pla.dll
14:17:40.0708 1484  pla - ok
14:17:40.0771 1484  [ EC7BC28D207DA09E79B3E9FAF8B232CA ] PlugPlay        C:\Windows\system32\umpnpmgr.dll
14:17:40.0818 1484  PlugPlay - ok
14:17:40.0833 1484  [ 63FF8572611249931EB16BB8EED6AFC8 ] PNRPAutoReg     C:\Windows\system32\pnrpauto.dll
14:17:40.0864 1484  PNRPAutoReg - ok
14:17:40.0880 1484  [ 82A8521DDC60710C3D3D3E7325209BEC ] PNRPsvc         C:\Windows\system32\pnrpsvc.dll
14:17:40.0896 1484  PNRPsvc - ok
14:17:41.0005 1484  [ 53946B69BA0836BD95B03759530C81EC ] PolicyAgent     C:\Windows\System32\ipsecsvc.dll
14:17:41.0036 1484  PolicyAgent - ok
14:17:41.0083 1484  [ F87D30E72E03D579A5199CCB3831D6EA ] Power           C:\Windows\system32\umpo.dll
14:17:41.0130 1484  Power - ok
14:17:41.0161 1484  [ 631E3E205AD6D86F2AED6A4A8E69F2DB ] PptpMiniport    C:\Windows\system32\DRIVERS\raspptp.sys
14:17:41.0208 1484  PptpMiniport - ok
14:17:41.0223 1484  [ 85B1E3A0C7585BC4AAE6899EC6FCF011 ] Processor       C:\Windows\system32\DRIVERS\processr.sys
14:17:41.0254 1484  Processor - ok
14:17:41.0301 1484  [ CADEFAC453040E370A1BDFF3973BE00D ] ProfSvc         C:\Windows\system32\profsvc.dll
14:17:41.0364 1484  ProfSvc - ok
14:17:41.0379 1484  [ 81951F51E318AECC2D68559E47485CC4 ] ProtectedStorage C:\Windows\system32\lsass.exe
14:17:41.0395 1484  ProtectedStorage - ok
14:17:41.0410 1484  [ 6270CCAE2A86DE6D146529FE55B3246A ] Psched          C:\Windows\system32\DRIVERS\pacer.sys
14:17:41.0457 1484  Psched - ok
14:17:41.0520 1484  [ AB95ECF1F6659A60DDC166D8315B0751 ] ql2300          C:\Windows\system32\DRIVERS\ql2300.sys
14:17:41.0582 1484  ql2300 - ok
14:17:41.0598 1484  [ B4DD51DD25182244B86737DC51AF2270 ] ql40xx          C:\Windows\system32\DRIVERS\ql40xx.sys
14:17:41.0613 1484  ql40xx - ok
14:17:41.0644 1484  [ 31AC809E7707EB580B2BDB760390765A ] QWAVE           C:\Windows\system32\qwave.dll
14:17:41.0676 1484  QWAVE - ok
14:17:41.0691 1484  [ 584078CA1B95CA72DF2A27C336F9719D ] QWAVEdrv        C:\Windows\system32\drivers\qwavedrv.sys
14:17:41.0707 1484  QWAVEdrv - ok
14:17:41.0722 1484  [ 30A81B53C766D0133BB86D234E5556AB ] RasAcd          C:\Windows\system32\DRIVERS\rasacd.sys
14:17:41.0754 1484  RasAcd - ok
14:17:41.0769 1484  [ 57EC4AEF73660166074D8F7F31C0D4FD ] RasAgileVpn     C:\Windows\system32\DRIVERS\AgileVpn.sys
14:17:41.0800 1484  RasAgileVpn - ok
14:17:41.0847 1484  [ A60F1839849C0C00739787FD5EC03F13 ] RasAuto         C:\Windows\System32\rasauto.dll
14:17:41.0878 1484  RasAuto - ok
14:17:41.0894 1484  [ D9F91EAFEC2815365CBE6D167E4E332A ] Rasl2tp         C:\Windows\system32\DRIVERS\rasl2tp.sys
14:17:41.0925 1484  Rasl2tp - ok
14:17:41.0956 1484  [ CB9E04DC05EACF5B9A36CA276D475006 ] RasMan          C:\Windows\System32\rasmans.dll
14:17:42.0003 1484  RasMan - ok
14:17:42.0019 1484  [ 0FE8B15916307A6AC12BFB6A63E45507 ] RasPppoe        C:\Windows\system32\DRIVERS\raspppoe.sys
14:17:42.0034 1484  RasPppoe - ok
14:17:42.0081 1484  [ 44101F495A83EA6401D886E7FD70096B ] RasSstp         C:\Windows\system32\DRIVERS\rassstp.sys
14:17:42.0112 1484  RasSstp - ok
14:17:42.0144 1484  [ D528BC58A489409BA40334EBF96A311B ] rdbss           C:\Windows\system32\DRIVERS\rdbss.sys
14:17:42.0190 1484  rdbss - ok
14:17:42.0206 1484  [ 0D8F05481CB76E70E1DA06EE9F0DA9DF ] rdpbus          C:\Windows\system32\DRIVERS\rdpbus.sys
14:17:42.0237 1484  rdpbus - ok
14:17:42.0253 1484  [ 23DAE03F29D253AE74C44F99E515F9A1 ] RDPCDD          C:\Windows\system32\DRIVERS\RDPCDD.sys
14:17:42.0284 1484  RDPCDD - ok
14:17:42.0315 1484  [ 5A53CA1598DD4156D44196D200C94B8A ] RDPENCDD        C:\Windows\system32\drivers\rdpencdd.sys
14:17:42.0346 1484  RDPENCDD - ok
14:17:42.0362 1484  [ 44B0A53CD4F27D50ED461DAE0C0B4E1F ] RDPREFMP        C:\Windows\system32\drivers\rdprefmp.sys
14:17:42.0393 1484  RDPREFMP - ok
14:17:42.0440 1484  [ F031683E6D1FEA157ABB2FF260B51E61 ] RDPWD           C:\Windows\system32\drivers\RDPWD.sys
14:17:42.0502 1484  RDPWD - ok
14:17:42.0534 1484  [ 518395321DC96FE2C9F0E96AC743B656 ] rdyboost        C:\Windows\system32\drivers\rdyboost.sys
14:17:42.0549 1484  rdyboost - ok
14:17:42.0565 1484  [ 7B5E1419717FAC363A31CC302895217A ] RemoteAccess    C:\Windows\System32\mprdim.dll
14:17:42.0612 1484  RemoteAccess - ok
14:17:42.0627 1484  [ CB9A8683F4EF2BF99E123D79950D7935 ] RemoteRegistry  C:\Windows\system32\regsvc.dll
14:17:42.0658 1484  RemoteRegistry - ok
14:17:42.0690 1484  [ 78D072F35BC45D9E4E1B61895C152234 ] RpcEptMapper    C:\Windows\System32\RpcEpMap.dll
14:17:42.0721 1484  RpcEptMapper - ok
14:17:42.0736 1484  [ 94D36C0E44677DD26981D2BFEEF2A29D ] RpcLocator      C:\Windows\system32\locator.exe
14:17:42.0768 1484  RpcLocator - ok
14:17:42.0799 1484  [ 7660F01D3B38ACA1747E397D21D790AF ] RpcSs           C:\Windows\system32\rpcss.dll
14:17:42.0814 1484  RpcSs - ok
14:17:42.0846 1484  [ 032B0D36AD92B582D869879F5AF5B928 ] rspndr          C:\Windows\system32\DRIVERS\rspndr.sys
14:17:42.0877 1484  rspndr - ok
14:17:42.0892 1484  [ 81951F51E318AECC2D68559E47485CC4 ] SamSs           C:\Windows\system32\lsass.exe
14:17:42.0908 1484  SamSs - ok
14:17:42.0924 1484  [ 05D860DA1040F111503AC416CCEF2BCA ] sbp2port        C:\Windows\system32\drivers\sbp2port.sys
14:17:42.0939 1484  sbp2port - ok
14:17:42.0970 1484  [ 8FC518FFE9519C2631D37515A68009C4 ] SCardSvr        C:\Windows\System32\SCardSvr.dll
14:17:43.0002 1484  SCardSvr - ok
14:17:43.0017 1484  [ 0693B5EC673E34DC147E195779A4DCF6 ] scfilter        C:\Windows\system32\DRIVERS\scfilter.sys
14:17:43.0048 1484  scfilter - ok
14:17:43.0095 1484  [ A04BB13F8A72F8B6E8B4071723E4E336 ] Schedule        C:\Windows\system32\schedsvc.dll
14:17:43.0142 1484  Schedule - ok
14:17:43.0158 1484  [ 319C6B309773D063541D01DF8AC6F55F ] SCPolicySvc     C:\Windows\System32\certprop.dll
14:17:43.0189 1484  SCPolicySvc - ok
14:17:43.0204 1484  [ 08236C4BCE5EDD0A0318A438AF28E0F7 ] SDRSVC          C:\Windows\System32\SDRSVC.dll
14:17:43.0251 1484  SDRSVC - ok
14:17:43.0282 1484  [ 90A3935D05B494A5A39D37E71F09A677 ] secdrv          C:\Windows\system32\drivers\secdrv.sys
14:17:43.0314 1484  secdrv - ok
14:17:43.0329 1484  [ A59B3A4442C52060CC7A85293AA3546F ] seclogon        C:\Windows\system32\seclogon.dll
14:17:43.0376 1484  seclogon - ok
14:17:43.0407 1484  [ DCB7FCDCC97F87360F75D77425B81737 ] SENS            C:\Windows\System32\sens.dll
14:17:43.0438 1484  SENS - ok
14:17:43.0470 1484  [ 50087FE1EE447009C9CC2997B90DE53F ] SensrSvc        C:\Windows\system32\sensrsvc.dll
14:17:43.0516 1484  SensrSvc - ok
14:17:43.0532 1484  [ 9AD8B8B515E3DF6ACD4212EF465DE2D1 ] Serenum         C:\Windows\system32\DRIVERS\serenum.sys
14:17:43.0563 1484  Serenum - ok
14:17:43.0594 1484  [ 5FB7FCEA0490D821F26F39CC5EA3D1E2 ] Serial          C:\Windows\system32\DRIVERS\serial.sys
14:17:43.0610 1484  Serial - ok
14:17:43.0626 1484  [ 79BFFB520327FF916A582DFEA17AA813 ] sermouse        C:\Windows\system32\DRIVERS\sermouse.sys
14:17:43.0657 1484  sermouse - ok
14:17:43.0704 1484  [ 4AE380F39A0032EAB7DD953030B26D28 ] SessionEnv      C:\Windows\system32\sessenv.dll
14:17:43.0735 1484  SessionEnv - ok
14:17:43.0750 1484  [ 9F976E1EB233DF46FCE808D9DEA3EB9C ] sffdisk         C:\Windows\system32\drivers\sffdisk.sys
14:17:43.0766 1484  sffdisk - ok
14:17:43.0782 1484  [ 932A68EE27833CFD57C1639D375F2731 ] sffp_mmc        C:\Windows\system32\drivers\sffp_mmc.sys
14:17:43.0797 1484  sffp_mmc - ok
14:17:43.0797 1484  [ 6D4CCAEDC018F1CF52866BBBAA235982 ] sffp_sd         C:\Windows\system32\drivers\sffp_sd.sys
14:17:43.0828 1484  sffp_sd - ok
14:17:43.0844 1484  [ DB96666CC8312EBC45032F30B007A547 ] sfloppy         C:\Windows\system32\DRIVERS\sfloppy.sys
14:17:43.0860 1484  sfloppy - ok
14:17:43.0891 1484  [ D1A079A0DE2EA524513B6930C24527A2 ] SharedAccess    C:\Windows\System32\ipnathlp.dll
14:17:43.0953 1484  SharedAccess - ok
14:17:43.0969 1484  [ 414DA952A35BF5D50192E28263B40577 ] ShellHWDetection C:\Windows\System32\shsvcs.dll
14:17:44.0016 1484  ShellHWDetection - ok
14:17:44.0031 1484  [ 2565CAC0DC9FE0371BDCE60832582B2E ] sisagp          C:\Windows\system32\drivers\sisagp.sys
14:17:44.0047 1484  sisagp - ok
14:17:44.0062 1484  [ A9F0486851BECB6DDA1D89D381E71055 ] SiSRaid2        C:\Windows\system32\DRIVERS\SiSRaid2.sys
14:17:44.0078 1484  SiSRaid2 - ok
14:17:44.0094 1484  [ 3727097B55738E2F554972C3BE5BC1AA ] SiSRaid4        C:\Windows\system32\DRIVERS\sisraid4.sys
14:17:44.0109 1484  SiSRaid4 - ok
14:17:44.0156 1484  [ DDAA5F4A6B958FC313EBD02DD925752F ] SkypeUpdate     C:\Program Files\Skype\Updater\Updater.exe
14:17:44.0172 1484  SkypeUpdate - ok
14:17:44.0187 1484  [ 3E21C083B8A01CB70BA1F09303010FCE ] Smb             C:\Windows\system32\DRIVERS\smb.sys
14:17:44.0234 1484  Smb - ok
14:17:44.0281 1484  [ 6A984831644ECA1A33FFEAE4126F4F37 ] SNMPTRAP        C:\Windows\System32\snmptrap.exe
14:17:44.0296 1484  SNMPTRAP - ok
14:17:44.0328 1484  [ 95CF1AE7527FB70F7816563CBC09D942 ] spldr           C:\Windows\system32\drivers\spldr.sys
14:17:44.0328 1484  spldr - ok
14:17:44.0390 1484  [ 9AEA093B8F9C37CF45538382CABA2475 ] Spooler         C:\Windows\System32\spoolsv.exe
14:17:44.0452 1484  Spooler - ok
14:17:44.0546 1484  [ CF87A1DE791347E75B98885214CED2B8 ] sppsvc          C:\Windows\system32\sppsvc.exe
14:17:44.0640 1484  sppsvc - ok
14:17:44.0671 1484  [ B0180B20B065D89232A78A40FE56EAA6 ] sppuinotify     C:\Windows\system32\sppuinotify.dll
14:17:44.0702 1484  sppuinotify - ok
14:17:44.0733 1484  [ E4C2764065D66EA1D2D3EBC28FE99C46 ] srv             C:\Windows\system32\DRIVERS\srv.sys
14:17:44.0780 1484  srv - ok
14:17:44.0796 1484  [ 03F0545BD8D4C77FA0AE1CEEDFCC71AB ] srv2            C:\Windows\system32\DRIVERS\srv2.sys
14:17:44.0827 1484  srv2 - ok
14:17:44.0842 1484  [ BE6BD660CAA6F291AE06A718A4FA8ABC ] srvnet          C:\Windows\system32\DRIVERS\srvnet.sys
14:17:44.0858 1484  srvnet - ok
14:17:44.0905 1484  [ D887C9FD02AC9FA880F6E5027A43E118 ] SSDPSRV         C:\Windows\System32\ssdpsrv.dll
14:17:44.0936 1484  SSDPSRV - ok
14:17:44.0967 1484  [ D318F23BE45D5E3A107469EB64815B50 ] SstpSvc         C:\Windows\system32\sstpsvc.dll
14:17:44.0983 1484  SstpSvc - ok
14:17:45.0014 1484  [ DB32D325C192B801DF274BFD12A7E72B ] stexstor        C:\Windows\system32\DRIVERS\stexstor.sys
14:17:45.0030 1484  stexstor - ok
14:17:45.0061 1484  [ E1FB3706030FB4578A0D72C2FC3689E4 ] StiSvc          C:\Windows\System32\wiaservc.dll
14:17:45.0092 1484  StiSvc - ok
14:17:45.0123 1484  [ E58C78A848ADD9610A4DB6D214AF5224 ] swenum          C:\Windows\system32\drivers\swenum.sys
14:17:45.0123 1484  swenum - ok
14:17:45.0154 1484  [ A28BD92DF340E57B024BA433165D34D7 ] swprv           C:\Windows\System32\swprv.dll
14:17:45.0201 1484  swprv - ok
14:17:45.0248 1484  [ 36650D618CA34C9D357DFD3D89B2C56F ] SysMain         C:\Windows\system32\sysmain.dll
14:17:45.0295 1484  SysMain - ok
14:17:45.0310 1484  [ 763FECDC3D30C815FE72DD57936C6CD1 ] TabletInputService C:\Windows\System32\TabSvc.dll
14:17:45.0326 1484  TabletInputService - ok
14:17:45.0357 1484  [ 613BF4820361543956909043A265C6AC ] TapiSrv         C:\Windows\System32\tapisrv.dll
14:17:45.0388 1484  TapiSrv - ok
14:17:45.0388 1484  [ B799D9FDB26111737F58288D8DC172D9 ] TBS             C:\Windows\System32\tbssvc.dll
14:17:45.0435 1484  TBS - ok
14:17:45.0513 1484  [ A5EBB8F648000E88B7D9390B514976BF ] Tcpip           C:\Windows\system32\drivers\tcpip.sys
14:17:45.0607 1484  Tcpip - ok
14:17:45.0654 1484  [ A5EBB8F648000E88B7D9390B514976BF ] TCPIP6          C:\Windows\system32\DRIVERS\tcpip.sys
14:17:45.0685 1484  TCPIP6 - ok
14:17:45.0716 1484  [ CCA24162E055C3714CE5A88B100C64ED ] tcpipreg        C:\Windows\system32\drivers\tcpipreg.sys
14:17:45.0747 1484  tcpipreg - ok
14:17:45.0778 1484  [ 1CB91B2BD8F6DD367DFC2EF26FD751B2 ] TDPIPE          C:\Windows\system32\drivers\tdpipe.sys
14:17:45.0810 1484  TDPIPE - ok
14:17:45.0872 1484  [ 5A9715FCD237693631CA236E2AB319C2 ] TDslMgrService  C:\Program Files\T-Online\DSL-Manager\DslMgrSvc.exe
14:17:45.0903 1484  TDslMgrService ( UnsignedFile.Multi.Generic ) - warning
14:17:45.0903 1484  TDslMgrService - detected UnsignedFile.Multi.Generic (1)
14:17:45.0919 1484  [ 2C2C5AFE7EE4F620D69C23C0617651A8 ] TDTCP           C:\Windows\system32\drivers\tdtcp.sys
14:17:45.0919 1484  TDTCP - ok
14:17:45.0934 1484  [ B459575348C20E8121D6039DA063C704 ] tdx             C:\Windows\system32\DRIVERS\tdx.sys
14:17:45.0981 1484  tdx - ok
14:17:45.0997 1484  [ 04DBF4B01EA4BF25A9A3E84AFFAC9B20 ] TermDD          C:\Windows\system32\drivers\termdd.sys
14:17:46.0012 1484  TermDD - ok
14:17:46.0044 1484  [ 382C804C92811BE57829D8E550A900E2 ] TermService     C:\Windows\System32\termsrv.dll
14:17:46.0090 1484  TermService - ok
14:17:46.0106 1484  [ 42FB6AFD6B79D9FE07381609172E7CA4 ] Themes          C:\Windows\system32\themeservice.dll
14:17:46.0137 1484  Themes - ok
14:17:46.0153 1484  [ 146B6F43A673379A3C670E86D89BE5EA ] THREADORDER     C:\Windows\system32\mmcss.dll
14:17:46.0184 1484  THREADORDER - ok
14:17:46.0200 1484  [ 5AD05191DC8B444A7BA4D79B76C42A30 ] TPM             C:\Windows\system32\drivers\tpm.sys
14:17:46.0215 1484  TPM - ok
14:17:46.0246 1484  [ 4792C0378DB99A9BC2AE2DE6CFFF0C3A ] TrkWks          C:\Windows\System32\trkwks.dll
14:17:46.0278 1484  TrkWks - ok
14:17:46.0340 1484  [ 2C49B175AEE1D4364B91B531417FE583 ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
14:17:46.0371 1484  TrustedInstaller - ok
14:17:46.0402 1484  [ 254BB140EEE3C59D6114C1A86B636877 ] tssecsrv        C:\Windows\system32\DRIVERS\tssecsrv.sys
14:17:46.0449 1484  tssecsrv - ok
14:17:46.0465 1484  [ FD1D6C73E6333BE727CBCC6054247654 ] TsUsbFlt        C:\Windows\system32\drivers\tsusbflt.sys
14:17:46.0512 1484  TsUsbFlt - ok
14:17:46.0543 1484  [ B2FA25D9B17A68BB93D58B0556E8C90D ] tunnel          C:\Windows\system32\DRIVERS\tunnel.sys
14:17:46.0590 1484  tunnel - ok
14:17:46.0621 1484  [ 750FBCB269F4D7DD2E420C56B795DB6D ] uagp35          C:\Windows\system32\DRIVERS\uagp35.sys
14:17:46.0636 1484  uagp35 - ok
14:17:46.0652 1484  [ EE43346C7E4B5E63E54F927BABBB32FF ] udfs            C:\Windows\system32\DRIVERS\udfs.sys
14:17:46.0683 1484  udfs - ok
14:17:46.0730 1484  [ 8344FD4FCE927880AA1AA7681D4927E5 ] UI0Detect       C:\Windows\system32\UI0Detect.exe
14:17:46.0761 1484  UI0Detect - ok
14:17:46.0777 1484  [ 44E8048ACE47BEFBFDC2E9BE4CBC8880 ] uliagpkx        C:\Windows\system32\drivers\uliagpkx.sys
14:17:46.0792 1484  uliagpkx - ok
14:17:46.0808 1484  [ D295BED4B898F0FD999FCFA9B32B071B ] umbus           C:\Windows\system32\DRIVERS\umbus.sys
14:17:46.0839 1484  umbus - ok
14:17:46.0855 1484  [ 7550AD0C6998BA1CB4843E920EE0FEAC ] UmPass          C:\Windows\system32\DRIVERS\umpass.sys
14:17:46.0870 1484  UmPass - ok
14:17:46.0917 1484  [ 833FBB672460EFCE8011D262175FAD33 ] upnphost        C:\Windows\System32\upnphost.dll
14:17:46.0948 1484  upnphost - ok
14:17:46.0995 1484  [ 1D9F2BD026E8E2D45033A4DF3F16B78C ] usbaudio        C:\Windows\system32\drivers\usbaudio.sys
14:17:47.0026 1484  usbaudio - ok
14:17:47.0058 1484  [ BD9C55D7023C5DE374507ACC7A14E2AC ] usbccgp         C:\Windows\system32\DRIVERS\usbccgp.sys
14:17:47.0089 1484  usbccgp - ok
14:17:47.0104 1484  [ 04EC7CEC62EC3B6D9354EEE93327FC82 ] usbcir          C:\Windows\system32\drivers\usbcir.sys
14:17:47.0120 1484  usbcir - ok
14:17:47.0151 1484  [ F92DE757E4B7CE9C07C5E65423F3AE3B ] usbehci         C:\Windows\system32\DRIVERS\usbehci.sys
14:17:47.0167 1484  usbehci - ok
14:17:47.0182 1484  [ 8DC94AEC6A7E644A06135AE7506DC2E9 ] usbhub          C:\Windows\system32\DRIVERS\usbhub.sys
14:17:47.0198 1484  usbhub - ok
14:17:47.0229 1484  [ E185D44FAC515A18D9DEDDC23C2CDF44 ] usbohci         C:\Windows\system32\DRIVERS\usbohci.sys
14:17:47.0245 1484  usbohci - ok
14:17:47.0276 1484  [ 797D862FE0875E75C7CC4C1AD7B30252 ] usbprint        C:\Windows\system32\DRIVERS\usbprint.sys
14:17:47.0292 1484  usbprint - ok
14:17:47.0307 1484  [ F991AB9CC6B908DB552166768176896A ] USBSTOR         C:\Windows\system32\DRIVERS\USBSTOR.SYS
14:17:47.0354 1484  USBSTOR - ok
14:17:47.0370 1484  [ 78780C3EBCE17405B1CCD07A3A8A7D72 ] usbuhci         C:\Windows\system32\DRIVERS\usbuhci.sys
14:17:47.0401 1484  usbuhci - ok
14:17:47.0432 1484  [ 081E6E1C91AEC36758902A9F727CD23C ] UxSms           C:\Windows\System32\uxsms.dll
14:17:47.0463 1484  UxSms - ok
14:17:47.0479 1484  [ 81951F51E318AECC2D68559E47485CC4 ] VaultSvc        C:\Windows\system32\lsass.exe
14:17:47.0494 1484  VaultSvc - ok
14:17:47.0510 1484  [ A059C4C3EDB09E07D21A8E5C0AABD3CB ] vdrvroot        C:\Windows\system32\drivers\vdrvroot.sys
14:17:47.0526 1484  vdrvroot - ok
14:17:47.0572 1484  [ C3CD30495687C2A2F66A65CA6FD89BE9 ] vds             C:\Windows\System32\vds.exe
14:17:47.0604 1484  vds - ok
14:17:47.0635 1484  [ 17C408214EA61696CEC9C66E388B14F3 ] vga             C:\Windows\system32\DRIVERS\vgapnp.sys
14:17:47.0666 1484  vga - ok
14:17:47.0682 1484  [ 8E38096AD5C8570A6F1570A61E251561 ] VgaSave         C:\Windows\System32\drivers\vga.sys
14:17:47.0697 1484  VgaSave - ok
14:17:47.0744 1484  [ 5461686CCA2FDA57B024547733AB42E3 ] vhdmp           C:\Windows\system32\drivers\vhdmp.sys
14:17:47.0775 1484  vhdmp - ok
14:17:47.0791 1484  [ C829317A37B4BEA8F39735D4B076E923 ] viaagp          C:\Windows\system32\drivers\viaagp.sys
14:17:47.0806 1484  viaagp - ok
14:17:47.0822 1484  [ E02F079A6AA107F06B16549C6E5C7B74 ] ViaC7           C:\Windows\system32\DRIVERS\viac7.sys
14:17:47.0853 1484  ViaC7 - ok
14:17:47.0869 1484  [ E43574F6A56A0EE11809B48C09E4FD3C ] viaide          C:\Windows\system32\drivers\viaide.sys
14:17:47.0884 1484  viaide - ok
14:17:47.0900 1484  [ 4C63E00F2F4B5F86AB48A58CD990F212 ] volmgr          C:\Windows\system32\drivers\volmgr.sys
14:17:47.0916 1484  volmgr - ok
14:17:47.0931 1484  [ B5BB72067DDDDBBFB04B2F89FF8C3C87 ] volmgrx         C:\Windows\system32\drivers\volmgrx.sys
14:17:47.0947 1484  volmgrx - ok
14:17:47.0978 1484  [ F497F67932C6FA693D7DE2780631CFE7 ] volsnap         C:\Windows\system32\drivers\volsnap.sys
14:17:47.0994 1484  volsnap - ok
14:17:48.0025 1484  [ 9DFA0CC2F8855A04816729651175B631 ] vsmraid         C:\Windows\system32\DRIVERS\vsmraid.sys
14:17:48.0040 1484  vsmraid - ok
14:17:48.0103 1484  [ 209A3B1901B83AEB8527ED211CCE9E4C ] VSS             C:\Windows\system32\vssvc.exe
14:17:48.0165 1484  VSS - ok
14:17:48.0181 1484  [ 90567B1E658001E79D7C8BBD3DDE5AA6 ] vwifibus        C:\Windows\System32\drivers\vwifibus.sys
14:17:48.0196 1484  vwifibus - ok
14:17:48.0212 1484  [ 55187FD710E27D5095D10A472C8BAF1C ] W32Time         C:\Windows\system32\w32time.dll
14:17:48.0259 1484  W32Time - ok
14:17:48.0290 1484  [ DE3721E89C653AA281428C8A69745D90 ] WacomPen        C:\Windows\system32\DRIVERS\wacompen.sys
14:17:48.0306 1484  WacomPen - ok
14:17:48.0337 1484  [ 3C3C78515F5AB448B022BDF5B8FFDD2E ] WANARP          C:\Windows\system32\DRIVERS\wanarp.sys
14:17:48.0352 1484  WANARP - ok
14:17:48.0352 1484  [ 3C3C78515F5AB448B022BDF5B8FFDD2E ] Wanarpv6        C:\Windows\system32\DRIVERS\wanarp.sys
14:17:48.0384 1484  Wanarpv6 - ok
14:17:48.0430 1484  [ 691E3285E53DCA558E1A84667F13E15A ] wbengine        C:\Windows\system32\wbengine.exe
14:17:48.0493 1484  wbengine - ok
14:17:48.0524 1484  [ 9614B5D29DC76AC3C29F6D2D3AA70E67 ] WbioSrvc        C:\Windows\System32\wbiosrvc.dll
14:17:48.0555 1484  WbioSrvc - ok
14:17:48.0586 1484  [ 34EEE0DFAADB4F691D6D5308A51315DC ] wcncsvc         C:\Windows\System32\wcncsvc.dll
14:17:48.0633 1484  wcncsvc - ok
14:17:48.0664 1484  [ 5D930B6357A6D2AF4D7653BDABBF352F ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
14:17:48.0711 1484  WcsPlugInService - ok
14:17:48.0727 1484  [ 1112A9BADACB47B7C0BB0392E3158DFF ] Wd              C:\Windows\system32\DRIVERS\wd.sys
14:17:48.0742 1484  Wd - ok
14:17:48.0774 1484  [ 9950E3D0F08141C7E89E64456AE7DC73 ] Wdf01000        C:\Windows\system32\drivers\Wdf01000.sys
14:17:48.0805 1484  Wdf01000 - ok
14:17:48.0820 1484  [ 46EF9DC96265FD0B423DB72E7C38C2A5 ] WdiServiceHost  C:\Windows\system32\wdi.dll
14:17:48.0883 1484  WdiServiceHost - ok
14:17:48.0883 1484  [ 46EF9DC96265FD0B423DB72E7C38C2A5 ] WdiSystemHost   C:\Windows\system32\wdi.dll
14:17:48.0898 1484  WdiSystemHost - ok
14:17:48.0930 1484  [ A9D880F97530D5B8FEE278923349929D ] WebClient       C:\Windows\System32\webclnt.dll
14:17:48.0976 1484  WebClient - ok
14:17:48.0992 1484  [ 760F0AFE937A77CFF27153206534F275 ] Wecsvc          C:\Windows\system32\wecsvc.dll
14:17:49.0023 1484  Wecsvc - ok
14:17:49.0023 1484  [ AC804569BB2364FB6017370258A4091B ] wercplsupport   C:\Windows\System32\wercplsupport.dll
14:17:49.0070 1484  wercplsupport - ok
14:17:49.0101 1484  [ 08E420D873E4FD85241EE2421B02C4A4 ] WerSvc          C:\Windows\System32\WerSvc.dll
14:17:49.0148 1484  WerSvc - ok
14:17:49.0179 1484  [ 8B9A943F3B53861F2BFAF6C186168F79 ] WfpLwf          C:\Windows\system32\DRIVERS\wfplwf.sys
14:17:49.0210 1484  WfpLwf - ok
14:17:49.0226 1484  [ 5CF95B35E59E2A38023836FFF31BE64C ] WIMMount        C:\Windows\system32\drivers\wimmount.sys
14:17:49.0242 1484  WIMMount - ok
14:17:49.0304 1484  [ 3FAE8F94296001C32EAB62CD7D82E0FD ] WinDefend       C:\Program Files\Windows Defender\mpsvc.dll
14:17:49.0366 1484  WinDefend - ok
14:17:49.0382 1484  WinHttpAutoProxySvc - ok
14:17:49.0444 1484  [ F62E510B6AD4C21EB9FE8668ED251826 ] Winmgmt         C:\Windows\system32\wbem\WMIsvc.dll
14:17:49.0476 1484  Winmgmt - ok
14:17:49.0538 1484  [ 1B91CD34EA3A90AB6A4EF0550174F4CC ] WinRM           C:\Windows\system32\WsmSvc.dll
14:17:49.0616 1484  WinRM - ok
14:17:49.0678 1484  [ 16935C98FF639D185086A3529B1F2067 ] Wlansvc         C:\Windows\System32\wlansvc.dll
14:17:49.0725 1484  Wlansvc - ok
14:17:49.0756 1484  [ 0217679B8FCA58714C3BF2726D2CA84E ] WmiAcpi         C:\Windows\system32\drivers\wmiacpi.sys
14:17:49.0788 1484  WmiAcpi - ok
14:17:49.0803 1484  [ 6EB6B66517B048D87DC1856DDF1F4C3F ] wmiApSrv        C:\Windows\system32\wbem\WmiApSrv.exe
14:17:49.0834 1484  wmiApSrv - ok
14:17:49.0912 1484  [ 3B40D3A61AA8C21B88AE57C58AB3122E ] WMPNetworkSvc   C:\Program Files\Windows Media Player\wmpnetwk.exe
14:17:49.0990 1484  WMPNetworkSvc - ok
14:17:50.0022 1484  [ A2F0EC770A92F2B3F9DE6D518E11409C ] WPCSvc          C:\Windows\System32\wpcsvc.dll
14:17:50.0053 1484  WPCSvc - ok
14:17:50.0068 1484  [ AA53356D60AF47EACC85BC617A4F3F66 ] WPDBusEnum      C:\Windows\system32\wpdbusenum.dll
14:17:50.0100 1484  WPDBusEnum - ok
14:17:50.0115 1484  [ 6DB3276587B853BF886B69528FDB048C ] ws2ifsl         C:\Windows\system32\drivers\ws2ifsl.sys
14:17:50.0162 1484  ws2ifsl - ok
14:17:50.0178 1484  [ 6F5D49EFE0E7164E03AE773A3FE25340 ] wscsvc          C:\Windows\System32\wscsvc.dll
14:17:50.0209 1484  wscsvc - ok
14:17:50.0209 1484  WSearch - ok
14:17:50.0349 1484  [ FC3EC24FCE372C89423E015A2AC1A31E ] wuauserv        C:\Windows\system32\wuaueng.dll
14:17:50.0412 1484  wuauserv - ok
14:17:50.0427 1484  [ E714A1C0354636837E20CCBF00888EE7 ] WudfPf          C:\Windows\system32\drivers\WudfPf.sys
14:17:50.0458 1484  WudfPf - ok
14:17:50.0490 1484  [ 1023EE888C9B47178C5293ED5336AB69 ] WUDFRd          C:\Windows\system32\DRIVERS\WUDFRd.sys
14:17:50.0521 1484  WUDFRd - ok
14:17:50.0568 1484  [ 8D1E1E529A2C9E9B6A85B55A345F7629 ] wudfsvc         C:\Windows\System32\WUDFSvc.dll
14:17:50.0583 1484  wudfsvc - ok
14:17:50.0614 1484  [ FF2D745B560F7C71B31F30F4D49F73D2 ] WwanSvc         C:\Windows\System32\wwansvc.dll
14:17:50.0646 1484  WwanSvc - ok
14:17:50.0661 1484  ================ Scan global ===============================
14:17:50.0677 1484  [ DAB748AE0439955ED2FA22357533DDDB ] C:\Windows\system32\basesrv.dll
14:17:50.0708 1484  [ 183B4188D5D91B271613EC3EFD1B3CEF ] C:\Windows\system32\winsrv.dll
14:17:50.0708 1484  [ 183B4188D5D91B271613EC3EFD1B3CEF ] C:\Windows\system32\winsrv.dll
14:17:50.0739 1484  [ 364455805E64882844EE9ACB72522830 ] C:\Windows\system32\sxssrv.dll
14:17:50.0755 1484  [ 5F1B6A9C35D3D5CA72D6D6FDEF9747D6 ] C:\Windows\system32\services.exe
14:17:50.0755 1484  [Global] - ok
14:17:50.0755 1484  ================ Scan MBR ==================================
14:17:50.0770 1484  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
14:17:50.0989 1484  \Device\Harddisk0\DR0 - ok
14:17:50.0989 1484  ================ Scan VBR ==================================
14:17:50.0989 1484  [ D037C6220EF88790B9AFB3B370B435EC ] \Device\Harddisk0\DR0\Partition1
14:17:50.0989 1484  \Device\Harddisk0\DR0\Partition1 - ok
14:17:51.0020 1484  [ D353CF2CA6FE97CBBF0EBD110B8F58AF ] \Device\Harddisk0\DR0\Partition2
14:17:51.0036 1484  \Device\Harddisk0\DR0\Partition2 - ok
14:17:51.0036 1484  ============================================================
14:17:51.0036 1484  Scan finished
14:17:51.0036 1484  ============================================================
14:17:51.0051 2124  Detected object count: 2
14:17:51.0051 2124  Actual detected object count: 2
14:18:06.0308 2124  FirebirdServerMAGIXInstance ( UnsignedFile.Multi.Generic ) - skipped by user
14:18:06.0308 2124  FirebirdServerMAGIXInstance ( UnsignedFile.Multi.Generic ) - User select action: Skip 
14:18:06.0308 2124  TDslMgrService ( UnsignedFile.Multi.Generic ) - skipped by user
14:18:06.0308 2124  TDslMgrService ( UnsignedFile.Multi.Generic ) - User select action: Skip
         

Kurzfassung: 2 Sachen gefunden. FirebirdServerMAGIXInstance sollte ne Falschmeldung sein, TDslMgrService kenne ich nicht.
MFG, Juri9

TDslMgrService kenne ich nicht.

Sollte von der Telekom-Software sein => TDSL Manager Service

Dann bitte jetzt CF ausführen:

ComboFix

Ein Leitfaden und Tutorium zur Nutzung von ComboFix

• Lade dir ComboFix hier herunter auf deinen Desktop.

• Schliesse alle Programme, vor allem dein Antivirenprogramm und andere Hintergrundwächter sowie deinen Internetbrowser.

• Starte combofix.exe von deinem Desktop aus, bestätige die Warnmeldungen, führe die Updates durch (falls vorgeschlagen), installiere die Wiederherstellungskonsole (falls vorgeschlagen) und lass dein System durchsuchen.
  Vermeide es auch während Combofix läuft die Maus und Tastatur zu benutzen.

• Im Anschluss öffnet sich automatisch eine combofix.txt, diesen Inhalt bitte kopieren ([Strg]a, [Strg]c) und in deinen Beitrag einfügen ([Strg]v). Die Datei findest du außerdem unter: C:\ComboFix.txt.

Wichtiger Hinweis:

Combofix darf ausschließlich ausgeführt werden, wenn ein Kompetenzler dies ausdrücklich empfohlen hat!

Es sollte nie auf eigene Initiative hin ausgeführt werden! Eine falsche Benutzung kann ernsthafte Computerprobleme nach sich ziehen und eine Bereinigung der Infektion noch erschweren.

Solltest du nach der Ausführung von Combofix Probleme beim Starten von Anwendungen haben und Meldungen erhalten wie

Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.

startest du Windows dann manuell neu und die Fehlermeldungen sollten nicht mehr auftauchen.

ComboFix 12-09-23.02 - Sibert 23.09.2012  12:18:40.1.2 - x86
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.49.1031.18.767.214 [GMT 2:00]
ausgeführt von:: c:\users\Sibert\Desktop\ComboFix.exe
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\Sibert\MagicLauncher.exe
c:\users\Sibert\Minecraft.exe
c:\users\Sibert\Nintendo_History_ScreenSaver_setup.exe
.
.
(((((((((((((((((((((((   Dateien erstellt von 2012-08-23 bis 2012-09-23  ))))))))))))))))))))))))))))))
.
.
2012-09-23 10:24 . 2012-09-23 10:24	--------	d-----w-	c:\users\Sibert\AppData\Local\temp
2012-09-23 10:24 . 2012-09-23 10:24	--------	d-----w-	c:\users\Default\AppData\Local\temp
2012-09-23 10:23 . 2012-09-23 10:23	56200	----a-w-	c:\programdata\Microsoft\Windows Defender\Definition Updates\{42CC3148-C95B-4D1C-BCBE-DC5BABD2E26E}\offreg.dll
2012-09-21 09:42 . 2012-08-30 08:17	6980552	----a-w-	c:\programdata\Microsoft\Windows Defender\Definition Updates\{42CC3148-C95B-4D1C-BCBE-DC5BABD2E26E}\mpengine.dll
2012-09-20 12:16 . 2012-09-20 12:16	--------	d-----w-	C:\_OTL
2012-09-12 08:42 . 2012-08-22 17:16	712048	----a-w-	c:\windows\system32\drivers\ndis.sys
2012-09-12 08:42 . 2012-08-22 17:16	1292144	----a-w-	c:\windows\system32\drivers\tcpip.sys
2012-09-12 08:42 . 2012-08-22 17:16	240496	----a-w-	c:\windows\system32\drivers\netio.sys
2012-09-12 08:42 . 2012-08-22 17:16	187760	----a-w-	c:\windows\system32\drivers\FWPKCLNT.SYS
2012-09-12 08:42 . 2012-07-04 19:45	33280	----a-w-	c:\windows\system32\drivers\RNDISMP.sys
2012-09-12 08:42 . 2012-08-02 16:57	490496	----a-w-	c:\windows\system32\d3d10level9.dll
2012-09-07 13:21 . 2012-09-07 13:21	--------	d-----w-	c:\program files\ESET
2012-09-03 14:10 . 2012-09-03 14:12	--------	d-----w-	c:\users\Sibert\MBAM Logs
2012-08-28 14:10 . 2012-08-28 14:11	--------	d-----w-	c:\users\Sibert\.idlerc
2012-08-28 14:06 . 2012-08-28 14:11	--------	d-----w-	C:\Python32
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-08-28 18:24 . 2012-05-05 10:52	477168	----a-w-	c:\windows\system32\npdeployJava1.dll
2012-08-28 18:24 . 2012-05-05 10:52	473072	----a-w-	c:\windows\system32\deployJava1.dll
2012-08-16 10:09 . 2012-07-24 05:17	426184	----a-w-	c:\windows\system32\FlashPlayerApp.exe
2012-08-16 10:09 . 2012-06-29 11:24	70344	----a-w-	c:\windows\system32\FlashPlayerCPLApp.cpl
2012-07-18 17:47 . 2012-08-16 09:50	2345984	----a-w-	c:\windows\system32\win32k.sys
2012-07-04 21:14 . 2012-08-16 09:50	41984	----a-w-	c:\windows\system32\browcli.dll
2012-07-04 21:14 . 2012-08-16 09:50	102912	----a-w-	c:\windows\system32\browser.dll
2012-07-04 06:58 . 2012-07-04 06:58	10070016	----a-w-	c:\windows\system32\drivers\atikmdag.sys
2012-07-04 06:35 . 2012-07-04 06:35	19586048	----a-w-	c:\windows\system32\atioglxx.dll
2012-07-04 06:27 . 2012-07-04 06:27	159744	----a-w-	c:\windows\system32\atiapfxx.exe
2012-07-04 06:27 . 2011-06-27 19:49	918528	----a-w-	c:\windows\system32\aticfx32.dll
2012-07-04 06:21 . 2012-07-04 06:21	442368	----a-w-	c:\windows\system32\ATIDEMGX.dll
2012-07-04 06:21 . 2012-07-04 06:21	453632	----a-w-	c:\windows\system32\atieclxx.exe
2012-07-04 06:20 . 2012-07-04 06:20	217088	----a-w-	c:\windows\system32\atiesrxx.exe
2012-07-04 06:19 . 2012-07-04 06:19	163840	----a-w-	c:\windows\system32\atitmmxx.dll
2012-07-04 06:19 . 2012-07-04 06:19	20992	----a-w-	c:\windows\system32\atimuixx.dll
2012-07-04 06:19 . 2012-07-04 06:19	43520	----a-w-	c:\windows\system32\ati2edxx.dll
2012-07-04 06:18 . 2009-08-18 00:31	6811648	----a-w-	c:\windows\system32\atidxx32.dll
2012-07-04 05:36 . 2012-07-04 05:36	58368	----a-w-	c:\windows\system32\coinst_8.97.100.3.dll
2012-07-04 05:36 . 2012-07-04 05:36	1960960	----a-w-	c:\windows\system32\atiumdmv.dll
2012-07-04 05:35 . 2011-06-27 19:17	6245888	----a-w-	c:\windows\system32\atiumdag.dll
2012-07-04 05:28 . 2011-06-27 19:17	4749312	----a-w-	c:\windows\system32\atiumdva.dll
2012-07-04 05:11 . 2012-07-04 05:11	56832	----a-w-	c:\windows\system32\atimpc32.dll
2012-07-04 05:11 . 2012-07-04 05:11	56832	----a-w-	c:\windows\system32\amdpcom32.dll
2012-07-04 05:11 . 2012-07-04 05:11	364544	----a-w-	c:\windows\system32\atiadlxx.dll
2012-07-04 05:11 . 2012-07-04 05:11	14848	----a-w-	c:\windows\system32\atiglpxx.dll
2012-07-04 05:11 . 2012-07-04 05:11	33280	----a-w-	c:\windows\system32\atigktxx.dll
2012-07-04 05:10 . 2012-07-04 05:10	290304	----a-w-	c:\windows\system32\drivers\atikmpag.sys
2012-07-04 05:09 . 2011-06-27 19:01	42496	----a-w-	c:\windows\system32\atiuxpag.dll
2012-07-04 05:09 . 2011-06-27 19:01	32768	----a-w-	c:\windows\system32\atiu9pag.dll
2012-07-04 05:09 . 2012-07-04 05:09	53248	----a-w-	c:\windows\system32\drivers\ati2erec.dll
2012-07-04 05:04 . 2012-07-04 05:04	46080	----a-w-	c:\windows\system32\aticalrt.dll
2012-07-04 05:04 . 2012-07-04 05:04	44544	----a-w-	c:\windows\system32\aticalcl.dll
2012-07-04 04:59 . 2012-07-04 04:59	13402112	----a-w-	c:\windows\system32\aticaldd.dll
2012-07-04 00:32 . 2012-07-04 00:32	159232	----a-w-	c:\windows\system32\clinfo.exe
2012-07-04 00:32 . 2012-07-04 00:32	65024	----a-w-	c:\windows\system32\OpenVideo.dll
2012-07-04 00:31 . 2012-07-04 00:31	56320	----a-w-	c:\windows\system32\OVDecode.dll
2012-07-04 00:30 . 2012-07-04 00:30	13008384	----a-w-	c:\windows\system32\amdocl.dll
2012-07-04 00:30 . 2012-07-04 00:30	50176	----a-w-	c:\windows\system32\OpenCL.dll
2012-07-03 11:46 . 2012-06-29 13:07	22344	----a-w-	c:\windows\system32\drivers\mbam.sys
2012-06-25 14:04 . 2012-06-25 14:04	1394248	----a-w-	c:\windows\system32\msxml4.dll
2012-07-14 00:15 . 2012-07-25 14:49	136672	----a-w-	c:\program files\mozilla firefox\components\browsercomps.dll
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"puush"="c:\program files\puush\puush.exe" [2012-07-18 565480]
"HydraVisionDesktopManager"="c:\program files\ATI Technologies\HydraVision\HydraDM.exe" [2012-04-05 393216]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AMD AVT"="start AMD Accelerated Video Transcoding device initialization" [X]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2012-01-18 254696]
"TrayServer"="c:\progra~1\MAGIX\VIDEO_~1\TrayServer_de.exe" [2008-08-07 90112]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-07-27 919008]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2012-07-04 641704]
.
c:\users\Sibert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
DSL-Manager.lnk - c:\program files\T-Online\DSL-Manager\DslMgr.exe [2012-5-5 1085440]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
FILSHtray.lnk - c:\program files\FILSHtray\FILSHtray.exe [2012-4-18 594432]
.
c:\users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
DSL-Manager.lnk - c:\program files\T-Online\DSL-Manager\DslMgr.exe [2012-5-5 1085440]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
R2 Ca1528av;SPCA1528 Video Camera Service;c:\windows\system32\Drivers\Ca1528av.sys [x]
R2 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [x]
R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [x]
R3 Bulk1528;SPCA1528 Still Camera Service;c:\windows\system32\Drivers\Bulk1528.sys [x]
R3 FirebirdServerMAGIXInstance;Firebird Server - MAGIX Instance;c:\program files\Common Files\MAGIX Services\Database\bin\fbserver.exe [x]
R3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files\Mozilla Maintenance Service\maintenanceservice.exe [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
S1 DslMNLwf;DSL-Manager NDIS LightWeight Filter;c:\windows\system32\DRIVERS\dslmnlwf.sys [x]
S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files\Common Files\Adobe\ARM\1.0\armsvc.exe [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [x]
S2 AMD FUEL Service;AMD FUEL Service;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [x]
S2 Fabs;FABS - Helping agent for MAGIX media database;c:\program files\Common Files\MAGIX Services\Database\bin\FABS.exe [x]
S3 amdiox86;AMD IO Driver;c:\windows\system32\DRIVERS\amdiox86.sys [x]
S3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atikmdag.sys [x]
S3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [x]
S3 TDslMgrService;DSL-Manager;c:\program files\T-Online\DSL-Manager\DslMgrSvc.exe [x]
.
.
Inhalt des "geplante Tasks" Ordners
.
2012-09-21 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-07-24 10:09]
.
2012-09-21 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2136076275-3314329802-1407441424-1003Core.job
- c:\users\Sibert\AppData\Local\Google\Update\GoogleUpdate.exe [2012-05-05 10:06]
.
2012-09-23 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2136076275-3314329802-1407441424-1003UA.job
- c:\users\Sibert\AppData\Local\Google\Update\GoogleUpdate.exe [2012-05-05 10:06]
.
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = hxxp://www.google.de/
IE: Free YouTube Download - c:\users\Sibert\AppData\Roaming\DVDVideoSoftIEHelpers\freeytvdownloader.htm
IE: Free YouTube to MP3 Converter - c:\users\Sibert\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm
TCP: DhcpNameServer = 192.168.2.1
FF - ProfilePath - c:\users\Sibert\AppData\Roaming\Mozilla\Firefox\Profiles\sqa5tij2.default\
FF - prefs.js: browser.startup.homepage - hxxps://www.google.de/
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2012-09-23  12:26:40
ComboFix-quarantined-files.txt  2012-09-23 10:26
.
Vor Suchlauf: 9 Verzeichnis(se), 23.196.762.112 Bytes frei
Nach Suchlauf: 13 Verzeichnis(se), 22.970.519.552 Bytes frei
.
- - End Of File - - 0F1FDB1F4CB1A2AD6102F8F61A10A1B8
         

. . .
Ähm... kleine Frage. Warum steht am Anfang:

(((((((((((((((((((((((((((((((((((( Weitere Löschungen ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\Sibert\MagicLauncher.exe
c:\users\Sibert\Minecraft.exe
c:\users\Sibert\Nintendo_History_ScreenSaver_setup.exe

? Warum wurde das denn jetzt gelöscht? Die Dateien sind doch völlig in Ordnung!
MFG, Juri9

Vermutlich mag CF keine EXE-Dateien direkt im Userprofil!

Bitte nun Logs mit GMER und OSAM erstellen und posten.
GMER stürzt häufiger ab, wenn das Tool auch beim 2. Mal nicht will, lass es einfach weg und führ nur OSAM aus - die Online-Abfrage durch OSAM bitte überspringen.
Bei OSAM bitte darauf auch achten, dass Du das Log auch als *.log und nicht *.html oder so abspeicherst.

Hinweis: Zum Entpacken von OSAM bitte WinRAR oder 7zip verwenden! Stell auch unbedingt den Virenscanner ab, besonders der Scanner von McAfee meldet oft einen Fehalarm in OSAM!

Downloade dir bitte aswMBR.exe und speichere die Datei auf deinem Desktop.

• Starte die aswMBR.exe - (aswMBR.exe Anleitung)
  Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten".
• Das Tool wird dich fragen, ob Du mit der aktuellen Virendefinition von AVAST! dein System scannen willst. Beantworte diese Frage bitte mit Ja. (Sollte deine Firewall fragen, bitte den Zugriff auf das Internet zulassen )
  Der Download der Definitionen kann je nach Verbindung eine Weile dauern.
  
• Klicke auf Scan.
• Warte bitte bis Scan finished successfully im DOS-Fenster steht.
• Drücke auf Save Log und speichere diese auf dem Desktop.

Poste mir die aswMBR.txt in deiner nächsten Antwort.

Wichtig: Drücke keinesfalls einen der Fix Buttons ohne Anweisung

Hinweis: Sollte der Scan Button ausgeblendet sein, schließe das Tool und starte es erneut. Sollte der Scan abbrechen und das Programm abstürzen, dann teile mir das mit und wähle unter AV Scan die Einstellung (none).



Noch ein Hinweis: Sollte aswMBR abstürzen und es kommt eine Meldung wie "aswMBR.exe funktioniert nicht mehr, dann mach Folgendes:
Starte aswMBR neu, wähle unten links im Drop-Down-Menü (unten links im Fenster von aswMBR) bei "AV scan" (none) aus und klick nochmal auf den Scan-Button.

So. GMER und OSAM sind fertig, da poste ich die Logs schon mal. Etwas später kommt dann aswMBR.

GMER-Log:

GMER 1.0.15.15641 - hxxp://www.gmer.net
Rootkit scan 2012-09-25 16:58:22
Windows 6.1.7601 Service Pack 1 Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0 ST380815AS rev.3.CHH
Running: 1uztujvs.exe; Driver: C:\Users\Sibert\AppData\Local\Temp\kwliqpow.sys


---- Kernel code sections - GMER 1.0.15 ----

.text           ntkrnlpa.exe!ZwRollbackEnlistment + 140D  82A503C9 1 Byte  [06]
.text           ntkrnlpa.exe!KiDispatchInterrupt + 5A2    82A89D52 19 Bytes  [E0, 0F, BA, F0, 07, 73, 09, ...] {LOOPNZ 0x11; MOV EDX, 0x97307f0; MOV CR4, EAX; OR AL, 0x80; MOV CR4, EAX; RET ; MOV ECX, CR3}
.text           C:\Windows\system32\DRIVERS\atikmdag.sys  section is writeable [0x8C410000, 0x2BFBF0, 0xE8000020]

---- Devices - GMER 1.0.15 ----

Device          \Driver\ACPI_HAL \Device\00000042         halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation)

AttachedDevice  \Driver\volmgr \Device\HarddiskVolume1    fvevol.sys (BitLocker Drive Encryption Driver/Microsoft Corporation)
AttachedDevice  \Driver\volmgr \Device\HarddiskVolume1    rdyboost.sys (ReadyBoost Driver/Microsoft Corporation)
AttachedDevice  \Driver\volmgr \Device\HarddiskVolume2    fvevol.sys (BitLocker Drive Encryption Driver/Microsoft Corporation)
AttachedDevice  \Driver\volmgr \Device\HarddiskVolume2    rdyboost.sys (ReadyBoost Driver/Microsoft Corporation)

---- EOF - GMER 1.0.15 ----
         

OSAM-Log:

Report of OSAM: Autorun Manager v5.0.11926.0
hxxp://www.online-solutions.ru/en/
Saved at 17:13:39 on 25.09.2012

OS: Windows 7 Home Premium Edition Service Pack 1 (Build 7601), 32-bit
Default Browser: Google Inc. Google Chrome 21.0.1180.89

Scanner Settings
[x] Rootkits detection (hidden registry)
[x] Rootkits detection (hidden files)
[x] Retrieve files information
[x] Check Microsoft signatures

Filters
[ ] Trusted entries
[ ] Empty entries
[x] Hidden registry entries (rootkit activity)
[x] Exclusively opened files
[x] Not found files
[x] Files without detailed information
[x] Existing files
[ ] Non-startable services
[ ] Non-startable drivers
[x] Active entries
[x] Disabled entries


[Common]
-----( %SystemRoot%\Tasks )-----
"GoogleUpdateTaskUserS-1-5-21-2136076275-3314329802-1407441424-1003Core.job" - "Google Inc." - C:\Users\Sibert\AppData\Local\Google\Update\GoogleUpdate.exe
"GoogleUpdateTaskUserS-1-5-21-2136076275-3314329802-1407441424-1003UA.job" - "Google Inc." - C:\Users\Sibert\AppData\Local\Google\Update\GoogleUpdate.exe
"Adobe Flash Player Updater.job" - "Adobe Systems Incorporated" - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

[Control Panel Objects]
-----( %SystemRoot%\system32 )-----
"FlashPlayerCPLApp.cpl" - "Adobe Systems Incorporated" - C:\Windows\system32\FlashPlayerCPLApp.cpl

[Drivers]
-----( HKLM\SYSTEM\CurrentControlSet\Services )-----
"catchme" (catchme) - ? - C:\Users\Sibert\AppData\Local\Temp\catchme.sys  (File not found)

[Explorer]
-----( HKLM\Software\Classes\Folder\shellex\ColumnHandlers )-----
{F9DB5320-233E-11D1-9F84-707F02C10627} "PDF Shell Extension" - "Adobe Systems, Inc." - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\PDFShell.dll
{C52AF81D-F7A0-4AAB-8E87-F80A60CCD396} "{C52AF81D-F7A0-4AAB-8E87-F80A60CCD396}" - "The Document Foundation" - C:\Program Files\LibreOffice 3.5\program\shlxthdl\shlxthdl.dll
-----( HKLM\Software\Classes\Protocols\Handler )-----
{FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} "IEProtocolHandler Class" - "Skype Technologies" - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved )-----
{872A9397-E0D6-4e28-B64D-52B8D0A7EA35} "DisplayCplExt Class" - "Advanced Micro Devices, Inc." - C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\atiamaxx.dll
{c5aec3ec-e812-4677-a9a7-4fee1f9aa000} "Icaros Thumbnail Provider" - "Tabibito Technology" - C:\Program Files\K-Lite Codec Pack\Icaros\IcarosThumbnailProvider.dll
{AE424E85-F6DF-4910-A6A9-438797986431} "LibreOffice Property Handler" - "The Document Foundation" - C:\Program Files\LibreOffice 3.5\program\shlxthdl\propertyhdl.dll
{C52AF81D-F7A0-4AAB-8E87-F80A60CCD396} "OpenOffice.org Column Handler" - "The Document Foundation" - C:\Program Files\LibreOffice 3.5\program\shlxthdl\shlxthdl.dll
{087B3AE3-E237-4467-B8DB-5A38AB959AC9} "OpenOffice.org Infotip Handler" - "The Document Foundation" - C:\Program Files\LibreOffice 3.5\program\shlxthdl\shlxthdl.dll
{63542C48-9552-494A-84F7-73AA6A7C99C1} "OpenOffice.org Property Sheet Handler" - "The Document Foundation" - C:\Program Files\LibreOffice 3.5\program\shlxthdl\shlxthdl.dll
{3B092F0C-7696-40E3-A80F-68D74DA84210} "OpenOffice.org Thumbnail Viewer" - "The Document Foundation" - C:\Program Files\LibreOffice 3.5\program\shlxthdl\shlxthdl.dll
{5E2121EE-0300-11D4-8D3B-444553540000} "SimpleShlExt Class" - "Advanced Micro Devices, Inc." - C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\atiacmxx.dll
{B41DB860-8EE4-11D2-9906-E49FADC173CA} "WinRAR" - "Alexander Roshal" - C:\Program Files\WinRAR\rarext.dll

[Internet Explorer]
-----( HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser )-----
<binary data> "ITBar7Layout" - ? -   (File not found | COM-object registry key not found)
-----( HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units )-----
{8AD9C840-044E-11D1-B3E9-00805F499D93} "Java Plug-in 1.6.0_35" - "Sun Microsystems, Inc." - C:\Program Files\Java\jre6\bin\jp2iexp.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_35-windows-i586.cab
{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} "Java Plug-in 1.6.0_35" - "Sun Microsystems, Inc." - C:\Program Files\Java\jre6\bin\jp2iexp.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_35-windows-i586.cab
{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} "Java Plug-in 1.6.0_35" - "Sun Microsystems, Inc." - C:\Program Files\Java\jre6\bin\npjpi160_35.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_35-windows-i586.cab
{7530BFB8-7293-4D34-9923-61A11451AFC5} "OnlineScanner Control" - "ESET" - C:\PROGRA~1\ESET\ESETON~1\ONLINE~1.OCX / hxxp://download.eset.com/special/eos/OnlineScanner.cab
-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects )-----
{18DF081C-E8AD-4283-A596-FA578C2EBDC3} "Adobe PDF Link Helper" - "Adobe Systems Incorporated" - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
{DBC80044-A445-435b-BC74-9C25C1C588A9} "Java(tm) Plug-In 2 SSV Helper" - "Sun Microsystems, Inc." - C:\Program Files\Java\jre6\bin\jp2ssv.dll
{761497BB-D6F0-462C-B6EB-D4DAF1D92D43} "Java(tm) Plug-In SSV Helper" - "Sun Microsystems, Inc." - C:\Program Files\Java\jre6\bin\ssv.dll

[Logon]
-----( %APPDATA%\Microsoft\Windows\Start Menu\Programs\Startup )-----
"desktop.ini" - ? - C:\Users\Sibert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini
"DSL-Manager.lnk" - "T-Systems Enterprise Services GmbH" - C:\Program Files\T-Online\DSL-Manager\DslMgr.exe  (Shortcut exists | File exists)
-----( %AllUsersProfile%\Microsoft\Windows\Start Menu\Programs\Startup )-----
"desktop.ini" - ? - C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini
"FILSHtray.lnk" - "FILSH Media GmbH" - C:\Program Files\FILSHtray\FILSHtray.exe  (Shortcut exists | File exists)
-----( HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run )-----
"HydraVisionDesktopManager" - "AMD" - "C:\Program Files\ATI Technologies\HydraVision\HydraDM.exe"
"puush" - ? - C:\Program Files\puush\puush.exe
-----( HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server\Wds\rdpwd )-----
"StartupPrograms" - ? - rdpclip  (File not found)
-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Run )-----
"Adobe ARM" - "Adobe Systems Incorporated" - "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
"StartCCC" - "Advanced Micro Devices, Inc." - "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
"SunJavaUpdateSched" - "Sun Microsystems, Inc." - "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
"TrayServer" - "MAGIX AG" - C:\PROGRA~1\MAGIX\VIDEO_~1\TrayServer_de.exe

[Services]
-----( HKLM\SYSTEM\CurrentControlSet\Services )-----
"Adobe Acrobat Update Service" (AdobeARMservice) - "Adobe Systems Incorporated" - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
"Adobe Flash Player Update Service" (AdobeFlashPlayerUpdateSvc) - "Adobe Systems Incorporated" - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
"AMD FUEL Service" (AMD FUEL Service) - "Advanced Micro Devices, Inc." - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
"ASP.NET-Zustandsdienst" (aspnet_state) - "Microsoft Corporation" - C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe
"DSL-Manager" (TDslMgrService) - "T-Systems Enterprise Services GmbH" - C:\Program Files\T-Online\DSL-Manager\DslMgrSvc.exe
"FABS - Helping agent for MAGIX media database" (Fabs) - "MAGIX AG" - C:\Program Files\Common Files\MAGIX Services\Database\bin\FABS.exe
"Firebird Server - MAGIX Instance" (FirebirdServerMAGIXInstance) - "MAGIX®" - C:\Program Files\Common Files\MAGIX Services\Database\bin\fbserver.exe
"Microsoft .NET Framework NGEN v4.0.30319_X86" (clr_optimization_v4.0.30319_32) - "Microsoft Corporation" - C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
"Mozilla Maintenance Service" (MozillaMaintenance) - "Mozilla Foundation" - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
"Skype Updater" (SkypeUpdate) - "Skype Technologies" - C:\Program Files\Skype\Updater\Updater.exe

===[ Logfile end ]=========================================[ Logfile end ]===

If You have questions or want to get some help, You can visit hxxp://forum.online-solutions.ru
         

MFG, Juri9

Und hier kommt auch schon der aswMBR-Scan:

aswMBR version 0.9.9.1665 Copyright(c) 2011 AVAST Software
Run date: 2012-09-25 17:19:59
-----------------------------
17:19:59.270    OS Version: Windows 6.1.7601 Service Pack 1
17:19:59.270    Number of processors: 2 586 0x6B02
17:19:59.270    ComputerName: SIBERT-PC  UserName: Sibert
17:20:08.662    Initialize success
17:22:04.499    AVAST engine defs: 12092500
17:22:58.555    Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0
17:22:58.555    Disk 0 Vendor: ST380815AS 3.CHH Size: 76319MB BusType: 3
17:22:58.570    Disk 0 MBR read successfully
17:22:58.570    Disk 0 MBR scan
17:22:58.648    Disk 0 Windows 7 default MBR code
17:22:58.664    Disk 0 Partition 1 80 (A) 07    HPFS/NTFS NTFS          200 MB offset 2048
17:22:58.679    Disk 0 Partition 2 00     07    HPFS/NTFS NTFS        76117 MB offset 411648
17:22:58.679    Disk 0 scanning sectors +156299264
17:22:58.820    Disk 0 scanning C:\Windows\system32\drivers
17:23:08.679    Service scanning
17:23:29.255    Modules scanning
17:23:35.854    Disk 0 trace - called modules:
17:23:35.870    ntkrnlpa.exe CLASSPNP.SYS disk.sys ACPI.sys halmacpi.dll ataport.SYS pciide.sys PCIIDEX.SYS atapi.sys 
17:23:36.369    1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x84d59030]
17:23:36.369    3 CLASSPNP.SYS[86f6d59e] -> nt!IofCallDriver -> [0x84c95830]
17:23:36.369    5 ACPI.sys[869be3d4] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP0T0L0-0[0x84c877e8]
17:23:36.821    AVAST engine scan C:\Windows
17:23:38.647    AVAST engine scan C:\Windows\system32
17:26:07.455    AVAST engine scan C:\Windows\system32\drivers
17:26:16.690    AVAST engine scan C:\Users\Sibert
17:27:53.145    AVAST engine scan C:\ProgramData
17:28:52.410    Scan finished successfully
17:29:34.733    Disk 0 MBR has been saved successfully to "C:\Users\Sibert\Desktop\MBR.dat"
17:29:34.764    The log file has been saved successfully to "C:\Users\Sibert\Desktop\aswMBR.txt"
         

Achso, und was ich noch sagen wollte: Vor den Scans sind die Verknüpfungen wieder verschwunden.
MFG, Juri9

Sieht ok aus. Wir sollten fast durch sein. Mach bitte zur Kontrolle Vollscans mit Malwarebytes und SUPERAntiSpyware und poste die Logs.
Denk dran beide Tools zu updaten vor dem Scan!!

Leider kann ich nur mit dem MBAM-Scan dienen, da SUPERAntiSpyware schon seit der Installation nur Probleme bereitet. Nach der Installation war alles sehr langsam und schwierig zu machen. Heute, wo ich den Scan machen wollte, ist SAS nicht mal angegangen. Immer, wenn ich damit interagiert hab (Doppelklick/Rechtsklick), ist der Windows Explorer abgestürt:

Daher hier nur der MBAM-Log. Ich versuch's später nochmal mit SAS.

Malwarebytes Anti-Malware 1.65.0.1400
www.malwarebytes.org

Datenbank Version: v2012.09.27.06

Windows 7 Service Pack 1 x86 NTFS
Internet Explorer 9.0.8112.16421
Sibert :: SIBERT-PC [Administrator]

27.09.2012 14:33:01
mbam-log-2012-09-27 (14-33-01).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|)
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 297805
Laufzeit: 33 Minute(n), 24 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 0
(Keine bösartigen Objekte gefunden)

(Ende)
         

MFG, Juri9

Ok, dann schmeiß sasw weg

Kein Funde mehr soweit!



Wegen Cookies und anderer Dinge im Web: Um die Pest von vornherein zu blocken (also TrackingCookies, Werbebanner etc.) müsstest du dir mal sowas wie MVPS Hosts File anschauen => Blocking Unwanted Parasites with a Hosts File - sinnvollerweise solltest du alle 4 Wochen mal bei MVPS nachsehen, ob er eine neue Hosts Datei herausgebracht hat.

Ansonsten gibt es noch gute Cookiemanager, Erweiterungen für den Firefox zB wäre da CookieCuller http://filepony.de/download-cookie_culler/
Wenn du aber damit leben kannst, dich bei jeder Browsersession überall neu einzuloggen (zB Facebook, Ebay, GMX, oder auch Trojaner-Board) dann stell den Browser einfach so ein, dass einfach alles beim Beenden des Browser inkl. Cookies gelöscht wird.

Ich halte es so, dass ich zum "wilden Surfen" den Opera-Browser oder Chromium unter meinem Linux verwende. Mein Hauptbrowser (Firefox) speichert nur die Cookies von den Sites die ich auch will, alles andere lehne ich manuell ab (der FF fragt mich immer) - die anderen Browser nehmen alles an Cookies zwar an, aber spätestens beim nächsten Start von Opera oder Chromium sind keine Cookies mehr da.

Ist dein System nun wieder in Ordnung oder gibt's noch andere Funde oder Probleme?

Erstmal nicht. Sollte was kommen, melde ich mich.
MFG, Juri9

Dann wären wir durch!

Die Programme, die hier zum Einsatz kamen, können alle wieder runter. Mit Hilfe von OTL kannst du auch viele Tools entfernen:

Starte bitte OTL und klicke auf Bereinigung.
Dies wird die meisten Tools entfernen, die wir zur Bereinigung benötigt haben. Sollte etwas bestehen bleiben, bitte mit Rechtsklick --> Löschen entfernen.


Malwarebytes zu behalten ist zu empfehlen. Kannst ja 1x im Monat damit einen Vollscan machen, aber immer vorher ans Update denken.


Bitte abschließend die Updates prüfen, unten mein Leitfaden dazu. Um in Zukunft die Aktualität der installierten Programme besser im Überblick zu halten, kannst du zB Secunia PSI verwenden.
Für noch mehr Sicherheit solltest Du nach der beseitigten Infektion auch möglichst alle Passwörter ändern.


Microsoftupdate

Windows XP: Besuch mit dem IE die MS-Updateseite und lass Dir alle wichtigen Updates installieren.

Windows Vista/7: Anleitung Windows-Update


PDF-Reader aktualisieren
Ein veralteter AdobeReader stellt ein großes Sicherheitsrisiko dar. Du solltest daher besser alte Versionen vom AdobeReader über Systemsteuerung => Software bzw. Programme und Funktionen deinstallieren, indem Du dort auf "Adobe Reader x.0" klickst und das Programm entfernst. (falls du AdobeReader installiert hast)

Ich empfehle einen alternativen PDF-Reader wie PDF Xchange Viewer, SumatraPDF oder Foxit PDF Reader, die sind sehr viel schlanker und flotter als der AdobeReader.

Bitte überprüf bei der Gelegenheit auch die Aktualität des Flashplayers:
Prüfen => Adobe - Flash Player
Downloadlinks => Adobe Flash Player Distribution | Adobe

Natürlich auch darauf achten, dass andere installierte Browser wie zB Firefox, Opera oder Chrome aktuell sind.


Java-Update
Veraltete Java-Installationen sind ein Sicherheitsrisiko, daher solltest Du die alten Versionen löschen (falls vorhanden, am besten mit JavaRa) und auf die neuste aktualisieren. Beende dazu alle Programme (v.a. die Browser), klick danach auf Start, Systemsteuerung, Software und deinstalliere darüber alle aufgelisteten Java-Versionen. Lad Dir danach von hier das aktuelle Java SE Runtime Environment (JRE) herunter und installiere es.