| sai-gunne | 16.04.2013 21:57 |
So, hier das aswMBR-log: Code:
aswMBR version 0.9.9.1771 Copyright(c) 2011 AVAST Software
Run date: 2013-04-16 20:44:50
-----------------------------
20:44:50.062 OS Version: Windows 5.1.2600 Service Pack 3
20:44:50.062 Number of processors: 1 586 0x4C02
20:44:50.062 ComputerName: PC317112490211 UserName: Sandra
20:44:50.187 Initialze error C0000001 - driver not loaded
20:47:57.296 AVAST engine defs: 13041600
20:48:34.218 Service scanning
20:48:37.187 Service 8bbc62a8e61cff8c C:\WINDOWS\System32\Drivers\8bbc62a8e61cff8c.sys **HIDDEN**
20:49:03.546 Modules scanning
20:49:03.546 Disk 0 trace - called modules:
20:49:03.546
20:49:04.046 AVAST engine scan C:\WINDOWS
20:49:19.312 AVAST engine scan C:\WINDOWS\system32
20:53:20.781 AVAST engine scan C:\WINDOWS\system32\drivers
20:53:21.125 File: C:\WINDOWS\system32\drivers\8bbc62a8e61cff8c.sys **INFECTED** Win32:Crypt-NRX [Rtk]
20:53:45.343 AVAST engine scan C:\Dokumente und Einstellungen\Sandra
20:55:02.609 File: C:\Dokumente und Einstellungen\Sandra\Anwendungsdaten\Sun\Java\Deployment\cache\6.0\25\41f5bd99-633af998 **INFECTED** Win32:Urausy-L [Trj]
22:05:23.343 AVAST engine scan C:\Dokumente und Einstellungen\All Users
22:05:56.906 Scan finished successfully
22:06:16.031 The log file has been saved successfully to "C:\Dokumente und Einstellungen\Sandra\Desktop\aswMBR.txt"
Dann der TDSSKiller: Code:
22:08:08.0890 0176 TDSS rootkit removing tool 2.8.16.0 Feb 11 2013 18:50:42
22:08:08.0953 0176 ============================================================
22:08:08.0953 0176 Current date / time: 2013/04/16 22:08:08.0953
22:08:08.0953 0176 SystemInfo:
22:08:08.0953 0176
22:08:08.0953 0176 OS Version: 5.1.2600 ServicePack: 3.0
22:08:08.0953 0176 Product type: Workstation
22:08:08.0953 0176 ComputerName: PC317112490211
22:08:08.0953 0176 UserName: Sandra
22:08:08.0953 0176 Windows directory: C:\WINDOWS
22:08:08.0953 0176 System windows directory: C:\WINDOWS
22:08:08.0953 0176 Processor architecture: Intel x86
22:08:08.0953 0176 Number of processors: 1
22:08:08.0953 0176 Page size: 0x1000
22:08:08.0953 0176 Boot type: Normal boot
22:08:08.0953 0176 ============================================================
22:08:14.0968 0176 !crdlk
22:08:15.0000 0176 Drive \Device\Harddisk0\DR0 - Size: 0xDF99E6000 (55.90 Gb), SectorSize: 0x200, Cylinders: 0x1E49, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xF0, Type 'A'
22:08:15.0015 0176 ============================================================
22:08:15.0015 0176 \Device\Harddisk0\DR0:
22:08:15.0015 0176 MBR partitions:
22:08:15.0015 0176 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x604B321
22:08:15.0015 0176 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x604B360, BlocksNum 0xF80430
22:08:15.0015 0176 ============================================================
22:08:15.0390 0176 C: <-> \Device\Harddisk0\DR0\Partition1
22:08:15.0437 0176 E: <-> \Device\Harddisk0\DR0\Partition2
22:08:15.0484 0176 ============================================================
22:08:15.0484 0176 Initialize success
22:08:15.0484 0176 ============================================================
22:08:25.0531 1180 ============================================================
22:08:25.0531 1180 Scan started
22:08:25.0531 1180 Mode: Manual;
22:08:25.0531 1180 ============================================================
22:08:26.0046 1180 ================ Scan system memory ========================
22:08:26.0046 1180 System memory - ok
22:08:26.0046 1180 ================ Scan services =============================
22:08:26.0312 1180 [ 914A9709FC3BF419AD2F85547F2A4832 ] 61883 C:\WINDOWS\system32\DRIVERS\61883.sys
22:08:26.0312 1180 61883 - ok
22:08:26.0375 1180 Suspicious service (NoAccess): 8bbc62a8e61cff8c
22:08:26.0437 1180 [ B654417ED8E8E253B2405E4FC6A6ECCB ] 8bbc62a8e61cff8c C:\WINDOWS\System32\Drivers\8bbc62a8e61cff8c.sys
22:08:26.0437 1180 Suspicious file (NoAccess): C:\WINDOWS\System32\Drivers\8bbc62a8e61cff8c.sys. md5: B654417ED8E8E253B2405E4FC6A6ECCB
22:08:27.0468 1180 8bbc62a8e61cff8c ( Rootkit.Win32.Necurs.gen ) - infected
22:08:27.0468 1180 8bbc62a8e61cff8c - detected Rootkit.Win32.Necurs.gen (0)
22:08:27.0593 1180 Abiosdsk - ok
22:08:27.0609 1180 abp480n5 - ok
22:08:27.0656 1180 [ AC407F1A62C3A300B4F2B5A9F1D55B2C ] ACPI C:\WINDOWS\system32\DRIVERS\ACPI.sys
22:08:27.0656 1180 ACPI - ok
22:08:27.0718 1180 [ 9E1CA3160DAFB159CA14F83B1E317F75 ] ACPIEC C:\WINDOWS\system32\DRIVERS\ACPIEC.sys
22:08:27.0718 1180 ACPIEC - ok
22:08:27.0812 1180 [ C6F1BBA566DD2EEF2D8FB9D25E8EB9A4 ] ADIHdAudAddService C:\WINDOWS\system32\drivers\ADIHdAud.sys
22:08:27.0828 1180 ADIHdAudAddService - ok
22:08:27.0937 1180 [ 479901C99FA62D1C3261B7ACB1228DAD ] AdobeFlashPlayerUpdateSvc C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
22:08:27.0937 1180 AdobeFlashPlayerUpdateSvc - ok
22:08:27.0968 1180 adpu160m - ok
22:08:28.0031 1180 [ C984DE22ED71414ABC42C1E03D412E33 ] AEAudioService C:\WINDOWS\system32\drivers\AEAudio.sys
22:08:28.0031 1180 AEAudioService - ok
22:08:28.0125 1180 [ 8BED39E3C35D6A489438B8141717A557 ] aec C:\WINDOWS\system32\drivers\aec.sys
22:08:28.0125 1180 aec - ok
22:08:28.0187 1180 [ 1E44BC1E83D8FD2305F8D452DB109CF9 ] AFD C:\WINDOWS\System32\drivers\afd.sys
22:08:28.0187 1180 AFD - ok
22:08:28.0203 1180 Aha154x - ok
22:08:28.0234 1180 aic78u2 - ok
22:08:28.0250 1180 aic78xx - ok
22:08:28.0328 1180 [ 738D80CC01D7BC7584BE917B7F544394 ] Alerter C:\WINDOWS\system32\alrsvc.dll
22:08:28.0328 1180 Alerter - ok
22:08:28.0390 1180 [ 190CD73D4984F94D823F9444980513E5 ] ALG C:\WINDOWS\System32\alg.exe
22:08:28.0390 1180 ALG - ok
22:08:28.0437 1180 [ 1140AB9938809700B46BB88E46D72A96 ] AliIde C:\WINDOWS\system32\DRIVERS\aliide.sys
22:08:28.0437 1180 AliIde - ok
22:08:28.0515 1180 [ 22AD3EC1F0486C863D70CDD50B97761B ] AmdK8 C:\WINDOWS\system32\DRIVERS\AmdK8.sys
22:08:28.0531 1180 AmdK8 - ok
22:08:28.0546 1180 amsint - ok
22:08:28.0765 1180 [ D9A92E6DD41C5ADC045AE485026AA40C ] AntiVirSchedulerService C:\Programme\Avira\AntiVir Desktop\sched.exe
22:08:28.0765 1180 AntiVirSchedulerService - ok
22:08:28.0843 1180 [ 66A7A38F7C439153B758548375EB9E5E ] AntiVirService C:\Programme\Avira\AntiVir Desktop\avguard.exe
22:08:28.0843 1180 AntiVirService - ok
22:08:28.0890 1180 AppMgmt - ok
22:08:28.0921 1180 [ B5B8A80875C1DEDEDA8B02765642C32F ] Arp1394 C:\WINDOWS\system32\DRIVERS\arp1394.sys
22:08:28.0937 1180 Arp1394 - ok
22:08:28.0953 1180 asc - ok
22:08:28.0968 1180 asc3350p - ok
22:08:29.0000 1180 asc3550 - ok
22:08:29.0187 1180 [ 47589CC135E28532AFC39394BBF87F0D ] ASChannel C:\Programme\HPQ\IAM\Bin\ASChnl.dll
22:08:29.0203 1180 ASChannel - ok
22:08:29.0421 1180 [ 0E5E4957549056E2BF2C49F4F6B601AD ] aspnet_state C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
22:08:29.0437 1180 aspnet_state - ok
22:08:29.0484 1180 [ B153AFFAC761E7F5FCFA822B9C4E97BC ] AsyncMac C:\WINDOWS\system32\DRIVERS\asyncmac.sys
22:08:29.0484 1180 AsyncMac - ok
22:08:29.0531 1180 [ 9F3A2F5AA6875C72BF062C712CFA2674 ] atapi C:\WINDOWS\system32\DRIVERS\atapi.sys
22:08:29.0531 1180 atapi - ok
22:08:29.0546 1180 Atdisk - ok
22:08:29.0656 1180 [ E9B73D638608B5B20608DB28186D3494 ] Ati HotKey Poller C:\WINDOWS\system32\Ati2evxx.exe
22:08:29.0656 1180 Ati HotKey Poller - ok
22:08:29.0843 1180 [ 2922CD8A5D913E737D4E7A634042E154 ] ati2mtag C:\WINDOWS\system32\DRIVERS\ati2mtag.sys
22:08:29.0875 1180 ati2mtag - ok
22:08:29.0968 1180 [ 9916C1225104BA14794209CFA8012159 ] Atmarpc C:\WINDOWS\system32\DRIVERS\atmarpc.sys
22:08:29.0968 1180 Atmarpc - ok
22:08:30.0046 1180 [ 002ECB6F1197A7754CC87F2073F41841 ] ATSWPDRV C:\WINDOWS\system32\DRIVERS\ATSwpDrv.sys
22:08:30.0046 1180 ATSWPDRV - ok
22:08:30.0109 1180 [ 58ED0D5452DF7BE732193E7999C6B9A4 ] AudioSrv C:\WINDOWS\System32\audiosrv.dll
22:08:30.0109 1180 AudioSrv - ok
22:08:30.0171 1180 [ D9F724AA26C010A217C97606B160ED68 ] audstub C:\WINDOWS\system32\DRIVERS\audstub.sys
22:08:30.0171 1180 audstub - ok
22:08:30.0296 1180 [ F8E6956A614F15A0860474C5E2A7DE6B ] Avc C:\WINDOWS\system32\DRIVERS\avc.sys
22:08:30.0296 1180 Avc - ok
22:08:30.0406 1180 [ 87425709A251386064C99B684BF96F72 ] avgntflt C:\WINDOWS\system32\DRIVERS\avgntflt.sys
22:08:30.0406 1180 avgntflt - ok
22:08:30.0468 1180 [ CAE7B6E4D7EB17829C526153D19B9C95 ] avgtp C:\WINDOWS\system32\drivers\avgtpx86.sys
22:08:30.0468 1180 avgtp - ok
22:08:30.0609 1180 [ D50FBA68163BC498F2C136E0E5BA8E2F ] avipbb C:\WINDOWS\system32\DRIVERS\avipbb.sys
22:08:30.0609 1180 avipbb - ok
22:08:30.0750 1180 [ CB8741CD7B126499FED40C9B197F6AC5 ] avkmgr C:\WINDOWS\system32\DRIVERS\avkmgr.sys
22:08:30.0750 1180 avkmgr - ok
22:08:31.0031 1180 [ C0ACD392ECE55784884CC208AAFA06CE ] b57w2k C:\WINDOWS\system32\DRIVERS\b57xp32.sys
22:08:31.0031 1180 b57w2k - ok
22:08:31.0140 1180 [ 69F940672BE0ECEE5BD1E905706BA8CE ] BCM43XX C:\WINDOWS\system32\DRIVERS\bcmwl5.sys
22:08:31.0171 1180 BCM43XX - ok
22:08:31.0250 1180 [ DA1F27D85E0D1525F6621372E7B685E9 ] Beep C:\WINDOWS\system32\drivers\Beep.sys
22:08:31.0250 1180 Beep - ok
22:08:31.0359 1180 [ D6F603772A789BB3228F310D650B8BD1 ] BITS C:\WINDOWS\system32\qmgr.dll
22:08:31.0421 1180 BITS - ok
22:08:31.0500 1180 [ B71549F23736ADF83A571061C47777FD ] Browser C:\WINDOWS\System32\browser.dll
22:08:31.0500 1180 Browser - ok
22:08:31.0531 1180 [ 00C8988DA469E4AC087539BD77420123 ] BTWUSB C:\WINDOWS\system32\Drivers\btwusb.sys
22:08:31.0531 1180 BTWUSB - ok
22:08:31.0593 1180 [ 90A673FC8E12A79AFBED2576F6A7AAF9 ] cbidf2k C:\WINDOWS\system32\drivers\cbidf2k.sys
22:08:31.0593 1180 cbidf2k - ok
22:08:31.0656 1180 [ 0BE5AEF125BE881C4F854C554F2B025C ] CCDECODE C:\WINDOWS\system32\DRIVERS\CCDECODE.sys
22:08:31.0656 1180 CCDECODE - ok
22:08:31.0671 1180 cd20xrnt - ok
22:08:31.0703 1180 [ C1B486A7658353D33A10CC15211A873B ] Cdaudio C:\WINDOWS\system32\drivers\Cdaudio.sys
22:08:31.0703 1180 Cdaudio - ok
22:08:31.0781 1180 [ C885B02847F5D2FD45A24E219ED93B32 ] Cdfs C:\WINDOWS\system32\drivers\Cdfs.sys
22:08:31.0781 1180 Cdfs - ok
22:08:31.0843 1180 [ 1F4260CC5B42272D71F79E570A27A4FE ] Cdrom C:\WINDOWS\system32\DRIVERS\cdrom.sys
22:08:31.0843 1180 Cdrom - ok
22:08:31.0875 1180 Changer - ok
22:08:31.0921 1180 [ 28E3040D1F1CA2008CD6B29DFEBC9A5E ] CiSvc C:\WINDOWS\system32\cisvc.exe
22:08:31.0921 1180 CiSvc - ok
22:08:31.0953 1180 [ 778A30ED3C134EB7E406AFC407E9997D ] ClipSrv C:\WINDOWS\system32\clipsrv.exe
22:08:31.0953 1180 ClipSrv - ok
22:08:32.0046 1180 [ D87ACAED61E417BBA546CED5E7E36D9C ] clr_optimization_v2.0.50727_32 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
22:08:32.0140 1180 clr_optimization_v2.0.50727_32 - ok
22:08:32.0203 1180 [ 0F6C187D38D98F8DF904589A5F94D411 ] CmBatt C:\WINDOWS\system32\DRIVERS\CmBatt.sys
22:08:32.0203 1180 CmBatt - ok
22:08:32.0218 1180 CmdIde - ok
22:08:32.0265 1180 [ 6E4C9F21F0FAE8940661144F41B13203 ] Compbatt C:\WINDOWS\system32\DRIVERS\compbatt.sys
22:08:32.0265 1180 Compbatt - ok
22:08:32.0296 1180 COMSysApp - ok
22:08:32.0328 1180 Cpqarray - ok
22:08:32.0453 1180 cpuz132 - ok
22:08:32.0515 1180 [ 611F824E5C703A5A899F84C5F1699E4D ] CryptSvc C:\WINDOWS\System32\cryptsvc.dll
22:08:32.0515 1180 CryptSvc - ok
22:08:32.0578 1180 dac2w2k - ok
22:08:32.0593 1180 dac960nt - ok
22:08:32.0718 1180 [ 3127AFBF2C1ED0AB14A1BBB7AAECB85B ] DcomLaunch C:\WINDOWS\system32\rpcss.dll
22:08:32.0718 1180 DcomLaunch - ok
22:08:32.0828 1180 [ C29A1C9B75BA38FA37F8C44405DEC360 ] Dhcp C:\WINDOWS\System32\dhcpcsvc.dll
22:08:32.0828 1180 Dhcp - ok
22:08:32.0875 1180 [ 044452051F3E02E7963599FC8F4F3E25 ] Disk C:\WINDOWS\system32\DRIVERS\disk.sys
22:08:32.0875 1180 Disk - ok
22:08:32.0890 1180 dmadmin - ok
22:08:32.0953 1180 [ 0DCFC8395A99FECBB1EF771CEC7FE4EA ] dmboot C:\WINDOWS\system32\drivers\dmboot.sys
22:08:32.0953 1180 dmboot - ok
22:08:33.0000 1180 [ 53720AB12B48719D00E327DA470A619A ] dmio C:\WINDOWS\system32\drivers\dmio.sys
22:08:33.0000 1180 dmio - ok
22:08:33.0093 1180 [ E9317282A63CA4D188C0DF5E09C6AC5F ] dmload C:\WINDOWS\system32\drivers\dmload.sys
22:08:33.0093 1180 dmload - ok
22:08:33.0140 1180 [ 25C83FFBBA13B554EB6D59A9B2E2EE78 ] dmserver C:\WINDOWS\System32\dmserver.dll
22:08:33.0140 1180 dmserver - ok
22:08:33.0203 1180 [ 8A208DFCF89792A484E76C40E5F50B45 ] DMusic C:\WINDOWS\system32\drivers\DMusic.sys
22:08:33.0203 1180 DMusic - ok
22:08:33.0265 1180 [ 407F3227AC618FD1CA54B335B083DE07 ] Dnscache C:\WINDOWS\System32\dnsrslvr.dll
22:08:33.0265 1180 Dnscache - ok
22:08:33.0359 1180 [ 676E36C4FF5BCEA1900F44182B9723E6 ] Dot3svc C:\WINDOWS\System32\dot3svc.dll
22:08:33.0359 1180 Dot3svc - ok
22:08:33.0500 1180 [ 3E4B043F8BC6BE1D4820CC6C9C500306 ] Dot4 C:\WINDOWS\system32\DRIVERS\Dot4.sys
22:08:33.0500 1180 Dot4 - ok
22:08:33.0593 1180 [ 77CE63A8A34AE23D9FE4C7896D1DEBE7 ] Dot4Print C:\WINDOWS\system32\DRIVERS\Dot4Prt.sys
22:08:33.0593 1180 Dot4Print - ok
22:08:33.0656 1180 [ 0A57B5876530FEBB4EBF6AD501864F96 ] dot4ufd C:\WINDOWS\system32\DRIVERS\hppaufd0.sys
22:08:33.0656 1180 dot4ufd - ok
22:08:33.0671 1180 dpti2o - ok
22:08:33.0734 1180 [ 8F5FCFF8E8848AFAC920905FBD9D33C8 ] drmkaud C:\WINDOWS\system32\drivers\drmkaud.sys
22:08:33.0734 1180 drmkaud - ok
22:08:33.0828 1180 [ C6B2E10CFE79169C72F0269087B9A603 ] dsltestSp5 C:\WINDOWS\system32\Drivers\dsltestSp5.sys
22:08:33.0828 1180 dsltestSp5 - ok
22:08:33.0875 1180 [ B5CB3084046146FD2587D8C9B219FEB4 ] eabfiltr C:\WINDOWS\system32\DRIVERS\eabfiltr.sys
22:08:33.0875 1180 eabfiltr - ok
22:08:33.0937 1180 [ 231F4547AE1E4B3E60ECA66C3A96D218 ] eabusb C:\WINDOWS\system32\DRIVERS\eabusb.sys
22:08:33.0937 1180 eabusb - ok
22:08:34.0031 1180 [ 4E4F2FDDAB0A0736D7671134DCCE91FB ] EapHost C:\WINDOWS\System32\eapsvc.dll
22:08:34.0031 1180 EapHost - ok
22:08:34.0125 1180 [ 877C18558D70587AA7823A1A308AC96B ] ERSvc C:\WINDOWS\System32\ersvc.dll
22:08:34.0125 1180 ERSvc - ok
22:08:34.0187 1180 [ A3EDBE9053889FB24AB22492472B39DC ] Eventlog C:\WINDOWS\system32\services.exe
22:08:34.0203 1180 Eventlog - ok
22:08:34.0312 1180 [ AF4F6B5739D18CA7972AB53E091CBC74 ] EventSystem C:\WINDOWS\system32\es.dll
22:08:34.0312 1180 EventSystem - ok
22:08:34.0437 1180 Fabs - ok
22:08:34.0515 1180 [ 38D332A6D56AF32635675F132548343E ] Fastfat C:\WINDOWS\system32\drivers\Fastfat.sys
22:08:34.0515 1180 Fastfat - ok
22:08:34.0593 1180 [ 2DB7D303C36DDD055215052F118E8E75 ] FastUserSwitchingCompatibility C:\WINDOWS\System32\shsvcs.dll
22:08:34.0593 1180 FastUserSwitchingCompatibility - ok
22:08:34.0656 1180 [ 92CDD60B6730B9F50F6A1A0C1F8CDC81 ] Fdc C:\WINDOWS\system32\DRIVERS\fdc.sys
22:08:34.0656 1180 Fdc - ok
22:08:34.0687 1180 [ B0678A548587C5F1967B0D70BACAD6C1 ] Fips C:\WINDOWS\system32\drivers\Fips.sys
22:08:34.0687 1180 Fips - ok
22:08:34.0859 1180 [ FFF1130F7C9FA01D093A1EDFC5CCE8FC ] FirebirdServerMAGIXInstance C:\Programme\Gemeinsame Dateien\MAGIX Services\Database\bin\fbserver.exe
22:08:34.0953 1180 FirebirdServerMAGIXInstance - ok
22:08:35.0046 1180 [ 9D27E7B80BFCDF1CDD9B555862D5E7F0 ] Flpydisk C:\WINDOWS\system32\DRIVERS\flpydisk.sys
22:08:35.0046 1180 Flpydisk - ok
22:08:35.0093 1180 [ B2CF4B0786F8212CB92ED2B50C6DB6B0 ] FltMgr C:\WINDOWS\system32\drivers\fltmgr.sys
22:08:35.0093 1180 FltMgr - ok
22:08:35.0203 1180 [ 8BA7C024070F2B7FDD98ED8A4BA41789 ] FontCache3.0.0.0 c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
22:08:35.0203 1180 FontCache3.0.0.0 - ok
22:08:35.0265 1180 [ 3E1E2BD4F39B0E2B7DC4F4D2BCC2779A ] Fs_Rec C:\WINDOWS\system32\drivers\Fs_Rec.sys
22:08:35.0265 1180 Fs_Rec - ok
22:08:35.0375 1180 [ 75BF2DD123971095574505E2D78F65CA ] FTDIBUS C:\WINDOWS\system32\drivers\ftdibus.sys
22:08:35.0375 1180 FTDIBUS - ok
22:08:35.0421 1180 [ 8F1955CE42E1484714B542F341647778 ] Ftdisk C:\WINDOWS\system32\DRIVERS\ftdisk.sys
22:08:35.0421 1180 Ftdisk - ok
22:08:35.0484 1180 [ 1BAEA6F4A629ABCBD87267C2C732C982 ] FTSER2K C:\WINDOWS\system32\drivers\ftser2k.sys
22:08:35.0484 1180 FTSER2K - ok
22:08:35.0515 1180 [ 0A02C63C8B144BD8C86B103DEE7C86A2 ] Gpc C:\WINDOWS\system32\DRIVERS\msgpc.sys
22:08:35.0531 1180 Gpc - ok
22:08:35.0671 1180 [ 9EB33545BC9B1CA0C9B9E6D780CE0D27 ] GT72NDISIPXP C:\WINDOWS\system32\DRIVERS\Gt51Ip.sys
22:08:35.0671 1180 GT72NDISIPXP - ok
22:08:35.0734 1180 [ 687A4B740F14C2DFF6DD7B848F50F0A6 ] GT72UBUS C:\WINDOWS\system32\DRIVERS\gt72ubus.sys
22:08:35.0734 1180 GT72UBUS - ok
22:08:35.0906 1180 [ B8D928F19FCDF9862CE2D01BC9741861 ] GtDetectSc C:\Programme\T-Mobile\web'n'walk Manager\GtDetectSc.exe
22:08:35.0906 1180 GtDetectSc - ok
22:08:36.0015 1180 [ 346DDAEFA04E49AD804EE12D4BAA0ED3 ] GTPTSER C:\WINDOWS\system32\DRIVERS\gtptser.sys
22:08:36.0015 1180 GTPTSER - ok
22:08:36.0265 1180 [ C1B577B2169900F4CF7190C39F085794 ] gusvc C:\Programme\Google\Common\Google Updater\GoogleUpdaterService.exe
22:08:36.0265 1180 gusvc - ok
22:08:36.0437 1180 [ 4D4D97671C63C3AF869B3518E6054204 ] HBtnKey C:\WINDOWS\system32\DRIVERS\cpqbttn.sys
22:08:36.0437 1180 HBtnKey - ok
22:08:36.0593 1180 [ 573C7D0A32852B48F3058CFD8026F511 ] HDAudBus C:\WINDOWS\system32\DRIVERS\HDAudBus.sys
22:08:36.0593 1180 HDAudBus - ok
22:08:36.0984 1180 [ CB66BF85BF599BEFD6C6A57C2E20357F ] helpsvc C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll
22:08:36.0984 1180 helpsvc - ok
22:08:37.0140 1180 HidServ - ok
22:08:37.0390 1180 [ CCF82C5EC8A7326C3066DE870C06DAF1 ] HidUsb C:\WINDOWS\system32\DRIVERS\hidusb.sys
22:08:37.0390 1180 HidUsb - ok
22:08:37.0593 1180 [ ED29F14101523A6E0E808107405D452C ] hkmsvc C:\WINDOWS\System32\kmsvc.dll
22:08:37.0609 1180 hkmsvc - ok
22:08:37.0734 1180 hpn - ok
22:08:37.0968 1180 [ ED377B3C83FDEA8D906109A085D219BA ] hpqcxs08 C:\Programme\Hewlett-Packard\Digital Imaging\bin\hpqcxs08.dll
22:08:38.0015 1180 hpqcxs08 - ok
22:08:38.0265 1180 [ EE4C7A4CF2316701FFDE90F404520265 ] hpqddsvc C:\Programme\Hewlett-Packard\Digital Imaging\bin\hpqddsvc.dll
22:08:38.0265 1180 hpqddsvc - ok
22:08:38.0859 1180 [ 2C565B24C56577E824436427DF01B4E2 ] hpqwmiex C:\Programme\Hewlett-Packard\Shared\hpqwmiex.exe
22:08:38.0890 1180 hpqwmiex - ok
22:08:39.0343 1180 [ D03D10F7DED688FECF50F8FBF1EA9B8A ] HPZid412 C:\WINDOWS\system32\DRIVERS\HPZid412.sys
22:08:39.0359 1180 HPZid412 - ok
22:08:39.0421 1180 [ 89F41658929393487B6B7D13C8528CE3 ] HPZipr12 C:\WINDOWS\system32\DRIVERS\HPZipr12.sys
22:08:39.0421 1180 HPZipr12 - ok
22:08:39.0500 1180 [ ABCB05CCDBF03000354B9553820E39F8 ] HPZius12 C:\WINDOWS\system32\DRIVERS\HPZius12.sys
22:08:39.0500 1180 HPZius12 - ok
22:08:39.0593 1180 [ 89E256C5F5346BE265D9F86AC8625D4F ] HSFHWAZL C:\WINDOWS\system32\DRIVERS\HSFHWAZL.sys
22:08:39.0593 1180 HSFHWAZL - ok
22:08:39.0687 1180 [ 0E44AF3828111D4C3E73C33AC95226D8 ] HSF_DPV C:\WINDOWS\system32\DRIVERS\HSF_DPV.sys
22:08:39.0703 1180 HSF_DPV - ok
22:08:39.0796 1180 [ F80A415EF82CD06FFAF0D971528EAD38 ] HTTP C:\WINDOWS\system32\Drivers\HTTP.sys
22:08:39.0812 1180 HTTP - ok
22:08:39.0906 1180 [ 9E4ADB854CEBCFB81A4B36718FEECD16 ] HTTPFilter C:\WINDOWS\System32\w3ssl.dll
22:08:39.0906 1180 HTTPFilter - ok
22:08:39.0921 1180 i2omgmt - ok
22:08:39.0937 1180 i2omp - ok
22:08:39.0984 1180 [ E283B97CFBEB86C1D86BAED5F7846A92 ] i8042prt C:\WINDOWS\system32\DRIVERS\i8042prt.sys
22:08:39.0984 1180 i8042prt - ok
22:08:40.0140 1180 [ 1CF03C69B49ACB70C722DF92755C0C8C ] IDriverT C:\Programme\Gemeinsame Dateien\InstallShield\Driver\11\Intel 32\IDriverT.exe
22:08:40.0171 1180 IDriverT - ok
22:08:40.0312 1180 [ C01AC32DC5C03076CFB852CB5DA5229C ] idsvc c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
22:08:40.0328 1180 idsvc - ok
22:08:40.0421 1180 [ 1988575194189863932F73B43D9A0AD9 ] IFXSpMgtSrv C:\WINDOWS\system32\IFXSPMGT.exe
22:08:40.0421 1180 IFXSpMgtSrv - ok
22:08:40.0515 1180 [ 67C2F969E5CC2E000A540D292B340B7C ] IFXTCS C:\WINDOWS\system32\IFXTCS.exe
22:08:40.0531 1180 IFXTCS - ok
22:08:40.0625 1180 [ 0A359837E021BC04A04A6FD189492C65 ] IFXTPM C:\WINDOWS\system32\DRIVERS\IFXTPM.SYS
22:08:40.0625 1180 IFXTPM - ok
22:08:40.0687 1180 [ 083A052659F5310DD8B6A6CB05EDCF8E ] Imapi C:\WINDOWS\system32\DRIVERS\imapi.sys
22:08:40.0703 1180 Imapi - ok
22:08:40.0750 1180 [ D4B413AA210C21E46AEDD2BA5B68D38E ] ImapiService C:\WINDOWS\system32\imapi.exe
22:08:40.0765 1180 ImapiService - ok
22:08:40.0796 1180 ini910u - ok
22:08:40.0828 1180 [ 69C4E3C9E67A1F103B94E14FDD5F3213 ] IntelIde C:\WINDOWS\system32\DRIVERS\intelide.sys
22:08:40.0828 1180 IntelIde - ok
22:08:40.0875 1180 [ 3BB22519A194418D5FEC05D800A19AD0 ] Ip6Fw C:\WINDOWS\system32\drivers\ip6fw.sys
22:08:40.0875 1180 Ip6Fw - ok
22:08:40.0937 1180 [ 731F22BA402EE4B62748ADAF6363C182 ] IpFilterDriver C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
22:08:40.0937 1180 IpFilterDriver - ok
22:08:40.0968 1180 [ B87AB476DCF76E72010632B5550955F5 ] IpInIp C:\WINDOWS\system32\DRIVERS\ipinip.sys
22:08:40.0968 1180 IpInIp - ok
22:08:41.0015 1180 [ CC748EA12C6EFFDE940EE98098BF96BB ] IpNat C:\WINDOWS\system32\DRIVERS\ipnat.sys
22:08:41.0015 1180 IpNat - ok
22:08:41.0062 1180 [ 23C74D75E36E7158768DD63D92789A91 ] IPSec C:\WINDOWS\system32\DRIVERS\ipsec.sys
22:08:41.0062 1180 IPSec - ok
22:08:41.0109 1180 [ C93C9FF7B04D772627A3646D89F7BF89 ] IRENUM C:\WINDOWS\system32\DRIVERS\irenum.sys
22:08:41.0109 1180 IRENUM - ok
22:08:41.0156 1180 [ 6DFB88F64135C525433E87648BDA30DE ] isapnp C:\WINDOWS\system32\DRIVERS\isapnp.sys
22:08:41.0156 1180 isapnp - ok
22:08:41.0390 1180 [ 9AE07549A0D691A103FAF8946554BDB7 ] JavaQuickStarterService C:\Programme\Java\jre6\bin\jqs.exe
22:08:41.0437 1180 JavaQuickStarterService - ok
22:08:41.0765 1180 [ 1704D8C4C8807B889E43C649B478A452 ] Kbdclass C:\WINDOWS\system32\DRIVERS\kbdclass.sys
22:08:41.0781 1180 Kbdclass - ok
22:08:41.0937 1180 [ B6D6C117D771C98130497265F26D1882 ] kbdhid C:\WINDOWS\system32\DRIVERS\kbdhid.sys
22:08:41.0937 1180 kbdhid - ok
22:08:42.0015 1180 [ 692BCF44383D056AED41B045A323D378 ] kmixer C:\WINDOWS\system32\drivers\kmixer.sys
22:08:42.0015 1180 kmixer - ok
22:08:42.0093 1180 [ B467646C54CC746128904E1654C750C1 ] KSecDD C:\WINDOWS\system32\drivers\KSecDD.sys
22:08:42.0109 1180 KSecDD - ok
22:08:42.0187 1180 [ 2BBDCB79900990F0716DFCB714E72DE7 ] lanmanserver C:\WINDOWS\System32\srvsvc.dll
22:08:42.0187 1180 lanmanserver - ok
22:08:42.0281 1180 [ 1869B14B06B44B44AF70548E1EA3303F ] lanmanworkstation C:\WINDOWS\System32\wkssvc.dll
22:08:42.0296 1180 lanmanworkstation - ok
22:08:42.0312 1180 lbrtfdc - ok
22:08:42.0437 1180 [ E4973B3229E0015345AFBE43A8A8EB3B ] LightScribeService C:\Programme\Gemeinsame Dateien\LightScribe\LSSrvc.exe
22:08:42.0437 1180 LightScribeService - ok
22:08:42.0500 1180 [ 636714B7D43C8D0C80449123FD266920 ] LmHosts C:\WINDOWS\System32\lmhsvc.dll
22:08:42.0500 1180 LmHosts - ok
22:08:42.0578 1180 [ 3C318B9CD391371BED62126581EE9961 ] mdmxsdk C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys
22:08:42.0578 1180 mdmxsdk - ok
22:08:42.0640 1180 [ B7550A7107281D170CE85524B1488C98 ] Messenger C:\WINDOWS\System32\msgsvc.dll
22:08:42.0640 1180 Messenger - ok
22:08:42.0796 1180 [ C8907D722B398D002C227F08761B5687 ] MIINPazX C:\PROGRA~1\GEMEIN~1\MARMIK~1\MInfraIS\MIINPazX.SYS
22:08:42.0796 1180 MIINPazX - ok
22:08:42.0890 1180 [ 4AE068242760A1FB6E1A44BF4E16AFA6 ] mnmdd C:\WINDOWS\system32\drivers\mnmdd.sys
22:08:42.0890 1180 mnmdd - ok
22:08:42.0968 1180 [ C2F1D365FD96791B037EE504868065D3 ] mnmsrvc C:\WINDOWS\system32\mnmsrvc.exe
22:08:42.0968 1180 mnmsrvc - ok
22:08:43.0046 1180 [ 6FB74EBD4EC57A6F1781DE3852CC3362 ] Modem C:\WINDOWS\system32\drivers\Modem.sys
22:08:43.0046 1180 Modem - ok
22:08:43.0078 1180 [ B24CE8005DEAB254C0251E15CB71D802 ] Mouclass C:\WINDOWS\system32\DRIVERS\mouclass.sys
22:08:43.0078 1180 Mouclass - ok
22:08:43.0156 1180 [ 66A6F73C74E1791464160A7065CE711A ] mouhid C:\WINDOWS\system32\DRIVERS\mouhid.sys
22:08:43.0156 1180 mouhid - ok
22:08:43.0234 1180 [ A80B9A0BAD1B73637DBCBBA7DF72D3FD ] MountMgr C:\WINDOWS\system32\drivers\MountMgr.sys
22:08:43.0234 1180 MountMgr - ok
22:08:43.0359 1180 [ 7EDBBB9351A38C6BB0FE98CFD44DB430 ] MozillaMaintenance C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe
22:08:43.0359 1180 MozillaMaintenance - ok
22:08:43.0390 1180 mraid35x - ok
22:08:43.0421 1180 [ 11D42BB6206F33FBB3BA0288D3EF81BD ] MRxDAV C:\WINDOWS\system32\DRIVERS\mrxdav.sys
22:08:43.0437 1180 MRxDAV - ok
22:08:43.0500 1180 [ 7D304A5EB4344EBEEAB53A2FE3FFB9F0 ] MRxSmb C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
22:08:43.0515 1180 MRxSmb - ok
22:08:43.0625 1180 [ 35A031AF38C55F92D28AA03EE9F12CC9 ] MSDTC C:\WINDOWS\system32\msdtc.exe
22:08:43.0625 1180 MSDTC - ok
22:08:43.0687 1180 [ 1477849772712BAC69C144DCF2C9CE81 ] MSDV C:\WINDOWS\system32\DRIVERS\msdv.sys
22:08:43.0687 1180 MSDV - ok
22:08:43.0734 1180 [ C941EA2454BA8350021D774DAF0F1027 ] Msfs C:\WINDOWS\system32\drivers\Msfs.sys
22:08:43.0734 1180 Msfs - ok
22:08:43.0781 1180 MSIServer - ok
22:08:43.0843 1180 [ D1575E71568F4D9E14CA56B7B0453BF1 ] MSKSSRV C:\WINDOWS\system32\drivers\MSKSSRV.sys
22:08:43.0843 1180 MSKSSRV - ok
22:08:43.0875 1180 [ 325BB26842FC7CCC1FCCE2C457317F3E ] MSPCLOCK C:\WINDOWS\system32\drivers\MSPCLOCK.sys
22:08:43.0875 1180 MSPCLOCK - ok
22:08:44.0156 1180 [ BAD59648BA099DA4A17680B39730CB3D ] MSPQM C:\WINDOWS\system32\drivers\MSPQM.sys
22:08:44.0187 1180 MSPQM - ok
22:08:44.0390 1180 [ AF5F4F3F14A8EA2C26DE30F7A1E17136 ] mssmbios C:\WINDOWS\system32\DRIVERS\mssmbios.sys
22:08:44.0390 1180 mssmbios - ok
22:08:44.0468 1180 [ E53736A9E30C45FA9E7B5EAC55056D1D ] MSTEE C:\WINDOWS\system32\drivers\MSTEE.sys
22:08:44.0468 1180 MSTEE - ok
22:08:44.0515 1180 [ DE6A75F5C270E756C5508D94B6CF68F5 ] Mup C:\WINDOWS\system32\drivers\Mup.sys
22:08:44.0515 1180 Mup - ok
22:08:44.0593 1180 [ 5B50F1B2A2ED47D560577B221DA734DB ] NABTSFEC C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys
22:08:44.0593 1180 NABTSFEC - ok
22:08:44.0718 1180 [ 46BB15AE2AC7D025D6D2567B876817BD ] napagent C:\WINDOWS\System32\qagentrt.dll
22:08:44.0718 1180 napagent - ok
22:08:44.0781 1180 [ 1DF7F42665C94B825322FAE71721130D ] NDIS C:\WINDOWS\system32\drivers\NDIS.sys
22:08:44.0781 1180 NDIS - ok
22:08:44.0812 1180 [ 7FF1F1FD8609C149AA432F95A8163D97 ] NdisIP C:\WINDOWS\system32\DRIVERS\NdisIP.sys
22:08:44.0812 1180 NdisIP - ok
22:08:44.0859 1180 [ 0109C4F3850DFBAB279542515386AE22 ] NdisTapi C:\WINDOWS\system32\DRIVERS\ndistapi.sys
22:08:44.0859 1180 NdisTapi - ok
22:08:44.0890 1180 [ F927A4434C5028758A842943EF1A3849 ] Ndisuio C:\WINDOWS\system32\DRIVERS\ndisuio.sys
22:08:44.0890 1180 Ndisuio - ok
22:08:44.0921 1180 [ EDC1531A49C80614B2CFDA43CA8659AB ] NdisWan C:\WINDOWS\system32\DRIVERS\ndiswan.sys
22:08:44.0937 1180 NdisWan - ok
22:08:45.0015 1180 [ 9282BD12DFB069D3889EB3FCC1000A9B ] NDProxy C:\WINDOWS\system32\drivers\NDProxy.sys
22:08:45.0015 1180 NDProxy - ok
22:08:45.0140 1180 [ 2969D26EEE289BE7422AA46FC55F4E38 ] Net Driver HPZ12 C:\WINDOWS\system32\HPZinw12.dll
22:08:45.0140 1180 Net Driver HPZ12 - ok
22:08:45.0187 1180 [ 5D81CF9A2F1A3A756B66CF684911CDF0 ] NetBIOS C:\WINDOWS\system32\DRIVERS\netbios.sys
22:08:45.0187 1180 NetBIOS - ok
22:08:45.0218 1180 [ 74B2B2F5BEA5E9A3DC021D685551BD3D ] NetBT C:\WINDOWS\system32\DRIVERS\netbt.sys
22:08:45.0218 1180 NetBT - ok
22:08:45.0265 1180 [ 8ACE4251BFFD09CE75679FE940E996CC ] NetDDE C:\WINDOWS\system32\netdde.exe
22:08:45.0281 1180 NetDDE - ok
22:08:45.0296 1180 [ 8ACE4251BFFD09CE75679FE940E996CC ] NetDDEdsdm C:\WINDOWS\system32\netdde.exe
22:08:45.0296 1180 NetDDEdsdm - ok
22:08:45.0343 1180 [ AFB8261B56CBA0D86AEB6DF682AF9785 ] Netlogon C:\WINDOWS\system32\lsass.exe
22:08:45.0343 1180 Netlogon - ok
22:08:45.0390 1180 [ E6D88F1F6745BF00B57E7855A2AB696C ] Netman C:\WINDOWS\System32\netman.dll
22:08:45.0406 1180 Netman - ok
22:08:45.0515 1180 [ D34612C5D02D026535B3095D620626AE ] NetTcpPortSharing c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
22:08:45.0515 1180 NetTcpPortSharing - ok
22:08:45.0578 1180 [ E9E47CFB2D461FA0FC75B7A74C6383EA ] NIC1394 C:\WINDOWS\system32\DRIVERS\nic1394.sys
22:08:45.0578 1180 NIC1394 - ok
22:08:45.0625 1180 NipSvc - ok
22:08:45.0703 1180 [ F1B67B6B0751AE0E6E964B02821206A3 ] Nla C:\WINDOWS\System32\mswsock.dll
22:08:45.0703 1180 Nla - ok
22:08:45.0796 1180 [ 1E421A6BCF2203CC61B821ADA9DE878B ] nm C:\WINDOWS\system32\DRIVERS\NMnt.sys
22:08:45.0796 1180 nm - ok
22:08:45.0828 1180 [ 3182D64AE053D6FB034F44B6DEF8034A ] Npfs C:\WINDOWS\system32\drivers\Npfs.sys
22:08:45.0828 1180 Npfs - ok
22:08:45.0875 1180 [ 78A08DD6A8D65E697C18E1DB01C5CDCA ] Ntfs C:\WINDOWS\system32\drivers\Ntfs.sys
22:08:45.0890 1180 Ntfs - ok
22:08:45.0921 1180 [ AFB8261B56CBA0D86AEB6DF682AF9785 ] NtLmSsp C:\WINDOWS\system32\lsass.exe
22:08:45.0921 1180 NtLmSsp - ok
22:08:45.0968 1180 [ 56AF4064996FA5BAC9C449B1514B4770 ] NtmsSvc C:\WINDOWS\system32\ntmssvc.dll
22:08:45.0984 1180 NtmsSvc - ok
22:08:46.0062 1180 [ 73C1E1F395918BC2C6DD67AF7591A3AD ] Null C:\WINDOWS\system32\drivers\Null.sys
22:08:46.0062 1180 Null - ok
22:08:46.0093 1180 [ B305F3FAD35083837EF46A0BBCE2FC57 ] NwlnkFlt C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
22:08:46.0093 1180 NwlnkFlt - ok
22:08:46.0140 1180 [ C99B3415198D1AAB7227F2C88FD664B9 ] NwlnkFwd C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
22:08:46.0140 1180 NwlnkFwd - ok
22:08:46.0156 1180 [ CA33832DF41AFB202EE7AEB05145922F ] ohci1394 C:\WINDOWS\system32\DRIVERS\ohci1394.sys
22:08:46.0171 1180 ohci1394 - ok
22:08:46.0234 1180 [ 7A56CF3E3F12E8AF599963B16F50FB6A ] ose C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE
22:08:46.0234 1180 ose - ok
22:08:46.0328 1180 [ F84785660305B9B903FB3BCA8BA29837 ] Parport C:\WINDOWS\system32\DRIVERS\parport.sys
22:08:46.0328 1180 Parport - ok
22:08:46.0531 1180 [ BEB3BA25197665D82EC7065B724171C6 ] PartMgr C:\WINDOWS\system32\drivers\PartMgr.sys
22:08:46.0531 1180 PartMgr - ok
22:08:47.0156 1180 [ C2BF987829099A3EAA2CA6A0A90ECB4F ] ParVdm C:\WINDOWS\system32\drivers\ParVdm.sys
22:08:47.0156 1180 ParVdm - ok
22:08:47.0328 1180 [ 5EEB45F500E3E97153CB75723F8CA185 ] PCA C:\WINDOWS\SMINST\PCAngel.exe
22:08:47.0343 1180 PCA - ok
22:08:47.0421 1180 [ 387E8DEDC343AA2D1EFBC30580273ACD ] PCI C:\WINDOWS\system32\DRIVERS\pci.sys
22:08:47.0421 1180 PCI - ok
22:08:47.0453 1180 PCIDump - ok
22:08:47.0515 1180 [ 59BA86D9A61CBCF4DF8E598C331F5B82 ] PCIIde C:\WINDOWS\system32\DRIVERS\pciide.sys
22:08:47.0515 1180 PCIIde - ok
22:08:47.0562 1180 [ A2A966B77D61847D61A3051DF87C8C97 ] Pcmcia C:\WINDOWS\system32\DRIVERS\pcmcia.sys
22:08:47.0562 1180 Pcmcia - ok
22:08:47.0609 1180 PDCOMP - ok
22:08:47.0625 1180 PDFRAME - ok
22:08:47.0640 1180 PDRELI - ok
22:08:47.0671 1180 PDRFRAME - ok
22:08:47.0687 1180 perc2 - ok
22:08:47.0718 1180 perc2hib - ok
22:08:47.0828 1180 [ E1653A632F878E353399B96F2CEF6570 ] PersonalSecureDrive C:\WINDOWS\System32\drivers\psd.sys
22:08:47.0828 1180 PersonalSecureDrive - ok
22:08:47.0906 1180 [ 2705BD86D5A1FA46755BCC48C5BE0F18 ] PersonalSecureDriveService C:\Programme\ProtectTools\Embedded Security Software\PSDsrvc.EXE
22:08:47.0906 1180 PersonalSecureDriveService - ok
22:08:47.0937 1180 [ A3EDBE9053889FB24AB22492472B39DC ] PlugPlay C:\WINDOWS\system32\services.exe
22:08:47.0953 1180 PlugPlay - ok
22:08:48.0062 1180 [ BAFC9706BDF425A02B66468AB2605C59 ] Pml Driver HPZ12 C:\WINDOWS\system32\HPZipm12.dll
22:08:48.0062 1180 Pml Driver HPZ12 - ok
22:08:48.0125 1180 [ AFB8261B56CBA0D86AEB6DF682AF9785 ] PolicyAgent C:\WINDOWS\system32\lsass.exe
22:08:48.0125 1180 PolicyAgent - ok
22:08:48.0156 1180 [ EFEEC01B1D3CF84F16DDD24D9D9D8F99 ] PptpMiniport C:\WINDOWS\system32\DRIVERS\raspptp.sys
22:08:48.0156 1180 PptpMiniport - ok
22:08:48.0234 1180 [ 2CB55427C58679F49AD600FCCBA76360 ] Processor C:\WINDOWS\system32\DRIVERS\processr.sys
22:08:48.0234 1180 Processor - ok
22:08:48.0250 1180 [ AFB8261B56CBA0D86AEB6DF682AF9785 ] ProtectedStorage C:\WINDOWS\system32\lsass.exe
22:08:48.0265 1180 ProtectedStorage - ok
22:08:48.0312 1180 [ 09298EC810B07E5D582CB3A3F9255424 ] PSched C:\WINDOWS\system32\DRIVERS\psched.sys
22:08:48.0312 1180 PSched - ok
22:08:48.0390 1180 [ 80D317BD1C3DBC5D4FE7B1678C60CADD ] Ptilink C:\WINDOWS\system32\DRIVERS\ptilink.sys
22:08:48.0390 1180 Ptilink - ok
22:08:48.0437 1180 [ 49452BFCEC22F36A7A9B9C2181BC3042 ] PxHelp20 C:\WINDOWS\system32\Drivers\PxHelp20.sys
22:08:48.0437 1180 PxHelp20 - ok
22:08:48.0453 1180 ql1080 - ok
22:08:48.0484 1180 Ql10wnt - ok
22:08:48.0500 1180 ql12160 - ok
22:08:48.0515 1180 ql1240 - ok
22:08:48.0531 1180 ql1280 - ok
22:08:48.0562 1180 [ FE0D99D6F31E4FAD8159F690D68DED9C ] RasAcd C:\WINDOWS\system32\DRIVERS\rasacd.sys
22:08:48.0562 1180 RasAcd - ok
22:08:48.0687 1180 [ F5BA6CACCDB66C8F048E867563203246 ] RasAuto C:\WINDOWS\System32\rasauto.dll
22:08:48.0687 1180 RasAuto - ok
22:08:48.0781 1180 [ 0207D26DDF796A193CCD9F83047BB5FC ] Rasirda C:\WINDOWS\system32\DRIVERS\rasirda.sys
22:08:48.0781 1180 Rasirda - ok
22:08:48.0796 1180 [ 11B4A627BC9614B885C4969BFA5FF8A6 ] Rasl2tp C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
22:08:48.0796 1180 Rasl2tp - ok
22:08:48.0921 1180 [ F9A7B66EA345726EDB5862A46B1ECCD5 ] RasMan C:\WINDOWS\System32\rasmans.dll
22:08:48.0921 1180 RasMan - ok
22:08:48.0968 1180 [ 5BC962F2654137C9909C3D4603587DEE ] RasPppoe C:\WINDOWS\system32\DRIVERS\raspppoe.sys
22:08:48.0968 1180 RasPppoe - ok
22:08:49.0000 1180 [ FDBB1D60066FCFBB7452FD8F9829B242 ] Raspti C:\WINDOWS\system32\DRIVERS\raspti.sys
22:08:49.0000 1180 Raspti - ok
22:08:49.0031 1180 [ 7AD224AD1A1437FE28D89CF22B17780A ] Rdbss C:\WINDOWS\system32\DRIVERS\rdbss.sys
22:08:49.0031 1180 Rdbss - ok
22:08:49.0109 1180 [ 4912D5B403614CE99C28420F75353332 ] RDPCDD C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
22:08:49.0109 1180 RDPCDD - ok
22:08:49.0187 1180 [ 43AF5212BD8FB5BA6EED9754358BD8F7 ] RDPWD C:\WINDOWS\system32\drivers\RDPWD.sys
22:08:49.0187 1180 RDPWD - ok
22:08:49.0390 1180 [ 263AF18AF0F3DB99F574C95F284CCEC9 ] RDSessMgr C:\WINDOWS\system32\sessmgr.exe
22:08:49.0437 1180 RDSessMgr - ok
22:08:50.0046 1180 [ ED761D453856F795A7FE056E42C36365 ] redbook C:\WINDOWS\system32\DRIVERS\redbook.sys
22:08:50.0062 1180 redbook - ok
22:08:50.0265 1180 [ 0E97EC96D6942CEEC2D188CC2EB69A01 ] RemoteAccess C:\WINDOWS\System32\mprdim.dll
22:08:50.0265 1180 RemoteAccess - ok
22:08:50.0343 1180 [ 2A02E21867497DF20B8FC95631395169 ] RpcLocator C:\WINDOWS\system32\locator.exe
22:08:50.0359 1180 RpcLocator - ok
22:08:50.0453 1180 [ 3127AFBF2C1ED0AB14A1BBB7AAECB85B ] RpcSs C:\WINDOWS\system32\rpcss.dll
22:08:50.0453 1180 RpcSs - ok
22:08:50.0515 1180 [ 4BDD71B4B521521499DFD14735C4F398 ] RSVP C:\WINDOWS\system32\rsvp.exe
22:08:50.0515 1180 RSVP - ok
22:08:50.0593 1180 [ AFB8261B56CBA0D86AEB6DF682AF9785 ] SamSs C:\WINDOWS\system32\lsass.exe
22:08:50.0593 1180 SamSs - ok
22:08:50.0656 1180 [ DCEC079FAD95D36C8DD5CB6D779DFE32 ] SCardSvr C:\WINDOWS\System32\SCardSvr.exe
22:08:50.0656 1180 SCardSvr - ok
22:08:50.0796 1180 [ A050194A44D7FA8D7186ED2F4E8367AE ] Schedule C:\WINDOWS\system32\schedsvc.dll
22:08:50.0796 1180 Schedule - ok
22:08:50.0953 1180 [ 8D04819A3CE51B9EB47E5689B44D43C4 ] sdbus C:\WINDOWS\system32\DRIVERS\sdbus.sys
22:08:50.0953 1180 sdbus - ok
22:08:51.0062 1180 [ 90A3935D05B494A5A39D37E71F09A677 ] Secdrv C:\WINDOWS\system32\DRIVERS\secdrv.sys
22:08:51.0062 1180 Secdrv - ok
22:08:51.0156 1180 [ BEE4CFD1D48C23B44CF4B974B0B79B2B ] seclogon C:\WINDOWS\System32\seclogon.dll
22:08:51.0156 1180 seclogon - ok
22:08:51.0203 1180 [ 2AAC9B6ED9EDDFFB721D6452E34D67E3 ] SENS C:\WINDOWS\system32\sens.dll
22:08:51.0203 1180 SENS - ok
22:08:51.0218 1180 [ 0F29512CCD6BEAD730039FB4BD2C85CE ] serenum C:\WINDOWS\system32\DRIVERS\serenum.sys
22:08:51.0218 1180 serenum - ok
22:08:51.0250 1180 [ CF24EB4F0412C82BCD1F4F35A025E31D ] Serial C:\WINDOWS\system32\DRIVERS\serial.sys
22:08:51.0250 1180 Serial - ok
22:08:51.0343 1180 [ 8E6B8C671615D126FDC553D1E2DE5562 ] Sfloppy C:\WINDOWS\system32\DRIVERS\sfloppy.sys
22:08:51.0343 1180 Sfloppy - ok
22:08:51.0437 1180 [ 2DB7D303C36DDD055215052F118E8E75 ] ShellHWDetection C:\WINDOWS\System32\shsvcs.dll
22:08:51.0437 1180 ShellHWDetection - ok
22:08:51.0453 1180 Simbad - ok
22:08:51.0515 1180 [ 866D538EBE33709A5C9F5C62B73B7D14 ] SLIP C:\WINDOWS\system32\DRIVERS\SLIP.sys
22:08:51.0515 1180 SLIP - ok
22:08:51.0640 1180 [ D03A4CDB1B089E3F6C23501339506E5E ] SMCIRDA C:\WINDOWS\system32\DRIVERS\smcirda.sys
22:08:51.0656 1180 SMCIRDA - ok
22:08:51.0687 1180 Sparrow - ok
22:08:51.0765 1180 [ AB8B92451ECB048A4D1DE7C3FFCB4A9F ] splitter C:\WINDOWS\system32\drivers\splitter.sys
22:08:51.0765 1180 splitter - ok
22:08:51.0828 1180 [ 60784F891563FB1B767F70117FC2428F ] Spooler C:\WINDOWS\system32\spoolsv.exe
22:08:51.0828 1180 Spooler - ok
22:08:51.0921 1180 [ 50FA898F8C032796D3B1B9951BB5A90F ] sr C:\WINDOWS\system32\DRIVERS\sr.sys
22:08:51.0921 1180 sr - ok
22:08:52.0015 1180 [ FE77A85495065F3AD59C5C65B6C54182 ] srservice C:\WINDOWS\system32\srsvc.dll
22:08:52.0015 1180 srservice - ok
22:08:52.0093 1180 [ 47DDFC2F003F7F9F0592C6874962A2E7 ] Srv C:\WINDOWS\system32\DRIVERS\srv.sys
22:08:52.0093 1180 Srv - ok
22:08:52.0171 1180 [ 4DF5B05DFAEC29E13E1ED6F6EE12C500 ] SSDPSRV C:\WINDOWS\System32\ssdpsrv.dll
22:08:52.0171 1180 SSDPSRV - ok
22:08:52.0437 1180 [ A36EE93698802CD899F98BFD553D8185 ] ssmdrv C:\WINDOWS\system32\DRIVERS\ssmdrv.sys
22:08:52.0437 1180 ssmdrv - ok
22:08:52.0562 1180 [ BC2C5985611C5356B24AEB370953DED9 ] stisvc C:\WINDOWS\system32\wiaservc.dll
22:08:52.0562 1180 stisvc - ok
22:08:52.0687 1180 [ 77813007BA6265C4B6098187E6ED79D2 ] streamip C:\WINDOWS\system32\DRIVERS\StreamIP.sys
22:08:52.0687 1180 streamip - ok
22:08:52.0750 1180 [ 3941D127AEF12E93ADDF6FE6EE027E0F ] swenum C:\WINDOWS\system32\DRIVERS\swenum.sys
22:08:52.0750 1180 swenum - ok
22:08:52.0812 1180 [ 8CE882BCC6CF8A62F2B2323D95CB3D01 ] swmidi C:\WINDOWS\system32\drivers\swmidi.sys
22:08:52.0812 1180 swmidi - ok
22:08:52.0859 1180 SwPrv - ok
22:08:52.0890 1180 symc810 - ok
22:08:52.0921 1180 symc8xx - ok
22:08:52.0937 1180 sym_hi - ok
22:08:52.0953 1180 sym_u3 - ok
22:08:53.0031 1180 [ 60CB9F7C95791FE56A6E86868F4467BA ] SynTP C:\WINDOWS\system32\DRIVERS\SynTP.sys
22:08:53.0031 1180 SynTP - ok
22:08:53.0062 1180 [ 8B83F3ED0F1688B4958F77CD6D2BF290 ] sysaudio C:\WINDOWS\system32\drivers\sysaudio.sys
22:08:53.0062 1180 sysaudio - ok
22:08:53.0125 1180 [ 2903FFFA2523926D6219428040DCE6B9 ] SysmonLog C:\WINDOWS\system32\smlogsvc.exe
22:08:53.0125 1180 SysmonLog - ok
22:08:53.0171 1180 [ 05903CAC4B98908D55EA5774775B382E ] TapiSrv C:\WINDOWS\System32\tapisrv.dll
22:08:53.0171 1180 TapiSrv - ok
22:08:53.0250 1180 [ 9AEFA14BD6B182D61E3119FA5F436D3D ] Tcpip C:\WINDOWS\system32\DRIVERS\tcpip.sys
22:08:53.0265 1180 Tcpip - ok
22:08:53.0296 1180 [ 6471A66807F5E104E4885F5B67349397 ] TDPIPE C:\WINDOWS\system32\drivers\TDPIPE.sys
22:08:53.0296 1180 TDPIPE - ok
22:08:53.0453 1180 [ 16C73F84C202C5380FB63F755BFA8BEE ] TDslMgrService C:\Programme\T-Online\DSL-Manager\DslMgrSvc.exe
22:08:53.0468 1180 TDslMgrService - ok
22:08:53.0562 1180 [ C56B6D0402371CF3700EB322EF3AAF61 ] TDTCP C:\WINDOWS\system32\drivers\TDTCP.sys
22:08:53.0562 1180 TDTCP - ok
22:08:53.0656 1180 [ 88155247177638048422893737429D9E ] TermDD C:\WINDOWS\system32\DRIVERS\termdd.sys
22:08:53.0656 1180 TermDD - ok
22:08:53.0859 1180 [ B7DE02C863D8F5A005A7BF375375A6A4 ] TermService C:\WINDOWS\System32\termsrv.dll
22:08:53.0875 1180 TermService - ok
22:08:53.0937 1180 [ 2DB7D303C36DDD055215052F118E8E75 ] Themes C:\WINDOWS\System32\shsvcs.dll
22:08:53.0953 1180 Themes - ok
22:08:54.0046 1180 [ 244CFBFFDEFB77F3DF571A8CD108FC06 ] tifm21 C:\WINDOWS\system32\drivers\tifm21.sys
22:08:54.0046 1180 tifm21 - ok
22:08:54.0062 1180 TosIde - ok
22:08:54.0140 1180 [ 626504572B175867F30F3215C04B3E2F ] TrkWks C:\WINDOWS\system32\trkwks.dll
22:08:54.0140 1180 TrkWks - ok
22:08:54.0250 1180 [ 7C1367BFF5587CF49C0ED2E664F6EAC0 ] TSMPacket C:\WINDOWS\system32\DRIVERS\tsmpkt.sys
22:08:54.0250 1180 TSMPacket - ok
22:08:54.0296 1180 [ 5787B80C2E3C5E2F56C2A233D91FA2C9 ] Udfs C:\WINDOWS\system32\drivers\Udfs.sys
22:08:54.0296 1180 Udfs - ok
22:08:54.0312 1180 ultra - ok
22:08:54.0390 1180 [ 402DDC88356B1BAC0EE3DD1580C76A31 ] Update C:\WINDOWS\system32\DRIVERS\update.sys
22:08:54.0390 1180 Update - ok
22:08:54.0500 1180 [ 1DFD8975D8C89214B98D9387C1125B49 ] upnphost C:\WINDOWS\System32\upnphost.dll
22:08:54.0500 1180 upnphost - ok
22:08:54.0843 1180 [ 9B11E6118958E63E1FEF129466E2BDA7 ] UPS C:\WINDOWS\System32\ups.exe
22:08:54.0843 1180 UPS - ok
22:08:55.0234 1180 [ E919708DB44ED8543A7C017953148330 ] usbaudio C:\WINDOWS\system32\drivers\usbaudio.sys
22:08:55.0250 1180 usbaudio - ok
22:08:55.0343 1180 [ 173F317CE0DB8E21322E71B7E60A27E8 ] usbccgp C:\WINDOWS\system32\DRIVERS\usbccgp.sys
22:08:55.0343 1180 usbccgp - ok
22:08:55.0406 1180 [ 65DCF09D0E37D4C6B11B5B0B76D470A7 ] usbehci C:\WINDOWS\system32\DRIVERS\usbehci.sys
22:08:55.0406 1180 usbehci - ok
22:08:55.0437 1180 [ 1AB3CDDE553B6E064D2E754EFE20285C ] usbhub C:\WINDOWS\system32\DRIVERS\usbhub.sys
22:08:55.0437 1180 usbhub - ok
22:08:55.0500 1180 [ 0DAECCE65366EA32B162F85F07C6753B ] usbohci C:\WINDOWS\system32\DRIVERS\usbohci.sys
22:08:55.0500 1180 usbohci - ok
22:08:55.0593 1180 [ A717C8721046828520C9EDF31288FC00 ] usbprint C:\WINDOWS\system32\DRIVERS\usbprint.sys
22:08:55.0593 1180 usbprint - ok
22:08:55.0765 1180 [ A0B8CF9DEB1184FBDD20784A58FA75D4 ] usbscan C:\WINDOWS\system32\DRIVERS\usbscan.sys
22:08:55.0765 1180 usbscan - ok
22:08:55.0890 1180 [ A32426D9B14A089EAA1D922E0C5801A9 ] USBSTOR C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
22:08:55.0890 1180 USBSTOR - ok
22:08:55.0937 1180 [ 26496F9DEE2D787FC3E61AD54821FFE6 ] usbuhci C:\WINDOWS\system32\DRIVERS\usbuhci.sys
22:08:55.0937 1180 usbuhci - ok
22:08:56.0031 1180 [ 0D3A8FAFCEACD8B7625CD549757A7DF1 ] VgaSave C:\WINDOWS\System32\drivers\vga.sys
22:08:56.0031 1180 VgaSave - ok
22:08:56.0140 1180 [ 3B3EFCDA263B8AC14FDF9CBDD0791B2E ] ViaIde C:\WINDOWS\system32\DRIVERS\viaide.sys
22:08:56.0140 1180 ViaIde - ok
22:08:56.0187 1180 [ A5A712F4E880874A477AF790B5186E1D ] VolSnap C:\WINDOWS\system32\drivers\VolSnap.sys
22:08:56.0203 1180 VolSnap - ok
22:08:56.0296 1180 [ 68F106273BE29E7B7EF8266977268E78 ] VSS C:\WINDOWS\System32\vssvc.exe
22:08:56.0296 1180 VSS - ok
22:08:56.0343 1180 [ 7B353059E665F8B7AD2BBEAEF597CF45 ] W32Time C:\WINDOWS\system32\w32time.dll
22:08:56.0359 1180 W32Time - ok
22:08:56.0406 1180 [ E20B95BAEDB550F32DD489265C1DA1F6 ] Wanarp C:\WINDOWS\system32\DRIVERS\wanarp.sys
22:08:56.0406 1180 Wanarp - ok
22:08:56.0421 1180 WDICA - ok
22:08:56.0500 1180 [ 6768ACF64B18196494413695F0C3A00F ] wdmaud C:\WINDOWS\system32\drivers\wdmaud.sys
22:08:56.0500 1180 wdmaud - ok
22:08:56.0531 1180 [ 81727C9873E3905A2FFC1EBD07265002 ] WebClient C:\WINDOWS\System32\webclnt.dll
22:08:56.0531 1180 WebClient - ok
22:08:56.0734 1180 [ 214BC3AD84907AD6AD655AC5465F449A ] winachsf C:\WINDOWS\system32\DRIVERS\HSF_CNXT.sys
22:08:56.0750 1180 winachsf - ok
22:08:57.0093 1180 [ 6F3F3973D97714CC5F906A19FE883729 ] winmgmt C:\WINDOWS\system32\wbem\WMIsvc.dll
22:08:57.0093 1180 winmgmt - ok
22:08:57.0296 1180 wltrysvc - ok
22:08:57.0484 1180 [ C51B4A5C05A5475708E3C81C7765B71D ] WmdmPmSN C:\WINDOWS\system32\MsPMSNSv.dll
22:08:57.0484 1180 WmdmPmSN - ok
22:08:57.0609 1180 [ C42584FD66CE9E17403AEBCA199F7BDB ] WmiAcpi C:\WINDOWS\system32\DRIVERS\wmiacpi.sys
22:08:57.0609 1180 WmiAcpi - ok
22:08:57.0734 1180 [ 93908111BA57A6E60EC2FA2DE202105C ] WmiApSrv C:\WINDOWS\system32\wbem\wmiapsrv.exe
22:08:57.0734 1180 WmiApSrv - ok
22:08:57.0906 1180 [ BF05650BB7DF5E9EBDD25974E22403BB ] WMPNetworkSvc C:\Programme\Windows Media Player\WMPNetwk.exe
22:08:57.0921 1180 WMPNetworkSvc - ok
22:08:58.0015 1180 [ 6ABE6E225ADB5A751622A9CC3BC19CE8 ] WS2IFSL C:\WINDOWS\System32\drivers\ws2ifsl.sys
22:08:58.0015 1180 WS2IFSL - ok
22:08:58.0093 1180 [ C98B39829C2BBD34E454150633C62C78 ] WSTCODEC C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS
22:08:58.0093 1180 WSTCODEC - ok
22:08:58.0171 1180 [ 7B4FE05202AA6BF9F4DFD0E6A0D8A085 ] wuauserv C:\WINDOWS\system32\wuauserv.dll
22:08:58.0171 1180 wuauserv - ok
22:08:58.0218 1180 [ F15FEAFFFBB3644CCC80C5DA584E6311 ] WudfPf C:\WINDOWS\system32\DRIVERS\WudfPf.sys
22:08:58.0218 1180 WudfPf - ok
22:08:58.0265 1180 [ 28B524262BCE6DE1F7EF9F510BA3985B ] WudfRd C:\WINDOWS\system32\DRIVERS\wudfrd.sys
22:08:58.0265 1180 WudfRd - ok
22:08:58.0312 1180 [ 05231C04253C5BC30B26CBAAE680ED89 ] WudfSvc C:\WINDOWS\System32\WUDFSvc.dll
22:08:58.0328 1180 WudfSvc - ok
22:08:58.0421 1180 [ C4F109C005F6725162D2D12CA751E4A7 ] WZCSVC C:\WINDOWS\System32\wzcsvc.dll
22:08:58.0453 1180 WZCSVC - ok
22:08:58.0500 1180 [ 0ADA34871A2E1CD2CAAFED1237A47750 ] xmlprov C:\WINDOWS\System32\xmlprov.dll
22:08:58.0500 1180 xmlprov - ok
22:08:58.0718 1180 ================ Scan global ===============================
22:08:58.0812 1180 [ 2C60091CA5F67C3032EAB3B30390C27F ] C:\WINDOWS\system32\basesrv.dll
22:08:58.0859 1180 [ A28CE25B59C90E12743001A1F2AE3613 ] C:\WINDOWS\system32\winsrv.dll
22:08:58.0890 1180 [ A28CE25B59C90E12743001A1F2AE3613 ] C:\WINDOWS\system32\winsrv.dll
22:08:58.0906 1180 [ A3EDBE9053889FB24AB22492472B39DC ] C:\WINDOWS\system32\services.exe
22:08:58.0906 1180 [Global] - ok
22:08:58.0906 1180 ================ Scan MBR ==================================
22:08:58.0937 1180 [ 14C6601BDCC8A8484143829F2700ED2C ] \Device\Harddisk0\DR0
22:08:59.0421 1180 \Device\Harddisk0\DR0 - ok
22:08:59.0437 1180 ================ Scan VBR ==================================
22:08:59.0437 1180 [ F720E665219026F9C6151AB989ED45A4 ] \Device\Harddisk0\DR0\Partition1
22:08:59.0437 1180 \Device\Harddisk0\DR0\Partition1 - ok
22:08:59.0437 1180 [ F54C70008FFDEBCB41CBC6358BA68B49 ] \Device\Harddisk0\DR0\Partition2
22:08:59.0453 1180 \Device\Harddisk0\DR0\Partition2 - ok
22:08:59.0453 1180 ============================================================
22:08:59.0453 1180 Scan finished
22:08:59.0453 1180 ============================================================
22:08:59.0468 3792 Detected object count: 1
22:08:59.0468 3792 Actual detected object count: 1
22:09:25.0234 3792 8bbc62a8e61cff8c ( Rootkit.Win32.Necurs.gen ) - skipped by user
22:09:25.0234 3792 8bbc62a8e61cff8c ( Rootkit.Win32.Necurs.gen ) - User select action: Skip
22:11:23.0718 1004 Deinitialize success
Und noch die beiden OTL-Logs: Code:
OTL logfile created on: 16.04.2013 22:12:37 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Dokumente und Einstellungen\Sandra\Desktop
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
1,37 Gb Total Physical Memory | 0,67 Gb Available Physical Memory | 48,56% Memory free
2,54 Gb Paging File | 2,06 Gb Available in Paging File | 81,21% Paging File free
Paging file location(s): C:\pagefile.sys 1344 2688 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme
Drive C: | 48,15 Gb Total Space | 0,84 Gb Free Space | 1,74% Space Free | Partition Type: NTFS
Drive E: | 7,75 Gb Total Space | 0,43 Gb Free Space | 5,50% Space Free | Partition Type: NTFS
Computer Name: PC317112490211 | User Name: Sandra | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - [2013.04.16 22:11:45 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Dokumente und Einstellungen\Sandra\Desktop\OTL.exe
PRC - [2013.04.10 08:56:41 | 000,920,472 | ---- | M] (Mozilla Corporation) -- C:\Programme\Mozilla Firefox\firefox.exe
PRC - [2013.03.28 17:34:27 | 000,086,752 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Programme\Avira\AntiVir Desktop\sched.exe
PRC - [2013.03.28 17:33:56 | 000,345,312 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Programme\Avira\AntiVir Desktop\avgnt.exe
PRC - [2009.08.27 18:09:10 | 001,253,376 | ---- | M] (MAGIX AG) -- C:\Programme\Gemeinsame Dateien\MAGIX Services\Database\bin\FABS.exe
PRC - [2008.04.14 04:22:45 | 001,036,800 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2007.11.05 14:28:10 | 000,204,915 | ---- | M] (Option) -- C:\Programme\T-Mobile\web'n'walk Manager\GtDetectSc.exe
PRC - [2006.03.23 18:48:44 | 000,073,728 | ---- | M] (Hewlett-Packard Company) -- C:\Programme\Gemeinsame Dateien\LightScribe\LSSrvc.exe
PRC - [2006.03.03 17:28:18 | 000,136,736 | ---- | M] (Infineon Technologies AG) -- C:\Programme\ProtectTools\Embedded Security Software\PSDrt.exe
PRC - [2005.12.23 13:44:26 | 000,491,606 | ---- | M] () -- C:\Programme\HPQ\Shared\HpqToaster.exe
PRC - [2005.06.29 21:06:54 | 000,043,008 | ---- | M] (Cognizance Corporation) -- C:\Programme\HPQ\IAM\Bin\asghost.exe
========== Modules (No Company Name) ==========
MOD - [2013.04.10 08:56:55 | 003,133,336 | ---- | M] () -- C:\Programme\Mozilla Firefox\mozjs.dll
MOD - [2013.03.28 17:34:30 | 000,397,704 | ---- | M] () -- C:\Programme\Avira\AntiVir Desktop\sqlite3.dll
MOD - [2012.12.18 16:28:26 | 000,301,056 | ---- | M] () -- C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\PDFShell.DEU
MOD - [2008.04.14 04:22:16 | 000,014,336 | ---- | M] () -- C:\WINDOWS\system32\msdmo.dll
MOD - [2006.01.19 11:50:36 | 000,757,760 | ---- | M] () -- C:\WINDOWS\system32\bcm1xsup.dll
MOD - [2005.12.23 13:44:26 | 000,491,606 | ---- | M] () -- C:\Programme\HPQ\Shared\HpqToaster.exe
MOD - [2004.06.01 11:39:56 | 000,094,274 | ---- | M] () -- C:\WINDOWS\system32\HPBHEALR.DLL
========== Services (SafeList) ==========
SRV - File not found [On_Demand | Stopped] -- C:\VIRUSfighter\Nvc\BIN\nipsvc.exe -- (NipSvc)
SRV - File not found [Disabled | Stopped] -- %SystemRoot%\System32\hidserv.dll -- (HidServ)
SRV - File not found [On_Demand | Stopped] -- %SystemRoot%\System32\appmgmts.dll -- (AppMgmt)
SRV - [2013.04.14 12:42:37 | 000,256,904 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2013.04.10 08:56:49 | 000,115,608 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2013.03.28 17:34:27 | 000,086,752 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Programme\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2013.03.28 17:33:57 | 000,110,816 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Stopped] -- C:\Programme\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2012.08.28 20:09:53 | 000,071,296 | ---- | M] () [Unknown (-1) | Unknown] -- C:\WINDOWS\System32\drivers\8bbc62a8e61cff8c.sys -- (8bbc62a8e61cff8c)
SRV - [2009.08.27 18:09:10 | 001,253,376 | ---- | M] (MAGIX AG) [Auto | Running] -- C:\Programme\Gemeinsame Dateien\MAGIX Services\Database\bin\FABS.exe -- (Fabs)
SRV - [2008.08.07 12:10:02 | 003,276,800 | ---- | M] (MAGIX®) [On_Demand | Stopped] -- C:\Programme\Gemeinsame Dateien\MAGIX Services\Database\bin\fbserver.exe -- (FirebirdServerMAGIXInstance)
SRV - [2008.03.25 22:27:36 | 000,135,168 | ---- | M] (Hewlett-Packard Co.) [Auto | Running] -- C:\Programme\Hewlett-Packard\Digital Imaging\bin\hpqddsvc.dll -- (hpqddsvc)
SRV - [2008.03.25 21:38:24 | 000,217,088 | ---- | M] (Hewlett-Packard Co.) [On_Demand | Running] -- C:\Programme\Hewlett-Packard\Digital Imaging\bin\hpqcxs08.dll -- (hpqcxs08)
SRV - [2007.11.26 15:50:04 | 000,294,912 | ---- | M] (T-Systems Enterprise Services GmbH) [On_Demand | Stopped] -- C:\Programme\T-Online\DSL-Manager\DslMgrSvc.exe -- (TDslMgrService)
SRV - [2007.11.05 14:28:10 | 000,204,915 | ---- | M] (Option) [Auto | Running] -- C:\Programme\T-Mobile\web'n'walk Manager\GtDetectSc.exe -- (GtDetectSc)
SRV - [2006.03.23 18:48:44 | 000,073,728 | ---- | M] (Hewlett-Packard Company) [Auto | Running] -- C:\Programme\Gemeinsame Dateien\LightScribe\LSSrvc.exe -- (LightScribeService)
SRV - [2005.04.04 00:41:10 | 000,069,632 | ---- | M] (Macrovision Corporation) [On_Demand | Stopped] -- C:\Programme\Gemeinsame Dateien\InstallShield\Driver\11\Intel 32\IDriverT.exe -- (IDriverT)
SRV - [2003.07.28 12:28:22 | 000,089,136 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE -- (ose)
========== Driver Services (SafeList) ==========
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (WDICA)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRELI)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDCOMP)
DRV - File not found [Kernel | System | Stopped] -- -- (PCIDump)
DRV - File not found [Kernel | System | Stopped] -- -- (lbrtfdc)
DRV - File not found [Kernel | System | Stopped] -- -- (i2omgmt)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\DOKUME~1\Sandra\LOKALE~1\Temp\cpuz132\cpuz132_x32.sys -- (cpuz132)
DRV - File not found [Kernel | System | Stopped] -- -- (Changer)
DRV - File not found [Kernel | On_Demand | Unknown] -- C:\DOKUME~1\Sandra\LOKALE~1\Temp\aswMBR.sys -- (aswMBR)
DRV - [2013.04.02 10:37:51 | 000,135,136 | ---- | M] (Avira Operations GmbH & Co. KG) [Kernel | System | Stopped] -- C:\WINDOWS\system32\drivers\avipbb.sys -- (avipbb)
DRV - [2013.04.02 10:37:51 | 000,037,352 | ---- | M] (Avira Operations GmbH & Co. KG) [Kernel | System | Stopped] -- C:\WINDOWS\system32\drivers\avkmgr.sys -- (avkmgr)
DRV - [2013.03.28 17:34:43 | 000,084,744 | ---- | M] (Avira Operations GmbH & Co. KG) [File_System | Auto | Stopped] -- C:\WINDOWS\system32\drivers\avgntflt.sys -- (avgntflt)
DRV - [2013.03.28 17:34:43 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System | Stopped] -- C:\WINDOWS\system32\drivers\ssmdrv.sys -- (ssmdrv)
DRV - [2013.03.13 18:12:42 | 000,033,112 | ---- | M] (AVG Technologies) [Kernel | System | Stopped] -- C:\WINDOWS\system32\drivers\avgtpx86.sys -- (avgtp)
DRV - [2012.08.28 20:09:53 | 000,071,296 | ---- | M] () [Unknown (-1) | Unknown (-1) | Unknown] -- C:\WINDOWS\System32\drivers\8bbc62a8e61cff8c.sys -- (8bbc62a8e61cff8c)
DRV - [2008.04.13 20:53:09 | 000,040,320 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nmnt.sys -- (nm)
DRV - [2008.01.25 14:22:09 | 000,016,800 | ---- | M] (HP) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Hppaufd0.sys -- (dot4ufd)
DRV - [2007.09.12 18:24:00 | 000,026,816 | ---- | M] (Printing Communications Assoc., Inc. (PCAUSA)) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\DslTestSp5.sys -- (dsltestSp5)
DRV - [2007.07.09 14:17:36 | 000,095,744 | ---- | M] (Option NV) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Gt51Ip.sys -- (GT72NDISIPXP)
DRV - [2007.06.26 13:38:46 | 000,051,968 | ---- | M] (Option N.V.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\gt72ubus.sys -- (GT72UBUS)
DRV - [2007.06.26 12:53:54 | 000,013,824 | ---- | M] (T-Systems) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\tsmpkt.sys -- (TSMPacket)
DRV - [2007.03.30 13:38:14 | 000,008,064 | ---- | M] (Option N.V.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\gtptser.sys -- (GTPTSER)
DRV - [2006.06.18 23:38:18 | 000,043,520 | ---- | M] (Advanced Micro Devices) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\AmdK8.sys -- (AmdK8)
DRV - [2006.05.22 06:40:30 | 000,017,152 | ---- | M] (T-Online International AG, Marmiko IT-Solutions GmbH) [Kernel | On_Demand | Stopped] -- C:\Programme\Gemeinsame Dateien\Marmiko Shared\MInfraIS\MIINPazx.sys -- (MIINPazX)
DRV - [2006.04.27 11:46:50 | 001,540,096 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag)
DRV - [2006.03.30 14:39:48 | 000,130,432 | ---- | M] (AuthenTec, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\atswpdrv.sys -- (ATSWPDRV)
DRV - [2006.02.16 09:45:26 | 000,057,096 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\btwusb.sys -- (BTWUSB)
DRV - [2006.02.09 03:00:04 | 000,142,720 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\b57xp32.sys -- (b57w2k)
DRV - [2006.01.30 03:00:04 | 001,035,008 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\HSF_DPV.sys -- (HSF_DPV)
DRV - [2006.01.30 03:00:04 | 000,718,464 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\HSF_CNXT.sys -- (winachsf)
DRV - [2006.01.30 03:00:04 | 000,201,600 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\HSFHWAZL.sys -- (HSFHWAZL)
DRV - [2006.01.19 15:50:14 | 000,424,320 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\BCMWL5.SYS -- (BCM43XX)
DRV - [2005.11.30 12:12:36 | 000,162,560 | ---- | M] (Texas Instruments) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\tifm21.sys -- (tifm21)
DRV - [2005.11.29 18:56:28 | 000,036,768 | ---- | M] (Infineon Technologies AG) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\psd.sys -- (PersonalSecureDrive)
DRV - [2005.10.21 13:19:34 | 000,036,352 | ---- | M] (Infineon Technologies AG) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ifxtpm.sys -- (IFXTPM)
DRV - [2005.09.19 14:24:20 | 000,005,760 | ---- | M] (Hewlett-Packard Development Company, L.P.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\EabUsb.sys -- (eabusb)
DRV - [2005.09.19 14:24:10 | 000,009,344 | ---- | M] (Hewlett-Packard Development Company, L.P.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\CPQBttn.sys -- (HBtnKey)
DRV - [2005.09.19 14:23:52 | 000,007,808 | ---- | M] (Hewlett-Packard Development Company, L.P.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\eabfiltr.sys -- (eabfiltr)
DRV - [2002.12.20 12:59:20 | 000,050,396 | ---- | M] (FTDI Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ftser2k.sys -- (FTSER2K)
DRV - [2002.12.20 12:58:56 | 000,019,313 | ---- | M] (FTDI Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ftdibus.sys -- (FTDIBUS)
DRV - [2001.08.18 04:35:52 | 000,035,913 | ---- | M] (SMC) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\smcirda.sys -- (SMCIRDA)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = hxxp://toolbar.ask.com/toolbarv/askRedirect?o=13165&gct=&gc=1&q=
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = hxxp://www.google.com/ie
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-4258336510-953160768-4172013493-1006\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com/ie
IE - HKU\S-1-5-21-4258336510-953160768-4172013493-1006\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = hxxp://google.icq.com/search/search_frame.php
IE - HKU\S-1-5-21-4258336510-953160768-4172013493-1006\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = hxxp://google.icq.com
IE - HKU\S-1-5-21-4258336510-953160768-4172013493-1006\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.startfenster.com
IE - HKU\S-1-5-21-4258336510-953160768-4172013493-1006\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = hxxp://www.google.com/ie
IE - HKU\S-1-5-21-4258336510-953160768-4172013493-1006\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = hxxp://www.google.com/ie
IE - HKU\S-1-5-21-4258336510-953160768-4172013493-1006\..\URLSearchHook: {C94E154B-1459-4A47-966B-4B843BEFC7DB} - C:\Programme\AskSearch\bin\DefaultSearch.dll ()
IE - HKU\S-1-5-21-4258336510-953160768-4172013493-1006\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-21-4258336510-953160768-4172013493-1006\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://search.live.com/results.aspx?q={searchTerms}&src=IE-SearchBox&Form=IE8SRC
IE - HKU\S-1-5-21-4258336510-953160768-4172013493-1006\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}
IE - HKU\S-1-5-21-4258336510-953160768-4172013493-1006\..\SearchScopes\{CF739809-1C6C-47C0-85B9-569DBB141420}: "URL" = hxxp://toolbar.ask.com/toolbarv/askRedirect?gct=&gc=1&q={searchTerms}&crm=1&toolbar=DVS
IE - HKU\S-1-5-21-4258336510-953160768-4172013493-1006\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-4258336510-953160768-4172013493-1006\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local>
========== FireFox ==========
FF - user.js - File not found
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_6_602_180.dll ()
FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa2,version=2.0.0: C:\Programme\Picasa2\npPicasa2.dll File not found
FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Programme\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Programme\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@macromedia.com/FlashPlayer9: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll File not found
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.3: C:\Programme\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Programme\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@macromedia.com/FlashPlayer9: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll File not found
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 20.0.1\extensions\\Components: C:\Programme\Mozilla Firefox\components [2013.04.14 13:41:42 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 20.0.1\extensions\\Plugins: C:\Programme\Mozilla Firefox\plugins [2013.04.13 12:19:58 | 000,000,000 | ---D | M]
[2009.02.05 13:08:59 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Sandra\Anwendungsdaten\Mozilla\Extensions
[2013.04.14 12:30:44 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Sandra\Anwendungsdaten\Mozilla\Firefox\Profiles\bvbqaq59.Sandra\extensions
[2013.04.14 12:30:44 | 000,000,000 | ---D | M] (Google Toolbar for Firefox) -- C:\Dokumente und Einstellungen\Sandra\Anwendungsdaten\Mozilla\Firefox\Profiles\bvbqaq59.Sandra\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}
[2013.04.14 12:30:45 | 000,000,000 | ---D | M] ("Ask Toolbar for Firefox") -- C:\Dokumente und Einstellungen\Sandra\Anwendungsdaten\Mozilla\Firefox\Profiles\bvbqaq59.Sandra\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}
[2012.02.14 19:17:12 | 000,020,591 | ---- | M] () (No name found) -- C:\Dokumente und Einstellungen\Sandra\Anwendungsdaten\Mozilla\Firefox\Profiles\bvbqaq59.Sandra\extensions\{20a82645-c095-46ed-80e3-08825760534b}.xpi
[2013.02.15 20:17:23 | 000,817,280 | ---- | M] () (No name found) -- C:\Dokumente und Einstellungen\Sandra\Anwendungsdaten\Mozilla\Firefox\Profiles\bvbqaq59.Sandra\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
[2013.04.14 13:41:42 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions
[2013.04.13 12:19:03 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}
[2013.04.13 12:19:03 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions\linkfilter@kaspersky.ru
[2013.04.13 12:19:59 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\updated(2)\extensions(2)
[2013.04.13 12:20:03 | 000,000,000 | ---D | M] (Google Toolbar for Firefox) -- C:\Programme\Mozilla Firefox\updated(2)\extensions(2)\{3112ca9c-de6d-4884-a869-9855de68056c}(2)
[2013.04.13 12:20:03 | 000,000,000 | ---D | M] (Default) -- C:\Programme\Mozilla Firefox\updated(2)\extensions(2)\{972ce4c6-7e08-4474-a285-3208198ce6fd}(2)
[2013.04.13 12:19:59 | 000,000,000 | ---D | M] (Kaspersky URL Advisor) -- C:\Programme\Mozilla Firefox\updated(2)\extensions(2)\linkfilter@kaspersky(2).ru
[2013.04.10 08:57:39 | 000,263,064 | ---- | M] (Mozilla Foundation) -- C:\Programme\mozilla firefox\components\browsercomps.dll
[2010.10.23 23:16:30 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Programme\mozilla firefox\plugins\npdeployJava1.dll
[2013.04.10 10:18:46 | 000,001,392 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\amazondotcom-de.xml
[2013.04.10 10:18:46 | 000,002,465 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\bing.xml
[2013.04.10 10:18:46 | 000,001,153 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\eBay-de.xml
[2013.04.10 10:18:46 | 000,006,805 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\leo_ende_de.xml
[2013.04.10 10:18:46 | 000,001,178 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\wikipedia-de.xml
[2013.04.10 10:18:46 | 000,001,105 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\yahoo-de.xml
O1 HOSTS File: ([2004.08.04 10:00:00 | 000,000,820 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
O2 - BHO: (AskBar BHO) - {201f27d4-3704-41d6-89c1-aa35e39143ed} - C:\Programme\AskBarDis\bar\bin\askBar.dll (Ask.com)
O2 - BHO: (SSVHelper Class) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (HP Credential Manager for ProtectTools) - {DF21F1DB-80C6-11D3-9483-B03D0EC10000} - C:\Programme\HPQ\IAM\Bin\ItIeAddIN.dll (Infineon Technologies AG)
O3 - HKLM\..\Toolbar: (Ask Toolbar) - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - C:\Programme\AskBarDis\bar\bin\askBar.dll (Ask.com)
O3 - HKU\.DEFAULT\..\Toolbar\WebBrowser: (Ask Toolbar) - {3041D03E-FD4B-44E0-B742-2D9B88305F98} - C:\Programme\AskBarDis\bar\bin\askBar.dll (Ask.com)
O3 - HKU\S-1-5-18\..\Toolbar\WebBrowser: (Ask Toolbar) - {3041D03E-FD4B-44E0-B742-2D9B88305F98} - C:\Programme\AskBarDis\bar\bin\askBar.dll (Ask.com)
O3 - HKU\S-1-5-21-4258336510-953160768-4172013493-1006\..\Toolbar\ShellBrowser: (Ask Toolbar) - {3041D03E-FD4B-44E0-B742-2D9B88305F98} - C:\Programme\AskBarDis\bar\bin\askBar.dll (Ask.com)
O3 - HKU\S-1-5-21-4258336510-953160768-4172013493-1006\..\Toolbar\WebBrowser: (Ask Toolbar) - {3041D03E-FD4B-44E0-B742-2D9B88305F98} - C:\Programme\AskBarDis\bar\bin\askBar.dll (Ask.com)
O4 - HKLM..\Run: [avgnt] C:\Programme\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
O4 - HKLM..\Run: [CognizanceTS] C:\Programme\HPQ\IAM\Bin\AsTsVcc.dll (Cognizance Corporation)
O4 - HKLM..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k File not found
O4 - Startup: C:\Dokumente und Einstellungen\Default User\Startmenü\Programme\Autostart\DSL-Manager.lnk = C:\Programme\T-Online\DSL-Manager\DslMgr.exe (T-Systems Enterprise Services GmbH)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-4258336510-953160768-4172013493-1006\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\WINDOWS\System32\GPhotos.scr (Google Inc.)
O9 - Extra 'Tools' menuitem : Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre6\bin\npjpi160_22.dll (Sun Microsystems, Inc.)
O15 - HKU\S-1-5-21-4258336510-953160768-4172013493-1006\..Trusted Domains: fritz.box ([]* in Lokales Intranet)
O15 - HKU\S-1-5-21-4258336510-953160768-4172013493-1006\..Trusted Ranges: Range1 ([*] in Lokales Intranet)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{25506160-DA46-4E27-B9A4-627B90A8E57D}: DhcpNameServer = 193.254.160.130 193.254.160.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{732B90A4-2E95-4919-AAA4-C2484391E800}: DhcpNameServer = 192.168.2.1
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Web Components\11\OWC11.DLL (Microsoft Corporation)
O18 - Protocol\Filter\text/xml {807553E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE11\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O20 - Winlogon\Notify\AtiExtEvent: DllName - (Ati2evxx.dll) - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.)
O20 - Winlogon\Notify\IfxWlxEN: DllName - (IfxWlxEN.dll) - C:\WINDOWS\System32\IfxWlxEN.dll (Infineon Technologies AG)
O20 - Winlogon\Notify\OneCard: DllName - (C:\Programme\HPQ\IAM\Bin\AsWlnPkg.dll) - C:\Programme\HPQ\IAM\Bin\AsWlnPkg.dll (Cognizance Corporation)
O24 - Desktop Components:0 (Die derzeitige Homepage) - About:Home
O24 - Desktop WallPaper: C:\Dokumente und Einstellungen\Sandra\Lokale Einstellungen\Anwendungsdaten\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Dokumente und Einstellungen\Sandra\Lokale Einstellungen\Anwendungsdaten\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2001.07.28 01:07:00 | 000,000,000 | -HS- | M] () - E:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2004.04.30 17:01:00 | 000,000,053 | -HS- | M] () - E:\Autorun.inf -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
========== Files/Folders - Created Within 30 Days ==========
[2013.04.16 22:11:45 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Dokumente und Einstellungen\Sandra\Desktop\OTL.exe
[2013.04.16 22:07:45 | 002,237,968 | ---- | C] (Kaspersky Lab ZAO) -- C:\Dokumente und Einstellungen\Sandra\Desktop\tdsskiller.exe
[2013.04.16 20:41:26 | 004,745,728 | ---- | C] (AVAST Software) -- C:\Dokumente und Einstellungen\Sandra\Desktop\aswMBR.exe
[2013.04.14 14:22:11 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Sandra\Startmenü\Programme\Google Chrome
[2013.04.14 14:01:37 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Sandra\Anwendungsdaten\Malwarebytes
[2013.04.14 14:01:26 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Malwarebytes' Anti-Malware
[2013.04.14 14:01:25 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Malwarebytes
[2013.04.14 14:01:24 | 000,022,856 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2013.04.14 14:01:23 | 000,000,000 | ---D | C] -- C:\Programme\Malwarebytes' Anti-Malware
[2013.04.14 13:41:43 | 000,000,000 | ---D | C] -- C:\Programme\Mozilla Maintenance Service
[2013.04.14 12:30:38 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Sandra\Desktop\Alte Firefox-Daten
[2013.04.13 12:19:02 | 000,000,000 | ---D | C] -- C:\Programme\Mozilla Firefox
[2013.04.06 13:06:01 | 000,000,000 | ---D | C] -- C:\Programme\Ask.com
[2013.04.02 10:38:58 | 000,037,352 | ---- | C] (Avira Operations GmbH & Co. KG) -- C:\WINDOWS\System32\drivers\avkmgr.sys
[2013.04.02 10:38:57 | 000,135,136 | ---- | C] (Avira Operations GmbH & Co. KG) -- C:\WINDOWS\System32\drivers\avipbb.sys
[2013.03.28 18:09:09 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Avira
[2013.03.28 17:38:12 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Sandra\Anwendungsdaten\Avira
[2013.03.28 17:37:19 | 000,028,520 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\ssmdrv.sys
[2013.03.28 17:37:15 | 000,084,744 | ---- | C] (Avira Operations GmbH & Co. KG) -- C:\WINDOWS\System32\drivers\avgntflt.sys
[2013.03.28 17:37:13 | 000,000,000 | ---D | C] -- C:\Programme\Avira
[2013.03.28 17:37:13 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Avira
[2013.03.28 17:06:52 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Sandra\Lokale Einstellungen\Anwendungsdaten\Avg2013
[2012.01.23 22:01:30 | 001,172,472 | ---- | C] (Microsoft Corporation) -- C:\Dokumente und Einstellungen\Sandra\Anwendungsdaten\Iyrvrd.exe
[2009.01.06 02:19:02 | 009,622,782 | ---- | C] (geek Software GmbH ) -- C:\Programme\pdf24.exe
[2 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[11 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
========== Files - Modified Within 30 Days ==========
[2013.04.16 22:11:45 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Dokumente und Einstellungen\Sandra\Desktop\OTL.exe
[2013.04.16 22:07:46 | 002,237,968 | ---- | M] (Kaspersky Lab ZAO) -- C:\Dokumente und Einstellungen\Sandra\Desktop\tdsskiller.exe
[2013.04.16 21:46:01 | 000,000,884 | ---- | M] () -- C:\WINDOWS\tasks\Adobe Flash Player Updater.job
[2013.04.16 20:42:50 | 004,745,728 | ---- | M] (AVAST Software) -- C:\Dokumente und Einstellungen\Sandra\Desktop\aswMBR.exe
[2013.04.16 19:48:12 | 000,000,000 | ---- | M] () -- C:\Dokumente und Einstellungen\Sandra\defogger_reenable
[2013.04.16 19:45:58 | 000,050,477 | ---- | M] () -- C:\Dokumente und Einstellungen\Sandra\Desktop\Defogger.exe
[2013.04.16 19:26:48 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2013.04.16 19:26:42 | 1475,792,896 | -HS- | M] () -- C:\hiberfil.sys
[2013.04.15 17:10:17 | 000,001,158 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2013.04.14 14:22:11 | 000,001,787 | ---- | M] () -- C:\Dokumente und Einstellungen\Sandra\Desktop\Google Chrome.lnk
[2013.04.14 14:01:26 | 000,000,766 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Malwarebytes Anti-Malware.lnk
[2013.04.14 13:41:45 | 000,000,706 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Mozilla Firefox.lnk
[2013.04.14 12:42:33 | 000,691,592 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerApp.exe
[2013.04.14 12:42:31 | 000,071,048 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerCPLApp.cpl
[2013.04.13 15:54:00 | 000,002,509 | ---- | M] () -- C:\Dokumente und Einstellungen\Sandra\Desktop\Word 2003.lnk
[2013.04.13 14:17:44 | 000,000,320 | ---- | M] () -- C:\Dokumente und Einstellungen\Sandra\Desktop\WELT DER ZAHL 4 LÖSUNGEN.lnk
[2013.04.07 12:04:11 | 000,000,664 | ---- | M] () -- C:\WINDOWS\System32\d3d9caps.dat
[2013.04.04 17:29:25 | 000,000,321 | ---- | M] () -- C:\Dokumente und Einstellungen\Sandra\Desktop\WELT DER ZAHL 4.lnk
[2013.04.04 14:50:32 | 000,022,856 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2013.04.04 10:31:36 | 000,463,398 | ---- | M] () -- C:\WINDOWS\System32\perfh007.dat
[2013.04.04 10:31:36 | 000,444,864 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2013.04.04 10:31:36 | 000,086,242 | ---- | M] () -- C:\WINDOWS\System32\perfc007.dat
[2013.04.04 10:31:36 | 000,072,740 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2013.04.02 10:37:51 | 000,135,136 | ---- | M] () -- C:\WINDOWS\System32\drivers\avipbb.sys
[2013.04.02 10:37:51 | 000,037,352 | ---- | M] () -- C:\WINDOWS\System32\drivers\avkmgr.sys
[2013.03.28 18:09:09 | 000,001,681 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Avira Control Center.lnk
[2013.03.28 17:34:43 | 000,084,744 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\WINDOWS\System32\drivers\avgntflt.sys
[2013.03.28 17:34:43 | 000,028,520 | ---- | M] (Avira GmbH) -- C:\WINDOWS\System32\drivers\ssmdrv.sys
[2013.03.27 22:53:25 | 000,000,202 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini
[2 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[11 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
========== Files Created - No Company Name ==========
[2013.04.16 19:48:12 | 000,000,000 | ---- | C] () -- C:\Dokumente und Einstellungen\Sandra\defogger_reenable
[2013.04.16 19:45:57 | 000,050,477 | ---- | C] () -- C:\Dokumente und Einstellungen\Sandra\Desktop\Defogger.exe
[2013.04.14 14:22:11 | 000,001,787 | ---- | C] () -- C:\Dokumente und Einstellungen\Sandra\Desktop\Google Chrome.lnk
[2013.04.14 14:01:26 | 000,000,766 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Malwarebytes Anti-Malware.lnk
[2013.04.14 13:41:45 | 000,000,712 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Mozilla Firefox.lnk
[2013.04.14 13:41:45 | 000,000,706 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Mozilla Firefox.lnk
[2013.04.06 14:52:42 | 1475,792,896 | -HS- | C] () -- C:\hiberfil.sys
[2013.03.28 17:38:04 | 000,001,681 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Avira Control Center.lnk
[2012.09.30 12:19:35 | 000,690,056 | ---- | C] () -- C:\Programme\info.bmp
[2012.09.30 12:19:35 | 000,161,592 | ---- | C] () -- C:\Programme\Lehrerso.chm
[2012.09.30 12:19:32 | 002,329,600 | ---- | C] () -- C:\Programme\Material.exe
[2012.09.30 12:19:32 | 000,040,474 | ---- | C] () -- C:\Programme\Uninst.isu
[2012.08.28 20:09:53 | 000,071,296 | ---- | C] () -- C:\WINDOWS\System32\drivers\8bbc62a8e61cff8c.sys
[2012.02.16 18:09:16 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\iacenc.dll
[2011.10.05 22:36:58 | 000,000,056 | ---- | C] () -- C:\WINDOWS\System32\wdz3.ini
[2011.09.01 11:34:29 | 000,074,752 | ---- | C] () -- C:\WINDOWS\System32\jst.dll
[2011.09.01 11:34:29 | 000,061,440 | ---- | C] () -- C:\WINDOWS\System32\PMLJNI.dll
[2011.09.01 11:27:48 | 000,021,981 | ---- | C] () -- C:\WINDOWS\hpclj3700.ini
[2010.11.22 16:37:04 | 003,361,280 | ---- | C] () -- C:\Programme\Pstory.msi
[2009.03.16 18:51:11 | 000,000,000 | ---- | C] () -- C:\Dokumente und Einstellungen\Sandra\Ÿ9Ÿ9
[2007.05.22 21:25:19 | 000,000,974 | ---- | C] () -- C:\Dokumente und Einstellungen\Sandra\pcmscan.cfg
[2006.08.23 19:14:33 | 000,087,040 | ---- | C] () -- C:\Dokumente und Einstellungen\Sandra\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2006.08.23 18:17:51 | 000,000,147 | ---- | C] () -- C:\Dokumente und Einstellungen\NetworkService\Lokale Einstellungen\Anwendungsdaten\fusioncache.dat
[2006.08.22 14:04:17 | 000,000,139 | ---- | C] () -- C:\Dokumente und Einstellungen\Sandra\Lokale Einstellungen\Anwendungsdaten\fusioncache.dat
========== ZeroAccess Check ==========
[2004.08.07 07:21:30 | 000,000,227 | RHS- | M] () -- C:\WINDOWS\assembly\Desktop.ini
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
"ThreadingModel" = Both
"" = shell32.dll -- [2012.06.08 16:25:14 | 008,503,808 | ---- | M] (Microsoft Corporation)
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shdocvw.dll -- [2011.12.19 10:53:33 | 001,510,400 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = fastprox.dll -- [2009.02.09 12:51:44 | 000,473,600 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = C:\WINDOWS\system32\wbem\wbemess.dll -- [2008.04.14 04:22:32 | 000,273,920 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
< End of report >
Code:
OTL Extras logfile created on: 16.04.2013 22:12:37 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Dokumente und Einstellungen\Sandra\Desktop
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
1,37 Gb Total Physical Memory | 0,67 Gb Available Physical Memory | 48,56% Memory free
2,54 Gb Paging File | 2,06 Gb Available in Paging File | 81,21% Paging File free
Paging file location(s): C:\pagefile.sys 1344 2688 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme
Drive C: | 48,15 Gb Total Space | 0,84 Gb Free Space | 1,74% Space Free | Partition Type: NTFS
Drive E: | 7,75 Gb Total Space | 0,43 Gb Free Space | 5,50% Space Free | Partition Type: NTFS
Computer Name: PC317112490211 | User Name: Sandra | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Extra Registry (SafeList) ==========
========== File Associations ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
.html [@ = ChromeHTML] -- C:\Programme\Google\Chrome\Application\chrome.exe (Google Inc.)
[HKEY_USERS\S-1-5-21-4258336510-953160768-4172013493-1006\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Programme\Mozilla Firefox\firefox.exe (Mozilla Corporation)
========== Shell Spawning ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] -- "%1" %*
http [open] -- Reg Error: Key error.
https [open] -- Reg Error: Key error.
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Programme\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Programme\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
========== Security Center Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
"DisableMonitoring" = 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]
========== System Restore Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2
========== Firewall Settings ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 0
"DoNotAllowExceptions" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
"139:TCP" = 139:TCP:*:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:*:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:*:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:*:Enabled:@xpsp2res.dll,-22002
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 0
"DoNotAllowExceptions" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"139:TCP" = 139:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22002
========== Authorized Applications List ==========
========== HKEY_LOCAL_MACHINE Uninstall List ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0289B35E-DC07-4c7a-9710-BBD686EA4B7D}" = Status
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{20C45B32-5AB6-46A4-94EF-58950CAF05E5}" = EPSON Attach To Email
"{25DEC9F7-08C7-4511-9B4A-40A61E40658E}" = web'n'walk Manager
"{2614F54E-A828-49FA-93BA-45A3F756BFAA}" = 32 Bit HP CIO Components Installer
"{26A24AE4-039D-4CA4-87B4-2F83216022FF}" = Java(TM) 6 Update 22
"{2A88F1BF-7041-4E42-84B1-6B4ACB83AC64}" = EPSON Scan Assistant
"{34D2AB40-150D-475D-AE32-BD23FB5EE355}" = HP Quick Launch Buttons 6.00 G2
"{34EB6245-C8D0-4D8A-B8D8-EEBFF7A91485}" = Firebird SQL Server - MAGIX Edition
"{350C97B3-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{352F5013-07DC-446D-8DB6-38F339086C60}" = LightScribe 1.4.84.1
"{3A4FDC2E-6803-459B-89BD-57345F8D6969}" = HP Color LaserJet 3700
"{3F9F7336-6DF8-476F-ABF6-C70A17FAF619}" = ST Wiederherstellungs- & Sicherungsprogramme
"{4286716B-1287-48E7-9078-3DC8248DBA96}" = OpenOffice.org 3.3
"{4302B2DD-D958-40E3-BAF3-B07FFE1978CE}" = HP Wireless Assistant 2.00 F1
"{48CF6549-B45D-4313-9927-EFCCC8A3493F}" = TIPCI
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4BA3DDD4-BC91-48B2-8896-7A02C34829D7}" = HP Embedded Security for ProtectTools
"{4F41AD68-89F2-4262-A32C-2F70B01FCE9E}" = Fotostory 3 für Windows
"{55A75679-02D1-4C8C-85CA-B4E4DF4D775F}" = MSM32Installer
"{5C29CB8B-AC1E-4114-8D68-9CD080140D4A}" = Sony USB Driver
"{5D97A4A7-C274-4B63-86D9-07A33435F505}" = InterVideo DVD Check
"{60D4F9F1-B828-4048-A5AB-9AA2FD0C4751}" = DJ_AIO_03_F4200_Software
"{6365C963-4B72-43F8-8392-2A5441EC2A86}" = DJ_AIO_03_F4220_ProductContext
"{67EDD823-135A-4D59-87BD-950616D6E857}" = EPSON Copy Utility 3
"{6F5E2F4A-377D-4700-B0E3-8F7F7507EA15}" = CustomerResearchQFolder
"{7D1D6A24-65D4-454C-8815-4F08A5FFF12C}" = Macromedia Shockwave Player
"{818ABC3C-635C-4651-8183-D0E9640B7DD1}" = HP Update
"{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1" = PDF24 Creator 4.1.2
"{8F32C384-D237-4516-9F2B-223E8963A2FB}" = Lager
"{90120000-0020-0407-0000-0000000FF1CE}" = Compatibility Pack für 2007 Office System
"{90120000-0020-0409-0000-0000000FF1CE}" = Compatibility Pack for the 2007 Office system
"{90A455A7-0FC8-4508-B7FA-8F135B8F041A}" = DSL-Manager
"{91120407-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Standard Edition 2003
"{914E1AB1-DCA0-4A7D-935F-B58C4B887A2B}" = HP ProtectTools Security Manager 2.00 C3
"{97BBECCF-B1FD-4010-8D4B-EFC9E3CCEECF}" = Driver Whiz
"{9C2D4047-0E40-499a-AC7A-C4B9BB12FE03}" = TrayApp
"{9F4EE72A-C5C9-42ad-ABEF-427690843577}" = MarketResearch
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A4D7B764-4140-11D4-88EB-0050DA3579C0}" = Nero - Burning Rom
"{A93C4E94-1005-489D-BEAA-B873C1AA6CFC}" = HP Help and Support
"{AA2E8A46-B45E-4aea-8A23-88AB57D04523}" = WebReg
"{AB5D51AE-EBC3-438D-872C-705C7C2084B0}" = DeviceManagementQFolder
"{AC76BA86-7AD7-1031-7B44-AA1000000001}" = Adobe Reader X (10.1.5) - Deutsch
"{AE052EF7-2640-48D7-8915-69B810D975CB}" = HP BIOS Configuration for ProtectTools 2.00 G1
"{B61A79BE-E94C-42C0-921D-8B7E5217069C}" = F4200
"{B9F4C05D-E42F-4E9A-A73F-FDD9355319FB}" = HP Credential Manager for ProtectTools
"{BE8A9C2C-8E41-445B-A746-BEB0B1F992F8}" = DJ_AIO_03_F4200_Software_Min
"{BF08AB1C-3357-4f20-A200-8EBB8EF27C59}" = BufferChm
"{BFF81EE4-B808-4F22-8DEC-90F354268A62}" = Digimoto 4.03
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C3B6AEB1-390C-4792-8677-CD87F8B2C959}" = HP Deskjet F4200 All-In-One Driver Software 11.0 Rel .3
"{C89B5E3A-690F-4CEE-909A-BF869E198B0A}" = Scan
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{DB518BA6-CB74-4EB6-9ABD-880B6D6E1F38}" = HpSdpAppCoreApp
"{E05C9D01-CCED-4328-9EE0-0B6893087C6F}" = HP User Guides 0022
"{E0DBC47C-ED3F-4A1B-A929-9A26DAAA14B3}" = Application Installer 4.00.B6
"{E78BFA60-5393-4C38-82AB-E8019E464EB4}" = Microsoft .NET Framework 1.1 German Language Pack
"{E86BC406-944E-41F6-ADE6-2C136734C96B}" = EPSON File Manager
"{E96B0085-6659-486b-A221-5042A042728D}" = Toolbox
"{EF1ADA5A-0B1A-4662-8C55-7475A61D8B65}" = DeviceDiscovery
"{EF9E56EE-0243-4BAD-88F4-5E7508AA7D96}" = Destination Component
"{F0A37341-D692-11D4-A984-009027EC0A9C}" = SoundMAX
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
"{F8A5531E-FEB4-4F7C-AF51-342E40FA7A0D}" = F4210_Help
"1PLUS_2007.a_is1" = 1PLUS_2007.a
"1PLUS_2010.a_is1" = 1PLUS_2010.a (Portable Version)
"3B18191663CDFABAA2A93D4267E54D683153FF60" = Windows-Treiberpaket - Advanced Micro Devices (AmdK8) Processor (05/27/2006 1.3.2.0)
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"AFPL Ghostscript 8.54" = AFPL Ghostscript 8.54
"AFPL Ghostscript Fonts" = AFPL Ghostscript Fonts
"Ask Toolbar_is1" = Ask Toolbar
"ATI Display Driver" = ATI Display Driver
"Audacity 1.3 Beta (Unicode)_is1" = Audacity 1.3.6 (Unicode)
"Avira AntiVir Desktop" = Avira Free Antivirus
"Broadcom 802.11 Application" = Broadcom Wireless Utility
"Broadcom 802.11b Network Adapter" = Broadcom 802.11 Wireless LAN Adapter
"CNXT_MODEM_HDAUDIO_VEN_14F1&DEV_2BFA_hpq0033m" = HDAUDIO Soft Data Fax Modem with SmartCP
"Druckschriften" = Druckschriften
"EPSON Printer and Utilities" = EPSON-Drucker-Software
"EPSON Scanner" = EPSON Scan
"ESDX6000_CX5900 Benutzerhandb." = ESDX6000_CX5900 Benutzerhandb.
"Finale 2001c" = Finale 2001c
"FTDICOMM" = FTDI USB Serial Converter Drivers
"Google Chrome" = Google Chrome
"HP Imaging Device Functions" = HP Imaging Device Functions 11.0
"ie8" = Windows Internet Explorer 8
"InstallShield_{20C45B32-5AB6-46A4-94EF-58950CAF05E5}" = EPSON Attach To Email
"InstallShield_{48CF6549-B45D-4313-9927-EFCCC8A3493F}" = Texas Instruments PCIxx21/x515/xx12 drivers.
"LAME for Audacity_is1" = LAME v3.98.2 for Audacity
"Lateinische Ausgangschrift" = Lateinische Ausgangschrift
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware Version 1.75.0.1300
"Mathematische Zeichensätze_is1" = Mathematische Zeichensätze 1.0
"Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"MindManager Smart" = MindManager Smart
"Mozilla Firefox 20.0.1 (x86 de)" = Mozilla Firefox 20.0.1 (x86 de)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP
"Nero - Burning Rom!UninstallKey" = Nero OEM
"NeroVision!UninstallKey" = NeroVision Express 2
"Picasa 3" = Picasa 3
"RIT Notenbuch 2.0" = RIT Notenbuch 2.0
"Schroedel Arbeitsblätter" = Schroedel Arbeitsblätter
"SynTPDeinstKey" = Synaptics Pointing Device Driver
"Uninstall_is1" = Uninstall 1.0.0.1
"VLC media player" = VLC media player 2.0.3
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows Media Player" = Windows Media Player 11
"Windows XP Service Pack" = Windows XP Service Pack 3
"WMFDist11" = Windows Media Format 11 runtime
"wmp11" = Windows Media Player 11
"Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0
========== Last 20 Event Log Errors ==========
[ Application Events ]
Error - 13.04.2013 14:59:45 | Computer Name = PC317112490211 | Source = Avira Antivirus | ID = 4122
Description = Die Datei AVGDLL_Init(avgntflt) konnte nicht geladen werden. Fehlercode:
0xffffffff
Error - 13.04.2013 15:00:58 | Computer Name = PC317112490211 | Source = Avira Antivirus | ID = 4122
Description = Die Datei AVGDLL_Init(avgntflt) konnte nicht geladen werden. Fehlercode:
0xffffffff
Error - 14.04.2013 06:33:38 | Computer Name = PC317112490211 | Source = Avira Antivirus | ID = 4122
Description = Die Datei AVGDLL_Init(avgntflt) konnte nicht geladen werden. Fehlercode:
0xffffffff
Error - 14.04.2013 06:36:51 | Computer Name = PC317112490211 | Source = Avira Antivirus | ID = 4122
Description = Die Datei AVGDLL_Init(avgntflt) konnte nicht geladen werden. Fehlercode:
0xffffffff
Error - 15.04.2013 11:21:55 | Computer Name = PC317112490211 | Source = Avira Antivirus | ID = 4122
Description = Die Datei AVGDLL_Init(avgntflt) konnte nicht geladen werden. Fehlercode:
0xffffffff
Error - 15.04.2013 11:23:04 | Computer Name = PC317112490211 | Source = Avira Antivirus | ID = 4122
Description = Die Datei AVGDLL_Init(avgntflt) konnte nicht geladen werden. Fehlercode:
0xffffffff
Error - 16.04.2013 09:57:33 | Computer Name = PC317112490211 | Source = Avira Antivirus | ID = 4122
Description = Die Datei AVGDLL_Init(avgntflt) konnte nicht geladen werden. Fehlercode:
0xffffffff
Error - 16.04.2013 09:58:44 | Computer Name = PC317112490211 | Source = Avira Antivirus | ID = 4122
Description = Die Datei AVGDLL_Init(avgntflt) konnte nicht geladen werden. Fehlercode:
0xffffffff
Error - 16.04.2013 13:38:25 | Computer Name = PC317112490211 | Source = Avira Antivirus | ID = 4122
Description = Die Datei AVGDLL_Init(avgntflt) konnte nicht geladen werden. Fehlercode:
0xffffffff
Error - 16.04.2013 16:00:31 | Computer Name = PC317112490211 | Source = Avira Antivirus | ID = 4122
Description = Die Datei AVGDLL_Init(avgntflt) konnte nicht geladen werden. Fehlercode:
0xffffffff
[ System Events ]
Error - 16.04.2013 09:59:01 | Computer Name = PC317112490211 | Source = Service Control Manager | ID = 7024
Description = Der Dienst "Avira Echtzeit-Scanner" wurde mit folgendem dienstspezifischem
Fehler beendet: 307 (0x133).
Error - 16.04.2013 13:27:05 | Computer Name = PC317112490211 | Source = Service Control Manager | ID = 7000
Description = Der Dienst "avgntflt" wurde aufgrund folgenden Fehlers nicht gestartet:
%%31
Error - 16.04.2013 13:27:05 | Computer Name = PC317112490211 | Source = Service Control Manager | ID = 7023
Description = Der Dienst "Computerbrowser" wurde mit folgendem Fehler beendet: %%1060
Error - 16.04.2013 13:28:23 | Computer Name = PC317112490211 | Source = Service Control Manager | ID = 7022
Description = Der Dienst "HP CUE DeviceDiscovery Service" wurde nicht ordnungsgemäß
gestartet.
Error - 16.04.2013 13:38:18 | Computer Name = PC317112490211 | Source = Service Control Manager | ID = 7022
Description = Der Dienst "Avira Echtzeit-Scanner" wurde nicht ordnungsgemäß gestartet.
Error - 16.04.2013 13:38:18 | Computer Name = PC317112490211 | Source = Service Control Manager | ID = 7026
Description = Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
avipbb avkmgr
Error - 16.04.2013 13:38:18 | Computer Name = PC317112490211 | Source = Service Control Manager | ID = 7000
Description = Der Dienst "avipbb" wurde aufgrund folgenden Fehlers nicht gestartet:
%%31
Error - 16.04.2013 13:38:50 | Computer Name = PC317112490211 | Source = Service Control Manager | ID = 7024
Description = Der Dienst "Avira Echtzeit-Scanner" wurde mit folgendem dienstspezifischem
Fehler beendet: 307 (0x133).
Error - 16.04.2013 16:00:25 | Computer Name = PC317112490211 | Source = Service Control Manager | ID = 7000
Description = Der Dienst "avipbb" wurde aufgrund folgenden Fehlers nicht gestartet:
%%31
Error - 16.04.2013 16:02:39 | Computer Name = PC317112490211 | Source = Service Control Manager | ID = 7024
Description = Der Dienst "Avira Echtzeit-Scanner" wurde mit folgendem dienstspezifischem
Fehler beendet: 307 (0x133).
< End of report >
|
FRST 32-Bit | FRST 64-Bit
AdwCleaner auf deinen Desktop.
Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.
TFC (TempFileCleaner von Oldtimer) herunter und speichere es auf den Desktop.
Aktualität von System und Software