Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung
Windows 7 mit verschiedenen Trojanerdateien

Windows 7 mit verschiedenen Trojanerdateien


Plagegeister aller Art und deren Bekämpfung: Windows 7 mit verschiedenen Trojanerdateien

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

Antwort
Seite 1 von 2 1 2
Alt 28.11.2014, 00:03   #1
Iron111
 
Windows 7 mit verschiedenen Trojanerdateien - Standard

Windows 7 mit verschiedenen Trojanerdateien


Hallo, ich bin neu in dem Forum und auch "nur" ein normaler Anwender. Ich benötige Unterstützung und hoffe ich kann diese hier finden. Meine Bank hat unseren Online Zugang mit dem Hinweis gesperrt, dass wir einen Trojaner hätten. Ich nutze als Sicherung Avira Antivirus Pro und habe soeben einen vollständigen Systemcheck abgeschlossen. In diesem sind 7 Dateien in die Quaratäne eingestellt worden. Was muss ich nun unternehmen um den Rechner, ein Dell Laptop mit Windows 7 und 64 Bit wieder sauber zu bekommen? Besten Dank vorab

Alt 28.11.2014, 00:36   #2
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Windows 7 mit verschiedenen Trojanerdateien - Standard

Windows 7 mit verschiedenen Trojanerdateien


Hallo und

Hast du noch weitere Logs (mit Funden)? Malwarebytes und/oder andere Virenscanner, sind die mal fündig geworden?

Ich frage deswegen nach => http://www.trojaner-board.de/125889-...tml#post941520

Bitte keine neuen Virenscans machen sondern erst nur schon vorhandene Logs in CODE-Tags posten!
Relevant sind nur Logs der letzten 7 Tage bzw. seitdem das Problem besteht!



Zudem bitte auch ein Log mit Farbars Tool machen:

Scan mit Farbar's Recovery Scan Tool (FRST)

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)



Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit.
Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten.
Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
  • Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
  • Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
  • Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
  • Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.
__________________

__________________
Alt 28.11.2014, 20:41   #3
Iron111
 
Windows 7 mit verschiedenen Trojanerdateien - Standard

Windows 7 mit verschiedenen Trojanerdateien


Hallo cosinus, herzlichen Dank das du mir behilflich sein willst. Ich hoffe du hast auch ein wenig Nachsicht mit einem IT Legasteniker wie mir. Aber ich verspreche dir, ich geb mein Bestes :-). Ich selbst konnte bis heute übrigens noch kein Problem feststellen und bin nur durch unsere Bank aufgescheucht. Der Scann hat allerdings ja gezeigt das etwas nicht i.O. ist. Nachfolgend die Dateien.


FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 26-11-2014 01
Ran by 3vento (administrator) on 3VENTO-PC on 27-11-2014 18:50:53
Running from C:\Users\3vento\Downloads
Loaded Profile: 3vento (Available profiles: 3vento)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(Sensible Vision ) C:\Program Files (x86)\Sensible Vision\Fast Access\FAService.exe
(IDT, Inc.) C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_0057cbec48a2d7cf\stacsv64.exe
(Stardock Corporation) C:\Program Files\Dell\DellDock\DockLogin.exe
(AMD) C:\Windows\System32\atieclxx.exe
() C:\Program Files\Dell\Dell Wireless WLAN Card\WLTRYSVC.EXE
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Dell Inc.) C:\Program Files\Dell\Dell Wireless WLAN Card\BCMWLTRY.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Andrea Electronics Corporation) C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_0057cbec48a2d7cf\AESTSr64.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe
() C:\Program Files (x86)\Dell DataSafe Local Backup\Components\Scheduler\STService.exe
(Dell, Inc.) C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuAgent.exe
() C:\Program Files (x86)\Polar\Daemon\polard.exe
(SoftThinks SAS) C:\Program Files (x86)\Dell DataSafe Local Backup\SftService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(Dell Inc.) C:\Program Files\Dell\Dell Wireless WLAN Card\WLTRAY.EXE
() C:\Program Files (x86)\Polar\WebSync\WebSync.exe
(Stardock Corporation) C:\Program Files\Dell\DellDock\DellDock.exe
(Dropbox, Inc.) C:\Users\3vento\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Sensible Vision ) C:\Program Files (x86)\Sensible Vision\Fast Access\FATrayMon.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Sensible Vision ) C:\Program Files (x86)\Sensible Vision\Fast Access\FATrayAlert.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avwebgrd.exe
(Microsoft Corporation) C:\Windows\System32\alg.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\SeaPort.EXE
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avcenter.exe
(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_15_0_0_239.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_15_0_0_239.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2097960 2010-04-22] (Synaptics Incorporated)
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [487424 2010-01-20] (IDT, Inc.)
HKLM\...\Run: [Broadcom Wireless Manager UI] => C:\Program Files\Dell\Dell Wireless WLAN Card\WLTRAY.exe [4968960 2009-07-17] (Dell Inc.)
HKLM-x32\...\Run: [StartCCC] => c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2010-01-22] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [703736 2014-11-18] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [FAStartup] => [X]
HKLM-x32\...\Run: [FATrayAlert] => C:\Program Files (x86)\Sensible Vision\Fast Access\FATrayMon.exe [93832 2010-11-02] (Sensible Vision )
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [60712 2014-10-11] (Apple Inc.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-09-12] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [157480 2014-10-15] (Apple Inc.)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.)
HKLM-x32\...\RunOnce: [Launcher] => C:\Program Files (x86)\Dell DataSafe Local Backup\Components\Scheduler\Launcher.exe [163040 2010-08-12] (Softthinks)
HKLM-x32\...\RunOnce: [DSUpdateLauncher] => C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpd.exe [161088 2010-07-21] ()
Winlogon\Notify\FastAccess-x32: C:\Program Files (x86)\Sensible Vision\Fast Access\FALogNot.dll ()
HKU\S-1-5-21-1413332742-2020861625-2527278895-1000\...\Run: [gagbcamc.exe] => C:\Users\3vento\AppData\Roaming\Identities\gagbcamc.exe [172032 2009-07-14] ()
Lsa: [Notification Packages] scecli FAPassSync
Startup: C:\Users\3vento\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock.lnk
ShortcutTarget: Dell Dock.lnk -> C:\Program Files\Dell\DellDock\DellDock.exe (Stardock Corporation)
Startup: C:\Users\3vento\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\3vento\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Polar WebSync.lnk
ShortcutTarget: Polar WebSync.lnk -> C:\Program Files (x86)\Polar\WebSync\WebSync.exe ()
Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock First Run.lnk
ShortcutTarget: Dell Dock First Run.lnk -> C:\Program Files\Dell\DellDock\DellDock.exe (Stardock Corporation)
Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock First Run.lnk
ShortcutTarget: Dell Dock First Run.lnk -> C:\Program Files\Dell\DellDock\DellDock.exe (Stardock Corporation)
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-1413332742-2020861625-2527278895-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://g.uk.msn.com/USCON/8
HKU\S-1-5-21-1413332742-2020861625-2527278895-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/USCON/8
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-1413332742-2020861625-2527278895-1000 -> DefaultScope {FFA032E3-0635-4882-A23A-59D3A69D635F} URL = 
SearchScopes: HKU\S-1-5-21-1413332742-2020861625-2527278895-1000 -> {40D09CCC-D7B5-4833-B148-262629FEA964} URL = 
SearchScopes: HKU\S-1-5-21-1413332742-2020861625-2527278895-1000 -> {A4BCF77B-DB4C-4A3B-B551-81D7215C131F} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=ORJ&o=100000027&src=kw&q={searchTerms}&locale=de_DE&apn_ptnrs=^U3&apn_dtid=^OSJ000^YY^DE&apn_uid=44FA8856-EC61-4065-89B4-EE5E0A3B4DA9&apn_sauid=9B18FB75-450F-4D68-B010-F9438B30CAEF
SearchScopes: HKU\S-1-5-21-1413332742-2020861625-2527278895-1000 -> {FFA032E3-0635-4882-A23A-59D3A69D635F} URL = 
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll (Microsoft Corporation.)
BHO: SSOIEAddonBHO Class -> {DA5BCE70-D057-4D63-943D-5F3927EC59F1} -> C:\Program Files (x86)\Sensible Vision\Fast Access\x64\FAIESSO.dll (Sensible Vision )
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre6\bin\jp2ssv.dll No File
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Windows Live Messenger Companion Helper -> {9FDDE16B-836F-4806-AB1F-1455CBEFF289} -> C:\Program Files (x86)\Windows Live\Companion\companioncore.dll (Microsoft Corporation)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll (Microsoft Corporation.)
BHO-x32: SSOIEAddonBHO Class -> {DA5BCE70-D057-4D63-943D-5F3927EC59F1} -> C:\Program Files (x86)\Sensible Vision\Fast Access\FAIESSO.dll (Sensible Vision )
Toolbar: HKLM - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll (Microsoft Corporation.)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll (Microsoft Corporation.)
Toolbar: HKU\S-1-5-21-1413332742-2020861625-2527278895-1000 -> No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} -  No File
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\3vento\AppData\Roaming\Mozilla\Firefox\Profiles\whssljy2.default
FF SearchEngineOrder.1: Ask.com
FF SelectedSearchEngine: Google
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_239.dll ()
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_239.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.71.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin -> C:\Program Files (x86)\Java\jre7\bin\new_plugin\npjp2.dll No File
FF Plugin-x32: @java.com/JavaPlugin,version=10.71.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF SearchPlugin: C:\Users\3vento\AppData\Roaming\Mozilla\Firefox\Profiles\whssljy2.default\searchplugins\askcom.xml
FF Extension: Show my Password - C:\Users\3vento\AppData\Roaming\Mozilla\Firefox\Profiles\whssljy2.default\Extensions\{cd617372-6743-4ee4-bac4-fbf60f35719e}.xpi [2011-05-12]
FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2014-11-11]
FF HKLM-x32\...\Firefox\Extensions: [fassoxpcom@sensiblevision.com] - C:\Program Files (x86)\Sensible Vision\Fast Access\xpcom_fasso
FF Extension: FastAccess Web Login - C:\Program Files (x86)\Sensible Vision\Fast Access\xpcom_fasso [2011-01-26]

Chrome: 
=======
CHR Profile: C:\Users\3vento\AppData\Local\Google\Chrome\User Data\Default
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-07-14]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc.exe [804144 2014-11-18] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [432888 2014-11-18] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [432888 2014-11-18] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [993584 2014-11-18] (Avira Operations GmbH & Co. KG)
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)
R2 DockLoginService; C:\Program Files\Dell\DellDock\DockLogin.exe [155648 2009-06-09] (Stardock Corporation) [File not signed]
R2 FAService; C:\Program Files (x86)\Sensible Vision\Fast Access\FAService.exe [2428552 2010-11-02] (Sensible Vision ) [File not signed]
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe [78088 2014-08-26] (Hewlett-Packard Company)
R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [71680 2009-05-14] (Hewlett-Packard) [File not signed]
R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [89600 2009-05-14] (Hewlett-Packard) [File not signed]
R2 Polar Daemon; C:\Program Files (x86)\Polar\Daemon\polard.exe [419536 2012-12-12] ()
R2 STacSV; C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_0057cbec48a2d7cf\STacSV64.exe [244736 2010-01-20] (IDT, Inc.)
R2 wltrysvc; C:\Program Files\Dell\Dell Wireless WLAN Card\bcmwltry.exe [3417088 2009-07-17] (Dell Inc.) [File not signed]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [119272 2014-10-07] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131608 2014-10-07] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-10-01] (Avira Operations GmbH & Co. KG)
R2 TurboB; C:\Windows\System32\DRIVERS\TurboB.sys [13784 2009-11-02] ()
S3 USBAAPL64; C:\Windows\System32\Drivers\usbaapl64.sys [54784 2013-03-18] (Apple, Inc.) [File not signed]
R3 PCDSRVC{1E208CE0-FB7451FF-06020101}_0; \??\c:\program files\dell support center\pcdsrvc_x64.pkms [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-27 18:50 - 2014-11-27 18:52 - 00019512 _____ () C:\Users\3vento\Downloads\FRST.txt
2014-11-27 18:50 - 2014-11-27 18:50 - 02117632 _____ (Farbar) C:\Users\3vento\Downloads\FRST64.exe
2014-11-27 18:50 - 2014-11-27 18:50 - 00000000 ____D () C:\FRST
2014-11-25 14:17 - 2014-11-25 14:17 - 00000000 __SHD () C:\Users\3vento\AppData\Local\EmieBrowserModeList
2014-11-19 09:31 - 2014-11-11 04:08 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-11-19 09:31 - 2014-11-11 04:08 - 00241152 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll
2014-11-19 09:31 - 2014-11-11 03:44 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-11-19 09:31 - 2014-11-11 03:44 - 00186880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pku2u.dll
2014-11-18 11:38 - 2014-11-18 11:38 - 00116196 _____ () C:\Users\3vento\Downloads\rechnung_11_2014_3280000236_telekom_de.zip
2014-11-12 09:17 - 2014-11-07 20:49 - 00388272 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-11-12 09:17 - 2014-11-07 20:23 - 00341168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-11-12 09:17 - 2014-11-06 05:04 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-11-12 09:17 - 2014-11-06 05:03 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-11-12 09:17 - 2014-11-06 04:47 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-11-12 09:17 - 2014-11-06 04:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-11-12 09:17 - 2014-11-06 04:43 - 02884096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-11-12 09:17 - 2014-11-06 04:36 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-11-12 09:17 - 2014-11-06 04:35 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-11-12 09:17 - 2014-11-06 04:31 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-11-12 09:17 - 2014-11-06 04:30 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-11-12 09:17 - 2014-11-06 04:30 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-11-12 09:17 - 2014-11-06 04:28 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-11-12 09:17 - 2014-11-06 04:20 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-11-12 09:17 - 2014-11-06 04:16 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-11-12 09:17 - 2014-11-06 04:13 - 00501248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-11-12 09:17 - 2014-11-06 04:13 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-11-12 09:17 - 2014-11-06 04:12 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-11-12 09:17 - 2014-11-06 04:10 - 19781632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-11-12 09:17 - 2014-11-06 04:10 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-11-12 09:17 - 2014-11-06 04:07 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-11-12 09:17 - 2014-11-06 04:05 - 02277376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-11-12 09:17 - 2014-11-06 04:04 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-11-12 09:17 - 2014-11-06 04:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-11-12 09:17 - 2014-11-06 04:00 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-11-12 09:17 - 2014-11-06 04:00 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-11-12 09:17 - 2014-11-06 03:59 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-11-12 09:17 - 2014-11-06 03:58 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-11-12 09:17 - 2014-11-06 03:57 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-11-12 09:17 - 2014-11-06 03:48 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-11-12 09:17 - 2014-11-06 03:42 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-11-12 09:17 - 2014-11-06 03:41 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-11-12 09:17 - 2014-11-06 03:41 - 00716800 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-11-12 09:17 - 2014-11-06 03:39 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-11-12 09:17 - 2014-11-06 03:38 - 02124288 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-11-12 09:17 - 2014-11-06 03:37 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-11-12 09:17 - 2014-11-06 03:36 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-11-12 09:17 - 2014-11-06 03:34 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-11-12 09:17 - 2014-11-06 03:30 - 14390272 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-11-12 09:17 - 2014-11-06 03:22 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-11-12 09:17 - 2014-11-06 03:21 - 04298240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-11-12 09:17 - 2014-11-06 03:21 - 02051072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-11-12 09:17 - 2014-11-06 03:20 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-11-12 09:17 - 2014-11-06 03:04 - 01550336 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-11-12 09:17 - 2014-11-06 03:03 - 12819456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-11-12 09:17 - 2014-11-06 02:53 - 00799232 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-11-12 09:17 - 2014-11-06 02:52 - 01892864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-11-12 09:17 - 2014-11-06 02:48 - 01310208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-11-12 09:17 - 2014-11-06 02:47 - 00708096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-11-12 09:17 - 2014-11-05 18:56 - 00304640 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2014-11-12 09:17 - 2014-11-05 18:56 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-11-12 09:17 - 2014-11-05 18:52 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-11-12 09:17 - 2014-10-14 03:16 - 00155064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-11-12 09:17 - 2014-10-14 03:13 - 00683520 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2014-11-12 09:17 - 2014-10-14 03:12 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-11-12 09:17 - 2014-10-14 03:09 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2014-11-12 09:17 - 2014-10-14 03:07 - 00681984 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2014-11-12 09:17 - 2014-10-14 02:50 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-11-12 09:17 - 2014-10-14 02:49 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-11-12 09:17 - 2014-10-14 02:47 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2014-11-12 09:17 - 2014-10-14 02:46 - 00681984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2014-11-12 09:16 - 2014-11-06 05:03 - 25110016 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-11-12 09:16 - 2014-11-06 04:46 - 00580096 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-11-12 09:16 - 2014-11-06 04:44 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-11-12 09:16 - 2014-11-06 04:29 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-11-12 09:16 - 2014-11-06 04:23 - 06040064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-11-12 09:16 - 2014-11-06 04:02 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-11-12 09:16 - 2014-11-06 03:17 - 02365440 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-11-12 09:15 - 2014-10-25 02:57 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2014-11-12 09:15 - 2014-10-25 02:32 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll
2014-11-12 09:15 - 2014-10-18 03:05 - 00861696 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2014-11-12 09:15 - 2014-10-18 02:33 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2014-11-12 09:15 - 2014-10-14 03:13 - 03241984 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-11-12 09:15 - 2014-10-14 02:50 - 02363904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2014-11-12 09:15 - 2014-10-10 01:57 - 03198976 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-11-12 09:15 - 2014-10-03 03:12 - 00500224 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2014-11-12 09:15 - 2014-10-03 03:11 - 00680960 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2014-11-12 09:15 - 2014-10-03 03:11 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2014-11-12 09:15 - 2014-10-03 03:11 - 00296448 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2014-11-12 09:15 - 2014-10-03 03:11 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2014-11-12 09:15 - 2014-10-03 02:44 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2014-11-12 09:15 - 2014-10-03 02:44 - 00374784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2014-11-12 09:15 - 2014-10-03 02:44 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2014-11-12 09:15 - 2014-09-19 10:42 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-11-12 09:15 - 2014-09-19 10:42 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-11-12 09:15 - 2014-09-19 10:42 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2014-11-12 09:15 - 2014-09-19 10:42 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-11-12 09:15 - 2014-09-19 10:42 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-11-12 09:15 - 2014-09-19 10:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-11-12 09:15 - 2014-09-19 10:23 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2014-11-12 09:15 - 2014-09-19 10:23 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-11-12 09:15 - 2014-09-19 10:23 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2014-11-12 09:15 - 2014-09-19 10:23 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2014-11-12 09:15 - 2014-09-19 10:23 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2014-11-12 09:15 - 2014-09-19 10:23 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2014-11-12 09:15 - 2014-08-21 07:43 - 01882624 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-11-12 09:15 - 2014-08-21 07:40 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-11-12 09:15 - 2014-08-21 07:26 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-11-12 09:15 - 2014-08-21 07:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2014-11-12 09:15 - 2014-08-12 03:02 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10K.DLL
2014-11-12 09:15 - 2014-08-12 02:36 - 00701440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IMJP10K.DLL
2014-11-11 15:16 - 2014-11-11 15:16 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-10-29 19:46 - 2014-10-29 19:46 - 00001847 _____ () C:\Users\Public\Desktop\QuickTime Player.lnk
2014-10-29 19:46 - 2014-10-29 19:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
2014-10-29 19:46 - 2014-10-29 19:46 - 00000000 ____D () C:\Program Files (x86)\QuickTime
2014-10-29 19:39 - 2014-10-29 19:39 - 00001785 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-10-29 19:39 - 2014-10-29 19:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2014-10-29 19:38 - 2014-10-29 19:39 - 00000000 ____D () C:\ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A84A7
2014-10-29 19:38 - 2014-10-29 19:39 - 00000000 ____D () C:\Program Files\iTunes
2014-10-29 19:38 - 2014-10-29 19:39 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-10-29 19:38 - 2014-10-29 19:38 - 00000000 ____D () C:\Program Files\iPod

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-27 18:52 - 2011-01-31 22:24 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-11-27 17:54 - 2012-04-26 22:55 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-11-27 16:21 - 2011-01-31 20:44 - 00000422 _____ () C:\Windows\Tasks\SystemToolsDailyTest.job
2014-11-27 16:20 - 2011-02-11 14:00 - 00003488 _____ () C:\Windows\System32\Tasks\PCDEventLauncher
2014-11-27 16:20 - 2011-01-31 20:44 - 00003448 _____ () C:\Windows\System32\Tasks\SystemToolsDailyTest
2014-11-27 16:16 - 2009-07-14 05:45 - 00022464 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-11-27 16:16 - 2009-07-14 05:45 - 00022464 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-11-27 16:12 - 2009-07-14 06:10 - 01969701 _____ () C:\Windows\WindowsUpdate.log
2014-11-27 16:10 - 2011-02-13 15:32 - 00000000 ___RD () C:\Users\3vento\Dropbox
2014-11-27 16:10 - 2011-02-13 14:46 - 00000000 ____D () C:\Users\3vento\AppData\Roaming\Dropbox
2014-11-27 16:09 - 2012-06-07 09:07 - 00000437 _____ () C:\Windows\system32\Drivers\etc\hosts.ics
2014-11-27 16:08 - 2011-01-31 20:44 - 00000000 ____D () C:\Users\3vento\AppData\Local\SoftThinks
2014-11-27 16:08 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-11-27 16:08 - 2009-07-14 05:51 - 00270038 _____ () C:\Windows\setupact.log
2014-11-26 13:54 - 2012-04-26 22:55 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-11-26 13:54 - 2012-04-26 22:55 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-11-26 13:54 - 2011-06-06 18:25 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-11-26 13:54 - 2011-01-31 22:25 - 00002177 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-11-15 07:59 - 2011-02-13 15:22 - 00001025 _____ () C:\Users\3vento\Desktop\Dropbox.lnk
2014-11-15 07:59 - 2011-02-13 14:46 - 00000000 ____D () C:\Users\3vento\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-11-14 17:52 - 2011-01-31 22:24 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-11-14 17:47 - 2011-01-31 22:24 - 00004106 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-11-14 17:47 - 2011-01-31 22:24 - 00003854 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-11-13 20:06 - 2011-06-16 19:52 - 00000000 ____D () C:\Users\3vento\Documents\Stefan
2014-11-12 19:04 - 2011-01-31 20:40 - 00127656 _____ () C:\Users\3vento\AppData\Local\GDIPFONTCACHEV1.DAT
2014-11-12 19:03 - 2011-01-31 20:44 - 00000564 _____ () C:\Windows\Tasks\PCDoctorBackgroundMonitorTask.job
2014-11-12 19:03 - 2009-07-14 05:45 - 00467264 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-11-12 19:01 - 2014-05-06 15:24 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-11-12 14:36 - 2011-02-01 20:03 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-11-12 14:32 - 2013-08-15 11:43 - 00000000 ____D () C:\Windows\system32\MRT
2014-11-12 14:28 - 2011-02-11 19:13 - 103374192 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-11-12 11:00 - 2011-01-31 20:44 - 00004268 _____ () C:\Windows\System32\Tasks\PCDoctorBackgroundMonitorTask
2014-11-12 09:03 - 2012-05-03 15:55 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-11-07 19:53 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-11-04 08:51 - 2009-07-14 06:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-11-01 16:14 - 2009-07-14 18:58 - 00703192 _____ () C:\Windows\system32\perfh007.dat
2014-11-01 16:14 - 2009-07-14 18:58 - 00150800 _____ () C:\Windows\system32\perfc007.dat
2014-11-01 16:14 - 2009-07-14 06:13 - 01629348 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-10-29 19:38 - 2012-11-14 19:32 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-10-29 19:38 - 2012-11-14 19:31 - 00000000 ____D () C:\Program Files\Common Files\Apple

Some content of TEMP:
====================
C:\Users\3vento\AppData\Local\Temp\APNStub.exe
C:\Users\3vento\AppData\Local\Temp\AskSLib.dll
C:\Users\3vento\AppData\Local\Temp\avgnt.exe
C:\Users\3vento\AppData\Local\Temp\converter.exe
C:\Users\3vento\AppData\Local\Temp\drm_dialogs.dll
C:\Users\3vento\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpearz3l.dll
C:\Users\3vento\AppData\Local\Temp\GoogleChromeInstaller.exe
C:\Users\3vento\AppData\Local\Temp\jre-7u21-windows-i586-iftw.exe
C:\Users\3vento\AppData\Local\Temp\jre-7u25-windows-i586-iftw.exe
C:\Users\3vento\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe
C:\Users\3vento\AppData\Local\Temp\jre-7u51-windows-i586-iftw.exe
C:\Users\3vento\AppData\Local\Temp\jre-7u55-windows-i586-iftw.exe
C:\Users\3vento\AppData\Local\Temp\jre-7u65-windows-i586-iftw.exe
C:\Users\3vento\AppData\Local\Temp\jre-7u67-windows-i586-iftw.exe
C:\Users\3vento\AppData\Local\Temp\jre-7u71-windows-i586-iftw.exe
C:\Users\3vento\AppData\Local\Temp\RoxioBurn_0180_MPI_180B57E_RXD.exe
C:\Users\3vento\AppData\Local\Temp\setup.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-11-25 09:06

==================== End Of Log ============================
--- --- ---

--- --- ---

--- --- ---

--- --- ---

--- --- ---
Code:
ATTFilter
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 26-11-2014 01
Ran by 3vento at 2014-11-27 18:52:38
Running from C:\Users\3vento\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

64 Bit HP CIO Components Installer (Version: 6.2.2 - Hewlett-Packard) Hidden
8500A909_eDocs (x32 Version: 1.00.0000 - Hewlett-Packard) Hidden
Adobe Flash Player 10 ActiveX (HKLM-x32\...\{2BD2FA21-B51D-4F01-94A7-AC16737B2163}) (Version: 10.0.12.36 - Adobe Systems, Inc.)
Adobe Flash Player 15 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 15.0.0.239 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.09) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.09 - Adobe Systems Incorporated)
Advanced Audio FX Engine (HKLM-x32\...\Advanced Audio FX Engine) (Version: 1.12.05 - Creative Technology Ltd)
Antivirus Pro (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.7.342 - Avira)
Apple Application Support (HKLM-x32\...\{83CAF0DE-8D3B-4C37-A631-2B8F16EC3031}) (Version: 3.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{BDD99690-3541-4619-9D2A-3CDDB3E15F9E}) (Version: 8.0.5.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
ATI Catalyst Control Center (HKLM-x32\...\{055EE59D-217B-43A7-ABFF-507B966405D8}) (Version: 2.010.0122.0857 - )
Bing Bar (HKLM-x32\...\{3365E735-48A6-4194-9988-CE59AC5AE503}) (Version: 7.3.132.0 - Microsoft Corporation)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
BPD_DSWizards (x32 Version: 1.00.0000 - Hewlett-Packard) Hidden
bpd_scan (x32 Version: 3.00.0000 - Hewlett-Packard) Hidden
BPDSoftware (x32 Version: 140.0.000.000 - Hewlett-Packard) Hidden
BPDSoftware_Ini (x32 Version: 1.00.0000 - Hewlett-Packard) Hidden
BtwMfcMM (HKLM\...\{D5B46D30-F054-4C64-9C0F-97C8451E7D04}) (Version: 6.00.0000 - Broadcom Corporation)
BufferChm (x32 Version: 140.0.213.000 - Hewlett-Packard) Hidden
ccc-core-static (x32 Version: 2010.0122.858.16002 - ATI) Hidden
Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)
Cisco LEAP Module (HKLM-x32\...\{51C7AD07-C3F6-4635-8E8A-231306D810FE}) (Version: 1.0.19 - Cisco Systems, Inc.)
Cisco PEAP Module (HKLM-x32\...\{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}) (Version: 1.1.6 - Cisco Systems, Inc.)
CutePDF Writer 2.8 (HKLM\...\CutePDF Writer Installation) (Version:  - )
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Dell DataSafe Local Backup - Support Software (HKLM-x32\...\{A9668246-FB70-4103-A1E3-66C9BC2EFB49}) (Version:  - Dell)
Dell DataSafe Local Backup (HKLM-x32\...\{0ED7EE95-6A97-47AA-AD73-152C08A15B04}) (Version: 9.4.47 - Dell)
Dell DataSafe Online (HKLM-x32\...\{7EC66A95-AC2D-4127-940B-0445A526AB2F}) (Version: 2.1.19634 - Dell)
Dell Dock (HKLM-x32\...\Dell Dock) (Version: 2.0 - Stardock Corporation)
Dell Dock (Version: 2.0 - Stardock Corporation) Hidden
Dell Edoc Viewer (HKLM\...\{8EBA8727-ADC2-477B-9D9A-1A1836BE4E05}) (Version: 1.0.0 - Dell Inc)
Dell Getting Started Guide (HKLM-x32\...\{7DB9F1E5-9ACB-410D-A7DC-7A3D023CE045}) (Version: 1.00.0000 - Dell Inc.)
Dell Support Center (HKLM\...\Dell Support Center) (Version: 3.0.5621.01 - Dell Inc.)
Dell Support Center (Version: 3.0.5621.01 - PC-Doctor, Inc.) Hidden
Dell Touchpad (HKLM\...\SynTPDeinstKey) (Version: 15.0.18.0 - Synaptics Incorporated)
Dell Webcam Central (HKLM-x32\...\Dell Webcam Central) (Version: 2.00.35 - Creative Technology Ltd)
Dell Wireless WLAN Card Utility (HKLM\...\Dell Wireless WLAN Card Utility) (Version: 5.30.21.0 - Dell Inc.)
DirectX 9 Runtime (x32 Version: 1.00.0000 - Sonic Solutions) Hidden
Dropbox (HKU\S-1-5-21-1413332742-2020861625-2527278895-1000\...\Dropbox) (Version: 2.10.52 - Dropbox, Inc.)
eBay (HKLM-x32\...\{A8B88634-7F90-402F-B66A-86429755F6A5}) (Version: 1.4.0 - eBay Inc.)
FastAccess (HKLM\...\{59FF4E5B-179A-4267-BD13-2124D0545126}) (Version: 3.0.85.1 - Sensible Vision)
FileZilla Client 3.7.3 (HKLM-x32\...\FileZilla Client) (Version: 3.7.3 - Tim Kosse)
GIMP 2.6.11 (HKLM-x32\...\WinGimp-2.0_is1) (Version: 2.6.11 - The GIMP Team)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 39.0.2171.71 - Google Inc.)
Google Earth Plug-in (HKLM-x32\...\{4AB54F11-2F8C-11E3-B09F-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
HP Support Solutions Framework (HKLM-x32\...\{348A1F5B-07B3-4436-9A47-FFE44EFE856E}) (Version: 11.51.0004 - Hewlett-Packard Company)
iCloud (HKLM\...\{4BC310C4-B898-46E2-B5FB-B85A30AA7142}) (Version: 2.0.2.187 - Apple Inc.)
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 9.6.0.1014 - Intel Corporation)
iTunes (HKLM\...\{2ABBBD91-91E5-4AD7-929A-FE15D1DC0576}) (Version: 12.0.1.26 - Apple Inc.)
Java 7 Update 71 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217071FF}) (Version: 7.0.710 - Oracle)
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Messenger Companion (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Office Home and Student 2010 (HKLM-x32\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (HKLM\...\{B6E3757B-5E77-3915-866A-CCFC4B8D194C}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) - KB2467175 (HKLM\...\{aac9fcc4-dd9e-4add-901c-b5496a07ab2e}) (Version: 8.0.51011 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 ATL Update kb973924 - x64 9.0.30729.4148 (HKLM\...\{EE936C7A-EA40-31D5-9B65-8E3E089C3828}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (HKLM-x32\...\{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570 (HKLM\...\{8338783A-0968-3B85-AFC7-BAAE0A63DC50}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM-x32\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Mozilla Firefox 33.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 33.1 (x86 de)) (Version: 33.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0 - Mozilla)
Mozilla Thunderbird 24.6.0 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 24.6.0 (x86 de)) (Version: 24.6.0 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Network64 (Version: 140.0.215.000 - Hewlett-Packard) Hidden
phase-6 2.3.2a (HKLM-x32\...\phase-6) (Version: 2.3.2a - phase-6)
phase-6-basic 2.1.2.1 (HKLM-x32\...\phase-6-basic) (Version: 2.1.2.1 - phase-6)
PhotoShowExpress (x32 Version: 2.0.028 - Sonic Solutions) Hidden
Polar Daemon (HKLM-x32\...\{2BA9320D-E061-4C71-ACCB-AC0E9D4FC82B}) (Version: 2.2.20000 - Polar Electro Oy)
Polar WebSync (HKLM-x32\...\{320453EE-6AEA-4E1A-8E64-72F33C0C928F}) (Version: 2.8.10006 - Polar Electro Oy)
Quickset64 (HKLM\...\{87CF757E-C1F1-4D22-865C-00C6950B5258}) (Version: 9.6.21 - Dell Inc.)
QuickTime 7 (HKLM-x32\...\{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}) (Version: 7.76.80.95 - Apple Inc.)
RBVirtualFolder64Inst (Version: 1.00.0000 - Roxio, Inc.) Hidden
Roxio Burn (HKLM-x32\...\{B2E47DE7-800B-40BB-BD1F-9F221C3AEE87}) (Version: 1.8.57.4 - Roxio)
Roxio Creator Starter (HKLM-x32\...\{6F0BBEFE-BE1C-419B-BA1F-D36C9E7915BC}) (Version: 12.1.40.0 - Roxio)
Roxio File Backup (Version: 1.3.2 - Roxio) Hidden
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version:  - Microsoft)
Skins (x32 Version: 2010.0122.858.16002 - ATI) Hidden
Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.3.16540.9015 - Microsoft Corporation)
Skype™ 6.18 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.18.106 - Skype Technologies S.A.)
Sonic CinePlayer Decoder Pack (x32 Version: 4.3.0 - Sonic Solutions) Hidden
TextPad 7 (HKLM\...\{52C23381-8FED-4DB0-A07F-CCE9C9061475}) (Version: 7.1.0 - Helios)
Überwachungstool für die Intel® Turbo-Boost-Technik (HKLM\...\{39F4C6F9-618A-4E5B-8FB2-6BD661174E32}) (Version: 1.0.186.6 - Intel)
Vasco da Gama 8 Advanced (HKLM-x32\...\{22036364-3B1E-4B6D-A109-93328906F7C7}) (Version: 8.00.0000 - MotionStudios)
WIDCOMM Bluetooth Software (HKLM\...\{9E9D49A4-1DF4-4138-B7DB-5D87A893088E}) (Version: 6.2.0.9603 - Broadcom Corporation)
Windows Driver Package - Cambridge Silicon Radio Ltd. (CSRBC) USB  (04/21/2011 01.0.0.0) (HKLM\...\BEA7B05370C19B9C86893BB484FD6B9CC52B0CD8) (Version: 04/21/2011 01.0.0.0 - Cambridge Silicon Radio Ltd.)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3555.0308 - Microsoft Corporation)
Windows Live Mesh ActiveX control for remote connections (HKLM-x32\...\{C5398A89-516C-4DAF-BA07-EE7949090E56}) (Version: 15.4.5722.2 - Microsoft Corporation)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-1413332742-2020861625-2527278895-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\3vento\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1413332742-2020861625-2527278895-1000_Classes\CLSID\{8A791F0C-C63C-4EC5-B97F-FBCE74EDBC54}\InprocServer32 -> C:\Program Files\TextPad 7\System\shellext32.dll No File
CustomCLSID: HKU\S-1-5-21-1413332742-2020861625-2527278895-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\3vento\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1413332742-2020861625-2527278895-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\3vento\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1413332742-2020861625-2527278895-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\3vento\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1413332742-2020861625-2527278895-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\3vento\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1413332742-2020861625-2527278895-1000_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\3vento\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1413332742-2020861625-2527278895-1000_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\3vento\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1413332742-2020861625-2527278895-1000_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\3vento\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1413332742-2020861625-2527278895-1000_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\3vento\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)

==================== Restore Points  =========================

30-10-2014 19:13:21 Geplanter Prüfpunkt
07-11-2014 08:06:37 Geplanter Prüfpunkt
12-11-2014 13:26:55 Windows Update
19-11-2014 08:59:30 Windows Update
26-11-2014 13:27:17 Geplanter Prüfpunkt

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {0462B81D-088E-4019-84D5-5E8DE3C88848} - System32\Tasks\PCDEventLauncher => C:\Program Files\Dell Support Center\sessionchecker.exe [2010-08-05] ()
Task: {19ECB42E-7A93-4420-AEE1-FC5F2A62A0E9} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-23] (Google Inc.)
Task: {22963CBF-71DC-47EA-83AF-8B3938A2C85F} - System32\Tasks\{4CEC59AF-1431-4329-A780-8755C039F030} => C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe [2014-06-12] (Mozilla Corporation)
Task: {29F91580-FE58-42D5-9937-FBEF1BAEEC72} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {6F16A33D-5E1B-47B0-BF5F-5978C7BF840D} - System32\Tasks\{F9F713E9-4979-4052-9850-A240D57D9289} => Firefox.exe hxxp://ui.skype.com/ui/0/6.3.0.105/de/abandoninstall?page=tsProgressBar
Task: {74EB4C2E-F6B1-45B9-A3D2-7066DEA4B371} - System32\Tasks\PCDoctorBackgroundMonitorTask => C:\Program Files\Dell Support Center\uaclauncher.exe [2010-08-05] (PC-Doctor, Inc.)
Task: {80F0F57D-5DB9-47ED-A405-C16DC8CB4AB4} - System32\Tasks\SystemToolsDailyTest => C:\Program Files\Dell Support Center\pcdrcui.exe [2010-08-05] (PC-Doctor, Inc.)
Task: {8B80D9DB-F351-4C4F-B277-DF20C02D5914} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-11-26] (Adobe Systems Incorporated)
Task: {98BAB32E-F425-40A7-B9D4-EA0694F90AD3} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc
Task: {BFEE7543-78DE-40DB-86AB-E06820B27444} - System32\Tasks\{2B734AAD-71DE-4DB6-BFE1-0D35613B9D9D} => C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe [2014-06-12] (Mozilla Corporation)
Task: {D0FBEC10-F581-4C89-87A9-45059CA6F317} - System32\Tasks\{A36ED1EE-80D5-429C-8918-44867A3BC480} => C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe [2014-06-12] (Mozilla Corporation)
Task: {D18DA246-1CA8-4077-8ECB-87069D0C4785} - System32\Tasks\{E4B32570-41C4-4FEE-9B46-FA2094632C84} => C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe [2014-06-12] (Mozilla Corporation)
Task: {D9584729-0DCB-4031-ADCD-492E6D62F015} - System32\Tasks\DJJT67P1\Administrator - Start WLAN Tray Applet => C:\Program Files\Dell\Dell Wireless WLAN Card\WLTRAY.EXE [2009-07-17] (Dell Inc.)
Task: {DD6FF4F4-6E57-451B-A338-F8018EDCE9AA} - System32\Tasks\{DBEC7DF5-4ECD-4E5A-B4EE-7F68EAFF3F18} => C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe [2014-06-12] (Mozilla Corporation)
Task: {EEC4BE10-3F75-4C6D-B505-7235B3DB1229} - System32\Tasks\Games\UpdateCheck_S-1-5-21-1413332742-2020861625-2527278895-1000
Task: {F4FD22E6-DFB2-49D2-B3AC-E125C0E44D7A} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-23] (Google Inc.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\PCDoctorBackgroundMonitorTask.job => C:\Program Files\Dell Support Center\uaclauncher.exe
Task: C:\Windows\Tasks\SystemToolsDailyTest.job => C:\Program Files\Dell Support Center\pcdrcui.exe

==================== Loaded Modules (whitelisted) =============

2010-11-02 05:40 - 2010-11-02 05:40 - 00092808 _____ () C:\Windows\system32\FAIEExtension.DLL
2011-01-26 07:16 - 2009-07-17 02:06 - 00033280 _____ () C:\Program Files\Dell\Dell Wireless WLAN Card\WLTRYSVC.EXE
2011-01-26 07:16 - 2009-07-17 02:06 - 00058368 _____ () C:\Program Files\Dell\Dell Wireless WLAN Card\bcmwlrmt.dll
2011-02-10 00:02 - 2009-11-05 07:40 - 00085504 _____ () C:\Windows\System32\cpwmon64.dll
2010-01-02 15:42 - 2010-01-02 15:42 - 00098304 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll
2012-09-08 03:32 - 2012-09-08 03:32 - 00943504 _____ () C:\Program Files\Common Files\Apple\Internet Services\ShellStreams64.dll
2011-01-26 07:24 - 2010-08-12 01:19 - 00781536 ____N () C:\Program Files (x86)\Dell DataSafe Local Backup\Components\Scheduler\STService.exe
2012-12-12 14:20 - 2012-12-12 14:20 - 00419536 _____ () C:\Program Files (x86)\Polar\Daemon\polard.exe
2013-02-26 15:59 - 2013-02-26 15:59 - 06227512 _____ () C:\Program Files (x86)\Polar\WebSync\WebSync.exe
2014-10-20 07:25 - 2014-10-20 07:25 - 00472576 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_64\VistaBridgeLibrary\602ab9ddf3440af31bb4c168b59f2ba5\VistaBridgeLibrary.ni.dll
2010-03-08 18:02 - 2010-03-08 18:02 - 00016384 ____R () c:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\Branding.dll
2011-01-26 07:18 - 2011-01-26 07:18 - 00270336 _____ () C:\Windows\assembly\GAC_MSIL\CLI.Aspect.CrossDisplay.Graphics.Dashboard\1.0.0.0__90ba9c70f846762e\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll
2014-02-12 20:58 - 2014-02-12 20:58 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-10-11 13:05 - 2014-10-11 13:05 - 01044776 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2011-01-26 07:24 - 2010-08-12 01:19 - 00126176 ____N () C:\Program Files (x86)\Dell DataSafe Local Backup\STLog.dll
2011-01-26 07:24 - 2010-08-12 01:19 - 01121504 ____N () C:\Program Files (x86)\Dell DataSafe Local Backup\LibXml2.dll
2011-01-26 07:24 - 2010-08-12 01:19 - 00077024 ____N () C:\Program Files (x86)\Dell DataSafe Local Backup\zlib1.dll
2011-01-26 07:24 - 2010-08-12 01:19 - 00232672 ____N () C:\Program Files (x86)\Dell DataSafe Local Backup\STFiles.dll
2011-01-26 07:24 - 2010-08-12 01:19 - 00072928 ____N () C:\Program Files (x86)\Dell DataSafe Local Backup\STRegistry.dll
2011-01-26 07:24 - 2010-08-12 01:19 - 00109792 ____N () C:\Program Files (x86)\Dell DataSafe Local Backup\STPE.dll
2011-01-26 07:24 - 2010-08-12 01:19 - 00119008 ____N () C:\Program Files (x86)\Dell DataSafe Local Backup\STNLS.dll
2012-12-12 14:20 - 2012-12-12 14:20 - 03483856 _____ () C:\Program Files (x86)\Polar\Daemon\libpolar.dll
2011-01-26 07:24 - 2010-08-12 01:19 - 00056544 ____N () C:\Program Files (x86)\Dell DataSafe Local Backup\STCoreXml.dll
2011-01-26 07:24 - 2010-08-12 01:19 - 00113888 ____N () C:\Program Files (x86)\Dell DataSafe Local Backup\PSTVdsDisk.dll
2013-02-26 15:59 - 2013-02-26 15:59 - 00110648 _____ () C:\Program Files (x86)\Polar\WebSync\PTransform.dll
2010-02-10 15:06 - 2010-02-10 15:06 - 00334848 _____ () C:\Program Files (x86)\Polar\WebSync\QtXml4.dll
2011-01-14 15:01 - 2011-01-14 15:01 - 02142720 _____ () C:\Program Files (x86)\Polar\WebSync\QtCore4.dll
2013-02-26 15:59 - 2013-02-26 15:59 - 03722296 _____ () C:\Program Files (x86)\Polar\WebSync\libpolar.dll
2010-02-10 15:22 - 2010-02-10 15:22 - 07971840 _____ () C:\Program Files (x86)\Polar\WebSync\QtGui4.dll
2010-02-10 15:07 - 2010-02-10 15:07 - 00929280 _____ () C:\Program Files (x86)\Polar\WebSync\QtNetwork4.dll
2010-02-10 17:45 - 2010-02-10 17:45 - 00025600 _____ () C:\Program Files (x86)\Polar\WebSync\imageformats\qgif4.dll
2010-02-10 17:45 - 2010-02-10 17:45 - 00119808 _____ () C:\Program Files (x86)\Polar\WebSync\imageformats\qjpeg4.dll
2014-11-27 16:10 - 2014-11-27 16:10 - 00043008 _____ () c:\users\3vento\appdata\local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpearz3l.dll
2013-08-23 20:01 - 2013-08-23 20:01 - 25100288 _____ () C:\Users\3vento\AppData\Roaming\Dropbox\bin\libcef.dll
2014-10-20 07:18 - 2014-10-20 07:18 - 00170496 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\7d521e583439ddf659b36d5f281ca646\IsdiInterop.ni.dll
2011-01-26 07:18 - 2010-03-04 03:08 - 00058880 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2014-06-12 13:11 - 2014-06-12 13:11 - 03022960 _____ () C:\Program Files (x86)\Mozilla Thunderbird\mozjs.dll
2014-06-12 13:11 - 2014-06-12 13:11 - 00158832 _____ () C:\Program Files (x86)\Mozilla Thunderbird\NSLDAP32V60.dll
2014-06-12 13:11 - 2014-06-12 13:11 - 00023152 _____ () C:\Program Files (x86)\Mozilla Thunderbird\NSLDAPPR32V60.dll
2014-11-11 15:16 - 2014-11-11 15:16 - 03649648 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2014-11-26 13:54 - 2014-11-26 13:54 - 16841392 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_239.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)


==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Bluetooth.lnk => C:\Windows\pss\Bluetooth.lnk.CommonStartup
MSCONFIG\startupfolder: C:^Users^3vento^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk => C:\Windows\pss\Dropbox.lnk.Startup
MSCONFIG\startupreg: Adobe Reader Speed Launcher => "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
MSCONFIG\startupreg: APSDaemon => "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
MSCONFIG\startupreg: Dell DataSafe Online => C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuClient.exe
MSCONFIG\startupreg: Dell Webcam Central => "C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe" /mode2
MSCONFIG\startupreg: Desktop Disc Tool => "C:\Program Files (x86)\Roxio\oem\Roxio Burn\RoxioBurnLauncher.exe"
MSCONFIG\startupreg: FAStartup => 
MSCONFIG\startupreg: FATrayAlert => C:\Program Files (x86)\Sensible Vision\Fast Access\FATrayMon.exe
MSCONFIG\startupreg: IAStorIcon => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
MSCONFIG\startupreg: iTunesHelper => "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
MSCONFIG\startupreg: QuickSet => C:\Program Files\Dell\QuickSet\QuickSet.exe
MSCONFIG\startupreg: QuickTime Task => "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
MSCONFIG\startupreg: RoxWatchTray => "C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatchTray12OEM.exe"

========================= Accounts: ==========================

3vento (S-1-5-21-1413332742-2020861625-2527278895-1000 - Administrator - Enabled) => C:\Users\3vento
Administrator (S-1-5-21-1413332742-2020861625-2527278895-500 - Administrator - Disabled)
Gast (S-1-5-21-1413332742-2020861625-2527278895-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1413332742-2020861625-2527278895-1002 - Limited - Enabled)

==================== Faulty Device Manager Devices =============

Name: Officejet Pro 8500 A909g
Description: Officejet Pro 8500 A909g
Class Guid: {4d36e971-e325-11ce-bfc1-08002be10318}
Manufacturer: HP
Service: 
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: facap, FastAccess Video Capture
Description: facap, FastAccess Video Capture
Class Guid: {6bdd1fc6-810f-11d0-bec7-08002be2092f}
Manufacturer: Sensible Vision
Service: FACAP
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Application errors:
==================
Error: (11/27/2014 04:40:37 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: iexplore.exe, Version: 11.0.9600.17420, Zeitstempel: 0x5444227a
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x74dccb49
ID des fehlerhaften Prozesses: 0x1a80
Startzeit der fehlerhaften Anwendung: 0xiexplore.exe0
Pfad der fehlerhaften Anwendung: iexplore.exe1
Pfad des fehlerhaften Moduls: iexplore.exe2
Berichtskennung: iexplore.exe3

Error: (11/27/2014 04:20:01 PM) (Source: PC-Doctor) (EventID: 1) (User: )
Description: (3800) Asapi: (16:20:01:6770)(3800) Asapi.State - Error -- 123 Plugin S3LogPusher.dll failed to load.

Error: (11/27/2014 04:20:01 PM) (Source: PC-Doctor) (EventID: 1) (User: )
Description: (3800) Asapi: (16:20:01:6300)(3800) libAsapi.DynamicLoadedPlugin - Error -- 64 Unable to load library 'S3LogPusher.dll'

Error: (11/27/2014 04:10:40 PM) (Source: PC-Doctor) (EventID: 1) (User: )
Description: (6252) Asapi: (16:10:40:3260)(6252) Asapi.State - Error -- 123 Plugin S3LogPusher.dll failed to load.

Error: (11/27/2014 04:10:40 PM) (Source: PC-Doctor) (EventID: 1) (User: )
Description: (6252) Asapi: (16:10:40:3100)(6252) libAsapi.DynamicLoadedPlugin - Error -- 64 Unable to load library 'S3LogPusher.dll'

Error: (11/26/2014 02:00:02 PM) (Source: PC-Doctor) (EventID: 1) (User: )
Description: (1032) Asapi: (14:00:02:3350)(1032) Asapi.State - Error -- 123 Plugin S3LogPusher.dll failed to load.

Error: (11/26/2014 02:00:02 PM) (Source: PC-Doctor) (EventID: 1) (User: )
Description: (1032) Asapi: (14:00:02:3040)(1032) libAsapi.DynamicLoadedPlugin - Error -- 64 Unable to load library 'S3LogPusher.dll'

Error: (11/25/2014 02:00:03 PM) (Source: PC-Doctor) (EventID: 1) (User: )
Description: (5548) Asapi: (14:00:03:8040)(5548) Asapi.State - Error -- 123 Plugin S3LogPusher.dll failed to load.

Error: (11/25/2014 02:00:03 PM) (Source: PC-Doctor) (EventID: 1) (User: )
Description: (5548) Asapi: (14:00:03:8040)(5548) libAsapi.DynamicLoadedPlugin - Error -- 64 Unable to load library 'S3LogPusher.dll'

Error: (11/24/2014 02:30:00 PM) (Source: PC-Doctor) (EventID: 1) (User: )
Description: (732) Asapi: (14:30:00:6890)(732) Asapi.State - Error -- 123 Plugin S3LogPusher.dll failed to load.


System errors:
=============
Error: (11/27/2014 04:09:49 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)

Error: (11/27/2014 04:09:23 PM) (Source: ipnathlp) (EventID: 30013) (User: )
Description: 192.168.2.134192.168.137.0255.255.255.0

Error: (11/27/2014 04:09:23 PM) (Source: ipnathlp) (EventID: 1233) (User: )
Description: 

Error: (11/27/2014 04:08:48 PM) (Source: Microsoft-Windows-TaskScheduler) (EventID: 413) (User: NT-AUTORITÄT)
Description: Beim Start des Aufgabenplanungsdiensts konnten Aufgaben nicht geladen werden. Zusätzliche Daten: Fehlerwert: 2147942402.

Error: (11/27/2014 07:58:56 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)

Error: (11/27/2014 07:58:55 AM) (Source: ipnathlp) (EventID: 30013) (User: )
Description: 192.168.2.134192.168.137.0255.255.255.0

Error: (11/27/2014 07:58:55 AM) (Source: ipnathlp) (EventID: 1233) (User: )
Description: 

Error: (11/27/2014 07:58:44 AM) (Source: VDS Basic Provider) (EventID: 1) (User: )
Description: Unerwarteter Fehler. Fehlercode: D@01010004

Error: (11/27/2014 07:58:44 AM) (Source: VDS Basic Provider) (EventID: 1) (User: )
Description: Unerwarteter Fehler. Fehlercode: D@01010004

Error: (11/27/2014 07:57:55 AM) (Source: Microsoft-Windows-TaskScheduler) (EventID: 413) (User: NT-AUTORITÄT)
Description: Beim Start des Aufgabenplanungsdiensts konnten Aufgaben nicht geladen werden. Zusätzliche Daten: Fehlerwert: 2147942402.


Microsoft Office Sessions:
=========================
Error: (11/27/2014 04:40:37 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: iexplore.exe11.0.9600.174205444227aunknown0.0.0.000000000c000000574dccb491a8001d00a5446bb0285C:\Program Files (x86)\Internet Explorer\iexplore.exeunknownbb4e8a8b-764b-11e4-aa97-f04da2691165

Error: (11/27/2014 04:20:01 PM) (Source: PC-Doctor) (EventID: 1) (User: )
Description: (3800) Asapi: (16:20:01:6770)(3800) Asapi.State - Error -- 123 Plugin S3LogPusher.dll failed to load.

Error: (11/27/2014 04:20:01 PM) (Source: PC-Doctor) (EventID: 1) (User: )
Description: (3800) Asapi: (16:20:01:6300)(3800) libAsapi.DynamicLoadedPlugin - Error -- 64 Unable to load library 'S3LogPusher.dll'

Error: (11/27/2014 04:10:40 PM) (Source: PC-Doctor) (EventID: 1) (User: )
Description: (6252) Asapi: (16:10:40:3260)(6252) Asapi.State - Error -- 123 Plugin S3LogPusher.dll failed to load.

Error: (11/27/2014 04:10:40 PM) (Source: PC-Doctor) (EventID: 1) (User: )
Description: (6252) Asapi: (16:10:40:3100)(6252) libAsapi.DynamicLoadedPlugin - Error -- 64 Unable to load library 'S3LogPusher.dll'

Error: (11/26/2014 02:00:02 PM) (Source: PC-Doctor) (EventID: 1) (User: )
Description: (1032) Asapi: (14:00:02:3350)(1032) Asapi.State - Error -- 123 Plugin S3LogPusher.dll failed to load.

Error: (11/26/2014 02:00:02 PM) (Source: PC-Doctor) (EventID: 1) (User: )
Description: (1032) Asapi: (14:00:02:3040)(1032) libAsapi.DynamicLoadedPlugin - Error -- 64 Unable to load library 'S3LogPusher.dll'

Error: (11/25/2014 02:00:03 PM) (Source: PC-Doctor) (EventID: 1) (User: )
Description: (5548) Asapi: (14:00:03:8040)(5548) Asapi.State - Error -- 123 Plugin S3LogPusher.dll failed to load.

Error: (11/25/2014 02:00:03 PM) (Source: PC-Doctor) (EventID: 1) (User: )
Description: (5548) Asapi: (14:00:03:8040)(5548) libAsapi.DynamicLoadedPlugin - Error -- 64 Unable to load library 'S3LogPusher.dll'

Error: (11/24/2014 02:30:00 PM) (Source: PC-Doctor) (EventID: 1) (User: )
Description: (732) Asapi: (14:30:00:6890)(732) Asapi.State - Error -- 123 Plugin S3LogPusher.dll failed to load.
Code:
ATTFilter
Antivirus Pro
Erstellungsdatum der Reportdatei: Donnerstag, 27. November 2014  20:24


Das Programm läuft als uneingeschränkte Vollversion.
Online-Dienste stehen zur Verfügung.

Lizenznehmer   : 
Seriennummer   : 2221734228-PEPWE-0000001
Plattform      : Windows 7 Home Premium
Windowsversion : (Service Pack 1)  [6.1.7601]
Boot Modus     : Normal gebootet
Benutzername   : 3vento
Computername   : 3VENTO-PC

Versionsinformationen:
BUILD.DAT      : 14.0.7.342     94323 Bytes  22.10.2014 16:33:00
AVSCAN.EXE     : 14.0.7.312   1015544 Bytes  18.11.2014 11:00:29
AVSCANRC.DLL   : 14.0.7.308     64304 Bytes  18.11.2014 11:00:29
LUKE.DLL       : 14.0.7.310     60664 Bytes  18.11.2014 11:00:49
AVSCPLR.DLL    : 14.0.7.310     93488 Bytes  18.11.2014 11:00:29
REPAIR.DLL     : 14.0.7.312    366328 Bytes  18.11.2014 11:00:27
REPAIR.RDF     : 1.0.2.30      596694 Bytes  27.10.2014 08:46:17
AVREG.DLL      : 14.0.7.310    264952 Bytes  18.11.2014 11:00:27
AVLODE.DLL     : 14.0.7.312    563448 Bytes  18.11.2014 11:00:21
AVLODE.RDF     : 14.0.4.50      76508 Bytes  11.11.2014 12:08:20
XBV00012.VDF   : 8.11.165.190     2048 Bytes  07.08.2014 11:48:14
XBV00013.VDF   : 8.11.165.190     2048 Bytes  07.08.2014 11:48:14
XBV00014.VDF   : 8.11.165.190     2048 Bytes  07.08.2014 11:48:14
XBV00015.VDF   : 8.11.165.190     2048 Bytes  07.08.2014 11:48:14
XBV00016.VDF   : 8.11.165.190     2048 Bytes  07.08.2014 11:48:14
XBV00017.VDF   : 8.11.165.190     2048 Bytes  07.08.2014 11:48:15
XBV00018.VDF   : 8.11.165.190     2048 Bytes  07.08.2014 11:48:15
XBV00019.VDF   : 8.11.165.190     2048 Bytes  07.08.2014 11:48:15
XBV00020.VDF   : 8.11.165.190     2048 Bytes  07.08.2014 11:48:15
XBV00021.VDF   : 8.11.165.190     2048 Bytes  07.08.2014 11:48:15
XBV00022.VDF   : 8.11.165.190     2048 Bytes  07.08.2014 11:48:15
XBV00023.VDF   : 8.11.165.190     2048 Bytes  07.08.2014 11:48:15
XBV00024.VDF   : 8.11.165.190     2048 Bytes  07.08.2014 11:48:15
XBV00025.VDF   : 8.11.165.190     2048 Bytes  07.08.2014 11:48:15
XBV00026.VDF   : 8.11.165.190     2048 Bytes  07.08.2014 11:48:15
XBV00027.VDF   : 8.11.165.190     2048 Bytes  07.08.2014 11:48:15
XBV00028.VDF   : 8.11.165.190     2048 Bytes  07.08.2014 11:48:15
XBV00029.VDF   : 8.11.165.190     2048 Bytes  07.08.2014 11:48:15
XBV00030.VDF   : 8.11.165.190     2048 Bytes  07.08.2014 11:48:15
XBV00031.VDF   : 8.11.165.190     2048 Bytes  07.08.2014 11:48:15
XBV00032.VDF   : 8.11.165.190     2048 Bytes  07.08.2014 11:48:15
XBV00033.VDF   : 8.11.165.190     2048 Bytes  07.08.2014 11:48:15
XBV00034.VDF   : 8.11.165.190     2048 Bytes  07.08.2014 11:48:15
XBV00035.VDF   : 8.11.165.190     2048 Bytes  07.08.2014 11:48:15
XBV00036.VDF   : 8.11.165.190     2048 Bytes  07.08.2014 11:48:15
XBV00037.VDF   : 8.11.165.190     2048 Bytes  07.08.2014 11:48:15
XBV00038.VDF   : 8.11.165.190     2048 Bytes  07.08.2014 11:48:15
XBV00039.VDF   : 8.11.165.190     2048 Bytes  07.08.2014 11:48:15
XBV00040.VDF   : 8.11.165.190     2048 Bytes  07.08.2014 11:48:15
XBV00041.VDF   : 8.11.165.190     2048 Bytes  07.08.2014 11:48:15
XBV00177.VDF   : 8.11.184.50     2048 Bytes  11.11.2014 12:08:28
XBV00178.VDF   : 8.11.184.50     2048 Bytes  11.11.2014 12:08:28
XBV00179.VDF   : 8.11.184.50     2048 Bytes  11.11.2014 12:08:28
XBV00180.VDF   : 8.11.184.50     2048 Bytes  11.11.2014 12:08:28
XBV00181.VDF   : 8.11.184.50     2048 Bytes  11.11.2014 12:08:28
XBV00182.VDF   : 8.11.184.50     2048 Bytes  11.11.2014 12:08:28
XBV00183.VDF   : 8.11.184.50     2048 Bytes  11.11.2014 12:08:28
XBV00184.VDF   : 8.11.184.50     2048 Bytes  11.11.2014 12:08:28
XBV00185.VDF   : 8.11.184.50     2048 Bytes  11.11.2014 12:08:28
XBV00186.VDF   : 8.11.184.50     2048 Bytes  11.11.2014 12:08:28
XBV00187.VDF   : 8.11.184.50     2048 Bytes  11.11.2014 12:08:28
XBV00188.VDF   : 8.11.184.50     2048 Bytes  11.11.2014 12:08:28
XBV00189.VDF   : 8.11.184.50     2048 Bytes  11.11.2014 12:08:28
XBV00190.VDF   : 8.11.184.50     2048 Bytes  11.11.2014 12:08:28
XBV00191.VDF   : 8.11.184.50     2048 Bytes  11.11.2014 12:08:28
XBV00192.VDF   : 8.11.184.50     2048 Bytes  11.11.2014 12:08:28
XBV00193.VDF   : 8.11.184.50     2048 Bytes  11.11.2014 12:08:28
XBV00194.VDF   : 8.11.184.50     2048 Bytes  11.11.2014 12:08:28
XBV00195.VDF   : 8.11.184.50     2048 Bytes  11.11.2014 12:08:28
XBV00196.VDF   : 8.11.184.50     2048 Bytes  11.11.2014 12:08:28
XBV00197.VDF   : 8.11.184.50     2048 Bytes  11.11.2014 12:08:29
XBV00198.VDF   : 8.11.184.50     2048 Bytes  11.11.2014 12:08:29
XBV00199.VDF   : 8.11.184.50     2048 Bytes  11.11.2014 12:08:29
XBV00200.VDF   : 8.11.184.50     2048 Bytes  11.11.2014 12:08:29
XBV00201.VDF   : 8.11.184.50     2048 Bytes  11.11.2014 12:08:29
XBV00202.VDF   : 8.11.184.50     2048 Bytes  11.11.2014 12:08:29
XBV00203.VDF   : 8.11.184.50     2048 Bytes  11.11.2014 12:08:29
XBV00204.VDF   : 8.11.184.50     2048 Bytes  11.11.2014 12:08:29
XBV00205.VDF   : 8.11.184.50     2048 Bytes  11.11.2014 12:08:29
XBV00206.VDF   : 8.11.184.50     2048 Bytes  11.11.2014 12:08:29
XBV00207.VDF   : 8.11.184.50     2048 Bytes  11.11.2014 12:08:29
XBV00208.VDF   : 8.11.184.50     2048 Bytes  11.11.2014 12:08:29
XBV00209.VDF   : 8.11.184.50     2048 Bytes  11.11.2014 12:08:29
XBV00210.VDF   : 8.11.184.50     2048 Bytes  11.11.2014 12:08:29
XBV00211.VDF   : 8.11.184.50     2048 Bytes  11.11.2014 12:08:29
XBV00212.VDF   : 8.11.184.50     2048 Bytes  11.11.2014 12:08:29
XBV00213.VDF   : 8.11.184.50     2048 Bytes  11.11.2014 12:08:29
XBV00214.VDF   : 8.11.184.50     2048 Bytes  11.11.2014 12:08:29
XBV00215.VDF   : 8.11.184.50     2048 Bytes  11.11.2014 12:08:29
XBV00216.VDF   : 8.11.184.50     2048 Bytes  11.11.2014 12:08:29
XBV00217.VDF   : 8.11.184.50     2048 Bytes  11.11.2014 12:08:29
XBV00218.VDF   : 8.11.184.50     2048 Bytes  11.11.2014 12:08:29
XBV00219.VDF   : 8.11.184.50     2048 Bytes  11.11.2014 12:08:29
XBV00220.VDF   : 8.11.184.50     2048 Bytes  11.11.2014 12:08:29
XBV00221.VDF   : 8.11.184.50     2048 Bytes  11.11.2014 12:08:29
XBV00222.VDF   : 8.11.184.50     2048 Bytes  11.11.2014 12:08:29
XBV00223.VDF   : 8.11.184.50     2048 Bytes  11.11.2014 12:08:29
XBV00224.VDF   : 8.11.184.50     2048 Bytes  11.11.2014 12:08:29
XBV00225.VDF   : 8.11.184.50     2048 Bytes  11.11.2014 12:08:29
XBV00226.VDF   : 8.11.184.50     2048 Bytes  11.11.2014 12:08:30
XBV00227.VDF   : 8.11.184.50     2048 Bytes  11.11.2014 12:08:30
XBV00228.VDF   : 8.11.184.50     2048 Bytes  11.11.2014 12:08:30
XBV00229.VDF   : 8.11.184.50     2048 Bytes  11.11.2014 12:08:30
XBV00230.VDF   : 8.11.184.50     2048 Bytes  11.11.2014 12:08:30
XBV00231.VDF   : 8.11.184.50     2048 Bytes  11.11.2014 12:08:30
XBV00232.VDF   : 8.11.184.50     2048 Bytes  11.11.2014 12:08:30
XBV00233.VDF   : 8.11.184.50     2048 Bytes  11.11.2014 12:08:30
XBV00234.VDF   : 8.11.184.50     2048 Bytes  11.11.2014 12:08:30
XBV00235.VDF   : 8.11.184.50     2048 Bytes  11.11.2014 12:08:30
XBV00236.VDF   : 8.11.184.50     2048 Bytes  11.11.2014 12:08:30
XBV00237.VDF   : 8.11.184.50     2048 Bytes  11.11.2014 12:08:30
XBV00238.VDF   : 8.11.184.50     2048 Bytes  11.11.2014 12:08:30
XBV00239.VDF   : 8.11.184.50     2048 Bytes  11.11.2014 12:08:30
XBV00240.VDF   : 8.11.184.50     2048 Bytes  11.11.2014 12:08:30
XBV00241.VDF   : 8.11.184.50     2048 Bytes  11.11.2014 12:08:30
XBV00242.VDF   : 8.11.184.50     2048 Bytes  11.11.2014 12:08:30
XBV00243.VDF   : 8.11.184.50     2048 Bytes  11.11.2014 12:08:30
XBV00244.VDF   : 8.11.184.50     2048 Bytes  11.11.2014 12:08:30
XBV00245.VDF   : 8.11.184.50     2048 Bytes  11.11.2014 12:08:30
XBV00246.VDF   : 8.11.184.50     2048 Bytes  11.11.2014 12:08:30
XBV00247.VDF   : 8.11.184.50     2048 Bytes  11.11.2014 12:08:30
XBV00248.VDF   : 8.11.184.50     2048 Bytes  11.11.2014 12:08:30
XBV00249.VDF   : 8.11.184.50     2048 Bytes  11.11.2014 12:08:30
XBV00250.VDF   : 8.11.184.50     2048 Bytes  11.11.2014 12:08:30
XBV00251.VDF   : 8.11.184.50     2048 Bytes  11.11.2014 12:08:30
XBV00252.VDF   : 8.11.184.50     2048 Bytes  11.11.2014 12:08:30
XBV00253.VDF   : 8.11.184.50     2048 Bytes  11.11.2014 12:08:30
XBV00254.VDF   : 8.11.184.50     2048 Bytes  11.11.2014 12:08:31
XBV00255.VDF   : 8.11.184.50     2048 Bytes  11.11.2014 12:08:31
XBV00000.VDF   : 7.11.70.0   66736640 Bytes  04.04.2013 07:51:16
XBV00001.VDF   : 7.11.74.226  2201600 Bytes  30.04.2013 12:07:33
XBV00002.VDF   : 7.11.80.60   2751488 Bytes  28.05.2013 13:59:30
XBV00003.VDF   : 7.11.85.214  2162688 Bytes  21.06.2013 13:38:21
XBV00004.VDF   : 7.11.91.176  3903488 Bytes  23.07.2013 06:08:43
XBV00005.VDF   : 7.11.98.186  6822912 Bytes  29.08.2013 15:25:07
XBV00006.VDF   : 7.11.139.38 15708672 Bytes  27.03.2014 13:29:44
XBV00007.VDF   : 7.11.152.100  4193792 Bytes  02.06.2014 10:58:50
XBV00008.VDF   : 8.11.165.192  4251136 Bytes  07.08.2014 11:48:14
XBV00009.VDF   : 8.11.172.30  2094080 Bytes  15.09.2014 16:08:19
XBV00010.VDF   : 8.11.178.32  1581056 Bytes  14.10.2014 12:24:33
XBV00011.VDF   : 8.11.184.50  2178560 Bytes  11.11.2014 12:08:22
XBV00042.VDF   : 8.11.184.74     2048 Bytes  11.11.2014 12:08:22
XBV00043.VDF   : 8.11.184.98    37376 Bytes  11.11.2014 14:08:17
XBV00044.VDF   : 8.11.184.124    20992 Bytes  11.11.2014 19:18:51
XBV00045.VDF   : 8.11.184.126     2048 Bytes  11.11.2014 19:18:51
XBV00046.VDF   : 8.11.184.152    17920 Bytes  11.11.2014 08:08:31
XBV00047.VDF   : 8.11.184.154    12288 Bytes  11.11.2014 08:08:31
XBV00048.VDF   : 8.11.184.156     5632 Bytes  12.11.2014 08:08:31
XBV00049.VDF   : 8.11.184.160     6656 Bytes  12.11.2014 08:08:31
XBV00050.VDF   : 8.11.184.182     8704 Bytes  12.11.2014 10:08:46
XBV00051.VDF   : 8.11.184.202     6144 Bytes  12.11.2014 12:08:26
XBV00052.VDF   : 8.11.184.204    10752 Bytes  12.11.2014 12:08:27
XBV00053.VDF   : 8.11.184.224    28160 Bytes  12.11.2014 18:09:07
XBV00054.VDF   : 8.11.184.246    34304 Bytes  12.11.2014 07:20:46
XBV00055.VDF   : 8.11.184.250    15360 Bytes  12.11.2014 07:20:46
XBV00056.VDF   : 8.11.184.252    11776 Bytes  12.11.2014 07:20:46
XBV00057.VDF   : 8.11.185.18    35840 Bytes  13.11.2014 07:20:46
XBV00058.VDF   : 8.11.185.38    35840 Bytes  13.11.2014 13:20:36
XBV00059.VDF   : 8.11.185.58    10240 Bytes  13.11.2014 13:20:36
XBV00060.VDF   : 8.11.185.60     2048 Bytes  13.11.2014 13:20:36
XBV00061.VDF   : 8.11.185.62     7168 Bytes  13.11.2014 13:20:36
XBV00062.VDF   : 8.11.185.82     9216 Bytes  13.11.2014 19:20:36
XBV00063.VDF   : 8.11.185.102    29696 Bytes  13.11.2014 19:20:36
XBV00064.VDF   : 8.11.185.104     2048 Bytes  13.11.2014 19:20:36
XBV00065.VDF   : 8.11.185.108    20480 Bytes  13.11.2014 06:46:22
XBV00066.VDF   : 8.11.185.110     4608 Bytes  13.11.2014 06:46:22
XBV00067.VDF   : 8.11.185.112    26112 Bytes  14.11.2014 06:46:22
XBV00068.VDF   : 8.11.185.132     9216 Bytes  14.11.2014 11:35:56
XBV00069.VDF   : 8.11.185.150     4608 Bytes  14.11.2014 11:35:56
XBV00070.VDF   : 8.11.185.168    15360 Bytes  14.11.2014 15:35:52
XBV00071.VDF   : 8.11.185.186    17920 Bytes  14.11.2014 15:35:52
XBV00072.VDF   : 8.11.185.204     8192 Bytes  14.11.2014 15:35:52
XBV00073.VDF   : 8.11.185.224   203264 Bytes  14.11.2014 07:01:35
XBV00074.VDF   : 8.11.185.226     5120 Bytes  14.11.2014 07:01:35
XBV00075.VDF   : 8.11.185.228     2048 Bytes  14.11.2014 07:01:35
XBV00076.VDF   : 8.11.186.8     34304 Bytes  14.11.2014 13:01:32
XBV00077.VDF   : 8.11.186.26    41472 Bytes  15.11.2014 13:01:32
XBV00078.VDF   : 8.11.186.44     2048 Bytes  15.11.2014 13:01:32
XBV00079.VDF   : 8.11.186.62    18432 Bytes  15.11.2014 15:01:32
XBV00080.VDF   : 8.11.186.88    20480 Bytes  15.11.2014 17:01:32
XBV00081.VDF   : 8.11.186.106     2048 Bytes  15.11.2014 16:06:18
XBV00082.VDF   : 8.11.186.108    69632 Bytes  16.11.2014 16:06:18
XBV00083.VDF   : 8.11.186.110     2048 Bytes  16.11.2014 16:06:18
XBV00084.VDF   : 8.11.186.112     2048 Bytes  16.11.2014 16:06:18
XBV00085.VDF   : 8.11.186.128     5120 Bytes  16.11.2014 18:06:13
XBV00086.VDF   : 8.11.186.130    56320 Bytes  16.11.2014 18:06:13
XBV00087.VDF   : 8.11.186.146    67584 Bytes  17.11.2014 08:14:04
XBV00088.VDF   : 8.11.186.162   108032 Bytes  17.11.2014 19:22:02
XBV00089.VDF   : 8.11.186.164     2048 Bytes  17.11.2014 19:22:02
XBV00090.VDF   : 8.11.186.180     8704 Bytes  17.11.2014 19:22:02
XBV00091.VDF   : 8.11.186.196    16896 Bytes  17.11.2014 19:22:02
XBV00092.VDF   : 8.11.186.214    19968 Bytes  17.11.2014 07:00:09
XBV00093.VDF   : 8.11.186.218    25088 Bytes  17.11.2014 07:00:09
XBV00094.VDF   : 8.11.186.222    41984 Bytes  18.11.2014 07:00:10
XBV00095.VDF   : 8.11.186.224    10240 Bytes  18.11.2014 09:00:05
XBV00096.VDF   : 8.11.186.226     9728 Bytes  18.11.2014 11:00:56
XBV00097.VDF   : 8.11.186.230     2048 Bytes  18.11.2014 11:00:57
XBV00098.VDF   : 8.11.186.246    27648 Bytes  18.11.2014 19:00:07
XBV00099.VDF   : 8.11.187.4      2048 Bytes  18.11.2014 19:00:07
XBV00100.VDF   : 8.11.187.22    22528 Bytes  18.11.2014 08:13:32
XBV00101.VDF   : 8.11.187.36     2048 Bytes  18.11.2014 08:13:33
XBV00102.VDF   : 8.11.187.50    18432 Bytes  18.11.2014 08:13:33
XBV00103.VDF   : 8.11.187.66    34816 Bytes  19.11.2014 08:13:33
XBV00104.VDF   : 8.11.187.68    44032 Bytes  19.11.2014 13:17:05
XBV00105.VDF   : 8.11.187.70     2048 Bytes  19.11.2014 13:17:05
XBV00106.VDF   : 8.11.187.86    20992 Bytes  19.11.2014 20:55:41
XBV00107.VDF   : 8.11.187.100     2048 Bytes  19.11.2014 20:55:41
XBV00108.VDF   : 8.11.187.114     2048 Bytes  19.11.2014 20:55:41
XBV00109.VDF   : 8.11.187.128    36864 Bytes  19.11.2014 20:55:42
XBV00110.VDF   : 8.11.187.142    14336 Bytes  19.11.2014 23:23:53
XBV00111.VDF   : 8.11.187.144     2048 Bytes  19.11.2014 23:23:53
XBV00112.VDF   : 8.11.187.158    20992 Bytes  19.11.2014 07:43:34
XBV00113.VDF   : 8.11.187.160     2048 Bytes  19.11.2014 07:43:34
XBV00114.VDF   : 8.11.187.176    31232 Bytes  20.11.2014 07:43:34
XBV00115.VDF   : 8.11.187.188    20992 Bytes  20.11.2014 12:36:20
XBV00116.VDF   : 8.11.187.200    19968 Bytes  20.11.2014 12:36:21
XBV00117.VDF   : 8.11.187.214    15872 Bytes  20.11.2014 11:22:26
XBV00118.VDF   : 8.11.187.216    50176 Bytes  20.11.2014 11:22:27
XBV00119.VDF   : 8.11.187.220     5632 Bytes  20.11.2014 11:22:27
XBV00120.VDF   : 8.11.187.222     3584 Bytes  20.11.2014 11:22:27
XBV00121.VDF   : 8.11.187.236     6144 Bytes  21.11.2014 11:22:27
XBV00122.VDF   : 8.11.187.248     7680 Bytes  21.11.2014 11:22:27
XBV00123.VDF   : 8.11.188.4     11264 Bytes  21.11.2014 11:22:27
XBV00124.VDF   : 8.11.188.16    14336 Bytes  21.11.2014 13:22:13
XBV00125.VDF   : 8.11.188.18     6656 Bytes  21.11.2014 17:12:04
XBV00126.VDF   : 8.11.188.20     2048 Bytes  21.11.2014 17:12:04
XBV00127.VDF   : 8.11.188.24    45056 Bytes  21.11.2014 13:07:27
XBV00128.VDF   : 8.11.188.26     4608 Bytes  21.11.2014 13:07:27
XBV00129.VDF   : 8.11.188.28     6656 Bytes  21.11.2014 13:07:27
XBV00130.VDF   : 8.11.188.32    83456 Bytes  22.11.2014 13:07:27
XBV00131.VDF   : 8.11.188.44     6144 Bytes  22.11.2014 13:07:27
XBV00132.VDF   : 8.11.188.58    19968 Bytes  22.11.2014 17:07:22
XBV00133.VDF   : 8.11.188.70    93184 Bytes  23.11.2014 13:18:27
XBV00134.VDF   : 8.11.188.80     2048 Bytes  23.11.2014 13:18:27
XBV00135.VDF   : 8.11.188.90    13312 Bytes  23.11.2014 07:42:18
XBV00136.VDF   : 8.11.188.92    28160 Bytes  23.11.2014 07:42:18
XBV00137.VDF   : 8.11.188.94    55808 Bytes  24.11.2014 07:42:18
XBV00138.VDF   : 8.11.188.96     4096 Bytes  24.11.2014 13:14:12
XBV00139.VDF   : 8.11.188.106     2048 Bytes  24.11.2014 13:14:13
XBV00140.VDF   : 8.11.188.116    28672 Bytes  24.11.2014 13:14:20
XBV00141.VDF   : 8.11.188.128    13824 Bytes  24.11.2014 18:18:26
XBV00142.VDF   : 8.11.188.142    14336 Bytes  24.11.2014 07:42:34
XBV00143.VDF   : 8.11.188.144     2048 Bytes  24.11.2014 07:42:34
XBV00144.VDF   : 8.11.188.146     7680 Bytes  24.11.2014 07:42:34
XBV00145.VDF   : 8.11.188.148     2048 Bytes  25.11.2014 07:42:34
XBV00146.VDF   : 8.11.188.150     2048 Bytes  25.11.2014 07:42:34
XBV00147.VDF   : 8.11.188.152     4608 Bytes  25.11.2014 07:42:34
XBV00148.VDF   : 8.11.188.154    15872 Bytes  25.11.2014 07:42:34
XBV00149.VDF   : 8.11.188.156     2048 Bytes  25.11.2014 07:42:34
XBV00150.VDF   : 8.11.188.166    16896 Bytes  25.11.2014 09:42:35
XBV00151.VDF   : 8.11.188.174     9728 Bytes  25.11.2014 09:42:35
XBV00152.VDF   : 8.11.188.194    20480 Bytes  25.11.2014 13:42:31
XBV00153.VDF   : 8.11.188.204    17408 Bytes  25.11.2014 07:09:25
XBV00154.VDF   : 8.11.188.206     2048 Bytes  25.11.2014 07:09:25
XBV00155.VDF   : 8.11.188.208     2048 Bytes  25.11.2014 07:09:25
XBV00156.VDF   : 8.11.188.210     2048 Bytes  25.11.2014 07:09:25
XBV00157.VDF   : 8.11.188.212     2048 Bytes  25.11.2014 07:09:25
XBV00158.VDF   : 8.11.188.216    65536 Bytes  25.11.2014 07:09:25
XBV00159.VDF   : 8.11.188.218    10752 Bytes  25.11.2014 07:09:26
XBV00160.VDF   : 8.11.188.220     8704 Bytes  26.11.2014 07:09:26
XBV00161.VDF   : 8.11.188.230    24576 Bytes  26.11.2014 07:09:26
XBV00162.VDF   : 8.11.188.238    13824 Bytes  26.11.2014 12:21:15
XBV00163.VDF   : 8.11.188.246    15872 Bytes  26.11.2014 12:21:15
XBV00164.VDF   : 8.11.188.254    33792 Bytes  26.11.2014 14:21:13
XBV00165.VDF   : 8.11.189.0      2048 Bytes  26.11.2014 14:21:13
XBV00166.VDF   : 8.11.189.6     55808 Bytes  26.11.2014 20:21:14
XBV00167.VDF   : 8.11.189.16    17920 Bytes  26.11.2014 22:24:52
XBV00168.VDF   : 8.11.189.22     6144 Bytes  26.11.2014 07:03:08
XBV00169.VDF   : 8.11.189.28     6144 Bytes  27.11.2014 07:03:08
XBV00170.VDF   : 8.11.189.34    18944 Bytes  27.11.2014 07:03:08
XBV00171.VDF   : 8.11.189.36     9728 Bytes  27.11.2014 15:10:05
XBV00172.VDF   : 8.11.189.38    29184 Bytes  27.11.2014 15:10:05
XBV00173.VDF   : 8.11.189.40     2048 Bytes  27.11.2014 15:10:05
XBV00174.VDF   : 8.11.189.46    77824 Bytes  27.11.2014 19:09:31
XBV00175.VDF   : 8.11.189.48     8192 Bytes  27.11.2014 19:09:31
XBV00176.VDF   : 8.11.189.52     2048 Bytes  27.11.2014 19:09:31
LOCAL000.VDF   : 8.11.189.52 116038656 Bytes  27.11.2014 19:09:48
Engineversion  : 8.3.26.26 
AEVDF.DLL      : 8.3.1.6       133992 Bytes  21.08.2014 11:48:11
AESCRIPT.DLL   : 8.2.2.30      539504 Bytes  27.11.2014 15:10:05
AESCN.DLL      : 8.3.2.2       139456 Bytes  21.07.2014 11:10:25
AESBX.DLL      : 8.2.20.24    1409224 Bytes  08.05.2014 15:05:26
AERDL.DLL      : 8.2.1.16      743328 Bytes  29.10.2014 11:15:57
AEPACK.DLL     : 8.4.0.56      789360 Bytes  27.11.2014 15:10:05
AEOFFICE.DLL   : 8.3.1.8       350120 Bytes  27.11.2014 15:10:04
AEHEUR.DLL     : 8.1.4.1418   7863152 Bytes  27.11.2014 15:10:04
AEHELP.DLL     : 8.3.1.0       278728 Bytes  28.05.2014 16:00:22
AEGEN.DLL      : 8.1.7.36      457576 Bytes  27.11.2014 15:09:59
AEEXP.DLL      : 8.4.2.48      252776 Bytes  25.11.2014 11:42:32
AEEMU.DLL      : 8.1.3.4       399264 Bytes  21.08.2014 11:48:09
AEDROID.DLL    : 8.4.2.248     812968 Bytes  17.11.2014 19:22:01
AECORE.DLL     : 8.3.3.0       244592 Bytes  25.11.2014 11:42:32
AEBB.DLL       : 8.1.2.0        60448 Bytes  21.08.2014 11:48:08
AVWINLL.DLL    : 14.0.7.308     25904 Bytes  18.11.2014 11:00:16
AVPREF.DLL     : 14.0.7.308     52016 Bytes  18.11.2014 11:00:26
AVREP.DLL      : 14.0.7.308    220976 Bytes  18.11.2014 11:00:27
AVARKT.DLL     : 14.0.7.308    227632 Bytes  18.11.2014 11:00:16
AVEVTLOG.DLL   : 14.0.7.310    184112 Bytes  18.11.2014 11:00:19
SQLITE3.DLL    : 14.0.7.308    453936 Bytes  18.11.2014 11:00:55
AVSMTP.DLL     : 14.0.7.308     79096 Bytes  18.11.2014 11:00:30
NETNT.DLL      : 14.0.7.308     15152 Bytes  18.11.2014 11:00:49
RCIMAGE.DLL    : 14.0.7.308   4888824 Bytes  18.11.2014 11:00:16
RCTEXT.DLL     : 14.0.7.318     76080 Bytes  18.11.2014 11:00:16

Konfiguration für den aktuellen Suchlauf:
Job Name..............................: Vollständige Systemprüfung
Konfigurationsdatei...................: C:\Program Files (x86)\Avira\AntiVir Desktop\sysscan.avp
Protokollierung.......................: standard
Primäre Aktion........................: Interaktiv
Sekundäre Aktion......................: Ignorieren
Durchsuche Masterbootsektoren.........: ein
Durchsuche Bootsektoren...............: ein
Bootsektoren..........................: C:, 
Durchsuche aktive Programme...........: ein
Laufende Programme erweitert..........: ein
Durchsuche Registrierung..............: ein
Suche nach Rootkits...................: ein
Integritätsprüfung von Systemdateien..: aus
Prüfe alle Dateien....................: Alle Dateien
Durchsuche Archive....................: ein
Rekursionstiefe einschränken..........: 20
Archiv Smart Extensions...............: ein
Makrovirenheuristik...................: ein
Dateiheuristik........................: erweitert

Beginn des Suchlaufs: Donnerstag, 27. November 2014  20:24

Der Suchlauf über die Bootsektoren wird begonnen:
Bootsektor 'HDD0(C:)'
    [INFO]      Es wurde kein Virus gefunden!

Der Suchlauf nach versteckten Objekten wird begonnen.

Der Suchlauf über gestartete Prozesse wird begonnen:
Durchsuche Prozess 'svchost.exe' - '52' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '39' Modul(e) wurden durchsucht
Durchsuche Prozess 'atiesrxx.exe' - '26' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '104' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '125' Modul(e) wurden durchsucht
Durchsuche Prozess 'FAService.exe' - '98' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '90' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '165' Modul(e) wurden durchsucht
Durchsuche Prozess 'STacSV64.exe' - '36' Modul(e) wurden durchsucht
Durchsuche Prozess 'DockLogin.exe' - '27' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '86' Modul(e) wurden durchsucht
Durchsuche Prozess 'atieclxx.exe' - '30' Modul(e) wurden durchsucht
Durchsuche Prozess 'WLTRYSVC.EXE' - '17' Modul(e) wurden durchsucht
Durchsuche Prozess 'WLANExt.exe' - '34' Modul(e) wurden durchsucht
Durchsuche Prozess 'conhost.exe' - '14' Modul(e) wurden durchsucht
Durchsuche Prozess 'bcmwltry.exe' - '83' Modul(e) wurden durchsucht
Durchsuche Prozess 'spoolsv.exe' - '97' Modul(e) wurden durchsucht
Durchsuche Prozess 'sched.exe' - '63' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '62' Modul(e) wurden durchsucht
Durchsuche Prozess 'armsvc.exe' - '28' Modul(e) wurden durchsucht
Durchsuche Prozess 'AESTSr64.exe' - '8' Modul(e) wurden durchsucht
Durchsuche Prozess 'avguard.exe' - '146' Modul(e) wurden durchsucht
Durchsuche Prozess 'Dwm.exe' - '35' Modul(e) wurden durchsucht
Durchsuche Prozess 'AppleMobileDeviceService.exe' - '70' Modul(e) wurden durchsucht
Durchsuche Prozess 'Explorer.EXE' - '194' Modul(e) wurden durchsucht
Durchsuche Prozess 'mDNSResponder.exe' - '36' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '35' Modul(e) wurden durchsucht
Durchsuche Prozess 'btwdins.exe' - '30' Modul(e) wurden durchsucht
Durchsuche Prozess 'SkypeC2CAutoUpdateSvc.exe' - '47' Modul(e) wurden durchsucht
Durchsuche Prozess 'SkypeC2CPNRSvc.exe' - '25' Modul(e) wurden durchsucht
Durchsuche Prozess 'HPSupportSolutionsFrameworkService.exe' - '78' Modul(e) wurden durchsucht
Durchsuche Prozess 'STService.exe' - '62' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '21' Modul(e) wurden durchsucht
Durchsuche Prozess 'NOBuAgent.exe' - '30' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '21' Modul(e) wurden durchsucht
Durchsuche Prozess 'polard.exe' - '39' Modul(e) wurden durchsucht
Durchsuche Prozess 'sftservice.EXE' - '53' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '32' Modul(e) wurden durchsucht
Durchsuche Prozess 'WLIDSVC.EXE' - '77' Modul(e) wurden durchsucht
Durchsuche Prozess 'WLIDSvcM.exe' - '17' Modul(e) wurden durchsucht
Durchsuche Prozess 'SynTPEnh.exe' - '55' Modul(e) wurden durchsucht
Durchsuche Prozess 'sttray64.exe' - '41' Modul(e) wurden durchsucht
Durchsuche Prozess 'WLTRAY.EXE' - '76' Modul(e) wurden durchsucht
Durchsuche Prozess 'WebSync.exe' - '56' Modul(e) wurden durchsucht
Durchsuche Prozess 'DellDock.exe' - '123' Modul(e) wurden durchsucht
Durchsuche Prozess 'Dropbox.exe' - '104' Modul(e) wurden durchsucht
Durchsuche Prozess 'avgnt.exe' - '108' Modul(e) wurden durchsucht
Durchsuche Prozess 'FATrayMon.exe' - '25' Modul(e) wurden durchsucht
Durchsuche Prozess 'MOM.exe' - '70' Modul(e) wurden durchsucht
Durchsuche Prozess 'iTunesHelper.exe' - '79' Modul(e) wurden durchsucht
Durchsuche Prozess 'FATrayAlert.exe' - '64' Modul(e) wurden durchsucht
Durchsuche Prozess 'CCC.exe' - '165' Modul(e) wurden durchsucht
Durchsuche Prozess 'SynTPHelper.exe' - '17' Modul(e) wurden durchsucht
Durchsuche Prozess 'DllHost.exe' - '40' Modul(e) wurden durchsucht
Durchsuche Prozess 'avshadow.exe' - '29' Modul(e) wurden durchsucht
Durchsuche Prozess 'avmailc.exe' - '44' Modul(e) wurden durchsucht
Durchsuche Prozess 'AVWEBGRD.EXE' - '68' Modul(e) wurden durchsucht
Durchsuche Prozess 'alg.exe' - '26' Modul(e) wurden durchsucht
Durchsuche Prozess 'iPodService.exe' - '33' Modul(e) wurden durchsucht
Durchsuche Prozess 'SearchIndexer.exe' - '54' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '61' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '38' Modul(e) wurden durchsucht
Durchsuche Prozess 'wmpnetwk.exe' - '120' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '60' Modul(e) wurden durchsucht
Durchsuche Prozess 'DllHost.exe' - '45' Modul(e) wurden durchsucht
Durchsuche Prozess 'PresentationFontCache.exe' - '35' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '42' Modul(e) wurden durchsucht
Durchsuche Prozess 'IAStorDataMgrSvc.exe' - '51' Modul(e) wurden durchsucht
Durchsuche Prozess 'SeaPort.exe' - '55' Modul(e) wurden durchsucht
Durchsuche Prozess 'thunderbird.exe' - '125' Modul(e) wurden durchsucht
Durchsuche Prozess 'avcenter.exe' - '151' Modul(e) wurden durchsucht
Durchsuche Prozess 'avscan.exe' - '122' Modul(e) wurden durchsucht
Durchsuche Prozess 'vssvc.exe' - '47' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '28' Modul(e) wurden durchsucht
Durchsuche Prozess 'smss.exe' - '2' Modul(e) wurden durchsucht
Durchsuche Prozess 'csrss.exe' - '18' Modul(e) wurden durchsucht
Durchsuche Prozess 'wininit.exe' - '26' Modul(e) wurden durchsucht
Durchsuche Prozess 'csrss.exe' - '18' Modul(e) wurden durchsucht
Durchsuche Prozess 'services.exe' - '36' Modul(e) wurden durchsucht
Durchsuche Prozess 'lsass.exe' - '88' Modul(e) wurden durchsucht
Durchsuche Prozess 'lsm.exe' - '16' Modul(e) wurden durchsucht
Durchsuche Prozess 'winlogon.exe' - '31' Modul(e) wurden durchsucht

Der Suchlauf auf Verweise zu ausführbaren Dateien (Registry) wird begonnen:
Die Registry wurde durchsucht ( '4111' Dateien ).


Der Suchlauf über die ausgewählten Dateien wird begonnen:

Beginne mit der Suche in 'C:\' <OS>
C:\SCHEUERMANN\3vento GmbH\Website\contact\xxx_index.yyy
  [FUND]      Enthält Erkennungsmuster des Exploits EXP/JS.Expack.GQ
C:\Users\3vento\AppData\Local\Temp\2F2C.tmp
  [FUND]      Ist das Trojanische Pferd TR/Crypt.Xpack.104702
C:\Users\3vento\AppData\Local\Temp\6CC8.tmp
  [FUND]      Ist das Trojanische Pferd TR/Injector.293376.3
C:\Users\3vento\AppData\Local\Temp\D3C3.tmp
  [FUND]      Ist das Trojanische Pferd TR/Crypt.Xpack.106857
C:\Users\3vento\AppData\Local\Temp\F063.tmp
  [FUND]      Ist das Trojanische Pferd TR/Crypt.Xpack.103408
    [0] Archivtyp: RSRC
    --> C:\Users\3vento\AppData\Roaming\Dropbox\bin\Dropbox.exe
        [1] Archivtyp: RSRC
      --> C:\Users\3vento\AppData\Local\Temp\jre-7u21-windows-i586-iftw.exe
          [2] Archivtyp: Runtime Packed
        --> C:\Users\3vento\AppData\Local\Temp\jre-7u25-windows-i586-iftw.exe
            [3] Archivtyp: Runtime Packed
          --> C:\Users\3vento\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe
              [4] Archivtyp: Runtime Packed
            --> C:\Users\3vento\AppData\Local\Temp\jre-7u51-windows-i586-iftw.exe
                [5] Archivtyp: Runtime Packed
              --> C:\Users\3vento\AppData\Local\Temp\jre-7u55-windows-i586-iftw.exe
                  [6] Archivtyp: Runtime Packed
                --> C:\Users\3vento\AppData\Local\Temp\jre-7u65-windows-i586-iftw.exe
                    [7] Archivtyp: Runtime Packed
                  --> C:\Users\3vento\AppData\Local\Temp\jre-7u67-windows-i586-iftw.exe
                      [8] Archivtyp: Runtime Packed
                    --> C:\Users\3vento\AppData\Local\Temp\jre-7u71-windows-i586-iftw.exe
                        [9] Archivtyp: Runtime Packed
                      --> C:\Users\3vento\AppData\Roaming\Dropbox\bin\Dropbox.exe
                          [10] Archivtyp: RSRC
                        --> C:\Users\3vento\Downloads\jxpiinstall(1).exe
                            [11] Archivtyp: Runtime Packed
                          --> C:\Users\3vento\Downloads\jxpiinstall(2).exe
                              [12] Archivtyp: Runtime Packed
                            --> C:\Users\3vento\Downloads\jxpiinstall.exe
                                [13] Archivtyp: Runtime Packed
                              --> C:\Users\3vento\Downloads\rechnung_11_2014_3280000236_telekom_de.zip
                                  [14] Archivtyp: ZIP
                                --> rechnung_11_2014_3280000236_telekom_de_002839300002_11_0000352899_000005.exe
                                    [FUND]      Ist das Trojanische Pferd TR/Matsnu.lamop.1
                                    [WARNUNG]   Infizierte Dateien in Archiven können nicht repariert werden
C:\Users\3vento\Downloads\rechnung_11_2014_3280000236_telekom_de.zip
  [FUND]      Ist das Trojanische Pferd TR/Matsnu.lamop.1

Beginne mit der Desinfektion:
C:\Users\3vento\Downloads\rechnung_11_2014_3280000236_telekom_de.zip
  [FUND]      Ist das Trojanische Pferd TR/Matsnu.lamop.1
  [HINWEIS]   Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '501a0125.qua' verschoben!
C:\Users\3vento\AppData\Local\Temp\F063.tmp
  [FUND]      Ist das Trojanische Pferd TR/Crypt.Xpack.103408
  [HINWEIS]   Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '48fa2e75.qua' verschoben!
C:\Users\3vento\AppData\Local\Temp\D3C3.tmp
  [FUND]      Ist das Trojanische Pferd TR/Crypt.Xpack.106857
  [HINWEIS]   Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '1ab27498.qua' verschoben!
C:\Users\3vento\AppData\Local\Temp\6CC8.tmp
  [FUND]      Ist das Trojanische Pferd TR/Injector.293376.3
  [HINWEIS]   Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '7c853b4a.qua' verschoben!
C:\Users\3vento\AppData\Local\Temp\2F2C.tmp
  [FUND]      Ist das Trojanische Pferd TR/Crypt.Xpack.104702
  [HINWEIS]   Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '39121677.qua' verschoben!
C:\SCHEUERMANN\3vento GmbH\Website\contact\xxx_index.yyy
  [FUND]      Enthält Erkennungsmuster des Exploits EXP/JS.Expack.GQ
  [HINWEIS]   Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '464f24d8.qua' verschoben!


Ende des Suchlaufs: Donnerstag, 27. November 2014  23:05
Benötigte Zeit:  2:30:14 Stunde(n)

Der Suchlauf wurde vollständig durchgeführt.

  61566 Verzeichnisse wurden überprüft
 1111554 Dateien wurden geprüft
      7 Viren bzw. unerwünschte Programme wurden gefunden
      0 Dateien wurden als verdächtig eingestuft
      0 Dateien wurden gelöscht
      0 Viren bzw. unerwünschte Programme wurden repariert
      6 Dateien wurden in die Quarantäne verschoben
      0 Dateien wurden umbenannt
      0 Dateien konnten nicht durchsucht werden
 1111547 Dateien ohne Befall
  13468 Archive wurden durchsucht
      1 Warnungen
      6 Hinweise
 1217024 Objekte wurden beim Rootkitscan durchsucht
      0 Versteckte Objekte wurden gefunden
__________________
Geändert von Iron111 (28.11.2014 um 21:15 Uhr)

Alt 28.11.2014, 22:09   #4
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Windows 7 mit verschiedenen Trojanerdateien - Standard

Windows 7 mit verschiedenen Trojanerdateien


Dann bitte jetzt Combofix ausführen:

Scan mit Combofix
WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link
  • WICHTIG: Speichere Combofix auf deinem Desktop.
  • Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.
  • Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.
  • Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!
  • Wenn Combofix fertig ist, wird es ein Logfile erstellen.
  • Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).
Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.

__________________
Logfiles bitte immer in CODE-Tags posten

Alt 28.11.2014, 22:53   #5
Iron111
 
Windows 7 mit verschiedenen Trojanerdateien - Standard

Windows 7 mit verschiedenen Trojanerdateien


Code:
ATTFilter
ComboFix 14-11-25.01 - 3vento 28.11.2014  22:38:21.1.8 - x64
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.49.1031.18.4084.1813 [GMT 1:00]
ausgeführt von:: c:\users\3vento\Downloads\ComboFix.exe
AV: Avira Desktop *Enabled/Updated* {4D041356-F94D-285F-8768-AAE50FA36859}
SP: Avira Desktop *Enabled/Updated* {F665F2B2-DF77-27D1-BDD8-9197742422E4}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 * Neuer Wiederherstellungspunkt wurde erstellt
.
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\3vento\AppData\Local\Microsoft\Windows\Temporary Internet Files\{28E9513B-99F6-4EFA-8D2C-F0943C4C189D}.xps
c:\users\3vento\AppData\Local\Microsoft\Windows\Temporary Internet Files\{C75A023D-36F3-4153-A6CB-CAFB4D4D0C40}.xps
c:\users\3vento\AppData\Roaming\Identities\gagbcamc.exe
.
.
(((((((((((((((((((((((   Dateien erstellt von 2014-10-28 bis 2014-11-28  ))))))))))))))))))))))))))))))
.
.
2014-11-28 21:47 . 2014-11-28 21:47	--------	d-----w-	c:\users\Default\AppData\Local\temp
2014-11-27 17:50 . 2014-11-27 17:53	--------	d-----w-	C:\FRST
2014-11-25 13:17 . 2014-11-25 13:17	--------	d-sh--w-	c:\users\3vento\AppData\Local\EmieBrowserModeList
2014-11-19 08:31 . 2014-11-11 03:08	241152	----a-w-	c:\windows\system32\pku2u.dll
2014-11-19 08:31 . 2014-11-11 03:08	728064	----a-w-	c:\windows\system32\kerberos.dll
2014-11-19 08:31 . 2014-11-11 02:44	186880	----a-w-	c:\windows\SysWow64\pku2u.dll
2014-11-19 08:31 . 2014-11-11 02:44	550912	----a-w-	c:\windows\SysWow64\kerberos.dll
2014-11-12 08:16 . 2014-11-06 04:11	950784	----a-w-	c:\program files\Internet Explorer\iedvtool.dll
2014-11-12 08:16 . 2014-11-06 03:46	580096	----a-w-	c:\windows\system32\vbscript.dll
2014-11-12 08:16 . 2014-11-06 03:29	814080	----a-w-	c:\windows\system32\jscript9diag.dll
2014-11-12 08:16 . 2014-11-06 03:23	6040064	----a-w-	c:\windows\system32\jscript9.dll
2014-11-12 08:16 . 2014-11-06 02:17	2365440	----a-w-	c:\windows\system32\wininet.dll
2014-11-12 08:16 . 2014-11-06 01:58	378880	----a-w-	c:\program files\Internet Explorer\IEShims.dll
2014-11-12 08:16 . 2014-11-07 19:49	293040	----a-w-	c:\program files\Internet Explorer\sqmapi.dll
2014-11-12 08:16 . 2014-11-06 04:03	25110016	----a-w-	c:\windows\system32\mshtml.dll
2014-11-12 08:16 . 2014-11-06 03:44	88064	----a-w-	c:\windows\system32\MshtmlDac.dll
2014-11-12 08:16 . 2014-11-06 03:02	199680	----a-w-	c:\windows\system32\msrating.dll
2014-11-12 08:16 . 2014-11-06 03:00	1016832	----a-w-	c:\program files\Common Files\Microsoft Shared\VGX\VGX.dll
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-11-26 12:54 . 2012-04-26 21:55	701104	----a-w-	c:\windows\SysWow64\FlashPlayerApp.exe
2014-11-26 12:54 . 2011-06-06 17:25	71344	----a-w-	c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2014-11-12 13:28 . 2011-02-11 18:13	103374192	----a-w-	c:\windows\system32\MRT.exe
2014-10-23 17:26 . 2014-10-23 17:27	98216	----a-w-	c:\windows\SysWow64\WindowsAccessBridge-32.dll
2014-10-07 09:01 . 2013-05-06 10:04	43064	----a-w-	c:\windows\system32\drivers\avnetflt.sys
2014-10-07 09:01 . 2013-03-21 14:19	131608	----a-w-	c:\windows\system32\drivers\avipbb.sys
2014-10-07 09:01 . 2013-03-21 14:19	119272	----a-w-	c:\windows\system32\drivers\avgntflt.sys
2014-10-02 13:23 . 2014-10-02 13:23	94208	----a-w-	c:\windows\SysWow64\QuickTimeVR.qtx
2014-10-02 13:23 . 2014-10-02 13:23	69632	----a-w-	c:\windows\SysWow64\QuickTime.qts
2014-09-25 02:08 . 2014-10-01 07:05	371712	----a-w-	c:\windows\system32\qdvd.dll
2014-09-25 01:40 . 2014-10-01 07:05	519680	----a-w-	c:\windows\SysWow64\qdvd.dll
2014-09-09 22:11 . 2014-09-24 07:09	2048	----a-w-	c:\windows\system32\tzres.dll
2014-09-09 21:47 . 2014-09-24 07:09	2048	----a-w-	c:\windows\SysWow64\tzres.dll
2014-09-04 05:23 . 2014-10-17 06:48	424448	----a-w-	c:\windows\system32\rastls.dll
2014-09-04 05:04 . 2014-10-17 06:48	372736	----a-w-	c:\windows\SysWow64\rastls.dll
2013-11-16 12:13 . 2014-08-31 16:47	13046784	----a-w-	c:\program files\Vasco da Gama 8 Advanced_Ita.msi
2013-11-16 12:12 . 2014-08-31 16:46	13039104	----a-w-	c:\program files\Vasco da Gama 8 Advanced_Fra.msi
2013-11-16 12:11 . 2014-08-31 16:46	13027328	----a-w-	c:\program files\Vasco da Gama 8 Advanced_Eng.msi
2013-11-16 12:10 . 2014-08-31 16:47	12944896	----a-w-	c:\program files\Vasco da Gama 8 Advanced_Ger.msi
2013-10-29 14:10 . 2014-08-31 16:46	4753408	----a-w-	c:\program files\Setup.exe
2013-10-28 11:43 . 2014-08-31 16:46	364544	----a-w-	c:\program files\setup_ita.exe
2013-10-28 11:36 . 2014-08-31 16:46	364544	----a-w-	c:\program files\setup_fra.exe
2013-10-28 11:32 . 2014-08-31 16:46	364544	----a-w-	c:\program files\setup_eng.exe
2012-10-29 13:13 . 2014-08-31 16:46	364544	----a-w-	c:\program files\setup_ger.exe
2004-11-28 08:53 . 2014-08-31 16:46	1822520	----a-w-	c:\program files\instmsiw.exe
2004-11-28 08:53 . 2014-08-31 16:46	1708856	----a-w-	c:\program files\instmsia.exe
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt1"]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2014-06-24 21:08	131480	----a-w-	c:\users\3vento\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt2"]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2014-06-24 21:08	131480	----a-w-	c:\users\3vento\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt3"]
@="{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}]
2014-06-24 21:08	131480	----a-w-	c:\users\3vento\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt4"]
@="{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}]
2014-06-24 21:08	131480	----a-w-	c:\users\3vento\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt5"]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2014-06-24 21:08	131480	----a-w-	c:\users\3vento\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt6"]
@="{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}]
2014-06-24 21:08	131480	----a-w-	c:\users\3vento\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt7"]
@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
2014-06-24 21:08	131480	----a-w-	c:\users\3vento\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt8"]
@="{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}]
2014-06-24 21:08	131480	----a-w-	c:\users\3vento\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2010-01-22 98304]
"avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2014-11-18 703736]
"FATrayAlert"="c:\program files (x86)\Sensible Vision\Fast Access\FATrayMon.exe" [2010-11-02 93832]
"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2014-10-11 60712]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2014-09-12 959176]
"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2014-10-15 157480]
"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2014-10-02 421888]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce]
"Launcher"="c:\program files (x86)\Dell DataSafe Local Backup\Components\Scheduler\Launcher.exe" [2010-08-12 163040]
"DSUpdateLauncher"="c:\program files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\hstart.exe" [2010-07-21 18240]
.
c:\users\3vento\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Dell Dock.lnk - c:\program files\Dell\DellDock\DellDock.exe [2010-5-28 1324384]
Dropbox.lnk - c:\users\3vento\AppData\Roaming\Dropbox\bin\Dropbox.exe /systemstartup [2014-11-13 35419192]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Polar WebSync.lnk - c:\program files (x86)\Polar\WebSync\WebSync.exe -normal [2013-2-26 6227512]
.
c:\users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Dell Dock First Run.lnk - c:\program files\Dell\DellDock\DellDock.exe /firstrun [2010-5-28 1324384]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon]
"Userinit"="userinit.exe"
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\FastAccess]
2010-11-02 04:40	147080	----a-w-	c:\program files (x86)\Sensible Vision\Fast Access\FALogNot.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"mixer3"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Notification Packages	REG_MULTI_SZ   	scecli FAPassSync
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
.
R2 BBSvc;BingBar Service;c:\program files (x86)\Microsoft\BingBar\7.3.132.0\BBSvc.exe;c:\program files (x86)\Microsoft\BingBar\7.3.132.0\BBSvc.exe [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 RoxWatch12;Roxio Hard Drive Watcher 12;c:\program files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatch12OEM.exe;c:\program files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatch12OEM.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R3 FACAP;facap, FastAccess Video Capture;c:\windows\system32\DRIVERS\facap.sys;c:\windows\SYSNATIVE\DRIVERS\facap.sys [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 RoxMediaDB12OEM;RoxMediaDB12OEM;c:\program files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxMediaDB12OEM.exe;c:\program files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxMediaDB12OEM.exe [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TurboBoost;TurboBoost;c:\program files\Intel\TurboBoost\TurboBoost.exe;c:\program files\Intel\TurboBoost\TurboBoost.exe [x]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x]
R3 WatAdminSvc;Windows-Aktivierungstechnologieservice;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
R3 WSDScan;WSD-Scanunterstützung durch UMB;c:\windows\system32\DRIVERS\WSDScan.sys;c:\windows\SYSNATIVE\DRIVERS\WSDScan.sys [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe;c:\program files\Windows Live\Mesh\wlcrasvc.exe [x]
S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys;c:\windows\SYSNATIVE\Drivers\PxHlpa64.sys [x]
S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys;c:\windows\SYSNATIVE\DRIVERS\avkmgr.sys [x]
S2 AESTFilters;Andrea ST Filters Service;c:\windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_0057cbec48a2d7cf\AESTSr64.exe;c:\windows\SYSNATIVE\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_0057cbec48a2d7cf\AESTSr64.exe [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 AntiVirMailService;Avira Email Schutz;c:\program files (x86)\Avira\AntiVir Desktop\avmailc.exe;c:\program files (x86)\Avira\AntiVir Desktop\avmailc.exe [x]
S2 AntiVirSchedulerService;Avira Planer;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [x]
S2 AntiVirWebService;Avira Browser-Schutz;c:\program files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE;c:\program files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [x]
S2 c2cautoupdatesvc;Skype Click to Call Updater;c:\program files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe;c:\program files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [x]
S2 c2cpnrsvc;Skype Click to Call PNR Service;c:\program files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe;c:\program files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [x]
S2 DockLoginService;Dock Login Service;c:\program files\Dell\DellDock\DockLogin.exe;c:\program files\Dell\DellDock\DockLogin.exe [x]
S2 FAService;FAService;c:\program files (x86)\Sensible Vision\Fast Access\FAService.exe;c:\program files (x86)\Sensible Vision\Fast Access\FAService.exe [x]
S2 HPSupportSolutionsFrameworkService;HP Support Solutions Framework Service;c:\program files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe;c:\program files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe [x]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [x]
S2 NOBU;Dell DataSafe Online;c:\program files (x86)\Dell\Dell Datasafe Online\NOBuAgent.exe SERVICE;c:\program files (x86)\Dell\Dell Datasafe Online\NOBuAgent.exe SERVICE [x]
S2 Polar Daemon;Polar Daemon;c:\program files (x86)\Polar\Daemon\polard.exe;c:\program files (x86)\Polar\Daemon\polard.exe [x]
S2 rimspci;rimspci;c:\windows\system32\DRIVERS\rimspe64.sys;c:\windows\SYSNATIVE\DRIVERS\rimspe64.sys [x]
S2 risdpcie;risdpcie;c:\windows\system32\DRIVERS\risdpe64.sys;c:\windows\SYSNATIVE\DRIVERS\risdpe64.sys [x]
S2 rixdpcie;rixdpcie;c:\windows\system32\DRIVERS\rixdpe64.sys;c:\windows\SYSNATIVE\DRIVERS\rixdpe64.sys [x]
S2 SftService;SoftThinks Agent Service;c:\program files (x86)\Dell DataSafe Local Backup\sftservice.EXE;c:\program files (x86)\Dell DataSafe Local Backup\sftservice.EXE [x]
S2 TurboB;Turbo Boost UI Monitor driver;c:\windows\system32\DRIVERS\TurboB.sys;c:\windows\SYSNATIVE\DRIVERS\TurboB.sys [x]
S3 BBUpdate;BBUpdate;c:\program files (x86)\Microsoft\BingBar\7.3.132.0\SeaPort.exe;c:\program files (x86)\Microsoft\BingBar\7.3.132.0\SeaPort.exe [x]
S3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys;c:\windows\SYSNATIVE\DRIVERS\btwl2cap.sys [x]
S3 CtClsFlt;Creative Camera Class Upper Filter Driver;c:\windows\system32\DRIVERS\CtClsFlt.sys;c:\windows\SYSNATIVE\DRIVERS\CtClsFlt.sys [x]
S3 k57nd60a;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0;c:\windows\system32\DRIVERS\k57nd60a.sys;c:\windows\SYSNATIVE\DRIVERS\k57nd60a.sys [x]
S3 PCDSRVC{1E208CE0-FB7451FF-06020101}_0;PCDSRVC{1E208CE0-FB7451FF-06020101}_0 - PCDR Kernel Mode Service Helper Driver;c:\program files\dell support center\pcdsrvc_x64.pkms;c:\program files\dell support center\pcdsrvc_x64.pkms [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2014-11-26 12:53	1087304	----a-w-	c:\program files (x86)\Google\Chrome\Application\39.0.2171.71\Installer\chrmstp.exe
.
Inhalt des "geplante Tasks" Ordners
.
2014-11-28 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-26 12:54]
.
2014-11-14 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-01-31 17:42]
.
2014-11-28 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-01-31 17:42]
.
2014-11-12 c:\windows\Tasks\PCDoctorBackgroundMonitorTask.job
- c:\program files\Dell Support Center\uaclauncher.exe [2010-08-05 07:47]
.
2014-11-28 c:\windows\Tasks\SystemToolsDailyTest.job
- c:\program files\Dell Support Center\pcdrcui.exe [2010-08-05 07:47]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt1"]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2014-06-24 21:08	164760	----a-w-	c:\users\3vento\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt2"]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2014-06-24 21:08	164760	----a-w-	c:\users\3vento\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt3"]
@="{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}]
2014-06-24 21:08	164760	----a-w-	c:\users\3vento\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt4"]
@="{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}]
2014-06-24 21:08	164760	----a-w-	c:\users\3vento\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt5"]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2014-06-24 21:08	164760	----a-w-	c:\users\3vento\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt6"]
@="{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}]
2014-06-24 21:08	164760	----a-w-	c:\users\3vento\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt7"]
@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
2014-06-24 21:08	164760	----a-w-	c:\users\3vento\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt8"]
@="{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}]
2014-06-24 21:08	164760	----a-w-	c:\users\3vento\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SysTrayApp"="c:\program files\IDT\WDM\sttray64.exe" [2010-01-20 487424]
"Broadcom Wireless Manager UI"="c:\program files\Dell\Dell Wireless WLAN Card\WLTRAY.exe" [2009-07-17 4968960]
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = *.local
IE: An OneNote s&enden - c:\progra~2\MICROS~1\Office14\ONBttnIE.dll/105
IE: Bild an &Bluetooth-Gerät senden... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Nach Microsoft E&xcel exportieren - c:\progra~2\MICROS~1\Office14\EXCEL.EXE/3000
IE: Seite an &Bluetooth-Gerät senden... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
LSP: c:\program files (x86)\Avira\AntiVir Desktop\avsda.dll
Trusted Zone: internet
Trusted Zone: mcafee.com
TCP: DhcpNameServer = 192.168.2.1
FF - ProfilePath - c:\users\3vento\AppData\Roaming\Mozilla\Firefox\Profiles\whssljy2.default\
FF - prefs.js: browser.search.selectedEngine - Google
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Toolbar-Locked - (no file)
Wow6432Node-HKCU-Run-gagbcamc.exe - c:\users\3vento\AppData\Roaming\Identities\gagbcamc.exe
Wow6432Node-HKLM-Run-FAStartup - (no file)
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
Toolbar-Locked - (no file)
HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe
.
.
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\services\PCDSRVC{1E208CE0-FB7451FF-06020101}_0]
"ImagePath"="\??\c:\program files\dell support center\pcdsrvc_x64.pkms"
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_USERS\S-1-5-21-1413332742-2020861625-2527278895-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*`%*Ü*]
@Class="Shell"
.
[HKEY_USERS\S-1-5-21-1413332742-2020861625-2527278895-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*`%*Ü*\OpenWithList]
@Class="Shell"
.
[HKEY_USERS\S-1-5-21-1413332742-2020861625-2527278895-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*i%w*r*]
@Class="Shell"
.
[HKEY_USERS\S-1-5-21-1413332742-2020861625-2527278895-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*i%w*r*\OpenWithList]
@Class="Shell"
.
[HKEY_USERS\S-1-5-21-1413332742-2020861625-2527278895-1000\Software\SecuROM\License information*]
"datasecu"=hex:a3,28,98,30,3d,f5,8c,f9,0a,7d,61,e4,da,6e,08,c3,ac,3b,36,c1,85,
   3f,73,90,7d,84,72,30,74,bc,01,33,40,f5,35,e4,d1,37,7e,73,ea,1a,09,64,84,2c,\
"rkeysecu"=hex:b7,7f,8e,97,8c,6e,b6,85,d4,a6,1e,5b,67,ef,81,b9
.
[HKEY_USERS\S-1-5-21-1413332742-2020861625-2527278895-1000\Software\L.o.c.a.l. .A.p.p.W.i.z.a.r.d.-.G.e.n.e.r.a.t.e.d. .A.p.p.l.i.c.a.t.i.o.n.s.*.*.irD¡{táOo`û|ß~]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{0BE09CC1-42E0-11DD-AE16-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil10a.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{0BE09CC1-42E0-11DD-AE16-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{0BE09CC1-42E0-11DD-AE16-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\FlashUtil10a.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{0BE09CC1-42E0-11DD-AE16-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10a.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10a.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10a.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10a.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{DDF4CE26-4BDA-42BC-B0F0-0E75243AD285}]
@Denied: (A 2) (Everyone)
@="IFlashBroker2"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{DDF4CE26-4BDA-42BC-B0F0-0E75243AD285}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{DDF4CE26-4BDA-42BC-B0F0-0E75243AD285}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\McAfee]
"SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
   00,5c,00,6d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
@Denied: (A) (Everyone)
"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]
"Key"="ActionsPane3"
"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2014-11-28  22:50:43
ComboFix-quarantined-files.txt  2014-11-28 21:50
.
Vor Suchlauf: 14 Verzeichnis(se), 324.412.706.816 Bytes frei
Nach Suchlauf: 17 Verzeichnis(se), 333.666.983.936 Bytes frei
.
- - End Of File - - ABA1A6D48C380E02DD67BB79E77DE8F4

Geändert von Iron111 (28.11.2014 um 22:57 Uhr) Grund: ich hatte keine Fehlermeldung und ein Neustart musste auch nicht durchgeführt werden

Alt 28.11.2014, 23:05   #6
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Windows 7 mit verschiedenen Trojanerdateien - Standard

Windows 7 mit verschiedenen Trojanerdateien


Ok, weiter mit TDSS-Killer:

Downloade dir bitte TDSSKiller TDSSKiller.exe und speichere diese Datei auf dem Desktop
  • Starte die TDSSKiller.exe - Einstellen wie in der Anleitung zu TDSSKiller beschrieben.
  • Drücke Start Scan
  • Sollten infizierte Objekte gefunden werden, wähle keinesfalls Cure. Wähle Skip und klicke auf Continue.
    TDSSKiller wird eine Logfile auf deinem Systemlaufwerk speichern (Meistens C:\)
    Als Beispiel: C:\TDSSKiller.<Version_Datum_Uhrzeit>log.txt
Poste den Inhalt bitte in jedem Fall hier in deinen Thread.
__________________
--> Windows 7 mit verschiedenen Trojanerdateien

Alt 28.11.2014, 23:22   #7
Iron111
 
Windows 7 mit verschiedenen Trojanerdateien - Standard

Windows 7 mit verschiedenen Trojanerdateien


Code:
ATTFilter
23:15:05.0874 0x18d0  TDSS rootkit removing tool 3.0.0.41 Oct 28 2014 17:58:34
23:15:14.0575 0x18d0  ============================================================
23:15:14.0575 0x18d0  Current date / time: 2014/11/28 23:15:14.0575
23:15:14.0575 0x18d0  SystemInfo:
23:15:14.0575 0x18d0  
23:15:14.0575 0x18d0  OS Version: 6.1.7601 ServicePack: 1.0
23:15:14.0575 0x18d0  Product type: Workstation
23:15:14.0575 0x18d0  ComputerName: 3VENTO-PC
23:15:14.0575 0x18d0  UserName: 3vento
23:15:14.0575 0x18d0  Windows directory: C:\Windows
23:15:14.0575 0x18d0  System windows directory: C:\Windows
23:15:14.0575 0x18d0  Running under WOW64
23:15:14.0575 0x18d0  Processor architecture: Intel x64
23:15:14.0575 0x18d0  Number of processors: 8
23:15:14.0575 0x18d0  Page size: 0x1000
23:15:14.0575 0x18d0  Boot type: Normal boot
23:15:14.0575 0x18d0  ============================================================
23:15:14.0845 0x18d0  KLMD registered as C:\Windows\system32\drivers\45340266.sys
23:15:15.0105 0x18d0  System UUID: {6657F164-DCA2-9F82-4DCE-B4D194993F0E}
23:15:15.0705 0x18d0  Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 ( 465.76 Gb ), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
23:15:15.0735 0x18d0  ============================================================
23:15:15.0735 0x18d0  \Device\Harddisk0\DR0:
23:15:15.0735 0x18d0  MBR partitions:
23:15:15.0735 0x18d0  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x139C5, BlocksNum 0x1D4C000
23:15:15.0735 0x18d0  \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x1D5F9C5, BlocksNum 0x38625E6B
23:15:15.0735 0x18d0  ============================================================
23:15:15.0755 0x18d0  C: <-> \Device\Harddisk0\DR0\Partition2
23:15:15.0755 0x18d0  ============================================================
23:15:15.0755 0x18d0  Initialize success
23:15:15.0755 0x18d0  ============================================================
23:16:57.0525 0x0ab0  ============================================================
23:16:57.0525 0x0ab0  Scan started
23:16:57.0525 0x0ab0  Mode: Manual; SigCheck; TDLFS; 
23:16:57.0525 0x0ab0  ============================================================
23:16:57.0525 0x0ab0  KSN ping started
23:17:11.0447 0x0ab0  KSN ping finished: true
23:17:12.0118 0x0ab0  ================ Scan system memory ========================
23:17:12.0118 0x0ab0  System memory - ok
23:17:12.0118 0x0ab0  ================ Scan services =============================
23:17:12.0368 0x0ab0  [ A87D604AEA360176311474C87A63BB88, B1507868C382CD5D2DBC0D62114FCFBF7A780904A2E3CA7C7C1DD0844ADA9A8F ] 1394ohci        C:\Windows\system32\drivers\1394ohci.sys
23:17:12.0568 0x0ab0  1394ohci - ok
23:17:12.0638 0x0ab0  [ D81D9E70B8A6DD14D42D7B4EFA65D5F2, FDAAB7E23012B4D31537C5BDEF245BB0A12FA060A072C250E21C68E18B22E002 ] ACPI            C:\Windows\system32\drivers\ACPI.sys
23:17:12.0668 0x0ab0  ACPI - ok
23:17:12.0698 0x0ab0  [ 99F8E788246D495CE3794D7E7821D2CA, F91615463270AD2601F882CAED43B88E7EDA115B9FD03FC56320E48119F15F76 ] AcpiPmi         C:\Windows\system32\drivers\acpipmi.sys
23:17:12.0778 0x0ab0  AcpiPmi - ok
23:17:12.0878 0x0ab0  [ C5679E5186B2FC95BC76A8A9870D5456, 70AC61850B811A0A902532F098AE1D5DF4622455E56C78B89D4ABDBE4A061A48 ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
23:17:12.0918 0x0ab0  AdobeARMservice - ok
23:17:13.0078 0x0ab0  [ F79623288F2A357AB20288B5DC4F452A, AA6F70A4C12E390E08074D6FD0EA0D1856D8274DA833E56A8811BF820A2D41D4 ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
23:17:13.0128 0x0ab0  AdobeFlashPlayerUpdateSvc - ok
23:17:13.0198 0x0ab0  [ 2F6B34B83843F0C5118B63AC634F5BF4, 43E3F5FBFB5D33981AC503DEE476868EC029815D459E7C36C4ABC2D2F75B5735 ] adp94xx         C:\Windows\system32\DRIVERS\adp94xx.sys
23:17:13.0278 0x0ab0  adp94xx - ok
23:17:13.0318 0x0ab0  [ 597F78224EE9224EA1A13D6350CED962, DA7FD99BE5E3B7B98605BF5C13BF3F1A286C0DE1240617570B46FE4605E59BDC ] adpahci         C:\Windows\system32\DRIVERS\adpahci.sys
23:17:13.0368 0x0ab0  adpahci - ok
23:17:13.0378 0x0ab0  [ E109549C90F62FB570B9540C4B148E54, E804563735153EA00A00641814244BC8A347B578E7D63A16F43FB17566EE5559 ] adpu320         C:\Windows\system32\DRIVERS\adpu320.sys
23:17:13.0398 0x0ab0  adpu320 - ok
23:17:13.0428 0x0ab0  [ 4B78B431F225FD8624C5655CB1DE7B61, 198A5AF2125C7C41F531A652D200C083A55A97DC541E3C0B5B253C7329949156 ] AeLookupSvc     C:\Windows\System32\aelupsvc.dll
23:17:13.0528 0x0ab0  AeLookupSvc - ok
23:17:13.0628 0x0ab0  [ A6FB9DB8F1A86861D955FD6975977AE0, 788C6EE50719227D7A9B7F08C8D5E1289FCD0E8AC23A1021A5093D2E8368F696 ] AESTFilters     C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_0057cbec48a2d7cf\AESTSr64.exe
23:17:13.0708 0x0ab0  AESTFilters - ok
23:17:13.0778 0x0ab0  [ FA886682CFC5D36718D3E436AACF10B9, F80AB4F91AA6B5C7ECCB000D8E1BC2CF776DC3D69B3D9EBC2558C19035A6B3AB ] AFD             C:\Windows\system32\drivers\afd.sys
23:17:13.0898 0x0ab0  AFD - ok
23:17:13.0928 0x0ab0  [ 608C14DBA7299D8CB6ED035A68A15799, 45360F89640BF1127C82A32393BD76205E4FA067889C40C491602F370C09282A ] agp440          C:\Windows\system32\drivers\agp440.sys
23:17:13.0968 0x0ab0  agp440 - ok
23:17:13.0978 0x0ab0  [ 3290D6946B5E30E70414990574883DDB, 0E9294E1991572256B3CDA6B031DB9F39CA601385515EE59F1F601725B889663 ] ALG             C:\Windows\System32\alg.exe
23:17:14.0028 0x0ab0  ALG - ok
23:17:14.0098 0x0ab0  [ 5812713A477A3AD7363C7438CA2EE038, A7316299470D2E57A11499C752A711BF4A71EB11C9CBA731ED0945FF6A966721 ] aliide          C:\Windows\system32\drivers\aliide.sys
23:17:14.0128 0x0ab0  aliide - ok
23:17:14.0158 0x0ab0  [ 3D90CF67DB75823A8480E56BBCD2E028, 775D58B99ACA606D434713BC00132D43061C37CFEEAECD194FCFDF45792944A3 ] AMD External Events Utility C:\Windows\system32\atiesrxx.exe
23:17:14.0258 0x0ab0  AMD External Events Utility - ok
23:17:14.0308 0x0ab0  [ 1FF8B4431C353CE385C875F194924C0C, 3EA3A7F426B0FFC2461EDF4FDB4B58ACC9D0730EDA5B728D1EA1346EA0A02720 ] amdide          C:\Windows\system32\drivers\amdide.sys
23:17:14.0338 0x0ab0  amdide - ok
23:17:14.0348 0x0ab0  [ 7024F087CFF1833A806193EF9D22CDA9, E7F27E488C38338388103D3B7EEDD61D05E14FB140992AEE6F492FFC821BF529 ] AmdK8           C:\Windows\system32\DRIVERS\amdk8.sys
23:17:14.0458 0x0ab0  AmdK8 - ok
23:17:14.0664 0x0ab0  [ 52679612D742BF74CA1BA6AB86DDF431, 9D7A8FA8952519AD83CD36038F85B958BC97D1A25596EDC01CA1F6DD45DB542A ] amdkmdag        C:\Windows\system32\DRIVERS\atipmdag.sys
23:17:14.0964 0x0ab0  amdkmdag - ok
23:17:14.0994 0x0ab0  [ 414E0788920A8C856032BE2CBF29F984, 2DD027ADA24C871167C80A2F5C5ED5CB3AEA1E3A4E8C5FD352FA82C33B24479B ] amdkmdap        C:\Windows\system32\DRIVERS\atikmpag.sys
23:17:15.0034 0x0ab0  amdkmdap - ok
23:17:15.0064 0x0ab0  [ 1E56388B3FE0D031C44144EB8C4D6217, E88CA76FD47BA0EB427D59CB9BE040DE133D89D4E62D03A8D622624531D27487 ] AmdPPM          C:\Windows\system32\DRIVERS\amdppm.sys
23:17:15.0084 0x0ab0  AmdPPM - ok
23:17:15.0134 0x0ab0  [ D4121AE6D0C0E7E13AA221AA57EF2D49, 626F43C099BD197BE56648C367B711143C2BCCE96496BBDEF19F391D52FA01D0 ] amdsata         C:\Windows\system32\drivers\amdsata.sys
23:17:15.0174 0x0ab0  amdsata - ok
23:17:15.0204 0x0ab0  [ F67F933E79241ED32FF46A4F29B5120B, D6EF539058F159CC4DD14CA9B1FD924998FEAC9D325C823C7A2DD21FEF1DC1A8 ] amdsbs          C:\Windows\system32\DRIVERS\amdsbs.sys
23:17:15.0254 0x0ab0  amdsbs - ok
23:17:15.0274 0x0ab0  [ 540DAF1CEA6094886D72126FD7C33048, 296578572A93F5B74E1AD443E000B79DC99D1CBD25082E02704800F886A3065F ] amdxata         C:\Windows\system32\drivers\amdxata.sys
23:17:15.0314 0x0ab0  amdxata - ok
23:17:15.0434 0x0ab0  [ EF9F989FC3058F727E11F09CEDB5C963, 02C4D9DD6FA1B21386249DEAC16258B975148D4EB177F7A274183D3ED514A570 ] AntiVirMailService C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc.exe
23:17:15.0474 0x0ab0  AntiVirMailService - ok
23:17:15.0534 0x0ab0  [ 6F1BBF101B6DC9D34A564C2009D83B63, 1679D48C5A2CE6434E09F1D1330E616F8130C7A0ADF5C14D847CCEABDDA2950E ] AntiVirSchedulerService C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
23:17:15.0574 0x0ab0  AntiVirSchedulerService - ok
23:17:15.0604 0x0ab0  [ 6F1BBF101B6DC9D34A564C2009D83B63, 1679D48C5A2CE6434E09F1D1330E616F8130C7A0ADF5C14D847CCEABDDA2950E ] AntiVirService  C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
23:17:15.0634 0x0ab0  AntiVirService - ok
23:17:15.0734 0x0ab0  [ 323EC9754AEBCD922B0D80D49419B000, 74C060FEBDA551C9AC5CB5E5FD42E0092E01BC07AE636BD85E38D49196A92147 ] AntiVirWebService C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE
23:17:15.0794 0x0ab0  AntiVirWebService - ok
23:17:15.0854 0x0ab0  [ 89A69C3F2F319B43379399547526D952, 8ABDB4B8E106F96EBBA0D4D04C4F432296516E107E7BA5644ED2E50CF9BB491A ] AppID           C:\Windows\system32\drivers\appid.sys
23:17:15.0954 0x0ab0  AppID - ok
23:17:15.0984 0x0ab0  [ 0BC381A15355A3982216F7172F545DE1, C33AF13CB218F7BF52E967452573DF2ADD20A95C6BF99229794FEF07C4BBE725 ] AppIDSvc        C:\Windows\System32\appidsvc.dll
23:17:16.0074 0x0ab0  AppIDSvc - ok
23:17:16.0104 0x0ab0  [ 9D2A2369AB4B08A4905FE72DB104498F, D6FA1705018BABABFA2362E05691A0D6408D14DE7B76129B16D0A1DAD6378E58 ] Appinfo         C:\Windows\System32\appinfo.dll
23:17:16.0124 0x0ab0  Appinfo - ok
23:17:16.0204 0x0ab0  [ 650D03E40F93FAE323CB841F80368E5C, F67B97CFDCE2EE9294977725268EFDB0DD724BD16E7ED5BFCA45375AA8EBA5BB ] Apple Mobile Device C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
23:17:16.0234 0x0ab0  Apple Mobile Device - ok
23:17:16.0284 0x0ab0  [ C484F8CEB1717C540242531DB7845C4E, C507CE26716EB923B864ED85E8FA0B24591E2784A2F4F0E78AEED7E9953311F6 ] arc             C:\Windows\system32\DRIVERS\arc.sys
23:17:16.0334 0x0ab0  arc - ok
23:17:16.0354 0x0ab0  [ 019AF6924AEFE7839F61C830227FE79C, 5926B9DDFC9198043CDD6EA0B384C83B001EC225A8125628C4A45A3E6C42C72A ] arcsas          C:\Windows\system32\DRIVERS\arcsas.sys
23:17:16.0364 0x0ab0  arcsas - ok
23:17:16.0484 0x0ab0  [ 9A262EDD17F8473B91B333D6B031A901, 05DFBD3A7D83FDE1D062EA719ACA9EC48CB7FD42D17DDD88B82E5D25469ADD23 ] aspnet_state    C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
23:17:16.0524 0x0ab0  aspnet_state - ok
23:17:16.0554 0x0ab0  [ 769765CE2CC62867468CEA93969B2242, 0D8F19D49869DF93A3876B4C2E249D12E83F9CE11DAE8917D368E292043D4D26 ] AsyncMac        C:\Windows\system32\DRIVERS\asyncmac.sys
23:17:16.0624 0x0ab0  AsyncMac - ok
23:17:16.0674 0x0ab0  [ 02062C0B390B7729EDC9E69C680A6F3C, 0261683C6DC2706DCE491A1CDC954AC9C9E649376EC30760BB4E225E18DC5273 ] atapi           C:\Windows\system32\drivers\atapi.sys
23:17:16.0704 0x0ab0  atapi - ok
23:17:16.0734 0x0ab0  [ FB7602C5C508BE281368AAE0B61B51C6, 81FB4ABFA006974C20CA0E9FEB279A51CC4A9F0C1DA67075AA0EAD13F43B3782 ] AtiHdmiService  C:\Windows\system32\drivers\AtiHdmi.sys
23:17:16.0784 0x0ab0  AtiHdmiService - ok
23:17:16.0844 0x0ab0  [ DE3E38431B00C2EA247C53675DCF01A0, 8965192096C94203A1F16689DCDA45FE0EDF3A6FB75B70FC378C2008E8E71C9B ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
23:17:16.0964 0x0ab0  AudioEndpointBuilder - ok
23:17:16.0994 0x0ab0  [ DE3E38431B00C2EA247C53675DCF01A0, 8965192096C94203A1F16689DCDA45FE0EDF3A6FB75B70FC378C2008E8E71C9B ] AudioSrv        C:\Windows\System32\Audiosrv.dll
23:17:17.0024 0x0ab0  AudioSrv - ok
23:17:17.0074 0x0ab0  [ 1B87A1F2FA5B91AC1A7D171B8D952441, 4CB21F6567021DAE6B2E35B9BA84D015580E2DDFEBEB1AA9637BD93F42883DD2 ] avgntflt        C:\Windows\system32\DRIVERS\avgntflt.sys
23:17:17.0114 0x0ab0  avgntflt - ok
23:17:17.0164 0x0ab0  [ AF61774060F277FE45CBD3A9A8E7D45A, 2F96DC9735BAF017603D72A258BF7A772BF8C4AFECB5AA0CAD8F8E3CCAA0F2B5 ] avipbb          C:\Windows\system32\DRIVERS\avipbb.sys
23:17:17.0204 0x0ab0  avipbb - ok
23:17:17.0254 0x0ab0  [ 390184FAD8FCC1B6DA25AEBAE928C3B6, 537B0E0FAE080B55D70E990BBA0F7F22903CA340F6A42039BAD617A8ECF59119 ] avkmgr          C:\Windows\system32\DRIVERS\avkmgr.sys
23:17:17.0294 0x0ab0  avkmgr - ok
23:17:17.0354 0x0ab0  [ A6BF31A71B409DFA8CAC83159E1E2AFF, CBB83F73FFD3C3FB4F96605067739F8F7A4A40B2B05417FA49E575E95628753F ] AxInstSV        C:\Windows\System32\AxInstSV.dll
23:17:17.0424 0x0ab0  AxInstSV - ok
23:17:17.0484 0x0ab0  [ 3E5B191307609F7514148C6832BB0842, DE011CB7AA4A2405FAF21575182E0793A1D83DFFC44E9A7864D59F3D51D8D580 ] b06bdrv         C:\Windows\system32\DRIVERS\bxvbda.sys
23:17:17.0534 0x0ab0  b06bdrv - ok
23:17:17.0604 0x0ab0  [ B5ACE6968304A3900EEB1EBFD9622DF2, 1DAA118D8CA3F97B34DF3D3CDA1C78EAB2ED225699FEABE89D331AE0CB7679FA ] b57nd60a        C:\Windows\system32\DRIVERS\b57nd60a.sys
23:17:17.0684 0x0ab0  b57nd60a - ok
23:17:17.0784 0x0ab0  [ 5F685973740F289BE3C809952DB8408B, 4C0A0C06BB2B6B1879A860B0D68289A55F80CF74947FCCE7815F1D8121232F62 ] BBSvc           C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BBSvc.exe
23:17:17.0844 0x0ab0  BBSvc - ok
23:17:17.0874 0x0ab0  [ 76F78018F45E7F92164CEA5020176933, 76E1CA6E198417F3749864721C43913189A7EA07B5ED320DE543B2037CEA3D65 ] BBUpdate        C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\SeaPort.exe
23:17:17.0934 0x0ab0  BBUpdate - ok
23:17:17.0944 0x0ab0  [ E001DD475A7C27EBE5A0DB45C11BAD71, BA6A13E49F30BBBAB9FB0C7686FA6FD0376D506A51CEDB2829E3EF3C728394BA ] BCM42RLY        C:\Windows\system32\drivers\BCM42RLY.sys
23:17:17.0964 0x0ab0  BCM42RLY - ok
23:17:18.0084 0x0ab0  [ F4CD5F52850BF2C978DE178F256BA372, E9716E32A086A7B015A54C0D35DB2AC9E6F142015E1BEAF2730EE2CE0777FC8D ] BCM43XX         C:\Windows\system32\DRIVERS\bcmwl664.sys
23:17:18.0264 0x0ab0  BCM43XX - ok
23:17:18.0314 0x0ab0  [ FDE360167101B4E45A96F939F388AEB0, 8D1457E866BBD645C4B9710DFBFF93405CC1193BF9AE42326F2382500B713B82 ] BDESVC          C:\Windows\System32\bdesvc.dll
23:17:18.0374 0x0ab0  BDESVC - ok
23:17:18.0424 0x0ab0  [ 16A47CE2DECC9B099349A5F840654746, 77C008AEDB07FAC66413841D65C952DDB56FE7DCA5E9EF9C8F4130336B838024 ] Beep            C:\Windows\system32\drivers\Beep.sys
23:17:18.0484 0x0ab0  Beep - ok
23:17:18.0564 0x0ab0  [ 82974D6A2FD19445CC5171FC378668A4, 075D25F47C0D2277E40AF8615571DAA5EB16B1824563632A9A7EC62505C29A4A ] BFE             C:\Windows\System32\bfe.dll
23:17:18.0614 0x0ab0  BFE - ok
23:17:18.0684 0x0ab0  [ 1EA7969E3271CBC59E1730697DC74682, D511A34D63A6E0E6E7D1879068E2CD3D87ABEAF4936B2EA8CDDAD9F79D60FA04 ] BITS            C:\Windows\system32\qmgr.dll
23:17:18.0764 0x0ab0  BITS - ok
23:17:18.0774 0x0ab0  [ 61583EE3C3A17003C4ACD0475646B4D3, 17E4BECC309C450E7E44F59A9C0BBC24D21BDC66DFBA65B8F198A00BB47A9811 ] blbdrive        C:\Windows\system32\DRIVERS\blbdrive.sys
23:17:18.0804 0x0ab0  blbdrive - ok
23:17:18.0904 0x0ab0  [ EBBCD5DFBB1DE70E8F4AF8FA59E401FD, 17BFFC5DF609CE3B2F0CAB4BD6C118608C66A3AD86116A47E90B2BB7D8954122 ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe
23:17:18.0954 0x0ab0  Bonjour Service - ok
23:17:18.0974 0x0ab0  [ 6C02A83164F5CC0A262F4199F0871CF5, AD4632A6A203CB40970D848315D8ADB9C898349E20D8DF4107C2AE2703A2CF28 ] bowser          C:\Windows\system32\DRIVERS\bowser.sys
23:17:19.0034 0x0ab0  bowser - ok
23:17:19.0044 0x0ab0  [ F09EEE9EDC320B5E1501F749FDE686C8, 66691114C42E12F4CC6DC4078D4D2FA4029759ACDAF1B59D17383487180E84E3 ] BrFiltLo        C:\Windows\system32\DRIVERS\BrFiltLo.sys
23:17:19.0114 0x0ab0  BrFiltLo - ok
23:17:19.0124 0x0ab0  [ B114D3098E9BDB8BEA8B053685831BE6, 0ED23C1897F35FA00B9C2848DE4ED200E18688AA7825674888054BBC3A3EB92C ] BrFiltUp        C:\Windows\system32\DRIVERS\BrFiltUp.sys
23:17:19.0164 0x0ab0  BrFiltUp - ok
23:17:19.0214 0x0ab0  [ 5C2F352A4E961D72518261257AAE204B, 9EE1001E1D46A414A7A86FE1DBBE232203E26F54D9EF43ED31ED8EACD4D09853 ] BridgeMP        C:\Windows\system32\DRIVERS\bridge.sys
23:17:19.0274 0x0ab0  BridgeMP - ok
23:17:19.0334 0x0ab0  [ 05F5A0D14A2EE1D8255C2AA0E9E8E694, 40011138869F5496A3E78D38C9900B466B6F3877526AC22952DCD528173F4645 ] Browser         C:\Windows\System32\browser.dll
23:17:19.0394 0x0ab0  Browser - ok
23:17:19.0424 0x0ab0  [ 43BEA8D483BF1870F018E2D02E06A5BD, 4E6F5A5FD8C796A110B0DC9FF29E31EA78C04518FC1C840EF61BABD58AB10272 ] Brserid         C:\Windows\system32\DRIVERS\BrSerId.sys
23:17:19.0494 0x0ab0  Brserid - ok
23:17:19.0514 0x0ab0  [ A6ECA2151B08A09CACECA35C07F05B42, E2875BB7768ABAF38C3377007AA0A3C281503474D1831E396FB6599721586B0C ] BrSerWdm        C:\Windows\System32\Drivers\BrSerWdm.sys
23:17:19.0544 0x0ab0  BrSerWdm - ok
23:17:19.0564 0x0ab0  [ B79968002C277E869CF38BD22CD61524, 50631836502237AF4893ECDCEA43B9031C3DE97433F594D46AF7C3C77F331983 ] BrUsbMdm        C:\Windows\System32\Drivers\BrUsbMdm.sys
23:17:19.0604 0x0ab0  BrUsbMdm - ok
23:17:19.0624 0x0ab0  [ A87528880231C54E75EA7A44943B38BF, 4C8BBB29FDA76A96840AA47A8613C15D4466F9273A13941C19507008629709C9 ] BrUsbSer        C:\Windows\system32\DRIVERS\BrUsbSer.sys
23:17:19.0665 0x0ab0  BrUsbSer - ok
23:17:19.0715 0x0ab0  [ CF98190A94F62E405C8CB255018B2315, E1B2540023C4FE9FD588E4B6AE6347DFA565EB3898F21E5360882BF3E8B5E781 ] BthEnum         C:\Windows\system32\drivers\BthEnum.sys
23:17:19.0785 0x0ab0  BthEnum - ok
23:17:19.0805 0x0ab0  [ 9DA669F11D1F894AB4EB69BF546A42E8, B498B8B6CEF957B73179D1ADAF084BBB57BB3735D810F9BE2C7B1D58A4FD25A4 ] BTHMODEM        C:\Windows\system32\DRIVERS\bthmodem.sys
23:17:19.0855 0x0ab0  BTHMODEM - ok
23:17:19.0875 0x0ab0  [ 02DD601B708DD0667E1331FA8518E9FF, 7DE6CC4DBB621CD03B01D9CE6CF66EAFE31D39030A391562CD0E278E1D70ADE1 ] BthPan          C:\Windows\system32\DRIVERS\bthpan.sys
23:17:19.0945 0x0ab0  BthPan - ok
23:17:20.0005 0x0ab0  [ 738D0E9272F59EB7A1449C3EC118E6C4, FE3D32C2A5E4DC21376A0F89C0B2EE024ECF1A3FB99213CC9BBC986ADF7AF080 ] BTHPORT         C:\Windows\system32\Drivers\BTHport.sys
23:17:20.0055 0x0ab0  BTHPORT - ok
23:17:20.0105 0x0ab0  [ 95F9C2976059462CBBF227F7AAB10DE9, 2797AE919FF7606B070FB039CECDB0707CD2131DCAC09C5DF14F443D881C9F34 ] bthserv         C:\Windows\system32\bthserv.dll
23:17:20.0195 0x0ab0  bthserv - ok
23:17:20.0215 0x0ab0  [ F188B7394D81010767B6DF3178519A37, 576304E92FD94908F093A6AB5F4D328F25829BE32EC3CA0D29EBFDF5DE83539B ] BTHUSB          C:\Windows\system32\Drivers\BTHUSB.sys
23:17:20.0245 0x0ab0  BTHUSB - ok
23:17:20.0275 0x0ab0  [ 6BCFDC2B5B7F66D484486D4BD4B39A6B, 2A2039DD524E989EA91B7C91D5F295C663D1E27ABD64777D2F3137EB1C42C258 ] btwaudio        C:\Windows\system32\drivers\btwaudio.sys
23:17:20.0305 0x0ab0  btwaudio - ok
23:17:20.0355 0x0ab0  [ 82DC8B7C626E526681C1BEBED2BC3FF9, 58260E88CDD7388ABA563F9B8F2F3FA17022DB9E4C56EBA0761E99B919A8EAF8 ] btwavdt         C:\Windows\system32\DRIVERS\btwavdt.sys
23:17:20.0395 0x0ab0  btwavdt - ok
23:17:20.0485 0x0ab0  [ 6DDE1E97BE4D50253DFB9090A6A62524, 301E3C7701C976B5366CDC3073260C6741A01CA2D854D86E114C7898BA6FBFDF ] btwdins         c:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
23:17:20.0555 0x0ab0  btwdins - ok
23:17:20.0575 0x0ab0  [ 6149301DC3F81D6F9667A3FBAC410975, 120E201AFB07054C7F6321461D194843C695012431DBD791E36BBF73FDD41E8A ] btwl2cap        C:\Windows\system32\DRIVERS\btwl2cap.sys
23:17:20.0585 0x0ab0  btwl2cap - ok
23:17:20.0595 0x0ab0  [ 28E105AD3B79F440BF94780F507BF66A, EF4E6CCAB16765E2C88666625C13CB3299B668159A94CB201E3B44701A30640A ] btwrchid        C:\Windows\system32\DRIVERS\btwrchid.sys
23:17:20.0605 0x0ab0  btwrchid - ok
23:17:20.0735 0x0ab0  [ 1F79342D9EB530A48742F651E570983A, 99E0B613C23FA8591E248DFA6FF2D3EE19E262BE6E070A0E43E256B69687017F ] c2cautoupdatesvc C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
23:17:20.0785 0x0ab0  c2cautoupdatesvc - ok
23:17:20.0885 0x0ab0  [ E4938E0A376CF0B9D989EE5C0A146891, 9DF6AB5781CD60862D9664CA9A8AF0696A1FB6D09D804CD8DE9630F40DE59E90 ] c2cpnrsvc       C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
23:17:20.0945 0x0ab0  c2cpnrsvc - ok
23:17:20.0965 0x0ab0  catchme - ok
23:17:21.0015 0x0ab0  [ B8BD2BB284668C84865658C77574381A, 6C55BA288B626DF172FDFEA0BD7027FAEBA1F44EF20AB55160D7C7DC6E717D65 ] cdfs            C:\Windows\system32\DRIVERS\cdfs.sys
23:17:21.0095 0x0ab0  cdfs - ok
23:17:21.0145 0x0ab0  [ F036CE71586E93D94DAB220D7BDF4416, BD07AAD9E20CEAF9FC84E4977C55EA2C45604A2C682AC70B9B9A2199B6713D5B ] cdrom           C:\Windows\system32\drivers\cdrom.sys
23:17:21.0215 0x0ab0  cdrom - ok
23:17:21.0245 0x0ab0  [ F17D1D393BBC69C5322FBFAFACA28C7F, 62A1A92B3C52ADFD0B808D7F69DD50238B5F202421F1786F7EAEAA63F274B3E8 ] CertPropSvc     C:\Windows\System32\certprop.dll
23:17:21.0335 0x0ab0  CertPropSvc - ok
23:17:21.0365 0x0ab0  [ D7CD5C4E1B71FA62050515314CFB52CF, 513B5A849899F379F0BC6AB3A8A05C3493C2393C95F036612B96EC6E252E1C64 ] circlass        C:\Windows\system32\DRIVERS\circlass.sys
23:17:21.0415 0x0ab0  circlass - ok
23:17:21.0465 0x0ab0  [ FE1EC06F2253F691FE36217C592A0206, B9F122DB5E665ECDF29A5CB8BB6B531236F31A54A95769D6C5C1924C87FE70CE ] CLFS            C:\Windows\system32\CLFS.sys
23:17:21.0485 0x0ab0  CLFS - ok
23:17:21.0575 0x0ab0  [ F13EC8A783E0CB0D6DC26A3CA848B7B8, 0809E3B71709F1343086EEB6C820543C1A7119E74EEF8AC1AEE1F81093ABEC66 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
23:17:21.0615 0x0ab0  clr_optimization_v2.0.50727_32 - ok
23:17:21.0685 0x0ab0  [ B4D73F04E9BC076F7CDAC4327DF636BB, 1ADED20D5A0D0A76E2F85CB778FD06BAB814868D35F8532E17D67045FF4770C2 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
23:17:21.0735 0x0ab0  clr_optimization_v2.0.50727_64 - ok
23:17:21.0795 0x0ab0  [ E87213F37A13E2B54391E40934F071D0, 7EB221127EFB5BF158FB03D18EFDA2C55FB6CE3D1A1FE69C01D70DBED02C87E5 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
23:17:21.0855 0x0ab0  clr_optimization_v4.0.30319_32 - ok
23:17:21.0885 0x0ab0  [ 4AEDAB50F83580D0B4D6CF78191F92AA, D113C47013B018B45161911B96E93AF96A2F3B34FA47061BF6E7A71FBA03194A ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
23:17:21.0945 0x0ab0  clr_optimization_v4.0.30319_64 - ok
23:17:21.0965 0x0ab0  [ 0840155D0BDDF1190F84A663C284BD33, 696039FA63CFEB33487FAA8FD7BBDB220141E9C6E529355D768DFC87999A9C3A ] CmBatt          C:\Windows\system32\DRIVERS\CmBatt.sys
23:17:22.0005 0x0ab0  CmBatt - ok
23:17:22.0035 0x0ab0  [ E19D3F095812725D88F9001985B94EDD, 46243C5CCC4981CAC6FA6452FFCEC33329BF172448F1852D52592C9342E0E18B ] cmdide          C:\Windows\system32\drivers\cmdide.sys
23:17:22.0065 0x0ab0  cmdide - ok
23:17:22.0145 0x0ab0  [ EBF28856F69CF094A902F884CF989706, AD6C9F0BC20AA49EEE5478DA0F856F0EA2B414B63208C5FFB03C9D7F5B59765F ] CNG             C:\Windows\system32\Drivers\cng.sys
23:17:22.0215 0x0ab0  CNG - ok
23:17:22.0225 0x0ab0  [ 102DE219C3F61415F964C88E9085AD14, CD74CB703381F1382C32CF892FF2F908F4C9412E1BC77234F8FEA5D4666E1BF1 ] Compbatt        C:\Windows\system32\DRIVERS\compbatt.sys
23:17:22.0245 0x0ab0  Compbatt - ok
23:17:22.0275 0x0ab0  [ 03EDB043586CCEBA243D689BDDA370A8, 0E4523AA332E242D5C2C61C5717DBA5AB6E42DADB5A7E512505FC2B6CC224959 ] CompositeBus    C:\Windows\system32\drivers\CompositeBus.sys
23:17:22.0335 0x0ab0  CompositeBus - ok
23:17:22.0335 0x0ab0  COMSysApp - ok
23:17:22.0365 0x0ab0  [ 1C827878A998C18847245FE1F34EE597, 41EF7443D8B2733AA35CAC64B4F5F74FAC8BB0DA7D3936B69EC38E2DC3972E60 ] crcdisk         C:\Windows\system32\DRIVERS\crcdisk.sys
23:17:22.0385 0x0ab0  crcdisk - ok
23:17:22.0445 0x0ab0  [ 6B400F211BEE880A37A1ED0368776BF4, 2F27C6FA96A1C8CBDA467846DA57E63949A7EA37DB094B13397DDD30114295BD ] CryptSvc        C:\Windows\system32\cryptsvc.dll
23:17:22.0505 0x0ab0  CryptSvc - ok
23:17:22.0545 0x0ab0  [ FBE228ABEAB2BE13B9C3A3A112D4D8DC, A9FF2DC38CBE00AAD904BB7EC74480953D513E46FDE607A7773FF5A2A25B8C15 ] CtClsFlt        C:\Windows\system32\DRIVERS\CtClsFlt.sys
23:17:22.0625 0x0ab0  CtClsFlt - ok
23:17:22.0695 0x0ab0  [ 5C627D1B1138676C0A7AB2C2C190D123, C5003F2C912C5CA990E634818D3B4FD72F871900AF2948BD6C4D6400B354B401 ] DcomLaunch      C:\Windows\system32\rpcss.dll
23:17:22.0735 0x0ab0  DcomLaunch - ok
23:17:22.0775 0x0ab0  [ 3CEC7631A84943677AA8FA8EE5B6B43D, 32061DAC9ED6C1EBA3B367B18D0E965AEEC2DF635DCF794EC39D086D32503AC5 ] defragsvc       C:\Windows\System32\defragsvc.dll
23:17:22.0825 0x0ab0  defragsvc - ok
23:17:22.0865 0x0ab0  [ 9BB2EF44EAA163B29C4A4587887A0FE4, 03667BC3EA5003F4236929C10F23D8F108AFCB29DB5559E751FB26DFB318636F ] DfsC            C:\Windows\system32\Drivers\dfsc.sys
23:17:22.0955 0x0ab0  DfsC - ok
23:17:23.0025 0x0ab0  [ 43D808F5D9E1A18E5EEB5EBC83969E4E, C10D1155D71EABE4ED44C656A8F13078A8A4E850C4A8FBB92D52D173430972B8 ] Dhcp            C:\Windows\system32\dhcpcore.dll
23:17:23.0055 0x0ab0  Dhcp - ok
23:17:23.0065 0x0ab0  [ 13096B05847EC78F0977F2C0F79E9AB3, 1E44981B684F3E56F5D2439BB7FA78BD1BC876BB2265AE089AEC68F241B05B26 ] discache        C:\Windows\system32\drivers\discache.sys
23:17:23.0095 0x0ab0  discache - ok
23:17:23.0115 0x0ab0  [ 9819EEE8B5EA3784EC4AF3B137A5244C, 571BC886E87C888DA96282E381A746D273B58B9074E84D4CA91275E26056D427 ] Disk            C:\Windows\system32\DRIVERS\disk.sys
23:17:23.0135 0x0ab0  Disk - ok
23:17:23.0175 0x0ab0  [ 16835866AAA693C7D7FCEBA8FFF706E4, 15891558F7C1F2BB57A98769601D447ED0D952354A8BB347312D034DC03E0242 ] Dnscache        C:\Windows\System32\dnsrslvr.dll
23:17:23.0245 0x0ab0  Dnscache - ok
23:17:23.0285 0x0ab0  [ 0840ABBBDF438691EE65A20040635CBE, F83597ECECFADBA45242B683A19A01ADF84203B016301B64530C7BE8234175E8 ] DockLoginService C:\Program Files\Dell\DellDock\DockLogin.exe
23:17:23.0325 0x0ab0  DockLoginService - detected UnsignedFile.Multi.Generic ( 1 )
23:17:26.0116 0x0ab0  Detect skipped due to KSN trusted
23:17:26.0116 0x0ab0  DockLoginService - ok
23:17:26.0206 0x0ab0  [ B1FB3DDCA0FDF408750D5843591AFBC6, AB6AD9C5E7BA2E3646D0115B67C4800D1CB43B4B12716397657C7ADEEE807304 ] dot3svc         C:\Windows\System32\dot3svc.dll
23:17:26.0296 0x0ab0  dot3svc - ok
23:17:26.0346 0x0ab0  [ B26F4F737E8F9DF4F31AF6CF31D05820, 394BBBED4EC7FAD4110F62A43BFE0801D4AC56FFAC6C741C69407B26402311C7 ] DPS             C:\Windows\system32\dps.dll
23:17:26.0426 0x0ab0  DPS - ok
23:17:26.0466 0x0ab0  [ 9B19F34400D24DF84C858A421C205754, 967AF267B4124BADA8F507CEBF25F2192D146A4D63BE71B45BFC03C5DA7F21A7 ] drmkaud         C:\Windows\system32\drivers\drmkaud.sys
23:17:26.0516 0x0ab0  drmkaud - ok
23:17:26.0596 0x0ab0  [ 87CE5C8965E101CCCED1F4675557E868, 077D98F0F130B2FC710208BA34016EF2B2506EE2BD71740B228145E34A3046F1 ] DXGKrnl         C:\Windows\System32\drivers\dxgkrnl.sys
23:17:26.0656 0x0ab0  DXGKrnl - ok
23:17:26.0686 0x0ab0  [ E2DDA8726DA9CB5B2C4000C9018A9633, 0C967DBC3636A76A696997192A158AA92A1AF19F01E3C66D5BF91818A8FAEA76 ] EapHost         C:\Windows\System32\eapsvc.dll
23:17:26.0786 0x0ab0  EapHost - ok
23:17:26.0906 0x0ab0  [ DC5D737F51BE844D8C82C695EB17372F, 6D4022D9A46EDE89CEF0FAEADCC94C903234DFC460C0180D24FF9E38E8853017 ] ebdrv           C:\Windows\system32\DRIVERS\evbda.sys
23:17:27.0106 0x0ab0  ebdrv - ok
23:17:27.0136 0x0ab0  [ 204F3F58212B3E422C90BD9691A2DF28, D748A8CEE4D59B4248C9B1ACA5155D0FF6635A29564B4391B7FAC6261F93FE99 ] EFS             C:\Windows\System32\lsass.exe
23:17:27.0186 0x0ab0  EFS - ok
23:17:27.0276 0x0ab0  [ C4002B6B41975F057D98C439030CEA07, 3D2484FBB832EFB90504DD406ED1CF3065139B1FE1646471811F3A5679EF75F1 ] ehRecvr         C:\Windows\ehome\ehRecvr.exe
23:17:27.0346 0x0ab0  ehRecvr - ok
23:17:27.0386 0x0ab0  [ 4705E8EF9934482C5BB488CE28AFC681, 359E9EC5693CE0BE89082E1D5D8F5C5439A5B985010FF0CB45C11E3CFE30637D ] ehSched         C:\Windows\ehome\ehsched.exe
23:17:27.0466 0x0ab0  ehSched - ok
23:17:27.0516 0x0ab0  [ 0E5DA5369A0FCAEA12456DD852545184, 9A64AC5396F978C3B92794EDCE84DCA938E4662868250F8C18FA7C2C172233F8 ] elxstor         C:\Windows\system32\DRIVERS\elxstor.sys
23:17:27.0566 0x0ab0  elxstor - ok
23:17:27.0596 0x0ab0  [ 34A3C54752046E79A126E15C51DB409B, 7D5B5E150C7C73666F99CBAFF759029716C86F16B927E0078D77F8A696616D75 ] ErrDev          C:\Windows\system32\drivers\errdev.sys
23:17:27.0636 0x0ab0  ErrDev - ok
23:17:27.0666 0x0ab0  [ 4166F82BE4D24938977DD1746BE9B8A0, 24121751B7306225AD1C808442D7B030DEF377E9316AA0A3C5C7460E87317881 ] EventSystem     C:\Windows\system32\es.dll
23:17:27.0756 0x0ab0  EventSystem - ok
23:17:27.0776 0x0ab0  [ A510C654EC00C1E9BDD91EEB3A59823B, 76CD277730F7B08D375770CD373D786160F34D1481AF0536BA1A5D2727E255F5 ] exfat           C:\Windows\system32\drivers\exfat.sys
23:17:27.0816 0x0ab0  exfat - ok
23:17:27.0846 0x0ab0  [ 2C1D443E14F376E8331F52F135DCA9EF, 72E6611A6D8B54ED188A55229866E6F5BFF2BB284A4DFC7495732D4C3ED6F7F8 ] FACAP           C:\Windows\system32\DRIVERS\facap.sys
23:17:27.0856 0x0ab0  FACAP - ok
23:17:28.0006 0x0ab0  [ 69CE05BE48CD9FB80B108BE872BE3A74, CEAF888AD55F7DE2A12C9E41BC5FC0E0EF8C88E14E695F582737E17512E55F5C ] FAService       C:\Program Files (x86)\Sensible Vision\Fast Access\FAService.exe
23:17:28.0106 0x0ab0  FAService - detected UnsignedFile.Multi.Generic ( 1 )
23:17:30.0877 0x0ab0  Detect skipped due to KSN trusted
23:17:30.0877 0x0ab0  FAService - ok
23:17:30.0957 0x0ab0  [ 0ADC83218B66A6DB380C330836F3E36D, 798D6F83B5DBCC1656595E0A96CF12087FCCBE19D1982890D0CE5F629B328B29 ] fastfat         C:\Windows\system32\drivers\fastfat.sys
23:17:31.0067 0x0ab0  fastfat - ok
23:17:31.0117 0x0ab0  [ DBEFD454F8318A0EF691FDD2EAAB44EB, 7F52AE222FF28503B6FC4A5852BD0CAEAF187BE69AF4B577D3DE474C24366099 ] Fax             C:\Windows\system32\fxssvc.exe
23:17:31.0197 0x0ab0  Fax - ok
23:17:31.0207 0x0ab0  [ D765D19CD8EF61F650C384F62FAC00AB, 9F0A483A043D3BA873232AD3BA5F7BF9173832550A27AF3E8BD433905BD2A0EE ] fdc             C:\Windows\system32\DRIVERS\fdc.sys
23:17:31.0227 0x0ab0  fdc - ok
23:17:31.0227 0x0ab0  [ 0438CAB2E03F4FB61455A7956026FE86, 6D4DDC2973DB25CE0C7646BC85EFBCC004EBE35EA683F62162AE317C6F1D8DFE ] fdPHost         C:\Windows\system32\fdPHost.dll
23:17:31.0277 0x0ab0  fdPHost - ok
23:17:31.0297 0x0ab0  [ 802496CB59A30349F9A6DD22D6947644, 52D59D3D628D5661F83F090F33F744F6916E0CC1F76E5A33983E06EB66AE19F8 ] FDResPub        C:\Windows\system32\fdrespub.dll
23:17:31.0337 0x0ab0  FDResPub - ok
23:17:31.0347 0x0ab0  [ 655661BE46B5F5F3FD454E2C3095B930, 549C8E2A2A37757E560D55FFA6BFDD838205F17E40561E67F0124C934272CD1A ] FileInfo        C:\Windows\system32\drivers\fileinfo.sys
23:17:31.0367 0x0ab0  FileInfo - ok
23:17:31.0377 0x0ab0  [ 5F671AB5BC87EEA04EC38A6CD5962A47, 6B61D3363FF3F9C439BD51102C284972EAE96ACC0683B9DC7E12D25D0ADC51B6 ] Filetrace       C:\Windows\system32\drivers\filetrace.sys
23:17:31.0437 0x0ab0  Filetrace - ok
23:17:31.0457 0x0ab0  [ C172A0F53008EAEB8EA33FE10E177AF5, 9175A95B323696D1B35C9EFEB7790DD64E6EE0B7021E6C18E2F81009B169D77B ] flpydisk        C:\Windows\system32\DRIVERS\flpydisk.sys
23:17:31.0477 0x0ab0  flpydisk - ok
23:17:31.0527 0x0ab0  [ DA6B67270FD9DB3697B20FCE94950741, F621A4462C9F2904063578C427FAF22D7D66AE9967605C11C798099817CE5331 ] FltMgr          C:\Windows\system32\drivers\fltmgr.sys
23:17:31.0557 0x0ab0  FltMgr - ok
23:17:31.0647 0x0ab0  [ C4C183E6551084039EC862DA1C945E3D, 0874A2ACDD24D64965AA9A76E9C818E216880AE4C9A2E07ED932EE404585CEE6 ] FontCache       C:\Windows\system32\FntCache.dll
23:17:31.0717 0x0ab0  FontCache - ok
23:17:31.0767 0x0ab0  [ A8B7F3818AB65695E3A0BB3279F6DCE6, 89FCF10F599767E67A1E011753E34DA44EAA311F105DBF69549009ED932A60F0 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
23:17:31.0797 0x0ab0  FontCache3.0.0.0 - ok
23:17:31.0817 0x0ab0  [ D43703496149971890703B4B1B723EAC, F06397B2EDCA61629249D2EF1CBB7827A8BEAB8488246BD85EF6AE1363C0DA6E ] FsDepends       C:\Windows\system32\drivers\FsDepends.sys
23:17:31.0847 0x0ab0  FsDepends - ok
23:17:31.0897 0x0ab0  [ 6BD9295CC032DD3077C671FCCF579A7B, 83622FBB0CB923798E7E584BF53CAAF75B8C016E3FF7F0FA35880FF34D1DFE33 ] Fs_Rec          C:\Windows\system32\drivers\Fs_Rec.sys
23:17:31.0927 0x0ab0  Fs_Rec - ok
23:17:31.0957 0x0ab0  [ 8F6322049018354F45F05A2FD2D4E5E0, 73BF0FB4EBD7887E992DDEBB79E906958D6678F8D1107E8C368F5A0514D80359 ] fvevol          C:\Windows\system32\DRIVERS\fvevol.sys
23:17:32.0017 0x0ab0  fvevol - ok
23:17:32.0037 0x0ab0  [ 8C778D335C9D272CFD3298AB02ABE3B6, 85F0B13926B0F693FA9E70AA58DE47100E4B6F893772EBE4300C37D9A36E6005 ] gagp30kx        C:\Windows\system32\DRIVERS\gagp30kx.sys
23:17:32.0077 0x0ab0  gagp30kx - ok
23:17:32.0127 0x0ab0  [ 8E98D21EE06192492A5671A6144D092F, B8F656B34D361EA5AFB47F3A67AB2221580DADA59C8CD0CB83181E4AD8B562B4 ] GEARAspiWDM     C:\Windows\system32\DRIVERS\GEARAspiWDM.sys
23:17:32.0157 0x0ab0  GEARAspiWDM - ok
23:17:32.0237 0x0ab0  [ 277BBC7E1AA1EE957F573A10ECA7EF3A, 2EE60B924E583E847CC24E78B401EF95C69DB777A5B74E1EC963E18D47B94D24 ] gpsvc           C:\Windows\System32\gpsvc.dll
23:17:32.0327 0x0ab0  gpsvc - ok
23:17:32.0397 0x0ab0  [ 51508F0C2476177E50C31B0BBFBF1BDB, 3F62A05181D54711180C8727AC66D624AFA7FC816A4ACC4DC0CFCF2D2DBE7F87 ] gupdate         C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
23:17:32.0437 0x0ab0  gupdate - ok
23:17:32.0457 0x0ab0  [ 51508F0C2476177E50C31B0BBFBF1BDB, 3F62A05181D54711180C8727AC66D624AFA7FC816A4ACC4DC0CFCF2D2DBE7F87 ] gupdatem        C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
23:17:32.0467 0x0ab0  gupdatem - ok
23:17:32.0477 0x0ab0  [ F2523EF6460FC42405B12248338AB2F0, B2F3DE8DE1F512D871BC2BC2E8D0E33AB03335BFBC07627C5F88B65024928E19 ] hcw85cir        C:\Windows\system32\drivers\hcw85cir.sys
23:17:32.0537 0x0ab0  hcw85cir - ok
23:17:32.0587 0x0ab0  [ 97BFED39B6B79EB12CDDBFEED51F56BB, 3CF981D668FB2381E52AF2E51E296C6CFB47B0D62249645278479D0111A47955 ] HDAudBus        C:\Windows\system32\drivers\HDAudBus.sys
23:17:32.0667 0x0ab0  HDAudBus - ok
23:17:32.0687 0x0ab0  [ 78E86380454A7B10A5EB255DC44A355F, 11F3ED7ACFFA3024B9BD504F81AC39F5B4CED5A8A425E8BADF7132EFEDB9BD64 ] HidBatt         C:\Windows\system32\DRIVERS\HidBatt.sys
23:17:32.0737 0x0ab0  HidBatt - ok
23:17:32.0747 0x0ab0  [ 7FD2A313F7AFE5C4DAB14798C48DD104, 94CBFD4506CBDE4162CEB3367BAB042D19ACA6785954DC0B554D4164B9FCD0D4 ] HidBth          C:\Windows\system32\DRIVERS\hidbth.sys
23:17:32.0787 0x0ab0  HidBth - ok
23:17:32.0817 0x0ab0  [ 0A77D29F311B88CFAE3B13F9C1A73825, 8615DC6CEFB591505CE16E054A71A4F371B827DDFD5E980777AB4233DCFDA01D ] HidIr           C:\Windows\system32\DRIVERS\hidir.sys
23:17:32.0867 0x0ab0  HidIr - ok
23:17:32.0897 0x0ab0  [ BD9EB3958F213F96B97B1D897DEE006D, 4D01CBF898B528B3A4E5A683DF2177300AFABD7D4CB51F1A7891B1B545499631 ] hidserv         C:\Windows\System32\hidserv.dll
23:17:32.0987 0x0ab0  hidserv - ok
23:17:33.0037 0x0ab0  [ 9592090A7E2B61CD582B612B6DF70536, FD11D5E02C32D658B28FCC35688AB66CCB5D3A0A0D74C82AE0F0B6C67B568A0F ] HidUsb          C:\Windows\system32\DRIVERS\hidusb.sys
23:17:33.0087 0x0ab0  HidUsb - ok
23:17:33.0107 0x0ab0  [ 387E72E739E15E3D37907A86D9FF98E2, 9935BE2E58788E79328293AF2F202CB0F6042441B176F75ACC5AEA93C8E05531 ] hkmsvc          C:\Windows\system32\kmsvc.dll
23:17:33.0177 0x0ab0  hkmsvc - ok
23:17:33.0217 0x0ab0  [ EFDFB3DD38A4376F93E7985173813ABD, 70402FA73A5A2A8BB557AAC8F531E373077D28DE5F40A1F3F14B940BE01CD2E1 ] HomeGroupListener C:\Windows\system32\ListSvc.dll
23:17:33.0317 0x0ab0  HomeGroupListener - ok
23:17:33.0397 0x0ab0  [ 908ACB1F594274965A53926B10C81E89, 7D34A742AC486294D82676F8465A3EF26C8AC3317C32B63F62031CB007CFC208 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
23:17:33.0457 0x0ab0  HomeGroupProvider - ok
23:17:33.0487 0x0ab0  [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC, E9E6A1665740CFBC2DD321010007EF42ABA2102AEB9772EE8AA3354664B1E205 ] HpSAMD          C:\Windows\system32\drivers\HpSAMD.sys
23:17:33.0527 0x0ab0  HpSAMD - ok
23:17:33.0677 0x0ab0  [ 1BE48B0542C91487BB8A94BF2278F55D, B6081FD1E8BB95B2D5369A814EE80FCE36A8190CD00FD90D65339CB4C54E1AFD ] HPSLPSVC        C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL
23:17:33.0767 0x0ab0  HPSLPSVC - ok
23:17:33.0797 0x0ab0  [ 595F362A7C2F64304EFC77C72E7B9F84, 9C68F14DDC738212C839038CA0909C8D124ABB93C202EAE124872203BB3AD4BF ] HPSupportSolutionsFrameworkService C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe
23:17:33.0817 0x0ab0  HPSupportSolutionsFrameworkService - ok
23:17:33.0887 0x0ab0  [ 0EA7DE1ACB728DD5A369FD742D6EEE28, 21C489412EB33A12B22290EB701C19BA57006E8702E76F730954F0784DDE9779 ] HTTP            C:\Windows\system32\drivers\HTTP.sys
23:17:33.0957 0x0ab0  HTTP - ok
23:17:34.0007 0x0ab0  [ A5462BD6884960C9DC85ED49D34FF392, 53E65841AF5B06A2844D0BB6FC4DD3923A323FFA0E4BFC89B3B5CAFB592A3D53 ] hwpolicy        C:\Windows\system32\drivers\hwpolicy.sys
23:17:34.0047 0x0ab0  hwpolicy - ok
23:17:34.0097 0x0ab0  [ FA55C73D4AFFA7EE23AC4BE53B4592D3, 65CDDC62B89A60E942C5642C9D8B539EFB69DA8069B4A2E54978154B314531CD ] i8042prt        C:\Windows\system32\drivers\i8042prt.sys
23:17:34.0147 0x0ab0  i8042prt - ok
23:17:34.0217 0x0ab0  [ ABBF174CB394F5C437410A788B7E404A, 95554F675329E7062F0936E4E902FEFF2456CAD95D6C9B60DCC213EF6E4C62D8 ] iaStor          C:\Windows\system32\DRIVERS\iaStor.sys
23:17:34.0237 0x0ab0  iaStor - ok
23:17:34.0257 0x0ab0  [ 31A0E93CDF29007D6C6FFFB632F375ED, CA464928E9868B9A09C324DBBC8DA41A01C5C486B43578FC695250D523DE555B ] IAStorDataMgrSvc C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
23:17:34.0267 0x0ab0  IAStorDataMgrSvc - ok
23:17:34.0337 0x0ab0  [ AAAF44DB3BD0B9D1FB6969B23ECC8366, 805AA4A9464002D1AB3832E4106B2AAA1331F4281367E75956062AAE99699385 ] iaStorV         C:\Windows\system32\drivers\iaStorV.sys
23:17:34.0397 0x0ab0  iaStorV - ok
23:17:34.0487 0x0ab0  [ C98A5B9D932430AD8EEBD3EF73756EF7, DF7E1D391A0F3345AD61154363922C27BD557DEEACE395A6A8A8A16BFD1BB9A8 ] idsvc           C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
23:17:34.0587 0x0ab0  idsvc - ok
23:17:34.0617 0x0ab0  IEEtwCollectorService - ok
23:17:34.0657 0x0ab0  [ 5C18831C61933628F5BB0EA2675B9D21, 5CD9DE2F8C0256623A417B5C55BF55BB2562BD7AB2C3C83BB3D9886C2FBDA4E4 ] iirsp           C:\Windows\system32\DRIVERS\iirsp.sys
23:17:34.0697 0x0ab0  iirsp - ok
23:17:34.0757 0x0ab0  [ 344789398EC3EE5A4E00C52B31847946, 3DA5F08E4B46F4E63456AA588D49E39A6A09A97D0509880C00F327623DB6122D ] IKEEXT          C:\Windows\System32\ikeext.dll
23:17:34.0837 0x0ab0  IKEEXT - ok
23:17:34.0867 0x0ab0  [ F00F20E70C6EC3AA366910083A0518AA, E2F3E9FFD82C802C8BAC309893A3664ACF16A279959C0FDECCA64C3D3C60FD22 ] intelide        C:\Windows\system32\drivers\intelide.sys
23:17:34.0887 0x0ab0  intelide - ok
23:17:34.0907 0x0ab0  [ ADA036632C664CAA754079041CF1F8C1, F2386CC09AC6DE4C54189154F7D91C1DB7AA120B13FAE8BA5B579ACF99FCC610 ] intelppm        C:\Windows\system32\DRIVERS\intelppm.sys
23:17:34.0967 0x0ab0  intelppm - ok
23:17:35.0007 0x0ab0  [ 098A91C54546A3B878DAD6A7E90A455B, 044CCE2A0DF56EBE1EFD99B4F6F0A5B9EE12498CA358CF4B2E3A1CFD872823AA ] IPBusEnum       C:\Windows\system32\ipbusenum.dll
23:17:35.0097 0x0ab0  IPBusEnum - ok
23:17:35.0117 0x0ab0  [ C9F0E1BD74365A8771590E9008D22AB6, 728BC5A6AAE499FDC50EB01577AF16D83C2A9F3B09936DD2A89C01E074BA8E51 ] IpFilterDriver  C:\Windows\system32\DRIVERS\ipfltdrv.sys
23:17:35.0187 0x0ab0  IpFilterDriver - ok
23:17:35.0227 0x0ab0  [ 08C2957BB30058E663720C5606885653, E13EDF6701512E2A9977A531454932CA5023087CB50E1D2F416B8BCDD92B67BE ] iphlpsvc        C:\Windows\System32\iphlpsvc.dll
23:17:35.0327 0x0ab0  iphlpsvc - ok
23:17:35.0347 0x0ab0  [ 0FC1AEA580957AA8817B8F305D18CA3A, 7161E4DE91AAFC3FA8BF24FAE4636390C2627DB931505247C0D52C75A31473D9 ] IPMIDRV         C:\Windows\system32\drivers\IPMIDrv.sys
23:17:35.0397 0x0ab0  IPMIDRV - ok
23:17:35.0427 0x0ab0  [ AF9B39A7E7B6CAA203B3862582E9F2D0, 67128BE7EADBE6BD0205B050F96E268948E8660C4BAB259FB0BE03935153D04E ] IPNAT           C:\Windows\system32\drivers\ipnat.sys
23:17:35.0477 0x0ab0  IPNAT - ok
23:17:35.0577 0x0ab0  [ 7FAE5B6CDB18B0B2E81F32869F595022, D873A7EE94749E1700E8F6B8BB7B485AE1B0B83388D63BE06335720498D4794F ] iPod Service    C:\Program Files\iPod\bin\iPodService.exe
23:17:35.0657 0x0ab0  iPod Service - ok
23:17:35.0667 0x0ab0  [ 3ABF5E7213EB28966D55D58B515D5CE9, A352BCC5B6B9A28805B15CAFB235676F1FAFF0D2394F88C03089EB157D6188AE ] IRENUM          C:\Windows\system32\drivers\irenum.sys
23:17:35.0757 0x0ab0  IRENUM - ok
23:17:35.0797 0x0ab0  [ 2F7B28DC3E1183E5EB418DF55C204F38, D40410A760965925D6F10959B2043F7BD4F68EAFCF5E743AF11AD860BD136548 ] isapnp          C:\Windows\system32\drivers\isapnp.sys
23:17:35.0827 0x0ab0  isapnp - ok
23:17:35.0847 0x0ab0  [ 96BB922A0981BC7432C8CF52B5410FE6, 236C05509B1040059B15021CBBDBDAF3B9C0F00910142BE5887B2C7561BAAFBA ] iScsiPrt        C:\Windows\system32\drivers\msiscsi.sys
23:17:35.0897 0x0ab0  iScsiPrt - ok
23:17:35.0937 0x0ab0  [ 9291643B494F87BFDAC95A524F69E737, 7BCFAE383B39DC47E74820BA137C4DD4C44E95667DAA737FCE78563A7CF2FDDE ] itecir          C:\Windows\system32\DRIVERS\itecir.sys
23:17:35.0977 0x0ab0  itecir - ok
23:17:36.0027 0x0ab0  [ 9D7EA8C7215D8D4AE7BE110EEE61085D, C8AEC99985AEAD52FA4FA14DA98EE465594EA1392E2010D0B474CD467D766EE8 ] k57nd60a        C:\Windows\system32\DRIVERS\k57nd60a.sys
23:17:36.0077 0x0ab0  k57nd60a - ok
23:17:36.0087 0x0ab0  [ BC02336F1CBA7DCC7D1213BB588A68A5, 450C5BAD54CCE2AFCDFF1B6E7F8E1A8446D9D3255DF9D36C29A8F848048AAD93 ] kbdclass        C:\Windows\system32\DRIVERS\kbdclass.sys
23:17:36.0107 0x0ab0  kbdclass - ok
23:17:36.0137 0x0ab0  [ 0705EFF5B42A9DB58548EEC3B26BB484, 86C6824ED7ED6FA8F306DB6319A0FD688AA91295AE571262F9D8E96A32225E99 ] kbdhid          C:\Windows\system32\DRIVERS\kbdhid.sys
23:17:36.0167 0x0ab0  kbdhid - ok
23:17:36.0187 0x0ab0  [ 204F3F58212B3E422C90BD9691A2DF28, D748A8CEE4D59B4248C9B1ACA5155D0FF6635A29564B4391B7FAC6261F93FE99 ] KeyIso          C:\Windows\system32\lsass.exe
23:17:36.0197 0x0ab0  KeyIso - ok
23:17:36.0237 0x0ab0  [ 353009DEDF918B2A51414F330CF72DEC, BF157D6E329F26E02FA16271B751B421396040DBB1D7BF9B2E0A21BC569672E2 ] KSecDD          C:\Windows\system32\Drivers\ksecdd.sys
23:17:36.0257 0x0ab0  KSecDD - ok
23:17:36.0297 0x0ab0  [ 41774FF331F609EF442B7398EE6202B1, AD67DA06A74895C384F4A1F1CF47050DAEE9C6CE8AD12F1A116FC977B6C3A864 ] KSecPkg         C:\Windows\system32\Drivers\ksecpkg.sys
23:17:36.0347 0x0ab0  KSecPkg - ok
23:17:36.0357 0x0ab0  [ 6869281E78CB31A43E969F06B57347C4, 866A23E69B32A78D378D6CB3B3DA3695FFDFF0FEC3C9F68C8C3F988DF417044B ] ksthunk         C:\Windows\system32\drivers\ksthunk.sys
23:17:36.0407 0x0ab0  ksthunk - ok
23:17:36.0457 0x0ab0  [ 6AB66E16AA859232F64DEB66887A8C9C, 5F2B579BEA8098A2994B0DECECDAE7B396E7B5DC5F09645737B9F28BEEA77FFF ] KtmRm           C:\Windows\system32\msdtckrm.dll
23:17:36.0527 0x0ab0  KtmRm - ok
23:17:36.0597 0x0ab0  [ D9F42719019740BAA6D1C6D536CBDAA6, 8757599D0AE5302C4CE50861BEBA3A8DD14D7B0DBD916FD5404133688CDFCC40 ] LanmanServer    C:\Windows\System32\srvsvc.dll
23:17:36.0677 0x0ab0  LanmanServer - ok
23:17:36.0707 0x0ab0  [ 851A1382EED3E3A7476DB004F4EE3E1A, B1C67F47DD594D092E6E258F01DF5E7150227CE3131A908A244DEE9F8A1FABF9 ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
23:17:36.0807 0x0ab0  LanmanWorkstation - ok
23:17:36.0837 0x0ab0  [ 1538831CF8AD2979A04C423779465827, E1729B0CC4CEEE494A0B8817A8E98FF232E3A32FB023566EF0BC71A090262C0C ] lltdio          C:\Windows\system32\DRIVERS\lltdio.sys
23:17:36.0877 0x0ab0  lltdio - ok
23:17:36.0937 0x0ab0  [ C1185803384AB3FEED115F79F109427F, 0414FE73532DCAB17E906438A14711E928CECCD5F579255410C62984DD652700 ] lltdsvc         C:\Windows\System32\lltdsvc.dll
23:17:37.0017 0x0ab0  lltdsvc - ok
23:17:37.0037 0x0ab0  [ F993A32249B66C9D622EA5592A8B76B8, EE64672A990C6145DC5601E2B8CDBE089272A72732F59AF9865DCBA8B1717E70 ] lmhosts         C:\Windows\System32\lmhsvc.dll
23:17:37.0067 0x0ab0  lmhosts - ok
23:17:37.0097 0x0ab0  [ 1A93E54EB0ECE102495A51266DCDB6A6, DB6AA86AA36C3A7988BE96E87B5D3251BE7617C54EE8F894D9DC2E267FE3255B ] LSI_FC          C:\Windows\system32\DRIVERS\lsi_fc.sys
23:17:37.0117 0x0ab0  LSI_FC - ok
23:17:37.0127 0x0ab0  [ 1047184A9FDC8BDBFF857175875EE810, F2251EDB7736A26D388A0C5CC2FE5FB9C5E109CBB1E3800993554CB21D81AE4B ] LSI_SAS         C:\Windows\system32\DRIVERS\lsi_sas.sys
23:17:37.0137 0x0ab0  LSI_SAS - ok
23:17:37.0147 0x0ab0  [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93, 88D5740A4E9CC3FA80FA18035DAB441BDC5A039622D666BFDAA525CC9686BD06 ] LSI_SAS2        C:\Windows\system32\DRIVERS\lsi_sas2.sys
23:17:37.0157 0x0ab0  LSI_SAS2 - ok
23:17:37.0167 0x0ab0  [ 0504EACAFF0D3C8AED161C4B0D369D4A, 4D272237C189646F5C80822FD3CBA7C2728E482E2DAAF7A09C8AEF811C89C54D ] LSI_SCSI        C:\Windows\system32\DRIVERS\lsi_scsi.sys
23:17:37.0187 0x0ab0  LSI_SCSI - ok
23:17:37.0197 0x0ab0  [ 43D0F98E1D56CCDDB0D5254CFF7B356E, 5BA498183B5C4996C694CB0A9A6B66CE6C7A460F6C91BEB9F305486FCC3B7B22 ] luafv           C:\Windows\system32\drivers\luafv.sys
23:17:37.0247 0x0ab0  luafv - ok
23:17:37.0277 0x0ab0  [ 0BE09CD858ABF9DF6ED259D57A1A1663, 2FD28889B93C8E801F74C1D0769673A461671E0189D0A22C94509E3F0EEB7428 ] Mcx2Svc         C:\Windows\system32\Mcx2Svc.dll
23:17:37.0307 0x0ab0  Mcx2Svc - ok
23:17:37.0327 0x0ab0  [ A55805F747C6EDB6A9080D7C633BD0F4, 2DA0E83BF3C8ADEF6F551B6CC1C0A3F6149CDBE6EC60413BA1767C4DE425A728 ] megasas         C:\Windows\system32\DRIVERS\megasas.sys
23:17:37.0347 0x0ab0  megasas - ok
23:17:37.0357 0x0ab0  [ BAF74CE0072480C3B6B7C13B2A94D6B3, 85CBB4949C090A904464F79713A3418338753D20D7FB811E68F287FDAC1DD834 ] MegaSR          C:\Windows\system32\DRIVERS\MegaSR.sys
23:17:37.0377 0x0ab0  MegaSR - ok
23:17:37.0417 0x0ab0  [ E40E80D0304A73E8D269F7141D77250B, 0DB4AC13A264F19A84DC0BCED54E8E404014CC09C993B172002B1561EC7E265A ] MMCSS           C:\Windows\system32\mmcss.dll
23:17:37.0497 0x0ab0  MMCSS - ok
23:17:37.0497 0x0ab0  [ 800BA92F7010378B09F9ED9270F07137, 94F9AF9E1BE80AE6AC39A2A74EF9FAB115DCAACC011D07DFA8D6A1DDC8A93342 ] Modem           C:\Windows\system32\drivers\modem.sys
23:17:37.0537 0x0ab0  Modem - ok
23:17:37.0557 0x0ab0  [ B03D591DC7DA45ECE20B3B467E6AADAA, 701FB0CAD8138C58507BE28845D3E24CE269A040737C29885944A0D851238732 ] monitor         C:\Windows\system32\DRIVERS\monitor.sys
23:17:37.0607 0x0ab0  monitor - ok
23:17:37.0637 0x0ab0  [ 7D27EA49F3C1F687D357E77A470AEA99, 7FE7CAF95959F127C6D932C01D539C06D80273C49A09761F6E8331C05B1A7EE7 ] mouclass        C:\Windows\system32\DRIVERS\mouclass.sys
23:17:37.0668 0x0ab0  mouclass - ok
23:17:37.0688 0x0ab0  [ D3BF052C40B0C4166D9FD86A4288C1E6, 5E65264354CD94E844BF1838CA1B8E49080EFA34605A32CF2F6A47A2B97FC183 ] mouhid          C:\Windows\system32\DRIVERS\mouhid.sys
23:17:37.0718 0x0ab0  mouhid - ok
23:17:37.0768 0x0ab0  [ 32E7A3D591D671A6DF2DB515A5CBE0FA, 47CED0B9067AE8BF5EEF60B17ADEE5906BEDCC56E4CB460B7BFBC12BB9A69E63 ] mountmgr        C:\Windows\system32\drivers\mountmgr.sys
23:17:37.0808 0x0ab0  mountmgr - ok
23:17:37.0878 0x0ab0  [ DEA022193DF8C88F6E2B3E33D148A5DB, 97DFC47DB83E04A975A1969AA120385463FCAF4E1A9984FD3220442D7026B45A ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
23:17:37.0928 0x0ab0  MozillaMaintenance - ok
23:17:37.0948 0x0ab0  [ A44B420D30BD56E145D6A2BC8768EC58, B1E4DCA5A1008FA7A0492DC091FB2B820406AE13FD3D44F124E89B1037AF09B8 ] mpio            C:\Windows\system32\drivers\mpio.sys
23:17:37.0968 0x0ab0  mpio - ok
23:17:37.0978 0x0ab0  [ 6C38C9E45AE0EA2FA5E551F2ED5E978F, 5A3FA2F110029CB4CC4384998EDB59203FDD65EC45E01B897FB684F8956EAD20 ] mpsdrv          C:\Windows\system32\drivers\mpsdrv.sys
23:17:38.0028 0x0ab0  mpsdrv - ok
23:17:38.0078 0x0ab0  [ 54FFC9C8898113ACE189D4AA7199D2C1, 65F585C87F3F710FD5793FDFA96B740AD8D4317B0C120F4435CCF777300EA4F2 ] MpsSvc          C:\Windows\system32\mpssvc.dll
23:17:38.0198 0x0ab0  MpsSvc - ok
23:17:38.0238 0x0ab0  [ 1A4F75E63C9FB84B85DFFC6B63FD5404, 01AFA6DBB4CDE55FE4EA05BBE8F753A4266F8D072EA1EE01DB79F5126780C21F ] MRxDAV          C:\Windows\system32\drivers\mrxdav.sys
23:17:38.0318 0x0ab0  MRxDAV - ok
23:17:38.0368 0x0ab0  [ A5D9106A73DC88564C825D317CAC68AC, 0457B2AEA4E05A91D0E43F317894A614434D8CEBE35020785387F307E231FBE4 ] mrxsmb          C:\Windows\system32\DRIVERS\mrxsmb.sys
23:17:38.0418 0x0ab0  mrxsmb - ok
23:17:38.0468 0x0ab0  [ D711B3C1D5F42C0C2415687BE09FC163, 9B3013AC60BD2D0FF52086658BA5FF486ADE15954A552D7DD590580E8BAE3EFF ] mrxsmb10        C:\Windows\system32\DRIVERS\mrxsmb10.sys
23:17:38.0548 0x0ab0  mrxsmb10 - ok
23:17:38.0578 0x0ab0  [ 9423E9D355C8D303E76B8CFBD8A5C30C, 220B33F120C2DD937FE4D5664F4B581DC0ACF78D62EB56B7720888F67B9644CC ] mrxsmb20        C:\Windows\system32\DRIVERS\mrxsmb20.sys
23:17:38.0628 0x0ab0  mrxsmb20 - ok
23:17:38.0668 0x0ab0  [ C25F0BAFA182CBCA2DD3C851C2E75796, 643E158A0948DF331807AEAA391F23960362E46C0A0CF6D22A99020EAE7B10F8 ] msahci          C:\Windows\system32\drivers\msahci.sys
23:17:38.0698 0x0ab0  msahci - ok
23:17:38.0708 0x0ab0  [ DB801A638D011B9633829EB6F663C900, B34FD33A215ACCF2905F4B7D061686CDB1CB9C652147AF56AE14686C1F6E3C74 ] msdsm           C:\Windows\system32\drivers\msdsm.sys
23:17:38.0728 0x0ab0  msdsm - ok
23:17:38.0738 0x0ab0  [ DE0ECE52236CFA3ED2DBFC03F28253A8, 2FBBEC4CACB5161F68D7C2935852A5888945CA0F107CF8A1C01F4528CE407DE3 ] MSDTC           C:\Windows\System32\msdtc.exe
23:17:38.0768 0x0ab0  MSDTC - ok
23:17:38.0778 0x0ab0  [ AA3FB40E17CE1388FA1BEDAB50EA8F96, 69F93E15536644C8FD679A20190CFE577F4985D3B1B4A4AA250A168615AE1E99 ] Msfs            C:\Windows\system32\drivers\Msfs.sys
23:17:38.0818 0x0ab0  Msfs - ok
23:17:38.0818 0x0ab0  [ F9D215A46A8B9753F61767FA72A20326, 6F76642B45E0A7EF6BCAB8B37D55CCE2EAA310ED07B76D43FCB88987C2174141 ] mshidkmdf       C:\Windows\System32\drivers\mshidkmdf.sys
23:17:38.0868 0x0ab0  mshidkmdf - ok
23:17:38.0898 0x0ab0  [ D916874BBD4F8B07BFB7FA9B3CCAE29D, B229DA150713DEDBC4F05386C9D9DC3BC095A74F44F3081E88311AB73BC992A1 ] msisadrv        C:\Windows\system32\drivers\msisadrv.sys
23:17:38.0928 0x0ab0  msisadrv - ok
23:17:38.0978 0x0ab0  [ 808E98FF49B155C522E6400953177B08, F873F5BFF0984C5165DF67E92874D3F6EB8D86F9B5AD17013A0091CA33A1A3D5 ] MSiSCSI         C:\Windows\system32\iscsiexe.dll
23:17:39.0088 0x0ab0  MSiSCSI - ok
23:17:39.0088 0x0ab0  msiserver - ok
23:17:39.0108 0x0ab0  [ 49CCF2C4FEA34FFAD8B1B59D49439366, E5752EA57C7BDAD5F53E3BC441A415E909AC602CAE56234684FB8789A20396C7 ] MSKSSRV         C:\Windows\system32\drivers\MSKSSRV.sys
23:17:39.0138 0x0ab0  MSKSSRV - ok
23:17:39.0148 0x0ab0  [ BDD71ACE35A232104DDD349EE70E1AB3, 27464A66868513BE6A01B75D7FC5B0D6B71842E4E20CE3F76B15C071A0618BBB ] MSPCLOCK        C:\Windows\system32\drivers\MSPCLOCK.sys
23:17:39.0228 0x0ab0  MSPCLOCK - ok
23:17:39.0248 0x0ab0  [ 4ED981241DB27C3383D72092B618A1D0, E12F121E641249DB3491141851B59E1496F4413EDF58E863388F1C229838DFCC ] MSPQM           C:\Windows\system32\drivers\MSPQM.sys
23:17:39.0328 0x0ab0  MSPQM - ok
23:17:39.0368 0x0ab0  [ 759A9EEB0FA9ED79DA1FB7D4EF78866D, 64E3BC613EC4872B1B344CBF71EE15BE195592E3244C1EE099C6F8B95A40F133 ] MsRPC           C:\Windows\system32\drivers\MsRPC.sys
23:17:39.0418 0x0ab0  MsRPC - ok
23:17:39.0428 0x0ab0  [ 0EED230E37515A0EAEE3C2E1BC97B288, B1D8F8A75006B6E99214CA36D27A8594EF8D952F315BEB201E9BAC9DE3E64D42 ] mssmbios        C:\Windows\system32\drivers\mssmbios.sys
23:17:39.0438 0x0ab0  mssmbios - ok
23:17:39.0458 0x0ab0  [ 2E66F9ECB30B4221A318C92AC2250779, DF175E1AB6962303E57F26DAE5C5C1E40B8640333F3E352A64F6A5F1301586CD ] MSTEE           C:\Windows\system32\drivers\MSTEE.sys
23:17:39.0488 0x0ab0  MSTEE - ok
23:17:39.0498 0x0ab0  [ 7EA404308934E675BFFDE8EDF0757BCD, 306CD02D89CFCFE576242360ED5F9EEEDCAFC43CD43B7D2977AE960F9AEC3232 ] MTConfig        C:\Windows\system32\DRIVERS\MTConfig.sys
23:17:39.0508 0x0ab0  MTConfig - ok
23:17:39.0548 0x0ab0  [ F9A18612FD3526FE473C1BDA678D61C8, 32F7975B5BAA447917F832D9E3499B4B6D3E90D73F478375D0B70B36C524693A ] Mup             C:\Windows\system32\Drivers\mup.sys
23:17:39.0578 0x0ab0  Mup - ok
23:17:39.0648 0x0ab0  [ 582AC6D9873E31DFA28A4547270862DD, BD540499F74E8F59A020D935D18E36A3A97C1A6EC59C8208436469A31B16B260 ] napagent        C:\Windows\system32\qagentRT.dll
23:17:39.0728 0x0ab0  napagent - ok
23:17:39.0768 0x0ab0  [ 1EA3749C4114DB3E3161156FFFFA6B33, 54C2E77BCE1037711A11313AC25B8706109098C10A31AA03AEB7A185E97800D7 ] NativeWifiP     C:\Windows\system32\DRIVERS\nwifi.sys
23:17:39.0858 0x0ab0  NativeWifiP - ok
23:17:39.0948 0x0ab0  [ 760E38053BF56E501D562B70AD796B88, F856E81A975D44F8684A6F2466549CEEDFAEB3950191698555A93A1206E0A42D ] NDIS            C:\Windows\system32\drivers\ndis.sys
23:17:40.0028 0x0ab0  NDIS - ok
23:17:40.0048 0x0ab0  [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC, D7E5446E83909AE25506BB98FBDD878A529C87963E3C1125C4ABAB25823572BC ] NdisCap         C:\Windows\system32\DRIVERS\ndiscap.sys
23:17:40.0128 0x0ab0  NdisCap - ok
23:17:40.0158 0x0ab0  [ 30639C932D9FEF22B31268FE25A1B6E5, 32873D95339600F6EEFA51847D12C563FF01F320DC59055B242FA2887C99F9D6 ] NdisTapi        C:\Windows\system32\DRIVERS\ndistapi.sys
23:17:40.0198 0x0ab0  NdisTapi - ok
23:17:40.0238 0x0ab0  [ 136185F9FB2CC61E573E676AA5402356, BA3AD0A33416DA913B4242C6BE8C3E5812AD2B20BA6C11DD3094F2E8EB56E683 ] Ndisuio         C:\Windows\system32\DRIVERS\ndisuio.sys
23:17:40.0288 0x0ab0  Ndisuio - ok
23:17:40.0328 0x0ab0  [ 53F7305169863F0A2BDDC49E116C2E11, 881E9346D3C02405B7850ADC37E720990712EC9C666A0CE96E252A487FD2CE77 ] NdisWan         C:\Windows\system32\DRIVERS\ndiswan.sys
23:17:40.0408 0x0ab0  NdisWan - ok
23:17:40.0448 0x0ab0  [ 015C0D8E0E0421B4CFD48CFFE2825879, 4242E2D42CCFC859B2C0275C5331798BC0BDA68E51CF4650B6E64B1332071023 ] NDProxy         C:\Windows\system32\drivers\NDProxy.sys
23:17:40.0518 0x0ab0  NDProxy - ok
23:17:40.0598 0x0ab0  [ DC6530A291D4BDF6DF399F1F128E7F8F, 85123D802063383646EEBC60F4ABBCDBA2AE3180E99A8A99C024B1EBB0C6690E ] Net Driver HPZ12 C:\Windows\system32\HPZinw12.dll
23:17:40.0628 0x0ab0  Net Driver HPZ12 - detected UnsignedFile.Multi.Generic ( 1 )
23:17:43.0409 0x0ab0  Detect skipped due to KSN trusted
23:17:43.0409 0x0ab0  Net Driver HPZ12 - ok
23:17:43.0479 0x0ab0  [ 86743D9F5D2B1048062B14B1D84501C4, DBF6D6A60AB774FCB0F464FF2D285A7521D0A24006687B243AB46B17D8032062 ] NetBIOS         C:\Windows\system32\DRIVERS\netbios.sys
23:17:43.0559 0x0ab0  NetBIOS - ok
23:17:43.0589 0x0ab0  [ 09594D1089C523423B32A4229263F068, 7426A9B8BA27D3225928DDEFBD399650ABB90798212F56B7D12158AC22CCCE37 ] NetBT           C:\Windows\system32\DRIVERS\netbt.sys
23:17:43.0679 0x0ab0  NetBT - ok
23:17:43.0689 0x0ab0  [ 204F3F58212B3E422C90BD9691A2DF28, D748A8CEE4D59B4248C9B1ACA5155D0FF6635A29564B4391B7FAC6261F93FE99 ] Netlogon        C:\Windows\system32\lsass.exe
23:17:43.0699 0x0ab0  Netlogon - ok
23:17:43.0759 0x0ab0  [ 847D3AE376C0817161A14A82C8922A9E, 37AE692B3481323134125EF58F2C3CBC20177371AF2F5874F53DD32A827CB936 ] Netman          C:\Windows\System32\netman.dll
23:17:43.0849 0x0ab0  Netman - ok
23:17:43.0919 0x0ab0  [ 21318671BCAD3ACF16638F98D4D00973, CEA6E3B6BCB4B74A9ACACBEEA12EEA967BBC2240398E2EBC04D7910109CACA11 ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
23:17:43.0969 0x0ab0  NetMsmqActivator - ok
23:17:43.0979 0x0ab0  [ 21318671BCAD3ACF16638F98D4D00973, CEA6E3B6BCB4B74A9ACACBEEA12EEA967BBC2240398E2EBC04D7910109CACA11 ] NetPipeActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
23:17:43.0989 0x0ab0  NetPipeActivator - ok
23:17:44.0019 0x0ab0  [ 5F28111C648F1E24F7DBC87CDEB091B8, 2E8645285921EDB98BB2173E11E57459C888D52E80D85791D169C869DE8813B9 ] netprofm        C:\Windows\System32\netprofm.dll
23:17:44.0089 0x0ab0  netprofm - ok
23:17:44.0109 0x0ab0  [ 21318671BCAD3ACF16638F98D4D00973, CEA6E3B6BCB4B74A9ACACBEEA12EEA967BBC2240398E2EBC04D7910109CACA11 ] NetTcpActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
23:17:44.0149 0x0ab0  NetTcpActivator - ok
23:17:44.0149 0x0ab0  [ 21318671BCAD3ACF16638F98D4D00973, CEA6E3B6BCB4B74A9ACACBEEA12EEA967BBC2240398E2EBC04D7910109CACA11 ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
23:17:44.0169 0x0ab0  NetTcpPortSharing - ok
23:17:44.0169 0x0ab0  [ 77889813BE4D166CDAB78DDBA990DA92, 2EF531AE502B943632EEC66A309A8BFCDD36120A5E1473F4AAF3C2393AD0E6A3 ] nfrd960         C:\Windows\system32\DRIVERS\nfrd960.sys
23:17:44.0189 0x0ab0  nfrd960 - ok
23:17:44.0219 0x0ab0  [ 8AD77806D336673F270DB31645267293, E23F324913554A23CD043DD27D4305AF62F48C0561A0FC7B7811E55B74B1BE79 ] NlaSvc          C:\Windows\System32\nlasvc.dll
23:17:44.0259 0x0ab0  NlaSvc - ok
23:17:44.0419 0x0ab0  [ B9B72FAAAA41D59B73B88FE3DD737ED1, 050E741FB5313523340B19C9C168611222C4AE9A6084FE3E2F908A49EA909A29 ] NOBU            C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuAgent.exe
23:17:44.0619 0x0ab0  NOBU - ok
23:17:44.0629 0x0ab0  [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7, D8957EF7060A69DBB3CD6B2C45B1E4143592AB8D018471E17AC04668157DC67F ] Npfs            C:\Windows\system32\drivers\Npfs.sys
23:17:44.0669 0x0ab0  Npfs - ok
23:17:44.0709 0x0ab0  [ D54BFDF3E0C953F823B3D0BFE4732528, 497A1DCC5646EC22119273216DF10D5442D16F83E4363770F507518CF6EAA53A ] nsi             C:\Windows\system32\nsisvc.dll
23:17:44.0789 0x0ab0  nsi - ok
23:17:44.0789 0x0ab0  [ E7F5AE18AF4168178A642A9247C63001, 133023B7E4BA8049C4CAED3282BDD25571D1CC25FAC3B820C7F981D292689D76 ] nsiproxy        C:\Windows\system32\drivers\nsiproxy.sys
23:17:44.0839 0x0ab0  nsiproxy - ok
23:17:44.0939 0x0ab0  [ 1A29A59A4C5BA6F8C85062A613B7E2B2, CC137F499A12C724D4166C2D85E9F447413419A0683DAC6F1A802B7F210C77F1 ] Ntfs            C:\Windows\system32\drivers\Ntfs.sys
23:17:45.0049 0x0ab0  Ntfs - ok
23:17:45.0069 0x0ab0  [ 9899284589F75FA8724FF3D16AED75C1, 181188599FD5D4DE33B97010D9E0CAEABAB9A3EF50712FE7F9AA0735CD0666D6 ] Null            C:\Windows\system32\drivers\Null.sys
23:17:45.0119 0x0ab0  Null - ok
23:17:45.0159 0x0ab0  [ 0A92CB65770442ED0DC44834632F66AD, 581327F07A68DBD5CC749214BE5F1211FC2CE41C7A4F0656B680AFB51A35ACE7 ] nvraid          C:\Windows\system32\drivers\nvraid.sys
23:17:45.0199 0x0ab0  nvraid - ok
23:17:45.0209 0x0ab0  [ DAB0E87525C10052BF65F06152F37E4A, AD9BFF0D5FD3FFB95C758B478E1F6A9FE45E7B37AEC71EB5070D292FEAAEDF37 ] nvstor          C:\Windows\system32\drivers\nvstor.sys
23:17:45.0239 0x0ab0  nvstor - ok
23:17:45.0249 0x0ab0  [ 270D7CD42D6E3979F6DD0146650F0E05, 752489E54C9004EDCBE1F1F208FFD864DA5C83E59A2DDE6B3E0D63ECA996F76F ] nv_agp          C:\Windows\system32\drivers\nv_agp.sys
23:17:45.0269 0x0ab0  nv_agp - ok
23:17:45.0309 0x0ab0  [ 3589478E4B22CE21B41FA1BFC0B8B8A0, AD2469FC753FE552CB809FF405A9AB23E7561292FE89117E3B3B62057EFF0203 ] ohci1394        C:\Windows\system32\drivers\ohci1394.sys
23:17:45.0349 0x0ab0  ohci1394 - ok
23:17:45.0419 0x0ab0  [ 9D10F99A6712E28F8ACD5641E3A7EA6B, 70964A0ED9011EA94044E15FA77EDD9CF535CC79ED8E03A3721FF007E69595CC ] ose             C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
23:17:45.0449 0x0ab0  ose - ok
23:17:45.0689 0x0ab0  [ 61BFFB5F57AD12F83AB64B7181829B34, 1DD0DD35E4158F95765EE6639F217DF03A0A19E624E020DBA609268C08A13846 ] osppsvc         C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
23:17:45.0929 0x0ab0  osppsvc - ok
23:17:45.0999 0x0ab0  [ 3EAC4455472CC2C97107B5291E0DCAFE, E51F373F2DBEAEE516B42BAE8C1B5BB68D00B881323E842CB6EDEC0A183CFFC3 ] p2pimsvc        C:\Windows\system32\pnrpsvc.dll
23:17:46.0089 0x0ab0  p2pimsvc - ok
23:17:46.0149 0x0ab0  [ 927463ECB02179F88E4B9A17568C63C3, FEFD3447692C277D59EEC7BF218552C8BB6B8C98C26E973675549628408B94CE ] p2psvc          C:\Windows\system32\p2psvc.dll
23:17:46.0189 0x0ab0  p2psvc - ok
23:17:46.0209 0x0ab0  [ 0086431C29C35BE1DBC43F52CC273887, 0D116D49EF9ABB57DA005764F25E692622210627FC2048F06A989B12FA8D0A80 ] Parport         C:\Windows\system32\DRIVERS\parport.sys
23:17:46.0229 0x0ab0  Parport - ok
23:17:46.0249 0x0ab0  [ E9766131EEADE40A27DC27D2D68FBA9C, 63C295EC96DBD25F1A8B908295CCB86B54F2A77A02AAA11E5D9160C2C1A492B6 ] partmgr         C:\Windows\system32\drivers\partmgr.sys
23:17:46.0259 0x0ab0  partmgr - ok
23:17:46.0279 0x0ab0  [ 3AEAA8B561E63452C655DC0584922257, 04C072969B58657602EB0C21CEDF24FCEE14E61B90A0F758F93925EF2C9FC32D ] PcaSvc          C:\Windows\System32\pcasvc.dll
23:17:46.0329 0x0ab0  PcaSvc - ok
23:17:46.0409 0x0ab0  [ 7317A0B550F7AC0223B7070897670476, ABB0A1296BA267467C16CF99383EFCAB1732B07EE5B2494197A26B8432DD0A94 ] PCDSRVC{1E208CE0-FB7451FF-06020101}_0 c:\program files\dell support center\pcdsrvc_x64.pkms
23:17:46.0439 0x0ab0  PCDSRVC{1E208CE0-FB7451FF-06020101}_0 - ok
23:17:46.0459 0x0ab0  [ 94575C0571D1462A0F70BDE6BD6EE6B3, 7139BAC653EA94A3DD3821CAB35FC5E22F4CCA5ACC2BAABDAA27E4C3C8B27FC9 ] pci             C:\Windows\system32\drivers\pci.sys
23:17:46.0519 0x0ab0  pci - ok
23:17:46.0549 0x0ab0  [ B5B8B5EF2E5CB34DF8DCF8831E3534FA, F2A7CC645B96946CC65BF60E14E70DC09C848D27C7943CE5DEA0C01A6B863480 ] pciide          C:\Windows\system32\drivers\pciide.sys
23:17:46.0589 0x0ab0  pciide - ok
23:17:46.0599 0x0ab0  [ B2E81D4E87CE48589F98CB8C05B01F2F, 6763BEE7270A4873B3E131BFB92313E2750FCBD0AD73C23D1C4F98F7DF73DE14 ] pcmcia          C:\Windows\system32\DRIVERS\pcmcia.sys
23:17:46.0659 0x0ab0  pcmcia - ok
23:17:46.0669 0x0ab0  [ D6B9C2E1A11A3A4B26A182FFEF18F603, BBA5FE08B1DDD6243118E11358FD61B10E850F090F061711C3CB207CE5FBBD36 ] pcw             C:\Windows\system32\drivers\pcw.sys
23:17:46.0689 0x0ab0  pcw - ok
23:17:46.0709 0x0ab0  [ 68769C3356B3BE5D1C732C97B9A80D6E, FB2D61145980A2899D1B7729184C54070315B0E63C9A22400A76CCD39E00029C ] PEAUTH          C:\Windows\system32\drivers\peauth.sys
23:17:46.0799 0x0ab0  PEAUTH - ok
23:17:46.0909 0x0ab0  [ E495E408C93141E8FC72DC0C6046DDFA, 489B957DADA0DC128A09468F1AD082DCC657E86053208EA06A12937BE86FB919 ] PerfHost        C:\Windows\SysWow64\perfhost.exe
23:17:46.0949 0x0ab0  PerfHost - ok
23:17:47.0059 0x0ab0  [ C7CF6A6E137463219E1259E3F0F0DD6C, 08D7244F52AA17DD669AA6F77C291DAC88E7B2D1887DE422509C1F83EC85F3DD ] pla             C:\Windows\system32\pla.dll
23:17:47.0179 0x0ab0  pla - ok
23:17:47.0229 0x0ab0  [ 25FBDEF06C4D92815B353F6E792C8129, 57D9764AE6BCE33B242C399CDFC10DD405975BD6411CA8C75FBCD06EEB8442A9 ] PlugPlay        C:\Windows\system32\umpnpmgr.dll
23:17:47.0309 0x0ab0  PlugPlay - ok
23:17:47.0359 0x0ab0  [ 71F62C51DFDFBC04C83C5C64B2B8058E, CAB12E6D27BE421BD5A3CB04066EA50303A3210332ECC4B5C03B5F19735FC857 ] Pml Driver HPZ12 C:\Windows\system32\HPZipm12.dll
23:17:47.0389 0x0ab0  Pml Driver HPZ12 - detected UnsignedFile.Multi.Generic ( 1 )
23:17:50.0159 0x0ab0  Detect skipped due to KSN trusted
23:17:50.0159 0x0ab0  Pml Driver HPZ12 - ok
23:17:50.0229 0x0ab0  [ 7195581CEC9BB7D12ABE54036ACC2E38, 9C4E5D6EA984148F2663DC529083408B2248DFF6DAAC85D9195F80A722782315 ] PNRPAutoReg     C:\Windows\system32\pnrpauto.dll
23:17:50.0269 0x0ab0  PNRPAutoReg - ok
23:17:50.0289 0x0ab0  [ 3EAC4455472CC2C97107B5291E0DCAFE, E51F373F2DBEAEE516B42BAE8C1B5BB68D00B881323E842CB6EDEC0A183CFFC3 ] PNRPsvc         C:\Windows\system32\pnrpsvc.dll
23:17:50.0309 0x0ab0  PNRPsvc - ok
23:17:50.0389 0x0ab0  [ 652565EA2FAB8E7366101A0B04DECBBC, 3EB995B5F2380DFC1ABF70B059F2535B86F0CFD2837786D97B04D6EE05544BF4 ] Polar Daemon    C:\Program Files (x86)\Polar\Daemon\polard.exe
23:17:50.0449 0x0ab0  Polar Daemon - ok
23:17:50.0479 0x0ab0  [ 4F15D75ADF6156BF56ECED6D4A55C389, 2ADA3EA69A5D7EC2A4D2DD89178DB94EAFDDF95F07B0070D654D9F7A5C12A044 ] PolicyAgent     C:\Windows\System32\ipsecsvc.dll
23:17:50.0549 0x0ab0  PolicyAgent - ok
23:17:50.0579 0x0ab0  [ 6BA9D927DDED70BD1A9CADED45F8B184, 66203CE70A5EDE053929A940F38924C6792239CCCE10DD2C1D90D5B4D6748B55 ] Power           C:\Windows\system32\umpo.dll
23:17:50.0629 0x0ab0  Power - ok
23:17:50.0679 0x0ab0  [ F92A2C41117A11A00BE01CA01A7FCDE9, 38ADC6052696D110CA5F393BC586791920663F5DA66934C2A824DDA9CD89C763 ] PptpMiniport    C:\Windows\system32\DRIVERS\raspptp.sys
23:17:50.0759 0x0ab0  PptpMiniport - ok
23:17:50.0769 0x0ab0  [ 0D922E23C041EFB1C3FAC2A6F943C9BF, 855418A6A58DCAFB181A1A68613B3E203AFB0A9B3D9D26D0C521F9F613B4EAD5 ] Processor       C:\Windows\system32\DRIVERS\processr.sys
23:17:50.0789 0x0ab0  Processor - ok
23:17:50.0819 0x0ab0  [ 53E83F1F6CF9D62F32801CF66D8352A8, 1225FED810BE8E0729EEAE5B340035CCBB9BACD3EF247834400F9B72D05ACE48 ] ProfSvc         C:\Windows\system32\profsvc.dll
23:17:50.0889 0x0ab0  ProfSvc - ok
23:17:50.0909 0x0ab0  [ 204F3F58212B3E422C90BD9691A2DF28, D748A8CEE4D59B4248C9B1ACA5155D0FF6635A29564B4391B7FAC6261F93FE99 ] ProtectedStorage C:\Windows\system32\lsass.exe
23:17:50.0919 0x0ab0  ProtectedStorage - ok
23:17:50.0979 0x0ab0  [ 0557CF5A2556BD58E26384169D72438D, F6F83A616B1F1C6C0DF6D2EC2513E6C23FD4FAA6D36518B8676C619AB74957B4 ] Psched          C:\Windows\system32\DRIVERS\pacer.sys
23:17:51.0059 0x0ab0  Psched - ok
23:17:51.0099 0x0ab0  [ 87B04878A6D59D6C79251DC960C674C1, 3EB8DB0624E646F0A65D0381408D35CF9FDC5ABFC30DF6431F4070A8EB68447C ] PxHlpa64        C:\Windows\system32\Drivers\PxHlpa64.sys
23:17:51.0119 0x0ab0  PxHlpa64 - ok
23:17:51.0229 0x0ab0  [ A53A15A11EBFD21077463EE2C7AFEEF0, 6002B012A75045DEA62640A864A8721EADE2F8B65BEB5F5BA76D8CD819774489 ] ql2300          C:\Windows\system32\DRIVERS\ql2300.sys
23:17:51.0319 0x0ab0  ql2300 - ok
23:17:51.0329 0x0ab0  [ 4F6D12B51DE1AAEFF7DC58C4D75423C8, FB6ABAB741CED66A79E31A45111649F2FA3E26CEE77209B5296F789F6F7D08DE ] ql40xx          C:\Windows\system32\DRIVERS\ql40xx.sys
23:17:51.0349 0x0ab0  ql40xx - ok
23:17:51.0399 0x0ab0  [ 906191634E99AEA92C4816150BDA3732, A0305436384104C3B559F9C73902DA19B96B518413379E397C5CDAB0B2B9418F ] QWAVE           C:\Windows\system32\qwave.dll
23:17:51.0479 0x0ab0  QWAVE - ok
23:17:51.0499 0x0ab0  [ 76707BB36430888D9CE9D705398ADB6C, 35C1D1D05F98AC29A33D3781F497A0B40A3CB9CDF25FE1F28F574E40DDF70535 ] QWAVEdrv        C:\Windows\system32\drivers\qwavedrv.sys
23:17:51.0559 0x0ab0  QWAVEdrv - ok
23:17:51.0579 0x0ab0  [ 5A0DA8AD5762FA2D91678A8A01311704, 8A64EB5DBAB7048A9E42A21CEB62CCD5B007A80C199892D7F8C69B48E8A255EF ] RasAcd          C:\Windows\system32\DRIVERS\rasacd.sys
23:17:51.0659 0x0ab0  RasAcd - ok
23:17:51.0719 0x0ab0  [ 7ECFF9B22276B73F43A99A15A6094E90, 62C70DA127F48F796F8897BBFA23AB6EB080CC923F0F091DFA384A93F5C90CA1 ] RasAgileVpn     C:\Windows\system32\DRIVERS\AgileVpn.sys
23:17:51.0779 0x0ab0  RasAgileVpn - ok
23:17:51.0789 0x0ab0  [ 8F26510C5383B8DBE976DE1CD00FC8C7, 60E618C010E8A723960636415573FA17EA0BBEF79647196B3BC0B8DEE680E090 ] RasAuto         C:\Windows\System32\rasauto.dll
23:17:51.0869 0x0ab0  RasAuto - ok
23:17:51.0889 0x0ab0  [ 471815800AE33E6F1C32FB1B97C490CA, 27307265F743DE3A3A3EC1B2C472A3D85FDD0AEC458E0B1177593141EE072698 ] Rasl2tp         C:\Windows\system32\DRIVERS\rasl2tp.sys
23:17:51.0929 0x0ab0  Rasl2tp - ok
23:17:51.0989 0x0ab0  [ EE867A0870FC9E4972BA9EAAD35651E2, 1B848D81705081FD2E18AC762DA7F51455657DAF860BF363DC15925A148BCADA ] RasMan          C:\Windows\System32\rasmans.dll
23:17:52.0069 0x0ab0  RasMan - ok
23:17:52.0089 0x0ab0  [ 855C9B1CD4756C5E9A2AA58A15F58C25, A514F8A9C304D54BDA8DC60F5A64259B057EC83A1CAAF6D2B58CFD55E9561F72 ] RasPppoe        C:\Windows\system32\DRIVERS\raspppoe.sys
23:17:52.0149 0x0ab0  RasPppoe - ok
23:17:52.0169 0x0ab0  [ E8B1E447B008D07FF47D016C2B0EEECB, FEC789F82B912F3E14E49524D40FEAA4373B221156F14045E645D7C37859258C ] RasSstp         C:\Windows\system32\DRIVERS\rassstp.sys
23:17:52.0199 0x0ab0  RasSstp - ok
23:17:52.0259 0x0ab0  [ 77F665941019A1594D887A74F301FA2F, 1FDC6F6853400190C086042933F157814D915C54F26793CAD36CD2607D8810DA ] rdbss           C:\Windows\system32\DRIVERS\rdbss.sys
23:17:52.0349 0x0ab0  rdbss - ok
23:17:52.0359 0x0ab0  [ 302DA2A0539F2CF54D7C6CC30C1F2D8D, 1DF3501BBFFB56C3ECC39DBCC4287D3302216C2208CE22428B8C4967E5DE9D17 ] rdpbus          C:\Windows\system32\DRIVERS\rdpbus.sys
23:17:52.0399 0x0ab0  rdpbus - ok
23:17:52.0419 0x0ab0  [ CEA6CC257FC9B7715F1C2B4849286D24, A78144D18352EA802C39D9D42921CF97A3E0211766B2169B6755C6FC2D77A804 ] RDPCDD          C:\Windows\system32\DRIVERS\RDPCDD.sys
23:17:52.0499 0x0ab0  RDPCDD - ok
23:17:52.0519 0x0ab0  [ BB5971A4F00659529A5C44831AF22365, 9AAA5C0D448E821FD85589505D99DF7749715A046BBD211F139E4E652ADDE41F ] RDPENCDD        C:\Windows\system32\drivers\rdpencdd.sys
23:17:52.0549 0x0ab0  RDPENCDD - ok
23:17:52.0569 0x0ab0  [ 216F3FA57533D98E1F74DED70113177A, 60C126A1409D1E9C39F1C9E95F70115BF4AF07780AB499F6E10A612540F173F4 ] RDPREFMP        C:\Windows\system32\drivers\rdprefmp.sys
23:17:52.0599 0x0ab0  RDPREFMP - ok
23:17:52.0649 0x0ab0  [ FE571E088C2D83619D2D48D4E961BF41, 88C5A2FCB1D0E528657842E39963471A6E42FCA3FCDF37955AEC8258AB4C48EA ] RDPWD           C:\Windows\system32\drivers\RDPWD.sys
23:17:52.0730 0x0ab0  RDPWD - ok
23:17:52.0790 0x0ab0  [ 34ED295FA0121C241BFEF24764FC4520, AAEE5F00CAA763A5BA51CF56BD7262C03409CD72BD5601490E3EC3FFF929BB5F ] rdyboost        C:\Windows\system32\drivers\rdyboost.sys
23:17:52.0850 0x0ab0  rdyboost - ok
23:17:52.0890 0x0ab0  [ 254FB7A22D74E5511C73A3F6D802F192, 3D0FB5840364200DE394F8CC28DA0E334C2B5FA8FF28A41656EE72287F3D3836 ] RemoteAccess    C:\Windows\System32\mprdim.dll
23:17:52.0980 0x0ab0  RemoteAccess - ok
23:17:53.0000 0x0ab0  [ E4D94F24081440B5FC5AA556C7C62702, 147CAA03568DC480F9506E30B84891AB7E433B5EBC05F34FF10F72B00E1C6B22 ] RemoteRegistry  C:\Windows\system32\regsvc.dll
23:17:53.0050 0x0ab0  RemoteRegistry - ok
23:17:53.0070 0x0ab0  [ 3DD798846E2C28102B922C56E71B7932, 30B111615D74CB2213997A5C08DD9C8613ADE441D9423CC1C49A753D13CE524D ] RFCOMM          C:\Windows\system32\DRIVERS\rfcomm.sys
23:17:53.0110 0x0ab0  RFCOMM - ok
23:17:53.0150 0x0ab0  [ E20B1907FC72A3664ECE21E3C20FC63D, 7BB9CD6A90BDBF8AD3B22CBB1E29A240C9302EDEE104283DA2D153E9539104E5 ] rimspci         C:\Windows\system32\DRIVERS\rimspe64.sys
23:17:53.0210 0x0ab0  rimspci - ok
23:17:53.0230 0x0ab0  [ A6DA2B0C8F5BB3F9F5423CFF8D6A02D9, 1841364D1ADC7DFD107AE3533BD8E37AD1E176EE5822D1B354A9E8E865029996 ] risdpcie        C:\Windows\system32\DRIVERS\risdpe64.sys
23:17:53.0300 0x0ab0  risdpcie - ok
23:17:53.0310 0x0ab0  [ 6A1CD4674505E6791390A1AB71DA1FBE, EC095BFBAA44258975E1538767BB6BFFAA85C63C7F63CB314501F113C8D16208 ] rixdpcie        C:\Windows\system32\DRIVERS\rixdpe64.sys
23:17:53.0380 0x0ab0  rixdpcie - ok
23:17:53.0480 0x0ab0  [ BDDC447AB46625A54619808575D5CB46, 5321343BFB972A111D27DED7A3F3A3520E0C77104E6139ADC7765C76A459ED9C ] RoxMediaDB12OEM C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxMediaDB12OEM.exe
23:17:53.0550 0x0ab0  RoxMediaDB12OEM - ok
23:17:53.0570 0x0ab0  [ CE203243ADF512540249DF9C264F12DD, 7BC0A6E9A422D832DDF046F28EA0F80A879A007B7116C4B830D6A39DCDD09EF5 ] RoxWatch12      C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatch12OEM.exe
23:17:53.0590 0x0ab0  RoxWatch12 - ok
23:17:53.0610 0x0ab0  [ E4DC58CF7B3EA515AE917FF0D402A7BB, 665B5CD9FE905B0EE3F59A7B1A94760F5393EBEE729877D8584349754C2867E8 ] RpcEptMapper    C:\Windows\System32\RpcEpMap.dll
23:17:53.0640 0x0ab0  RpcEptMapper - ok
23:17:53.0660 0x0ab0  [ D5BA242D4CF8E384DB90E6A8ED850B8C, CB4CB2608B5E31B55FB1A2CF4051E6D08A0C2A5FB231B2116F95938D7577334E ] RpcLocator      C:\Windows\system32\locator.exe
23:17:53.0680 0x0ab0  RpcLocator - ok
23:17:53.0720 0x0ab0  [ 5C627D1B1138676C0A7AB2C2C190D123, C5003F2C912C5CA990E634818D3B4FD72F871900AF2948BD6C4D6400B354B401 ] RpcSs           C:\Windows\system32\rpcss.dll
23:17:53.0760 0x0ab0  RpcSs - ok
23:17:53.0800 0x0ab0  [ DDC86E4F8E7456261E637E3552E804FF, D250C69CCC75F2D88E7E624FCC51300E75637333317D53908CCA7E0F117173DD ] rspndr          C:\Windows\system32\DRIVERS\rspndr.sys
23:17:53.0880 0x0ab0  rspndr - ok
23:17:53.0890 0x0ab0  [ 204F3F58212B3E422C90BD9691A2DF28, D748A8CEE4D59B4248C9B1ACA5155D0FF6635A29564B4391B7FAC6261F93FE99 ] SamSs           C:\Windows\system32\lsass.exe
23:17:53.0900 0x0ab0  SamSs - ok
23:17:53.0940 0x0ab0  [ AC03AF3329579FFFB455AA2DAABBE22B, 7AD3B62ADFEC166F9E256F9FF8BAA0568B2ED7308142BF8F5269E6EAA5E0A656 ] sbp2port        C:\Windows\system32\drivers\sbp2port.sys
23:17:53.0990 0x0ab0  sbp2port - ok
23:17:54.0040 0x0ab0  [ 9B7395789E3791A3B6D000FE6F8B131E, E5F067F3F212BF5481668BE1779CBEF053F511F8967589BE2E865ACB9A620024 ] SCardSvr        C:\Windows\System32\SCardSvr.dll
23:17:54.0140 0x0ab0  SCardSvr - ok
23:17:54.0160 0x0ab0  [ 253F38D0D7074C02FF8DEB9836C97D2B, CB5CAFCB8628BB22877F74ACF1DED0BBAED8F4573A74DA7FE94BBBA584889116 ] scfilter        C:\Windows\system32\DRIVERS\scfilter.sys
23:17:54.0210 0x0ab0  scfilter - ok
23:17:54.0300 0x0ab0  [ 262F6592C3299C005FD6BEC90FC4463A, 54095E37F0B6CC677A3E9BDD40F4647C713273D197DB341063AA7F342A60C4A7 ] Schedule        C:\Windows\system32\schedsvc.dll
23:17:54.0420 0x0ab0  Schedule - ok
23:17:54.0460 0x0ab0  [ F17D1D393BBC69C5322FBFAFACA28C7F, 62A1A92B3C52ADFD0B808D7F69DD50238B5F202421F1786F7EAEAA63F274B3E8 ] SCPolicySvc     C:\Windows\System32\certprop.dll
23:17:54.0490 0x0ab0  SCPolicySvc - ok
23:17:54.0540 0x0ab0  [ 6EA4234DC55346E0709560FE7C2C1972, 64011E044C16E2F92689E5F7E4666A075E27BBFA61F3264E5D51CE1656C1D5B8 ] SDRSVC          C:\Windows\System32\SDRSVC.dll
23:17:54.0640 0x0ab0  SDRSVC - ok
23:17:54.0670 0x0ab0  [ 3EA8A16169C26AFBEB544E0E48421186, 34BBB0459C96B3DE94CCB0D73461562935C583D7BF93828DA4E20A6BC9B7301D ] secdrv          C:\Windows\system32\drivers\secdrv.sys
23:17:54.0750 0x0ab0  secdrv - ok
23:17:54.0780 0x0ab0  [ BC617A4E1B4FA8DF523A061739A0BD87, 10C4057F6B321EB5237FF619747B74F5401BC17D15A8C7060829E8204A2297F9 ] seclogon        C:\Windows\system32\seclogon.dll
23:17:54.0840 0x0ab0  seclogon - ok
23:17:54.0860 0x0ab0  [ C32AB8FA018EF34C0F113BD501436D21, E0EB8E80B51E45CA7EB061E705DA0BC07878759418A8519AE6E12326FE79E7C7 ] SENS            C:\Windows\system32\sens.dll
23:17:54.0900 0x0ab0  SENS - ok
23:17:54.0910 0x0ab0  [ 0336CFFAFAAB87A11541F1CF1594B2B2, 8B8A6A33E78A12FB05E29B2E2775850626574AFD2EF88748D65E690A07B10B8D ] SensrSvc        C:\Windows\system32\sensrsvc.dll
23:17:54.0940 0x0ab0  SensrSvc - ok
23:17:54.0990 0x0ab0  [ 052D4299E72FFFCCD9A168ADCDF5C450, 5A0BD695C166BCF57DFE71BAC7E745005A6D575F885E720EA070B791781BAE4B ] Ser2pl          C:\Windows\system32\DRIVERS\ser2pl64.sys
23:17:55.0040 0x0ab0  Ser2pl - ok
23:17:55.0050 0x0ab0  [ CB624C0035412AF0DEBEC78C41F5CA1B, A4D937F11E06CAE914347CA1362F4C98EC5EE0C0C80321E360EA1ABD6726F8D4 ] Serenum         C:\Windows\system32\DRIVERS\serenum.sys
23:17:55.0090 0x0ab0  Serenum - ok
23:17:55.0120 0x0ab0  [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6, 8F9776FB84C5D11068EAF1FF1D1A46466C655D64D256A8B1E31DC0C23B5DD22D ] Serial          C:\Windows\system32\DRIVERS\serial.sys
23:17:55.0180 0x0ab0  Serial - ok
23:17:55.0250 0x0ab0  [ 1C545A7D0691CC4A027396535691C3E3, 065C30BE598FF4DC55C37E0BBE0CEDF10A370AE2BF5404B42EBBB867A3FFED6D ] sermouse        C:\Windows\system32\DRIVERS\sermouse.sys
23:17:55.0300 0x0ab0  sermouse - ok
23:17:55.0330 0x0ab0  [ 0B6231BF38174A1628C4AC812CC75804, E569BF1F7F5689E2E917FA6516DB53388A5B8B1C6699DEE030147E853218811D ] SessionEnv      C:\Windows\system32\sessenv.dll
23:17:55.0410 0x0ab0  SessionEnv - ok
23:17:55.0440 0x0ab0  [ A554811BCD09279536440C964AE35BBF, DA8F893722F803E189D7D4D6C6232ED34505B63A64ED3A0132A5BB7A2BABDE55 ] sffdisk         C:\Windows\system32\drivers\sffdisk.sys
23:17:55.0480 0x0ab0  sffdisk - ok
23:17:55.0500 0x0ab0  [ FF414F0BAEFEBA59BC6C04B3DB0B87BF, B81EF5D26AEB572CAB590F7AD7CA8C89F296420089EF5E6148E972F2DBCA1042 ] sffp_mmc        C:\Windows\system32\drivers\sffp_mmc.sys
23:17:55.0540 0x0ab0  sffp_mmc - ok
23:17:55.0560 0x0ab0  [ DD85B78243A19B59F0637DCF284DA63C, 6730D4F2BAE7E24615746ACC41B42D01DB6068D6504982008ADA1890DE900197 ] sffp_sd         C:\Windows\system32\drivers\sffp_sd.sys
23:17:55.0590 0x0ab0  sffp_sd - ok
23:17:55.0600 0x0ab0  [ A9D601643A1647211A1EE2EC4E433FF4, 7AC60B4AB48D4BBF1F9681C12EC2A75C72E6E12D30FABC564A24394310E9A5F9 ] sfloppy         C:\Windows\system32\DRIVERS\sfloppy.sys
23:17:55.0620 0x0ab0  sfloppy - ok
23:17:55.0700 0x0ab0  [ E1974A92AC0914A3859359A0A8C82C68, 4908917F72D6E531B44488F06A05915F0DA9767758E44C886F5F93F46BA79654 ] SftService      C:\Program Files (x86)\Dell DataSafe Local Backup\sftservice.EXE
23:17:55.0770 0x0ab0  SftService - ok
23:17:55.0810 0x0ab0  [ B95F6501A2F8B2E78C697FEC401970CE, 758B73A32902299A313348CE7EC189B20EB4CB398D0180E4EE24B84DAD55F291 ] SharedAccess    C:\Windows\System32\ipnathlp.dll
23:17:55.0890 0x0ab0  SharedAccess - ok
23:17:55.0930 0x0ab0  [ AAF932B4011D14052955D4B212A4DA8D, 2A3BFD0FA9569288E91AE3E72CA1EC39E1450D01E6473CE51157E0F138257923 ] ShellHWDetection C:\Windows\System32\shsvcs.dll
23:17:55.0980 0x0ab0  ShellHWDetection - ok
23:17:55.0980 0x0ab0  [ 843CAF1E5FDE1FFD5FF768F23A51E2E1, 89CA9F516E42A6B905474D738CDA2C121020A07DBD4E66CFE569DD77D79D7820 ] SiSRaid2        C:\Windows\system32\DRIVERS\SiSRaid2.sys
23:17:56.0000 0x0ab0  SiSRaid2 - ok
23:17:56.0010 0x0ab0  [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4, 87B85C66DF7EB6FDB8A2341D05FAA5261FF68A90CCFC63F0E4A03824F1E33E5E ] SiSRaid4        C:\Windows\system32\DRIVERS\sisraid4.sys
23:17:56.0020 0x0ab0  SiSRaid4 - ok
23:17:56.0120 0x0ab0  [ 050A4112B00BCA2E13314CDE48C1DEEE, 86C679CD494DEEB984372BF954EFBB8982AC7995FBF89FCF83BC228991D1B825 ] SkypeUpdate     C:\Program Files (x86)\Skype\Updater\Updater.exe
23:17:56.0190 0x0ab0  SkypeUpdate - ok
23:17:56.0200 0x0ab0  [ 548260A7B8654E024DC30BF8A7C5BAA4, 4A7E58331D7765A12F53DC2371739DC9A463940B13E16157CE10DB80E958D740 ] Smb             C:\Windows\system32\DRIVERS\smb.sys
23:17:56.0250 0x0ab0  Smb - ok
23:17:56.0290 0x0ab0  [ 6313F223E817CC09AA41811DAA7F541D, D787061043BEEDB9386B048CB9E680E6A88A1CBAE9BD4A8C0209155BFB76C630 ] SNMPTRAP        C:\Windows\System32\snmptrap.exe
23:17:56.0350 0x0ab0  SNMPTRAP - ok
23:17:56.0380 0x0ab0  [ B9E31E5CACDFE584F34F730A677803F9, 21A5130BD00089C609522A372018A719F8E37103D2DD22C59EACB393BE35A063 ] spldr           C:\Windows\system32\drivers\spldr.sys
23:17:56.0400 0x0ab0  spldr - ok
23:17:56.0480 0x0ab0  [ 85DAA09A98C9286D4EA2BA8D0E644377, F9C324E2EF81193FE831C7EECC44A100CA06F82FA731BF555D9EA4D91DA13329 ] Spooler         C:\Windows\System32\spoolsv.exe
23:17:56.0530 0x0ab0  Spooler - ok
23:17:56.0680 0x0ab0  [ E17E0188BB90FAE42D83E98707EFA59C, FC075F7B39E86CC8EF6DA4E339FE946917E319C347AC70FB0C50AAF36F97E27F ] sppsvc          C:\Windows\system32\sppsvc.exe
23:17:56.0890 0x0ab0  sppsvc - ok
23:17:56.0920 0x0ab0  [ 93D7D61317F3D4BC4F4E9F8A96A7DE45, 36D48B23B8243BE5229707375FCD11C2DCAC96983199345365F065A0CBF33314 ] sppuinotify     C:\Windows\system32\sppuinotify.dll
23:17:56.0970 0x0ab0  sppuinotify - ok
23:17:57.0010 0x0ab0  [ 441FBA48BFF01FDB9D5969EBC1838F0B, 306128F1AD489F87161A089D1BDC1542A4CB742D91A0C12A7CD1863FDB8932C0 ] srv             C:\Windows\system32\DRIVERS\srv.sys
23:17:57.0100 0x0ab0  srv - ok
23:17:57.0130 0x0ab0  [ B4ADEBBF5E3677CCE9651E0F01F7CC28, 726DB2283113AB2A9681E8E9F61132303D6D86E9CD034C40EE4A8C9DB29E87F7 ] srv2            C:\Windows\system32\DRIVERS\srv2.sys
23:17:57.0180 0x0ab0  srv2 - ok
23:17:57.0210 0x0ab0  [ 27E461F0BE5BFF5FC737328F749538C3, AFA4704ED8FFC1A0BAB40DFB81D3AE3F3D933A3C9BF54DDAF39FF9AF3646D9E6 ] srvnet          C:\Windows\system32\DRIVERS\srvnet.sys
23:17:57.0250 0x0ab0  srvnet - ok
23:17:57.0280 0x0ab0  [ 51B52FBD583CDE8AA9BA62B8B4298F33, 2E2403F8AA39E79D1281CA006B51B43139C32A5FDD64BD34DAA4B935338BD740 ] SSDPSRV         C:\Windows\System32\ssdpsrv.dll
23:17:57.0340 0x0ab0  SSDPSRV - ok
23:17:57.0350 0x0ab0  [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB, D21CDBC4C2AA0DB5B4455D5108B0CAF4282A2E664B9035708F212CC094569D9D ] SstpSvc         C:\Windows\system32\sstpsvc.dll
23:17:57.0380 0x0ab0  SstpSvc - ok
23:17:57.0540 0x0ab0  [ DA7702025DFD169B909C4DA3126762CC, 40777941F71D0762C450824A635888D1390307E937EDF13385524569F4602D0A ] STacSV          C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_0057cbec48a2d7cf\STacSV64.exe
23:17:57.0590 0x0ab0  STacSV - ok
23:17:57.0610 0x0ab0  [ F3817967ED533D08327DC73BC4D5542A, 1B204454408A690C0A86447F3E4AA9E7C58A9CFB567C94C17C21920BA648B4D5 ] stexstor        C:\Windows\system32\DRIVERS\stexstor.sys
23:17:57.0630 0x0ab0  stexstor - ok
23:17:57.0660 0x0ab0  [ CAF5A9708671B14B9670260735B22C4E, B31F2B500605379BC9531E21E4ACD17EA281FFF25AA4B4D342E14F8F5952D1EC ] STHDA           C:\Windows\system32\DRIVERS\stwrt64.sys
23:17:57.0690 0x0ab0  STHDA - ok
23:17:57.0730 0x0ab0  [ 8DD52E8E6128F4B2DA92CE27402871C1, 1101C38BE8FC383B5F2F9FA402F9652B23B88A764DE2B584DFE62B88B11DEF92 ] stisvc          C:\Windows\System32\wiaservc.dll
23:17:57.0790 0x0ab0  stisvc - ok
23:17:57.0810 0x0ab0  [ 9E182DD94496550A22A392CC1A8E0F52, 6F630982F7AFDF409F24BB0D9815592000FC8A47200F4FEC4A5C5ED241810244 ] stllssvr        C:\Program Files (x86)\Common Files\SureThing Shared\stllssvr.exe
23:17:57.0820 0x0ab0  stllssvr - ok
23:17:57.0860 0x0ab0  [ D01EC09B6711A5F8E7E6564A4D0FBC90, 3CB922291DBADC92B46B9E28CCB6810CD8CCDA3E74518EC9522B58B998E1F969 ] swenum          C:\Windows\system32\drivers\swenum.sys
23:17:57.0890 0x0ab0  swenum - ok
23:17:57.0920 0x0ab0  [ E08E46FDD841B7184194011CA1955A0B, 9C3725BB1F08F92744C980A22ED5C874007D3B5863C7E1F140F50061052AC418 ] swprv           C:\Windows\System32\swprv.dll
23:17:58.0020 0x0ab0  swprv - ok
23:17:58.0080 0x0ab0  [ 868DFB220A18312A12CEF01BA9AC069B, D4C002963E236CEA8BF1FDC0B3333176693B41B8B3F2DD9469AA8B74C1F38E9C ] SynTP           C:\Windows\system32\DRIVERS\SynTP.sys
23:17:58.0110 0x0ab0  SynTP - ok
23:17:58.0210 0x0ab0  [ BF9CCC0BF39B418C8D0AE8B05CF95B7D, 3C13217548BE61F2BDB8BD41F77345CDDA1F97BF0AE17241C335B9807EB3DBB8 ] SysMain         C:\Windows\system32\sysmain.dll
23:17:58.0350 0x0ab0  SysMain - ok
23:17:58.0390 0x0ab0  [ E3C61FD7B7C2557E1F1B0B4CEC713585, 01F0E116606D185BF93B540868075BFB1A398197F6AABD994983DBFF56B3A8A0 ] TabletInputService C:\Windows\System32\TabSvc.dll
23:17:58.0410 0x0ab0  TabletInputService - ok
23:17:58.0460 0x0ab0  [ 40F0849F65D13EE87B9A9AE3C1DD6823, E251A7EF3D0FD2973AF33A62FC457A7E8D5E8694208F811F52455F7C2426121F ] TapiSrv         C:\Windows\System32\tapisrv.dll
23:17:58.0540 0x0ab0  TapiSrv - ok
23:17:58.0570 0x0ab0  [ 1BE03AC720F4D302EA01D40F588162F6, AB644862BF1D2E824FD846180DEC4E2C0FAFCC517451486DE5A92E5E78A952E4 ] TBS             C:\Windows\System32\tbssvc.dll
23:17:58.0650 0x0ab0  TBS - ok
23:17:58.0750 0x0ab0  [ 04ADD18EE5CC9FBEDAEC1DD1CD0CB45E, F05C0C4CA3DD234AD5D60CF1EF763C9A1D9EC3C157E180C2D75CC07E6B02A611 ] Tcpip           C:\Windows\system32\drivers\tcpip.sys
23:17:58.0880 0x0ab0  Tcpip - ok
23:17:58.0940 0x0ab0  [ 04ADD18EE5CC9FBEDAEC1DD1CD0CB45E, F05C0C4CA3DD234AD5D60CF1EF763C9A1D9EC3C157E180C2D75CC07E6B02A611 ] TCPIP6          C:\Windows\system32\DRIVERS\tcpip.sys
23:17:58.0990 0x0ab0  TCPIP6 - ok
23:17:59.0030 0x0ab0  [ 1B16D0BD9841794A6E0CDE0CEF744ABC, 7EB8BA97339199EEE7F2B09DA2DA6279DA64A510D4598D42CF86415D67CD674C ] tcpipreg        C:\Windows\system32\drivers\tcpipreg.sys
23:17:59.0070 0x0ab0  tcpipreg - ok
23:17:59.0120 0x0ab0  [ 3371D21011695B16333A3934340C4E7C, 7416F9BBFC1BA9D875EA7D1C7A0D912FC6977B49A865D67E3F9C4E18A965082D ] TDPIPE          C:\Windows\system32\drivers\tdpipe.sys
23:17:59.0170 0x0ab0  TDPIPE - ok
23:17:59.0200 0x0ab0  [ 51C5ECEB1CDEE2468A1748BE550CFBC8, 4E8F83877330B421F7B5D8393D34BC44C6450E69209DAA95B29CB298166A5DF9 ] TDTCP           C:\Windows\system32\drivers\tdtcp.sys
23:17:59.0230 0x0ab0  TDTCP - ok
23:17:59.0270 0x0ab0  [ DDAD5A7AB24D8B65F8D724F5C20FD806, B71F2967A4EE7395E4416C1526CB85368AEA988BDD1F2C9719C48B08FAFA9661 ] tdx             C:\Windows\system32\DRIVERS\tdx.sys
23:17:59.0320 0x0ab0  tdx - ok
23:17:59.0360 0x0ab0  [ 561E7E1F06895D78DE991E01DD0FB6E5, 83BFA50A528762EC52A011302AC3874636FB7E26628CD7ACFBF2BDC9FAA8110D ] TermDD          C:\Windows\system32\drivers\termdd.sys
23:17:59.0400 0x0ab0  TermDD - ok
23:17:59.0480 0x0ab0  [ 008CD4EBFABCF78D0F19B3778492648C, 9050490EEE0AD86E73F0A82D83E4FC29DF84F6B6FDB389AE135FD712B5F425BE ] TermService     C:\Windows\System32\termsrv.dll
23:17:59.0560 0x0ab0  TermService - ok
23:17:59.0570 0x0ab0  [ F0344071948D1A1FA732231785A0664C, DB9886C2C858FAF45AEA15F8E42860343F73EB8685C53EC2E8CCC10586CB0832 ] Themes          C:\Windows\system32\themeservice.dll
23:17:59.0610 0x0ab0  Themes - ok
23:17:59.0640 0x0ab0  [ E40E80D0304A73E8D269F7141D77250B, 0DB4AC13A264F19A84DC0BCED54E8E404014CC09C993B172002B1561EC7E265A ] THREADORDER     C:\Windows\system32\mmcss.dll
23:17:59.0670 0x0ab0  THREADORDER - ok
23:17:59.0690 0x0ab0  [ 7E7AFD841694F6AC397E99D75CEAD49D, DE87F203FD8E6BDCCFCA1860A85F283301A365846FB703D9BB86278D8AC96B07 ] TrkWks          C:\Windows\System32\trkwks.dll
23:17:59.0750 0x0ab0  TrkWks - ok
23:17:59.0820 0x0ab0  [ 773212B2AAA24C1E31F10246B15B276C, F2EF85F5ABA307976D9C649D710B408952089458DDE97D4DEF321DF14E46A046 ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
23:17:59.0890 0x0ab0  TrustedInstaller - ok
23:17:59.0920 0x0ab0  [ E232A3B43A894BB327FC161529BD9ED1, F2673DA8C920F21ACCECC25F7C59A05822E5E577D47F126EDF9C94FEB4B30C5F ] tssecsrv        C:\Windows\system32\DRIVERS\tssecsrv.sys
23:17:59.0980 0x0ab0  tssecsrv - ok
23:18:00.0040 0x0ab0  [ D11C783E3EF9A3C52C0EBE83CC5000E9, A136C355D4C8945729163D15801364A614E23217B15F9313C85BA45BB71A74EB ] TsUsbFlt        C:\Windows\system32\drivers\tsusbflt.sys
23:18:00.0120 0x0ab0  TsUsbFlt - ok
23:18:00.0170 0x0ab0  [ 3566A8DAAFA27AF944F5D705EAA64894, AE9D8B648DA08AF667B9456C3FE315489859C157510A258559F18238F2CC92B8 ] tunnel          C:\Windows\system32\DRIVERS\tunnel.sys
23:18:00.0240 0x0ab0  tunnel - ok
23:18:00.0260 0x0ab0  [ 825E7A1F48FB8BCFBA27C178AAB4E275, 94F039917B52BEFFFE383E14A6169AE81B6E79C30BA7DD017A9CFE15708A1605 ] TurboB          C:\Windows\system32\DRIVERS\TurboB.sys
23:18:00.0270 0x0ab0  TurboB - ok
23:18:00.0340 0x0ab0  [ B206BE1174D5964D49A56BB6C4E0524A, 9D7DA11220B69E2EDEA9E55EC0E4CB554DD7F638ABF49B76353CE5A5C75965B8 ] TurboBoost      C:\Program Files\Intel\TurboBoost\TurboBoost.exe
23:18:00.0380 0x0ab0  TurboBoost - ok
23:18:00.0410 0x0ab0  [ B4DD609BD7E282BFC683CEC7EAAAAD67, EF131DB6F6411CAD36A989A421AF93F89DD61601AC524D2FF11C10FF6E3E9123 ] uagp35          C:\Windows\system32\DRIVERS\uagp35.sys
23:18:00.0450 0x0ab0  uagp35 - ok
23:18:00.0510 0x0ab0  [ FF4232A1A64012BAA1FD97C7B67DF593, D8591B4EB056899C7B604E4DD852D82D4D9809F508ABCED4A03E1BE6D5D456E3 ] udfs            C:\Windows\system32\DRIVERS\udfs.sys
23:18:00.0580 0x0ab0  udfs - ok
23:18:00.0610 0x0ab0  [ 3CBDEC8D06B9968ABA702EBA076364A1, B8DAB8AA804FC23021BFEBD7AE4D40FBE648D6C6BA21CC008E26D1C084972F9B ] UI0Detect       C:\Windows\system32\UI0Detect.exe
23:18:00.0640 0x0ab0  UI0Detect - ok
23:18:00.0670 0x0ab0  [ 4BFE1BC28391222894CBF1E7D0E42320, 5918B1ED2030600DF77BDACF1C808DF6EADDD8BF3E7003AF1D72050D8B102B3A ] uliagpkx        C:\Windows\system32\drivers\uliagpkx.sys
23:18:00.0711 0x0ab0  uliagpkx - ok
23:18:00.0751 0x0ab0  [ DC54A574663A895C8763AF0FA1FF7561, 09A3F3597E91CBEB2F38E96E75134312B60CAE5574B2AD4606C2D3E992AEDDFE ] umbus           C:\Windows\system32\DRIVERS\umbus.sys
23:18:00.0811 0x0ab0  umbus - ok
23:18:00.0831 0x0ab0  [ B2E8E8CB557B156DA5493BBDDCC1474D, F547509A08C0679ACB843E20C9C0CF51BED1B06530BBC529DFB0944504564A43 ] UmPass          C:\Windows\system32\DRIVERS\umpass.sys
23:18:00.0861 0x0ab0  UmPass - ok
23:18:00.0911 0x0ab0  [ D47EC6A8E81633DD18D2436B19BAF6DE, 0FB461E2D5E0B75BB5958F6362F4880BFA4C36AD930542609BCAF574941AA7AE ] upnphost        C:\Windows\System32\upnphost.dll
23:18:00.0981 0x0ab0  upnphost - ok
23:18:01.0051 0x0ab0  [ C9E9D59C0099A9FF51697E9306A44240, 78D9A7A5E5742962B6978F475BF06CB32262F1D214699D3D40538476A58012A1 ] USBAAPL64       C:\Windows\system32\Drivers\usbaapl64.sys
23:18:01.0091 0x0ab0  USBAAPL64 - detected UnsignedFile.Multi.Generic ( 1 )
23:18:03.0871 0x0ab0  Detect skipped due to KSN trusted
23:18:03.0871 0x0ab0  USBAAPL64 - ok
23:18:03.0951 0x0ab0  [ DCA68B0943D6FA415F0C56C92158A83A, BEE5A5B33B22D1DF50B884D46D89FC3B8286EB16E38AD5A20F0A49E5C6766C57 ] usbccgp         C:\Windows\system32\DRIVERS\usbccgp.sys
23:18:04.0031 0x0ab0  usbccgp - ok
23:18:04.0081 0x0ab0  [ 80B0F7D5CCF86CEB5D402EAAF61FEC31, 140C62116A425DEAD25FE8D82DE283BC92C482A9F643658D512F9F67061F28AD ] usbcir          C:\Windows\system32\drivers\usbcir.sys
23:18:04.0151 0x0ab0  usbcir - ok
23:18:04.0181 0x0ab0  [ 18A85013A3E0F7E1755365D287443965, 811C5EDF38C765BCF71BCE25CB6626FF6988C3699F5EF1846240EA0052F34C33 ] usbehci         C:\Windows\system32\DRIVERS\usbehci.sys
23:18:04.0231 0x0ab0  usbehci - ok
23:18:04.0291 0x0ab0  [ 8D1196CFBB223621F2C67D45710F25BA, B5D7AFE51833B24FC9576F3AED3D8A2B290E5846060E73F9FFFAC1890A8B6003 ] usbhub          C:\Windows\system32\DRIVERS\usbhub.sys
23:18:04.0341 0x0ab0  usbhub - ok
23:18:04.0381 0x0ab0  [ 765A92D428A8DB88B960DA5A8D6089DC, 56DE8A2ED58E53B202C399CA7BACB1551136303C2EE0AB426BDBBF880E3C542C ] usbohci         C:\Windows\system32\drivers\usbohci.sys
23:18:04.0431 0x0ab0  usbohci - ok
23:18:04.0461 0x0ab0  [ 73188F58FB384E75C4063D29413CEE3D, B485463933306036B1D490722CB1674DC85670753D79FA0EF7EBCA7BBAAD9F7C ] usbprint        C:\Windows\system32\DRIVERS\usbprint.sys
23:18:04.0521 0x0ab0  usbprint - ok
23:18:04.0541 0x0ab0  [ 9661DA76B4531B2DA272ECCE25A8AF24, FEA93254A21E71A7EB8AD35FCCAD2C1E41F7329EC33B1734F5B41307A34D8637 ] usbscan         C:\Windows\system32\DRIVERS\usbscan.sys
23:18:04.0571 0x0ab0  usbscan - ok
23:18:04.0601 0x0ab0  [ FED648B01349A3C8395A5169DB5FB7D6, DC4D7594C24ADD076927B9347F1B50B91CF03A4ABDB284248D5711D9C19DEB96 ] USBSTOR         C:\Windows\system32\DRIVERS\USBSTOR.SYS
23:18:04.0631 0x0ab0  USBSTOR - ok
23:18:04.0671 0x0ab0  [ DD253AFC3BC6CBA412342DE60C3647F3, 146F8613F1057AC054DC3593E84BC52899DA27EA33B0E72ACFB78C3699ADCDE7 ] usbuhci         C:\Windows\system32\drivers\usbuhci.sys
23:18:04.0701 0x0ab0  usbuhci - ok
23:18:04.0741 0x0ab0  [ 1F775DA4CF1A3A1834207E975A72E9D7, 6D3DE5BD3EF3A76E997E5BAF900C51D25308F5A9682D1F62017F577A24095B90 ] usbvideo        C:\Windows\System32\Drivers\usbvideo.sys
23:18:04.0821 0x0ab0  usbvideo - ok
23:18:04.0861 0x0ab0  [ EDBB23CBCF2CDF727D64FF9B51A6070E, 7202484C8E1BFB2AFD64D8C81668F3EDE0E3BF5EB27572877A0A7B337AE5AE42 ] UxSms           C:\Windows\System32\uxsms.dll
23:18:04.0921 0x0ab0  UxSms - ok
23:18:04.0931 0x0ab0  [ 204F3F58212B3E422C90BD9691A2DF28, D748A8CEE4D59B4248C9B1ACA5155D0FF6635A29564B4391B7FAC6261F93FE99 ] VaultSvc        C:\Windows\system32\lsass.exe
23:18:04.0951 0x0ab0  VaultSvc - ok
23:18:04.0951 0x0ab0  [ C5C876CCFC083FF3B128F933823E87BD, 6FE0FBB6C3207E09300E0789E2168F76668D87C317FE9F263E733827ADCFBE0D ] vdrvroot        C:\Windows\system32\drivers\vdrvroot.sys
23:18:04.0971 0x0ab0  vdrvroot - ok
23:18:05.0041 0x0ab0  [ 8D6B481601D01A456E75C3210F1830BE, A2CEF483F4231367138EEF7E67FD5BE5364FC0780C44CA1368E36CE4AA3D0633 ] vds             C:\Windows\System32\vds.exe
23:18:05.0111 0x0ab0  vds - ok
23:18:05.0121 0x0ab0  [ DA4DA3F5E02943C2DC8C6ED875DE68DD, EDE604536DB78C512D68C92B26DA77C8811AC109D1F0A473673F0A82D15A2838 ] vga             C:\Windows\system32\DRIVERS\vgapnp.sys
23:18:05.0141 0x0ab0  vga - ok
23:18:05.0141 0x0ab0  [ 53E92A310193CB3C03BEA963DE7D9CFC, 45898604375B42EB1246C17A22D91C2440F11C746FF6459AD38027C1BC2E3125 ] VgaSave         C:\Windows\System32\drivers\vga.sys
23:18:05.0181 0x0ab0  VgaSave - ok
23:18:05.0231 0x0ab0  [ 2CE2DF28C83AEAF30084E1B1EB253CBB, D1946816A1CB89F825CBEA58F94A4C9D0CE7249355CD3915563F54054EE564BF ] vhdmp           C:\Windows\system32\drivers\vhdmp.sys
23:18:05.0271 0x0ab0  vhdmp - ok
23:18:05.0321 0x0ab0  [ E5689D93FFE4E5D66C0178761240DD54, 6D35CED80681B12AAF63BFA0DA1C386E71D3838839B68A686990AA8031949D27 ] viaide          C:\Windows\system32\drivers\viaide.sys
23:18:05.0341 0x0ab0  viaide - ok
23:18:05.0351 0x0ab0  [ D2AAFD421940F640B407AEFAAEBD91B0, 31EF342A60AF04F4108759A71F8FB7B8C8819216CF3D16A95B2BA0E33A8A9161 ] volmgr          C:\Windows\system32\drivers\volmgr.sys
23:18:05.0391 0x0ab0  volmgr - ok
23:18:05.0451 0x0ab0  [ A255814907C89BE58B79EF2F189B843B, 463DB771851352185B6AC323BD93B9084D47291E53C1F7B628B65D6918B2E28F ] volmgrx         C:\Windows\system32\drivers\volmgrx.sys
23:18:05.0511 0x0ab0  volmgrx - ok
23:18:05.0531 0x0ab0  [ 0D08D2F3B3FF84E433346669B5E0F639, 3D6716CEC95B8861A7CC5778E91F310528DC6BEE0E57A3C8757FC675154EBDEC ] volsnap         C:\Windows\system32\drivers\volsnap.sys
23:18:05.0551 0x0ab0  volsnap - ok
23:18:05.0581 0x0ab0  [ 5E2016EA6EBACA03C04FEAC5F330D997, 53106EB877459FE55A459111F7AB0EE320BB3B4C954D3DB6FA1642396001F2AC ] vsmraid         C:\Windows\system32\DRIVERS\vsmraid.sys
23:18:05.0601 0x0ab0  vsmraid - ok
23:18:05.0701 0x0ab0  [ B60BA0BC31B0CB414593E169F6F21CC2, 47B801E623254CF0202B3591CB5C019CABFB52F123C7D47E29D19B32F1F2B915 ] VSS             C:\Windows\system32\vssvc.exe
23:18:05.0852 0x0ab0  VSS - ok
23:18:05.0892 0x0ab0  [ 36D4720B72B5C5D9CB2B9C29E9DF67A1, 3254523C85C70EBA2DBAC05DB2DBA89EDF8E9195F390F7C21F96458FB6B2E3D7 ] vwifibus        C:\Windows\system32\DRIVERS\vwifibus.sys
23:18:05.0942 0x0ab0  vwifibus - ok
23:18:05.0962 0x0ab0  [ 6A3D66263414FF0D6FA754C646612F3F, 30F6BA594B0D3B94113064015A16D97811CD989DF1715CCE21CEAB9894C1B4FB ] vwififlt        C:\Windows\system32\DRIVERS\vwififlt.sys
23:18:05.0982 0x0ab0  vwififlt - ok
23:18:06.0002 0x0ab0  [ 6A638FC4BFDDC4D9B186C28C91BD1A01, 5521F1DC515586777EC4837E0AEAA3E613CC178AF1074031C4D0D0C695A93168 ] vwifimp         C:\Windows\system32\DRIVERS\vwifimp.sys
23:18:06.0022 0x0ab0  vwifimp - ok
23:18:06.0062 0x0ab0  [ 1C9D80CC3849B3788048078C26486E1A, 34A89F31E53F6B6C209B286F580CC2257AE6D057E4E20741F241C9C167947962 ] W32Time         C:\Windows\system32\w32time.dll
23:18:06.0142 0x0ab0  W32Time - ok
23:18:06.0142 0x0ab0  [ 4E9440F4F152A7B944CB1663D3935A3E, 8FE04EBD3BC612EE943A21A3E56F37E5C9B578CDACA6044048181DAD81816D53 ] WacomPen        C:\Windows\system32\DRIVERS\wacompen.sys
23:18:06.0172 0x0ab0  WacomPen - ok
23:18:06.0192 0x0ab0  [ 356AFD78A6ED4457169241AC3965230C, CE4D1EE3525C10AC658B20776C3E444DE44874C837713DC5311386EDFCB18399 ] WANARP          C:\Windows\system32\DRIVERS\wanarp.sys
23:18:06.0272 0x0ab0  WANARP - ok
23:18:06.0282 0x0ab0  [ 356AFD78A6ED4457169241AC3965230C, CE4D1EE3525C10AC658B20776C3E444DE44874C837713DC5311386EDFCB18399 ] Wanarpv6        C:\Windows\system32\DRIVERS\wanarp.sys
23:18:06.0312 0x0ab0  Wanarpv6 - ok
23:18:06.0442 0x0ab0  [ 3CEC96DE223E49EAAE3651FCF8FAEA6C, 4150DAB33E8D61076F1D4767BCAFC9B4ECCCCBD58FD4FB3CFE5B8D27DCDCAB61 ] WatAdminSvc     C:\Windows\system32\Wat\WatAdminSvc.exe
23:18:06.0522 0x0ab0  WatAdminSvc - ok
23:18:06.0632 0x0ab0  [ 78F4E7F5C56CB9716238EB57DA4B6A75, 46A4E78CE5F2A4B26F4E9C3FF04A99D9B727A82AC2E390A82A1611C3F6E0C9AF ] wbengine        C:\Windows\system32\wbengine.exe
23:18:06.0792 0x0ab0  wbengine - ok
23:18:06.0812 0x0ab0  [ 3AA101E8EDAB2DB4131333F4325C76A3, 4F7BD3DA5E58B18BFF106CFF7B45E75FD13EE556D433C695BA23EC80827E49DE ] WbioSrvc        C:\Windows\System32\wbiosrvc.dll
23:18:06.0842 0x0ab0  WbioSrvc - ok
23:18:06.0892 0x0ab0  [ 7368A2AFD46E5A4481D1DE9D14848EDD, 8039C478FC2D9F095F5883A4FA47F9E6EDF57CC88A4AA74F07C88445F90DED57 ] wcncsvc         C:\Windows\System32\wcncsvc.dll
23:18:06.0952 0x0ab0  wcncsvc - ok
23:18:06.0972 0x0ab0  [ 20F7441334B18CEE52027661DF4A6129, 7B8E0247234B740FED2BE9B833E9CE8DD7453340123AB43F6B495A7E6A27B0DD ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
23:18:07.0002 0x0ab0  WcsPlugInService - ok
23:18:07.0012 0x0ab0  [ 72889E16FF12BA0F235467D6091B17DC, F2FD0BBD075E33608D93F350D216F97442AB89ABD540513C2D568C78096E12A8 ] Wd              C:\Windows\system32\DRIVERS\wd.sys
23:18:07.0032 0x0ab0  Wd - ok
23:18:07.0102 0x0ab0  [ E2C933EDBC389386EBE6D2BA953F43D8, AF1DEADD5F1267CCEBD226E8EEB971D1946EA6A5A9645A36F5D111F758AF2F07 ] Wdf01000        C:\Windows\system32\drivers\Wdf01000.sys
23:18:07.0172 0x0ab0  Wdf01000 - ok
23:18:07.0192 0x0ab0  [ BF1FC3F79B863C914687A737C2F3D681, B2DF47AC4931ACFB243775767B77065CC0D98778FC0243C793A3E219EB961209 ] WdiServiceHost  C:\Windows\system32\wdi.dll
23:18:07.0292 0x0ab0  WdiServiceHost - ok
23:18:07.0302 0x0ab0  [ BF1FC3F79B863C914687A737C2F3D681, B2DF47AC4931ACFB243775767B77065CC0D98778FC0243C793A3E219EB961209 ] WdiSystemHost   C:\Windows\system32\wdi.dll
23:18:07.0322 0x0ab0  WdiSystemHost - ok
23:18:07.0372 0x0ab0  [ 0EB0E5D22B1760F2DBCE632F2DD7A54D, B8A4CC62F88768947FB0A161CF9564DB28FD9C1C037B5475DF192982DE035C22 ] WebClient       C:\Windows\System32\webclnt.dll
23:18:07.0432 0x0ab0  WebClient - ok
23:18:07.0452 0x0ab0  [ C749025A679C5103E575E3B48E092C43, B71171D07EE7AB085A24BF3A1072FF2CE7EA021AAE695F6A90640E6EE8EB55C1 ] Wecsvc          C:\Windows\system32\wecsvc.dll
23:18:07.0512 0x0ab0  Wecsvc - ok
23:18:07.0532 0x0ab0  [ 7E591867422DC788B9E5BD337A669A08, 484E6BCCDF7ADCE9A1AACAD1BC7C7D7694B9E40FA90D94B14D80C607784F6C75 ] wercplsupport   C:\Windows\System32\wercplsupport.dll
23:18:07.0592 0x0ab0  wercplsupport - ok
23:18:07.0622 0x0ab0  [ 6D137963730144698CBD10F202E9F251, A9F522A125158D94F540544CCD4DBF47B9DCE2EA878C33675AFE40F80E8F4979 ] WerSvc          C:\Windows\System32\WerSvc.dll
23:18:07.0702 0x0ab0  WerSvc - ok
23:18:07.0732 0x0ab0  [ 611B23304BF067451A9FDEE01FBDD725, 0AF2734B978165FC6FD22B64862132CCE32528A21C698A49D176129446E099C8 ] WfpLwf          C:\Windows\system32\DRIVERS\wfplwf.sys
23:18:07.0762 0x0ab0  WfpLwf - ok
23:18:07.0782 0x0ab0  [ B14EF15BD757FA488F9C970EEE9C0D35, F27DF2D47E7076786AE7C396583D7A1C56B93E766711066C900964FC7313E794 ] WimFltr         C:\Windows\system32\DRIVERS\wimfltr.sys
23:18:07.0802 0x0ab0  WimFltr - ok
23:18:07.0812 0x0ab0  [ 05ECAEC3E4529A7153B3136CEB49F0EC, 9995CB2CEC70A633EA33CBB0DEAD2BB28CB67132B41E9444BDAB9E75744C9A50 ] WIMMount        C:\Windows\system32\drivers\wimmount.sys
23:18:07.0822 0x0ab0  WIMMount - ok
23:18:07.0862 0x0ab0  WinDefend - ok
23:18:07.0882 0x0ab0  WinHttpAutoProxySvc - ok
23:18:07.0972 0x0ab0  [ 19B07E7E8915D701225DA41CB3877306, D6555E8D276DBB11358246E0FE215F76F1FB358791C76B88D82C2A66A42DA19F ] Winmgmt         C:\Windows\system32\wbem\WMIsvc.dll
23:18:08.0072 0x0ab0  Winmgmt - ok
23:18:08.0172 0x0ab0  [ BCB1310604AA415C4508708975B3931E, 9D943F086D454345153A0DD426B4432532A44FD87950386B186E1CAD2AC70565 ] WinRM           C:\Windows\system32\WsmSvc.dll
23:18:08.0352 0x0ab0  WinRM - ok
23:18:08.0422 0x0ab0  [ FE88B288356E7B47B74B13372ADD906D, A16B166F6BB32EF9D2A142F27B9EC54CBC7B3AC915799783CF4C40E525BC9E03 ] WinUsb          C:\Windows\system32\DRIVERS\WinUsb.sys
23:18:08.0482 0x0ab0  WinUsb - ok
23:18:08.0562 0x0ab0  [ 4FADA86E62F18A1B2F42BA18AE24E6AA, CE1683386886BF34862681A46199EA7E7FB4232A186047DA7FBD8EC240AF6726 ] Wlansvc         C:\Windows\System32\wlansvc.dll
23:18:08.0642 0x0ab0  Wlansvc - ok
23:18:08.0672 0x0ab0  [ 06C8FA1CF39DE6A735B54D906BA791C6, D8FEC7DE227781CDA876904701B2AA995268F74DCD6CB34AA0296C557FC283B6 ] wlcrasvc        C:\Program Files\Windows Live\Mesh\wlcrasvc.exe
23:18:08.0692 0x0ab0  wlcrasvc - ok
23:18:08.0873 0x0ab0  [ 2BACD71123F42CEA603F4E205E1AE337, 1FEF20554110371D738F462ECFFA999158EFEED02062414C58C1B61C422BF0B9 ] wlidsvc         C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
23:18:09.0013 0x0ab0  wlidsvc - ok
23:18:09.0043 0x0ab0  [ 13B0A570E1AE451C92DA550085D72CF3, 4C67F000EE65B3B1DF17D228C93E9F2D3E13EAB2FD125806A16F70FF365097AC ] wltrysvc        C:\Program Files\Dell\Dell Wireless WLAN Card\WLTRYSVC.EXE
23:18:09.0063 0x0ab0  wltrysvc - detected UnsignedFile.Multi.Generic ( 1 )
23:18:19.0144 0x0ab0  wltrysvc ( UnsignedFile.Multi.Generic ) - warning
23:18:19.0144 0x0ab0  Force sending object to P2P due to detect: wltrysvc
23:18:23.0935 0x0ab0  Object send P2P result: true
23:18:26.0725 0x0ab0  [ F6FF8944478594D0E414D3F048F0D778, 6F75E0AE6127B33A92A88E59D4B048FD4C15F997807BE7BF0EFE76F95235B1D9 ] WmiAcpi         C:\Windows\system32\drivers\wmiacpi.sys
23:18:26.0765 0x0ab0  WmiAcpi - ok
23:18:26.0815 0x0ab0  [ 38B84C94C5A8AF291ADFEA478AE54F93, 1AC267AC73670BEA5F3785C9AD9DB146F8E993A862C843742B21FDB90D102B2A ] wmiApSrv        C:\Windows\system32\wbem\WmiApSrv.exe
23:18:26.0895 0x0ab0  wmiApSrv - ok
23:18:26.0955 0x0ab0  WMPNetworkSvc - ok
23:18:26.0975 0x0ab0  [ 96C6E7100D724C69FCF9E7BF590D1DCA, 2E63C9B0893B4FC03B7A71BAEA6202D3D3DB1B52F3643467829B5A573FD7655B ] WPCSvc          C:\Windows\System32\wpcsvc.dll
23:18:27.0015 0x0ab0  WPCSvc - ok
23:18:27.0065 0x0ab0  [ 93221146D4EBBF314C29B23CD6CC391D, C0750858A65BF51E210CD244C825C121D67E025CD2D2455139991AAC289A90FE ] WPDBusEnum      C:\Windows\system32\wpdbusenum.dll
23:18:27.0105 0x0ab0  WPDBusEnum - ok
23:18:27.0145 0x0ab0  [ 6BCC1D7D2FD2453957C5479A32364E52, E48554D31FBDCF8F985C1C72524CAA9106F5B7CC2B79064F8F5E2562D517F090 ] ws2ifsl         C:\Windows\system32\drivers\ws2ifsl.sys
23:18:27.0215 0x0ab0  ws2ifsl - ok
23:18:27.0235 0x0ab0  [ E8B1FE6669397D1772D8196DF0E57A9E, 39FE0819360719F756BD31A1884A0508A1E2371ACC723E25E005CBEC0A7B02FA ] wscsvc          C:\Windows\system32\wscsvc.dll
23:18:27.0295 0x0ab0  wscsvc - ok
23:18:27.0335 0x0ab0  [ 8D918B1DB190A4D9B1753A66FA8C96E8, DB7D2714DC04D2D6999A207D7399A5647C8653E5A1AD80856A65C5B6065AEDFE ] WSDPrintDevice  C:\Windows\system32\DRIVERS\WSDPrint.sys
23:18:27.0395 0x0ab0  WSDPrintDevice - ok
23:18:27.0435 0x0ab0  [ 4A2A5C50DD1A63577D3ACA94269FBC7F, F75C1906D431CF871AD954218DF32A0F206E45FF49332DEF9F13C0A36A407047 ] WSDScan         C:\Windows\system32\DRIVERS\WSDScan.sys
23:18:27.0475 0x0ab0  WSDScan - ok
23:18:27.0485 0x0ab0  WSearch - ok
23:18:27.0615 0x0ab0  [ 61FF576450CCC80564B850BC3FB6713A, B2843BC9E2F62D27DCF6787D063378926748CE75002BADA1873DCB5039883705 ] wuauserv        C:\Windows\system32\wuaueng.dll
23:18:27.0735 0x0ab0  wuauserv - ok
23:18:27.0765 0x0ab0  [ AB886378EEB55C6C75B4F2D14B6C869F, D6C4602EB8F291DADEDF3CD211013D4AC752DDE7E799C2D8D74AA4F5477CAED6 ] WudfPf          C:\Windows\system32\drivers\WudfPf.sys
23:18:27.0816 0x0ab0  WudfPf - ok
23:18:27.0846 0x0ab0  [ DDA4CAF29D8C0A297F886BFE561E6659, 94E5DD649B5D86FA1A7C7D30FCF9644D0EE048D312E626111458ADF66BFBE978 ] WUDFRd          C:\Windows\system32\DRIVERS\WUDFRd.sys
23:18:27.0906 0x0ab0  WUDFRd - ok
23:18:27.0936 0x0ab0  [ B20F051B03A966392364C83F009F7D17, 88ECEB55AE91F58F592B96EBC10B572747D5A2F9B7629E8F371761E4F7408A65 ] wudfsvc         C:\Windows\System32\WUDFSvc.dll
23:18:27.0996 0x0ab0  wudfsvc - ok
23:18:28.0046 0x0ab0  [ 04F82965C09CBDF646B487E145060301, 2CD8533EDBE24C3E42EB7550E20F8A2EB9E5E345B165DEF543163A6BC1FDD18B ] WwanSvc         C:\Windows\System32\wwansvc.dll
23:18:28.0136 0x0ab0  WwanSvc - ok
23:18:28.0156 0x0ab0  ================ Scan global ===============================
23:18:28.0166 0x0ab0  [ BA0CD8C393E8C9F83354106093832C7B, 18D8A4780A2BAA6CEF7FBBBDA0EF6BF2DADF146E1E578A618DD5859E8ADBF1A8 ] C:\Windows\system32\basesrv.dll
23:18:28.0216 0x0ab0  [ 88EDD0B34EED542745931E581AD21A32, DC2B93E1CEF5B0BCEE08D72669BB0F3AD0E8E6E75BDC08858407ED92F6FFA031 ] C:\Windows\system32\winsrv.dll
23:18:28.0276 0x0ab0  [ 88EDD0B34EED542745931E581AD21A32, DC2B93E1CEF5B0BCEE08D72669BB0F3AD0E8E6E75BDC08858407ED92F6FFA031 ] C:\Windows\system32\winsrv.dll
23:18:28.0316 0x0ab0  [ D6160F9D869BA3AF0B787F971DB56368, 0033E6212DD8683E4EE611B290931FDB227B4795F0B17C309DC686C696790529 ] C:\Windows\system32\sxssrv.dll
23:18:28.0376 0x0ab0  [ 24ACB7E5BE595468E3B9AA488B9B4FCB, 63541E3432FCE953F266AE553E7A394978D6EE3DB52388D885F668CF42C5E7E2 ] C:\Windows\system32\services.exe
23:18:28.0396 0x0ab0  [ Global ] - ok
23:18:28.0396 0x0ab0  ================ Scan MBR ==================================
23:18:28.0406 0x0ab0  [ 5C616939100B85E558DA92B899A0FC36 ] \Device\Harddisk0\DR0
23:18:28.0836 0x0ab0  \Device\Harddisk0\DR0 - ok
23:18:28.0836 0x0ab0  ================ Scan VBR ==================================
23:18:28.0836 0x0ab0  [ 99F9837437D34B6B5D1B4F0F9FFADFC4 ] \Device\Harddisk0\DR0\Partition1
23:18:28.0846 0x0ab0  \Device\Harddisk0\DR0\Partition1 - ok
23:18:28.0846 0x0ab0  [ 03ED0FE4860F185857E58AA50E90C3AE ] \Device\Harddisk0\DR0\Partition2
23:18:28.0886 0x0ab0  \Device\Harddisk0\DR0\Partition2 - ok
23:18:28.0896 0x0ab0  ================ Scan generic autorun ======================
23:18:28.0896 0x0ab0  SynTPEnh - ok
23:18:28.0956 0x0ab0  [ 023C55185495F1066F4C7F893658C4ED, 12DB663D56DEE1F54029F02BA68DE52BB6A18E5022DC4AA4435D773125D09A22 ] C:\Program Files\IDT\WDM\sttray64.exe
23:18:29.0006 0x0ab0  SysTrayApp - ok
23:18:29.0186 0x0ab0  [ 1F83CB91A9830038DBE7CD1BA1921205, 8F03FE85B864DF531768B877E90250420B4687B76CEB955E641FD39BE39DF820 ] C:\Program Files\Dell\Dell Wireless WLAN Card\WLTRAY.exe
23:18:29.0476 0x0ab0  Broadcom Wireless Manager UI - detected UnsignedFile.Multi.Generic ( 1 )
23:18:32.0236 0x0ab0  Detect skipped due to KSN trusted
23:18:32.0236 0x0ab0  Broadcom Wireless Manager UI - ok
23:18:32.0336 0x0ab0  [ 77AC8322178FB8F3117CDD3B6DC6E126, 2786198EE920D7788FA0DE376231D4E42AB68F6D5A1E87FAC1F3D7424D1ED493 ] c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
23:18:32.0386 0x0ab0  StartCCC - detected UnsignedFile.Multi.Generic ( 1 )
23:18:35.0167 0x0ab0  Detect skipped due to KSN trusted
23:18:35.0167 0x0ab0  StartCCC - ok
23:18:35.0297 0x0ab0  [ 616954748C2F28D653C7BAE814CA51FD, D75E46D978E42C2E7041206B18591EDAF700AD27077AE4D1D76E2857A4A77BF8 ] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
23:18:35.0327 0x0ab0  avgnt - ok
23:18:35.0357 0x0ab0  [ 078AF987457CDBADE4AC679AD3EAFBAA, 4EACF337FDB6111803A503BBD764C8F26E488EF52D9F54D9B28A2012C2812CF6 ] C:\Program Files (x86)\Sensible Vision\Fast Access\FATrayMon.exe
23:18:35.0377 0x0ab0  FATrayAlert - detected UnsignedFile.Multi.Generic ( 1 )
23:18:38.0157 0x0ab0  Detect skipped due to KSN trusted
23:18:38.0157 0x0ab0  FATrayAlert - ok
23:18:38.0267 0x0ab0  [ 09E60B4FE341A94A300830C008907099, 5F07868953FAA8FFA9E6477F6BAC52DEEDF3EA4A3F8AF5B4E15878D8240223AB ] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
23:18:38.0307 0x0ab0  APSDaemon - ok
23:18:38.0387 0x0ab0  [ 47EA5F76FAB723C61AB4A0D79BAD512C, A7A38EB0A7068B160E6949945EF639F999A06AE35746F6E79C7350745798E5C9 ] C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
23:18:38.0457 0x0ab0  Adobe ARM - ok
23:18:38.0507 0x0ab0  [ 0EF0822810009D58118CCDFD098FA9F4, 9FAA263057898BCDBCB0A064C463F48D149474AA339A3C4C47626CC118750D2D ] C:\Program Files (x86)\iTunes\iTunesHelper.exe
23:18:38.0547 0x0ab0  iTunesHelper - ok
23:18:38.0607 0x0ab0  [ 271B0D188430670509CB9943D5229205, 74CB5A9D8B5988AE08C0F65C601FC54F8745BAB6825B6FEEFBA8F068D656D8D7 ] C:\Program Files (x86)\QuickTime\QTTask.exe
23:18:38.0667 0x0ab0  QuickTime Task - detected UnsignedFile.Multi.Generic ( 1 )
23:18:41.0438 0x0ab0  Detect skipped due to KSN trusted
23:18:41.0438 0x0ab0  QuickTime Task - ok
23:18:41.0558 0x0ab0  [ 6CE36EE8D47C825A8D0C56C846CF636F, 62611B4D1CB67E93BFEFCCE605D33A72C3AF2C362B904B571A9E671A178F73E1 ] C:\Program Files (x86)\Dell DataSafe Local Backup\Components\Scheduler\Launcher.exe
23:18:41.0628 0x0ab0  Launcher - detected UnsignedFile.Multi.Generic ( 1 )
23:18:44.0388 0x0ab0  Detect skipped due to KSN trusted
23:18:44.0388 0x0ab0  Launcher - ok
23:18:44.0468 0x0ab0  [ B99C05C2C0AA671642962CBCCE138660, 3F17B69E226E15E216CCA07A5602529643B315C02C5CAB4C597DA948F105465E ] C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\hstart.exe
23:18:44.0518 0x0ab0  DSUpdateLauncher - ok
23:18:44.0568 0x0ab0  gagbcamc.exe - ok
23:18:44.0568 0x0ab0  Waiting for KSN requests completion. In queue: 1
23:18:45.0568 0x0ab0  Waiting for KSN requests completion. In queue: 1
23:18:46.0569 0x0ab0  Waiting for KSN requests completion. In queue: 1
23:18:47.0749 0x0ab0  AV detected via SS2: Avira Desktop, C:\Program Files (x86)\Avira\AntiVir Desktop\wsctool.exe ( 14.0.7.310 ), 0x41000 ( enabled : updated )
23:18:47.0779 0x0ab0  Win FW state via NFP2: enabled
23:18:50.0479 0x0ab0  ============================================================
23:18:50.0479 0x0ab0  Scan finished
23:18:50.0479 0x0ab0  ============================================================
23:18:50.0489 0x084c  Detected object count: 1
23:18:50.0489 0x084c  Actual detected object count: 1
23:20:02.0071 0x084c  wltrysvc ( UnsignedFile.Multi.Generic ) - skipped by user
23:20:02.0071 0x084c  wltrysvc ( UnsignedFile.Multi.Generic ) - User select action: Skip

Alt 28.11.2014, 23:33   #8
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Windows 7 mit verschiedenen Trojanerdateien - Standard

Windows 7 mit verschiedenen Trojanerdateien


Sollte so passen

Adware/Junkware/Toolbars entfernen

(alte Versionen von adwCleaner und falls vorhanden JRT vorher löschen, danach neu runterladen auf den Desktop!)

1. Schritt: adwCleaner

Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).




2. Schritt: JRT - Junkware Removal Tool

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.




3. Schritt: Frisches Log mit FRST

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

__________________
Logfiles bitte immer in CODE-Tags posten

Alt 29.11.2014, 00:05   #9
Iron111
 
Windows 7 mit verschiedenen Trojanerdateien - Standard

Windows 7 mit verschiedenen Trojanerdateien


hoffentlich hab ich alles auf der Reihe

Code:
ATTFilter
# AdwCleaner v4.102 - Bericht erstellt am 28/11/2014 um 23:44:35
# Aktualisiert 23/11/2014 von Xplode
# Database : 2014-11-27.1 [Live]
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : 3vento - 3VENTO-PC
# Gestartet von : C:\Users\3vento\Desktop\AdwCleaner_4.102.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\ProgramData\Ask
Ordner Gelöscht : C:\Users\3vento\AppData\Local\PackageAware
Datei Gelöscht : C:\Users\Public\Desktop\eBay.lnk
Datei Gelöscht : C:\Users\3vento\AppData\Roaming\Mozilla\Firefox\Profiles\whssljy2.default\searchplugins\Askcom.xml

***** [ Tasks ] *****


***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{065C1A21-97F8-45FB-A9F0-861B60FACEC8}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{3204358F-5904-46A6-841F-D6B5BE3EF4E3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{3AE67737-0E3E-44AA-AA5E-46A68BF017FF}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{3EE5B726-044A-48D2-AA7B-049BD9A0F62A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{60FBBE03-57FF-49D8-B38E-053D3F489825}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{6A5182F1-C0B8-42B8-96CC-7F329CD46913}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{6C153418-8E4D-4FAF-AF27-5201E38463A7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{A26A2F05-AC4D-4A1E-9531-9125F7309B78}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{CC5D6240-7DF0-435D-9B9B-F8586A99DE86}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{F343045E-E20A-46E1-82D8-9962C43EFC9E}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{FBB360DC-CB6C-4D6A-808A-2C773151BFFF}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{FFD7DDAC-EC28-42A5-8D39-917B9078604B}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{A4BCF77B-DB4C-4A3B-B551-81D7215C131F}
Schlüssel Gelöscht : HKCU\Software\Softonic

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.17420


-\\ Mozilla Firefox v33.1 (x86 de)

[whssljy2.default\prefs.js] - Zeile gelöscht : user_pref("browser.search.order.1", "Ask.com");

-\\ Google Chrome v39.0.2171.71

[C:\Users\3vento\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://websearch.ask.com/redirect?client=cr&src=kw&tb=ORJ&o=&locale=&apn_uid=44FA8856-EC61-4065-89B4-EE5E0A3B4DA9&apn_ptnrs=U3&apn_sauid=9B18FB75-450F-4D68-B010-F9438B30CAEF&apn_dtid=OSJ000YYDE&q={searchTerms}
[C:\Users\3vento\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://websearch.ask.com/redirect?client=cr&src=kw&tb=ORJ&o=&locale=&apn_uid=44FA8856-EC61-4065-89B4-EE5E0A3B4DA9&apn_ptnrs=U3&apn_sauid=9B18FB75-450F-4D68-B010-F9438B30CAEF&apn_dtid=OSJ000YYDE&q={searchTerms}

*************************

AdwCleaner[R0].txt - [3300 octets] - [28/11/2014 23:41:50]
AdwCleaner[S0].txt - [3057 octets] - [28/11/2014 23:44:35]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [3117 octets] ##########
Code:
ATTFilter
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.3.9 (11.15.2014:2)
OS: Windows 7 Home Premium x64
Ran by 3vento on 28.11.2014 at 23:51:05,45
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\pcdr"
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{004D179C-4D09-4358-B1FA-5D7A75E11B6E}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{02F8E88B-94C9-41F9-B98C-6DD7C2F0F929}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{043D3220-7789-475B-948A-23AAAE40230E}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{0DC12E41-BE1F-4A3F-9D78-A9BDB115DD44}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{117EA9E8-9852-4E92-80E8-F049266FD5B8}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{11B59F21-8527-48D5-BB42-7CF55D69044C}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{13951CE5-A5FE-452A-BCC6-BEAFA0319D80}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{145742FB-4ACB-4FDD-A4FE-DBD2CB6C0DD7}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{148AE50B-B919-4712-A3D5-0855E063471D}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{17C73E4E-8910-4F4A-9B79-60E04129DB54}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{1935666C-35E7-4098-9649-C2C9067322F4}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{19389280-5581-4C95-8160-53B41C039252}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{1BD93EA3-2A17-44B6-B069-B189B928E0A3}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{1E1BC767-97DF-4C84-B4E9-B51337EAF42A}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{1ED05105-BB57-4F90-A312-342EFA640DA0}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{21D4670E-122F-4E53-8C9F-9950778AE59C}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{26919213-A4DA-4970-B832-853579B966D5}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{26A202BC-2DE9-4C1A-AE23-076A65C2B452}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{26F08679-BFE0-41D6-9C0B-2B29574A2460}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{27AEA925-A645-4769-8789-C1012DEFE63F}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{2C198B8F-F4A2-4472-964B-7798B4A07C04}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{2C43E386-22F9-46BE-BB5A-467A6CB87121}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{2D09D357-34F8-4EB3-8949-2CD959C0DAEF}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{2F0DD24B-CD85-40AB-8898-95A430AADD1F}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{30BA08DF-A5BC-439C-9B46-C06BE3D1F316}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{3360F233-9CD4-4890-8268-2C08A4CEB3FA}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{3495F87E-2BA1-42A7-8D49-CE1748871895}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{357E9270-DF34-4F74-8FE6-49C8D8C551D7}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{381E97AF-A33F-4258-9F58-CFC480C06DB8}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{38844D14-6E85-4BF5-8B34-E65D917718CD}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{389D6C9A-1837-41F1-A0E6-6645F24080FB}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{3A1FD6B5-AC66-45C3-A9E5-890CDCFB617B}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{3C6A0C91-CD41-43FA-8E0F-AADC2DA54173}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{3D8FC920-27B6-4EE0-A41E-701E0C59BA52}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{3E279E1F-C7C2-40AE-AC00-B38687E18E6F}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{40AE7D77-2EB1-42E5-898C-EECBB916B4F7}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{43FE81F5-4EE0-490E-B511-C25C1E0C43E5}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{4AB8AFE5-C9A3-46C8-9CA7-C5E88F88C7F7}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{501320BB-5460-4C2E-A0C8-DC7697E87769}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{5142F5DF-C57E-4E3A-8F34-595445E04C4D}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{5323A0A0-3898-4558-B717-A530C9D0279F}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{54874D14-7576-4AEC-8B9A-8FE5DB335C74}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{548E5731-2D4C-496E-97CB-47FCDA4B6610}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{56AC30DF-FAB2-4219-ABC0-321795F5FB00}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{56C141AC-78CB-46FD-A927-B27126FA702D}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{5A57B85F-C11F-4497-815E-C41FBCD91CE3}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{5A766EFC-C263-4A21-A69E-9E2D0861818C}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{5AA0751A-35C2-4C81-85AA-C1D1A73997D4}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{5AF64F0E-DC30-4984-A76D-F38064C4E46B}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{5CE54526-FE3F-422C-AFF5-3F424AA955EC}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{5D18F945-FDF4-4F59-BC6C-8BC27A1526F3}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{6173F64E-D378-442F-88CC-E7B18BE2C10C}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{61D6519F-822C-499C-9BDE-9211E066B037}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{6449703B-D50B-417A-A077-0BB9864A979F}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{644A8EF8-0084-4DC7-AEB0-CBB8AE82AC5C}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{654250C1-A496-43FC-9482-767712A6E348}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{65DB6F5C-4DF3-4A35-BE02-AC628EE03FB6}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{6B59BC34-3F47-4707-924D-C987D436CB0C}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{6C6F3D46-53E2-4C44-B423-206A38216D98}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{6CF275C2-B614-427F-BA77-C823E024DE79}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{6E84D624-74E7-4C45-A2B9-61E3F66257B8}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{70068A63-8EDF-40AF-9A2E-CAC4759A74F6}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{72700378-E298-419B-8BB6-626FD636EEDA}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{76D18021-25B4-431C-AE0A-A299A84D4347}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{773211B5-2C4C-402F-A719-2E197578BF09}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{7889CDA4-C29A-467E-BE47-E8911344A912}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{79540BBA-58BE-48E8-9C79-1A71BF9F7F97}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{79D8C36D-72DF-4A07-A8F1-4A2DE652C172}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{7AB6D759-D3AB-48F6-9BFE-879263A41243}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{86B2FF34-22B4-4D4F-8323-778E2D86A97C}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{8722AB9A-2D55-401D-9219-F6242C0FEDD0}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{8794ABDC-F6E1-4C15-99FB-1378132EF0FC}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{87A14F95-6DC4-4622-A9C4-F74B30F27D0B}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{8986873F-1DB7-4C0A-9F4A-6035E858318B}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{8B118C1F-D8F5-42FD-AC3D-38CC34F27B39}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{8BAEA763-54BE-4761-AB68-479B3FEB75E0}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{8C29BA77-7A2B-4E66-A954-FD01E97A1997}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{927F223E-1CEA-4298-AB64-856277240D01}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{92AD4228-52CE-4447-9F7B-E1B1F9F149D1}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{92D5BB28-F7AC-469E-9B0F-58DB63BFF3C8}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{95500B1E-9288-4706-9077-C1E54EA6520C}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{95563B38-DCA9-4C7A-8CD7-F5C0BE58D9D2}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{97DF5130-F0F4-4086-92FA-C399A9CAD6A8}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{986C31F1-D024-4A6A-A92A-59229DFC8DAF}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{99C7ACA6-4B31-4B69-87B0-CB05FD9BDBA4}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{9B331423-1482-4807-8675-1E819326F0EE}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{9F036D80-6BA7-4630-AEF4-2F99F86D2289}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{9F49D8AC-C2E1-410A-BA4A-CB448CB77B48}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{A2CA8AEA-8137-4C8E-8468-14ACBD125EB3}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{A59D89DB-E588-457E-81FF-0843BD27D555}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{A6EF6909-B751-4104-BE2D-E5B57C2D33DF}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{A6FA1C3D-6797-4C53-AF7F-0AAB384FAE41}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{A70537D3-8BB7-4110-A8D4-6B37A0809389}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{A9DF8113-5503-4BA6-A0A3-50407367CDFF}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{AA7255F0-F5E8-4274-9DE0-52ACF4565545}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{AC53A37F-D2E4-4063-B593-6DA42561219F}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{AD6F875C-C08B-4D22-978A-D27E986E7B17}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{AE1EDB90-7AD6-42B9-ADFA-872E08FF11F9}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{AE21F68D-028F-420D-9626-C17F189086A9}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{AE8E1E4B-BEB8-4E5B-A839-DE6DE82574B0}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{AEA759FD-AE91-4760-AC56-B8F4D228845A}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{B00872E2-7C46-464D-BAAC-DF38910BB935}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{B1623EA0-1636-465C-90C6-9BB47339B3C6}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{B350B900-3A87-4BBB-BB3D-DF1713FC769F}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{B45C483C-CBF6-410B-B332-20E6C7ECD4C6}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{B51FC82E-E4C0-43EE-A4AA-2D4FCC4AD465}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{B5BEA666-84AE-4701-9852-352030395AC0}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{B66CC5EE-3734-4826-BD16-377402767893}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{BC01CC48-FCF7-4DF0-86D7-2469829E2881}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{BC1D0E1A-0BAC-4EED-A5B6-141323C0E0DC}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{BC55D6C8-F35B-46D6-B48E-CAACC351CFA0}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{BE6D5501-1250-4C3E-9540-339E9F025F20}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{BE88D31C-0E9C-4F50-92A6-F691E23983E4}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{C05DD2E9-7093-4B79-9D37-C3B94CAF02D4}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{C0F63BC6-DD36-4AFB-9038-B190BA086F3C}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{C1FF1A82-AFD0-4C3B-BF6B-41B7300677E6}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{C3ADE293-8D73-47C9-88D8-77B9D1D2931F}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{C41DA25F-F24A-4D51-BBDA-E2B1EE86D0AD}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{C54CA81C-DD79-4599-A6A6-BA42390F53DC}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{C5793C47-8FAC-40EC-9174-79408FA3452B}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{C672BBB2-BFB2-4564-8B0D-FD496FD6545D}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{C899DF9B-B5ED-4979-A7FC-93F0C66BABAD}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{C8A6A560-E3F2-42CB-BB63-E48ED78ADC8C}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{C8F6AAE0-8C39-478A-876C-A06632C757C8}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{CA4834B1-D025-43E7-B1E4-443CCE07719E}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{CC6F4D52-143F-462B-8F3A-C9232938670B}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{CCD27F56-CCDD-4F8E-8B15-E0900D4B7E64}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{CD548F48-7F1E-48F9-9E94-4666D4658ADA}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{CF0119E4-AB0A-4127-80D6-F856BB4C73C5}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{D0FDBAEB-E2BB-4A27-A46D-85A08682BB62}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{D18C3977-D0A5-4851-8365-7264DDC31FC1}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{D1A1A667-D7D8-493D-AD4C-BE31F3006197}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{D20FF1D2-ECF9-4044-9521-D2B202B6A1BC}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{D244BFF0-29C4-431A-B19F-4D104935ED89}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{D88B98A6-1E1C-418F-AFC3-39031EE93A8C}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{D8C6E5CD-B36B-4A66-B353-3B66B5513923}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{D9D226E5-3F5D-4110-8695-D0FE98183DCB}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{DDB44678-6084-467A-928A-E45EC4704A89}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{DDEC7AE5-CE8A-4177-8FD7-5410A9AB380A}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{DE2E405C-ACBB-4FB5-B85E-C826EF0A24AB}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{DE78619F-582F-43F1-8515-E7143809AC4B}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{E17547E4-3A36-4607-B256-789046F41782}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{E2655CB3-6EDC-4FC5-9B72-7E766140906E}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{E2EEE6E2-40EC-4F19-9297-9CF816BCA153}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{E3DDB1E3-675A-4100-BBDB-4E3D011162A9}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{E73DF1C4-CD9A-4299-A2F8-5A3F7E611F7D}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{EBBA1C08-29FA-4C41-B9A7-97F2C1AABD62}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{ECCAA395-5EE4-45DF-B221-8F9861AD4486}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{F13830A2-909B-40E4-A135-2B11FA3E1CCC}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{F1FFE87A-C582-48BD-BD0A-92D2265FE094}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{F2D1518E-414E-474E-B2ED-F296F5629806}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{F7B6AC2D-C6C4-4D8D-8EF1-B961D6267825}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{FA4425B0-A1C3-4FAA-9A76-414C657E5A9E}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{FC3F24B8-0732-4C91-B5B8-308F6DC0E7B6}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{FE4BE302-5F09-4DA1-BC38-9F916DC5E149}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{FEB4AA91-CE55-4BDE-B811-5093910EA7A3}
Successfully deleted: [Empty Folder] C:\Users\3vento\appdata\local\{FF2A1A76-5EA0-4114-935D-AB344B2B60E3}



~~~ FireFox

Emptied folder: C:\Users\3vento\AppData\Roaming\mozilla\firefox\profiles\whssljy2.default\minidumps [199 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 28.11.2014 at 23:57:10,78
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
FRST Logfile:

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 26-11-2014 01
Ran by 3vento (administrator) on 3VENTO-PC on 29-11-2014 00:01:21
Running from C:\Users\3vento\Desktop
Loaded Profile: 3vento (Available profiles: 3vento)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(Sensible Vision ) C:\Program Files (x86)\Sensible Vision\Fast Access\FAService.exe
(IDT, Inc.) C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_0057cbec48a2d7cf\stacsv64.exe
(Stardock Corporation) C:\Program Files\Dell\DellDock\DockLogin.exe
(AMD) C:\Windows\System32\atieclxx.exe
() C:\Program Files\Dell\Dell Wireless WLAN Card\WLTRYSVC.EXE
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Dell Inc.) C:\Program Files\Dell\Dell Wireless WLAN Card\BCMWLTRY.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Andrea Electronics Corporation) C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_0057cbec48a2d7cf\AESTSr64.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
() C:\Program Files (x86)\Dell DataSafe Local Backup\Components\Scheduler\STService.exe
(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BBSvc.EXE
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(Dell Inc.) C:\Program Files\Dell\Dell Wireless WLAN Card\WLTRAY.EXE
() C:\Program Files (x86)\Polar\WebSync\WebSync.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Stardock Corporation) C:\Program Files\Dell\DellDock\DellDock.exe
(Dropbox, Inc.) C:\Users\3vento\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Sensible Vision ) C:\Program Files (x86)\Sensible Vision\Fast Access\FATrayMon.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Sensible Vision ) C:\Program Files (x86)\Sensible Vision\Fast Access\FATrayAlert.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Dell, Inc.) C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuAgent.exe
() C:\Program Files (x86)\Polar\Daemon\polard.exe
(SoftThinks SAS) C:\Program Files (x86)\Dell DataSafe Local Backup\SftService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avwebgrd.exe
(Microsoft Corporation) C:\Windows\System32\alg.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Thisisu) C:\Users\3vento\Desktop\JRT.exe
(Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe
(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\SeaPort.EXE
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Farbar) C:\Users\3vento\Desktop\FRST64(1).exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2097960 2010-04-22] (Synaptics Incorporated)
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [487424 2010-01-20] (IDT, Inc.)
HKLM\...\Run: [Broadcom Wireless Manager UI] => C:\Program Files\Dell\Dell Wireless WLAN Card\WLTRAY.exe [4968960 2009-07-17] (Dell Inc.)
HKLM-x32\...\Run: [StartCCC] => c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2010-01-22] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [703736 2014-11-18] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [FATrayAlert] => C:\Program Files (x86)\Sensible Vision\Fast Access\FATrayMon.exe [93832 2010-11-02] (Sensible Vision )
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [60712 2014-10-11] (Apple Inc.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-09-12] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [157480 2014-10-15] (Apple Inc.)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.)
HKLM-x32\...\Run: [FAStartup] => [X]
HKLM-x32\...\RunOnce: [Launcher] => C:\Program Files (x86)\Dell DataSafe Local Backup\Components\Scheduler\Launcher.exe [163040 2010-08-12] (Softthinks)
HKLM-x32\...\RunOnce: [DSUpdateLauncher] => C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpd.exe [161088 2010-07-21] ()
Winlogon\Notify\FastAccess-x32: C:\Program Files (x86)\Sensible Vision\Fast Access\FALogNot.dll ()
HKU\S-1-5-21-1413332742-2020861625-2527278895-1000\...\Run: [gagbcamc.exe] => "C:\Users\3vento\AppData\Roaming\Identities\gagbcamc.exe"
Lsa: [Notification Packages] scecli FAPassSync
Startup: C:\Users\3vento\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock.lnk
ShortcutTarget: Dell Dock.lnk -> C:\Program Files\Dell\DellDock\DellDock.exe (Stardock Corporation)
Startup: C:\Users\3vento\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\3vento\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Polar WebSync.lnk
ShortcutTarget: Polar WebSync.lnk -> C:\Program Files (x86)\Polar\WebSync\WebSync.exe ()
Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock First Run.lnk
ShortcutTarget: Dell Dock First Run.lnk -> C:\Program Files\Dell\DellDock\DellDock.exe (Stardock Corporation)
Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock First Run.lnk
ShortcutTarget: Dell Dock First Run.lnk -> C:\Program Files\Dell\DellDock\DellDock.exe (Stardock Corporation)
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-1413332742-2020861625-2527278895-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-1413332742-2020861625-2527278895-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://g.uk.msn.com/USCON/8
HKU\S-1-5-21-1413332742-2020861625-2527278895-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-1413332742-2020861625-2527278895-1000 -> DefaultScope {FFA032E3-0635-4882-A23A-59D3A69D635F} URL = 
SearchScopes: HKU\S-1-5-21-1413332742-2020861625-2527278895-1000 -> {40D09CCC-D7B5-4833-B148-262629FEA964} URL = 
SearchScopes: HKU\S-1-5-21-1413332742-2020861625-2527278895-1000 -> {FFA032E3-0635-4882-A23A-59D3A69D635F} URL = 
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll (Microsoft Corporation.)
BHO: SSOIEAddonBHO Class -> {DA5BCE70-D057-4D63-943D-5F3927EC59F1} -> C:\Program Files (x86)\Sensible Vision\Fast Access\x64\FAIESSO.dll (Sensible Vision )
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre6\bin\jp2ssv.dll No File
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Windows Live Messenger Companion Helper -> {9FDDE16B-836F-4806-AB1F-1455CBEFF289} -> C:\Program Files (x86)\Windows Live\Companion\companioncore.dll (Microsoft Corporation)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll (Microsoft Corporation.)
BHO-x32: SSOIEAddonBHO Class -> {DA5BCE70-D057-4D63-943D-5F3927EC59F1} -> C:\Program Files (x86)\Sensible Vision\Fast Access\FAIESSO.dll (Sensible Vision )
Toolbar: HKLM - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll (Microsoft Corporation.)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll (Microsoft Corporation.)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\3vento\AppData\Roaming\Mozilla\Firefox\Profiles\whssljy2.default
FF SelectedSearchEngine: Google
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_239.dll ()
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_239.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.71.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin -> C:\Program Files (x86)\Java\jre7\bin\new_plugin\npjp2.dll No File
FF Plugin-x32: @java.com/JavaPlugin,version=10.71.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF Extension: Show my Password - C:\Users\3vento\AppData\Roaming\Mozilla\Firefox\Profiles\whssljy2.default\Extensions\{cd617372-6743-4ee4-bac4-fbf60f35719e}.xpi [2011-05-12]
FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2014-11-11]
FF HKLM-x32\...\Firefox\Extensions: [fassoxpcom@sensiblevision.com] - C:\Program Files (x86)\Sensible Vision\Fast Access\xpcom_fasso
FF Extension: FastAccess Web Login - C:\Program Files (x86)\Sensible Vision\Fast Access\xpcom_fasso [2011-01-26]

Chrome: 
=======
CHR Profile: C:\Users\3vento\AppData\Local\Google\Chrome\User Data\Default

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc.exe [804144 2014-11-18] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [432888 2014-11-18] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [432888 2014-11-18] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [993584 2014-11-18] (Avira Operations GmbH & Co. KG)
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)
R2 DockLoginService; C:\Program Files\Dell\DellDock\DockLogin.exe [155648 2009-06-09] (Stardock Corporation) [File not signed]
R2 FAService; C:\Program Files (x86)\Sensible Vision\Fast Access\FAService.exe [2428552 2010-11-02] (Sensible Vision ) [File not signed]
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe [78088 2014-08-26] (Hewlett-Packard Company)
R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [71680 2009-05-14] (Hewlett-Packard) [File not signed]
R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [89600 2009-05-14] (Hewlett-Packard) [File not signed]
R2 Polar Daemon; C:\Program Files (x86)\Polar\Daemon\polard.exe [419536 2012-12-12] ()
R2 STacSV; C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_0057cbec48a2d7cf\STacSV64.exe [244736 2010-01-20] (IDT, Inc.)
R2 wltrysvc; C:\Program Files\Dell\Dell Wireless WLAN Card\bcmwltry.exe [3417088 2009-07-17] (Dell Inc.) [File not signed]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [119272 2014-10-07] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131608 2014-10-07] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-10-01] (Avira Operations GmbH & Co. KG)
R2 TurboB; C:\Windows\System32\DRIVERS\TurboB.sys [13784 2009-11-02] ()
S3 USBAAPL64; C:\Windows\System32\Drivers\usbaapl64.sys [54784 2013-03-18] (Apple, Inc.) [File not signed]
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 PCDSRVC{1E208CE0-FB7451FF-06020101}_0; \??\c:\program files\dell support center\pcdsrvc_x64.pkms [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-29 00:01 - 2014-11-29 00:02 - 00019094 _____ () C:\Users\3vento\Desktop\FRST.txt
2014-11-29 00:00 - 2014-11-29 00:00 - 02117632 _____ (Farbar) C:\Users\3vento\Desktop\FRST64(1).exe
2014-11-28 23:57 - 2014-11-28 23:57 - 00017615 _____ () C:\Users\3vento\Desktop\JRT.txt
2014-11-28 23:51 - 2014-11-28 23:51 - 00000000 ____D () C:\Windows\ERUNT
2014-11-28 23:41 - 2014-11-28 23:44 - 00000000 ____D () C:\AdwCleaner
2014-11-28 23:40 - 2014-11-28 23:41 - 01707532 _____ (Thisisu) C:\Users\3vento\Desktop\JRT.exe
2014-11-28 23:39 - 2014-11-28 23:39 - 02148864 _____ () C:\Users\3vento\Desktop\AdwCleaner_4.102.exe
2014-11-28 23:13 - 2014-11-28 23:14 - 04184008 _____ (Kaspersky Lab ZAO) C:\Users\3vento\Desktop\tdsskiller.exe
2014-11-28 22:50 - 2014-11-28 22:50 - 00027855 _____ () C:\ComboFix.txt
2014-11-28 22:35 - 2011-06-26 07:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-11-28 22:35 - 2010-11-07 18:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-11-28 22:35 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-11-28 22:35 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-11-28 22:35 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-11-28 22:35 - 2000-08-31 01:00 - 00098816 _____ () C:\Windows\sed.exe
2014-11-28 22:35 - 2000-08-31 01:00 - 00080412 _____ () C:\Windows\grep.exe
2014-11-28 22:35 - 2000-08-31 01:00 - 00068096 _____ () C:\Windows\zip.exe
2014-11-28 22:25 - 2014-11-28 22:25 - 00001190 _____ () C:\ComboFix - Verknüpfung.lnk
2014-11-28 22:23 - 2014-11-28 22:50 - 00000000 ____D () C:\Qoobox
2014-11-28 22:22 - 2014-11-28 22:48 - 00000000 ____D () C:\Windows\erdnt
2014-11-28 22:21 - 2014-11-28 22:22 - 05599228 ____R (Swearware) C:\Users\3vento\Downloads\ComboFix.exe
2014-11-28 00:15 - 2014-11-28 00:15 - 00380416 _____ () C:\Users\3vento\Downloads\Gmer-19357.exe
2014-11-28 00:14 - 2014-11-28 00:14 - 00000474 _____ () C:\Users\3vento\Downloads\defogger_disable.log
2014-11-28 00:14 - 2014-11-28 00:14 - 00000000 _____ () C:\Users\3vento\defogger_reenable
2014-11-28 00:13 - 2014-11-28 00:13 - 00050477 _____ () C:\Users\3vento\Downloads\Defogger.exe
2014-11-27 18:52 - 2014-11-27 18:53 - 00034643 _____ () C:\Users\3vento\Downloads\Addition.txt
2014-11-27 18:50 - 2014-11-29 00:01 - 00000000 ____D () C:\FRST
2014-11-27 18:50 - 2014-11-27 18:53 - 00039224 _____ () C:\Users\3vento\Downloads\FRST.txt
2014-11-27 18:50 - 2014-11-27 18:50 - 02117632 _____ (Farbar) C:\Users\3vento\Downloads\FRST64.exe
2014-11-25 14:17 - 2014-11-25 14:17 - 00000000 __SHD () C:\Users\3vento\AppData\Local\EmieBrowserModeList
2014-11-19 09:31 - 2014-11-11 04:08 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-11-19 09:31 - 2014-11-11 04:08 - 00241152 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll
2014-11-19 09:31 - 2014-11-11 03:44 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-11-19 09:31 - 2014-11-11 03:44 - 00186880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pku2u.dll
2014-11-12 09:17 - 2014-11-07 20:49 - 00388272 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-11-12 09:17 - 2014-11-07 20:23 - 00341168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-11-12 09:17 - 2014-11-06 05:04 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-11-12 09:17 - 2014-11-06 05:03 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-11-12 09:17 - 2014-11-06 04:47 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-11-12 09:17 - 2014-11-06 04:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-11-12 09:17 - 2014-11-06 04:43 - 02884096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-11-12 09:17 - 2014-11-06 04:36 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-11-12 09:17 - 2014-11-06 04:35 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-11-12 09:17 - 2014-11-06 04:31 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-11-12 09:17 - 2014-11-06 04:30 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-11-12 09:17 - 2014-11-06 04:30 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-11-12 09:17 - 2014-11-06 04:28 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-11-12 09:17 - 2014-11-06 04:20 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-11-12 09:17 - 2014-11-06 04:16 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-11-12 09:17 - 2014-11-06 04:13 - 00501248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-11-12 09:17 - 2014-11-06 04:13 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-11-12 09:17 - 2014-11-06 04:12 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-11-12 09:17 - 2014-11-06 04:10 - 19781632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-11-12 09:17 - 2014-11-06 04:10 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-11-12 09:17 - 2014-11-06 04:07 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-11-12 09:17 - 2014-11-06 04:05 - 02277376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-11-12 09:17 - 2014-11-06 04:04 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-11-12 09:17 - 2014-11-06 04:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-11-12 09:17 - 2014-11-06 04:00 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-11-12 09:17 - 2014-11-06 04:00 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-11-12 09:17 - 2014-11-06 03:59 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-11-12 09:17 - 2014-11-06 03:58 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-11-12 09:17 - 2014-11-06 03:57 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-11-12 09:17 - 2014-11-06 03:48 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-11-12 09:17 - 2014-11-06 03:42 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-11-12 09:17 - 2014-11-06 03:41 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-11-12 09:17 - 2014-11-06 03:41 - 00716800 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-11-12 09:17 - 2014-11-06 03:39 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-11-12 09:17 - 2014-11-06 03:38 - 02124288 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-11-12 09:17 - 2014-11-06 03:37 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-11-12 09:17 - 2014-11-06 03:36 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-11-12 09:17 - 2014-11-06 03:34 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-11-12 09:17 - 2014-11-06 03:30 - 14390272 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-11-12 09:17 - 2014-11-06 03:22 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-11-12 09:17 - 2014-11-06 03:21 - 04298240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-11-12 09:17 - 2014-11-06 03:21 - 02051072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-11-12 09:17 - 2014-11-06 03:20 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-11-12 09:17 - 2014-11-06 03:04 - 01550336 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-11-12 09:17 - 2014-11-06 03:03 - 12819456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-11-12 09:17 - 2014-11-06 02:53 - 00799232 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-11-12 09:17 - 2014-11-06 02:52 - 01892864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-11-12 09:17 - 2014-11-06 02:48 - 01310208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-11-12 09:17 - 2014-11-06 02:47 - 00708096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-11-12 09:17 - 2014-11-05 18:56 - 00304640 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2014-11-12 09:17 - 2014-11-05 18:56 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-11-12 09:17 - 2014-11-05 18:52 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-11-12 09:17 - 2014-10-14 03:16 - 00155064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-11-12 09:17 - 2014-10-14 03:13 - 00683520 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2014-11-12 09:17 - 2014-10-14 03:12 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-11-12 09:17 - 2014-10-14 03:09 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2014-11-12 09:17 - 2014-10-14 03:07 - 00681984 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2014-11-12 09:17 - 2014-10-14 02:50 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-11-12 09:17 - 2014-10-14 02:49 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-11-12 09:17 - 2014-10-14 02:47 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2014-11-12 09:17 - 2014-10-14 02:46 - 00681984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2014-11-12 09:16 - 2014-11-06 05:03 - 25110016 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-11-12 09:16 - 2014-11-06 04:46 - 00580096 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-11-12 09:16 - 2014-11-06 04:44 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-11-12 09:16 - 2014-11-06 04:29 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-11-12 09:16 - 2014-11-06 04:23 - 06040064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-11-12 09:16 - 2014-11-06 04:02 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-11-12 09:16 - 2014-11-06 03:17 - 02365440 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-11-12 09:15 - 2014-10-25 02:57 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2014-11-12 09:15 - 2014-10-25 02:32 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll
2014-11-12 09:15 - 2014-10-18 03:05 - 00861696 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2014-11-12 09:15 - 2014-10-18 02:33 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2014-11-12 09:15 - 2014-10-14 03:13 - 03241984 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-11-12 09:15 - 2014-10-14 02:50 - 02363904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2014-11-12 09:15 - 2014-10-10 01:57 - 03198976 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-11-12 09:15 - 2014-10-03 03:12 - 00500224 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2014-11-12 09:15 - 2014-10-03 03:11 - 00680960 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2014-11-12 09:15 - 2014-10-03 03:11 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2014-11-12 09:15 - 2014-10-03 03:11 - 00296448 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2014-11-12 09:15 - 2014-10-03 03:11 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2014-11-12 09:15 - 2014-10-03 02:44 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2014-11-12 09:15 - 2014-10-03 02:44 - 00374784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2014-11-12 09:15 - 2014-10-03 02:44 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2014-11-12 09:15 - 2014-09-19 10:42 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-11-12 09:15 - 2014-09-19 10:42 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-11-12 09:15 - 2014-09-19 10:42 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2014-11-12 09:15 - 2014-09-19 10:42 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-11-12 09:15 - 2014-09-19 10:42 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-11-12 09:15 - 2014-09-19 10:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-11-12 09:15 - 2014-09-19 10:23 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2014-11-12 09:15 - 2014-09-19 10:23 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-11-12 09:15 - 2014-09-19 10:23 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2014-11-12 09:15 - 2014-09-19 10:23 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2014-11-12 09:15 - 2014-09-19 10:23 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2014-11-12 09:15 - 2014-09-19 10:23 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2014-11-12 09:15 - 2014-08-21 07:43 - 01882624 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-11-12 09:15 - 2014-08-21 07:40 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-11-12 09:15 - 2014-08-21 07:26 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-11-12 09:15 - 2014-08-21 07:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2014-11-12 09:15 - 2014-08-12 03:02 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10K.DLL
2014-11-12 09:15 - 2014-08-12 02:36 - 00701440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IMJP10K.DLL
2014-11-11 15:16 - 2014-11-11 15:16 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-28 23:54 - 2012-04-26 22:55 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-11-28 23:54 - 2009-07-14 05:45 - 00022464 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-11-28 23:54 - 2009-07-14 05:45 - 00022464 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-11-28 23:52 - 2011-01-31 22:24 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-11-28 23:50 - 2009-07-14 06:10 - 02006784 _____ () C:\Windows\WindowsUpdate.log
2014-11-28 23:46 - 2012-06-07 09:07 - 00000438 _____ () C:\Windows\system32\Drivers\etc\hosts.ics
2014-11-28 23:46 - 2011-02-13 15:32 - 00000000 ___RD () C:\Users\3vento\Dropbox
2014-11-28 23:46 - 2011-02-13 14:46 - 00000000 ____D () C:\Users\3vento\AppData\Roaming\Dropbox
2014-11-28 23:46 - 2011-01-31 20:44 - 00000000 ____D () C:\Users\3vento\AppData\Local\SoftThinks
2014-11-28 23:46 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-11-28 23:45 - 2011-01-26 00:06 - 00264716 _____ () C:\Windows\PFRO.log
2014-11-28 23:45 - 2009-07-14 05:51 - 00270206 _____ () C:\Windows\setupact.log
2014-11-28 22:50 - 2009-07-14 04:20 - 00000000 __RHD () C:\Users\Default
2014-11-28 22:47 - 2009-07-14 03:34 - 00000215 _____ () C:\Windows\system.ini
2014-11-28 20:31 - 2011-01-31 20:44 - 00000422 _____ () C:\Windows\Tasks\SystemToolsDailyTest.job
2014-11-28 20:30 - 2011-02-11 14:00 - 00003488 _____ () C:\Windows\System32\Tasks\PCDEventLauncher
2014-11-28 20:30 - 2011-01-31 20:44 - 00003448 _____ () C:\Windows\System32\Tasks\SystemToolsDailyTest
2014-11-28 00:14 - 2011-01-31 20:40 - 00000000 ____D () C:\Users\3vento
2014-11-26 13:54 - 2012-04-26 22:55 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-11-26 13:54 - 2012-04-26 22:55 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-11-26 13:54 - 2011-06-06 18:25 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-11-26 13:54 - 2011-01-31 22:25 - 00002177 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-11-15 07:59 - 2011-02-13 15:22 - 00001025 _____ () C:\Users\3vento\Desktop\Dropbox.lnk
2014-11-15 07:59 - 2011-02-13 14:46 - 00000000 ____D () C:\Users\3vento\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-11-14 17:52 - 2011-01-31 22:24 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-11-14 17:47 - 2011-01-31 22:24 - 00004106 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-11-14 17:47 - 2011-01-31 22:24 - 00003854 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-11-13 20:06 - 2011-06-16 19:52 - 00000000 ____D () C:\Users\3vento\Documents\Stefan
2014-11-12 19:04 - 2011-01-31 20:40 - 00127656 _____ () C:\Users\3vento\AppData\Local\GDIPFONTCACHEV1.DAT
2014-11-12 19:03 - 2011-01-31 20:44 - 00000564 _____ () C:\Windows\Tasks\PCDoctorBackgroundMonitorTask.job
2014-11-12 19:03 - 2009-07-14 05:45 - 00467264 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-11-12 19:01 - 2014-05-06 15:24 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-11-12 14:36 - 2011-02-01 20:03 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-11-12 14:32 - 2013-08-15 11:43 - 00000000 ____D () C:\Windows\system32\MRT
2014-11-12 14:28 - 2011-02-11 19:13 - 103374192 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-11-12 11:00 - 2011-01-31 20:44 - 00004268 _____ () C:\Windows\System32\Tasks\PCDoctorBackgroundMonitorTask
2014-11-12 09:03 - 2012-05-03 15:55 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-11-07 19:53 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-11-04 08:51 - 2009-07-14 06:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-11-01 16:14 - 2009-07-14 18:58 - 00703192 _____ () C:\Windows\system32\perfh007.dat
2014-11-01 16:14 - 2009-07-14 18:58 - 00150800 _____ () C:\Windows\system32\perfc007.dat
2014-11-01 16:14 - 2009-07-14 06:13 - 01629348 _____ () C:\Windows\system32\PerfStringBackup.INI

Some content of TEMP:
====================
C:\Users\3vento\AppData\Local\Temp\avgnt.exe
C:\Users\3vento\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpvqhrut.dll
C:\Users\3vento\AppData\Local\Temp\Quarantine.exe
C:\Users\3vento\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-11-25 09:06

==================== End Of Log ============================
--- --- ---

--- --- ---

Code:
ATTFilter
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 26-11-2014 01
Ran by 3vento at 2014-11-29 00:02:53
Running from C:\Users\3vento\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

64 Bit HP CIO Components Installer (Version: 6.2.2 - Hewlett-Packard) Hidden
8500A909_eDocs (x32 Version: 1.00.0000 - Hewlett-Packard) Hidden
Adobe Flash Player 10 ActiveX (HKLM-x32\...\{2BD2FA21-B51D-4F01-94A7-AC16737B2163}) (Version: 10.0.12.36 - Adobe Systems, Inc.)
Adobe Flash Player 15 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 15.0.0.239 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.09) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.09 - Adobe Systems Incorporated)
Advanced Audio FX Engine (HKLM-x32\...\Advanced Audio FX Engine) (Version: 1.12.05 - Creative Technology Ltd)
Antivirus Pro (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.7.342 - Avira)
Apple Application Support (HKLM-x32\...\{83CAF0DE-8D3B-4C37-A631-2B8F16EC3031}) (Version: 3.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{BDD99690-3541-4619-9D2A-3CDDB3E15F9E}) (Version: 8.0.5.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
ATI Catalyst Control Center (HKLM-x32\...\{055EE59D-217B-43A7-ABFF-507B966405D8}) (Version: 2.010.0122.0857 - )
Bing Bar (HKLM-x32\...\{3365E735-48A6-4194-9988-CE59AC5AE503}) (Version: 7.3.132.0 - Microsoft Corporation)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
BPD_DSWizards (x32 Version: 1.00.0000 - Hewlett-Packard) Hidden
bpd_scan (x32 Version: 3.00.0000 - Hewlett-Packard) Hidden
BPDSoftware (x32 Version: 140.0.000.000 - Hewlett-Packard) Hidden
BPDSoftware_Ini (x32 Version: 1.00.0000 - Hewlett-Packard) Hidden
BtwMfcMM (HKLM\...\{D5B46D30-F054-4C64-9C0F-97C8451E7D04}) (Version: 6.00.0000 - Broadcom Corporation)
BufferChm (x32 Version: 140.0.213.000 - Hewlett-Packard) Hidden
ccc-core-static (x32 Version: 2010.0122.858.16002 - ATI) Hidden
Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)
Cisco LEAP Module (HKLM-x32\...\{51C7AD07-C3F6-4635-8E8A-231306D810FE}) (Version: 1.0.19 - Cisco Systems, Inc.)
Cisco PEAP Module (HKLM-x32\...\{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}) (Version: 1.1.6 - Cisco Systems, Inc.)
CutePDF Writer 2.8 (HKLM\...\CutePDF Writer Installation) (Version:  - )
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Dell DataSafe Local Backup - Support Software (HKLM-x32\...\{A9668246-FB70-4103-A1E3-66C9BC2EFB49}) (Version:  - Dell)
Dell DataSafe Local Backup (HKLM-x32\...\{0ED7EE95-6A97-47AA-AD73-152C08A15B04}) (Version: 9.4.47 - Dell)
Dell DataSafe Online (HKLM-x32\...\{7EC66A95-AC2D-4127-940B-0445A526AB2F}) (Version: 2.1.19634 - Dell)
Dell Dock (HKLM-x32\...\Dell Dock) (Version: 2.0 - Stardock Corporation)
Dell Dock (Version: 2.0 - Stardock Corporation) Hidden
Dell Edoc Viewer (HKLM\...\{8EBA8727-ADC2-477B-9D9A-1A1836BE4E05}) (Version: 1.0.0 - Dell Inc)
Dell Getting Started Guide (HKLM-x32\...\{7DB9F1E5-9ACB-410D-A7DC-7A3D023CE045}) (Version: 1.00.0000 - Dell Inc.)
Dell Support Center (HKLM\...\Dell Support Center) (Version: 3.0.5621.01 - Dell Inc.)
Dell Support Center (Version: 3.0.5621.01 - PC-Doctor, Inc.) Hidden
Dell Touchpad (HKLM\...\SynTPDeinstKey) (Version: 15.0.18.0 - Synaptics Incorporated)
Dell Webcam Central (HKLM-x32\...\Dell Webcam Central) (Version: 2.00.35 - Creative Technology Ltd)
Dell Wireless WLAN Card Utility (HKLM\...\Dell Wireless WLAN Card Utility) (Version: 5.30.21.0 - Dell Inc.)
DirectX 9 Runtime (x32 Version: 1.00.0000 - Sonic Solutions) Hidden
Dropbox (HKU\S-1-5-21-1413332742-2020861625-2527278895-1000\...\Dropbox) (Version: 2.10.52 - Dropbox, Inc.)
eBay (HKLM-x32\...\{A8B88634-7F90-402F-B66A-86429755F6A5}) (Version: 1.4.0 - eBay Inc.)
FastAccess (HKLM\...\{59FF4E5B-179A-4267-BD13-2124D0545126}) (Version: 3.0.85.1 - Sensible Vision)
FileZilla Client 3.7.3 (HKLM-x32\...\FileZilla Client) (Version: 3.7.3 - Tim Kosse)
GIMP 2.6.11 (HKLM-x32\...\WinGimp-2.0_is1) (Version: 2.6.11 - The GIMP Team)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 39.0.2171.71 - Google Inc.)
Google Earth Plug-in (HKLM-x32\...\{4AB54F11-2F8C-11E3-B09F-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
HP Support Solutions Framework (HKLM-x32\...\{348A1F5B-07B3-4436-9A47-FFE44EFE856E}) (Version: 11.51.0004 - Hewlett-Packard Company)
iCloud (HKLM\...\{4BC310C4-B898-46E2-B5FB-B85A30AA7142}) (Version: 2.0.2.187 - Apple Inc.)
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 9.6.0.1014 - Intel Corporation)
iTunes (HKLM\...\{2ABBBD91-91E5-4AD7-929A-FE15D1DC0576}) (Version: 12.0.1.26 - Apple Inc.)
Java 7 Update 71 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217071FF}) (Version: 7.0.710 - Oracle)
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Messenger Companion (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Office Home and Student 2010 (HKLM-x32\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (HKLM\...\{B6E3757B-5E77-3915-866A-CCFC4B8D194C}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) - KB2467175 (HKLM\...\{aac9fcc4-dd9e-4add-901c-b5496a07ab2e}) (Version: 8.0.51011 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 ATL Update kb973924 - x64 9.0.30729.4148 (HKLM\...\{EE936C7A-EA40-31D5-9B65-8E3E089C3828}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (HKLM-x32\...\{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570 (HKLM\...\{8338783A-0968-3B85-AFC7-BAAE0A63DC50}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM-x32\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Mozilla Firefox 33.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 33.1 (x86 de)) (Version: 33.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0 - Mozilla)
Mozilla Thunderbird 24.6.0 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 24.6.0 (x86 de)) (Version: 24.6.0 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Network64 (Version: 140.0.215.000 - Hewlett-Packard) Hidden
phase-6 2.3.2a (HKLM-x32\...\phase-6) (Version: 2.3.2a - phase-6)
phase-6-basic 2.1.2.1 (HKLM-x32\...\phase-6-basic) (Version: 2.1.2.1 - phase-6)
PhotoShowExpress (x32 Version: 2.0.028 - Sonic Solutions) Hidden
Polar Daemon (HKLM-x32\...\{2BA9320D-E061-4C71-ACCB-AC0E9D4FC82B}) (Version: 2.2.20000 - Polar Electro Oy)
Polar WebSync (HKLM-x32\...\{320453EE-6AEA-4E1A-8E64-72F33C0C928F}) (Version: 2.8.10006 - Polar Electro Oy)
Quickset64 (HKLM\...\{87CF757E-C1F1-4D22-865C-00C6950B5258}) (Version: 9.6.21 - Dell Inc.)
QuickTime 7 (HKLM-x32\...\{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}) (Version: 7.76.80.95 - Apple Inc.)
RBVirtualFolder64Inst (Version: 1.00.0000 - Roxio, Inc.) Hidden
Roxio Burn (HKLM-x32\...\{B2E47DE7-800B-40BB-BD1F-9F221C3AEE87}) (Version: 1.8.57.4 - Roxio)
Roxio Creator Starter (HKLM-x32\...\{6F0BBEFE-BE1C-419B-BA1F-D36C9E7915BC}) (Version: 12.1.40.0 - Roxio)
Roxio File Backup (Version: 1.3.2 - Roxio) Hidden
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version:  - Microsoft)
Skins (x32 Version: 2010.0122.858.16002 - ATI) Hidden
Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.3.16540.9015 - Microsoft Corporation)
Skype™ 6.18 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.18.106 - Skype Technologies S.A.)
Sonic CinePlayer Decoder Pack (x32 Version: 4.3.0 - Sonic Solutions) Hidden
TextPad 7 (HKLM\...\{52C23381-8FED-4DB0-A07F-CCE9C9061475}) (Version: 7.1.0 - Helios)
Überwachungstool für die Intel® Turbo-Boost-Technik (HKLM\...\{39F4C6F9-618A-4E5B-8FB2-6BD661174E32}) (Version: 1.0.186.6 - Intel)
Vasco da Gama 8 Advanced (HKLM-x32\...\{22036364-3B1E-4B6D-A109-93328906F7C7}) (Version: 8.00.0000 - MotionStudios)
WIDCOMM Bluetooth Software (HKLM\...\{9E9D49A4-1DF4-4138-B7DB-5D87A893088E}) (Version: 6.2.0.9603 - Broadcom Corporation)
Windows Driver Package - Cambridge Silicon Radio Ltd. (CSRBC) USB  (04/21/2011 01.0.0.0) (HKLM\...\BEA7B05370C19B9C86893BB484FD6B9CC52B0CD8) (Version: 04/21/2011 01.0.0.0 - Cambridge Silicon Radio Ltd.)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3555.0308 - Microsoft Corporation)
Windows Live Mesh ActiveX control for remote connections (HKLM-x32\...\{C5398A89-516C-4DAF-BA07-EE7949090E56}) (Version: 15.4.5722.2 - Microsoft Corporation)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-1413332742-2020861625-2527278895-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\3vento\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1413332742-2020861625-2527278895-1000_Classes\CLSID\{8A791F0C-C63C-4EC5-B97F-FBCE74EDBC54}\InprocServer32 -> C:\Program Files\TextPad 7\System\shellext32.dll No File
CustomCLSID: HKU\S-1-5-21-1413332742-2020861625-2527278895-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\3vento\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1413332742-2020861625-2527278895-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\3vento\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1413332742-2020861625-2527278895-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\3vento\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1413332742-2020861625-2527278895-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\3vento\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1413332742-2020861625-2527278895-1000_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\3vento\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1413332742-2020861625-2527278895-1000_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\3vento\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1413332742-2020861625-2527278895-1000_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\3vento\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1413332742-2020861625-2527278895-1000_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\3vento\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)

==================== Restore Points  =========================

07-11-2014 08:06:37 Geplanter Prüfpunkt
12-11-2014 13:26:55 Windows Update
19-11-2014 08:59:30 Windows Update
26-11-2014 13:27:17 Geplanter Prüfpunkt
28-11-2014 21:36:01 ComboFix created restore point

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 03:34 - 2014-11-28 22:47 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1       localhost

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {0462B81D-088E-4019-84D5-5E8DE3C88848} - System32\Tasks\PCDEventLauncher => C:\Program Files\Dell Support Center\sessionchecker.exe [2010-08-05] ()
Task: {19ECB42E-7A93-4420-AEE1-FC5F2A62A0E9} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-23] (Google Inc.)
Task: {22963CBF-71DC-47EA-83AF-8B3938A2C85F} - System32\Tasks\{4CEC59AF-1431-4329-A780-8755C039F030} => C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe [2014-06-12] (Mozilla Corporation)
Task: {29F91580-FE58-42D5-9937-FBEF1BAEEC72} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {6F16A33D-5E1B-47B0-BF5F-5978C7BF840D} - System32\Tasks\{F9F713E9-4979-4052-9850-A240D57D9289} => Firefox.exe hxxp://ui.skype.com/ui/0/6.3.0.105/de/abandoninstall?page=tsProgressBar
Task: {74EB4C2E-F6B1-45B9-A3D2-7066DEA4B371} - System32\Tasks\PCDoctorBackgroundMonitorTask => C:\Program Files\Dell Support Center\uaclauncher.exe [2010-08-05] (PC-Doctor, Inc.)
Task: {80F0F57D-5DB9-47ED-A405-C16DC8CB4AB4} - System32\Tasks\SystemToolsDailyTest => C:\Program Files\Dell Support Center\pcdrcui.exe [2010-08-05] (PC-Doctor, Inc.)
Task: {8B80D9DB-F351-4C4F-B277-DF20C02D5914} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-11-26] (Adobe Systems Incorporated)
Task: {98BAB32E-F425-40A7-B9D4-EA0694F90AD3} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc
Task: {BFEE7543-78DE-40DB-86AB-E06820B27444} - System32\Tasks\{2B734AAD-71DE-4DB6-BFE1-0D35613B9D9D} => C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe [2014-06-12] (Mozilla Corporation)
Task: {D0FBEC10-F581-4C89-87A9-45059CA6F317} - System32\Tasks\{A36ED1EE-80D5-429C-8918-44867A3BC480} => C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe [2014-06-12] (Mozilla Corporation)
Task: {D18DA246-1CA8-4077-8ECB-87069D0C4785} - System32\Tasks\{E4B32570-41C4-4FEE-9B46-FA2094632C84} => C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe [2014-06-12] (Mozilla Corporation)
Task: {D9584729-0DCB-4031-ADCD-492E6D62F015} - System32\Tasks\DJJT67P1\Administrator - Start WLAN Tray Applet => C:\Program Files\Dell\Dell Wireless WLAN Card\WLTRAY.EXE [2009-07-17] (Dell Inc.)
Task: {DD6FF4F4-6E57-451B-A338-F8018EDCE9AA} - System32\Tasks\{DBEC7DF5-4ECD-4E5A-B4EE-7F68EAFF3F18} => C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe [2014-06-12] (Mozilla Corporation)
Task: {EEC4BE10-3F75-4C6D-B505-7235B3DB1229} - System32\Tasks\Games\UpdateCheck_S-1-5-21-1413332742-2020861625-2527278895-1000
Task: {F4FD22E6-DFB2-49D2-B3AC-E125C0E44D7A} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-23] (Google Inc.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\PCDoctorBackgroundMonitorTask.job => C:\Program Files\Dell Support Center\uaclauncher.exe
Task: C:\Windows\Tasks\SystemToolsDailyTest.job => C:\Program Files\Dell Support Center\pcdrcui.exe

==================== Loaded Modules (whitelisted) =============

2010-11-02 05:40 - 2010-11-02 05:40 - 00092808 _____ () C:\Windows\system32\FAIEExtension.DLL
2011-01-26 07:16 - 2009-07-17 02:06 - 00033280 _____ () C:\Program Files\Dell\Dell Wireless WLAN Card\WLTRYSVC.EXE
2011-01-26 07:16 - 2009-07-17 02:06 - 00058368 _____ () C:\Program Files\Dell\Dell Wireless WLAN Card\bcmwlrmt.dll
2011-02-10 00:02 - 2009-11-05 07:40 - 00085504 _____ () C:\Windows\System32\cpwmon64.dll
2011-01-26 07:24 - 2010-08-12 01:19 - 00781536 ____N () C:\Program Files (x86)\Dell DataSafe Local Backup\Components\Scheduler\STService.exe
2013-02-26 15:59 - 2013-02-26 15:59 - 06227512 _____ () C:\Program Files (x86)\Polar\WebSync\WebSync.exe
2014-10-20 07:25 - 2014-10-20 07:25 - 00472576 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_64\VistaBridgeLibrary\602ab9ddf3440af31bb4c168b59f2ba5\VistaBridgeLibrary.ni.dll
2010-03-08 18:02 - 2010-03-08 18:02 - 00016384 ____R () c:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\Branding.dll
2011-01-26 07:18 - 2011-01-26 07:18 - 00270336 _____ () C:\Windows\assembly\GAC_MSIL\CLI.Aspect.CrossDisplay.Graphics.Dashboard\1.0.0.0__90ba9c70f846762e\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll
2012-12-12 14:20 - 2012-12-12 14:20 - 00419536 _____ () C:\Program Files (x86)\Polar\Daemon\polard.exe
2010-01-02 15:42 - 2010-01-02 15:42 - 00098304 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll
2014-02-12 20:58 - 2014-02-12 20:58 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-10-11 13:05 - 2014-10-11 13:05 - 01044776 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2011-01-26 07:24 - 2010-08-12 01:19 - 00126176 ____N () C:\Program Files (x86)\Dell DataSafe Local Backup\STLog.dll
2011-01-26 07:24 - 2010-08-12 01:19 - 01121504 ____N () C:\Program Files (x86)\Dell DataSafe Local Backup\LibXml2.dll
2011-01-26 07:24 - 2010-08-12 01:19 - 00077024 ____N () C:\Program Files (x86)\Dell DataSafe Local Backup\zlib1.dll
2011-01-26 07:24 - 2010-08-12 01:19 - 00232672 ____N () C:\Program Files (x86)\Dell DataSafe Local Backup\STFiles.dll
2011-01-26 07:24 - 2010-08-12 01:19 - 00072928 ____N () C:\Program Files (x86)\Dell DataSafe Local Backup\STRegistry.dll
2011-01-26 07:24 - 2010-08-12 01:19 - 00109792 ____N () C:\Program Files (x86)\Dell DataSafe Local Backup\STPE.dll
2011-01-26 07:24 - 2010-08-12 01:19 - 00119008 ____N () C:\Program Files (x86)\Dell DataSafe Local Backup\STNLS.dll
2013-02-26 15:59 - 2013-02-26 15:59 - 00110648 _____ () C:\Program Files (x86)\Polar\WebSync\PTransform.dll
2010-02-10 15:06 - 2010-02-10 15:06 - 00334848 _____ () C:\Program Files (x86)\Polar\WebSync\QtXml4.dll
2011-01-14 15:01 - 2011-01-14 15:01 - 02142720 _____ () C:\Program Files (x86)\Polar\WebSync\QtCore4.dll
2013-02-26 15:59 - 2013-02-26 15:59 - 03722296 _____ () C:\Program Files (x86)\Polar\WebSync\libpolar.dll
2010-02-10 15:22 - 2010-02-10 15:22 - 07971840 _____ () C:\Program Files (x86)\Polar\WebSync\QtGui4.dll
2010-02-10 15:07 - 2010-02-10 15:07 - 00929280 _____ () C:\Program Files (x86)\Polar\WebSync\QtNetwork4.dll
2010-02-10 17:45 - 2010-02-10 17:45 - 00025600 _____ () C:\Program Files (x86)\Polar\WebSync\imageformats\qgif4.dll
2010-02-10 17:45 - 2010-02-10 17:45 - 00119808 _____ () C:\Program Files (x86)\Polar\WebSync\imageformats\qjpeg4.dll
2014-11-28 23:46 - 2014-11-28 23:46 - 00043008 _____ () c:\users\3vento\appdata\local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpvqhrut.dll
2013-08-23 20:01 - 2013-08-23 20:01 - 25100288 _____ () C:\Users\3vento\AppData\Roaming\Dropbox\bin\libcef.dll
2012-12-12 14:20 - 2012-12-12 14:20 - 03483856 _____ () C:\Program Files (x86)\Polar\Daemon\libpolar.dll
2011-01-26 07:24 - 2010-08-12 01:19 - 00056544 ____N () C:\Program Files (x86)\Dell DataSafe Local Backup\STCoreXml.dll
2011-01-26 07:24 - 2010-08-12 01:19 - 00113888 ____N () C:\Program Files (x86)\Dell DataSafe Local Backup\PSTVdsDisk.dll
2014-10-20 07:18 - 2014-10-20 07:18 - 00170496 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\7d521e583439ddf659b36d5f281ca646\IsdiInterop.ni.dll
2011-01-26 07:18 - 2010-03-04 03:08 - 00058880 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2014-11-11 15:16 - 2014-11-11 15:16 - 03649648 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)


==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Bluetooth.lnk => C:\Windows\pss\Bluetooth.lnk.CommonStartup
MSCONFIG\startupfolder: C:^Users^3vento^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk => C:\Windows\pss\Dropbox.lnk.Startup
MSCONFIG\startupreg: Adobe Reader Speed Launcher => "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
MSCONFIG\startupreg: APSDaemon => "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
MSCONFIG\startupreg: Dell DataSafe Online => C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuClient.exe
MSCONFIG\startupreg: Dell Webcam Central => "C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe" /mode2
MSCONFIG\startupreg: Desktop Disc Tool => "C:\Program Files (x86)\Roxio\oem\Roxio Burn\RoxioBurnLauncher.exe"
MSCONFIG\startupreg: FAStartup => 
MSCONFIG\startupreg: FATrayAlert => C:\Program Files (x86)\Sensible Vision\Fast Access\FATrayMon.exe
MSCONFIG\startupreg: IAStorIcon => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
MSCONFIG\startupreg: iTunesHelper => "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
MSCONFIG\startupreg: QuickSet => C:\Program Files\Dell\QuickSet\QuickSet.exe
MSCONFIG\startupreg: QuickTime Task => "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
MSCONFIG\startupreg: RoxWatchTray => "C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatchTray12OEM.exe"

========================= Accounts: ==========================

3vento (S-1-5-21-1413332742-2020861625-2527278895-1000 - Administrator - Enabled) => C:\Users\3vento
Administrator (S-1-5-21-1413332742-2020861625-2527278895-500 - Administrator - Disabled)
Gast (S-1-5-21-1413332742-2020861625-2527278895-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1413332742-2020861625-2527278895-1002 - Limited - Enabled)

==================== Faulty Device Manager Devices =============

Name: facap, FastAccess Video Capture
Description: facap, FastAccess Video Capture
Class Guid: {6bdd1fc6-810f-11d0-bec7-08002be2092f}
Manufacturer: Sensible Vision
Service: FACAP
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: Officejet Pro 8500 A909g
Description: Officejet Pro 8500 A909g
Class Guid: {4d36e971-e325-11ce-bfc1-08002be10318}
Manufacturer: HP
Service: 
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Application errors:
==================

System errors:
=============

Microsoft Office Sessions:
=========================

CodeIntegrity Errors:
===================================
  Date: 2014-11-28 22:46:28.296
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-11-28 22:46:28.062
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


==================== Memory info =========================== 

Processor: Intel(R) Core(TM) i7 CPU Q 720 @ 1.60GHz
Percentage of memory in use: 42%
Total physical RAM: 4084.5 MB
Available physical RAM: 2336.8 MB
Total Pagefile: 8167.18 MB
Available Pagefile: 5859.08 MB
Total Virtual: 8192 MB
Available Virtual: 8191.85 MB

==================== Drives ================================

Drive c: (OS) (Fixed) (Total:451.07 GB) (Free:311.37 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 465.8 GB) (Disk ID: A089D32C)
Partition 1: (Not Active) - (Size=39 MB) - (Type=DE)
Partition 2: (Active) - (Size=14.6 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=451.1 GB) - (Type=07 NTFS)

==================== End Of Log ============================

Alt 29.11.2014, 00:24   #10
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Windows 7 mit verschiedenen Trojanerdateien - Standard

Windows 7 mit verschiedenen Trojanerdateien


Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:
ATTFilter
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
HKU\S-1-5-21-1413332742-2020861625-2527278895-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
EmptyTemp:
Hosts:

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
  • Starte nun FRST erneut und klicke den Entfernen Button.
  • Das Tool erstellt eine Fixlog.txt.
  • Poste mir deren Inhalt.

__________________
Logfiles bitte immer in CODE-Tags posten

Alt 29.11.2014, 00:34   #11
Iron111
 
Windows 7 mit verschiedenen Trojanerdateien - Standard

Windows 7 mit verschiedenen Trojanerdateien


jetzt wurde ein Neustart durchgeführt und im Avira Pro kann ich den Email Schutz nicht mehr aktivieren

Code:
ATTFilter
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 26-11-2014 01
Ran by 3vento at 2014-11-29 00:30:31 Run:1
Running from C:\Users\3vento\Desktop
Loaded Profile: 3vento (Available profiles: 3vento)
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
HKU\S-1-5-21-1413332742-2020861625-2527278895-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
EmptyTemp:
Hosts:
*****************

"HKLM\SOFTWARE\Policies\Google" => Key deleted successfully.
"HKU\S-1-5-21-1413332742-2020861625-2527278895-1000\SOFTWARE\Policies\Microsoft\Internet Explorer" => Key deleted successfully.
"C:\Windows\System32\Drivers\etc\hosts" => Could not move.
Could not reset Hosts.
EmptyTemp: => Removed 509.3 MB temporary data.


The system needed a reboot. 

==== End of Fixlog ====

Alt 29.11.2014, 14:18   #12
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Windows 7 mit verschiedenen Trojanerdateien - Standard

Windows 7 mit verschiedenen Trojanerdateien


Virenscanner deaktivieren, Fix wiederholen
__________________
Logfiles bitte immer in CODE-Tags posten

Alt 29.11.2014, 17:14   #13
Iron111
 
Windows 7 mit verschiedenen Trojanerdateien - Standard

Windows 7 mit verschiedenen Trojanerdateien


Hallo Cosinus, ich habe eine neue Fixlog erstellt. In Avira wurde nach dem Neustart der Echtzeit-Scanner und der Browser-Schutz automatisch wieder mit aktiviert. DerEmail- Schutz lässt sich weiterhin nicht mehr aktivieren


Code:
ATTFilter
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 26-11-2014 01
Ran by 3vento at 2014-11-29 17:04:57 Run:2
Running from C:\Users\3vento\Desktop
Loaded Profile: 3vento (Available profiles: 3vento)
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
HKU\S-1-5-21-1413332742-2020861625-2527278895-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
EmptyTemp:
Hosts:
*****************

"HKLM\SOFTWARE\Policies\Google" => Key not found.
"HKU\S-1-5-21-1413332742-2020861625-2527278895-1000\SOFTWARE\Policies\Microsoft\Internet Explorer" => Key not found.
C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.
EmptyTemp: => Removed 270.1 MB temporary data.


The system needed a reboot. 

==== End of Fixlog ====

Alt 29.11.2014, 22:02   #14
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Windows 7 mit verschiedenen Trojanerdateien - Standard

Windows 7 mit verschiedenen Trojanerdateien


Avira Free ist für die Tonne. Deinstallieren und MSE (kostenlos) oder Emsisoft (kostenpflichtig) installieren. Und nicht jede Verantwortung auf den Virenscanner abschieben, wenn nicht so viele jeden Mist anklicken täten gäbe es soviele Probleme nicht. Kein Virenscanner kann zuverlässig neue Schädlinge erkennen, gerade solche die per Mail mit virulentem Anhang reinkommen.


Sieht soweit ok aus

Wegen Cookies und anderer Dinge im Web: Um die Pest von vornherein zu blocken (also TrackingCookies, Werbebanner etc.) empfehle ich die Erweiterung Ghostery, diese verhindert weitgehend Usertracking bzw. das Anzeigen von Werbebannern.

Info: Cookies sind keine Schädlinge direkt, aber es besteht die Gefahr der missbräuchlichen Verwendung (eindeutige Wiedererkennung zB für gezielte Werbung o.ä. => HTTP-Cookie )

Ansonsten gibt es noch gute Cookiemanager, Erweiterungen für den Firefox zB wäre da CookieCuller
Wenn du aber damit leben kannst, dich bei jeder Browsersession überall neu einzuloggen (zB Facebook, Ebay, GMX, oder auch Trojaner-Board) dann stell den Browser einfach so ein, dass einfach alles beim Beenden des Browser inkl. Cookies gelöscht wird.

Ist dein System nun wieder in Ordnung oder gibt's noch andere Funde oder Probleme? (abgesehen von Skype)
__________________
Logfiles bitte immer in CODE-Tags posten

Alt 29.11.2014, 23:43   #15
Iron111
 
Windows 7 mit verschiedenen Trojanerdateien - Standard

Windows 7 mit verschiedenen Trojanerdateien


ich wollte nichts auf den Virenscanner schieben. Ich bin eigentlich sehr vorsichtig und nutze Avira Pro als kostenpflichtige Version. Aus meiner Sicht ist das System in Ordnung und hoffe unsere Bank sieht das auch so und lässt uns wieder "rein". Den Email Schutz bekomme ich irgendwie wieder hin. In den Quarantäne von Avira sind noch die Trojaner Dateien. Sind diese einfach zu löschen?

Ich möchte mich bei dir für die professionelle Hilfe bedanken. Danke, war super !

Antwort
Seite 1 von 2 1 2

Themen zu Windows 7 mit verschiedenen Trojanerdateien
antivirus, besten, eingestellt, exp/js.expack.gq, fehlercode 0x0, fehlercode 0xc0000005, fehlercode 22, fehlercode d@01010004, fehlercode windows, sicherung, this device is disabled. (code 22), tr/crypt.xpack.103408, tr/crypt.xpack.104702, tr/crypt.xpack.106857, tr/injector.293376.3, tr/matsnu.lamop.1, trojaner, unternehmen, unterstützung, verschiedene, verschiedenen, windows 7, zugang


« explorer / firefox antwortet nicht ... gehäuft | Kann gewisse Internet Seiten nicht mehr aufrufen »


Ähnliche Themen: Windows 7 mit verschiedenen Trojanerdateien


  1. Bildschirm flimmert in verschiedenen Farben!
    Plagegeister aller Art und deren Bekämpfung - 18.05.2015 (42)
  2. Verbindungsabrüche bei verschiedenen Servicen
    Plagegeister aller Art und deren Bekämpfung - 29.01.2015 (21)
  3. Windows 7 - Beim Starten von Chrome öffnen sich 7 Tabs mit verschiedenen Suchmaschinen
    Log-Analyse und Auswertung - 27.07.2014 (23)
  4. Windows 7: Bluescreen mit verschiedenen Fehlercodes und Eriegnis-IDs
    Log-Analyse und Auswertung - 12.06.2014 (16)
  5. Windows 7: Viele Wörter werden doppelt blau unterstrichen auf verschiedenen Internetseiten
    Log-Analyse und Auswertung - 27.01.2014 (7)
  6. Truecrypt auf verschiedenen Partitionen
    Alles rund um Windows - 06.11.2011 (1)
  7. Probleme mit verschiedenen Funden
    Plagegeister aller Art und deren Bekämpfung - 25.10.2011 (30)
  8. https-Seiten und die verschiedenen Internetbrowser
    Überwachung, Datenschutz und Spam - 12.02.2011 (2)
  9. Fehlermeldung 0xc000007b bei verschiedenen Programmen
    Alles rund um Windows - 05.12.2010 (6)
  10. Probleme mit scheinbar verschiedenen Vieren
    Plagegeister aller Art und deren Bekämpfung - 01.09.2010 (43)
  11. mit verschiedenen Trojanern infiziert (VundoGen etc.)
    Plagegeister aller Art und deren Bekämpfung - 16.05.2008 (35)
  12. Unterschiedliche Ergebnisse bei verschiedenen Virenscannern?
    Antiviren-, Firewall- und andere Schutzprogramme - 31.12.2007 (2)
  13. Problem mit verschiedenen Viren
    Plagegeister aller Art und deren Bekämpfung - 21.05.2007 (8)
  14. Problem mit verschiedenen Viren!
    Plagegeister aller Art und deren Bekämpfung - 23.12.2006 (1)
  15. Befall mit verschiedenen Trojanern!
    Plagegeister aller Art und deren Bekämpfung - 25.04.2006 (8)
  16. Probleme bei der Darstellung von verschiedenen Internetseiten
    Alles rund um Windows - 02.03.2006 (7)
  17. bluescreen mit verschiedenen fehlermeldungen
    Alles rund um Windows - 23.02.2005 (1)
Anleitungen und Tipps

- Für alle Hilfesuchenden! Was beachten?

- Anleitung: MyStartSearch.com entfernen

- Anleitung: WebSearches löschen

- Hilfe: iStartSurf entfernen – so gehts!

- Anleitung: Omiga Plus richtig entfernen

- Browser Viren entfernen


Zum Thema Windows 7 mit verschiedenen Trojanerdateien - Hallo, ich bin neu in dem Forum und auch "nur" ein normaler Anwender. Ich benötige Unterstützung und hoffe ich kann diese hier finden. Meine Bank hat unseren Online Zugang mit - Windows 7 mit verschiedenen Trojanerdateien...
Archiv
Du betrachtest: Windows 7 mit verschiedenen Trojanerdateien auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54