Trojaner-Board
Seite 1 von 2 1 2
100 Beiträge dieses Themas auf einer Seite anzeigen

Trojaner-Board (https://www.trojaner-board.de/)
-   Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)
-   -   Delta Search in Chrome geht nicht mehr weg und Avira meldete 8 Funde (https://www.trojaner-board.de/133542-delta-search-chrome-geht-mehr-weg-avira-meldete-8-funde.html)

twa 11.04.2013 07:09
Delta Search in Chrome geht nicht mehr weg und Avira meldete 8 Funde
 
Hallo,
ich habe seit 3 Tagen in Chrome als Startseite und als Suchfunktion Delta Search.
Ich habe in den Einstellungen bei Chrome Delta Search herausgenommen, dann war die Such auch mit Google und jedesmal wenn ich den Browser öffne, ist wieder Delta Search da.
Dann habe ich in der Systemsteuerung alle Programme (3) welche Delta Search enthielten Deinstalliert.
Gestern habe ich mit Avira einen Scan gemacht, wobei zwar 8 Funde angezeigt wurden,welche aber nichts mit Delta Search zu tun haben.
Dann ist mir aufgefallen, dass bei Avira der Browser Schutz deaktiviert ist und wenn ich auf An drücke, öffnet sich nur das Hilfefenster.
Ich hoffe mir kann jemand helfen.
Danke im voraus.


Zur Info:Habe gerade einen OTL Suchlauf gemacht.

cosinus 11.04.2013 09:43
Hallo und :hallo:

Bevor wir uns an die Arbeit machen, möchte ich dich bitten, folgende Punkte vollständig und aufmerksam zu lesen.
  • Lies dir meine Anleitungen, die ich im Laufe dieses Strangs hier posten werde, aufmerksam durch. Frag umgehend nach, wenn dir irgendetwas unklar sein sollte, bevor du anfängst meine Anleitungen umzusetzen.

  • Solltest du bei einem Schritt Probleme haben, stoppe dort und beschreib mir das Problem so gut du kannst. Manchmal erfordert ein Schritt den vorhergehenden.

  • Bitte nur Scans durchführen zu denen du von einem Helfer aufgefordert wurdest! Installiere / Deinstalliere keine Software ohne Aufforderung!

  • Poste die Logfiles direkt in deinen Thread (bitte in CODE-Tags) und nicht als Anhang, ausser du wurdest dazu aufgefordert. Logs in Anhängen erschweren mir das Auswerten!

  • Die Logs der aufgegebenen Tools wie zB Malwarebytes sind immer zu posten - egal ob ein Fund dabei war oder nicht!

  • Beachte bitte auch => Löschen von Logfiles und andere Anfragen

Note:
Sollte ich drei Tage nichts von mir hören lassen, so melde dich bitte in diesem Strang => Erinnerung an meinem Thread.
Nervige "Wann geht es weiter" Nachrichten enden mit Schließung deines Themas. Auch ich habe ein Leben abseits des Trojaner-Boards.



Rootkitscan mit GMER

Bitte lade dir GMER Rootkit Scanner GMER herunter: (Dateiname zufällig)
  • Schließe alle anderen Programme, deaktiviere deinen Virenscanner und trenne den Rechner vom Internet bevor du GMER startest.
  • Sollte sich nach dem Start ein Fenster mit folgender Warnung öffnen:
    WARNING !!!
    GMER has found system modification, which might have been caused by ROOTKIT activity.
    Do you want to fully scan your system ?
    Unbedingt auf "No" klicken.
  • Entferne rechts den Haken bei: IAT/EAT und Show All
  • Setze den Haken bei Quickscan und entferne ihn bei allen anderen Laufwerken.
  • Starte den Scan mit "Scan".
  • Mache nichts am Computer während der Scan läuft.
  • Wenn der Scan fertig ist klicke auf Save und speichere die Logfile unter Gmer.txt auf deinem Desktop. Mit "Ok" wird GMER beendet.
Antiviren-Programm und sonstige Scanner wieder einschalten, bevor Du ins Netz gehst!


Tauchen Probleme auf?
  • Probiere alternativ den abgesicherten Modus.
  • Erhältst du einen Bluescreen, dann entferne den Haken vor Devices.


Anschließend bitte MBAR ausführen:

Malwarebytes Anti-Rootkit (MBAR)

Downloade dir bitte Malwarebytes Anti-Rootkit Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.
  • Starte bitte die mbar.exe.
  • Folge den Anweisungen auf deinem Bildschirm gemäß Anleitung zu Malwarebytes Anti-Rootkit
  • Aktualisiere unbedingt die Datenbank und erlaube dem Tool, dein System zu scannen.
  • Klicke auf den CleanUp Button und erlaube den Neustart.
  • Während dem Neustart wird MBAR die gefundenen Objekte entfernen, also bleib geduldig.
  • Nach dem Neustart starte die mbar.exe erneut.
  • Sollte nochmal was gefunden werden, wiederhole den CleanUp Prozess.
Das Tool wird im erstellten Ordner eine Logfile ( mbar-log-<Jahr-Monat-Tag>.txt ) erzeugen. Bitte poste diese hier.

Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers

twa 11.04.2013 13:38
der mbar scan (wollte kein Neustart):
Code:
Malwarebytes Anti-Rootkit BETA 1.01.0.1022
www.malwarebytes.org

Database version: v2013.03.21.13

Windows 7 Service Pack 1 x86 NTFS
Internet Explorer 9.0.8112.16421
Admin :: *****-PC [administrator]

11.04.2013 13:32:59
mbar-log-2013-04-11 (13-32-59).txt

Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM | P2P
Scan options disabled:
Objects scanned: 28943
Time elapsed: 32 minute(s), 27 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

(end)
und der gmer scan:

Code:
GMER 2.1.19163 - hxxp://www.gmer.net
Rootkit scan 2013-04-11 12:44:54
Windows 6.1.7601 Service Pack 1 \Device\Harddisk0\DR0 -> \Device\0000006c WDC_WD32 rev.01.0 298,09GB
Running: gmer_2.1.19163.exe; Driver: C:\Users\Admin\AppData\Local\Temp\ugloqpow.sys


---- System - GMER 2.1 ----

SSDT            8454DAA0                                                                                                ZwCreateKey
SSDT            844D1A00                                                                                                ZwCreateMutant
SSDT            8454C5A0                                                                                                ZwCreateProcess
SSDT            8454C8A0                                                                                                ZwCreateProcessEx
SSDT            8C2C8076                                                                                                ZwCreateSection
SSDT            844D1DC0                                                                                                ZwCreateSymbolicLinkObject
SSDT            844D1340                                                                                                ZwCreateThread
SSDT            844D1520                                                                                                ZwCreateThreadEx
SSDT            8454CBA0                                                                                                ZwCreateUserProcess
SSDT            8454E0A0                                                                                                ZwDeleteKey
SSDT            8454E9A0                                                                                                ZwDeleteValueKey
SSDT            844D1FA0                                                                                                ZwDuplicateObject
SSDT            844D1700                                                                                                ZwLoadDriver
SSDT            8454CEA0                                                                                                ZwOpenProcess
SSDT            8454EF80                                                                                                ZwOpenSection
SSDT            8454D1A0                                                                                                ZwOpenThread
SSDT            8454E3A0                                                                                                ZwRenameKey
SSDT            8C2C8080                                                                                                ZwRequestWaitReplyPort
SSDT            8454E6A0                                                                                                ZwRestoreKey
SSDT            8C2C807B                                                                                                ZwSetContextThread
SSDT            8C2C8085                                                                                                ZwSetSecurityObject
SSDT            844D1BE0                                                                                                ZwSetSystemInformation
SSDT            8454DDA0                                                                                                ZwSetValueKey
SSDT            8C2C808A                                                                                                ZwSystemDebugControl
SSDT            8C2C8017                                                                                                ZwTerminateProcess
SSDT            8454D7A0                                                                                                ZwTerminateThread
SSDT            844D1160                                                                                                ZwWriteVirtualMemory

---- Kernel code sections - GMER 2.1 ----

.text          ntkrnlpa.exe!ZwRollbackEnlistment + 140D                                                                81E889E9 1 Byte  [06]
.text          ntkrnlpa.exe!KiDispatchInterrupt + 5A2                                                                  81EC21C2 19 Bytes  [E0, 0F, BA, F0, 07, 73, 09, ...] {LOOPNZ 0x11; MOV EDX, 0x97307f0; MOV CR4, EAX; OR AL, 0x80; MOV CR4, EAX; RET ; MOV ECX, CR3}
.text          ntkrnlpa.exe!KeRemoveQueueEx + 11BF                                                                      81EC92D4 4 Bytes  [A0, DA, 54, 84]
.text          ntkrnlpa.exe!KeRemoveQueueEx + 11CF                                                                      81EC92E4 4 Bytes  [00, 1A, 4D, 84]
.text          ntkrnlpa.exe!KeRemoveQueueEx + 11E3                                                                      81EC92F8 8 Bytes  [A0, C5, 54, 84, A0, C8, 54, ...]
.text          ntkrnlpa.exe!KeRemoveQueueEx + 11F7                                                                      81EC930C 4 Bytes  [76, 80, 2C, 8C] {JBE 0xffffff82; SUB AL, 0x8c}
.text          ntkrnlpa.exe!KeRemoveQueueEx + 11FF                                                                      81EC9314 12 Bytes  [C0, 1D, 4D, 84, 40, 13, 4D, ...]
.text          ...                                                                                                     
.text          C:\windows\system32\DRIVERS\atikmdag.sys                                                                section is writeable [0x8CE39000, 0x38EBB5, 0xE8000020]

---- User code sections - GMER 2.1 ----

.text          C:\windows\system32\schtasks.exe[116] USER32.dll!DialogBoxParamW                                        76683B9B 5 Bytes  JMP 752B4620 c:\progra~2\browse~1\261125~1.80\{c16c1~1\browse~1.dll
.text          C:\Program Files\Microsoft\BingBar\SeaPort.EXE[324] USER32.dll!DialogBoxParamW                          76683B9B 5 Bytes  JMP 752B4620 c:\progra~2\browse~1\261125~1.80\{c16c1~1\browse~1.dll
.text          C:\Program Files\Microsoft Application Virtualization Client\sftvsa.exe[388] USER32.dll!DialogBoxParamW  76683B9B 5 Bytes  JMP 752B4620 c:\progra~2\browse~1\261125~1.80\{c16c1~1\browse~1.dll
.text          C:\windows\system32\wininit.exe[508] USER32.dll!DialogBoxParamW                                          76683B9B 5 Bytes  JMP 752B4620 c:\progra~2\browse~1\261125~1.80\{c16c1~1\browse~1.dll
.text          C:\windows\system32\conhost.exe[556] USER32.dll!DialogBoxParamW                                          76683B9B 5 Bytes  JMP 752B4620 c:\progra~2\browse~1\261125~1.80\{c16c1~1\browse~1.dll
.text          ...                                                                                                     

---- Devices - GMER 2.1 ----

AttachedDevice  \Driver\tdx \Device\Tcp                                                                                  tmtdi.sys
AttachedDevice  \Driver\tdx \Device\Udp                                                                                  tmtdi.sys
AttachedDevice  \FileSystem\fastfat \Fat                                                                                fltmgr.sys

---- Registry - GMER 2.1 ----

Reg            HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\0025d3b2962e                             
Reg            HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\74f06defd953                             
Reg            HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Epoch@Epoch                                          2619
Reg            HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Epoch2@Epoch                                        3342
Reg            HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\0025d3b2962e (not active ControlSet)         
Reg            HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\74f06defd953 (not active ControlSet)         

---- EOF - GMER 2.1 ----

cosinus 11.04.2013 14:00
aswMBR

Downloade dir bitte aswMBR.exe und speichere die Datei auf deinem Desktop.
  • Starte die aswMBR.exe - (aswMBR.exe Anleitung)
    Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten".
  • Das Tool wird dich fragen, ob Du mit der aktuellen Virendefinition von AVAST! dein System scannen willst. Beantworte diese Frage bitte mit Ja. (Sollte deine Firewall fragen, bitte den Zugriff auf das Internet zulassen )
    Der Download der Definitionen kann je nach Verbindung eine Weile dauern.
  • Klicke auf Scan.
  • Warte bitte bis Scan finished successfully im DOS-Fenster steht.
  • Drücke auf Save Log und speichere diese auf dem Desktop.
Poste mir die aswMBR.txt in deiner nächsten Antwort.

Wichtig: Drücke keinesfalls einen der Fix Buttons ohne Anweisung

Hinweis: Sollte der Scan Button ausgeblendet sein, schließe das Tool und starte es erneut. Sollte der Scan abbrechen und das Programm abstürzen, dann teile mir das mit und wähle unter AV Scan die Einstellung (none).




TDSS-Killer

Downloade dir bitte TDSSKiller TDSSKiller.exe und speichere diese Datei auf dem Desktop
  • Starte die TDSSKiller.exe - Einstellen wie in der Anleitung zu TDSSKiller beschrieben.
  • Drücke Start Scan
  • Sollten infizierte Objekte gefunden werden, wähle keinesfalls Cure. Wähle Skip und klicke auf Continue.
    TDSSKiller wird eine Logfile auf deinem Systemlaufwerk speichern (Meistens C:\)
    Als Beispiel: C:\TDSSKiller.<Version_Datum_Uhrzeit>log.txt
Poste den Inhalt bitte in jedem Fall hier in deinen Thread.

twa 11.04.2013 14:56
Der Kaspersky scan:
Code:
15:30:02.0903 9024  TDSS rootkit removing tool 2.8.16.0 Feb 11 2013 18:50:42
15:30:04.0705 9024  ============================================================
15:30:04.0705 9024  Current date / time: 2013/04/11 15:30:04.0705
15:30:04.0705 9024  SystemInfo:
15:30:04.0706 9024 
15:30:04.0706 9024  OS Version: 6.1.7601 ServicePack: 1.0
15:30:04.0706 9024  Product type: Workstation
15:30:04.0707 9024  ComputerName: KITTE-PC
15:30:04.0707 9024  UserName: Admin
15:30:04.0707 9024  Windows directory: C:\windows
15:30:04.0707 9024  System windows directory: C:\windows
15:30:04.0707 9024  Processor architecture: Intel x86
15:30:04.0708 9024  Number of processors: 2
15:30:04.0708 9024  Page size: 0x1000
15:30:04.0708 9024  Boot type: Normal boot
15:30:04.0708 9024  ============================================================
15:30:08.0911 9024  Drive \Device\Harddisk0\DR0 - Size: 0x4A85D56000 (298.09 Gb), SectorSize: 0x200, Cylinders: 0x9801, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050
15:30:08.0973 9024  ============================================================
15:30:08.0973 9024  \Device\Harddisk0\DR0:
15:30:08.0994 9024  MBR partitions:
15:30:08.0994 9024  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0xC800000
15:30:08.0994 9024  \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0xE600800, BlocksNum 0x16E26000
15:30:08.0994 9024  ============================================================
15:30:09.0170 9024  C: <-> \Device\Harddisk0\DR0\Partition1
15:30:09.0457 9024  D: <-> \Device\Harddisk0\DR0\Partition2
15:30:09.0488 9024  ============================================================
15:30:09.0488 9024  Initialize success
15:30:09.0488 9024  ============================================================
15:51:42.0880 8576  ============================================================
15:51:42.0896 8576  Scan started
15:51:42.0896 8576  Mode: Manual; SigCheck; TDLFS;
15:51:42.0896 8576  ============================================================
15:51:44.0050 8576  ================ Scan system memory ========================
15:51:44.0066 8576  System memory - ok
15:51:44.0066 8576  ================ Scan services =============================
15:51:44.0690 8576  [ 1B133875B8AA8AC48969BD3458AFE9F5 ] 1394ohci        C:\windows\system32\drivers\1394ohci.sys
15:51:45.0579 8576  1394ohci - ok
15:51:45.0610 8576  [ CEA80C80BED809AA0DA6FEBC04733349 ] ACPI            C:\windows\system32\drivers\ACPI.sys
15:51:45.0704 8576  ACPI - ok
15:51:45.0719 8576  [ 1EFBC664ABFF416D1D07DB115DCB264F ] AcpiPmi        C:\windows\system32\drivers\acpipmi.sys
15:51:45.0922 8576  AcpiPmi - ok
15:51:45.0969 8576  [ 21E785EBD7DC90A06391141AAC7892FB ] adp94xx        C:\windows\system32\drivers\adp94xx.sys
15:51:46.0063 8576  adp94xx - ok
15:51:46.0094 8576  [ 0C676BC278D5B59FF5ABD57BBE9123F2 ] adpahci        C:\windows\system32\drivers\adpahci.sys
15:51:46.0172 8576  adpahci - ok
15:51:46.0203 8576  [ 7C7B5EE4B7B822EC85321FE23A27DB33 ] adpu320        C:\windows\system32\drivers\adpu320.sys
15:51:46.0265 8576  adpu320 - ok
15:51:46.0343 8576  [ 8B5EEFEEC1E6D1A72A06C526628AD161 ] AeLookupSvc    C:\windows\System32\aelupsvc.dll
15:51:46.0609 8576  AeLookupSvc - ok
15:51:46.0655 8576  [ 9EBBBA55060F786F0FCAA3893BFA2806 ] AFD            C:\windows\system32\drivers\afd.sys
15:51:46.0843 8576  AFD - ok
15:51:46.0874 8576  [ 507812C3054C21CEF746B6EE3D04DD6E ] agp440          C:\windows\system32\drivers\agp440.sys
15:51:46.0936 8576  agp440 - ok
15:51:46.0967 8576  [ 8B30250D573A8F6B4BD23195160D8707 ] aic78xx        C:\windows\system32\drivers\djsvs.sys
15:51:47.0045 8576  aic78xx - ok
15:51:47.0092 8576  [ 18A54E132947CD98FEA9ACCC57F98F13 ] ALG            C:\windows\System32\alg.exe
15:51:47.0217 8576  ALG - ok
15:51:47.0248 8576  [ 0D40BCF52EA90FC7DF2AEAB6503DEA44 ] aliide          C:\windows\system32\drivers\aliide.sys
15:51:47.0326 8576  aliide - ok
15:51:47.0357 8576  [ 9889E00DBADD49BC874B0355C5624775 ] AMD External Events Utility C:\windows\system32\atiesrxx.exe
15:51:47.0513 8576  AMD External Events Utility - ok
15:51:47.0638 8576  AMD FUEL Service - ok
15:51:47.0669 8576  [ 3C6600A0696E90A463771C7422E23AB5 ] amdagp          C:\windows\system32\drivers\amdagp.sys
15:51:47.0747 8576  amdagp - ok
15:51:47.0794 8576  [ CD5914170297126B6266860198D1D4F0 ] amdide          C:\windows\system32\drivers\amdide.sys
15:51:47.0857 8576  amdide - ok
15:51:47.0888 8576  [ FF258424F0B2EF25EB98F04EE386E6E3 ] amdiox86        C:\windows\system32\DRIVERS\amdiox86.sys
15:51:48.0075 8576  amdiox86 - ok
15:51:48.0106 8576  [ 00DDA200D71BAC534BF56A9DB5DFD666 ] AmdK8          C:\windows\system32\drivers\amdk8.sys
15:51:48.0231 8576  AmdK8 - ok
15:51:48.0481 8576  [ AD6857E2C29111173638CA90F4661262 ] amdkmdag        C:\windows\system32\DRIVERS\atikmdag.sys
15:51:48.0949 8576  amdkmdag - ok
15:51:48.0980 8576  [ 42DA025FF562418897BE7E437AF56C81 ] amdkmdap        C:\windows\system32\DRIVERS\atikmpag.sys
15:51:49.0073 8576  amdkmdap - ok
15:51:49.0120 8576  [ 3CBF30F5370FDA40DD3E87DF38EA53B6 ] AmdPPM          C:\windows\system32\DRIVERS\amdppm.sys
15:51:49.0229 8576  AmdPPM - ok
15:51:49.0261 8576  [ D320BF87125326F996D4904FE24300FC ] amdsata        C:\windows\system32\drivers\amdsata.sys
15:51:49.0323 8576  amdsata - ok
15:51:49.0354 8576  [ EA43AF0C423FF267355F74E7A53BDABA ] amdsbs          C:\windows\system32\drivers\amdsbs.sys
15:51:49.0417 8576  amdsbs - ok
15:51:49.0432 8576  [ 46387FB17B086D16DEA267D5BE23A2F2 ] amdxata        C:\windows\system32\drivers\amdxata.sys
15:51:49.0510 8576  amdxata - ok
15:51:49.0526 8576  [ B6CD4BD087CED9B4B6AACF429B1DE625 ] amd_sata        C:\windows\system32\drivers\amd_sata.sys
15:51:49.0588 8576  amd_sata - ok
15:51:49.0604 8576  [ 6ACEDE4ABB94F9F82A4F6D436FEADAA0 ] amd_xata        C:\windows\system32\drivers\amd_xata.sys
15:51:49.0682 8576  amd_xata - ok
15:51:49.0807 8576  [ 6EAC742B758E110DD12EBC8446C07B6C ] Amsp            C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe
15:51:49.0869 8576  Amsp - ok
15:51:50.0087 8576  [ D9A92E6DD41C5ADC045AE485026AA40C ] AntiVirSchedulerService C:\Program Files\Avira\AntiVir Desktop\sched.exe
15:51:50.0197 8576  AntiVirSchedulerService - ok
15:51:50.0259 8576  [ 66A7A38F7C439153B758548375EB9E5E ] AntiVirService  C:\Program Files\Avira\AntiVir Desktop\avguard.exe
15:51:50.0321 8576  AntiVirService - ok
15:51:50.0368 8576  [ 5A123AABB571AEA78AE63AF5E372F796 ] AntiVirWebService C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE
15:51:50.0509 8576  AntiVirWebService - ok
15:51:50.0540 8576  [ AEA177F783E20150ACE5383EE368DA19 ] AppID          C:\windows\system32\drivers\appid.sys
15:51:50.0696 8576  AppID - ok
15:51:50.0727 8576  [ 62A9C86CB6085E20DB4823E4E97826F5 ] AppIDSvc        C:\windows\System32\appidsvc.dll
15:51:50.0867 8576  AppIDSvc - ok
15:51:50.0899 8576  [ FB1959012294D6AD43E5304DF65E3C26 ] Appinfo        C:\windows\System32\appinfo.dll
15:51:51.0039 8576  Appinfo - ok
15:51:51.0242 8576  [ 4FE5C6D40664AE07BE5105874357D2ED ] Apple Mobile Device C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
15:51:51.0320 8576  Apple Mobile Device - ok
15:51:51.0367 8576  [ 2932004F49677BD84DBC72EDB754FFB3 ] arc            C:\windows\system32\drivers\arc.sys
15:51:51.0429 8576  arc - ok
15:51:51.0460 8576  [ 5D6F36C46FD283AE1B57BD2E9FEB0BC7 ] arcsas          C:\windows\system32\drivers\arcsas.sys
15:51:51.0523 8576  arcsas - ok
15:51:51.0585 8576  [ 956C7177DBDA0F02436868AD644CCF31 ] AsIO            C:\windows\system32\drivers\AsIO.sys
15:51:51.0632 8576  AsIO - ok
15:51:51.0663 8576  [ A9A565C669786C402752F609AFDD0DD5 ] AsUpIO          C:\windows\system32\drivers\AsUpIO.sys
15:51:51.0710 8576  AsUpIO - ok
15:51:51.0757 8576  [ 0CC5D45987A29D5F2806F4C344ACEA75 ] ASUS InstantOn  C:\Program Files\Common Files\InstantOn\InsOnSrv.exe
15:51:51.0819 8576  ASUS InstantOn - ok
15:51:51.0866 8576  [ 689CA2A0C7ABA6C091FEEEE9439C83DB ] AsusService    C:\windows\system32\AsusService.exe
15:51:51.0975 8576  AsusService - ok
15:51:51.0991 8576  [ ADD2ADE1C2B285AB8378D2DAAF991481 ] AsyncMac        C:\windows\system32\DRIVERS\asyncmac.sys
15:51:52.0225 8576  AsyncMac - ok
15:51:52.0271 8576  [ 338C86357871C167A96AB976519BF59E ] atapi          C:\windows\system32\drivers\atapi.sys
15:51:52.0334 8576  atapi - ok
15:51:52.0412 8576  [ 6A661D017C4E5CD313F6A55ACF1D7465 ] athr            C:\windows\system32\DRIVERS\athr.sys
15:51:52.0615 8576  athr - ok
15:51:52.0661 8576  [ 95B1E9804CA10D096C0383F7C6684950 ] AtiHDAudioService C:\windows\system32\drivers\AtihdW73.sys
15:51:52.0724 8576  AtiHDAudioService - ok
15:51:52.0802 8576  [ CE3B4E731638D2EF62FCB419BE0D39F0 ] AudioEndpointBuilder C:\windows\System32\Audiosrv.dll
15:51:52.0958 8576  AudioEndpointBuilder - ok
15:51:52.0989 8576  [ CE3B4E731638D2EF62FCB419BE0D39F0 ] Audiosrv        C:\windows\System32\Audiosrv.dll
15:51:53.0129 8576  Audiosrv - ok
15:51:53.0176 8576  [ 87425709A251386064C99B684BF96F72 ] avgntflt        C:\windows\system32\DRIVERS\avgntflt.sys
15:51:53.0239 8576  avgntflt - ok
15:51:53.0301 8576  [ D50FBA68163BC498F2C136E0E5BA8E2F ] avipbb          C:\windows\system32\DRIVERS\avipbb.sys
15:51:53.0363 8576  avipbb - ok
15:51:53.0410 8576  [ CB8741CD7B126499FED40C9B197F6AC5 ] avkmgr          C:\windows\system32\DRIVERS\avkmgr.sys
15:51:53.0473 8576  avkmgr - ok
15:51:53.0519 8576  [ 6E30D02AAC9CAC84F421622E3A2F6178 ] AxInstSV        C:\windows\System32\AxInstSV.dll
15:51:53.0722 8576  AxInstSV - ok
15:51:53.0785 8576  [ 1A231ABEC60FD316EC54C66715543CEC ] b06bdrv        C:\windows\system32\drivers\bxvbdx.sys
15:51:53.0972 8576  b06bdrv - ok
15:51:54.0003 8576  [ BD8869EB9CDE6BBE4508D869929869EE ] b57nd60x        C:\windows\system32\DRIVERS\b57nd60x.sys
15:51:54.0097 8576  b57nd60x - ok
15:51:54.0175 8576  [ 93EE7D9C35AE7E9FFDA148D7805F1421 ] BBSvc          C:\Program Files\Microsoft\BingBar\BBSvc.EXE
15:51:54.0253 8576  BBSvc - ok
15:51:54.0299 8576  [ EE1E9C3BB8228AE423DD38DB69128E71 ] BDESVC          C:\windows\System32\bdesvc.dll
15:51:54.0471 8576  BDESVC - ok
15:51:54.0518 8576  [ 505506526A9D467307B3C393DEDAF858 ] Beep            C:\windows\system32\drivers\Beep.sys
15:51:54.0658 8576  Beep - ok
15:51:54.0705 8576  [ 1E2BAC209D184BB851E1A187D8A29136 ] BFE            C:\windows\System32\bfe.dll
15:51:54.0861 8576  BFE - ok
15:51:54.0923 8576  [ E585445D5021971FAE10393F0F1C3961 ] BITS            C:\windows\System32\qmgr.dll
15:51:55.0095 8576  BITS - ok
15:51:55.0111 8576  [ 2287078ED48FCFC477B05B20CF38F36F ] blbdrive        C:\windows\system32\DRIVERS\blbdrive.sys
15:51:55.0204 8576  blbdrive - ok
15:51:55.0282 8576  [ DB5BEA73EDAF19AC68B2C0FAD0F92B1A ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe
15:51:55.0360 8576  Bonjour Service - ok
15:51:55.0376 8576  [ 8F2DA3028D5FCBD1A060A3DE64CD6506 ] bowser          C:\windows\system32\DRIVERS\bowser.sys
15:51:55.0516 8576  bowser - ok
15:51:55.0547 8576  [ 9F9ACC7F7CCDE8A15C282D3F88B43309 ] BrFiltLo        C:\windows\system32\drivers\BrFiltLo.sys
15:51:55.0688 8576  BrFiltLo - ok
15:51:55.0719 8576  [ 56801AD62213A41F6497F96DEE83755A ] BrFiltUp        C:\windows\system32\drivers\BrFiltUp.sys
15:51:55.0828 8576  BrFiltUp - ok
15:51:55.0891 8576  [ 3DAA727B5B0A45039B0E1C9A211B8400 ] Browser        C:\windows\System32\browser.dll
15:51:56.0047 8576  Browser - ok
15:51:56.0249 8576  [ BB13432FA552AFCE8A66BCB5EE85F652 ] BrowserProtect  C:\ProgramData\BrowserProtect\2.6.1125.80\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.exe
15:51:56.0468 8576  BrowserProtect - ok
15:51:56.0515 8576  [ 845B8CE732E67F3B4133164868C666EA ] Brserid        C:\windows\System32\Drivers\Brserid.sys
15:51:56.0655 8576  Brserid - ok
15:51:56.0671 8576  [ 203F0B1E73ADADBBB7B7B1FABD901F6B ] BrSerWdm        C:\windows\System32\Drivers\BrSerWdm.sys
15:51:56.0780 8576  BrSerWdm - ok
15:51:56.0795 8576  [ BD456606156BA17E60A04E18016AE54B ] BrUsbMdm        C:\windows\System32\Drivers\BrUsbMdm.sys
15:51:56.0889 8576  BrUsbMdm - ok
15:51:56.0905 8576  [ AF72ED54503F717A43268B3CC5FAEC2E ] BrUsbSer        C:\windows\System32\Drivers\BrUsbSer.sys
15:51:57.0029 8576  BrUsbSer - ok
15:51:57.0092 8576  [ 2865A5C8E98C70C605F417908CEBB3A4 ] BthEnum        C:\windows\system32\drivers\BthEnum.sys
15:51:57.0295 8576  BthEnum - ok
15:51:57.0357 8576  [ ED3DF7C56CE0084EB2034432FC56565A ] BTHMODEM        C:\windows\system32\drivers\bthmodem.sys
15:51:57.0466 8576  BTHMODEM - ok
15:51:57.0482 8576  [ AD1872E5829E8A2C3B5B4B641C3EAB0E ] BthPan          C:\windows\system32\DRIVERS\bthpan.sys
15:51:57.0591 8576  BthPan - ok
15:51:57.0653 8576  [ 1153DE2E4F5941E10C399CB5592F78A1 ] BTHPORT        C:\windows\System32\Drivers\BTHport.sys
15:51:57.0794 8576  BTHPORT - ok
15:51:57.0856 8576  [ 1DF19C96EEF6C29D1C3E1A8678E07190 ] bthserv        C:\windows\system32\bthserv.dll
15:51:58.0012 8576  bthserv - ok
15:51:58.0043 8576  [ C81E9413A25A439F436B1D4B6A0CF9E9 ] BTHUSB          C:\windows\System32\Drivers\BTHUSB.sys
15:51:58.0137 8576  BTHUSB - ok
15:51:58.0199 8576  [ 77EA11B065E0A8AB902D78145CA51E10 ] cdfs            C:\windows\system32\DRIVERS\cdfs.sys
15:51:58.0324 8576  cdfs - ok
15:51:58.0371 8576  [ BE167ED0FDB9C1FA1133953C18D5A6C9 ] cdrom          C:\windows\system32\drivers\cdrom.sys
15:51:58.0465 8576  cdrom - ok
15:51:58.0496 8576  [ 319C6B309773D063541D01DF8AC6F55F ] CertPropSvc    C:\windows\System32\certprop.dll
15:51:58.0636 8576  CertPropSvc - ok
15:51:58.0652 8576  [ 3FE3FE94A34DF6FB06E6418D0F6A0060 ] circlass        C:\windows\system32\drivers\circlass.sys
15:51:58.0761 8576  circlass - ok
15:51:58.0808 8576  [ 635181E0E9BBF16871BF5380D71DB02D ] CLFS            C:\windows\system32\CLFS.sys
15:51:58.0886 8576  CLFS - ok
15:51:59.0073 8576  [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
15:51:59.0135 8576  clr_optimization_v2.0.50727_32 - ok
15:51:59.0354 8576  [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
15:51:59.0479 8576  clr_optimization_v4.0.30319_32 - ok
15:51:59.0525 8576  [ DEA805815E587DAD1DD2C502220B5616 ] CmBatt          C:\windows\system32\DRIVERS\CmBatt.sys
15:51:59.0619 8576  CmBatt - ok
15:51:59.0635 8576  [ C537B1DB64D495B9B4717B4D6D9EDBF2 ] cmdide          C:\windows\system32\drivers\cmdide.sys
15:51:59.0697 8576  cmdide - ok
15:51:59.0759 8576  [ 247B4CE2DAB1160CD422D532D5241E1F ] CNG            C:\windows\system32\Drivers\cng.sys
15:51:59.0915 8576  CNG - ok
15:51:59.0947 8576  [ A6023D3823C37043986713F118A89BEE ] Compbatt        C:\windows\system32\drivers\compbatt.sys
15:52:00.0009 8576  Compbatt - ok
15:52:00.0040 8576  [ CBE8C58A8579CFE5FCCF809E6F114E89 ] CompositeBus    C:\windows\system32\DRIVERS\CompositeBus.sys
15:52:00.0134 8576  CompositeBus - ok
15:52:00.0165 8576  COMSysApp - ok
15:52:00.0181 8576  [ 2C4EBCFC84A9B44F209DFF6C6E6C61D1 ] crcdisk        C:\windows\system32\drivers\crcdisk.sys
15:52:00.0259 8576  crcdisk - ok
15:52:00.0321 8576  [ 96C0E38905CFD788313BE8E11DAE3F2F ] CryptSvc        C:\windows\system32\cryptsvc.dll
15:52:00.0461 8576  CryptSvc - ok
15:52:00.0602 8576  [ 72794D112CBAFF3BC0C29BF7350D4741 ] cvhsvc          C:\Program Files\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
15:52:00.0727 8576  cvhsvc - ok
15:52:00.0773 8576  [ 7660F01D3B38ACA1747E397D21D790AF ] DcomLaunch      C:\windows\system32\rpcss.dll
15:52:00.0945 8576  DcomLaunch - ok
15:52:00.0992 8576  [ 8D6E10A2D9A5EED59562D9B82CF804E1 ] defragsvc      C:\windows\System32\defragsvc.dll
15:52:01.0148 8576  defragsvc - ok
15:52:01.0195 8576  [ F024449C97EC1E464AAFFDA18593DB88 ] DfsC            C:\windows\system32\Drivers\dfsc.sys
15:52:01.0366 8576  DfsC - ok
15:52:01.0429 8576  [ E9E01EB683C132F7FA27CD607B8A2B63 ] Dhcp            C:\windows\system32\dhcpcore.dll
15:52:01.0600 8576  Dhcp - ok
15:52:01.0616 8576  [ 1A050B0274BFB3890703D490F330C0DA ] discache        C:\windows\system32\drivers\discache.sys
15:52:01.0756 8576  discache - ok
15:52:01.0787 8576  [ 565003F326F99802E68CA78F2A68E9FF ] Disk            C:\windows\system32\drivers\disk.sys
15:52:01.0865 8576  Disk - ok
15:52:01.0897 8576  [ 33EF4861F19A0736B11314AAD9AE28D0 ] Dnscache        C:\windows\System32\dnsrslvr.dll
15:52:02.0037 8576  Dnscache - ok
15:52:02.0084 8576  [ 366BA8FB4B7BB7435E3B9EACB3843F67 ] dot3svc        C:\windows\System32\dot3svc.dll
15:52:02.0240 8576  dot3svc - ok
15:52:02.0287 8576  [ 8EC04CA86F1D68DA9E11952EB85973D6 ] DPS            C:\windows\system32\dps.dll
15:52:02.0427 8576  DPS - ok
15:52:02.0458 8576  [ B918E7C5F9BF77202F89E1A9539F2EB4 ] drmkaud        C:\windows\system32\drivers\drmkaud.sys
15:52:02.0552 8576  drmkaud - ok
15:52:02.0583 8576  [ 23F5D28378A160352BA8F817BD8C71CB ] DXGKrnl        C:\windows\System32\drivers\dxgkrnl.sys
15:52:02.0692 8576  DXGKrnl - ok
15:52:02.0739 8576  [ 8600142FA91C1B96367D3300AD0F3F3A ] EapHost        C:\windows\System32\eapsvc.dll
15:52:02.0879 8576  EapHost - ok
15:52:03.0004 8576  [ 024E1B5CAC09731E4D868E64DBFB4AB0 ] ebdrv          C:\windows\system32\drivers\evbdx.sys
15:52:03.0238 8576  ebdrv - ok
15:52:03.0285 8576  [ 81951F51E318AECC2D68559E47485CC4 ] EFS            C:\windows\System32\lsass.exe
15:52:03.0441 8576  EFS - ok
15:52:03.0519 8576  [ 0ED67910C8C326796FAA00B2BF6D9D3C ] elxstor        C:\windows\system32\drivers\elxstor.sys
15:52:03.0613 8576  elxstor - ok
15:52:03.0628 8576  [ 8FC3208352DD3912C94367A206AB3F11 ] ErrDev          C:\windows\system32\drivers\errdev.sys
15:52:03.0706 8576  ErrDev - ok
15:52:03.0784 8576  [ 907C561D5F01133F247E4E2E74E20E30 ] ETD            C:\windows\system32\DRIVERS\ETD.sys
15:52:03.0893 8576  ETD - ok
15:52:03.0971 8576  [ F6916EFC29D9953D5D0DF06882AE8E16 ] EventSystem    C:\windows\system32\es.dll
15:52:04.0096 8576  EventSystem - ok
15:52:04.0127 8576  [ 2DC9108D74081149CC8B651D3A26207F ] exfat          C:\windows\system32\drivers\exfat.sys
15:52:04.0283 8576  exfat - ok
15:52:04.0299 8576  [ 7E0AB74553476622FB6AE36F73D97D35 ] fastfat        C:\windows\system32\drivers\fastfat.sys
15:52:04.0439 8576  fastfat - ok
15:52:04.0517 8576  [ 967EA5B213E9984CBE270205DF37755B ] Fax            C:\windows\system32\fxssvc.exe
15:52:04.0705 8576  Fax - ok
15:52:04.0736 8576  [ E817A017F82DF2A1F8CFDBDA29388B29 ] fdc            C:\windows\system32\drivers\fdc.sys
15:52:04.0845 8576  fdc - ok
15:52:04.0907 8576  [ F3222C893BD2F5821A0179E5C71E88FB ] fdPHost        C:\windows\system32\fdPHost.dll
15:52:05.0048 8576  fdPHost - ok
15:52:05.0063 8576  [ 7DBE8CBFE79EFBDEB98C9FB08D3A9A5B ] FDResPub        C:\windows\system32\fdrespub.dll
15:52:05.0204 8576  FDResPub - ok
15:52:05.0219 8576  [ 6CF00369C97F3CF563BE99BE983D13D8 ] FileInfo        C:\windows\system32\drivers\fileinfo.sys
15:52:05.0297 8576  FileInfo - ok
15:52:05.0313 8576  [ 42C51DC94C91DA21CB9196EB64C45DB9 ] Filetrace      C:\windows\system32\drivers\filetrace.sys
15:52:05.0438 8576  Filetrace - ok
15:52:05.0469 8576  [ 87907AA70CB3C56600F1C2FB8841579B ] flpydisk        C:\windows\system32\drivers\flpydisk.sys
15:52:05.0563 8576  flpydisk - ok
15:52:05.0578 8576  [ 7520EC808E0C35E0EE6F841294316653 ] FltMgr          C:\windows\system32\drivers\fltmgr.sys
15:52:05.0656 8576  FltMgr - ok
15:52:05.0703 8576  [ B3A5EC6B6B6673DB7E87C2BCDBDDC074 ] FontCache      C:\windows\system32\FntCache.dll
15:52:05.0906 8576  FontCache - ok
15:52:05.0984 8576  [ E56F39F6B7FDA0AC77A79B0FD3DE1A2F ] FontCache3.0.0.0 C:\windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
15:52:06.0031 8576  FontCache3.0.0.0 - ok
15:52:06.0077 8576  [ 1A16B57943853E598CFF37FE2B8CBF1D ] FsDepends      C:\windows\system32\drivers\FsDepends.sys
15:52:06.0140 8576  FsDepends - ok
15:52:06.0171 8576  [ BFAAA92861526BB0ADCD01E964AB6609 ] fssfltr        C:\windows\system32\DRIVERS\fssfltr.sys
15:52:06.0233 8576  fssfltr - ok
15:52:06.0311 8576  [ 40CDFAD174B3D5E80F95DDA003C0B97F ] fsssvc          C:\Program Files\Windows Live\Family Safety\fsssvc.exe
15:52:06.0483 8576  fsssvc - ok
15:52:06.0530 8576  [ 7DAE5EBCC80E45D3253F4923DC424D05 ] Fs_Rec          C:\windows\system32\drivers\Fs_Rec.sys
15:52:06.0592 8576  Fs_Rec - ok
15:52:06.0655 8576  [ E306A24D9694C724FA2491278BF50FDB ] fvevol          C:\windows\system32\DRIVERS\fvevol.sys
15:52:06.0764 8576  fvevol - ok
15:52:06.0811 8576  [ 65EE0C7A58B65E74AE05637418153938 ] gagp30kx        C:\windows\system32\drivers\gagp30kx.sys
15:52:06.0873 8576  gagp30kx - ok
15:52:06.0935 8576  [ 185ADA973B5020655CEE342059A86CBB ] GEARAspiWDM    C:\windows\system32\DRIVERS\GEARAspiWDM.sys
15:52:06.0998 8576  GEARAspiWDM - ok
15:52:07.0060 8576  [ E897EAF5ED6BA41E081060C9B447A673 ] gpsvc          C:\windows\System32\gpsvc.dll
15:52:07.0232 8576  gpsvc - ok
15:52:07.0341 8576  [ 506708142BC63DABA64F2D3AD1DCD5BF ] gupdate        C:\Program Files\Google\Update\GoogleUpdate.exe
15:52:07.0403 8576  gupdate - ok
15:52:07.0419 8576  [ 506708142BC63DABA64F2D3AD1DCD5BF ] gupdatem        C:\Program Files\Google\Update\GoogleUpdate.exe
15:52:07.0481 8576  gupdatem - ok
15:52:07.0528 8576  [ C44E3C2BAB6837DB337DDEE7544736DB ] hcw85cir        C:\windows\system32\drivers\hcw85cir.sys
15:52:07.0684 8576  hcw85cir - ok
15:52:07.0715 8576  [ A5EF29D5315111C80A5C1ABAD14C8972 ] HdAudAddService C:\windows\system32\drivers\HdAudio.sys
15:52:07.0825 8576  HdAudAddService - ok
15:52:07.0856 8576  [ 9036377B8A6C15DC2EEC53E489D159B5 ] HDAudBus        C:\windows\system32\DRIVERS\HDAudBus.sys
15:52:07.0949 8576  HDAudBus - ok
15:52:07.0965 8576  [ 1D58A7F3E11A9731D0EAAAA8405ACC36 ] HidBatt        C:\windows\system32\drivers\HidBatt.sys
15:52:08.0043 8576  HidBatt - ok
15:52:08.0074 8576  [ 89448F40E6DF260C206A193A4683BA78 ] HidBth          C:\windows\system32\drivers\hidbth.sys
15:52:08.0168 8576  HidBth - ok
15:52:08.0199 8576  [ CF50B4CF4A4F229B9F3C08351F99CA5E ] HidIr          C:\windows\system32\drivers\hidir.sys
15:52:08.0293 8576  HidIr - ok
15:52:08.0339 8576  [ 2BC6F6A1992B3A77F5F41432CA6B3B6B ] hidserv        C:\windows\system32\hidserv.dll
15:52:08.0464 8576  hidserv - ok
15:52:08.0495 8576  [ 10C19F8290891AF023EAEC0832E1EB4D ] HidUsb          C:\windows\system32\drivers\hidusb.sys
15:52:08.0589 8576  HidUsb - ok
15:52:08.0620 8576  [ 196B4E3F4CCCC24AF836CE58FACBB699 ] hkmsvc          C:\windows\system32\kmsvc.dll
15:52:08.0761 8576  hkmsvc - ok
15:52:08.0792 8576  [ 6658F4404DE03D75FE3BA09F7ABA6A30 ] HomeGroupListener C:\windows\system32\ListSvc.dll
15:52:08.0963 8576  HomeGroupListener - ok
15:52:09.0010 8576  [ DBC02D918FFF1CAD628ACBE0C0EAA8E8 ] HomeGroupProvider C:\windows\system32\provsvc.dll
15:52:09.0119 8576  HomeGroupProvider - ok
15:52:09.0151 8576  [ 295FDC419039090EB8B49FFDBB374549 ] HpSAMD          C:\windows\system32\drivers\HpSAMD.sys
15:52:09.0244 8576  HpSAMD - ok
15:52:09.0291 8576  [ 871917B07A141BFF43D76D8844D48106 ] HTTP            C:\windows\system32\drivers\HTTP.sys
15:52:09.0447 8576  HTTP - ok
15:52:09.0463 8576  [ 0C4E035C7F105F1299258C90886C64C5 ] hwpolicy        C:\windows\system32\drivers\hwpolicy.sys
15:52:09.0525 8576  hwpolicy - ok
15:52:09.0556 8576  [ F151F0BDC47F4A28B1B20A0818EA36D6 ] i8042prt        C:\windows\system32\DRIVERS\i8042prt.sys
15:52:09.0634 8576  i8042prt - ok
15:52:09.0681 8576  [ 5CD5F9A5444E6CDCB0AC89BD62D8B76E ] iaStorV        C:\windows\system32\drivers\iaStorV.sys
15:52:09.0759 8576  iaStorV - ok
15:52:09.0853 8576  [ C521D7EB6497BB1AF6AFA89E322FB43C ] idsvc          C:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
15:52:09.0977 8576  idsvc - ok
15:52:10.0165 8576  [ AD626F6964F4D364D226C39E06872DD3 ] igfx            C:\windows\system32\DRIVERS\igdkmd32.sys
15:52:10.0477 8576  igfx - ok
15:52:10.0508 8576  [ 4173FF5708F3236CF25195FECD742915 ] iirsp          C:\windows\system32\drivers\iirsp.sys
15:52:10.0586 8576  iirsp - ok
15:52:10.0648 8576  [ F95622F161474511B8D80D6B093AA610 ] IKEEXT          C:\windows\System32\ikeext.dll
15:52:10.0820 8576  IKEEXT - ok
15:52:10.0991 8576  [ 1C18148E1A55E4B05AD4D4989E7C4832 ] IntcAzAudAddService C:\windows\system32\drivers\RTKVHDA.sys
15:52:11.0272 8576  IntcAzAudAddService - ok
15:52:11.0319 8576  [ A0F12F2C9BA6C72F3987CE780E77C130 ] intelide        C:\windows\system32\drivers\intelide.sys
15:52:11.0397 8576  intelide - ok
15:52:11.0428 8576  [ 3B514D27BFC4ACCB4037BC6685F766E0 ] intelppm        C:\windows\system32\drivers\intelppm.sys
15:52:11.0506 8576  intelppm - ok
15:52:11.0553 8576  [ ACB364B9075A45C0736E5C47BE5CAE19 ] IPBusEnum      C:\windows\system32\ipbusenum.dll
15:52:11.0709 8576  IPBusEnum - ok
15:52:11.0725 8576  [ 709D1761D3B19A932FF0238EA6D50200 ] IpFilterDriver  C:\windows\system32\DRIVERS\ipfltdrv.sys
15:52:11.0849 8576  IpFilterDriver - ok
15:52:11.0896 8576  [ 58F67245D041FBE7AF88F4EAF79DF0FA ] iphlpsvc        C:\windows\System32\iphlpsvc.dll
15:52:12.0099 8576  iphlpsvc - ok
15:52:12.0130 8576  [ 4BD7134618C1D2A27466A099062547BF ] IPMIDRV        C:\windows\system32\drivers\IPMIDrv.sys
15:52:12.0208 8576  IPMIDRV - ok
15:52:12.0224 8576  [ A5FA468D67ABCDAA36264E463A7BB0CD ] IPNAT          C:\windows\system32\drivers\ipnat.sys
15:52:12.0364 8576  IPNAT - ok
15:52:12.0442 8576  [ E46B17060D3962A384AE484094614788 ] iPod Service    C:\Program Files\iPod\bin\iPodService.exe
15:52:12.0551 8576  iPod Service - ok
15:52:12.0583 8576  [ 42996CFF20A3084A56017B7902307E9F ] IRENUM          C:\windows\system32\drivers\irenum.sys
15:52:12.0739 8576  IRENUM - ok
15:52:12.0754 8576  [ 1F32BB6B38F62F7DF1A7AB7292638A35 ] isapnp          C:\windows\system32\drivers\isapnp.sys
15:52:12.0832 8576  isapnp - ok
15:52:12.0863 8576  [ CB7A9ABB12B8415BCE5D74994C7BA3AE ] iScsiPrt        C:\windows\system32\drivers\msiscsi.sys
15:52:12.0941 8576  iScsiPrt - ok
15:52:12.0973 8576  [ ADEF52CA1AEAE82B50DF86B56413107E ] kbdclass        C:\windows\system32\DRIVERS\kbdclass.sys
15:52:13.0035 8576  kbdclass - ok
15:52:13.0051 8576  [ 9E3CED91863E6EE98C24794D05E27A71 ] kbdhid          C:\windows\system32\drivers\kbdhid.sys
15:52:13.0144 8576  kbdhid - ok
15:52:13.0160 8576  [ 3EB803312987FF44265C87CB960DF6AB ] kbfiltr        C:\windows\system32\DRIVERS\kbfiltr.sys
15:52:13.0222 8576  kbfiltr - ok
15:52:13.0253 8576  [ 81951F51E318AECC2D68559E47485CC4 ] KeyIso          C:\windows\system32\lsass.exe
15:52:13.0316 8576  KeyIso - ok
15:52:13.0378 8576  [ B7895B4182C0D16F6EFADEB8081E8D36 ] KSecDD          C:\windows\system32\Drivers\ksecdd.sys
15:52:13.0441 8576  KSecDD - ok
15:52:13.0472 8576  [ D30159AC9237519FBC62C6EC247D2D46 ] KSecPkg        C:\windows\system32\Drivers\ksecpkg.sys
15:52:13.0550 8576  KSecPkg - ok
15:52:13.0612 8576  [ 89A7B9CC98D0D80C6F31B91C0A310FCD ] KtmRm          C:\windows\system32\msdtckrm.dll
15:52:13.0784 8576  KtmRm - ok
15:52:13.0831 8576  [ C8FA09049E640B0A27E4B4446D958FE5 ] L1C            C:\windows\system32\DRIVERS\L1C62x86.sys
15:52:13.0893 8576  L1C - ok
15:52:13.0940 8576  [ D64AF876D53ECA3668BB97B51B4E70AB ] LanmanServer    C:\windows\system32\srvsvc.dll
15:52:14.0096 8576  LanmanServer - ok
15:52:14.0143 8576  [ 58405E4F68BA8E4057C6E914F326ABA2 ] LanmanWorkstation C:\windows\System32\wkssvc.dll
15:52:14.0283 8576  LanmanWorkstation - ok
15:52:14.0330 8576  [ F7611EC07349979DA9B0AE1F18CCC7A6 ] lltdio          C:\windows\system32\DRIVERS\lltdio.sys
15:52:14.0470 8576  lltdio - ok
15:52:14.0517 8576  [ 5700673E13A2117FA3B9020C852C01E2 ] lltdsvc        C:\windows\System32\lltdsvc.dll
15:52:14.0673 8576  lltdsvc - ok
15:52:14.0689 8576  [ 55CA01BA19D0006C8F2639B6C045E08B ] lmhosts        C:\windows\System32\lmhsvc.dll
15:52:14.0813 8576  lmhosts - ok
15:52:14.0860 8576  [ EB119A53CCF2ACC000AC71B065B78FEF ] LSI_FC          C:\windows\system32\drivers\lsi_fc.sys
15:52:14.0923 8576  LSI_FC - ok
15:52:14.0954 8576  [ 8ADE1C877256A22E49B75D1CC9161F9C ] LSI_SAS        C:\windows\system32\drivers\lsi_sas.sys
15:52:15.0016 8576  LSI_SAS - ok
15:52:15.0032 8576  [ DC9DC3D3DAA0E276FD2EC262E38B11E9 ] LSI_SAS2        C:\windows\system32\drivers\lsi_sas2.sys
15:52:15.0110 8576  LSI_SAS2 - ok
15:52:15.0125 8576  [ 0A036C7D7CAB643A7F07135AC47E0524 ] LSI_SCSI        C:\windows\system32\drivers\lsi_scsi.sys
15:52:15.0203 8576  LSI_SCSI - ok
15:52:15.0235 8576  [ 6703E366CC18D3B6E534F5CF7DF39CEE ] luafv          C:\windows\system32\drivers\luafv.sys
15:52:15.0375 8576  luafv - ok
15:52:15.0406 8576  [ 0FFF5B045293002AB38EB1FD1FC2FB74 ] megasas        C:\windows\system32\drivers\megasas.sys
15:52:15.0469 8576  megasas - ok
15:52:15.0500 8576  [ DCBAB2920C75F390CAF1D29F675D03D6 ] MegaSR          C:\windows\system32\drivers\MegaSR.sys
15:52:15.0578 8576  MegaSR - ok
15:52:15.0609 8576  [ 146B6F43A673379A3C670E86D89BE5EA ] MMCSS          C:\windows\system32\mmcss.dll
15:52:15.0749 8576  MMCSS - ok
15:52:15.0765 8576  [ F001861E5700EE84E2D4E52C712F4964 ] Modem          C:\windows\system32\drivers\modem.sys
15:52:15.0905 8576  Modem - ok
15:52:15.0921 8576  [ 79D10964DE86B292320E9DFE02282A23 ] monitor        C:\windows\system32\DRIVERS\monitor.sys
15:52:16.0015 8576  monitor - ok
15:52:16.0030 8576  [ FB18CC1D4C2E716B6B903B0AC0CC0609 ] mouclass        C:\windows\system32\DRIVERS\mouclass.sys
15:52:16.0108 8576  mouclass - ok
15:52:16.0124 8576  [ 2C388D2CD01C9042596CF3C8F3C7B24D ] mouhid          C:\windows\system32\drivers\mouhid.sys
15:52:16.0217 8576  mouhid - ok
15:52:16.0233 8576  [ FC8771F45ECCCFD89684E38842539B9B ] mountmgr        C:\windows\system32\drivers\mountmgr.sys
15:52:16.0295 8576  mountmgr - ok
15:52:16.0358 8576  [ 2024F4CC36D1954ECD00C07C3BCE6BE3 ] MozillaMaintenance C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
15:52:16.0420 8576  MozillaMaintenance - ok
15:52:16.0467 8576  [ 2D699FB6E89CE0D8DA14ECC03B3EDFE0 ] mpio            C:\windows\system32\drivers\mpio.sys
15:52:16.0529 8576  mpio - ok
15:52:16.0545 8576  [ AD2723A7B53DD1AACAE6AD8C0BFBF4D0 ] mpsdrv          C:\windows\system32\drivers\mpsdrv.sys
15:52:16.0685 8576  mpsdrv - ok
15:52:16.0732 8576  [ 9835584E999D25004E1EE8E5F3E3B881 ] MpsSvc          C:\windows\system32\mpssvc.dll
15:52:16.0904 8576  MpsSvc - ok
15:52:16.0919 8576  [ CEB46AB7C01C9F825F8CC6BABC18166A ] MRxDAV          C:\windows\system32\drivers\mrxdav.sys
15:52:17.0044 8576  MRxDAV - ok
15:52:17.0060 8576  [ 5D16C921E3671636C0EBA3BBAAC5FD25 ] mrxsmb          C:\windows\system32\DRIVERS\mrxsmb.sys
15:52:17.0200 8576  mrxsmb - ok
15:52:17.0231 8576  [ 6D17A4791ACA19328C685D256349FEFC ] mrxsmb10        C:\windows\system32\DRIVERS\mrxsmb10.sys
15:52:17.0325 8576  mrxsmb10 - ok
15:52:17.0341 8576  [ B81F204D146000BE76651A50670A5E9E ] mrxsmb20        C:\windows\system32\DRIVERS\mrxsmb20.sys
15:52:17.0434 8576  mrxsmb20 - ok
15:52:17.0450 8576  [ 012C5F4E9349E711E11E0F19A8589F0A ] msahci          C:\windows\system32\drivers\msahci.sys
15:52:17.0559 8576  msahci - ok
15:52:17.0575 8576  [ 55055F8AD8BE27A64C831322A780A228 ] msdsm          C:\windows\system32\drivers\msdsm.sys
15:52:17.0637 8576  msdsm - ok
15:52:17.0684 8576  [ E1BCE74A3BD9902B72599C0192A07E27 ] MSDTC          C:\windows\System32\msdtc.exe
15:52:17.0777 8576  MSDTC - ok
15:52:17.0840 8576  [ DAEFB28E3AF5A76ABCC2C3078C07327F ] Msfs            C:\windows\system32\drivers\Msfs.sys
15:52:17.0965 8576  Msfs - ok
15:52:17.0980 8576  [ 3E1E5767043C5AF9367F0056295E9F84 ] mshidkmdf      C:\windows\System32\drivers\mshidkmdf.sys
15:52:18.0121 8576  mshidkmdf - ok
15:52:18.0136 8576  [ 0A4E5757AE09FA9622E3158CC1AEF114 ] msisadrv        C:\windows\system32\drivers\msisadrv.sys
15:52:18.0214 8576  msisadrv - ok
15:52:18.0261 8576  [ 90F7D9E6B6F27E1A707D4A297F077828 ] MSiSCSI        C:\windows\system32\iscsiexe.dll
15:52:18.0401 8576  MSiSCSI - ok
15:52:18.0417 8576  msiserver - ok
15:52:18.0448 8576  [ 8C0860D6366AAFFB6C5BB9DF9448E631 ] MSKSSRV        C:\windows\system32\drivers\MSKSSRV.sys
15:52:18.0589 8576  MSKSSRV - ok
15:52:18.0604 8576  [ 3EA8B949F963562CEDBB549EAC0C11CE ] MSPCLOCK        C:\windows\system32\drivers\MSPCLOCK.sys
15:52:18.0745 8576  MSPCLOCK - ok
15:52:18.0776 8576  [ F456E973590D663B1073E9C463B40932 ] MSPQM          C:\windows\system32\drivers\MSPQM.sys
15:52:18.0916 8576  MSPQM - ok
15:52:18.0947 8576  [ 0E008FC4819D238C51D7C93E7B41E560 ] MsRPC          C:\windows\system32\drivers\MsRPC.sys
15:52:19.0010 8576  MsRPC - ok
15:52:19.0057 8576  [ FC6B9FF600CC585EA38B12589BD4E246 ] mssmbios        C:\windows\system32\DRIVERS\mssmbios.sys
15:52:19.0119 8576  mssmbios - ok
15:52:19.0150 8576  [ B42C6B921F61A6E55159B8BE6CD54A36 ] MSTEE          C:\windows\system32\drivers\MSTEE.sys
15:52:19.0275 8576  MSTEE - ok
15:52:19.0291 8576  [ 33599130F44E1F34631CEA241DE8AC84 ] MTConfig        C:\windows\system32\drivers\MTConfig.sys
15:52:19.0384 8576  MTConfig - ok
15:52:19.0400 8576  [ 159FAD02F64E6381758C990F753BCC80 ] Mup            C:\windows\system32\Drivers\mup.sys
15:52:19.0462 8576  Mup - ok
15:52:19.0525 8576  [ 61D57A5D7C6D9AFE10E77DAE6E1B445E ] napagent        C:\windows\system32\qagentRT.dll
15:52:19.0712 8576  napagent - ok
15:52:19.0774 8576  [ 26384429FCD85D83746F63E798AB1480 ] NativeWifiP    C:\windows\system32\DRIVERS\nwifi.sys
15:52:19.0868 8576  NativeWifiP - ok
15:52:19.0946 8576  [ 8C9C922D71F1CD4DEF73F186416B7896 ] NDIS            C:\windows\system32\drivers\ndis.sys
15:52:20.0055 8576  NDIS - ok
15:52:20.0102 8576  [ 0E1787AA6C9191D3D319E8BAFE86F80C ] NdisCap        C:\windows\system32\DRIVERS\ndiscap.sys
15:52:20.0242 8576  NdisCap - ok
15:52:20.0273 8576  [ E4A8AEC125A2E43A9E32AFEEA7C9C888 ] NdisTapi        C:\windows\system32\DRIVERS\ndistapi.sys
15:52:20.0398 8576  NdisTapi - ok
15:52:20.0414 8576  [ D8A65DAFB3EB41CBB622745676FCD072 ] Ndisuio        C:\windows\system32\DRIVERS\ndisuio.sys
15:52:20.0554 8576  Ndisuio - ok
15:52:20.0570 8576  [ 38FBE267E7E6983311179230FACB1017 ] NdisWan        C:\windows\system32\DRIVERS\ndiswan.sys
15:52:20.0695 8576  NdisWan - ok
15:52:20.0710 8576  [ A4BDC541E69674FBFF1A8FF00BE913F2 ] NDProxy        C:\windows\system32\drivers\NDProxy.sys
15:52:20.0835 8576  NDProxy - ok
15:52:20.0851 8576  [ 80B275B1CE3B0E79909DB7B39AF74D51 ] NetBIOS        C:\windows\system32\DRIVERS\netbios.sys
15:52:20.0991 8576  NetBIOS - ok
15:52:21.0022 8576  [ 280122DDCF04B378EDD1AD54D71C1E54 ] NetBT          C:\windows\system32\DRIVERS\netbt.sys
15:52:21.0163 8576  NetBT - ok
15:52:21.0194 8576  [ 81951F51E318AECC2D68559E47485CC4 ] Netlogon        C:\windows\system32\lsass.exe
15:52:21.0272 8576  Netlogon - ok
15:52:21.0319 8576  [ 7CCCFCA7510684768DA22092D1FA4DB2 ] Netman          C:\windows\System32\netman.dll
15:52:21.0475 8576  Netman - ok
15:52:21.0506 8576  [ 8C338238C16777A802D6A9211EB2BA50 ] netprofm        C:\windows\System32\netprofm.dll
15:52:21.0662 8576  netprofm - ok
15:52:21.0709 8576  [ F476EC40033CDB91EFBE73EB99B8362D ] NetTcpPortSharing C:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
15:52:21.0771 8576  NetTcpPortSharing - ok
15:52:21.0802 8576  [ 1D85C4B390B0EE09C7A46B91EFB2C097 ] nfrd960        C:\windows\system32\drivers\nfrd960.sys
15:52:21.0865 8576  nfrd960 - ok
15:52:21.0911 8576  [ 374071043F9E4231EE43BE2BB48DD36D ] NlaSvc          C:\windows\System32\nlasvc.dll
15:52:22.0021 8576  NlaSvc - ok
15:52:22.0052 8576  [ 1DB262A9F8C087E8153D89BEF3D2235F ] Npfs            C:\windows\system32\drivers\Npfs.sys
15:52:22.0177 8576  Npfs - ok
15:52:22.0208 8576  [ BA387E955E890C8A88306D9B8D06BF17 ] nsi            C:\windows\system32\nsisvc.dll
15:52:22.0348 8576  nsi - ok
15:52:22.0364 8576  [ E9A0A4D07E53D8FEA2BB8387A3293C58 ] nsiproxy        C:\windows\system32\drivers\nsiproxy.sys
15:52:22.0504 8576  nsiproxy - ok
15:52:22.0582 8576  [ 9CDAEBE5160B9AF02AE17C62BDB6C4B5 ] Ntfs            C:\windows\system32\drivers\Ntfs.sys
15:52:22.0738 8576  Ntfs - ok
15:52:22.0769 8576  [ F9756A98D69098DCA8945D62858A812C ] Null            C:\windows\system32\drivers\Null.sys
15:52:22.0894 8576  Null - ok
15:52:22.0925 8576  [ B3E25EE28883877076E0E1FF877D02E0 ] nvraid          C:\windows\system32\drivers\nvraid.sys
15:52:22.0988 8576  nvraid - ok
15:52:23.0019 8576  [ 4380E59A170D88C4F1022EFF6719A8A4 ] nvstor          C:\windows\system32\drivers\nvstor.sys
15:52:23.0081 8576  nvstor - ok
15:52:23.0113 8576  [ 5A0983915F02BAE73267CC2A041F717D ] nv_agp          C:\windows\system32\drivers\nv_agp.sys
15:52:23.0175 8576  nv_agp - ok
15:52:23.0191 8576  [ 08A70A1F2CDDE9BB49B885CB817A66EB ] ohci1394        C:\windows\system32\drivers\ohci1394.sys
15:52:23.0284 8576  ohci1394 - ok
15:52:23.0331 8576  [ 9D10F99A6712E28F8ACD5641E3A7EA6B ] ose            C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
15:52:23.0393 8576  ose - ok
15:52:23.0596 8576  [ 358A9CCA612C68EB2F07DDAD4CE1D8D7 ] osppsvc        C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
15:52:23.0955 8576  osppsvc - ok
15:52:24.0033 8576  [ 82A8521DDC60710C3D3D3E7325209BEC ] p2pimsvc        C:\windows\system32\pnrpsvc.dll
15:52:24.0205 8576  p2pimsvc - ok
15:52:24.0251 8576  [ 59C3DDD501E39E006DAC31BF55150D91 ] p2psvc          C:\windows\system32\p2psvc.dll
15:52:24.0376 8576  p2psvc - ok
15:52:24.0423 8576  [ 2EA877ED5DD9713C5AC74E8EA7348D14 ] Parport        C:\windows\system32\drivers\parport.sys
15:52:24.0501 8576  Parport - ok
15:52:24.0548 8576  [ 3F34A1B4C5F6475F320C275E63AFCE9B ] partmgr        C:\windows\system32\drivers\partmgr.sys
15:52:24.0610 8576  partmgr - ok
15:52:24.0626 8576  [ EB0A59F29C19B86479D36B35983DAADC ] Parvdm          C:\windows\system32\drivers\parvdm.sys
15:52:24.0719 8576  Parvdm - ok
15:52:24.0735 8576  [ 358AB7956D3160000726574083DFC8A6 ] PcaSvc          C:\windows\System32\pcasvc.dll
15:52:24.0829 8576  PcaSvc - ok
15:52:24.0860 8576  [ 673E55C3498EB970088E812EA820AA8F ] pci            C:\windows\system32\drivers\pci.sys
15:52:24.0922 8576  pci - ok
15:52:24.0953 8576  [ AFE86F419014DB4E5593F69FFE26CE0A ] pciide          C:\windows\system32\drivers\pciide.sys
15:52:25.0016 8576  pciide - ok
15:52:25.0031 8576  [ F396431B31693E71E8A80687EF523506 ] pcmcia          C:\windows\system32\drivers\pcmcia.sys
15:52:25.0109 8576  pcmcia - ok
15:52:25.0125 8576  [ 250F6B43D2B613172035C6747AEEB19F ] pcw            C:\windows\system32\drivers\pcw.sys
15:52:25.0203 8576  pcw - ok
15:52:25.0250 8576  [ 9E0104BA49F4E6973749A02BF41344ED ] PEAUTH          C:\windows\system32\drivers\peauth.sys
15:52:25.0421 8576  PEAUTH - ok
15:52:25.0562 8576  [ 414BBA67A3DED1D28437EB66AEB8A720 ] pla            C:\windows\system32\pla.dll
15:52:25.0780 8576  pla - ok
15:52:25.0827 8576  [ EC7BC28D207DA09E79B3E9FAF8B232CA ] PlugPlay        C:\windows\system32\umpnpmgr.dll
15:52:25.0999 8576  PlugPlay - ok
15:52:26.0045 8576  [ 63FF8572611249931EB16BB8EED6AFC8 ] PNRPAutoReg    C:\windows\system32\pnrpauto.dll
15:52:26.0123 8576  PNRPAutoReg - ok
15:52:26.0155 8576  [ 82A8521DDC60710C3D3D3E7325209BEC ] PNRPsvc        C:\windows\system32\pnrpsvc.dll
15:52:26.0233 8576  PNRPsvc - ok
15:52:26.0295 8576  [ 53946B69BA0836BD95B03759530C81EC ] PolicyAgent    C:\windows\System32\ipsecsvc.dll
15:52:26.0482 8576  PolicyAgent - ok
15:52:26.0513 8576  [ F87D30E72E03D579A5199CCB3831D6EA ] Power          C:\windows\system32\umpo.dll
15:52:26.0654 8576  Power - ok
15:52:26.0701 8576  [ 631E3E205AD6D86F2AED6A4A8E69F2DB ] PptpMiniport    C:\windows\system32\DRIVERS\raspptp.sys
15:52:26.0825 8576  PptpMiniport - ok
15:52:26.0841 8576  [ 85B1E3A0C7585BC4AAE6899EC6FCF011 ] Processor      C:\windows\system32\drivers\processr.sys
15:52:26.0935 8576  Processor - ok
15:52:26.0997 8576  [ CADEFAC453040E370A1BDFF3973BE00D ] ProfSvc        C:\windows\system32\profsvc.dll
15:52:27.0137 8576  ProfSvc - ok
15:52:27.0184 8576  [ 81951F51E318AECC2D68559E47485CC4 ] ProtectedStorage C:\windows\system32\lsass.exe
15:52:27.0262 8576  ProtectedStorage - ok
15:52:27.0293 8576  [ 6270CCAE2A86DE6D146529FE55B3246A ] Psched          C:\windows\system32\DRIVERS\pacer.sys
15:52:27.0418 8576  Psched - ok
15:52:27.0496 8576  [ AB95ECF1F6659A60DDC166D8315B0751 ] ql2300          C:\windows\system32\drivers\ql2300.sys
15:52:27.0652 8576  ql2300 - ok
15:52:27.0668 8576  [ B4DD51DD25182244B86737DC51AF2270 ] ql40xx          C:\windows\system32\drivers\ql40xx.sys
15:52:27.0746 8576  ql40xx - ok
15:52:27.0793 8576  [ 31AC809E7707EB580B2BDB760390765A ] QWAVE          C:\windows\system32\qwave.dll
15:52:27.0917 8576  QWAVE - ok
15:52:27.0933 8576  [ 584078CA1B95CA72DF2A27C336F9719D ] QWAVEdrv        C:\windows\system32\drivers\qwavedrv.sys
15:52:28.0042 8576  QWAVEdrv - ok
15:52:28.0073 8576  [ 30A81B53C766D0133BB86D234E5556AB ] RasAcd          C:\windows\system32\DRIVERS\rasacd.sys
15:52:28.0198 8576  RasAcd - ok
15:52:28.0229 8576  [ 57EC4AEF73660166074D8F7F31C0D4FD ] RasAgileVpn    C:\windows\system32\DRIVERS\AgileVpn.sys
15:52:28.0401 8576  RasAgileVpn - ok
15:52:28.0448 8576  [ A60F1839849C0C00739787FD5EC03F13 ] RasAuto        C:\windows\System32\rasauto.dll
15:52:28.0588 8576  RasAuto - ok
15:52:28.0604 8576  [ D9F91EAFEC2815365CBE6D167E4E332A ] Rasl2tp        C:\windows\system32\DRIVERS\rasl2tp.sys
15:52:28.0744 8576  Rasl2tp - ok
15:52:28.0791 8576  [ CB9E04DC05EACF5B9A36CA276D475006 ] RasMan          C:\windows\System32\rasmans.dll
15:52:28.0963 8576  RasMan - ok
15:52:28.0978 8576  [ 0FE8B15916307A6AC12BFB6A63E45507 ] RasPppoe        C:\windows\system32\DRIVERS\raspppoe.sys
15:52:29.0134 8576  RasPppoe - ok
15:52:29.0165 8576  [ 44101F495A83EA6401D886E7FD70096B ] RasSstp        C:\windows\system32\DRIVERS\rassstp.sys
15:52:29.0321 8576  RasSstp - ok
15:52:29.0337 8576  [ D528BC58A489409BA40334EBF96A311B ] rdbss          C:\windows\system32\DRIVERS\rdbss.sys
15:52:29.0477 8576  rdbss - ok
15:52:29.0512 8576  [ 0D8F05481CB76E70E1DA06EE9F0DA9DF ] rdpbus          C:\windows\system32\drivers\rdpbus.sys
15:52:29.0591 8576  rdpbus - ok
15:52:29.0622 8576  [ 23DAE03F29D253AE74C44F99E515F9A1 ] RDPCDD          C:\windows\system32\DRIVERS\RDPCDD.sys
15:52:29.0747 8576  RDPCDD - ok
15:52:29.0778 8576  [ 5A53CA1598DD4156D44196D200C94B8A ] RDPENCDD        C:\windows\system32\drivers\rdpencdd.sys
15:52:29.0918 8576  RDPENCDD - ok
15:52:29.0949 8576  [ 44B0A53CD4F27D50ED461DAE0C0B4E1F ] RDPREFMP        C:\windows\system32\drivers\rdprefmp.sys
15:52:30.0074 8576  RDPREFMP - ok
15:52:30.0121 8576  [ F031683E6D1FEA157ABB2FF260B51E61 ] RDPWD          C:\windows\system32\drivers\RDPWD.sys
15:52:30.0246 8576  RDPWD - ok
15:52:30.0308 8576  [ 518395321DC96FE2C9F0E96AC743B656 ] rdyboost        C:\windows\system32\drivers\rdyboost.sys
15:52:30.0386 8576  rdyboost - ok
15:52:30.0433 8576  [ 7B5E1419717FAC363A31CC302895217A ] RemoteAccess    C:\windows\System32\mprdim.dll
15:52:30.0573 8576  RemoteAccess - ok
15:52:30.0605 8576  [ CB9A8683F4EF2BF99E123D79950D7935 ] RemoteRegistry  C:\windows\system32\regsvc.dll
15:52:30.0761 8576  RemoteRegistry - ok
15:52:30.0776 8576  [ CB928D9E6DAF51879DD6BA8D02F01321 ] RFCOMM          C:\windows\system32\DRIVERS\rfcomm.sys
15:52:30.0885 8576  RFCOMM - ok
15:52:30.0917 8576  [ 78D072F35BC45D9E4E1B61895C152234 ] RpcEptMapper    C:\windows\System32\RpcEpMap.dll
15:52:31.0057 8576  RpcEptMapper - ok
15:52:31.0104 8576  [ 94D36C0E44677DD26981D2BFEEF2A29D ] RpcLocator      C:\windows\system32\locator.exe
15:52:31.0197 8576  RpcLocator - ok
15:52:31.0229 8576  [ 7660F01D3B38ACA1747E397D21D790AF ] RpcSs          C:\windows\system32\rpcss.dll
15:52:31.0369 8576  RpcSs - ok
15:52:31.0431 8576  [ 032B0D36AD92B582D869879F5AF5B928 ] rspndr          C:\windows\system32\DRIVERS\rspndr.sys
15:52:31.0572 8576  rspndr - ok
15:52:31.0603 8576  [ 81951F51E318AECC2D68559E47485CC4 ] SamSs          C:\windows\system32\lsass.exe
15:52:31.0681 8576  SamSs - ok
15:52:31.0712 8576  [ 05D860DA1040F111503AC416CCEF2BCA ] sbp2port        C:\windows\system32\drivers\sbp2port.sys
15:52:31.0790 8576  sbp2port - ok
15:52:31.0837 8576  [ 8FC518FFE9519C2631D37515A68009C4 ] SCardSvr        C:\windows\System32\SCardSvr.dll
15:52:31.0977 8576  SCardSvr - ok
15:52:32.0009 8576  [ 0693B5EC673E34DC147E195779A4DCF6 ] scfilter        C:\windows\system32\DRIVERS\scfilter.sys
15:52:32.0149 8576  scfilter - ok
15:52:32.0196 8576  [ A04BB13F8A72F8B6E8B4071723E4E336 ] Schedule        C:\windows\system32\schedsvc.dll
15:52:32.0399 8576  Schedule - ok
15:52:32.0430 8576  [ 319C6B309773D063541D01DF8AC6F55F ] SCPolicySvc    C:\windows\System32\certprop.dll
15:52:32.0539 8576  SCPolicySvc - ok
15:52:32.0601 8576  [ 08236C4BCE5EDD0A0318A438AF28E0F7 ] SDRSVC          C:\windows\System32\SDRSVC.dll
15:52:32.0820 8576  SDRSVC - ok
15:52:32.0882 8576  [ CC781378E7EDA615D2CDCA3B17829FA4 ] SeaPort        C:\Program Files\Microsoft\BingBar\SeaPort.EXE
15:52:32.0960 8576  SeaPort - ok
15:52:33.0023 8576  [ 90A3935D05B494A5A39D37E71F09A677 ] secdrv          C:\windows\system32\drivers\secdrv.sys
15:52:33.0147 8576  secdrv - ok
15:52:33.0210 8576  [ A59B3A4442C52060CC7A85293AA3546F ] seclogon        C:\windows\system32\seclogon.dll
15:52:33.0350 8576  seclogon - ok
15:52:33.0397 8576  [ DCB7FCDCC97F87360F75D77425B81737 ] SENS            C:\windows\System32\sens.dll
15:52:33.0537 8576  SENS - ok
15:52:33.0569 8576  [ 9AD8B8B515E3DF6ACD4212EF465DE2D1 ] Serenum        C:\windows\system32\drivers\serenum.sys
15:52:33.0678 8576  Serenum - ok
15:52:33.0756 8576  [ 5FB7FCEA0490D821F26F39CC5EA3D1E2 ] Serial          C:\windows\system32\drivers\serial.sys
15:52:33.0865 8576  Serial - ok
15:52:33.0896 8576  [ 79BFFB520327FF916A582DFEA17AA813 ] sermouse        C:\windows\system32\drivers\sermouse.sys
15:52:33.0990 8576  sermouse - ok
15:52:34.0083 8576  [ 4AE380F39A0032EAB7DD953030B26D28 ] SessionEnv      C:\windows\system32\sessenv.dll
15:52:34.0239 8576  SessionEnv - ok
15:52:34.0302 8576  [ 9F976E1EB233DF46FCE808D9DEA3EB9C ] sffdisk        C:\windows\system32\drivers\sffdisk.sys
15:52:34.0395 8576  sffdisk - ok
15:52:34.0411 8576  [ 932A68EE27833CFD57C1639D375F2731 ] sffp_mmc        C:\windows\system32\drivers\sffp_mmc.sys
15:52:34.0536 8576  sffp_mmc - ok
15:52:34.0551 8576  [ 6D4CCAEDC018F1CF52866BBBAA235982 ] sffp_sd        C:\windows\system32\drivers\sffp_sd.sys
15:52:34.0661 8576  sffp_sd - ok
15:52:34.0707 8576  [ DB96666CC8312EBC45032F30B007A547 ] sfloppy        C:\windows\system32\drivers\sfloppy.sys
15:52:34.0785 8576  sfloppy - ok
15:52:34.0895 8576  [ D9B734638DD8DBA9D59AAD3189CD0FAD ] Sftfs          C:\windows\system32\DRIVERS\Sftfslh.sys
15:52:34.0988 8576  Sftfs - ok
15:52:35.0160 8576  [ CB73BC422C07FB611F194DA18D1E7F36 ] sftlist        C:\Program Files\Microsoft Application Virtualization Client\sftlist.exe
15:52:35.0253 8576  sftlist - ok
15:52:35.0316 8576  [ 2F61BD46C0BFF4EB36E1E359CA17BFC5 ] Sftplay        C:\windows\system32\DRIVERS\Sftplaylh.sys
15:52:35.0378 8576  Sftplay - ok
15:52:35.0409 8576  [ 518BAC0179F94304F422696B47C0EC12 ] Sftredir        C:\windows\system32\DRIVERS\Sftredirlh.sys
15:52:35.0472 8576  Sftredir - ok
15:52:35.0519 8576  [ 747325236D88B3F05FFD27FF9EC711C5 ] Sftvol          C:\windows\system32\DRIVERS\Sftvollh.sys
15:52:35.0581 8576  Sftvol - ok
15:52:35.0643 8576  [ A5812F0281CA5081BF696626F9BF324D ] sftvsa          C:\Program Files\Microsoft Application Virtualization Client\sftvsa.exe
15:52:35.0706 8576  sftvsa - ok
15:52:35.0799 8576  [ D1A079A0DE2EA524513B6930C24527A2 ] SharedAccess    C:\windows\System32\ipnathlp.dll
15:52:35.0971 8576  SharedAccess - ok
15:52:36.0065 8576  [ 414DA952A35BF5D50192E28263B40577 ] ShellHWDetection C:\windows\System32\shsvcs.dll
15:52:36.0236 8576  ShellHWDetection - ok
15:52:36.0299 8576  [ 2565CAC0DC9FE0371BDCE60832582B2E ] sisagp          C:\windows\system32\drivers\sisagp.sys
15:52:36.0361 8576  sisagp - ok
15:52:36.0392 8576  [ A9F0486851BECB6DDA1D89D381E71055 ] SiSRaid2        C:\windows\system32\drivers\SiSRaid2.sys
15:52:36.0455 8576  SiSRaid2 - ok
15:52:36.0486 8576  [ 3727097B55738E2F554972C3BE5BC1AA ] SiSRaid4        C:\windows\system32\drivers\sisraid4.sys
15:52:36.0548 8576  SiSRaid4 - ok
15:52:36.0579 8576  [ 3E21C083B8A01CB70BA1F09303010FCE ] Smb            C:\windows\system32\DRIVERS\smb.sys
15:52:36.0720 8576  Smb - ok
15:52:36.0782 8576  [ 6A984831644ECA1A33FFEAE4126F4F37 ] SNMPTRAP        C:\windows\System32\snmptrap.exe
15:52:36.0876 8576  SNMPTRAP - ok
15:52:36.0891 8576  [ 95CF1AE7527FB70F7816563CBC09D942 ] spldr          C:\windows\system32\drivers\spldr.sys
15:52:36.0954 8576  spldr - ok
15:52:37.0001 8576  [ 9AEA093B8F9C37CF45538382CABA2475 ] Spooler        C:\windows\System32\spoolsv.exe
15:52:37.0172 8576  Spooler - ok
15:52:37.0313 8576  [ CF87A1DE791347E75B98885214CED2B8 ] sppsvc          C:\windows\system32\sppsvc.exe
15:52:37.0609 8576  sppsvc - ok
15:52:37.0671 8576  [ B0180B20B065D89232A78A40FE56EAA6 ] sppuinotify    C:\windows\system32\sppuinotify.dll
15:52:37.0812 8576  sppuinotify - ok
15:52:37.0859 8576  [ E4C2764065D66EA1D2D3EBC28FE99C46 ] srv            C:\windows\system32\DRIVERS\srv.sys
15:52:37.0983 8576  srv - ok
15:52:38.0015 8576  [ 03F0545BD8D4C77FA0AE1CEEDFCC71AB ] srv2            C:\windows\system32\DRIVERS\srv2.sys
15:52:38.0093 8576  srv2 - ok
15:52:38.0124 8576  [ BE6BD660CAA6F291AE06A718A4FA8ABC ] srvnet          C:\windows\system32\DRIVERS\srvnet.sys
15:52:38.0202 8576  srvnet - ok
15:52:38.0233 8576  [ D887C9FD02AC9FA880F6E5027A43E118 ] SSDPSRV        C:\windows\System32\ssdpsrv.dll
15:52:38.0389 8576  SSDPSRV - ok
15:52:38.0467 8576  [ A36EE93698802CD899F98BFD553D8185 ] ssmdrv          C:\windows\system32\DRIVERS\ssmdrv.sys
15:52:38.0529 8576  ssmdrv - ok
15:52:38.0576 8576  [ D318F23BE45D5E3A107469EB64815B50 ] SstpSvc        C:\windows\system32\sstpsvc.dll
15:52:38.0748 8576  SstpSvc - ok
15:52:38.0826 8576  [ DB32D325C192B801DF274BFD12A7E72B ] stexstor        C:\windows\system32\drivers\stexstor.sys
15:52:38.0888 8576  stexstor - ok
15:52:39.0029 8576  [ E1FB3706030FB4578A0D72C2FC3689E4 ] StiSvc          C:\windows\System32\wiaservc.dll
15:52:39.0185 8576  StiSvc - ok
15:52:39.0231 8576  [ E58C78A848ADD9610A4DB6D214AF5224 ] swenum          C:\windows\system32\DRIVERS\swenum.sys
15:52:39.0309 8576  swenum - ok
15:52:39.0403 8576  [ A28BD92DF340E57B024BA433165D34D7 ] swprv          C:\windows\System32\swprv.dll
15:52:39.0559 8576  swprv - ok
15:52:39.0715 8576  [ 36650D618CA34C9D357DFD3D89B2C56F ] SysMain        C:\windows\system32\sysmain.dll
15:52:39.0871 8576  SysMain - ok
15:52:39.0902 8576  [ 763FECDC3D30C815FE72DD57936C6CD1 ] TabletInputService C:\windows\System32\TabSvc.dll
15:52:40.0011 8576  TabletInputService - ok
15:52:40.0043 8576  [ 613BF4820361543956909043A265C6AC ] TapiSrv        C:\windows\System32\tapisrv.dll
15:52:40.0214 8576  TapiSrv - ok
15:52:40.0245 8576  [ B799D9FDB26111737F58288D8DC172D9 ] TBS            C:\windows\System32\tbssvc.dll
15:52:40.0386 8576  TBS - ok
15:52:40.0479 8576  [ 7C0507D2391AF5933600CBCED799F277 ] Tcpip          C:\windows\system32\drivers\tcpip.sys
15:52:40.0651 8576  Tcpip - ok
15:52:40.0713 8576  [ 7C0507D2391AF5933600CBCED799F277 ] TCPIP6          C:\windows\system32\DRIVERS\tcpip.sys
15:52:40.0838 8576  TCPIP6 - ok
15:52:40.0885 8576  [ 3EEBD3BD93DA46A26E89893C7AB2FF3B ] tcpipreg        C:\windows\system32\drivers\tcpipreg.sys
15:52:40.0979 8576  tcpipreg - ok
15:52:41.0025 8576  [ 1CB91B2BD8F6DD367DFC2EF26FD751B2 ] TDPIPE          C:\windows\system32\drivers\tdpipe.sys
15:52:41.0150 8576  TDPIPE - ok
15:52:41.0181 8576  [ 2C2C5AFE7EE4F620D69C23C0617651A8 ] TDTCP          C:\windows\system32\drivers\tdtcp.sys
15:52:41.0275 8576  TDTCP - ok
15:52:41.0291 8576  [ B459575348C20E8121D6039DA063C704 ] tdx            C:\windows\system32\DRIVERS\tdx.sys
15:52:41.0431 8576  tdx - ok
15:52:41.0447 8576  [ 04DBF4B01EA4BF25A9A3E84AFFAC9B20 ] TermDD          C:\windows\system32\DRIVERS\termdd.sys
15:52:41.0509 8576  TermDD - ok
15:52:41.0571 8576  [ 382C804C92811BE57829D8E550A900E2 ] TermService    C:\windows\System32\termsrv.dll
15:52:41.0743 8576  TermService - ok
15:52:41.0774 8576  [ 42FB6AFD6B79D9FE07381609172E7CA4 ] Themes          C:\windows\system32\themeservice.dll
15:52:41.0868 8576  Themes - ok
15:52:41.0899 8576  [ 146B6F43A673379A3C670E86D89BE5EA ] THREADORDER    C:\windows\system32\mmcss.dll
15:52:42.0024 8576  THREADORDER - ok
15:52:42.0117 8576  [ E5EFD1068D24F9F052A027CAFED3AA5A ] TiMiniService  C:\Program Files\Trend Micro\Titanium\TiMiniService.exe
15:52:42.0180 8576  TiMiniService - ok
15:52:42.0227 8576  [ DE87A23D2DDC7378D1C7AB681E20DE47 ] tmactmon        C:\windows\system32\DRIVERS\tmactmon.sys
15:52:42.0289 8576  tmactmon - ok
15:52:42.0320 8576  [ 540C2B5DC47651C572C2804DC72FDDA8 ] tmcomm          C:\windows\system32\DRIVERS\tmcomm.sys
15:52:42.0383 8576  tmcomm - ok
15:52:42.0398 8576  [ 2DE1FA64EBAFF376F2C038F64492F62C ] tmevtmgr        C:\windows\system32\DRIVERS\tmevtmgr.sys
15:52:42.0461 8576  tmevtmgr - ok
15:52:42.0507 8576  [ 5A61679B2277B9AD550E30479A69503B ] tmtdi          C:\windows\system32\DRIVERS\tmtdi.sys
15:52:42.0570 8576  tmtdi - ok
15:52:42.0632 8576  [ 4792C0378DB99A9BC2AE2DE6CFFF0C3A ] TrkWks          C:\windows\System32\trkwks.dll
15:52:42.0773 8576  TrkWks - ok
15:52:42.0819 8576  [ 2C49B175AEE1D4364B91B531417FE583 ] TrustedInstaller C:\windows\servicing\TrustedInstaller.exe
15:52:42.0960 8576  TrustedInstaller - ok
15:52:42.0991 8576  [ 254BB140EEE3C59D6114C1A86B636877 ] tssecsrv        C:\windows\system32\DRIVERS\tssecsrv.sys
15:52:43.0131 8576  tssecsrv - ok
15:52:43.0163 8576  [ FD1D6C73E6333BE727CBCC6054247654 ] TsUsbFlt        C:\windows\system32\drivers\tsusbflt.sys
15:52:43.0319 8576  TsUsbFlt - ok
15:52:43.0334 8576  [ 01246F0BAAD7B68EC0F472AA41E33282 ] TsUsbGD        C:\windows\system32\drivers\TsUsbGD.sys
15:52:43.0428 8576  TsUsbGD - ok
15:52:43.0459 8576  [ B2FA25D9B17A68BB93D58B0556E8C90D ] tunnel          C:\windows\system32\DRIVERS\tunnel.sys
15:52:43.0584 8576  tunnel - ok
15:52:43.0599 8576  [ 750FBCB269F4D7DD2E420C56B795DB6D ] uagp35          C:\windows\system32\drivers\uagp35.sys
15:52:43.0677 8576  uagp35 - ok
15:52:43.0693 8576  [ EE43346C7E4B5E63E54F927BABBB32FF ] udfs            C:\windows\system32\DRIVERS\udfs.sys
15:52:43.0833 8576  udfs - ok
15:52:43.0896 8576  [ 8344FD4FCE927880AA1AA7681D4927E5 ] UI0Detect      C:\windows\system32\UI0Detect.exe
15:52:44.0005 8576  UI0Detect - ok
15:52:44.0021 8576  [ 44E8048ACE47BEFBFDC2E9BE4CBC8880 ] uliagpkx        C:\windows\system32\drivers\uliagpkx.sys
15:52:44.0083 8576  uliagpkx - ok
15:52:44.0114 8576  [ D295BED4B898F0FD999FCFA9B32B071B ] umbus          C:\windows\system32\DRIVERS\umbus.sys
15:52:44.0208 8576  umbus - ok
15:52:44.0223 8576  [ 7550AD0C6998BA1CB4843E920EE0FEAC ] UmPass          C:\windows\system32\drivers\umpass.sys
15:52:44.0317 8576  UmPass - ok
15:52:44.0348 8576  [ 833FBB672460EFCE8011D262175FAD33 ] upnphost        C:\windows\System32\upnphost.dll
15:52:44.0520 8576  upnphost - ok
15:52:44.0567 8576  [ 6E421CCC57059B0186C6259CA3B6DFC9 ] USBAAPL        C:\windows\system32\Drivers\usbaapl.sys
15:52:44.0676 8576  USBAAPL - ok
15:52:44.0723 8576  [ BD9C55D7023C5DE374507ACC7A14E2AC ] usbccgp        C:\windows\system32\DRIVERS\usbccgp.sys
15:52:44.0847 8576  usbccgp - ok
15:52:44.0863 8576  [ 04EC7CEC62EC3B6D9354EEE93327FC82 ] usbcir          C:\windows\system32\drivers\usbcir.sys
15:52:44.0957 8576  usbcir - ok
15:52:44.0988 8576  [ F92DE757E4B7CE9C07C5E65423F3AE3B ] usbehci        C:\windows\system32\DRIVERS\usbehci.sys
15:52:45.0066 8576  usbehci - ok
15:52:45.0081 8576  [ 8DC94AEC6A7E644A06135AE7506DC2E9 ] usbhub          C:\windows\system32\DRIVERS\usbhub.sys
15:52:45.0175 8576  usbhub - ok
15:52:45.0206 8576  [ E185D44FAC515A18D9DEDDC23C2CDF44 ] usbohci        C:\windows\system32\DRIVERS\usbohci.sys
15:52:45.0300 8576  usbohci - ok
15:52:45.0331 8576  [ 797D862FE0875E75C7CC4C1AD7B30252 ] usbprint        C:\windows\system32\DRIVERS\usbprint.sys
15:52:45.0425 8576  usbprint - ok
15:52:45.0487 8576  [ 576096CCBC07E7C4EA4F5E6686D6888F ] usbscan        C:\windows\system32\DRIVERS\usbscan.sys
15:52:45.0581 8576  usbscan - ok
15:52:45.0612 8576  [ F991AB9CC6B908DB552166768176896A ] USBSTOR        C:\windows\system32\DRIVERS\USBSTOR.SYS
15:52:45.0752 8576  USBSTOR - ok
15:52:45.0768 8576  [ 68DF884CF41CDADA664BEB01DAF67E3D ] usbuhci        C:\windows\system32\drivers\usbuhci.sys
15:52:45.0861 8576  usbuhci - ok
15:52:45.0908 8576  [ 45F4E7BF43DB40A6C6B4D92C76CBC3F2 ] usbvideo        C:\windows\system32\Drivers\usbvideo.sys
15:52:46.0002 8576  usbvideo - ok
15:52:46.0049 8576  [ 081E6E1C91AEC36758902A9F727CD23C ] UxSms          C:\windows\System32\uxsms.dll
15:52:46.0173 8576  UxSms - ok
15:52:46.0205 8576  [ 81951F51E318AECC2D68559E47485CC4 ] VaultSvc        C:\windows\system32\lsass.exe
15:52:46.0283 8576  VaultSvc - ok
15:52:46.0329 8576  [ A059C4C3EDB09E07D21A8E5C0AABD3CB ] vdrvroot        C:\windows\system32\drivers\vdrvroot.sys
15:52:46.0392 8576  vdrvroot - ok
15:52:46.0548 8576  [ C3CD30495687C2A2F66A65CA6FD89BE9 ] vds            C:\windows\System32\vds.exe
15:52:46.0688 8576  vds - ok
15:52:46.0735 8576  [ 17C408214EA61696CEC9C66E388B14F3 ] vga            C:\windows\system32\DRIVERS\vgapnp.sys
15:52:46.0844 8576  vga - ok
15:52:46.0860 8576  [ 8E38096AD5C8570A6F1570A61E251561 ] VgaSave        C:\windows\System32\drivers\vga.sys
15:52:47.0000 8576  VgaSave - ok
15:52:47.0078 8576  [ 5461686CCA2FDA57B024547733AB42E3 ] vhdmp          C:\windows\system32\drivers\vhdmp.sys
15:52:47.0156 8576  vhdmp - ok
15:52:47.0172 8576  [ C829317A37B4BEA8F39735D4B076E923 ] viaagp          C:\windows\system32\drivers\viaagp.sys
15:52:47.0250 8576  viaagp - ok
15:52:47.0297 8576  [ E02F079A6AA107F06B16549C6E5C7B74 ] ViaC7          C:\windows\system32\drivers\viac7.sys
15:52:47.0390 8576  ViaC7 - ok
15:52:47.0421 8576  [ E43574F6A56A0EE11809B48C09E4FD3C ] viaide          C:\windows\system32\drivers\viaide.sys
15:52:47.0484 8576  viaide - ok
15:52:47.0577 8576  [ C37CE43FB54066FFB540729C6E6E194E ] VideAceWindowsService C:\ExpressGateUtil\VAWinService.exe
15:52:47.0640 8576  VideAceWindowsService - ok
15:52:47.0671 8576  [ 4C63E00F2F4B5F86AB48A58CD990F212 ] volmgr          C:\windows\system32\drivers\volmgr.sys
15:52:47.0733 8576  volmgr - ok
15:52:47.0749 8576  [ B5BB72067DDDDBBFB04B2F89FF8C3C87 ] volmgrx        C:\windows\system32\drivers\volmgrx.sys
15:52:47.0843 8576  volmgrx - ok
15:52:47.0874 8576  [ C37AEE5966EB5929E2051AC7409B5730 ] volsnap        C:\windows\system32\drivers\volsnap.sys
15:52:47.0952 8576  volsnap - ok
15:52:47.0983 8576  [ 9DFA0CC2F8855A04816729651175B631 ] vsmraid        C:\windows\system32\drivers\vsmraid.sys
15:52:48.0061 8576  vsmraid - ok
15:52:48.0123 8576  [ 209A3B1901B83AEB8527ED211CCE9E4C ] VSS            C:\windows\system32\vssvc.exe
15:52:48.0326 8576  VSS - ok
15:52:48.0342 8576  [ 90567B1E658001E79D7C8BBD3DDE5AA6 ] vwifibus        C:\windows\system32\DRIVERS\vwifibus.sys
15:52:48.0435 8576  vwifibus - ok
15:52:48.0467 8576  [ 7090D3436EEB4E7DA3373090A23448F7 ] vwififlt        C:\windows\system32\DRIVERS\vwififlt.sys
15:52:48.0560 8576  vwififlt - ok
15:52:48.0576 8576  [ 55187FD710E27D5095D10A472C8BAF1C ] W32Time        C:\windows\system32\w32time.dll
15:52:48.0732 8576  W32Time - ok
15:52:48.0763 8576  [ DE3721E89C653AA281428C8A69745D90 ] WacomPen        C:\windows\system32\drivers\wacompen.sys
15:52:48.0841 8576  WacomPen - ok
15:52:48.0872 8576  [ 3C3C78515F5AB448B022BDF5B8FFDD2E ] WANARP          C:\windows\system32\DRIVERS\wanarp.sys
15:52:49.0028 8576  WANARP - ok
15:52:49.0044 8576  [ 3C3C78515F5AB448B022BDF5B8FFDD2E ] Wanarpv6        C:\windows\system32\DRIVERS\wanarp.sys
15:52:49.0169 8576  Wanarpv6 - ok
15:52:49.0247 8576  [ 691E3285E53DCA558E1A84667F13E15A ] wbengine        C:\windows\system32\wbengine.exe
15:52:49.0449 8576  wbengine - ok
15:52:49.0496 8576  [ 9614B5D29DC76AC3C29F6D2D3AA70E67 ] WbioSrvc        C:\windows\System32\wbiosrvc.dll
15:52:49.0605 8576  WbioSrvc - ok
15:52:49.0637 8576  [ 34EEE0DFAADB4F691D6D5308A51315DC ] wcncsvc        C:\windows\System32\wcncsvc.dll
15:52:49.0746 8576  wcncsvc - ok
15:52:49.0761 8576  [ 5D930B6357A6D2AF4D7653BDABBF352F ] WcsPlugInService C:\windows\System32\WcsPlugInService.dll
15:52:49.0949 8576  WcsPlugInService - ok
15:52:49.0995 8576  [ 1112A9BADACB47B7C0BB0392E3158DFF ] Wd              C:\windows\system32\drivers\wd.sys
15:52:50.0058 8576  Wd - ok
15:52:50.0120 8576  [ A840213F1ACDCC175B4D1D5AAEAC0D7A ] Wdf01000        C:\windows\system32\drivers\Wdf01000.sys
15:52:50.0229 8576  Wdf01000 - ok
15:52:50.0276 8576  [ 46EF9DC96265FD0B423DB72E7C38C2A5 ] WdiServiceHost  C:\windows\system32\wdi.dll
15:52:50.0432 8576  WdiServiceHost - ok
15:52:50.0448 8576  [ 46EF9DC96265FD0B423DB72E7C38C2A5 ] WdiSystemHost  C:\windows\system32\wdi.dll
15:52:50.0573 8576  WdiSystemHost - ok
15:52:50.0619 8576  [ A9D880F97530D5B8FEE278923349929D ] WebClient      C:\windows\System32\webclnt.dll
15:52:50.0729 8576  WebClient - ok
15:52:50.0760 8576  [ 760F0AFE937A77CFF27153206534F275 ] Wecsvc          C:\windows\system32\wecsvc.dll
15:52:50.0916 8576  Wecsvc - ok
15:52:50.0947 8576  [ AC804569BB2364FB6017370258A4091B ] wercplsupport  C:\windows\System32\wercplsupport.dll
15:52:51.0087 8576  wercplsupport - ok
15:52:51.0119 8576  [ 08E420D873E4FD85241EE2421B02C4A4 ] WerSvc          C:\windows\System32\WerSvc.dll
15:52:51.0275 8576  WerSvc - ok
15:52:51.0306 8576  [ 8B9A943F3B53861F2BFAF6C186168F79 ] WfpLwf          C:\windows\system32\DRIVERS\wfplwf.sys
15:52:51.0446 8576  WfpLwf - ok
15:52:51.0477 8576  [ 5CF95B35E59E2A38023836FFF31BE64C ] WIMMount        C:\windows\system32\drivers\wimmount.sys
15:52:51.0540 8576  WIMMount - ok
15:52:51.0618 8576  [ 3FAE8F94296001C32EAB62CD7D82E0FD ] WinDefend      C:\Program Files\Windows Defender\mpsvc.dll
15:52:51.0758 8576  WinDefend - ok
15:52:51.0789 8576  WinHttpAutoProxySvc - ok
15:52:51.0961 8576  [ F62E510B6AD4C21EB9FE8668ED251826 ] Winmgmt        C:\windows\system32\wbem\WMIsvc.dll
15:52:52.0117 8576  Winmgmt - ok
15:52:52.0242 8576  [ 1B91CD34EA3A90AB6A4EF0550174F4CC ] WinRM          C:\windows\system32\WsmSvc.dll
15:52:52.0445 8576  WinRM - ok
15:52:52.0554 8576  [ A67E5F9A400F3BD1BE3D80613B45F708 ] WinUsb          C:\windows\system32\DRIVERS\WinUsb.sys
15:52:52.0647 8576  WinUsb - ok
15:52:52.0710 8576  [ 16935C98FF639D185086A3529B1F2067 ] Wlansvc        C:\windows\System32\wlansvc.dll
15:52:52.0866 8576  Wlansvc - ok
15:52:52.0959 8576  [ 6067ACEF367E79914AF628FA1E9B5330 ] wlcrasvc        C:\Program Files\Windows Live\Mesh\wlcrasvc.exe
15:52:53.0022 8576  wlcrasvc - ok
15:52:53.0147 8576  [ FB01D4AE207B9EFDBABFC55DC95C7E31 ] wlidsvc        C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
15:52:53.0318 8576  wlidsvc - ok
15:52:53.0365 8576  [ 0217679B8FCA58714C3BF2726D2CA84E ] WmiAcpi        C:\windows\system32\DRIVERS\wmiacpi.sys
15:52:53.0427 8576  WmiAcpi - ok
15:52:53.0490 8576  [ 6EB6B66517B048D87DC1856DDF1F4C3F ] wmiApSrv        C:\windows\system32\wbem\WmiApSrv.exe
15:52:53.0583 8576  wmiApSrv - ok
15:52:53.0661 8576  [ 3B40D3A61AA8C21B88AE57C58AB3122E ] WMPNetworkSvc  C:\Program Files\Windows Media Player\wmpnetwk.exe
15:52:53.0880 8576  WMPNetworkSvc - ok
15:52:53.0911 8576  [ A2F0EC770A92F2B3F9DE6D518E11409C ] WPCSvc          C:\windows\System32\wpcsvc.dll
15:52:54.0051 8576  WPCSvc - ok
15:52:54.0083 8576  [ AA53356D60AF47EACC85BC617A4F3F66 ] WPDBusEnum      C:\windows\system32\wpdbusenum.dll
15:52:54.0207 8576  WPDBusEnum - ok
15:52:54.0239 8576  [ 6DB3276587B853BF886B69528FDB048C ] ws2ifsl        C:\windows\system32\drivers\ws2ifsl.sys
15:52:54.0379 8576  ws2ifsl - ok
15:52:54.0395 8576  [ 6F5D49EFE0E7164E03AE773A3FE25340 ] wscsvc          C:\windows\System32\wscsvc.dll
15:52:54.0504 8576  wscsvc - ok
15:52:54.0519 8576  WSearch - ok
15:52:54.0644 8576  [ FC3EC24FCE372C89423E015A2AC1A31E ] wuauserv        C:\windows\system32\wuaueng.dll
15:52:54.0847 8576  wuauserv - ok
15:52:54.0909 8576  [ 06E6F32C8D0A3F66D956F57B43A2E070 ] WudfPf          C:\windows\system32\drivers\WudfPf.sys
15:52:55.0050 8576  WudfPf - ok
15:52:55.0081 8576  [ 867C301E8B790040AE9CF6486E8041DF ] WUDFRd          C:\windows\system32\DRIVERS\WUDFRd.sys
15:52:55.0175 8576  WUDFRd - ok
15:52:55.0206 8576  [ FE47B7BC8EA320C2D9B5E5BF6E303765 ] wudfsvc        C:\windows\System32\WUDFSvc.dll
15:52:55.0331 8576  wudfsvc - ok
15:52:55.0377 8576  [ FF2D745B560F7C71B31F30F4D49F73D2 ] WwanSvc        C:\windows\System32\wwansvc.dll
15:52:55.0502 8576  WwanSvc - ok
15:52:55.0549 8576  ================ Scan global ===============================
15:52:55.0596 8576  [ DAB748AE0439955ED2FA22357533DDDB ] C:\windows\system32\basesrv.dll
15:52:55.0643 8576  [ 1F5F07091D50244F17DD8D5147A628CC ] C:\windows\system32\winsrv.dll
15:52:55.0689 8576  [ 1F5F07091D50244F17DD8D5147A628CC ] C:\windows\system32\winsrv.dll
15:52:55.0721 8576  [ 364455805E64882844EE9ACB72522830 ] C:\windows\system32\sxssrv.dll
15:52:55.0783 8576  [ 5F1B6A9C35D3D5CA72D6D6FDEF9747D6 ] C:\windows\system32\services.exe
15:52:55.0814 8576  [Global] - ok
15:52:55.0814 8576  ================ Scan MBR ==================================
15:52:55.0845 8576  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
15:52:56.0579 8576  \Device\Harddisk0\DR0 - ok
15:52:56.0579 8576  ================ Scan VBR ==================================
15:52:56.0594 8576  [ 1464CB3A891944CBF2CDA08611A9B70A ] \Device\Harddisk0\DR0\Partition1
15:52:56.0625 8576  \Device\Harddisk0\DR0\Partition1 - ok
15:52:56.0657 8576  [ 5227DB24F17502F97DBE952E1B66BC39 ] \Device\Harddisk0\DR0\Partition2
15:52:56.0719 8576  \Device\Harddisk0\DR0\Partition2 - ok
15:52:56.0719 8576  ============================================================
15:52:56.0719 8576  Scan finished
15:52:56.0719 8576  ============================================================
15:52:56.0922 7236  Detected object count: 0
15:52:56.0922 7236  Actual detected object count: 0

cosinus 11.04.2013 15:04
Und was ist mit dem anderen Log?

twa 11.04.2013 15:13
und hier der andere scan, welcher aber vor dem kaspersky gemacht wurde:
Code:
aswMBR version 0.9.9.1771 Copyright(c) 2011 AVAST Software
Run date: 2013-04-11 15:31:16
-----------------------------
15:31:16.158    OS Version: Windows 6.1.7601 Service Pack 1
15:31:16.158    Number of processors: 2 586 0x200
15:31:16.168    ComputerName: ******-PC  UserName: Admin
15:31:17.011    Initialize success
15:33:41.602    AVAST engine defs: 13041100
15:33:55.688    Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\0000006c
15:33:55.715    Disk 0 Vendor: WDC_WD32 01.0 Size: 305245MB BusType: 11
15:33:56.133    Disk 0 MBR read successfully
15:33:56.144    Disk 0 MBR scan
15:33:56.499    Disk 0 Windows 7 default MBR code
15:33:56.547    Disk 0 Partition 1 80 (A) 07    HPFS/NTFS NTFS      102400 MB offset 2048
15:33:56.649    Disk 0 Partition 2 00    1B  Hidd FAT32 MSDOS5.0    15360 MB offset 209717248
15:33:56.762    Disk 0 Partition 3 00    07    HPFS/NTFS NTFS      187468 MB offset 241174528
15:33:56.862    Disk 0 Partition 4 00    EF      EFI FAT                16 MB offset 625108992
15:33:57.044    Disk 0 scanning sectors +625141760
15:33:57.470    Disk 0 scanning C:\windows\system32\drivers
15:35:16.547    Service scanning
15:37:54.909    Modules scanning
15:38:26.988    Disk 0 trace - called modules:
15:38:27.051    ntkrnlpa.exe CLASSPNP.SYS disk.sys amd_xata.sys storport.sys halmacpi.dll amd_sata.sys
15:38:27.612    1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x84256030]
15:38:27.643    3 CLASSPNP.SYS[867ae59e] -> nt!IofCallDriver -> [0x84192020]
15:38:27.675    5 amd_xata.sys[8639a899] -> nt!IofCallDriver -> \Device\0000006c[0x8407d118]
15:38:31.450    AVAST engine scan C:\windows
15:38:38.064    AVAST engine scan C:\windows\system32
15:47:26.920    AVAST engine scan C:\windows\system32\drivers
15:48:12.241    AVAST engine scan C:\Users\Admin
15:48:46.000    AVAST engine scan C:\ProgramData
15:50:41.243    Scan finished successfully
15:51:22.349    Disk 0 MBR has been saved successfully to "C:\Users\Admin\Desktop\MBR.dat"
15:51:22.396    The log file has been saved successfully to "C:\Users\Admin\Desktop\aswMBR.txt"

cosinus 11.04.2013 15:25
JRT - Junkware Removal Tool

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.




Im Anschluss:

adwCleaner - Toolbars und ungewollte Start-/Suchseiten entfernen

Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).


Danach eine Kontrolle mit OTL bitte:
  • Doppelklick auf die OTL.exe
  • Vista User: Rechtsklick auf die OTL.exe und "als Administrator ausführen" wählen
  • Setze oben mittig den Haken bei Scanne alle Benutzer
  • Oben findest Du ein Kästchen mit Output. Wähle bitte Minimal Output
  • Unter Extra Registry, wähle bitte Use SafeList
  • Klicke nun auf Run Scan links oben
  • Wenn der Scan beendet wurde werden 2 Logfiles erstellt
  • Poste die Logfiles in CODE-Tags hier in den Thread.

twa 11.04.2013 15:28
Was sind Schutzprogramme?

cosinus 11.04.2013 15:29
Virenscanner sind das

twa 11.04.2013 15:41
Das Junkware Removal ist mit dem Scan fertig und meldet

Code:
A bad modul has been detected!
A reboot is required to remove modules.
Press 'y' to reboot now
Press 'n' to reboot later
Reboot now? [y,n]  _
Was soll ich da eingeben?

cosinus 11.04.2013 15:46
Bestätigen mit y, dann rebooten (Windows neustarten) lassen

twa 11.04.2013 16:37
So,...

Die OTL Datei:

Code:
OTL logfile created on: 11.04.2013 17:10:17 - Run 3
OTL by OldTimer - Version 3.2.69.0    Folder = C:\Users\kitte\Downloads
 Starter Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
749,46 Mb Total Physical Memory | 102,19 Mb Available Physical Memory | 13,64% Memory free
1,73 Gb Paging File | 0,81 Gb Available in Paging File | 46,76% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\windows | %ProgramFiles% = C:\Program Files
Drive C: | 100,00 Gb Total Space | 52,75 Gb Free Space | 52,75% Space Free | Partition Type: NTFS
Drive D: | 183,07 Gb Total Space | 182,52 Gb Free Space | 99,70% Space Free | Partition Type: NTFS
 
Computer Name: *****-PC | User Name: Admin | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - [2013.04.08 21:07:43 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\kitte\Downloads\OTL.exe
PRC - [2013.03.30 22:25:55 | 000,086,752 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe
PRC - [2013.03.30 22:25:39 | 000,565,472 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE
PRC - [2013.03.30 22:25:39 | 000,079,584 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
PRC - [2013.03.30 22:25:38 | 000,345,312 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
PRC - [2013.03.30 22:25:38 | 000,110,816 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe
PRC - [2013.03.20 12:55:48 | 000,162,856 | ---- | M] (Geek Software GmbH) -- C:\Program Files\PDF24\pdf24.exe
PRC - [2013.02.20 13:35:28 | 000,152,392 | ---- | M] (Apple Inc.) -- D:\iTunesHelper.exe
PRC - [2012.11.30 04:55:25 | 000,271,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\conhost.exe
PRC - [2012.11.23 04:48:41 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe
PRC - [2012.08.13 12:08:08 | 010,376,704 | ---- | M] (OpenOffice.org) -- C:\Program Files\OpenOffice.org 3\program\soffice.exe
PRC - [2012.08.13 12:08:08 | 010,368,512 | ---- | M] (OpenOffice.org) -- C:\Program Files\OpenOffice.org 3\program\soffice.bin
PRC - [2011.10.01 09:30:42 | 000,219,496 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Application Virtualization Client\sftvsa.exe
PRC - [2011.10.01 09:30:36 | 000,508,776 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Application Virtualization Client\sftlist.exe
PRC - [2011.08.09 01:49:08 | 001,263,024 | ---- | M] (ASUSTeK Computer Inc.) -- C:\Program Files\ASUS\HotkeyService\HotkeyService.exe
PRC - [2011.08.09 01:49:00 | 000,101,800 | ---- | M] (ASUSTeK Computer Inc.) -- C:\Program Files\ASUS\HotkeyService\HotKeyMon.exe
PRC - [2011.08.09 01:48:20 | 000,224,680 | ---- | M] () -- C:\Windows\System32\AsusService.exe
PRC - [2011.07.21 09:46:32 | 000,294,400 | ---- | M] (Advanced Micro Devices, Inc.) -- C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
PRC - [2011.07.20 14:10:10 | 000,401,408 | ---- | M] (AMD) -- C:\Windows\System32\atieclxx.exe
PRC - [2011.07.20 14:09:40 | 000,176,128 | ---- | M] (AMD) -- C:\Windows\System32\atiesrxx.exe
PRC - [2011.07.12 23:06:24 | 000,045,448 | ---- | M] () -- C:\ExpressGateUtil\VAWinAgent.exe
PRC - [2011.06.16 03:37:58 | 000,100,992 | ---- | M] (ASUS) -- C:\Program Files\Common Files\InstantOn\InsOnWMI.exe
PRC - [2011.06.03 00:11:06 | 000,064,128 | ---- | M] (ASUS) -- C:\Program Files\Common Files\InstantOn\InsOnSrv.exe
PRC - [2011.04.14 20:23:12 | 000,419,504 | ---- | M] (ASUSTek Computer Inc.) -- C:\Program Files\Asus\Eee Docking\Eee Docking.exe
PRC - [2011.03.25 18:55:16 | 000,091,464 | ---- | M] () -- C:\ExpressGateUtil\VAWinService.exe
PRC - [2011.02.25 20:46:22 | 000,249,648 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft\BingBar\SeaPort.EXE
PRC - [2011.02.25 07:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2011.01.27 03:15:08 | 000,413,112 | ---- | M] (ASUSTeK Computer Inc.) -- C:\Program Files\ASUS\SHE\SuperHybridEngine.exe
PRC - [2010.11.15 22:27:22 | 000,445,344 | ---- | M] (ASUS) -- C:\Program Files\ASUS\CapsHook\CapsHook.exe
PRC - [2010.09.17 10:32:44 | 000,197,968 | ---- | M] (Trend Micro Inc.) -- C:\Program Files\Trend Micro\Titanium\TiResumeSrv.exe
PRC - [2010.09.17 10:32:44 | 000,161,104 | ---- | M] (Trend Micro Inc.) -- C:\Program Files\Trend Micro\Titanium\TiMiniService.exe
PRC - [2010.06.10 09:57:18 | 000,548,744 | ---- | M] (ELAN Microelectronic Corp.) -- C:\Program Files\Elantech\ETDCtrl.exe
PRC - [2010.04.07 07:16:52 | 001,599,880 | ---- | M] (ELAN Microelectronic Corp.) -- C:\Program Files\Elantech\ETDCtrlHelper.exe
 
 
========== Modules (No Company Name) ==========
 
MOD - [2013.03.19 17:13:37 | 000,240,128 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra#\78967b28f748b8807eaa97c1cb454adc\WindowsFormsIntegration.ni.dll
MOD - [2013.03.19 17:08:07 | 000,368,128 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\d7d20811a7ce7cc589153648cbb1ce5c\PresentationFramework.Aero.ni.dll
MOD - [2013.03.19 17:07:13 | 001,670,144 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\7366a39c36523a084bc11c230929ff92\Microsoft.VisualBasic.ni.dll
MOD - [2013.03.19 17:06:19 | 014,340,608 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\ff7c9a4f41f7cccc47e696c11b9f8469\PresentationFramework.ni.dll
MOD - [2013.03.19 16:51:48 | 012,237,824 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\19b3d17c3ce0e264c4fb62028161adf7\PresentationCore.ni.dll
MOD - [2013.03.19 16:51:14 | 003,347,968 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\cf827fe7bc99d9bcf0ba3621054ef527\WindowsBase.ni.dll
MOD - [2013.03.19 16:50:39 | 002,297,856 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System.Core\77dfcfed5fd5f67d0d3edc545935bb21\System.Core.ni.dll
MOD - [2013.03.19 16:47:00 | 000,771,584 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\90b89f6e8032310e9ac72a309fd49e83\System.Runtime.Remoting.ni.dll
MOD - [2013.03.19 16:46:36 | 011,833,344 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System.Web\5ecf01964c70e453d71e5d7653912ff9\System.Web.ni.dll
MOD - [2013.03.19 16:45:32 | 012,436,480 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\cb562e2e4f74ae607f1186f6ec50cec7\System.Windows.Forms.ni.dll
MOD - [2013.03.19 16:45:01 | 001,592,832 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\eead6629e384a5b69f9ae35284b7eeed\System.Drawing.ni.dll
MOD - [2013.03.19 16:44:48 | 005,453,312 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml\f687c43e9fdec031988b33ae722c4613\System.Xml.ni.dll
MOD - [2013.03.19 16:44:37 | 000,971,264 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\195a77fcc6206f8bb35d419ff2cf0d72\System.Configuration.ni.dll
MOD - [2013.03.19 16:44:24 | 007,989,760 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System\369f8bdca364e2b4936d18dea582912c\System.ni.dll
MOD - [2013.03.19 16:44:00 | 011,493,376 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\mscorlib\7150b9136fad5b79e88f6c7f9d3d2c39\mscorlib.ni.dll
MOD - [2013.01.28 14:08:56 | 000,087,952 | ---- | M] () -- C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
MOD - [2013.01.28 14:08:28 | 001,242,512 | ---- | M] () -- C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
MOD - [2012.08.10 17:51:32 | 000,985,088 | ---- | M] () -- C:\Program Files\OpenOffice.org 3\program\libxml2.dll
MOD - [2011.07.21 09:46:40 | 000,095,232 | ---- | M] () -- C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Proxy.Native.dll
MOD - [2011.07.21 09:35:56 | 000,243,712 | ---- | M] () -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll
MOD - [2011.07.12 23:06:24 | 000,045,448 | ---- | M] () -- C:\ExpressGateUtil\VAWinAgent.exe
MOD - [2011.03.15 00:21:10 | 000,016,384 | ---- | M] () -- C:\Program Files\ATI Technologies\ATI.ACE\Branding\Branding.dll
MOD - [2011.02.16 17:29:11 | 000,212,992 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\System.resources\2.0.0.0_de_b77a5c561934e089\System.resources.dll
MOD - [2011.02.16 17:29:03 | 000,249,856 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\PresentationFramework.resources\3.0.0.0_de_31bf3856ad364e35\PresentationFramework.resources.dll
MOD - [2011.02.16 17:29:03 | 000,110,592 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\PresentationCore.resources\3.0.0.0_de_31bf3856ad364e35\PresentationCore.resources.dll
MOD - [2010.11.13 01:19:05 | 000,434,176 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\System.Windows.Forms.resources\2.0.0.0_de_b77a5c561934e089\System.Windows.Forms.resources.dll
MOD - [2010.11.13 01:19:04 | 000,315,392 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_de_b77a5c561934e089\mscorlib.resources.dll
MOD - [2010.09.02 13:08:00 | 000,118,784 | ---- | M] () -- C:\PROGRA~1\ASUS\ASUSWE~1\30102~1.211\ASUSWS~1.DLL
 
 
========== Services (SafeList) ==========
 
SRV - File not found [On_Demand | Stopped] -- C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe coreFrameworkHost.exe -- (Amsp)
SRV - [2013.03.30 22:25:55 | 000,086,752 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Program Files\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2013.03.30 22:25:39 | 000,565,472 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE -- (AntiVirWebService)
SRV - [2013.03.30 22:25:38 | 000,110,816 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2013.03.08 09:50:45 | 000,115,608 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2011.10.01 09:30:42 | 000,219,496 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Program Files\Microsoft Application Virtualization Client\sftvsa.exe -- (sftvsa)
SRV - [2011.10.01 09:30:36 | 000,508,776 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Microsoft Application Virtualization Client\sftlist.exe -- (sftlist)
SRV - [2011.08.09 01:48:20 | 000,224,680 | ---- | M] () [Auto | Running] -- C:\Windows\System32\AsusService.exe -- (AsusService)
SRV - [2011.07.21 09:46:32 | 000,294,400 | ---- | M] (Advanced Micro Devices, Inc.) [Auto | Running] -- C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe -- (AMD FUEL Service)
SRV - [2011.07.20 14:09:40 | 000,176,128 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\System32\atiesrxx.exe -- (AMD External Events Utility)
SRV - [2011.06.03 00:11:06 | 000,064,128 | ---- | M] (ASUS) [Auto | Running] -- C:\Program Files\Common Files\InstantOn\InsOnSrv.exe -- (ASUS InstantOn)
SRV - [2011.03.25 18:55:16 | 000,091,464 | ---- | M] () [Auto | Running] -- C:\ExpressGateUtil\VAWinService.exe -- (VideAceWindowsService)
SRV - [2011.03.02 07:23:36 | 000,183,560 | ---- | M] (Microsoft Corporation.) [On_Demand | Stopped] -- C:\Program Files\Microsoft\BingBar\BBSvc.EXE -- (BBSvc)
SRV - [2011.02.25 20:46:22 | 000,249,648 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Microsoft\BingBar\SeaPort.EXE -- (SeaPort)
SRV - [2010.09.17 10:32:44 | 000,161,104 | ---- | M] (Trend Micro Inc.) [Auto | Running] -- C:\Program Files\Trend Micro\Titanium\TiMiniService.exe -- (TiMiniService)
SRV - [2009.07.14 03:15:41 | 000,680,960 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\mpsvc.dll -- (WinDefend)
 
 
========== Driver Services (SafeList) ==========
 
DRV - [2013.03.30 22:26:06 | 000,135,136 | ---- | M] (Avira Operations GmbH & Co. KG) [Kernel | System | Running] -- C:\Windows\System32\drivers\avipbb.sys -- (avipbb)
DRV - [2013.03.30 22:26:06 | 000,084,744 | ---- | M] (Avira Operations GmbH & Co. KG) [File_System | Auto | Running] -- C:\Windows\System32\drivers\avgntflt.sys -- (avgntflt)
DRV - [2013.03.30 22:26:06 | 000,037,352 | ---- | M] (Avira Operations GmbH & Co. KG) [Kernel | System | Running] -- C:\Windows\System32\drivers\avkmgr.sys -- (avkmgr)
DRV - [2012.08.27 15:50:24 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\System32\drivers\ssmdrv.sys -- (ssmdrv)
DRV - [2011.10.01 09:30:42 | 000,019,304 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Sftvollh.sys -- (Sftvol)
DRV - [2011.10.01 09:30:40 | 000,021,864 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Running] -- C:\Windows\System32\drivers\Sftredirlh.sys -- (Sftredir)
DRV - [2011.10.01 09:30:38 | 000,194,408 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Sftplaylh.sys -- (Sftplay)
DRV - [2011.10.01 09:30:36 | 000,579,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Sftfslh.sys -- (Sftfs)
DRV - [2011.07.20 16:39:22 | 007,811,072 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\atikmdag.sys -- (amdkmdag)
DRV - [2011.07.20 13:33:12 | 000,245,760 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\atikmpag.sys -- (amdkmdap)
DRV - [2010.11.20 12:24:42 | 000,052,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV - [2010.11.20 12:24:42 | 000,027,264 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbGD.sys -- (TsUsbGD)
DRV - [2010.11.20 11:59:46 | 000,035,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\winusb.sys -- (WinUsb)
DRV - [2010.11.16 20:34:24 | 000,101,392 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\AtihdW73.sys -- (AtiHDAudioService)
DRV - [2010.11.04 12:52:50 | 000,064,128 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\amd_sata.sys -- (amd_sata)
DRV - [2010.11.04 12:52:50 | 000,032,384 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\amd_xata.sys -- (amd_xata)
DRV - [2010.09.27 09:23:58 | 000,068,208 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\L1C62x86.sys -- (L1C)
DRV - [2010.09.17 10:32:48 | 000,189,520 | ---- | M] (Trend Micro Inc.) [Kernel | System | Running] -- C:\Windows\System32\drivers\tmcomm.sys -- (tmcomm)
DRV - [2010.09.17 10:32:48 | 000,092,112 | ---- | M] (Trend Micro Inc.) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\tmtdi.sys -- (tmtdi)
DRV - [2010.09.17 10:32:48 | 000,080,464 | ---- | M] (Trend Micro Inc.) [Kernel | System | Running] -- C:\Windows\System32\drivers\tmactmon.sys -- (tmactmon)
DRV - [2010.09.17 10:32:48 | 000,064,080 | ---- | M] (Trend Micro Inc.) [Kernel | System | Running] -- C:\Windows\System32\drivers\tmevtmgr.sys -- (tmevtmgr)
DRV - [2010.08.03 07:20:56 | 000,011,832 | ---- | M] () [Kernel | System | Running] -- C:\Windows\System32\drivers\AsUpIO.sys -- (AsUpIO)
DRV - [2010.06.28 07:24:00 | 000,011,456 | ---- | M] () [Kernel | System | Running] -- C:\Windows\System32\drivers\AsIO.sys -- (AsIO)
DRV - [2010.03.02 17:43:20 | 001,263,104 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\athr.sys -- (athr)
DRV - [2010.02.18 19:18:22 | 000,037,944 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\amdiox86.sys -- (amdiox86)
DRV - [2009.07.20 11:29:40 | 000,013,880 | ---- | M] ( ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\kbfiltr.sys -- (kbfiltr)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE - HKLM\..\SearchScopes,DefaultScope =
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&form=ASUTDF&pc=NP07&src=IE-SearchBox
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus.msn.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://eeepc.asus.com [binary data]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://eeepc.asus.com [binary data]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
IE - HKCU\..\SearchScopes,DefaultScope =
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&form=ASUTDF&pc=NP07&src=IE-SearchBox
IE - HKCU\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKCU\..\SearchScopes\{F8419A54-D119-4E1B-BC5A-E9DFB14125B4}: "URL" = hxxp://websearch.ask.com/redirect?client=ie&tb=AVR-4&o=APN10267&src=kw&q={searchTerms}&locale=de_NL&apn_ptnrs=^AGY&apn_dtid=^YYYYYY^YY^NL&apn_uid=275d5fe8-4042-47cc-bca4-3bda82c2747b&apn_sauid=104383A4-0504-4694-BEE5-2DFB27E76722
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
 
 
========== FireFox ==========
 
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=:  File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: D:\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.17.2: C:\windows\system32\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.17.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~1\MIF5BA~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\{22C7F6C6-8D67-4534-92B5-529A0EC09405}: C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1381\6.5.1234\firefoxextension\ [2011.11.10 01:03:53 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 17.0.4\extensions\\Components: C:\Program Files\Mozilla Thunderbird\components [2013.03.29 10:09:26 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 17.0.4\extensions\\Plugins: C:\Program Files\Mozilla Thunderbird\plugins
 
[2013.04.04 13:43:32 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\mozilla firefox\extensions
 
O1 HOSTS File: ([2009.06.10 23:39:37 | 000,000,824 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O2 - BHO: (TmIEPlugInBHO Class) - {1CA1377B-DC1D-4A52-9585-6E06050FAC53} - C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1381\6.5.1234\TmIEPlg.dll (Trend Micro Inc.)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (TmBpIeBHO Class) - {BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC} - C:\Program Files\Trend Micro\AMSP\Module\20002\6.5.1234\6.5.1234\TmBpIe32.dll (Trend Micro Inc.)
O2 - BHO: (Bing Bar Helper) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O3 - HKLM\..\Toolbar: (Bing Bar) - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O4 - HKLM..\Run: []  File not found
O4 - HKLM..\Run: [APSDaemon] C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [ASUSPRP] C:\Program Files\ASUS\APRP\APRP.EXE (ASUSTek Computer Inc.)
O4 - HKLM..\Run: [ASUSWebStorage] C:\Program Files\ASUS\ASUS WebStorage\3.0.102.211\AsusWSPanel.exe (ecareme)
O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
O4 - HKLM..\Run: [CanonSolutionMenu] C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe (CANON INC.)
O4 - HKLM..\Run: [CapsHook] C:\windows\System32\AsusSender.exe (ASUSTek Computer Inc.)
O4 - HKLM..\Run: [Eee Docking] C:\Program Files\ASUS\Eee Docking\Eee Docking.exe (ASUSTek Computer Inc.)
O4 - HKLM..\Run: [ETDWare] C:\Program Files\Elantech\ETDCtrl.exe (ELAN Microelectronic Corp.)
O4 - HKLM..\Run: [HotkeyMon] C:\windows\System32\AsusSender.exe (ASUSTek Computer Inc.)
O4 - HKLM..\Run: [HotkeyService] C:\windows\System32\AsusSender.exe (ASUSTek Computer Inc.)
O4 - HKLM..\Run: [iTunesHelper] D:\iTunesHelper.exe (Apple Inc.)
O4 - HKLM..\Run: [LiveUpdate] C:\windows\System32\AsusSender.exe (ASUSTek Computer Inc.)
O4 - HKLM..\Run: [PDFPrint] C:\Program Files\PDF24\pdf24.exe (Geek Software GmbH)
O4 - HKLM..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKLM..\Run: [SuperHybridEngine] C:\windows\System32\AsusSender.exe (ASUSTek Computer Inc.)
O4 - HKLM..\Run: [Trend Micro Client Framework] C:\Program Files\Trend Micro\UniClient\UiFrmWrk\UIWatchDog.exe (Trend Micro Inc.)
O4 - HKLM..\Run: [Trend Micro Titanium] C:\Program Files\Trend Micro\Titanium\VizorShortCut.exe (Trend Micro Inc.)
O4 - HKLM..\Run: [VAWinAgent] C:\ExpressGateUtil\VAWinAgent.exe ()
O4 - HKLM..\Run: [VizorHtmlDialog.exe] C:\Program Files\Trend Micro\Titanium\UIFramework\VizorHtmlDialog.exe (Trend Micro Inc.)
O4 - HKLM..\RunOnce: [*ForceDelete] C:\Users\kitte\Downloads\adwcleaner.exe ()
O4 - HKLM..\RunOnce: [Z1] C:\windows\System32\cmd.exe (Microsoft Corporation)
O4 - HKCU..\RunOnce: [DeleteOnReboot] C:\Windows\DeleteOnReboot.bat ()
O4 - HKCU..\RunOnce: [JRTcleanup] C:\JRT\JRT.bat ()
O4 - HKCU..\RunOnce: [Report] \AdwCleaner[S1].txt ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0
O10 - NameSpace_Catalog5\Catalog_Entries\000000000010 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Program Files\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Program Files\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Program Files\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)
O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Program Files\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)
O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\Program Files\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)
O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\Program Files\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)
O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\Program Files\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)
O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - C:\Program Files\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)
O10 - Protocol_Catalog9\Catalog_Entries\000000000020 - C:\Program Files\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)
O13 - gopher Prefix: missing
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{5DE7592A-F969-490A-806E-24783E17EE4A}: DhcpNameServer = 192.168.1.1
O18 - Protocol\Handler\tmbp {1A77E7DC-C9A0-4110-8A37-2F36BAE71ECF} - C:\Program Files\Trend Micro\AMSP\Module\20002\6.5.1234\6.5.1234\TmBpIe32.dll (Trend Micro Inc.)
O18 - Protocol\Handler\tmpx {0E526CB5-7446-41D1-A403-19BFE95E8C23} - C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1381\6.5.1234\TmIEPlg.dll (Trend Micro Inc.)
O20 - AppInit_DLLs: (c:\progra~2\browse~1\261125~1.80\{c16c1~1\browse~1.dll) - c:\ProgramData\BrowserProtect\2.6.1125.80\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.dll ()
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009.06.10 23:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
 
========== Files/Folders - Created Within 30 Days ==========
 
[2013.04.11 12:48:58 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2013.04.11 09:24:34 | 000,000,000 | ---D | C] -- C:\ProgramData\Canneverbe Limited
[2013.04.11 09:23:36 | 000,000,000 | ---D | C] -- C:\Program Files\CDBurnerXP
[2013.04.11 09:19:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF24
[2013.04.11 09:18:17 | 000,000,000 | ---D | C] -- C:\Program Files\PDF24
[2013.04.11 09:17:45 | 000,000,000 | ---D | C] -- C:\Users\Admin\AppData\Local\Programs
[2013.04.11 07:46:07 | 000,000,000 | ---D | C] -- C:\ProgramData\TEMP
[2013.04.11 07:34:41 | 002,382,848 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\mshtml.tlb
[2013.04.11 07:34:37 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\jsproxy.dll
[2013.04.11 07:34:35 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\ieui.dll
[2013.04.11 07:34:34 | 000,142,848 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\ieUnatt.exe
[2013.04.11 07:34:33 | 000,607,744 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\msfeeds.dll
[2013.04.11 07:34:28 | 001,800,704 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\jscript9.dll
[2013.04.11 07:34:28 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\url.dll
[2013.04.11 07:34:23 | 001,427,968 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\inetcpl.cpl
[2013.04.10 19:29:10 | 002,347,008 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\win32k.sys
[2013.04.08 21:16:43 | 000,000,000 | ---D | C] -- C:\windows\ERUNT
[2013.04.08 21:14:07 | 000,000,000 | ---D | C] -- C:\JRT
[2013.04.04 20:12:44 | 000,000,000 | ---D | C] -- C:\TEMP
[2013.04.04 13:43:52 | 000,000,000 | ---D | C] -- C:\ProgramData\BrowserProtect
[2013.04.04 13:43:32 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox
[2013.03.29 10:12:44 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MozBackup
[2013.03.29 10:12:43 | 000,000,000 | ---D | C] -- C:\Program Files\MozBackup
[2013.03.29 10:09:40 | 000,000,000 | ---D | C] -- C:\ProgramData\Mozilla
[2013.03.29 10:09:38 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Maintenance Service
[2013.03.29 10:09:13 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Thunderbird
[2013.03.27 11:48:42 | 000,000,000 | ---D | C] -- C:\Users\Admin\AppData\Local\RadiantViewer
[2013.03.27 11:48:38 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RadiAnt DICOM Viewer
[2013.03.27 11:48:35 | 000,000,000 | ---D | C] -- C:\ProgramData\RadiAntViewer
[2013.03.25 01:27:28 | 000,000,000 | -HSD | C] -- C:\Config.Msi
[2013.03.24 21:38:16 | 000,000,000 | ---D | C] -- C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BewerbungsMaster
[2013.03.24 19:49:18 | 000,000,000 | ---D | C] -- C:\Users\Admin\AppData\Local\SoftGrid Client
[2013.03.24 19:49:07 | 000,000,000 | ---D | C] -- C:\Users\Admin\AppData\Roaming\SoftGrid Client
[2013.03.22 22:29:23 | 000,000,000 | ---D | C] -- C:\ProgramData\VirtualizedApplications
[2013.03.22 14:17:18 | 000,000,000 | ---D | C] -- C:\Users\Admin\Documents\BewerbungsMaster
[2013.03.22 14:17:18 | 000,000,000 | ---D | C] -- C:\ProgramData\BewerbungsMaster
[2013.03.22 14:16:41 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BewerbungsMaster
[2013.03.22 14:10:30 | 000,000,000 | ---D | C] -- C:\Program Files\BEWERBUNGSMASTER
[2013.03.22 14:10:11 | 000,335,872 | ---- | C] (Microsoft Corporation) -- C:\windows\Setup1.exe
[2013.03.22 14:09:53 | 000,074,752 | ---- | C] (Microsoft Corporation) -- C:\windows\ST6UNST.EXE
[2013.03.22 14:04:48 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Starter (Deutsch)
[2013.03.22 13:57:10 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\DESIGNER
[2013.03.22 13:57:00 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Application Virtualization Client
[2013.03.22 13:54:15 | 000,000,000 | ---D | C] -- C:\Users\Admin\AppData\Roaming\TP
[2013.03.21 16:01:23 | 000,000,000 | -HSD | C] -- C:\$RECYCLE.BIN
[2013.03.21 15:57:54 | 000,000,000 | ---D | C] -- C:\Users\Admin\AppData\Roaming\Apple Computer
[2013.03.21 15:57:28 | 000,000,000 | ---D | C] -- C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Trend Micro Titanium
[2013.03.21 15:55:34 | 000,000,000 | ---D | C] -- C:\Users\Admin\AppData\Local\VirtualStore
[2013.03.18 15:56:36 | 000,000,000 | ---D | C] -- C:\ProgramData\Sun
[2013.03.18 15:56:31 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Java
[2013.03.18 15:54:07 | 000,861,088 | ---- | C] (Oracle Corporation) -- C:\windows\System32\npDeployJava1.dll
[2013.03.18 15:54:07 | 000,782,240 | ---- | C] (Oracle Corporation) -- C:\windows\System32\deployJava1.dll
[2013.03.18 15:54:07 | 000,262,560 | ---- | C] (Oracle Corporation) -- C:\windows\System32\javaws.exe
[2013.03.18 15:53:08 | 000,174,496 | ---- | C] (Oracle Corporation) -- C:\windows\System32\javaw.exe
[2013.03.18 15:53:08 | 000,174,496 | ---- | C] (Oracle Corporation) -- C:\windows\System32\java.exe
[2013.03.18 15:53:08 | 000,094,112 | ---- | C] (Oracle Corporation) -- C:\windows\System32\WindowsAccessBridge.dll
[2013.03.18 15:52:09 | 000,000,000 | ---D | C] -- C:\Program Files\Java
[2013.03.18 10:38:32 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
[2013.03.18 10:36:31 | 000,000,000 | ---D | C] -- C:\Program Files\iPod
[2013.03.18 10:36:26 | 000,000,000 | ---D | C] -- C:\ProgramData\Apple Computer
[2013.03.18 10:36:26 | 000,000,000 | ---D | C] -- C:\ProgramData\188F1432-103A-4ffb-80F1-36B633C5C9E1
[2013.03.18 10:32:00 | 000,000,000 | ---D | C] -- C:\Users\Admin\AppData\Local\Apple
[2013.03.18 10:31:48 | 000,000,000 | ---D | C] -- C:\Program Files\Apple Software Update
[2013.03.18 10:29:18 | 000,000,000 | ---D | C] -- C:\Program Files\Bonjour
[2013.03.18 10:28:28 | 000,000,000 | ---D | C] -- C:\ProgramData\Apple
[2013.03.18 10:28:28 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Apple
[2013.03.18 09:59:52 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft.NET
[2013.03.17 19:05:50 | 000,000,000 | -H-D | C] -- C:\windows\System32\CanonIJ Uninstaller Information
[2013.03.17 19:05:48 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MP540 series
[2013.03.17 19:05:36 | 000,000,000 | -H-D | C] -- C:\ProgramData\CanonBJ
[2013.03.17 19:02:19 | 000,230,912 | ---- | C] (CANON INC.) -- C:\windows\System32\CNMLM9E.DLL
[2013.03.17 19:01:32 | 000,000,000 | -H-D | C] -- C:\Program Files\CanonBJ
[2013.03.17 19:01:30 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities
[2013.03.17 19:01:28 | 000,000,000 | ---D | C] -- C:\Program Files\Canon
[2013.03.16 19:58:51 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
[2013.03.16 19:57:53 | 000,000,000 | ---D | C] -- C:\Users\Admin\AppData\Local\Google
[2013.03.16 19:57:53 | 000,000,000 | ---D | C] -- C:\Program Files\Google
[2013.03.16 19:50:27 | 000,000,000 | -HSD | C] -- C:\Users\Admin\Vorlagen
[2013.03.16 19:50:27 | 000,000,000 | -HSD | C] -- C:\Users\Admin\AppData\Local\Verlauf
[2013.03.16 19:50:27 | 000,000,000 | -HSD | C] -- C:\Users\Admin\AppData\Local\Temporary Internet Files
[2013.03.16 19:50:27 | 000,000,000 | -HSD | C] -- C:\Users\Admin\Startmenü
[2013.03.16 19:50:27 | 000,000,000 | -HSD | C] -- C:\Users\Admin\SendTo
[2013.03.16 19:50:27 | 000,000,000 | -HSD | C] -- C:\Users\Admin\Recent
[2013.03.16 19:50:27 | 000,000,000 | -HSD | C] -- C:\Users\Admin\Lokale Einstellungen
[2013.03.16 19:50:27 | 000,000,000 | -HSD | C] -- C:\Users\Admin\Druckumgebung
[2013.03.16 19:50:27 | 000,000,000 | -HSD | C] -- C:\Users\Admin\AppData\Local\Anwendungsdaten
[2013.03.16 19:50:26 | 000,000,000 | -HSD | C] -- C:\Users\Admin\Netzwerkumgebung
[2013.03.16 19:50:26 | 000,000,000 | -HSD | C] -- C:\Users\Admin\Documents\Eigene Videos
[2013.03.16 19:50:26 | 000,000,000 | -HSD | C] -- C:\Users\Admin\Documents\Eigene Musik
[2013.03.16 19:50:26 | 000,000,000 | -HSD | C] -- C:\Users\Admin\Eigene Dateien
[2013.03.16 19:50:26 | 000,000,000 | -HSD | C] -- C:\Users\Admin\Documents\Eigene Bilder
[2013.03.16 19:50:26 | 000,000,000 | -HSD | C] -- C:\Users\Admin\Cookies
[2013.03.16 19:50:26 | 000,000,000 | -HSD | C] -- C:\Users\Admin\Anwendungsdaten
[2013.03.16 19:50:16 | 000,000,000 | --SD | C] -- C:\Users\Admin\AppData\Roaming\Microsoft
[2013.03.16 19:50:16 | 000,000,000 | R--D | C] -- C:\Users\Admin\Videos
[2013.03.16 19:50:16 | 000,000,000 | R--D | C] -- C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
[2013.03.16 19:50:16 | 000,000,000 | R--D | C] -- C:\Users\Admin\Searches
[2013.03.16 19:50:16 | 000,000,000 | R--D | C] -- C:\Users\Admin\Saved Games
[2013.03.16 19:50:16 | 000,000,000 | R--D | C] -- C:\Users\Admin\Pictures
[2013.03.16 19:50:16 | 000,000,000 | R--D | C] -- C:\Users\Admin\Music
[2013.03.16 19:50:16 | 000,000,000 | R--D | C] -- C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
[2013.03.16 19:50:16 | 000,000,000 | R--D | C] -- C:\Users\Admin\Links
[2013.03.16 19:50:16 | 000,000,000 | R--D | C] -- C:\Users\Admin\Favorites
[2013.03.16 19:50:16 | 000,000,000 | R--D | C] -- C:\Users\Admin\Downloads
[2013.03.16 19:50:16 | 000,000,000 | R--D | C] -- C:\Users\Admin\Documents
[2013.03.16 19:50:16 | 000,000,000 | R--D | C] -- C:\Users\Admin\Desktop
[2013.03.16 19:50:16 | 000,000,000 | R--D | C] -- C:\Users\Admin\Contacts
[2013.03.16 19:50:16 | 000,000,000 | R--D | C] -- C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
[2013.03.16 19:50:16 | 000,000,000 | R--D | C] -- C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
[2013.03.16 19:50:16 | 000,000,000 | -H-D | C] -- C:\Users\Admin\AppData
[2013.03.16 19:50:16 | 000,000,000 | ---D | C] -- C:\Users\Admin\AppData\Local\Windows Live
[2013.03.16 19:50:16 | 000,000,000 | ---D | C] -- C:\Users\Admin\AppData\Local\Temp
[2013.03.16 19:50:16 | 000,000,000 | ---D | C] -- C:\Users\Admin\AppData\Local\Microsoft
[2013.03.16 19:50:16 | 000,000,000 | ---D | C] -- C:\Users\Admin\AppData\Roaming\Macromedia
[2013.03.16 19:50:16 | 000,000,000 | ---D | C] -- C:\Users\Admin\AppData\Roaming\InstallShield
[2013.03.16 19:50:16 | 000,000,000 | ---D | C] -- C:\Users\Admin\AppData\Roaming\Identities
[2013.03.16 19:50:16 | 000,000,000 | ---D | C] -- C:\Users\Admin\AppData\Roaming\E-Cam
[2013.03.16 19:50:16 | 000,000,000 | ---D | C] -- C:\Users\Admin\AppData\Roaming\ATI
[2013.03.16 19:50:16 | 000,000,000 | ---D | C] -- C:\Users\Admin\AppData\Local\ATI
[2013.03.16 19:50:16 | 000,000,000 | ---D | C] -- C:\Users\Admin\Documents\Asus WebStorage
[2013.03.16 19:50:16 | 000,000,000 | ---D | C] -- C:\Users\Admin\AppData\Roaming\ASUS WebStorage
[2013.03.16 19:50:16 | 000,000,000 | ---D | C] -- C:\Users\Admin\AppData\Local\ASUS
[2013.03.16 19:50:16 | 000,000,000 | ---D | C] -- C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AMD VISION Engine Control Center
[2013.03.16 19:50:16 | 000,000,000 | ---D | C] -- C:\Users\Admin\AppData\Local\AMD
[2013.03.16 19:50:16 | 000,000,000 | ---D | C] -- C:\Users\Admin\AppData\Roaming\Adobe
[2013.03.16 19:50:16 | 000,000,000 | ---D | C] -- C:\Users\Admin\AppData\Local\Adobe
[2013.03.15 22:48:29 | 000,295,424 | ---- | C] (Adobe Systems Incorporated) -- C:\windows\System32\atmfd.dll
[2013.03.15 22:48:29 | 000,034,304 | ---- | C] (Adobe Systems) -- C:\windows\System32\atmlib.dll
[2013.03.15 22:04:06 | 000,047,720 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\WdfLdr.sys
[2013.03.15 22:04:06 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\Wdfres.dll
[2013.03.15 21:45:47 | 000,172,032 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\WUDFPlatform.dll
[2013.03.15 21:45:44 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\WUDFCoinstaller.dll
[2013.03.15 21:45:43 | 000,613,888 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\WUDFx.dll
[2013.03.15 21:39:52 | 000,293,376 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\browserchoice.exe
[2013.03.15 21:11:27 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\usb8023.sys
[2013.03.15 21:10:56 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\RNDISMP.sys
[2013.03.15 21:09:42 | 000,187,752 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\FWPKCLNT.SYS
[2013.03.14 22:58:04 | 000,376,832 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\dpnet.dll
[2013.03.14 22:50:07 | 000,245,760 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\OxpsConverter.exe
[2013.03.14 22:49:35 | 000,478,720 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\timedate.cpl
[2013.03.14 22:48:39 | 003,967,848 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\ntkrnlpa.exe
[2013.03.14 22:48:33 | 003,913,064 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\ntoskrnl.exe
[2013.03.14 22:48:14 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\msxml3r.dll
[2013.03.14 22:46:18 | 000,156,672 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\ncsi.dll
[2013.03.14 22:46:17 | 000,240,496 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\netio.sys
[2013.03.14 22:46:14 | 000,175,104 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\netcorehc.dll
[2013.03.14 22:46:08 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\netevent.dll
[2013.03.14 22:40:30 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\packager.dll
[2013.03.14 22:34:03 | 000,271,360 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\conhost.exe
[2013.03.14 22:33:32 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.03.14 22:33:31 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-threadpool-l1-1-0.dll
[2013.03.14 22:33:31 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-xstate-l1-1-0.dll
[2013.03.14 22:33:30 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-sysinfo-l1-1-0.dll
[2013.03.14 22:33:30 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-synch-l1-1-0.dll
[2013.03.14 22:33:30 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-rtlsupport-l1-1-0.dll
[2013.03.14 22:33:29 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-processthreads-l1-1-0.dll
[2013.03.14 22:33:29 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-processenvironment-l1-1-0.dll
[2013.03.14 22:33:29 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-namedpipe-l1-1-0.dll
[2013.03.14 22:33:26 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-misc-l1-1-0.dll
[2013.03.14 22:33:25 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-localregistry-l1-1-0.dll
[2013.03.14 22:33:25 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-memory-l1-1-0.dll
[2013.03.14 22:33:25 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-interlocked-l1-1-0.dll
[2013.03.14 22:33:24 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-heap-l1-1-0.dll
[2013.03.14 22:33:23 | 000,006,144 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-security-base-l1-1-0.dll
[2013.03.14 22:33:23 | 000,005,120 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-file-l1-1-0.dll
[2013.03.14 22:33:23 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-util-l1-1-0.dll
[2013.03.14 22:33:22 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-string-l1-1-0.dll
[2013.03.14 22:33:22 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-profile-l1-1-0.dll
[2013.03.14 22:33:21 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-io-l1-1-0.dll
[2013.03.14 22:33:20 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-handle-l1-1-0.dll
[2013.03.14 22:33:19 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-fibers-l1-1-0.dll
[2013.03.14 22:33:18 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-errorhandling-l1-1-0.dll
[2013.03.14 22:33:18 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-delayload-l1-1-0.dll
[2013.03.14 22:33:17 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-debug-l1-1-0.dll
[2013.03.14 22:33:16 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-localization-l1-1-0.dll
[2013.03.14 22:33:16 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-datetime-l1-1-0.dll
[2013.03.14 22:33:15 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-console-l1-1-0.dll
[2013.03.14 22:27:18 | 000,805,376 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\cdosys.dll
[2013.03.14 22:26:30 | 000,400,896 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\srcore.dll
[2013.03.14 22:26:23 | 000,534,528 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\EncDec.dll
[2013.03.14 22:26:14 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\browcli.dll
[2013.03.14 22:25:33 | 001,328,128 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\quartz.dll
[2013.03.14 22:25:31 | 000,514,560 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\qdvd.dll
[2013.03.14 22:25:24 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\csrsrv.dll
[2013.03.14 22:22:58 | 000,045,568 | ---- | C] (Microsoft) -- C:\windows\System32\oflc-nz.rs
[2013.03.14 22:22:57 | 000,046,592 | ---- | C] (Microsoft) -- C:\windows\System32\fpb.rs
[2013.03.14 22:22:57 | 000,043,520 | ---- | C] (Microsoft) -- C:\windows\System32\csrr.rs
[2013.03.14 22:22:57 | 000,040,960 | ---- | C] (Microsoft) -- C:\windows\System32\cob-au.rs
[2013.03.14 22:22:57 | 000,015,360 | ---- | C] (Microsoft) -- C:\windows\System32\djctq.rs
[2013.03.14 22:22:56 | 000,044,544 | ---- | C] (Microsoft) -- C:\windows\System32\pegibbfc.rs
[2013.03.14 22:22:56 | 000,030,720 | ---- | C] (Microsoft) -- C:\windows\System32\usk.rs
[2013.03.14 22:22:56 | 000,021,504 | ---- | C] (Microsoft) -- C:\windows\System32\grb.rs
[2013.03.14 22:22:56 | 000,020,480 | ---- | C] (Microsoft) -- C:\windows\System32\pegi.rs
[2013.03.14 22:22:55 | 002,576,384 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\gameux.dll
[2013.03.14 22:22:55 | 000,308,736 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\Wpc.dll
[2013.03.14 22:22:55 | 000,020,480 | ---- | C] (Microsoft) -- C:\windows\System32\pegi-pt.rs
[2013.03.14 22:22:40 | 000,055,296 | ---- | C] (Microsoft) -- C:\windows\System32\cero.rs
[2013.03.14 22:22:40 | 000,051,712 | ---- | C] (Microsoft) -- C:\windows\System32\esrb.rs
[2013.03.14 22:22:40 | 000,023,552 | ---- | C] (Microsoft) -- C:\windows\System32\oflc.rs
[2013.03.14 22:22:40 | 000,020,480 | ---- | C] (Microsoft) -- C:\windows\System32\pegi-fi.rs
[2013.03.14 22:21:32 | 000,220,160 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\ncrypt.dll
[2013.03.14 22:21:22 | 000,314,880 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\webio.dll
[2013.03.14 22:21:20 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\sspisrv.dll
[2013.03.14 22:21:14 | 000,129,536 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\rdpcorekmts.dll
[2013.03.14 22:21:14 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\rdrmemptylst.exe
[2013.03.14 22:21:13 | 000,058,880 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\rdpwsx.dll
[2013.03.14 22:20:51 | 000,078,336 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\synceng.dll
[2013.03.14 22:20:19 | 000,049,152 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\taskhost.exe
[2013.03.14 22:20:14 | 001,077,248 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\DWrite.dll
[2013.03.14 22:19:59 | 000,193,536 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\dhcpcore6.dll
[2013.03.14 22:19:59 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\dhcpcsvc6.dll
[2013.03.14 22:16:13 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\tzres.dll
[2013.03.14 22:14:04 | 000,169,984 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\winsrv.dll
[2013.03.14 21:06:51 | 000,000,000 | --SD | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice.org 3.4.1
[2013.03.14 21:00:25 | 000,000,000 | ---D | C] -- C:\Program Files\OpenOffice.org 3
[2013.03.14 20:00:20 | 000,219,008 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\dxgmms1.sys
[2013.03.14 19:37:16 | 000,826,880 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\rdpcore.dll
[2013.03.14 18:57:39 | 000,045,080 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wups2.dll
[2013.03.14 18:57:37 | 002,422,272 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wucltux.dll
[2013.03.14 18:54:42 | 000,035,864 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wups.dll
[2013.03.14 18:54:41 | 000,577,048 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wuapi.dll
[2013.03.14 18:54:41 | 000,088,576 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wudriver.dll
[2013.03.14 18:53:35 | 000,171,904 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wuwebv.dll
[2013.03.14 18:53:35 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wuapp.exe
[2013.03.14 18:46:42 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
[2013.03.14 18:43:42 | 000,028,520 | ---- | C] (Avira GmbH) -- C:\windows\System32\drivers\ssmdrv.sys
[2013.03.14 18:42:59 | 000,037,352 | ---- | C] (Avira Operations GmbH & Co. KG) -- C:\windows\System32\drivers\avkmgr.sys
[2013.03.14 18:42:58 | 000,135,136 | ---- | C] (Avira Operations GmbH & Co. KG) -- C:\windows\System32\drivers\avipbb.sys
[2013.03.14 18:42:56 | 000,084,744 | ---- | C] (Avira Operations GmbH & Co. KG) -- C:\windows\System32\drivers\avgntflt.sys
[2013.03.14 18:42:26 | 000,232,336 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\MpSigStub.exe
[2013.03.14 18:42:01 | 000,000,000 | ---D | C] -- C:\ProgramData\Avira
[2013.03.14 18:42:01 | 000,000,000 | ---D | C] -- C:\Program Files\Avira
[2013.03.14 18:37:54 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
[2013.03.14 18:37:42 | 000,000,000 | ---D | C] -- C:\Program Files\7-Zip
[2013.03.14 16:15:01 | 000,000,000 | ---D | C] -- C:\windows\ConfigSetRoot
[2013.03.14 16:14:40 | 000,000,000 | -H-D | C] -- C:\ExpressGateUtil
[2013.03.14 16:12:42 | 001,263,104 | ---- | C] (Atheros Communications, Inc.) -- C:\windows\System32\drivers\athr.sys
[2013.03.14 16:12:42 | 001,263,104 | ---- | C] (Atheros Communications, Inc.) -- C:\windows\System32\athr.sys
[2013.03.14 16:12:42 | 000,000,000 | ---D | C] -- C:\Program Files\Atheros
[2013.03.14 16:12:32 | 000,000,000 | ---D | C] -- C:\ProgramData\Atheros
[2013.03.14 16:12:23 | 000,000,000 | ---D | C] -- C:\Program Files\Elantech
[2013.03.14 16:09:20 | 000,000,000 | -HSD | C] -- C:\Recovery
[1 C:\windows\System32\*.tmp files -> C:\windows\System32\*.tmp -> ]
 
========== Files - Modified Within 30 Days ==========
 
[2013.04.11 17:14:04 | 000,009,696 | -H-- | M] () -- C:\windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2013.04.11 17:14:04 | 000,009,696 | -H-- | M] () -- C:\windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2013.04.11 17:04:44 | 000,001,092 | ---- | M] () -- C:\windows\tasks\GoogleUpdateTaskMachineCore.job
[2013.04.11 17:04:31 | 000,067,584 | --S- | M] () -- C:\windows\bootstat.dat
[2013.04.11 17:04:21 | 589,393,920 | -HS- | M] () -- C:\hiberfil.sys
[2013.04.11 17:03:02 | 000,001,096 | ---- | M] () -- C:\windows\tasks\GoogleUpdateTaskMachineUA.job
[2013.04.11 17:02:34 | 000,000,097 | ---- | M] () -- C:\windows\DeleteOnReboot.bat
[2013.04.11 15:51:22 | 000,000,512 | ---- | M] () -- C:\Users\Admin\Desktop\MBR.dat
[2013.04.11 11:50:05 | 000,286,232 | ---- | M] () -- C:\windows\System32\FNTCACHE.DAT
[2013.04.11 09:23:47 | 000,001,899 | ---- | M] () -- C:\Users\Admin\Desktop\CDBurnerXP.lnk
[2013.04.11 09:19:11 | 000,001,803 | ---- | M] () -- C:\Users\Public\Desktop\PDF24 Fax.lnk
[2013.04.08 20:04:18 | 000,003,288 | ---- | M] () -- C:\bootsqm.dat
[2013.04.04 18:31:15 | 000,666,022 | ---- | M] () -- C:\windows\System32\perfh007.dat
[2013.04.04 18:31:15 | 000,627,864 | ---- | M] () -- C:\windows\System32\perfh009.dat
[2013.04.04 18:31:15 | 000,133,944 | ---- | M] () -- C:\windows\System32\perfc007.dat
[2013.04.04 18:31:15 | 000,110,326 | ---- | M] () -- C:\windows\System32\perfc009.dat
[2013.03.30 22:26:06 | 000,135,136 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\windows\System32\drivers\avipbb.sys
[2013.03.30 22:26:06 | 000,084,744 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\windows\System32\drivers\avgntflt.sys
[2013.03.30 22:26:06 | 000,037,352 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\windows\System32\drivers\avkmgr.sys
[2013.03.29 10:12:45 | 000,000,989 | ---- | M] () -- C:\Users\Public\Desktop\MozBackup.lnk
[2013.03.29 10:09:45 | 000,002,036 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Thunderbird.lnk
[2013.03.24 21:38:11 | 000,335,872 | ---- | M] (Microsoft Corporation) -- C:\windows\Setup1.exe
[2013.03.24 21:38:06 | 000,074,752 | ---- | M] (Microsoft Corporation) -- C:\windows\ST6UNST.EXE
[2013.03.24 21:36:57 | 000,000,626 | ---- | M] () -- C:\windows\ST6UNST0.MIF
[2013.03.22 14:09:14 | 009,887,744 | ---- | M] () -- C:\Users\Admin\Desktop\master_3.8.exe
[2013.03.21 15:57:28 | 000,001,503 | ---- | M] () -- C:\Users\Admin\Desktop\Trend Micro Titanium.lnk
[2013.03.21 15:56:41 | 000,002,205 | ---- | M] () -- C:\Users\Admin\Desktop\Google Chrome.lnk
[2013.03.21 15:56:07 | 000,001,754 | ---- | M] () -- C:\Users\Public\Desktop\Browserwahl.lnk
[2013.03.18 15:52:43 | 000,094,112 | ---- | M] (Oracle Corporation) -- C:\windows\System32\WindowsAccessBridge.dll
[2013.03.18 15:52:39 | 000,262,560 | ---- | M] (Oracle Corporation) -- C:\windows\System32\javaws.exe
[2013.03.18 15:52:39 | 000,174,496 | ---- | M] (Oracle Corporation) -- C:\windows\System32\javaw.exe
[2013.03.18 15:52:38 | 000,861,088 | ---- | M] (Oracle Corporation) -- C:\windows\System32\npDeployJava1.dll
[2013.03.18 15:52:38 | 000,782,240 | ---- | M] (Oracle Corporation) -- C:\windows\System32\deployJava1.dll
[2013.03.18 15:52:38 | 000,174,496 | ---- | M] (Oracle Corporation) -- C:\windows\System32\java.exe
[2013.03.18 10:38:33 | 000,001,353 | ---- | M] () -- C:\Users\Public\Desktop\iTunes.lnk
[2013.03.17 19:01:55 | 000,001,989 | ---- | M] () -- C:\Users\Public\Desktop\Canon Solution Menu.lnk
[2013.03.16 21:09:05 | 000,000,000 | -H-- | M] () -- C:\windows\System32\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
[2013.03.15 08:05:00 | 000,150,011 | ---- | M] () -- C:\windows\System32\license.rtf
[2013.03.14 21:06:58 | 000,001,130 | ---- | M] () -- C:\Users\Public\Desktop\OpenOffice.org 3.4.1.lnk
[2013.03.14 18:46:42 | 000,002,016 | ---- | M] () -- C:\Users\Public\Desktop\Avira Control Center.lnk
[2013.03.14 16:14:45 | 000,001,514 | ---- | M] () -- C:\Users\Public\Desktop\OS Switch.lnk
[2013.03.14 16:13:24 | 000,001,108 | ---- | M] () -- C:\Users\Public\Desktop\E-Manual.lnk
[1 C:\windows\System32\*.tmp files -> C:\windows\System32\*.tmp -> ]
 
========== Files Created - No Company Name ==========
 
[2013.04.11 17:01:31 | 000,000,097 | ---- | C] () -- C:\windows\DeleteOnReboot.bat
[2013.04.11 15:51:22 | 000,000,512 | ---- | C] () -- C:\Users\Admin\Desktop\MBR.dat
[2013.04.11 09:23:47 | 000,001,899 | ---- | C] () -- C:\Users\Admin\Desktop\CDBurnerXP.lnk
[2013.04.11 09:23:47 | 000,001,849 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CDBurnerXP.lnk
[2013.04.11 09:19:11 | 000,001,803 | ---- | C] () -- C:\Users\Public\Desktop\PDF24 Fax.lnk
[2013.04.08 20:04:18 | 000,003,288 | ---- | C] () -- C:\bootsqm.dat
[2013.03.29 10:12:45 | 000,000,989 | ---- | C] () -- C:\Users\Public\Desktop\MozBackup.lnk
[2013.03.29 10:09:45 | 000,002,036 | ---- | C] () -- C:\Users\Public\Desktop\Mozilla Thunderbird.lnk
[2013.03.29 10:09:44 | 000,002,048 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Thunderbird.lnk
[2013.03.24 21:36:42 | 000,000,626 | ---- | C] () -- C:\windows\ST6UNST0.MIF
[2013.03.22 14:09:04 | 009,887,744 | ---- | C] () -- C:\Users\Admin\Desktop\master_3.8.exe
[2013.03.21 15:57:28 | 000,001,503 | ---- | C] () -- C:\Users\Admin\Desktop\Trend Micro Titanium.lnk
[2013.03.21 15:56:51 | 000,001,413 | ---- | C] () -- C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
[2013.03.21 15:56:41 | 000,002,205 | ---- | C] () -- C:\Users\Admin\Desktop\Google Chrome.lnk
[2013.03.21 15:56:07 | 000,001,754 | ---- | C] () -- C:\Users\Public\Desktop\Browserwahl.lnk
[2013.03.18 10:38:33 | 000,001,353 | ---- | C] () -- C:\Users\Public\Desktop\iTunes.lnk
[2013.03.18 10:31:50 | 000,002,519 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
[2013.03.17 19:01:55 | 000,001,989 | ---- | C] () -- C:\Users\Public\Desktop\Canon Solution Menu.lnk
[2013.03.16 21:09:05 | 000,000,000 | -H-- | C] () -- C:\windows\System32\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
[2013.03.16 19:58:01 | 000,001,096 | ---- | C] () -- C:\windows\tasks\GoogleUpdateTaskMachineUA.job
[2013.03.16 19:57:59 | 000,001,092 | ---- | C] () -- C:\windows\tasks\GoogleUpdateTaskMachineCore.job
[2013.03.15 22:04:16 | 000,000,003 | ---- | C] () -- C:\windows\System32\drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf
[2013.03.15 21:45:42 | 000,000,003 | ---- | C] () -- C:\windows\System32\drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf
[2013.03.14 21:06:58 | 000,001,130 | ---- | C] () -- C:\Users\Public\Desktop\OpenOffice.org 3.4.1.lnk
[2013.03.14 18:46:42 | 000,002,016 | ---- | C] () -- C:\Users\Public\Desktop\Avira Control Center.lnk
[2013.03.14 16:15:36 | 000,005,576 | ---- | C] () -- C:\windows\Language.ini
[2013.03.14 16:14:45 | 000,001,514 | ---- | C] () -- C:\Users\Public\Desktop\OS Switch.lnk
[2013.03.14 16:13:24 | 000,001,108 | ---- | C] () -- C:\Users\Public\Desktop\E-Manual.lnk
[2013.03.14 16:12:42 | 000,328,429 | ---- | C] () -- C:\windows\System32\netathr.inf
[2013.03.14 16:12:42 | 000,053,352 | ---- | C] () -- C:\windows\System32\athrext.cat
[2011.11.10 00:44:11 | 000,224,680 | ---- | C] () -- C:\windows\System32\AsusService.exe
[2011.11.10 00:44:11 | 000,025,616 | ---- | C] () -- C:\windows\AsAcpiSvrLang.ini
[2011.11.10 00:42:15 | 000,131,984 | ---- | C] () -- C:\ProgramData\FullRemove.exe
[2011.11.10 00:40:53 | 000,011,832 | ---- | C] () -- C:\windows\System32\drivers\AsUpIO.sys
[2011.11.10 00:40:51 | 000,011,456 | ---- | C] () -- C:\windows\System32\drivers\AsIO.sys
[2011.11.10 00:40:25 | 000,000,873 | ---- | C] () -- C:\windows\Reboot.ini
[2011.11.10 00:39:49 | 000,000,000 | ---- | C] () -- C:\windows\ativpsrm.bin
[2011.11.10 00:35:38 | 000,004,692 | ---- | C] () -- C:\windows\System32\drivers\SamSfPa.dat
[2011.11.10 00:35:38 | 000,000,008 | ---- | C] () -- C:\windows\System32\drivers\rtkhdaud.dat
[2011.11.07 11:05:16 | 000,003,929 | ---- | C] () -- C:\windows\System32\atipblag.dat
[2011.11.07 11:05:14 | 000,233,765 | ---- | C] () -- C:\windows\System32\atiicdxx.dat
[2011.11.07 10:39:57 | 000,013,880 | ---- | C] ( ) -- C:\windows\System32\drivers\kbfiltr.sys
[2011.07.21 10:21:00 | 000,059,904 | ---- | C] () -- C:\windows\System32\OVDecode.dll
 
========== ZeroAccess Check ==========
 
[2009.07.14 06:42:31 | 000,000,227 | RHS- | M] () -- C:\windows\assembly\Desktop.ini
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2012.06.09 06:41:00 | 012,873,728 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010.11.20 14:19:04 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2009.07.14 03:16:17 | 000,342,528 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
 
========== Files - Unicode (All) ==========
[2013.03.14 16:16:18 | 000,000,059 | ---- | M] ()(C:\windows\System32\??) -- C:\windows\System32\Ȑ
[2013.03.14 16:16:18 | 000,000,059 | ---- | C] ()(C:\windows\System32\??) -- C:\windows\System32\Ȑ
 
========== Alternate Data Streams ==========
 
@Alternate Data Stream - 143 bytes -> C:\ProgramData\TEMP:AB689DEA

< End of report >
Die anderen 2 Programme haben wahrscheinlich Logs erstellt und auf dem Desktop gespeichert, aber ich kann diese dort nicht sehen!
Die anderen Logs von heute waren auch nicht sichtbar, aber ich konnte wenn ich das Programm zum 2 Mal öffnete und auf save drückte die Datei sehen und mit rechtsklick öffnen oder Anzeigen drücken und dann den Inhalt kopieren.

Delta Search ist jetzt auch verschwunden.

Wie kann ich die .txt Dateien sehen, wenn diese da sind aber nicht erkennbar ohne Tricks?

cosinus 12.04.2013 12:35
Bitte die Anleirungen lesen, das Log von adwCleaner wird da erwähnt, direkt auf C
JRT bitte wiederholen

twa 12.04.2013 20:30
adw cleaner:
Code:
# AdwCleaner v2.200 - Datei am 11/04/2013 um 17:01:01 erstellt
# Aktualisiert am 02/04/2013 von Xplode
# Betriebssystem : Windows 7 Starter Service Pack 1 (32 bits)
# Benutzer : Admin - *****-PC
# Bootmodus : Normal
# Ausgeführt unter : C:\Users\kitte\Downloads\adwcleaner.exe
# Option [Löschen]


**** [Dienste] ****


***** [Dateien / Ordner] *****

Datei Gelöscht : C:\Users\kitte\AppData\Local\Google\Chrome\User Data\Default\bProtector Web Data
Datei Gelöscht : C:\Users\kitte\AppData\Local\Google\Chrome\User Data\Default\bprotectorpreferences
Datei Gelöscht : C:\Users\Public\Desktop\eBay.lnk
Gelöscht mit Neustart : C:\ProgramData\BrowserProtect
Ordner Gelöscht : C:\Program Files\Ask.com
Ordner Gelöscht : C:\ProgramData\Babylon
Ordner Gelöscht : C:\Users\Admin\AppData\Local\AskToolbar
Ordner Gelöscht : C:\Users\Admin\AppData\LocalLow\AskToolbar
Ordner Gelöscht : C:\Users\Admin\AppData\Roaming\Babylon
Ordner Gelöscht : C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BrowserProtect
Ordner Gelöscht : C:\Users\kitte\AppData\Local\AskToolbar
Ordner Gelöscht : C:\Users\kitte\AppData\Local\Temp\AskSearch
Ordner Gelöscht : C:\Users\kitte\AppData\LocalLow\AskToolbar
Ordner Gelöscht : C:\windows\Installer\{86D4B82A-ABED-442A-BE86-96357B70F4FE}

***** [Registrierungsdatenbank] *****

Schlüssel Gelöscht : HKCU\Software\a55ddddb56ae946
Schlüssel Gelöscht : HKCU\Software\APN
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\AskToolbar
Schlüssel Gelöscht : HKCU\Software\AskToolbar
Schlüssel Gelöscht : HKCU\Software\BabylonToolbar
Schlüssel Gelöscht : HKCU\Software\DataMngr
Schlüssel Gelöscht : HKCU\Software\DataMngr_Toolbar
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\bProtectSettings
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\{79A765E1-C399-405B-85AF-466F52E918B0}
Schlüssel Gelöscht : HKCU\Software\Softonic
Schlüssel Gelöscht : HKLM\SOFTWARE\a55ddddb56ae946
Schlüssel Gelöscht : HKLM\Software\APN
Schlüssel Gelöscht : HKLM\Software\AskToolbar
Schlüssel Gelöscht : HKLM\Software\Babylon
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{C17DC5CF-54FF-4E63-8AC7-94335D6DA231}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{D14D0EE2-2DD1-4230-BE70-3F3AD6172C40}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\GenericAskToolbar.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{05366194-3126-4601-AC1A-DDE573E093DC}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{061F450C-37B9-4330-9235-0F25D9F75B33}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{19D2F415-D58B-46BC-9390-C03DCBC21EB2}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{22FEB0F5-0BA0-4D4B-8A66-55A21667BC31}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{26249267-15F4-4DA3-8247-C5A78E4FA918}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{39B217B4-8C69-4E45-A8DC-8CC4DAD3CF0A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{3CB4CE45-8849-4638-9226-D6B615A15827}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{43AB7B5D-4C40-4103-A549-7002A116A7D5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{6E45F3E8-2683-4824-A6BE-08108022FB36}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{996ED20F-A740-47A2-A7EF-9620D422BB4E}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{9F0F16DD-4E76-4049-A9B1-7A91E48F0323}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{D2B79F7D-2D7D-4420-B2A9-ECE52C7C83A0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{F4288797-CB12-49CE-9DF8-7CDFA1143BEA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd.1
Schlüssel Gelöscht : HKLM\Software\Classes\Installer\Features\A28B4D68DEBAA244EB686953B7074FEF
Schlüssel Gelöscht : HKLM\Software\Classes\Installer\Products\A28B4D68DEBAA244EB686953B7074FEF
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{061F450C-37B9-4330-9235-0F25D9F75B33}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{22FEB0F5-0BA0-4D4B-8A66-55A21667BC31}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D2B79F7D-2D7D-4420-B2A9-ECE52C7C83A0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Prod.cap
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\ScriptHost.Tool
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\ScriptHost.Tool.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{1D55DAA5-04AC-4036-B0BE-DA81EE9676CD}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{212C2C4F-C845-4FBC-9561-C833A13D8DCE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{3C5D1D57-16C8-473C-A552-37B8D88596FE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{4A115D8A-6A7B-4C72-92B1-2E2D01F36979}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{58CBF821-A0C7-4AE8-9430-77DD1AF38E99}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{72BCBFF7-2837-4CA0-B3B5-3DAED7F54601}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{824125FD-7732-4DA2-9277-3A7D0A0A0813}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{99DF8440-814E-497F-BDDD-FB93E9E9DF96}
Schlüssel Gelöscht : HKLM\Software\DataMngr
Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\pgafcinpmmpklohkojmllohdhomoefph
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{83CAD530-387D-40FD-82EA-B9E863D92A9B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C17DC5CF-54FF-4E63-8AC7-94335D6DA231}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D14D0EE2-2DD1-4230-BE70-3F3AD6172C40}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F994E0D9-8335-48F1-99C2-A712C21F8D5F}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}
Schlüssel Gelöscht : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\F928123A039649549966D4C29D35B1C9
Schlüssel Gelöscht : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\063A857434EDED11A893800002C0A966
Schlüssel Gelöscht : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0CFE535C35F99574E8340BFA75BF92C2
Schlüssel Gelöscht : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\120DFADEB50841F408F04D2A278F9509
Schlüssel Gelöscht : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\261F213D1F55267499B1F87D0CC3BCF7
Schlüssel Gelöscht : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\741B4ADF27276464790022C965AB6DA8
Schlüssel Gelöscht : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7DE196B10195F5647A2B21B761F3DE01
Schlüssel Gelöscht : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9D4F5849367142E4685ED8C25E44C5ED
Schlüssel Gelöscht : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A5875B04372C19545BEB90D4D606C472
Schlüssel Gelöscht : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A876D9E80B896EC44A8620248CC79296
Schlüssel Gelöscht : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B5BAE2ED018083A4C8DA86D6E3F4B024
Schlüssel Gelöscht : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B66FFAB725B92594C986DE826A867888
Schlüssel Gelöscht : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{15D2D75C-9CB2-4EFD-BAD7-B9B4CB4BC693}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Main [bprotector start page]
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [bProtectorDefaultScope]
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Wert Gelöscht : HKCU\Software\Mozilla\Firefox\Extensions [{0F827075-B026-42F3-885D-98981EE7B1AE}]
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{D4027C7F-154A-4066-A1AD-4243D8127440}]

***** [Internet Browser] *****

-\\ Internet Explorer v9.0.8112.16476

Ersetzt : [HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://www.delta-search.com/?affID=119370&tt=040413_9113&babsrc=HP_ss&mntrId=AC3494DBC9394A5F --> hxxp://www.google.com

*************************

AdwCleaner[S1].txt - [9970 octets] - [11/04/2013 17:01:01]

########## EOF - \AdwCleaner[S1].txt - [10030 octets] ##########


Alle Zeitangaben in WEZ +1. Es ist jetzt 01:56 Uhr.
Seite 1 von 2 1 2
100 Beiträge dieses Themas auf einer Seite anzeigen

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131