Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)
-   -   TR/HideExec.A auf Win7 Laptop. Bitte um Hilfe (https://www.trojaner-board.de/136256-tr-hideexec-a-win7-laptop-bitte-um-hilfe.html)

browni85 09.06.2013 15:27
TR/HideExec.A auf Win7 Laptop. Bitte um Hilfe
 
Hallo, brauche dringend Hilfe.
Mein Computer macht zwischendurch selbstständig Programme wie Itunes auf und wenn ich über Firefox ins Internet gehen will öffnet er den Browser, aber ich kann weder in die Adressleiste, noch in die Google Suchmaske einen Text eingeben. Außerdem wird ca. alle 10 Minuten automatisch der Firefox-Browser geöffnet und es wird versucht die Seite "wlan-entertainment.com" zu öffnen. Mein wlan ist aber ausgeschaltet, damit ich nicht mit dem Netz verbunden bin. Bin jetzt nur noch mit dem Laptop meiner Freundin online. Ich habe Antivir einen Suchlauf durchführen lassen und er hat einen Trojaner entdeckt. (siehe Ausschnitt aus Antivir-txt Datei). Ich habe ihn in Quarantäne gesteckt und dann gelöscht. Beim nächsten Suchlauf war er aber nach wie vor da. Das wäre ja auch zu einfach. Habe die OTL.txt und die gmer.txt erstellt und angehängt. Die extra.txt hat OTL nicht erstellt, keine Ahnung warum. Der Laptop ist im Zustand disabled über das defogger-Programm. Habe dies nach der Anleitung dieser Seite erstellt, bin aber in Sachen Viren völlig ahnungslos. Ich hoffe mir kann jemand helfen. Vielen Dank im voraus.

markusg 09.06.2013 15:28
Hi,


otl fix

Fixen mit OTL

  • Starte bitte die OTL.exe.
  • Kopiere nun den Inhalt aus der Codebox in die Textbox.

Code:
:OTL
[2013.06.02 20:25:27 | 000,739,856 | ---- | C] (Google Inc.) -- C:\Users\Sven\AppData\Roaming\chromebrowser.exe
[2013.06.02 20:25:18 | 000,000,000 | RHSD | C] -- C:\Users\Sven\AppData\Roaming\aafy
:files
:Commands
[emptytemp]
  • Solltest du deinen Benutzernamen z. B. durch "*****" unkenntlich gemacht haben, so füge an entsprechender Stelle deinen richtigen Benutzernamen ein. Andernfalls wird der Fix nicht funktionieren.
  • Schließe bitte nun alle Programme.
  • Klicke nun bitte auf den Fix Button.
  • OTL kann gegebenfalls einen Neustart verlangen. Bitte dies zulassen.
  • Nach dem Neustart findest Du ein Textdokument auf deinem Desktop.
    ( Auch zu finden unter C:\_OTL\MovedFiles\<Uhrzeit_Datum>.txt)
    Kopiere nun den Inhalt hier in Deinen Thread


Hinweis: Die Datei bitte wie in der Anleitung zum UpChannel angegeben auch da hochladen. Bitte NICHT die ZIP-Datei hier als Anhang
in den Thread posten!



Drücke bitte die http://larusso.trojaner-board.de/Images/windows.jpg + E Taste.
  • Öffne dein Systemlaufwerk ( meistens C: )
  • Suche nun
    folgenden Ordner: _OTL und öffne diesen.
  • Mache einen Rechtsklick auf den Ordner Movedfiles --> Senden an --> Zip-Komprimierter Ordner

  • Dies wird eine Movedfiles.zip Datei in _OTL erstellen
  • Lade diese bitte in unseren Uploadchannel
    hoch. ( Durchsuchen --> C:\_OTL\Movedfiles.zip )
Teile mir mit ob der Upload problemlos geklappt hat. Danke im voraus :)

browni85 09.06.2013 16:06
Danke das sie sich mir so schnell annehmen. Die Zip liegt im Uploadchannel, scheint geklappt zu haben! Hier die OTL nach dem FIX:




Code:
All processes killed
========== OTL ==========
C:\Users\Sven\AppData\Roaming\chromebrowser.exe moved successfully.
C:\Users\Sven\AppData\Roaming\aafy folder moved successfully.
========== FILES ==========
========== COMMANDS ==========
 
[EMPTYTEMP]
 
User: Administrator
 
User: All Users
 
User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
->Flash cache emptied: 321 bytes
 
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes
 
User: Public
 
User: Sven
->Temp folder emptied: 19915671 bytes
->Temporary Internet Files folder emptied: 18591513 bytes
->Java cache emptied: 17312656 bytes
->FireFox cache emptied: 60000733 bytes
->Google Chrome cache emptied: 10938814 bytes
->Flash cache emptied: 45008 bytes
 
User: UpdatusUser
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
 
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 347774410 bytes
RecycleBin emptied: 0 bytes
 
Total Files Cleaned = 453,00 mb
 
 
OTL by OldTimer - Version 3.2.69.0 log created on 06092013_164059

Files\Folders moved on Reboot...
C:\Users\Sven\AppData\Local\Temp\CVHLauncher(2013060916381614A0).log moved successfully.
C:\Users\Sven\AppData\Local\Microsoft\Windows\Temporary Internet Files\counters.dat moved successfully.
File move failed. C:\windows\temp\hlktmp scheduled to be moved on reboot.
C:\windows\temp\HS.log moved successfully.

PendingFileRenameOperations files...

Registry entries deleted on Reboot...

markusg 09.06.2013 16:08
"du" geht ok.
zip is da.
Downloade dir bitte TDSSKiller TDSSKiller.exe und speichere diese Datei auf dem Desktop
  • Starte die TDSSKiller.exe - Einstellen wie in der Anleitung zu TDSSKiller beschrieben.
  • Drücke Start Scan
  • Sollten infizierte Objekte gefunden werden, wähle keinesfalls Cure. Wähle Skip und klicke auf Continue.
    TDSSKiller wird eine Logfile auf deinem Systemlaufwerk speichern (Meistens C:\)
    Als Beispiel: C:\TDSSKiller.<Version_Datum_Uhrzeit>log.txt
Poste den Inhalt bitte in jedem Fall hier in deinen Thread.

browni85 09.06.2013 16:46
Hier der Inhalt des TDSS Killer:

Code:
17:37:30.0925 5172  TDSS rootkit removing tool 2.8.16.0 Feb 11 2013 18:50:42
17:37:30.0987 5172  ============================================================
17:37:30.0987 5172  Current date / time: 2013/06/09 17:37:30.0987
17:37:30.0987 5172  SystemInfo:
17:37:30.0987 5172 
17:37:30.0987 5172  OS Version: 6.1.7601 ServicePack: 1.0
17:37:30.0987 5172  Product type: Workstation
17:37:30.0987 5172  ComputerName: SVENR-PC
17:37:30.0987 5172  UserName: Sven
17:37:30.0987 5172  Windows directory: C:\windows
17:37:30.0987 5172  System windows directory: C:\windows
17:37:30.0987 5172  Processor architecture: Intel x86
17:37:30.0987 5172  Number of processors: 4
17:37:30.0987 5172  Page size: 0x1000
17:37:30.0987 5172  Boot type: Normal boot
17:37:30.0987 5172  ============================================================
17:37:32.0169 5172  Drive \Device\Harddisk0\DR0 - Size: 0x3A38B2E000 (232.89 Gb), SectorSize: 0x200, Cylinders: 0x76C1, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050
17:37:32.0193 5172  Drive \Device\Harddisk1\DR2 - Size: 0xEE200000 (3.72 Gb), SectorSize: 0x200, Cylinders: 0x1E5, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W'
17:37:32.0195 5172  ============================================================
17:37:32.0195 5172  \Device\Harddisk0\DR0:
17:37:32.0196 5172  MBR partitions:
17:37:32.0196 5172  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0xC800000
17:37:32.0196 5172  \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0xE600800, BlocksNum 0xEBBB000
17:37:32.0196 5172  \Device\Harddisk1\DR2:
17:37:32.0197 5172  MBR partitions:
17:37:32.0197 5172  \Device\Harddisk1\DR2\Partition1: MBR, Type 0xC, StartLBA 0x38, BlocksNum 0x770FC8
17:37:32.0197 5172  ============================================================
17:37:32.0213 5172  C: <-> \Device\Harddisk0\DR0\Partition1
17:37:32.0280 5172  D: <-> \Device\Harddisk0\DR0\Partition2
17:37:32.0281 5172  ============================================================
17:37:32.0281 5172  Initialize success
17:37:32.0281 5172  ============================================================
17:37:43.0908 5920  ============================================================
17:37:43.0908 5920  Scan started
17:37:43.0908 5920  Mode: Manual; SigCheck; TDLFS;
17:37:43.0908 5920  ============================================================
17:37:44.0298 5920  ================ Scan system memory ========================
17:37:44.0298 5920  System memory - ok
17:37:44.0298 5920  ================ Scan services =============================
17:37:44.0501 5920  [ D01E0B1CEF9EE82100C2BB07294880EF ] 1394ohci        C:\windows\system32\drivers\1394ohci.sys
17:37:44.0719 5920  1394ohci - ok
17:37:44.0797 5920  [ CEA80C80BED809AA0DA6FEBC04733349 ] ACPI            C:\windows\system32\drivers\ACPI.sys
17:37:44.0844 5920  ACPI - ok
17:37:44.0891 5920  [ 1EFBC664ABFF416D1D07DB115DCB264F ] AcpiPmi        C:\windows\system32\drivers\acpipmi.sys
17:37:45.0016 5920  AcpiPmi - ok
17:37:45.0156 5920  [ F040037B149FD0F5A5044AE563390FA7 ] AdobeFlashPlayerUpdateSvc C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
17:37:45.0203 5920  AdobeFlashPlayerUpdateSvc - ok
17:37:45.0281 5920  [ 21E785EBD7DC90A06391141AAC7892FB ] adp94xx        C:\windows\system32\DRIVERS\adp94xx.sys
17:37:45.0343 5920  adp94xx - ok
17:37:45.0374 5920  [ 0C676BC278D5B59FF5ABD57BBE9123F2 ] adpahci        C:\windows\system32\DRIVERS\adpahci.sys
17:37:45.0437 5920  adpahci - ok
17:37:45.0468 5920  [ 7C7B5EE4B7B822EC85321FE23A27DB33 ] adpu320        C:\windows\system32\DRIVERS\adpu320.sys
17:37:45.0515 5920  adpu320 - ok
17:37:45.0562 5920  [ 8B5EEFEEC1E6D1A72A06C526628AD161 ] AeLookupSvc    C:\windows\System32\aelupsvc.dll
17:37:45.0655 5920  AeLookupSvc - ok
17:37:45.0718 5920  [ 9EBBBA55060F786F0FCAA3893BFA2806 ] AFD            C:\windows\system32\drivers\afd.sys
17:37:45.0842 5920  AFD - ok
17:37:45.0889 5920  [ 507812C3054C21CEF746B6EE3D04DD6E ] agp440          C:\windows\system32\drivers\agp440.sys
17:37:45.0936 5920  agp440 - ok
17:37:45.0998 5920  [ 8B30250D573A8F6B4BD23195160D8707 ] aic78xx        C:\windows\system32\DRIVERS\djsvs.sys
17:37:46.0045 5920  aic78xx - ok
17:37:46.0092 5920  [ 11F424D02AEA63A3A53445087072FDD0 ] aksfridge      C:\windows\system32\drivers\aksfridge.sys
17:37:46.0310 5920  aksfridge - ok
17:37:46.0373 5920  [ 18A54E132947CD98FEA9ACCC57F98F13 ] ALG            C:\windows\System32\alg.exe
17:37:46.0451 5920  ALG - ok
17:37:46.0513 5920  [ 0D40BCF52EA90FC7DF2AEAB6503DEA44 ] aliide          C:\windows\system32\drivers\aliide.sys
17:37:46.0544 5920  aliide - ok
17:37:46.0576 5920  [ 3C6600A0696E90A463771C7422E23AB5 ] amdagp          C:\windows\system32\drivers\amdagp.sys
17:37:46.0622 5920  amdagp - ok
17:37:46.0638 5920  [ CD5914170297126B6266860198D1D4F0 ] amdide          C:\windows\system32\drivers\amdide.sys
17:37:46.0685 5920  amdide - ok
17:37:46.0732 5920  [ 00DDA200D71BAC534BF56A9DB5DFD666 ] AmdK8          C:\windows\system32\DRIVERS\amdk8.sys
17:37:46.0825 5920  AmdK8 - ok
17:37:46.0856 5920  [ 3CBF30F5370FDA40DD3E87DF38EA53B6 ] AmdPPM          C:\windows\system32\DRIVERS\amdppm.sys
17:37:46.0903 5920  AmdPPM - ok
17:37:46.0950 5920  [ D320BF87125326F996D4904FE24300FC ] amdsata        C:\windows\system32\drivers\amdsata.sys
17:37:46.0997 5920  amdsata - ok
17:37:47.0028 5920  [ EA43AF0C423FF267355F74E7A53BDABA ] amdsbs          C:\windows\system32\DRIVERS\amdsbs.sys
17:37:47.0075 5920  amdsbs - ok
17:37:47.0106 5920  [ 46387FB17B086D16DEA267D5BE23A2F2 ] amdxata        C:\windows\system32\drivers\amdxata.sys
17:37:47.0153 5920  amdxata - ok
17:37:47.0340 5920  [ 466A0D95960DAD3222C896D2CEA99993 ] AntiVirSchedulerService C:\Program Files\Avira\AntiVir Desktop\sched.exe
17:37:47.0387 5920  AntiVirSchedulerService - ok
17:37:47.0449 5920  [ A489BE6BB0AA1FF406B488B60542314B ] AntiVirService  C:\Program Files\Avira\AntiVir Desktop\avguard.exe
17:37:47.0512 5920  AntiVirService - ok
17:37:47.0558 5920  [ AEA177F783E20150ACE5383EE368DA19 ] AppID          C:\windows\system32\drivers\appid.sys
17:37:47.0714 5920  AppID - ok
17:37:47.0824 5920  [ 62A9C86CB6085E20DB4823E4E97826F5 ] AppIDSvc        C:\windows\System32\appidsvc.dll
17:37:47.0933 5920  AppIDSvc - ok
17:37:47.0995 5920  [ EACFDF31921F51C097629F1F3C9129B4 ] Appinfo        C:\windows\System32\appinfo.dll
17:37:48.0089 5920  Appinfo - ok
17:37:48.0136 5920  [ 2932004F49677BD84DBC72EDB754FFB3 ] arc            C:\windows\system32\DRIVERS\arc.sys
17:37:48.0182 5920  arc - ok
17:37:48.0214 5920  [ 5D6F36C46FD283AE1B57BD2E9FEB0BC7 ] arcsas          C:\windows\system32\DRIVERS\arcsas.sys
17:37:48.0260 5920  arcsas - ok
17:37:48.0370 5920  [ 776ACEFA0CA9DF0FAA51A5FB2F435705 ] aspnet_state    C:\windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe
17:37:48.0401 5920  aspnet_state - ok
17:37:48.0448 5920  [ 561D6B76C045311691B870F6B3F19EAB ] AsUpIO          C:\windows\system32\drivers\AsUpIO.sys
17:37:48.0494 5920  AsUpIO - ok
17:37:48.0541 5920  [ C4FB2613D3C75364BB159B9C23A00E7A ] AsusService    C:\Windows\System32\AsusService.exe
17:37:48.0604 5920  AsusService ( UnsignedFile.Multi.Generic ) - warning
17:37:48.0604 5920  AsusService - detected UnsignedFile.Multi.Generic (1)
17:37:48.0635 5920  [ ADD2ADE1C2B285AB8378D2DAAF991481 ] AsyncMac        C:\windows\system32\DRIVERS\asyncmac.sys
17:37:48.0775 5920  AsyncMac - ok
17:37:48.0822 5920  [ 338C86357871C167A96AB976519BF59E ] atapi          C:\windows\system32\drivers\atapi.sys
17:37:48.0869 5920  atapi - ok
17:37:48.0947 5920  [ 76BAB0C824E2D05B940C4DD40A9B08BF ] athr            C:\windows\system32\DRIVERS\athr.sys
17:37:49.0103 5920  athr - ok
17:37:49.0181 5920  [ CE3B4E731638D2EF62FCB419BE0D39F0 ] AudioEndpointBuilder C:\windows\System32\Audiosrv.dll
17:37:49.0259 5920  AudioEndpointBuilder - ok
17:37:49.0290 5920  [ CE3B4E731638D2EF62FCB419BE0D39F0 ] Audiosrv        C:\windows\System32\Audiosrv.dll
17:37:49.0368 5920  Audiosrv - ok
17:37:49.0415 5920  [ D5541F0AFB767E85FC412FC609D96A74 ] avgntflt        C:\windows\system32\DRIVERS\avgntflt.sys
17:37:49.0477 5920  avgntflt - ok
17:37:49.0540 5920  [ 7D967A682D4694DF7FA57D63A2DB01FE ] avipbb          C:\windows\system32\DRIVERS\avipbb.sys
17:37:49.0586 5920  avipbb - ok
17:37:49.0633 5920  [ 53E56450DA16A1A7F0D002F511113F67 ] avkmgr          C:\windows\system32\DRIVERS\avkmgr.sys
17:37:49.0680 5920  avkmgr - ok
17:37:49.0742 5920  [ 6E30D02AAC9CAC84F421622E3A2F6178 ] AxInstSV        C:\windows\System32\AxInstSV.dll
17:37:49.0867 5920  AxInstSV - ok
17:37:49.0914 5920  [ 1A231ABEC60FD316EC54C66715543CEC ] b06bdrv        C:\windows\system32\DRIVERS\bxvbdx.sys
17:37:50.0023 5920  b06bdrv - ok
17:37:50.0054 5920  [ BD8869EB9CDE6BBE4508D869929869EE ] b57nd60x        C:\windows\system32\DRIVERS\b57nd60x.sys
17:37:50.0117 5920  b57nd60x - ok
17:37:50.0273 5920  [ F48FEB7DA35821DA15E0B006DCB9A169 ] BBSvc          C:\Program Files\Microsoft\BingBar\7.1.391.0\BBSvc.exe
17:37:50.0335 5920  BBSvc - ok
17:37:50.0382 5920  [ 8E16F7A85441986FD2B9CE6C879524E4 ] BBUpdate        C:\Program Files\Microsoft\BingBar\7.1.391.0\SeaPort.exe
17:37:50.0429 5920  BBUpdate - ok
17:37:50.0522 5920  [ 2BE0F23D494C301641C42EAD2FDCD4F2 ] BCM43XX        C:\windows\system32\DRIVERS\bcmwl6.sys
17:37:50.0694 5920  BCM43XX - ok
17:37:50.0725 5920  [ EE1E9C3BB8228AE423DD38DB69128E71 ] BDESVC          C:\windows\System32\bdesvc.dll
17:37:50.0819 5920  BDESVC - ok
17:37:50.0834 5920  [ 505506526A9D467307B3C393DEDAF858 ] Beep            C:\windows\system32\drivers\Beep.sys
17:37:50.0928 5920  Beep - ok
17:37:50.0990 5920  [ 1E2BAC209D184BB851E1A187D8A29136 ] BFE            C:\windows\System32\bfe.dll
17:37:51.0115 5920  BFE - ok
17:37:51.0178 5920  [ E585445D5021971FAE10393F0F1C3961 ] BITS            C:\windows\System32\qmgr.dll
17:37:51.0256 5920  BITS - ok
17:37:51.0302 5920  [ 2287078ED48FCFC477B05B20CF38F36F ] blbdrive        C:\windows\system32\DRIVERS\blbdrive.sys
17:37:51.0365 5920  blbdrive - ok
17:37:51.0429 5920  [ 8F2DA3028D5FCBD1A060A3DE64CD6506 ] bowser          C:\windows\system32\DRIVERS\bowser.sys
17:37:51.0513 5920  bowser - ok
17:37:51.0529 5920  [ 9F9ACC7F7CCDE8A15C282D3F88B43309 ] BrFiltLo        C:\windows\system32\DRIVERS\BrFiltLo.sys
17:37:51.0605 5920  BrFiltLo - ok
17:37:51.0631 5920  [ 56801AD62213A41F6497F96DEE83755A ] BrFiltUp        C:\windows\system32\DRIVERS\BrFiltUp.sys
17:37:51.0699 5920  BrFiltUp - ok
17:37:51.0755 5920  [ 3DAA727B5B0A45039B0E1C9A211B8400 ] Browser        C:\windows\System32\browser.dll
17:37:51.0821 5920  Browser - ok
17:37:51.0877 5920  [ 845B8CE732E67F3B4133164868C666EA ] Brserid        C:\windows\System32\Drivers\Brserid.sys
17:37:51.0950 5920  Brserid - ok
17:37:51.0974 5920  [ 203F0B1E73ADADBBB7B7B1FABD901F6B ] BrSerWdm        C:\windows\System32\Drivers\BrSerWdm.sys
17:37:52.0040 5920  BrSerWdm - ok
17:37:52.0066 5920  [ BD456606156BA17E60A04E18016AE54B ] BrUsbMdm        C:\windows\System32\Drivers\BrUsbMdm.sys
17:37:52.0113 5920  BrUsbMdm - ok
17:37:52.0170 5920  [ AF72ED54503F717A43268B3CC5FAEC2E ] BrUsbSer        C:\windows\System32\Drivers\BrUsbSer.sys
17:37:52.0209 5920  BrUsbSer - ok
17:37:52.0261 5920  [ 2865A5C8E98C70C605F417908CEBB3A4 ] BthEnum        C:\windows\system32\drivers\BthEnum.sys
17:37:52.0363 5920  BthEnum - ok
17:37:52.0396 5920  [ ED3DF7C56CE0084EB2034432FC56565A ] BTHMODEM        C:\windows\system32\DRIVERS\bthmodem.sys
17:37:52.0458 5920  BTHMODEM - ok
17:37:52.0494 5920  [ AD1872E5829E8A2C3B5B4B641C3EAB0E ] BthPan          C:\windows\system32\DRIVERS\bthpan.sys
17:37:52.0545 5920  BthPan - ok
17:37:52.0607 5920  [ 1153DE2E4F5941E10C399CB5592F78A1 ] BTHPORT        C:\windows\System32\Drivers\BTHport.sys
17:37:52.0685 5920  BTHPORT - ok
17:37:52.0732 5920  [ 1DF19C96EEF6C29D1C3E1A8678E07190 ] bthserv        C:\windows\system32\bthserv.dll
17:37:52.0825 5920  bthserv - ok
17:37:52.0857 5920  [ C81E9413A25A439F436B1D4B6A0CF9E9 ] BTHUSB          C:\windows\System32\Drivers\BTHUSB.sys
17:37:52.0935 5920  BTHUSB - ok
17:37:52.0981 5920  [ D57641BF7E6AF5C996EAB931AFADC271 ] btwampfl        C:\windows\system32\drivers\btwampfl.sys
17:37:53.0044 5920  btwampfl - ok
17:37:53.0059 5920  [ 81471A7D64D1FC014D47A4CF33CD701E ] btwaudio        C:\windows\system32\drivers\btwaudio.sys
17:37:53.0106 5920  btwaudio - ok
17:37:53.0137 5920  [ 098AF3559710FCEC05B7AA5159F435F9 ] btwavdt        C:\windows\system32\drivers\btwavdt.sys
17:37:53.0184 5920  btwavdt - ok
17:37:53.0278 5920  [ 8FCF8E276B5755DB87C8B015CAD1BC41 ] btwdins        C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
17:37:53.0356 5920  btwdins - ok
17:37:53.0387 5920  [ DE53089F0678CB5F0AFEB867ACB0FB05 ] btwl2cap        C:\windows\system32\DRIVERS\btwl2cap.sys
17:37:53.0434 5920  btwl2cap - ok
17:37:53.0449 5920  [ E28EF3C4EF1849B876F850015066380B ] btwrchid        C:\windows\system32\DRIVERS\btwrchid.sys
17:37:53.0496 5920  btwrchid - ok
17:37:53.0512 5920  [ 77EA11B065E0A8AB902D78145CA51E10 ] cdfs            C:\windows\system32\DRIVERS\cdfs.sys
17:37:53.0605 5920  cdfs - ok
17:37:53.0683 5920  [ BE167ED0FDB9C1FA1133953C18D5A6C9 ] cdrom          C:\windows\system32\drivers\cdrom.sys
17:37:53.0761 5920  cdrom - ok
17:37:53.0824 5920  [ 319C6B309773D063541D01DF8AC6F55F ] CertPropSvc    C:\windows\System32\certprop.dll
17:37:53.0933 5920  CertPropSvc - ok
17:37:53.0980 5920  [ 3FE3FE94A34DF6FB06E6418D0F6A0060 ] circlass        C:\windows\system32\DRIVERS\circlass.sys
17:37:54.0058 5920  circlass - ok
17:37:54.0089 5920  [ 635181E0E9BBF16871BF5380D71DB02D ] CLFS            C:\windows\system32\CLFS.sys
17:37:54.0136 5920  CLFS - ok
17:37:54.0198 5920  [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
17:37:54.0229 5920  clr_optimization_v2.0.50727_32 - ok
17:37:54.0276 5920  [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
17:37:54.0339 5920  clr_optimization_v4.0.30319_32 - ok
17:37:54.0370 5920  [ DEA805815E587DAD1DD2C502220B5616 ] CmBatt          C:\windows\system32\DRIVERS\CmBatt.sys
17:37:54.0432 5920  CmBatt - ok
17:37:54.0463 5920  [ C537B1DB64D495B9B4717B4D6D9EDBF2 ] cmdide          C:\windows\system32\drivers\cmdide.sys
17:37:54.0510 5920  cmdide - ok
17:37:54.0557 5920  [ 247B4CE2DAB1160CD422D532D5241E1F ] CNG            C:\windows\system32\Drivers\cng.sys
17:37:54.0635 5920  CNG - ok
17:37:54.0666 5920  [ A6023D3823C37043986713F118A89BEE ] Compbatt        C:\windows\system32\DRIVERS\compbatt.sys
17:37:54.0697 5920  Compbatt - ok
17:37:54.0760 5920  [ CBE8C58A8579CFE5FCCF809E6F114E89 ] CompositeBus    C:\windows\system32\drivers\CompositeBus.sys
17:37:54.0822 5920  CompositeBus - ok
17:37:54.0853 5920  COMSysApp - ok
17:37:54.0900 5920  [ 2C4EBCFC84A9B44F209DFF6C6E6C61D1 ] crcdisk        C:\windows\system32\DRIVERS\crcdisk.sys
17:37:54.0931 5920  crcdisk - ok
17:37:54.0994 5920  [ 96C0E38905CFD788313BE8E11DAE3F2F ] CryptSvc        C:\windows\system32\cryptsvc.dll
17:37:55.0087 5920  CryptSvc - ok
17:37:55.0181 5920  [ 72794D112CBAFF3BC0C29BF7350D4741 ] cvhsvc          C:\Program Files\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
17:37:55.0275 5920  cvhsvc - ok
17:37:55.0337 5920  [ 7660F01D3B38ACA1747E397D21D790AF ] DcomLaunch      C:\windows\system32\rpcss.dll
17:37:55.0431 5920  DcomLaunch - ok
17:37:55.0477 5920  [ 8D6E10A2D9A5EED59562D9B82CF804E1 ] defragsvc      C:\windows\System32\defragsvc.dll
17:37:55.0587 5920  defragsvc - ok
17:37:55.0649 5920  [ F024449C97EC1E464AAFFDA18593DB88 ] DfsC            C:\windows\system32\Drivers\dfsc.sys
17:37:55.0727 5920  DfsC - ok
17:37:55.0789 5920  [ E9E01EB683C132F7FA27CD607B8A2B63 ] Dhcp            C:\windows\system32\dhcpcore.dll
17:37:55.0899 5920  Dhcp - ok
17:37:55.0930 5920  [ 1A050B0274BFB3890703D490F330C0DA ] discache        C:\windows\system32\drivers\discache.sys
17:37:56.0023 5920  discache - ok
17:37:56.0086 5920  [ 565003F326F99802E68CA78F2A68E9FF ] Disk            C:\windows\system32\DRIVERS\disk.sys
17:37:56.0133 5920  Disk - ok
17:37:56.0164 5920  [ 33EF4861F19A0736B11314AAD9AE28D0 ] Dnscache        C:\windows\System32\dnsrslvr.dll
17:37:56.0257 5920  Dnscache - ok
17:37:56.0304 5920  [ 366BA8FB4B7BB7435E3B9EACB3843F67 ] dot3svc        C:\windows\System32\dot3svc.dll
17:37:56.0413 5920  dot3svc - ok
17:37:56.0476 5920  [ 8EC04CA86F1D68DA9E11952EB85973D6 ] DPS            C:\windows\system32\dps.dll
17:37:56.0569 5920  DPS - ok
17:37:56.0616 5920  [ B918E7C5F9BF77202F89E1A9539F2EB4 ] drmkaud        C:\windows\system32\drivers\drmkaud.sys
17:37:56.0679 5920  drmkaud - ok
17:37:56.0741 5920  [ 16498EBC04AE9DD07049A8884B205C05 ] DXGKrnl        C:\windows\System32\drivers\dxgkrnl.sys
17:37:56.0850 5920  DXGKrnl - ok
17:37:56.0881 5920  [ 8600142FA91C1B96367D3300AD0F3F3A ] EapHost        C:\windows\System32\eapsvc.dll
17:37:56.0991 5920  EapHost - ok
17:37:57.0115 5920  [ 024E1B5CAC09731E4D868E64DBFB4AB0 ] ebdrv          C:\windows\system32\DRIVERS\evbdx.sys
17:37:57.0334 5920  ebdrv - ok
17:37:57.0365 5920  [ 81951F51E318AECC2D68559E47485CC4 ] EFS            C:\windows\System32\lsass.exe
17:37:57.0443 5920  EFS - ok
17:37:57.0505 5920  [ A8C362018EFC87BEB013EE28F29C0863 ] ehRecvr        C:\windows\ehome\ehRecvr.exe
17:37:57.0615 5920  ehRecvr - ok
17:37:57.0661 5920  [ D389BFF34F80CAEDE417BF9D1507996A ] ehSched        C:\windows\ehome\ehsched.exe
17:37:57.0724 5920  ehSched - ok
17:37:57.0786 5920  [ 0ED67910C8C326796FAA00B2BF6D9D3C ] elxstor        C:\windows\system32\DRIVERS\elxstor.sys
17:37:57.0849 5920  elxstor - ok
17:37:57.0942 5920  [ DEFA45E9F01878FBF6FB35103D584034 ] ENI Server      C:\Program Files\3S Software\CoDeSys ENI Server\ENI.exe
17:37:57.0973 5920  ENI Server ( UnsignedFile.Multi.Generic ) - warning
17:37:57.0973 5920  ENI Server - detected UnsignedFile.Multi.Generic (1)
17:37:58.0036 5920  [ 8FC3208352DD3912C94367A206AB3F11 ] ErrDev          C:\windows\system32\drivers\errdev.sys
17:37:58.0083 5920  ErrDev - ok
17:37:58.0145 5920  [ F6916EFC29D9953D5D0DF06882AE8E16 ] EventSystem    C:\windows\system32\es.dll
17:37:58.0270 5920  EventSystem - ok
17:37:58.0301 5920  [ 2DC9108D74081149CC8B651D3A26207F ] exfat          C:\windows\system32\drivers\exfat.sys
17:37:58.0410 5920  exfat - ok
17:37:58.0426 5920  [ 7E0AB74553476622FB6AE36F73D97D35 ] fastfat        C:\windows\system32\drivers\fastfat.sys
17:37:58.0504 5920  fastfat - ok
17:37:58.0566 5920  [ 967EA5B213E9984CBE270205DF37755B ] Fax            C:\windows\system32\fxssvc.exe
17:37:58.0660 5920  Fax - ok
17:37:58.0691 5920  [ E817A017F82DF2A1F8CFDBDA29388B29 ] fdc            C:\windows\system32\DRIVERS\fdc.sys
17:37:58.0738 5920  fdc - ok
17:37:58.0785 5920  [ F3222C893BD2F5821A0179E5C71E88FB ] fdPHost        C:\windows\system32\fdPHost.dll
17:37:58.0863 5920  fdPHost - ok
17:37:58.0894 5920  [ 7DBE8CBFE79EFBDEB98C9FB08D3A9A5B ] FDResPub        C:\windows\system32\fdrespub.dll
17:37:58.0972 5920  FDResPub - ok
17:37:58.0987 5920  [ 6CF00369C97F3CF563BE99BE983D13D8 ] FileInfo        C:\windows\system32\drivers\fileinfo.sys
17:37:59.0034 5920  FileInfo - ok
17:37:59.0065 5920  [ 42C51DC94C91DA21CB9196EB64C45DB9 ] Filetrace      C:\windows\system32\drivers\filetrace.sys
17:37:59.0143 5920  Filetrace - ok
17:37:59.0175 5920  [ 87907AA70CB3C56600F1C2FB8841579B ] flpydisk        C:\windows\system32\DRIVERS\flpydisk.sys
17:37:59.0206 5920  flpydisk - ok
17:37:59.0253 5920  [ 7520EC808E0C35E0EE6F841294316653 ] FltMgr          C:\windows\system32\drivers\fltmgr.sys
17:37:59.0299 5920  FltMgr - ok
17:37:59.0377 5920  [ E12C4928B32ACE04610259647F072635 ] FontCache      C:\windows\system32\FntCache.dll
17:37:59.0502 5920  FontCache - ok
17:37:59.0565 5920  [ E56F39F6B7FDA0AC77A79B0FD3DE1A2F ] FontCache3.0.0.0 C:\windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
17:37:59.0596 5920  FontCache3.0.0.0 - ok
17:37:59.0643 5920  [ 1A16B57943853E598CFF37FE2B8CBF1D ] FsDepends      C:\windows\system32\drivers\FsDepends.sys
17:37:59.0674 5920  FsDepends - ok
17:37:59.0721 5920  [ B74B0578FD1D3F897E95F2A2B69EA051 ] fssfltr        C:\windows\system32\DRIVERS\fssfltr.sys
17:37:59.0752 5920  fssfltr - ok
17:37:59.0814 5920  [ 206AD9A89BF05DFA1621F1FC7B82592D ] fsssvc          C:\Program Files\Windows Live\Family Safety\fsssvc.exe
17:37:59.0908 5920  fsssvc - ok
17:37:59.0939 5920  [ 7DAE5EBCC80E45D3253F4923DC424D05 ] Fs_Rec          C:\windows\system32\drivers\Fs_Rec.sys
17:37:59.0986 5920  Fs_Rec - ok
17:38:00.0017 5920  [ E306A24D9694C724FA2491278BF50FDB ] fvevol          C:\windows\system32\DRIVERS\fvevol.sys
17:38:00.0079 5920  fvevol - ok
17:38:00.0142 5920  [ 65EE0C7A58B65E74AE05637418153938 ] gagp30kx        C:\windows\system32\DRIVERS\gagp30kx.sys
17:38:00.0189 5920  gagp30kx - ok
17:38:00.0235 5920  [ E897EAF5ED6BA41E081060C9B447A673 ] gpsvc          C:\windows\System32\gpsvc.dll
17:38:00.0360 5920  gpsvc - ok
17:38:00.0407 5920  [ 995178A443B07FA9EEAEA041D7B4B5CA ] hardlock        C:\windows\system32\drivers\hardlock.sys
17:38:00.0625 5920  hardlock - ok
17:38:00.0625 5920  hasplms - ok
17:38:00.0672 5920  [ C44E3C2BAB6837DB337DDEE7544736DB ] hcw85cir        C:\windows\system32\drivers\hcw85cir.sys
17:38:00.0750 5920  hcw85cir - ok
17:38:00.0797 5920  [ A5EF29D5315111C80A5C1ABAD14C8972 ] HdAudAddService C:\windows\system32\drivers\HdAudio.sys
17:38:00.0891 5920  HdAudAddService - ok
17:38:00.0922 5920  [ 9036377B8A6C15DC2EEC53E489D159B5 ] HDAudBus        C:\windows\system32\drivers\HDAudBus.sys
17:38:00.0984 5920  HDAudBus - ok
17:38:01.0031 5920  [ 1D58A7F3E11A9731D0EAAAA8405ACC36 ] HidBatt        C:\windows\system32\DRIVERS\HidBatt.sys
17:38:01.0078 5920  HidBatt - ok
17:38:01.0125 5920  [ 89448F40E6DF260C206A193A4683BA78 ] HidBth          C:\windows\system32\DRIVERS\hidbth.sys
17:38:01.0171 5920  HidBth - ok
17:38:01.0203 5920  [ CF50B4CF4A4F229B9F3C08351F99CA5E ] HidIr          C:\windows\system32\DRIVERS\hidir.sys
17:38:01.0265 5920  HidIr - ok
17:38:01.0296 5920  [ 2BC6F6A1992B3A77F5F41432CA6B3B6B ] hidserv        C:\windows\system32\hidserv.dll
17:38:01.0390 5920  hidserv - ok
17:38:01.0421 5920  [ 25072FB35AC90B25F9E4E3BACF774102 ] HidUsb          C:\windows\system32\drivers\hidusb.sys
17:38:01.0483 5920  HidUsb - ok
17:38:01.0530 5920  [ 196B4E3F4CCCC24AF836CE58FACBB699 ] hkmsvc          C:\windows\system32\kmsvc.dll
17:38:01.0624 5920  hkmsvc - ok
17:38:01.0655 5920  [ 6658F4404DE03D75FE3BA09F7ABA6A30 ] HomeGroupListener C:\windows\system32\ListSvc.dll
17:38:01.0780 5920  HomeGroupListener - ok
17:38:01.0827 5920  [ DBC02D918FFF1CAD628ACBE0C0EAA8E8 ] HomeGroupProvider C:\windows\system32\provsvc.dll
17:38:01.0905 5920  HomeGroupProvider - ok
17:38:01.0967 5920  [ 295FDC419039090EB8B49FFDBB374549 ] HpSAMD          C:\windows\system32\drivers\HpSAMD.sys
17:38:02.0014 5920  HpSAMD - ok
17:38:02.0076 5920  [ 871917B07A141BFF43D76D8844D48106 ] HTTP            C:\windows\system32\drivers\HTTP.sys
17:38:02.0185 5920  HTTP - ok
17:38:02.0217 5920  [ 0C4E035C7F105F1299258C90886C64C5 ] hwpolicy        C:\windows\system32\drivers\hwpolicy.sys
17:38:02.0263 5920  hwpolicy - ok
17:38:02.0326 5920  [ F151F0BDC47F4A28B1B20A0818EA36D6 ] i8042prt        C:\windows\system32\drivers\i8042prt.sys
17:38:02.0388 5920  i8042prt - ok
17:38:02.0466 5920  [ 7548066DF68A8A1A56B043359F915F37 ] IAANTMON        C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
17:38:02.0560 5920  IAANTMON - ok
17:38:02.0607 5920  [ D483687EACE0C065EE772481A96E05F5 ] iaStor          C:\windows\system32\DRIVERS\iaStor.sys
17:38:02.0638 5920  iaStor - ok
17:38:02.0700 5920  [ 5CD5F9A5444E6CDCB0AC89BD62D8B76E ] iaStorV        C:\windows\system32\drivers\iaStorV.sys
17:38:02.0763 5920  iaStorV - ok
17:38:02.0856 5920  [ C521D7EB6497BB1AF6AFA89E322FB43C ] idsvc          C:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
17:38:02.0997 5920  idsvc - ok
17:38:03.0168 5920  [ D0074897C6BC132F3980EA4654BF7FB9 ] igfx            C:\windows\system32\DRIVERS\igdkmd32.sys
17:38:03.0496 5920  igfx - ok
17:38:03.0527 5920  [ 4173FF5708F3236CF25195FECD742915 ] iirsp          C:\windows\system32\DRIVERS\iirsp.sys
17:38:03.0574 5920  iirsp - ok
17:38:03.0652 5920  [ F95622F161474511B8D80D6B093AA610 ] IKEEXT          C:\windows\System32\ikeext.dll
17:38:03.0792 5920  IKEEXT - ok
17:38:03.0917 5920  [ E8B6F7896DB2EE6A7AF7A177A9BBC526 ] IntcAzAudAddService C:\windows\system32\drivers\RTKVHDA.sys
17:38:04.0182 5920  IntcAzAudAddService - ok
17:38:04.0213 5920  [ A0F12F2C9BA6C72F3987CE780E77C130 ] intelide        C:\windows\system32\drivers\intelide.sys
17:38:04.0245 5920  intelide - ok
17:38:04.0291 5920  [ 3B514D27BFC4ACCB4037BC6685F766E0 ] intelppm        C:\windows\system32\DRIVERS\intelppm.sys
17:38:04.0338 5920  intelppm - ok
17:38:04.0385 5920  [ ACB364B9075A45C0736E5C47BE5CAE19 ] IPBusEnum      C:\windows\system32\ipbusenum.dll
17:38:04.0479 5920  IPBusEnum - ok
17:38:04.0510 5920  [ 709D1761D3B19A932FF0238EA6D50200 ] IpFilterDriver  C:\windows\system32\DRIVERS\ipfltdrv.sys
17:38:04.0588 5920  IpFilterDriver - ok
17:38:04.0650 5920  [ 58F67245D041FBE7AF88F4EAF79DF0FA ] iphlpsvc        C:\windows\System32\iphlpsvc.dll
17:38:04.0713 5920  iphlpsvc - ok
17:38:04.0759 5920  [ 4BD7134618C1D2A27466A099062547BF ] IPMIDRV        C:\windows\system32\drivers\IPMIDrv.sys
17:38:04.0822 5920  IPMIDRV - ok
17:38:04.0869 5920  [ A5FA468D67ABCDAA36264E463A7BB0CD ] IPNAT          C:\windows\system32\drivers\ipnat.sys
17:38:04.0962 5920  IPNAT - ok
17:38:05.0009 5920  [ 42996CFF20A3084A56017B7902307E9F ] IRENUM          C:\windows\system32\drivers\irenum.sys
17:38:05.0103 5920  IRENUM - ok
17:38:05.0134 5920  [ 1F32BB6B38F62F7DF1A7AB7292638A35 ] isapnp          C:\windows\system32\drivers\isapnp.sys
17:38:05.0181 5920  isapnp - ok
17:38:05.0212 5920  [ CB7A9ABB12B8415BCE5D74994C7BA3AE ] iScsiPrt        C:\windows\system32\drivers\msiscsi.sys
17:38:05.0274 5920  iScsiPrt - ok
17:38:05.0305 5920  [ ADEF52CA1AEAE82B50DF86B56413107E ] kbdclass        C:\windows\system32\drivers\kbdclass.sys
17:38:05.0368 5920  kbdclass - ok
17:38:05.0415 5920  [ 9E3CED91863E6EE98C24794D05E27A71 ] kbdhid          C:\windows\system32\drivers\kbdhid.sys
17:38:05.0461 5920  kbdhid - ok
17:38:05.0524 5920  [ 3EB803312987FF44265C87CB960DF6AB ] kbfiltr        C:\windows\system32\DRIVERS\kbfiltr.sys
17:38:05.0571 5920  kbfiltr - ok
17:38:05.0586 5920  [ 81951F51E318AECC2D68559E47485CC4 ] KeyIso          C:\windows\system32\lsass.exe
17:38:05.0617 5920  KeyIso - ok
17:38:05.0680 5920  [ B7895B4182C0D16F6EFADEB8081E8D36 ] KSecDD          C:\windows\system32\Drivers\ksecdd.sys
17:38:05.0727 5920  KSecDD - ok
17:38:05.0742 5920  [ D30159AC9237519FBC62C6EC247D2D46 ] KSecPkg        C:\windows\system32\Drivers\ksecpkg.sys
17:38:05.0789 5920  KSecPkg - ok
17:38:05.0836 5920  [ 89A7B9CC98D0D80C6F31B91C0A310FCD ] KtmRm          C:\windows\system32\msdtckrm.dll
17:38:05.0945 5920  KtmRm - ok
17:38:06.0007 5920  [ 01738F10CA813C5A4DBD4D7EC6FDC3FD ] L1C            C:\windows\system32\DRIVERS\L1C62x86.sys
17:38:06.0039 5920  L1C - ok
17:38:06.0085 5920  [ D64AF876D53ECA3668BB97B51B4E70AB ] LanmanServer    C:\windows\system32\srvsvc.dll
17:38:06.0210 5920  LanmanServer - ok
17:38:06.0257 5920  [ 58405E4F68BA8E4057C6E914F326ABA2 ] LanmanWorkstation C:\windows\System32\wkssvc.dll
17:38:06.0351 5920  LanmanWorkstation - ok
17:38:06.0397 5920  [ F7611EC07349979DA9B0AE1F18CCC7A6 ] lltdio          C:\windows\system32\DRIVERS\lltdio.sys
17:38:06.0491 5920  lltdio - ok
17:38:06.0538 5920  [ 5700673E13A2117FA3B9020C852C01E2 ] lltdsvc        C:\windows\System32\lltdsvc.dll
17:38:06.0616 5920  lltdsvc - ok
17:38:06.0647 5920  [ 55CA01BA19D0006C8F2639B6C045E08B ] lmhosts        C:\windows\System32\lmhsvc.dll
17:38:06.0709 5920  lmhosts - ok
17:38:06.0772 5920  [ EB119A53CCF2ACC000AC71B065B78FEF ] LSI_FC          C:\windows\system32\DRIVERS\lsi_fc.sys
17:38:06.0819 5920  LSI_FC - ok
17:38:06.0834 5920  [ 8ADE1C877256A22E49B75D1CC9161F9C ] LSI_SAS        C:\windows\system32\DRIVERS\lsi_sas.sys
17:38:06.0881 5920  LSI_SAS - ok
17:38:06.0912 5920  [ DC9DC3D3DAA0E276FD2EC262E38B11E9 ] LSI_SAS2        C:\windows\system32\DRIVERS\lsi_sas2.sys
17:38:06.0959 5920  LSI_SAS2 - ok
17:38:06.0975 5920  [ 0A036C7D7CAB643A7F07135AC47E0524 ] LSI_SCSI        C:\windows\system32\DRIVERS\lsi_scsi.sys
17:38:07.0021 5920  LSI_SCSI - ok
17:38:07.0037 5920  [ 6703E366CC18D3B6E534F5CF7DF39CEE ] luafv          C:\windows\system32\drivers\luafv.sys
17:38:07.0131 5920  luafv - ok
17:38:07.0224 5920  [ 2349335A8033FD9834D1C401EAE1C9BF ] lxeaCATSCustConnectService C:\windows\system32\spool\DRIVERS\W32X86\3\\lxeaserv.exe
17:38:07.0271 5920  lxeaCATSCustConnectService - ok
17:38:07.0302 5920  lxea_device - ok
17:38:07.0333 5920  [ 59A2783ABA6019BED0C843C706E10A6A ] massfilter      C:\windows\system32\DRIVERS\massfilter.sys
17:38:07.0411 5920  massfilter - ok
17:38:07.0474 5920  [ BFB9EE8EE977EFE85D1A3105ABEF6DD1 ] Mcx2Svc        C:\windows\system32\Mcx2Svc.dll
17:38:07.0521 5920  Mcx2Svc - ok
17:38:07.0567 5920  [ 0FFF5B045293002AB38EB1FD1FC2FB74 ] megasas        C:\windows\system32\DRIVERS\megasas.sys
17:38:07.0599 5920  megasas - ok
17:38:07.0630 5920  [ DCBAB2920C75F390CAF1D29F675D03D6 ] MegaSR          C:\windows\system32\DRIVERS\MegaSR.sys
17:38:07.0677 5920  MegaSR - ok
17:38:07.0723 5920  [ 146B6F43A673379A3C670E86D89BE5EA ] MMCSS          C:\windows\system32\mmcss.dll
17:38:07.0801 5920  MMCSS - ok
17:38:07.0817 5920  [ F001861E5700EE84E2D4E52C712F4964 ] Modem          C:\windows\system32\drivers\modem.sys
17:38:07.0895 5920  Modem - ok
17:38:07.0911 5920  [ 79D10964DE86B292320E9DFE02282A23 ] monitor        C:\windows\system32\DRIVERS\monitor.sys
17:38:07.0973 5920  monitor - ok
17:38:08.0020 5920  [ FB18CC1D4C2E716B6B903B0AC0CC0609 ] mouclass        C:\windows\system32\drivers\mouclass.sys
17:38:08.0067 5920  mouclass - ok
17:38:08.0098 5920  [ 2C388D2CD01C9042596CF3C8F3C7B24D ] mouhid          C:\windows\system32\DRIVERS\mouhid.sys
17:38:08.0160 5920  mouhid - ok
17:38:08.0191 5920  [ FC8771F45ECCCFD89684E38842539B9B ] mountmgr        C:\windows\system32\drivers\mountmgr.sys
17:38:08.0238 5920  mountmgr - ok
17:38:08.0301 5920  [ 2D699FB6E89CE0D8DA14ECC03B3EDFE0 ] mpio            C:\windows\system32\drivers\mpio.sys
17:38:08.0347 5920  mpio - ok
17:38:08.0363 5920  [ AD2723A7B53DD1AACAE6AD8C0BFBF4D0 ] mpsdrv          C:\windows\system32\drivers\mpsdrv.sys
17:38:08.0457 5920  mpsdrv - ok
17:38:08.0503 5920  [ 9835584E999D25004E1EE8E5F3E3B881 ] MpsSvc          C:\windows\system32\mpssvc.dll
17:38:08.0644 5920  MpsSvc - ok
17:38:08.0659 5920  [ CEB46AB7C01C9F825F8CC6BABC18166A ] MRxDAV          C:\windows\system32\drivers\mrxdav.sys
17:38:08.0737 5920  MRxDAV - ok
17:38:08.0800 5920  [ 5D16C921E3671636C0EBA3BBAAC5FD25 ] mrxsmb          C:\windows\system32\DRIVERS\mrxsmb.sys
17:38:08.0878 5920  mrxsmb - ok
17:38:08.0909 5920  [ 6D17A4791ACA19328C685D256349FEFC ] mrxsmb10        C:\windows\system32\DRIVERS\mrxsmb10.sys
17:38:08.0987 5920  mrxsmb10 - ok
17:38:09.0018 5920  [ B81F204D146000BE76651A50670A5E9E ] mrxsmb20        C:\windows\system32\DRIVERS\mrxsmb20.sys
17:38:09.0081 5920  mrxsmb20 - ok
17:38:09.0127 5920  [ 012C5F4E9349E711E11E0F19A8589F0A ] msahci          C:\windows\system32\drivers\msahci.sys
17:38:09.0159 5920  msahci - ok
17:38:09.0190 5920  [ 55055F8AD8BE27A64C831322A780A228 ] msdsm          C:\windows\system32\drivers\msdsm.sys
17:38:09.0237 5920  msdsm - ok
17:38:09.0252 5920  [ E1BCE74A3BD9902B72599C0192A07E27 ] MSDTC          C:\windows\System32\msdtc.exe
17:38:09.0315 5920  MSDTC - ok
17:38:09.0361 5920  [ DAEFB28E3AF5A76ABCC2C3078C07327F ] Msfs            C:\windows\system32\drivers\Msfs.sys
17:38:09.0455 5920  Msfs - ok
17:38:09.0486 5920  [ 3E1E5767043C5AF9367F0056295E9F84 ] mshidkmdf      C:\windows\System32\drivers\mshidkmdf.sys
17:38:09.0580 5920  mshidkmdf - ok
17:38:09.0611 5920  [ 0A4E5757AE09FA9622E3158CC1AEF114 ] msisadrv        C:\windows\system32\drivers\msisadrv.sys
17:38:09.0658 5920  msisadrv - ok
17:38:09.0705 5920  [ 90F7D9E6B6F27E1A707D4A297F077828 ] MSiSCSI        C:\windows\system32\iscsiexe.dll
17:38:09.0783 5920  MSiSCSI - ok
17:38:09.0798 5920  msiserver - ok
17:38:09.0845 5920  [ 8C0860D6366AAFFB6C5BB9DF9448E631 ] MSKSSRV        C:\windows\system32\drivers\MSKSSRV.sys
17:38:09.0939 5920  MSKSSRV - ok
17:38:09.0954 5920  [ 3EA8B949F963562CEDBB549EAC0C11CE ] MSPCLOCK        C:\windows\system32\drivers\MSPCLOCK.sys
17:38:10.0032 5920  MSPCLOCK - ok
17:38:10.0063 5920  [ F456E973590D663B1073E9C463B40932 ] MSPQM          C:\windows\system32\drivers\MSPQM.sys
17:38:10.0157 5920  MSPQM - ok
17:38:10.0188 5920  [ 0E008FC4819D238C51D7C93E7B41E560 ] MsRPC          C:\windows\system32\drivers\MsRPC.sys
17:38:10.0235 5920  MsRPC - ok
17:38:10.0282 5920  [ FC6B9FF600CC585EA38B12589BD4E246 ] mssmbios        C:\windows\system32\drivers\mssmbios.sys
17:38:10.0313 5920  mssmbios - ok
17:38:10.0360 5920  [ B42C6B921F61A6E55159B8BE6CD54A36 ] MSTEE          C:\windows\system32\drivers\MSTEE.sys
17:38:10.0422 5920  MSTEE - ok
17:38:10.0438 5920  [ 33599130F44E1F34631CEA241DE8AC84 ] MTConfig        C:\windows\system32\DRIVERS\MTConfig.sys
17:38:10.0500 5920  MTConfig - ok
17:38:10.0516 5920  [ 159FAD02F64E6381758C990F753BCC80 ] Mup            C:\windows\system32\Drivers\mup.sys
17:38:10.0563 5920  Mup - ok
17:38:10.0609 5920  [ 61D57A5D7C6D9AFE10E77DAE6E1B445E ] napagent        C:\windows\system32\qagentRT.dll
17:38:10.0719 5920  napagent - ok
17:38:10.0765 5920  [ 26384429FCD85D83746F63E798AB1480 ] NativeWifiP    C:\windows\system32\DRIVERS\nwifi.sys
17:38:10.0843 5920  NativeWifiP - ok
17:38:10.0937 5920  [ 8C9C922D71F1CD4DEF73F186416B7896 ] NDIS            C:\windows\system32\drivers\ndis.sys
17:38:10.0999 5920  NDIS - ok
17:38:11.0031 5920  [ 0E1787AA6C9191D3D319E8BAFE86F80C ] NdisCap        C:\windows\system32\DRIVERS\ndiscap.sys
17:38:11.0124 5920  NdisCap - ok
17:38:11.0171 5920  [ E4A8AEC125A2E43A9E32AFEEA7C9C888 ] NdisTapi        C:\windows\system32\DRIVERS\ndistapi.sys
17:38:11.0265 5920  NdisTapi - ok
17:38:11.0327 5920  [ D8A65DAFB3EB41CBB622745676FCD072 ] Ndisuio        C:\windows\system32\DRIVERS\ndisuio.sys
17:38:11.0421 5920  Ndisuio - ok
17:38:11.0460 5920  [ 38FBE267E7E6983311179230FACB1017 ] NdisWan        C:\windows\system32\DRIVERS\ndiswan.sys
17:38:11.0560 5920  NdisWan - ok
17:38:11.0598 5920  [ A4BDC541E69674FBFF1A8FF00BE913F2 ] NDProxy        C:\windows\system32\drivers\NDProxy.sys
17:38:11.0684 5920  NDProxy - ok
17:38:11.0762 5920  [ 69C503C004F49AEE8B8E3067CC047BA7 ] Net Driver HPZ12 C:\windows\system32\HPZinw12.dll
17:38:11.0805 5920  Net Driver HPZ12 ( UnsignedFile.Multi.Generic ) - warning
17:38:11.0805 5920  Net Driver HPZ12 - detected UnsignedFile.Multi.Generic (1)
17:38:11.0862 5920  [ 80B275B1CE3B0E79909DB7B39AF74D51 ] NetBIOS        C:\windows\system32\DRIVERS\netbios.sys
17:38:11.0958 5920  NetBIOS - ok
17:38:12.0008 5920  [ 280122DDCF04B378EDD1AD54D71C1E54 ] NetBT          C:\windows\system32\DRIVERS\netbt.sys
17:38:12.0092 5920  NetBT - ok
17:38:12.0114 5920  [ 81951F51E318AECC2D68559E47485CC4 ] Netlogon        C:\windows\system32\lsass.exe
17:38:12.0152 5920  Netlogon - ok
17:38:12.0204 5920  [ 7CCCFCA7510684768DA22092D1FA4DB2 ] Netman          C:\windows\System32\netman.dll
17:38:12.0292 5920  Netman - ok
17:38:12.0330 5920  [ D22CD77D4F0D63D1169BB35911BFF12D ] NetMsmqActivator C:\windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
17:38:12.0381 5920  NetMsmqActivator - ok
17:38:12.0403 5920  [ D22CD77D4F0D63D1169BB35911BFF12D ] NetPipeActivator C:\windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
17:38:12.0430 5920  NetPipeActivator - ok
17:38:12.0461 5920  [ 8C338238C16777A802D6A9211EB2BA50 ] netprofm        C:\windows\System32\netprofm.dll
17:38:12.0579 5920  netprofm - ok
17:38:12.0657 5920  [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpActivator C:\windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
17:38:12.0688 5920  NetTcpActivator - ok
17:38:12.0703 5920  [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpPortSharing C:\windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
17:38:12.0735 5920  NetTcpPortSharing - ok
17:38:12.0766 5920  [ 1D85C4B390B0EE09C7A46B91EFB2C097 ] nfrd960        C:\windows\system32\DRIVERS\nfrd960.sys
17:38:12.0813 5920  nfrd960 - ok
17:38:12.0844 5920  [ 374071043F9E4231EE43BE2BB48DD36D ] NlaSvc          C:\windows\System32\nlasvc.dll
17:38:12.0937 5920  NlaSvc - ok
17:38:12.0969 5920  [ 1DB262A9F8C087E8153D89BEF3D2235F ] Npfs            C:\windows\system32\drivers\Npfs.sys
17:38:13.0047 5920  Npfs - ok
17:38:13.0078 5920  [ BA387E955E890C8A88306D9B8D06BF17 ] nsi            C:\windows\system32\nsisvc.dll
17:38:13.0140 5920  nsi - ok
17:38:13.0171 5920  [ E9A0A4D07E53D8FEA2BB8387A3293C58 ] nsiproxy        C:\windows\system32\drivers\nsiproxy.sys
17:38:13.0249 5920  nsiproxy - ok
17:38:13.0327 5920  [ 5E43D2B0EE64123D4880DFA6626DEFDE ] Ntfs            C:\windows\system32\drivers\Ntfs.sys
17:38:13.0468 5920  Ntfs - ok
17:38:13.0499 5920  [ F9756A98D69098DCA8945D62858A812C ] Null            C:\windows\system32\drivers\Null.sys
17:38:13.0561 5920  Null - ok
17:38:13.0608 5920  [ B4F70FAC4EA61CF150823AA063A39FF9 ] NVHDA          C:\windows\system32\drivers\nvhda32v.sys
17:38:13.0655 5920  NVHDA - ok
17:38:13.0967 5920  [ D3090F9E068445FFE6F0FD37575E5D70 ] nvlddmkm        C:\windows\system32\DRIVERS\nvlddmkm.sys
17:38:14.0591 5920  nvlddmkm - ok
17:38:14.0685 5920  [ 24A47F46E6C74F07B2C256194C18B4D5 ] nvpciflt        C:\windows\system32\DRIVERS\nvpciflt.sys
17:38:14.0716 5920  nvpciflt - ok
17:38:14.0747 5920  [ B3E25EE28883877076E0E1FF877D02E0 ] nvraid          C:\windows\system32\drivers\nvraid.sys
17:38:14.0809 5920  nvraid - ok
17:38:14.0856 5920  [ 4380E59A170D88C4F1022EFF6719A8A4 ] nvstor          C:\windows\system32\drivers\nvstor.sys
17:38:14.0903 5920  nvstor - ok
17:38:14.0965 5920  [ 0214AE0E581CA912DA006F207837AC41 ] nvsvc          C:\windows\system32\nvvsvc.exe
17:38:15.0028 5920  nvsvc - ok
17:38:15.0075 5920  [ 5A0983915F02BAE73267CC2A041F717D ] nv_agp          C:\windows\system32\drivers\nv_agp.sys
17:38:15.0121 5920  nv_agp - ok
17:38:15.0153 5920  [ 08A70A1F2CDDE9BB49B885CB817A66EB ] ohci1394        C:\windows\system32\drivers\ohci1394.sys
17:38:15.0231 5920  ohci1394 - ok
17:38:15.0262 5920  [ 9D10F99A6712E28F8ACD5641E3A7EA6B ] ose            C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
17:38:15.0309 5920  ose - ok
17:38:15.0465 5920  [ 358A9CCA612C68EB2F07DDAD4CE1D8D7 ] osppsvc        C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
17:38:15.0761 5920  osppsvc - ok
17:38:15.0808 5920  [ 82A8521DDC60710C3D3D3E7325209BEC ] p2pimsvc        C:\windows\system32\pnrpsvc.dll
17:38:15.0901 5920  p2pimsvc - ok
17:38:15.0933 5920  [ 59C3DDD501E39E006DAC31BF55150D91 ] p2psvc          C:\windows\system32\p2psvc.dll
17:38:15.0995 5920  p2psvc - ok
17:38:16.0042 5920  [ 2EA877ED5DD9713C5AC74E8EA7348D14 ] Parport        C:\windows\system32\DRIVERS\parport.sys
17:38:16.0104 5920  Parport - ok
17:38:16.0167 5920  [ 3F34A1B4C5F6475F320C275E63AFCE9B ] partmgr        C:\windows\system32\drivers\partmgr.sys
17:38:16.0198 5920  partmgr - ok
17:38:16.0229 5920  [ EB0A59F29C19B86479D36B35983DAADC ] Parvdm          C:\windows\system32\DRIVERS\parvdm.sys
17:38:16.0276 5920  Parvdm - ok
17:38:16.0323 5920  [ 358AB7956D3160000726574083DFC8A6 ] PcaSvc          C:\windows\System32\pcasvc.dll
17:38:16.0385 5920  PcaSvc - ok
17:38:16.0432 5920  [ 673E55C3498EB970088E812EA820AA8F ] pci            C:\windows\system32\drivers\pci.sys
17:38:16.0479 5920  pci - ok
17:38:16.0510 5920  [ AFE86F419014DB4E5593F69FFE26CE0A ] pciide          C:\windows\system32\drivers\pciide.sys
17:38:16.0541 5920  pciide - ok
17:38:16.0572 5920  [ F396431B31693E71E8A80687EF523506 ] pcmcia          C:\windows\system32\DRIVERS\pcmcia.sys
17:38:16.0635 5920  pcmcia - ok
17:38:16.0650 5920  [ 250F6B43D2B613172035C6747AEEB19F ] pcw            C:\windows\system32\drivers\pcw.sys
17:38:16.0681 5920  pcw - ok
17:38:16.0728 5920  [ 9E0104BA49F4E6973749A02BF41344ED ] PEAUTH          C:\windows\system32\drivers\peauth.sys
17:38:16.0884 5920  PEAUTH - ok
17:38:16.0978 5920  [ 414BBA67A3DED1D28437EB66AEB8A720 ] pla            C:\windows\system32\pla.dll
17:38:17.0149 5920  pla - ok
17:38:17.0196 5920  [ EC7BC28D207DA09E79B3E9FAF8B232CA ] PlugPlay        C:\windows\system32\umpnpmgr.dll
17:38:17.0259 5920  PlugPlay - ok
17:38:17.0274 5920  [ 12B4549D515CB26BB8D375038017CA65 ] Pml Driver HPZ12 C:\windows\system32\HPZipm12.dll
17:38:17.0321 5920  Pml Driver HPZ12 ( UnsignedFile.Multi.Generic ) - warning
17:38:17.0321 5920  Pml Driver HPZ12 - detected UnsignedFile.Multi.Generic (1)
17:38:17.0368 5920  [ 63FF8572611249931EB16BB8EED6AFC8 ] PNRPAutoReg    C:\windows\system32\pnrpauto.dll
17:38:17.0430 5920  PNRPAutoReg - ok
17:38:17.0477 5920  [ 82A8521DDC60710C3D3D3E7325209BEC ] PNRPsvc        C:\windows\system32\pnrpsvc.dll
17:38:17.0508 5920  PNRPsvc - ok
17:38:17.0571 5920  [ 53946B69BA0836BD95B03759530C81EC ] PolicyAgent    C:\windows\System32\ipsecsvc.dll
17:38:17.0680 5920  PolicyAgent - ok
17:38:17.0727 5920  [ F87D30E72E03D579A5199CCB3831D6EA ] Power          C:\windows\system32\umpo.dll
17:38:17.0820 5920  Power - ok
17:38:17.0867 5920  [ 631E3E205AD6D86F2AED6A4A8E69F2DB ] PptpMiniport    C:\windows\system32\DRIVERS\raspptp.sys
17:38:17.0945 5920  PptpMiniport - ok
17:38:17.0961 5920  [ 85B1E3A0C7585BC4AAE6899EC6FCF011 ] Processor      C:\windows\system32\DRIVERS\processr.sys
17:38:18.0039 5920  Processor - ok
17:38:18.0085 5920  [ CADEFAC453040E370A1BDFF3973BE00D ] ProfSvc        C:\windows\system32\profsvc.dll
17:38:18.0179 5920  ProfSvc - ok
17:38:18.0210 5920  [ 81951F51E318AECC2D68559E47485CC4 ] ProtectedStorage C:\windows\system32\lsass.exe
17:38:18.0241 5920  ProtectedStorage - ok
17:38:18.0273 5920  [ 6270CCAE2A86DE6D146529FE55B3246A ] Psched          C:\windows\system32\DRIVERS\pacer.sys
17:38:18.0351 5920  Psched - ok
17:38:18.0397 5920  [ AB95ECF1F6659A60DDC166D8315B0751 ] ql2300          C:\windows\system32\DRIVERS\ql2300.sys
17:38:18.0522 5920  ql2300 - ok
17:38:18.0569 5920  [ B4DD51DD25182244B86737DC51AF2270 ] ql40xx          C:\windows\system32\DRIVERS\ql40xx.sys
17:38:18.0600 5920  ql40xx - ok
17:38:18.0663 5920  [ 31AC809E7707EB580B2BDB760390765A ] QWAVE          C:\windows\system32\qwave.dll
17:38:18.0741 5920  QWAVE - ok
17:38:18.0772 5920  [ 584078CA1B95CA72DF2A27C336F9719D ] QWAVEdrv        C:\windows\system32\drivers\qwavedrv.sys
17:38:18.0850 5920  QWAVEdrv - ok
17:38:18.0865 5920  [ 30A81B53C766D0133BB86D234E5556AB ] RasAcd          C:\windows\system32\DRIVERS\rasacd.sys
17:38:18.0959 5920  RasAcd - ok
17:38:19.0006 5920  [ 57EC4AEF73660166074D8F7F31C0D4FD ] RasAgileVpn    C:\windows\system32\DRIVERS\AgileVpn.sys
17:38:19.0084 5920  RasAgileVpn - ok
17:38:19.0131 5920  [ A60F1839849C0C00739787FD5EC03F13 ] RasAuto        C:\windows\System32\rasauto.dll
17:38:19.0209 5920  RasAuto - ok
17:38:19.0240 5920  [ D9F91EAFEC2815365CBE6D167E4E332A ] Rasl2tp        C:\windows\system32\DRIVERS\rasl2tp.sys
17:38:19.0333 5920  Rasl2tp - ok
17:38:19.0396 5920  [ CB9E04DC05EACF5B9A36CA276D475006 ] RasMan          C:\windows\System32\rasmans.dll
17:38:19.0521 5920  RasMan - ok
17:38:19.0552 5920  [ 0FE8B15916307A6AC12BFB6A63E45507 ] RasPppoe        C:\windows\system32\DRIVERS\raspppoe.sys
17:38:19.0661 5920  RasPppoe - ok
17:38:19.0692 5920  [ 44101F495A83EA6401D886E7FD70096B ] RasSstp        C:\windows\system32\DRIVERS\rassstp.sys
17:38:19.0786 5920  RasSstp - ok
17:38:19.0833 5920  [ D528BC58A489409BA40334EBF96A311B ] rdbss          C:\windows\system32\DRIVERS\rdbss.sys
17:38:19.0926 5920  rdbss - ok
17:38:19.0942 5920  [ 0D8F05481CB76E70E1DA06EE9F0DA9DF ] rdpbus          C:\windows\system32\DRIVERS\rdpbus.sys
17:38:19.0989 5920  rdpbus - ok
17:38:20.0035 5920  [ 23DAE03F29D253AE74C44F99E515F9A1 ] RDPCDD          C:\windows\system32\DRIVERS\RDPCDD.sys
17:38:20.0098 5920  RDPCDD - ok
17:38:20.0129 5920  [ 5A53CA1598DD4156D44196D200C94B8A ] RDPENCDD        C:\windows\system32\drivers\rdpencdd.sys
17:38:20.0238 5920  RDPENCDD - ok
17:38:20.0254 5920  [ 44B0A53CD4F27D50ED461DAE0C0B4E1F ] RDPREFMP        C:\windows\system32\drivers\rdprefmp.sys
17:38:20.0316 5920  RDPREFMP - ok
17:38:20.0379 5920  [ F031683E6D1FEA157ABB2FF260B51E61 ] RDPWD          C:\windows\system32\drivers\RDPWD.sys
17:38:20.0457 5920  RDPWD - ok
17:38:20.0519 5920  [ 518395321DC96FE2C9F0E96AC743B656 ] rdyboost        C:\windows\system32\drivers\rdyboost.sys
17:38:20.0566 5920  rdyboost - ok
17:38:20.0613 5920  [ 7B5E1419717FAC363A31CC302895217A ] RemoteAccess    C:\windows\System32\mprdim.dll
17:38:20.0706 5920  RemoteAccess - ok
17:38:20.0753 5920  [ CB9A8683F4EF2BF99E123D79950D7935 ] RemoteRegistry  C:\windows\system32\regsvc.dll
17:38:20.0847 5920  RemoteRegistry - ok
17:38:20.0878 5920  [ CB928D9E6DAF51879DD6BA8D02F01321 ] RFCOMM          C:\windows\system32\DRIVERS\rfcomm.sys
17:38:20.0940 5920  RFCOMM - ok
17:38:20.0956 5920  [ 78D072F35BC45D9E4E1B61895C152234 ] RpcEptMapper    C:\windows\System32\RpcEpMap.dll
17:38:21.0049 5920  RpcEptMapper - ok
17:38:21.0096 5920  [ 94D36C0E44677DD26981D2BFEEF2A29D ] RpcLocator      C:\windows\system32\locator.exe
17:38:21.0159 5920  RpcLocator - ok
17:38:21.0190 5920  [ 7660F01D3B38ACA1747E397D21D790AF ] RpcSs          C:\windows\system32\rpcss.dll
17:38:21.0252 5920  RpcSs - ok
17:38:21.0315 5920  [ 032B0D36AD92B582D869879F5AF5B928 ] rspndr          C:\windows\system32\DRIVERS\rspndr.sys
17:38:21.0393 5920  rspndr - ok
17:38:21.0408 5920  [ 81951F51E318AECC2D68559E47485CC4 ] SamSs          C:\windows\system32\lsass.exe
17:38:21.0439 5920  SamSs - ok
17:38:21.0486 5920  [ 05D860DA1040F111503AC416CCEF2BCA ] sbp2port        C:\windows\system32\drivers\sbp2port.sys
17:38:21.0533 5920  sbp2port - ok
17:38:21.0564 5920  [ 8FC518FFE9519C2631D37515A68009C4 ] SCardSvr        C:\windows\System32\SCardSvr.dll
17:38:21.0658 5920  SCardSvr - ok
17:38:21.0705 5920  [ 0693B5EC673E34DC147E195779A4DCF6 ] scfilter        C:\windows\system32\DRIVERS\scfilter.sys
17:38:21.0767 5920  scfilter - ok
17:38:21.0829 5920  [ A04BB13F8A72F8B6E8B4071723E4E336 ] Schedule        C:\windows\system32\schedsvc.dll
17:38:21.0970 5920  Schedule - ok
17:38:21.0985 5920  [ 319C6B309773D063541D01DF8AC6F55F ] SCPolicySvc    C:\windows\System32\certprop.dll
17:38:22.0048 5920  SCPolicySvc - ok
17:38:22.0095 5920  [ 08236C4BCE5EDD0A0318A438AF28E0F7 ] SDRSVC          C:\windows\System32\SDRSVC.dll
17:38:22.0173 5920  SDRSVC - ok
17:38:22.0204 5920  [ 90A3935D05B494A5A39D37E71F09A677 ] secdrv          C:\windows\system32\drivers\secdrv.sys
17:38:22.0297 5920  secdrv - ok
17:38:22.0344 5920  [ A59B3A4442C52060CC7A85293AA3546F ] seclogon        C:\windows\system32\seclogon.dll
17:38:22.0438 5920  seclogon - ok
17:38:22.0500 5920  [ DCB7FCDCC97F87360F75D77425B81737 ] SENS            C:\windows\System32\sens.dll
17:38:22.0594 5920  SENS - ok
17:38:22.0609 5920  [ 50087FE1EE447009C9CC2997B90DE53F ] SensrSvc        C:\windows\system32\sensrsvc.dll
17:38:22.0703 5920  SensrSvc - ok
17:38:22.0734 5920  [ 9AD8B8B515E3DF6ACD4212EF465DE2D1 ] Serenum        C:\windows\system32\DRIVERS\serenum.sys
17:38:22.0797 5920  Serenum - ok
17:38:22.0828 5920  [ 5FB7FCEA0490D821F26F39CC5EA3D1E2 ] Serial          C:\windows\system32\DRIVERS\serial.sys
17:38:22.0875 5920  Serial - ok
17:38:22.0890 5920  [ 79BFFB520327FF916A582DFEA17AA813 ] sermouse        C:\windows\system32\DRIVERS\sermouse.sys
17:38:22.0953 5920  sermouse - ok
17:38:22.0999 5920  [ 4AE380F39A0032EAB7DD953030B26D28 ] SessionEnv      C:\windows\system32\sessenv.dll
17:38:23.0109 5920  SessionEnv - ok
17:38:23.0155 5920  [ 9F976E1EB233DF46FCE808D9DEA3EB9C ] sffdisk        C:\windows\system32\drivers\sffdisk.sys
17:38:23.0233 5920  sffdisk - ok
17:38:23.0249 5920  [ 932A68EE27833CFD57C1639D375F2731 ] sffp_mmc        C:\windows\system32\drivers\sffp_mmc.sys
17:38:23.0296 5920  sffp_mmc - ok
17:38:23.0311 5920  [ A0708BBD07D245C06FF9DE549CA47185 ] sffp_sd        C:\windows\system32\drivers\sffp_sd.sys
17:38:23.0374 5920  sffp_sd - ok
17:38:23.0389 5920  [ DB96666CC8312EBC45032F30B007A547 ] sfloppy        C:\windows\system32\DRIVERS\sfloppy.sys
17:38:23.0452 5920  sfloppy - ok
17:38:23.0499 5920  [ D9B734638DD8DBA9D59AAD3189CD0FAD ] Sftfs          C:\windows\system32\DRIVERS\Sftfslh.sys
17:38:23.0592 5920  Sftfs - ok
17:38:23.0639 5920  [ CB73BC422C07FB611F194DA18D1E7F36 ] sftlist        C:\Program Files\Microsoft Application Virtualization Client\sftlist.exe
17:38:23.0701 5920  sftlist - ok
17:38:23.0733 5920  [ 2F61BD46C0BFF4EB36E1E359CA17BFC5 ] Sftplay        C:\windows\system32\DRIVERS\Sftplaylh.sys
17:38:23.0779 5920  Sftplay - ok
17:38:23.0795 5920  [ 518BAC0179F94304F422696B47C0EC12 ] Sftredir        C:\windows\system32\DRIVERS\Sftredirlh.sys
17:38:23.0826 5920  Sftredir - ok
17:38:23.0842 5920  [ 747325236D88B3F05FFD27FF9EC711C5 ] Sftvol          C:\windows\system32\DRIVERS\Sftvollh.sys
17:38:23.0873 5920  Sftvol - ok
17:38:23.0904 5920  [ A5812F0281CA5081BF696626F9BF324D ] sftvsa          C:\Program Files\Microsoft Application Virtualization Client\sftvsa.exe
17:38:23.0951 5920  sftvsa - ok
17:38:23.0998 5920  [ D1A079A0DE2EA524513B6930C24527A2 ] SharedAccess    C:\windows\System32\ipnathlp.dll
17:38:24.0107 5920  SharedAccess - ok
17:38:24.0154 5920  [ 414DA952A35BF5D50192E28263B40577 ] ShellHWDetection C:\windows\System32\shsvcs.dll
17:38:24.0263 5920  ShellHWDetection - ok
17:38:24.0294 5920  [ 2565CAC0DC9FE0371BDCE60832582B2E ] sisagp          C:\windows\system32\drivers\sisagp.sys
17:38:24.0325 5920  sisagp - ok
17:38:24.0372 5920  [ A9F0486851BECB6DDA1D89D381E71055 ] SiSRaid2        C:\windows\system32\DRIVERS\SiSRaid2.sys
17:38:24.0419 5920  SiSRaid2 - ok
17:38:24.0435 5920  [ 3727097B55738E2F554972C3BE5BC1AA ] SiSRaid4        C:\windows\system32\DRIVERS\sisraid4.sys
17:38:24.0481 5920  SiSRaid4 - ok
17:38:24.0528 5920  [ 3E21C083B8A01CB70BA1F09303010FCE ] Smb            C:\windows\system32\DRIVERS\smb.sys
17:38:24.0606 5920  Smb - ok
17:38:24.0669 5920  [ 6A984831644ECA1A33FFEAE4126F4F37 ] SNMPTRAP        C:\windows\System32\snmptrap.exe
17:38:24.0747 5920  SNMPTRAP - ok
17:38:24.0778 5920  [ 95CF1AE7527FB70F7816563CBC09D942 ] spldr          C:\windows\system32\drivers\spldr.sys
17:38:24.0809 5920  spldr - ok
17:38:24.0871 5920  [ 9AEA093B8F9C37CF45538382CABA2475 ] Spooler        C:\windows\System32\spoolsv.exe
17:38:24.0981 5920  Spooler - ok
17:38:25.0105 5920  [ CF87A1DE791347E75B98885214CED2B8 ] sppsvc          C:\windows\system32\sppsvc.exe
17:38:25.0277 5920  sppsvc - ok
17:38:25.0339 5920  [ B0180B20B065D89232A78A40FE56EAA6 ] sppuinotify    C:\windows\system32\sppuinotify.dll
17:38:25.0433 5920  sppuinotify - ok
17:38:25.0480 5920  [ E4C2764065D66EA1D2D3EBC28FE99C46 ] srv            C:\windows\system32\DRIVERS\srv.sys
17:38:25.0573 5920  srv - ok
17:38:25.0605 5920  [ 03F0545BD8D4C77FA0AE1CEEDFCC71AB ] srv2            C:\windows\system32\DRIVERS\srv2.sys
17:38:25.0683 5920  srv2 - ok
17:38:25.0714 5920  [ BE6BD660CAA6F291AE06A718A4FA8ABC ] srvnet          C:\windows\system32\DRIVERS\srvnet.sys
17:38:25.0776 5920  srvnet - ok
17:38:25.0823 5920  [ D887C9FD02AC9FA880F6E5027A43E118 ] SSDPSRV        C:\windows\System32\ssdpsrv.dll
17:38:25.0917 5920  SSDPSRV - ok
17:38:25.0963 5920  [ A36EE93698802CD899F98BFD553D8185 ] ssmdrv          C:\windows\system32\DRIVERS\ssmdrv.sys
17:38:25.0995 5920  ssmdrv - ok
17:38:26.0026 5920  [ D318F23BE45D5E3A107469EB64815B50 ] SstpSvc        C:\windows\system32\sstpsvc.dll
17:38:26.0119 5920  SstpSvc - ok
17:38:26.0151 5920  [ DB32D325C192B801DF274BFD12A7E72B ] stexstor        C:\windows\system32\DRIVERS\stexstor.sys
17:38:26.0182 5920  stexstor - ok
17:38:26.0244 5920  [ E1FB3706030FB4578A0D72C2FC3689E4 ] StiSvc          C:\windows\System32\wiaservc.dll
17:38:26.0353 5920  StiSvc - ok
17:38:26.0400 5920  [ E58C78A848ADD9610A4DB6D214AF5224 ] swenum          C:\windows\system32\drivers\swenum.sys
17:38:26.0431 5920  swenum - ok
17:38:26.0478 5920  [ A28BD92DF340E57B024BA433165D34D7 ] swprv          C:\windows\System32\swprv.dll
17:38:26.0587 5920  swprv - ok
17:38:26.0619 5920  [ BD8E7F87DE409A745A132A8812DE5A96 ] SynTP          C:\windows\system32\DRIVERS\SynTP.sys
17:38:26.0681 5920  SynTP - ok
17:38:26.0743 5920  [ 36650D618CA34C9D357DFD3D89B2C56F ] SysMain        C:\windows\system32\sysmain.dll
17:38:26.0837 5920  SysMain - ok
17:38:26.0884 5920  [ 763FECDC3D30C815FE72DD57936C6CD1 ] TabletInputService C:\windows\System32\TabSvc.dll
17:38:26.0931 5920  TabletInputService - ok
17:38:26.0977 5920  [ 613BF4820361543956909043A265C6AC ] TapiSrv        C:\windows\System32\tapisrv.dll
17:38:27.0055 5920  TapiSrv - ok
17:38:27.0102 5920  [ B799D9FDB26111737F58288D8DC172D9 ] TBS            C:\windows\System32\tbssvc.dll
17:38:27.0180 5920  TBS - ok
17:38:27.0274 5920  [ 7C0507D2391AF5933600CBCED799F277 ] Tcpip          C:\windows\system32\drivers\tcpip.sys
17:38:27.0430 5920  Tcpip - ok
17:38:27.0492 5920  [ 7C0507D2391AF5933600CBCED799F277 ] TCPIP6          C:\windows\system32\DRIVERS\tcpip.sys
17:38:27.0570 5920  TCPIP6 - ok
17:38:27.0617 5920  [ 3EEBD3BD93DA46A26E89893C7AB2FF3B ] tcpipreg        C:\windows\system32\drivers\tcpipreg.sys
17:38:27.0679 5920  tcpipreg - ok
17:38:27.0726 5920  [ 1CB91B2BD8F6DD367DFC2EF26FD751B2 ] TDPIPE          C:\windows\system32\drivers\tdpipe.sys
17:38:27.0789 5920  TDPIPE - ok
17:38:27.0820 5920  [ 2C2C5AFE7EE4F620D69C23C0617651A8 ] TDTCP          C:\windows\system32\drivers\tdtcp.sys
17:38:27.0851 5920  TDTCP - ok
17:38:27.0898 5920  [ B459575348C20E8121D6039DA063C704 ] tdx            C:\windows\system32\DRIVERS\tdx.sys
17:38:27.0991 5920  tdx - ok
17:38:28.0023 5920  [ 04DBF4B01EA4BF25A9A3E84AFFAC9B20 ] TermDD          C:\windows\system32\drivers\termdd.sys
17:38:28.0069 5920  TermDD - ok
17:38:28.0116 5920  [ 382C804C92811BE57829D8E550A900E2 ] TermService    C:\windows\System32\termsrv.dll
17:38:28.0241 5920  TermService - ok
17:38:28.0272 5920  [ 42FB6AFD6B79D9FE07381609172E7CA4 ] Themes          C:\windows\system32\themeservice.dll
17:38:28.0335 5920  Themes - ok
17:38:28.0366 5920  [ 146B6F43A673379A3C670E86D89BE5EA ] THREADORDER    C:\windows\system32\mmcss.dll
17:38:28.0428 5920  THREADORDER - ok
17:38:28.0444 5920  [ 4792C0378DB99A9BC2AE2DE6CFFF0C3A ] TrkWks          C:\windows\System32\trkwks.dll
17:38:28.0553 5920  TrkWks - ok
17:38:28.0631 5920  [ 2C49B175AEE1D4364B91B531417FE583 ] TrustedInstaller C:\windows\servicing\TrustedInstaller.exe
17:38:28.0709 5920  TrustedInstaller - ok
17:38:28.0740 5920  [ 254BB140EEE3C59D6114C1A86B636877 ] tssecsrv        C:\windows\system32\DRIVERS\tssecsrv.sys
17:38:28.0849 5920  tssecsrv - ok
17:38:28.0912 5920  [ FD1D6C73E6333BE727CBCC6054247654 ] TsUsbFlt        C:\windows\system32\drivers\tsusbflt.sys
17:38:28.0990 5920  TsUsbFlt - ok
17:38:29.0052 5920  [ B2FA25D9B17A68BB93D58B0556E8C90D ] tunnel          C:\windows\system32\DRIVERS\tunnel.sys
17:38:29.0130 5920  tunnel - ok
17:38:29.0161 5920  [ 750FBCB269F4D7DD2E420C56B795DB6D ] uagp35          C:\windows\system32\DRIVERS\uagp35.sys
17:38:29.0208 5920  uagp35 - ok
17:38:29.0255 5920  [ EE43346C7E4B5E63E54F927BABBB32FF ] udfs            C:\windows\system32\DRIVERS\udfs.sys
17:38:29.0364 5920  udfs - ok
17:38:29.0442 5920  [ 8344FD4FCE927880AA1AA7681D4927E5 ] UI0Detect      C:\windows\system32\UI0Detect.exe
17:38:29.0505 5920  UI0Detect - ok
17:38:29.0551 5920  [ 44E8048ACE47BEFBFDC2E9BE4CBC8880 ] uliagpkx        C:\windows\system32\drivers\uliagpkx.sys
17:38:29.0614 5920  uliagpkx - ok
17:38:29.0661 5920  [ D295BED4B898F0FD999FCFA9B32B071B ] umbus          C:\windows\system32\drivers\umbus.sys
17:38:29.0739 5920  umbus - ok
17:38:29.0785 5920  [ 7550AD0C6998BA1CB4843E920EE0FEAC ] UmPass          C:\windows\system32\DRIVERS\umpass.sys
17:38:29.0817 5920  UmPass - ok
17:38:29.0863 5920  [ 833FBB672460EFCE8011D262175FAD33 ] upnphost        C:\windows\System32\upnphost.dll
17:38:29.0973 5920  upnphost - ok
17:38:30.0051 5920  [ EAFE1E00739AFE6C51487A050E772E17 ] USBAAPL        C:\windows\system32\Drivers\usbaapl.sys
17:38:30.0082 5920  USBAAPL ( UnsignedFile.Multi.Generic ) - warning
17:38:30.0082 5920  USBAAPL - detected UnsignedFile.Multi.Generic (1)
17:38:30.0144 5920  [ BD9C55D7023C5DE374507ACC7A14E2AC ] usbccgp        C:\windows\system32\DRIVERS\usbccgp.sys
17:38:30.0222 5920  usbccgp - ok
17:38:30.0285 5920  [ 04EC7CEC62EC3B6D9354EEE93327FC82 ] usbcir          C:\windows\system32\drivers\usbcir.sys
17:38:30.0331 5920  usbcir - ok
17:38:30.0363 5920  [ F92DE757E4B7CE9C07C5E65423F3AE3B ] usbehci        C:\windows\system32\drivers\usbehci.sys
17:38:30.0409 5920  usbehci - ok
17:38:30.0456 5920  [ 8DC94AEC6A7E644A06135AE7506DC2E9 ] usbhub          C:\windows\system32\DRIVERS\usbhub.sys
17:38:30.0534 5920  usbhub - ok
17:38:30.0581 5920  [ A6FB7957EA7AFB1165991E54CE934B74 ] usbohci        C:\windows\system32\drivers\usbohci.sys
17:38:30.0690 5920  usbohci - ok
17:38:30.0706 5920  [ 797D862FE0875E75C7CC4C1AD7B30252 ] usbprint        C:\windows\system32\DRIVERS\usbprint.sys
17:38:30.0768 5920  usbprint - ok
17:38:30.0831 5920  [ 576096CCBC07E7C4EA4F5E6686D6888F ] usbscan        C:\windows\system32\DRIVERS\usbscan.sys
17:38:30.0877 5920  usbscan - ok
17:38:30.0909 5920  [ F991AB9CC6B908DB552166768176896A ] USBSTOR        C:\windows\system32\DRIVERS\USBSTOR.SYS
17:38:30.0987 5920  USBSTOR - ok
17:38:31.0033 5920  [ 68DF884CF41CDADA664BEB01DAF67E3D ] usbuhci        C:\windows\system32\drivers\usbuhci.sys
17:38:31.0080 5920  usbuhci - ok
17:38:31.0158 5920  [ 45F4E7BF43DB40A6C6B4D92C76CBC3F2 ] usbvideo        C:\windows\System32\Drivers\usbvideo.sys
17:38:31.0236 5920  usbvideo - ok
17:38:31.0283 5920  [ 081E6E1C91AEC36758902A9F727CD23C ] UxSms          C:\windows\System32\uxsms.dll
17:38:31.0377 5920  UxSms - ok
17:38:31.0408 5920  [ 81951F51E318AECC2D68559E47485CC4 ] VaultSvc        C:\windows\system32\lsass.exe
17:38:31.0425 5920  VaultSvc - ok
17:38:31.0488 5920  [ A059C4C3EDB09E07D21A8E5C0AABD3CB ] vdrvroot        C:\windows\system32\drivers\vdrvroot.sys
17:38:31.0545 5920  vdrvroot - ok
17:38:31.0591 5920  [ C3CD30495687C2A2F66A65CA6FD89BE9 ] vds            C:\windows\System32\vds.exe
17:38:31.0710 5920  vds - ok
17:38:31.0745 5920  [ 17C408214EA61696CEC9C66E388B14F3 ] vga            C:\windows\system32\DRIVERS\vgapnp.sys
17:38:31.0804 5920  vga - ok
17:38:31.0834 5920  [ 8E38096AD5C8570A6F1570A61E251561 ] VgaSave        C:\windows\System32\drivers\vga.sys
17:38:31.0913 5920  VgaSave - ok
17:38:31.0968 5920  [ 5461686CCA2FDA57B024547733AB42E3 ] vhdmp          C:\windows\system32\drivers\vhdmp.sys
17:38:32.0020 5920  vhdmp - ok
17:38:32.0049 5920  [ C829317A37B4BEA8F39735D4B076E923 ] viaagp          C:\windows\system32\drivers\viaagp.sys
17:38:32.0108 5920  viaagp - ok
17:38:32.0136 5920  [ E02F079A6AA107F06B16549C6E5C7B74 ] ViaC7          C:\windows\system32\DRIVERS\viac7.sys
17:38:32.0197 5920  ViaC7 - ok
17:38:32.0261 5920  [ E43574F6A56A0EE11809B48C09E4FD3C ] viaide          C:\windows\system32\drivers\viaide.sys
17:38:32.0299 5920  viaide - ok
17:38:32.0371 5920  [ 8719BCFBAA239CCDAA3054973661F3E6 ] VMCService      C:\Program Files\Vodafone\Vodafone Mobile Connect\Bin\VMCService.exe
17:38:32.0386 5920  VMCService ( UnsignedFile.Multi.Generic ) - warning
17:38:32.0386 5920  VMCService - detected UnsignedFile.Multi.Generic (1)
17:38:32.0407 5920  [ 4C63E00F2F4B5F86AB48A58CD990F212 ] volmgr          C:\windows\system32\drivers\volmgr.sys
17:38:32.0448 5920  volmgr - ok
17:38:32.0493 5920  [ B5BB72067DDDDBBFB04B2F89FF8C3C87 ] volmgrx        C:\windows\system32\drivers\volmgrx.sys
17:38:32.0551 5920  volmgrx - ok
17:38:32.0567 5920  [ F497F67932C6FA693D7DE2780631CFE7 ] volsnap        C:\windows\system32\drivers\volsnap.sys
17:38:32.0629 5920  volsnap - ok
17:38:32.0676 5920  [ 9DFA0CC2F8855A04816729651175B631 ] vsmraid        C:\windows\system32\DRIVERS\vsmraid.sys
17:38:32.0723 5920  vsmraid - ok
17:38:32.0801 5920  [ 209A3B1901B83AEB8527ED211CCE9E4C ] VSS            C:\windows\system32\vssvc.exe
17:38:32.0925 5920  VSS - ok
17:38:32.0957 5920  [ 90567B1E658001E79D7C8BBD3DDE5AA6 ] vwifibus        C:\windows\system32\DRIVERS\vwifibus.sys
17:38:33.0003 5920  vwifibus - ok
17:38:33.0050 5920  [ 7090D3436EEB4E7DA3373090A23448F7 ] vwififlt        C:\windows\system32\DRIVERS\vwififlt.sys
17:38:33.0113 5920  vwififlt - ok
17:38:33.0128 5920  [ A3F04CBEA6C2A10E6CB01F8B47611882 ] vwifimp        C:\windows\system32\DRIVERS\vwifimp.sys
17:38:33.0175 5920  vwifimp - ok
17:38:33.0222 5920  [ 55187FD710E27D5095D10A472C8BAF1C ] W32Time        C:\windows\system32\w32time.dll
17:38:33.0362 5920  W32Time - ok
17:38:33.0393 5920  [ DE3721E89C653AA281428C8A69745D90 ] WacomPen        C:\windows\system32\DRIVERS\wacompen.sys
17:38:33.0440 5920  WacomPen - ok
17:38:33.0503 5920  [ 3C3C78515F5AB448B022BDF5B8FFDD2E ] WANARP          C:\windows\system32\DRIVERS\wanarp.sys
17:38:33.0581 5920  WANARP - ok
17:38:33.0581 5920  [ 3C3C78515F5AB448B022BDF5B8FFDD2E ] Wanarpv6        C:\windows\system32\DRIVERS\wanarp.sys
17:38:33.0643 5920  Wanarpv6 - ok
17:38:33.0705 5920  [ 691E3285E53DCA558E1A84667F13E15A ] wbengine        C:\windows\system32\wbengine.exe
17:38:33.0893 5920  wbengine - ok
17:38:33.0924 5920  [ 9614B5D29DC76AC3C29F6D2D3AA70E67 ] WbioSrvc        C:\windows\System32\wbiosrvc.dll
17:38:33.0986 5920  WbioSrvc - ok
17:38:34.0033 5920  [ 34EEE0DFAADB4F691D6D5308A51315DC ] wcncsvc        C:\windows\System32\wcncsvc.dll
17:38:34.0095 5920  wcncsvc - ok
17:38:34.0127 5920  [ 5D930B6357A6D2AF4D7653BDABBF352F ] WcsPlugInService C:\windows\System32\WcsPlugInService.dll
17:38:34.0189 5920  WcsPlugInService - ok
17:38:34.0220 5920  [ 1112A9BADACB47B7C0BB0392E3158DFF ] Wd              C:\windows\system32\DRIVERS\wd.sys
17:38:34.0283 5920  Wd - ok
17:38:34.0345 5920  [ A840213F1ACDCC175B4D1D5AAEAC0D7A ] Wdf01000        C:\windows\system32\drivers\Wdf01000.sys
17:38:34.0439 5920  Wdf01000 - ok
17:38:34.0470 5920  [ 46EF9DC96265FD0B423DB72E7C38C2A5 ] WdiServiceHost  C:\windows\system32\wdi.dll
17:38:34.0579 5920  WdiServiceHost - ok
17:38:34.0595 5920  [ 46EF9DC96265FD0B423DB72E7C38C2A5 ] WdiSystemHost  C:\windows\system32\wdi.dll
17:38:34.0641 5920  WdiSystemHost - ok
17:38:34.0688 5920  [ A9D880F97530D5B8FEE278923349929D ] WebClient      C:\windows\System32\webclnt.dll
17:38:34.0782 5920  WebClient - ok
17:38:34.0797 5920  [ 760F0AFE937A77CFF27153206534F275 ] Wecsvc          C:\windows\system32\wecsvc.dll
17:38:34.0891 5920  Wecsvc - ok
17:38:34.0907 5920  [ AC804569BB2364FB6017370258A4091B ] wercplsupport  C:\windows\System32\wercplsupport.dll
17:38:34.0985 5920  wercplsupport - ok
17:38:35.0000 5920  [ 08E420D873E4FD85241EE2421B02C4A4 ] WerSvc          C:\windows\System32\WerSvc.dll
17:38:35.0125 5920  WerSvc - ok
17:38:35.0187 5920  [ 8B9A943F3B53861F2BFAF6C186168F79 ] WfpLwf          C:\windows\system32\DRIVERS\wfplwf.sys
17:38:35.0265 5920  WfpLwf - ok
17:38:35.0281 5920  [ 5CF95B35E59E2A38023836FFF31BE64C ] WIMMount        C:\windows\system32\drivers\wimmount.sys
17:38:35.0328 5920  WIMMount - ok
17:38:35.0406 5920  [ 3FAE8F94296001C32EAB62CD7D82E0FD ] WinDefend      C:\Program Files\Windows Defender\mpsvc.dll
17:38:35.0499 5920  WinDefend - ok
17:38:35.0531 5920  WinHttpAutoProxySvc - ok
17:38:35.0609 5920  [ F62E510B6AD4C21EB9FE8668ED251826 ] Winmgmt        C:\windows\system32\wbem\WMIsvc.dll
17:38:35.0718 5920  Winmgmt - ok
17:38:35.0780 5920  [ 1B91CD34EA3A90AB6A4EF0550174F4CC ] WinRM          C:\windows\system32\WsmSvc.dll
17:38:35.0936 5920  WinRM - ok
17:38:35.0999 5920  [ A67E5F9A400F3BD1BE3D80613B45F708 ] WinUsb          C:\windows\system32\DRIVERS\WinUsb.sys
17:38:36.0092 5920  WinUsb - ok
17:38:36.0139 5920  [ 16935C98FF639D185086A3529B1F2067 ] Wlansvc        C:\windows\System32\wlansvc.dll
17:38:36.0279 5920  Wlansvc - ok
17:38:36.0342 5920  [ 0217679B8FCA58714C3BF2726D2CA84E ] WmiAcpi        C:\windows\system32\drivers\wmiacpi.sys
17:38:36.0373 5920  WmiAcpi - ok
17:38:36.0420 5920  [ 6EB6B66517B048D87DC1856DDF1F4C3F ] wmiApSrv        C:\windows\system32\wbem\WmiApSrv.exe
17:38:36.0498 5920  wmiApSrv - ok
17:38:36.0591 5920  [ 3B40D3A61AA8C21B88AE57C58AB3122E ] WMPNetworkSvc  C:\Program Files\Windows Media Player\wmpnetwk.exe
17:38:36.0685 5920  WMPNetworkSvc - ok
17:38:36.0716 5920  [ A2F0EC770A92F2B3F9DE6D518E11409C ] WPCSvc          C:\windows\System32\wpcsvc.dll
17:38:36.0794 5920  WPCSvc - ok
17:38:36.0841 5920  [ AA53356D60AF47EACC85BC617A4F3F66 ] WPDBusEnum      C:\windows\system32\wpdbusenum.dll
17:38:36.0919 5920  WPDBusEnum - ok
17:38:36.0950 5920  [ 6DB3276587B853BF886B69528FDB048C ] ws2ifsl        C:\windows\system32\drivers\ws2ifsl.sys
17:38:37.0028 5920  ws2ifsl - ok
17:38:37.0059 5920  [ 6F5D49EFE0E7164E03AE773A3FE25340 ] wscsvc          C:\windows\System32\wscsvc.dll
17:38:37.0137 5920  wscsvc - ok
17:38:37.0153 5920  WSearch - ok
17:38:37.0262 5920  [ FC3EC24FCE372C89423E015A2AC1A31E ] wuauserv        C:\windows\system32\wuaueng.dll
17:38:37.0387 5920  wuauserv - ok
17:38:37.0434 5920  [ 06E6F32C8D0A3F66D956F57B43A2E070 ] WudfPf          C:\windows\system32\drivers\WudfPf.sys
17:38:37.0481 5920  WudfPf - ok
17:38:37.0527 5920  [ 867C301E8B790040AE9CF6486E8041DF ] WUDFRd          C:\windows\system32\DRIVERS\WUDFRd.sys
17:38:37.0605 5920  WUDFRd - ok
17:38:37.0637 5920  [ FE47B7BC8EA320C2D9B5E5BF6E303765 ] wudfsvc        C:\windows\System32\WUDFSvc.dll
17:38:37.0683 5920  wudfsvc - ok
17:38:37.0730 5920  [ 3C5E51C05BE9B56EAFF4E388C3AB25E4 ] WwanSvc        C:\windows\System32\wwansvc.dll
17:38:37.0839 5920  WwanSvc - ok
17:38:37.0902 5920  [ 86187FB5D81781501558F8742DEE4197 ] ZTEusbmdm6k    C:\windows\system32\DRIVERS\ZTEusbmdm6k.sys
17:38:37.0949 5920  ZTEusbmdm6k - ok
17:38:37.0964 5920  [ B7836CA4A95E12135E7E49FEC9C29F2A ] ZTEusbnet      C:\windows\system32\DRIVERS\ZTEusbnet.sys
17:38:38.0027 5920  ZTEusbnet - ok
17:38:38.0042 5920  [ 86187FB5D81781501558F8742DEE4197 ] ZTEusbnmea      C:\windows\system32\DRIVERS\ZTEusbnmea.sys
17:38:38.0073 5920  ZTEusbnmea - ok
17:38:38.0105 5920  [ 86187FB5D81781501558F8742DEE4197 ] ZTEusbser6k    C:\windows\system32\DRIVERS\ZTEusbser6k.sys
17:38:38.0151 5920  ZTEusbser6k - ok
17:38:38.0183 5920  [ 86187FB5D81781501558F8742DEE4197 ] ZTEusbvoice    C:\windows\system32\DRIVERS\ZTEusbvoice.sys
17:38:38.0214 5920  ZTEusbvoice - ok
17:38:38.0276 5920  ================ Scan global ===============================
17:38:38.0323 5920  [ DAB748AE0439955ED2FA22357533DDDB ] C:\windows\system32\basesrv.dll
17:38:38.0370 5920  [ 1F5F07091D50244F17DD8D5147A628CC ] C:\windows\system32\winsrv.dll
17:38:38.0417 5920  [ 1F5F07091D50244F17DD8D5147A628CC ] C:\windows\system32\winsrv.dll
17:38:38.0463 5920  [ 364455805E64882844EE9ACB72522830 ] C:\windows\system32\sxssrv.dll
17:38:38.0495 5920  [ 5F1B6A9C35D3D5CA72D6D6FDEF9747D6 ] C:\windows\system32\services.exe
17:38:38.0510 5920  [Global] - ok
17:38:38.0510 5920  ================ Scan MBR ==================================
17:38:38.0526 5920  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
17:38:38.0853 5920  \Device\Harddisk0\DR0 - ok
17:38:38.0853 5920  [ 8F558EB6672622401DA993E1E865C861 ] \Device\Harddisk1\DR2
17:38:38.0963 5920  \Device\Harddisk1\DR2 - ok
17:38:38.0963 5920  ================ Scan VBR ==================================
17:38:38.0994 5920  [ B1230583C8809E8CF810BBF5ED08AA4F ] \Device\Harddisk0\DR0\Partition1
17:38:38.0994 5920  \Device\Harddisk0\DR0\Partition1 - ok
17:38:39.0025 5920  [ E561D3855E7409F40C075F86402524CE ] \Device\Harddisk0\DR0\Partition2
17:38:39.0041 5920  \Device\Harddisk0\DR0\Partition2 - ok
17:38:39.0041 5920  [ 4068FC8DFCD917CABB0E4E754E9C441A ] \Device\Harddisk1\DR2\Partition1
17:38:39.0041 5920  \Device\Harddisk1\DR2\Partition1 - ok
17:38:39.0056 5920  ============================================================
17:38:39.0056 5920  Scan finished
17:38:39.0056 5920  ============================================================
17:38:39.0072 2908  Detected object count: 6
17:38:39.0072 2908  Actual detected object count: 6
17:38:50.0709 2908  AsusService ( UnsignedFile.Multi.Generic ) - skipped by user
17:38:50.0709 2908  AsusService ( UnsignedFile.Multi.Generic ) - User select action: Skip
17:38:50.0709 2908  ENI Server ( UnsignedFile.Multi.Generic ) - skipped by user
17:38:50.0709 2908  ENI Server ( UnsignedFile.Multi.Generic ) - User select action: Skip
17:38:50.0725 2908  Net Driver HPZ12 ( UnsignedFile.Multi.Generic ) - skipped by user
17:38:50.0725 2908  Net Driver HPZ12 ( UnsignedFile.Multi.Generic ) - User select action: Skip
17:38:50.0725 2908  Pml Driver HPZ12 ( UnsignedFile.Multi.Generic ) - skipped by user
17:38:50.0725 2908  Pml Driver HPZ12 ( UnsignedFile.Multi.Generic ) - User select action: Skip
17:38:50.0725 2908  USBAAPL ( UnsignedFile.Multi.Generic ) - skipped by user
17:38:50.0725 2908  USBAAPL ( UnsignedFile.Multi.Generic ) - User select action: Skip
17:38:50.0725 2908  VMCService ( UnsignedFile.Multi.Generic ) - skipped by user
17:38:50.0725 2908  VMCService ( UnsignedFile.Multi.Generic ) - User select action: Skip
17:38:53.0449 3372  Deinitialize success

markusg 09.06.2013 17:09
Hi,
Scan mit Combofix
WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link
  • WICHTIG: Speichere Combofix auf deinem Desktop.
  • Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.
  • Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.
  • Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!
  • Wenn Combofix fertig ist, wird es ein Logfile erstellen.
  • Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).
Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.

browni85 09.06.2013 18:10
Hier das Log von Combofix:

Code:
ComboFix 13-06-08.02 - Sven 09.06.2013  18:39:57.1.4 - x86
Microsoft Windows 7 Home Premium  6.1.7601.1.1252.49.1031.18.2038.1096 [GMT 2:00]
ausgeführt von:: c:\users\Sven\Desktop\ComboFix.exe
AV: Avira Desktop *Disabled/Outdated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
SP: Avira Desktop *Disabled/Outdated* {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((  Weitere Löschungen  ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\programdata\FullRemove.exe
c:\windows\system32\Thumbs.db
.
.
(((((((((((((((((((((((  Dateien erstellt von 2013-05-09 bis 2013-06-09  ))))))))))))))))))))))))))))))
.
.
2030-01-01 22:57 . 2012-05-14 16:34        --------        d-----w-        C:\Boot
2013-06-09 16:52 . 2013-06-09 16:52        --------        d-----w-        c:\users\Sven\AppData\Local\temp
2013-06-09 16:52 . 2013-06-09 16:52        --------        d-----w-        c:\users\UpdatusUser\AppData\Local\temp
2013-06-09 16:52 . 2013-06-09 16:52        --------        d-----w-        c:\users\Default\AppData\Local\temp
2013-06-09 14:40 . 2013-06-09 14:50        --------        d-----w-        C:\_OTL
2013-06-02 20:44 . 2013-06-02 20:44        --------        d-----w-        c:\program files\Common Files\Java
2013-06-02 20:44 . 2013-04-04 03:35        94112        ----a-w-        c:\windows\system32\WindowsAccessBridge.dll
2013-05-24 00:52 . 2013-03-19 04:53        186368        ----a-w-        c:\windows\system32\wwansvc.dll
2013-05-24 00:52 . 2013-03-19 03:33        40960        ----a-w-        c:\windows\system32\wwanprotdim.dll
2013-05-24 00:52 . 2013-04-10 03:14        2347520        ----a-w-        c:\windows\system32\win32k.sys
2013-05-24 00:52 . 2013-04-10 05:18        728424        ----a-w-        c:\windows\system32\drivers\dxgkrnl.sys
2013-05-24 00:52 . 2013-04-10 05:18        218984        ----a-w-        c:\windows\system32\drivers\dxgmms1.sys
2013-05-24 00:52 . 2013-02-27 05:05        101720        ----a-w-        c:\windows\system32\consent.exe
2013-05-24 00:52 . 2013-02-27 04:49        1796096        ----a-w-        c:\windows\system32\authui.dll
2013-05-24 00:52 . 2013-02-27 04:49        47104        ----a-w-        c:\windows\system32\appinfo.dll
2013-05-15 19:44 . 2013-05-15 19:44        --------        d-----w-        c:\users\Sven\AppData\Roaming\Red Kawa
2013-05-12 12:07 . 2013-05-12 12:07        --------        d-----w-        c:\users\Sven\AppData\Local\Geckofx
2013-05-12 12:07 . 2013-05-12 12:07        --------        d-----w-        c:\program files\AviSynth 2.5
2013-05-12 12:07 . 2013-05-12 12:07        --------        d-----w-        c:\program files\Red Kawa
.
.
.
((((((((((((((((((((((((((((((((((((  Find3M Bericht  ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-05-24 09:08 . 2012-06-12 11:05        71048        ----a-w-        c:\windows\system32\FlashPlayerCPLApp.cpl
2013-05-24 09:08 . 2012-06-12 11:05        692104        ----a-w-        c:\windows\system32\FlashPlayerApp.exe
2013-04-13 04:45 . 2013-05-24 00:52        474624        ----a-w-        c:\windows\apppatch\AcSpecfc.dll
2013-04-13 04:45 . 2013-05-24 00:52        2176512        ----a-w-        c:\windows\apppatch\AcGenral.dll
2013-04-12 13:45 . 2013-04-24 14:52        1211752        ----a-w-        c:\windows\system32\drivers\ntfs.sys
2013-03-22 20:38 . 2013-03-22 20:38        745472        ----a-w-        c:\windows\system32\MsSpellCheckingFacility.exe
2013-03-22 20:38 . 2013-03-22 20:38        185344        ----a-w-        c:\windows\system32\elshyph.dll
2013-03-22 20:38 . 2013-03-22 20:38        523264        ----a-w-        c:\windows\system32\vbscript.dll
2013-03-22 20:38 . 2013-03-22 20:38        158720        ----a-w-        c:\windows\system32\msls31.dll
2013-03-22 20:38 . 2013-03-22 20:38        150528        ----a-w-        c:\windows\system32\iexpress.exe
2013-03-22 20:38 . 2013-03-22 20:38        138752        ----a-w-        c:\windows\system32\wextract.exe
2013-03-22 20:38 . 2013-03-22 20:38        137216        ----a-w-        c:\windows\system32\ieUnatt.exe
2013-03-22 20:38 . 2013-03-22 20:38        73728        ----a-w-        c:\windows\system32\SetIEInstalledDate.exe
2013-03-22 20:38 . 2013-03-22 20:38        61952        ----a-w-        c:\windows\system32\tdc.ocx
2013-03-22 20:38 . 2013-03-22 20:38        48640        ----a-w-        c:\windows\system32\mshtmler.dll
2013-03-22 20:38 . 2013-03-22 20:38        38400        ----a-w-        c:\windows\system32\imgutil.dll
2013-03-22 20:38 . 2013-03-22 20:38        361984        ----a-w-        c:\windows\system32\html.iec
2013-03-22 20:38 . 2013-03-22 20:38        12800        ----a-w-        c:\windows\system32\mshta.exe
2013-03-22 20:38 . 2013-03-22 20:38        110592        ----a-w-        c:\windows\system32\IEAdvpack.dll
2013-03-22 20:38 . 2013-03-22 20:38        719360        ----a-w-        c:\windows\system32\mshtmlmedia.dll
2013-03-22 20:38 . 2013-03-22 20:38        23040        ----a-w-        c:\windows\system32\licmgr10.dll
2013-03-22 20:38 . 2013-03-22 20:38        1441280        ----a-w-        c:\windows\system32\inetcpl.cpl
2013-03-19 05:04 . 2013-04-13 16:13        3968856        ----a-w-        c:\windows\system32\ntkrnlpa.exe
2013-03-19 05:04 . 2013-04-13 16:13        3913560        ----a-w-        c:\windows\system32\ntoskrnl.exe
2013-03-19 04:48 . 2013-04-13 16:13        38912        ----a-w-        c:\windows\system32\csrsrv.dll
2013-03-19 02:49 . 2013-04-13 16:13        69632        ----a-w-        c:\windows\system32\smss.exe
2013-03-14 12:10 . 2012-07-02 08:13        861088        ----a-w-        c:\windows\system32\npdeployJava1.dll
2013-03-14 12:10 . 2011-10-25 20:30        782240        ----a-w-        c:\windows\system32\deployJava1.dll
2012-01-03 11:26 . 2011-12-12 21:53        121816        ----a-w-        c:\program files\mozilla firefox\components\browsercomps.dll
.
.
((((((((((((((((((((((((((((  Autostartpunkte der Registrierung  ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\AsusWSShellExt_B]
@="{CC5FC992-B0AA-47CD-9DC2-83445083CBB8}"
[HKEY_CLASSES_ROOT\CLSID\{CC5FC992-B0AA-47CD-9DC2-83445083CBB8}]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\AsusWSShellExt_O]
@="{618A47A2-528B-4D9A-AFC8-97D3233511E2}"
[HKEY_CLASSES_ROOT\CLSID\{618A47A2-528B-4D9A-AFC8-97D3233511E2}]
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Syncables"="c:\program files\syncables\syncables desktop\Syncables.exe" [2010-07-19 370480]
"Akamai NetSession Interface"="c:\users\Sven\AppData\Local\Akamai\netsession_win.exe" [2013-01-26 4480768]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IAAnotif"="c:\program files\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2009-06-05 186904]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2009-11-19 1594664]
"SynAsusAcpi"="c:\program files\Synaptics\SynTP\SynAsusAcpi.exe" [2009-11-19 83240]
"ASUS Screen Saver Protector"="c:\windows\AsScrPro.exe" [2010-09-16 3058304]
"UCam_Menu"="c:\program files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe" [2009-05-20 222504]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-02-28 35696]
"HotkeyMon"="AsusSender.exe" [2010-05-24 35304]
"HotkeyService"="AsusSender.exe" [2010-05-24 35304]
"SuperHybridEngine"="AsusSender.exe" [2010-05-24 35304]
"LiveUpdate"="AsusSender.exe" [2010-05-24 35304]
"CapsHook"="AsusSender.exe" [2010-05-24 35304]
"Eee Docking"="c:\program files\ASUS\Eee Docking\Eee Docking.exe" [2010-06-10 414384]
"GraphicsSwitch"="AsusSender.exe" [2010-05-24 35304]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2010-05-10 141848]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2010-05-10 173592]
"Persistence"="c:\windows\system32\igfxpers.exe" [2010-05-10 150552]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RtHDVCpl.exe" [2010-08-24 9722472]
"OOBESetup"="c:\program files\asus\OOBERegBackup\OOBERegBackup.exe" [2009-12-11 334848]
"Boingo Wi-Fi"="c:\program files\Boingo\Boingo Wi-Fi\Boingo.lnk" [2011-02-25 2429]
"ASUSPRP"="c:\program files\ASUS\APRP\APRP.EXE" [2010-09-16 2018032]
"BabylonToolbar"="c:\program files\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbarsrv.exe" [2010-11-07 286720]
"lxeamon.exe"="c:\program files\Lexmark S300-S400 Series\lxeamon.exe" [2010-05-05 770728]
"EzPrint"="c:\program files\Lexmark S300-S400 Series\ezprint.exe" [2010-05-05 148280]
"ENISysTray"="c:\program files\3S Software\CoDeSys ENI Server\ENISysTray.exe" [2009-01-20 245760]
"MobileConnect"="c:\program files\Vodafone\Vodafone Mobile Connect\Bin\MobileConnect.exe" [2010-03-25 2499584]
"ASUSWebStorage"="c:\program files\ASUS\ASUS WebStorage\3.0.108.222\AsusWSPanel.exe" [2011-07-29 737104]
"DivXUpdate"="c:\program files\DivX\DivX Update\DivXUpdate.exe" [2011-07-28 1259376]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2012-08-01 348664]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2013-03-12 253816]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
AsusVibeLauncher.lnk - c:\program files\ASUS\AsusVibe\AsusVibeLauncher.exe [2012-5-14 549040]
Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2010-5-21 828704]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\windows\System32\nvinit.dll
.
R2 AsusService;Asus Launcher Service;c:\windows\System32\AsusService.exe [2009-08-19 219136]
R2 BBSvc;BingBar Service;c:\program files\Microsoft\BingBar\7.1.391.0\BBSvc.exe [2012-06-11 193616]
R2 lxeaCATSCustConnectService;lxeaCATSCustConnectService;c:\windows\system32\spool\DRIVERS\W32X86\3\\lxeaserv.exe [2010-04-14 193192]
R3 btwampfl;Bluetooth AMP USB Filter;c:\windows\system32\drivers\btwampfl.sys [2010-05-21 293928]
R3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys [2010-05-21 33320]
R3 massfilter;ZTE Mass Storage Filter Driver;c:\windows\system32\DRIVERS\massfilter.sys [2009-08-18 9216]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 52224]
R3 ZTEusbnet;ZTE USB-NDIS miniport;c:\windows\system32\DRIVERS\ZTEusbnet.sys [2009-08-18 114688]
R3 ZTEusbvoice;ZTE VoUSB Port;c:\windows\system32\DRIVERS\ZTEusbvoice.sys [2009-08-18 105088]
S0 nvpciflt;nvpciflt;c:\windows\system32\DRIVERS\nvpciflt.sys [2010-08-04 19656]
S1 AsUpIO;AsUpIO;c:\windows\system32\drivers\AsUpIO.sys [2010-03-31 11520]
S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys [2012-04-16 36000]
S2 AntiVirSchedulerService;Avira Planer;c:\program files\Avira\AntiVir Desktop\sched.exe [2012-05-01 86224]
S2 cvhsvc;Client Virtualization Handler;c:\program files\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [2012-01-04 822624]
S2 ENI Server;ENI Server;c:\program files\3S Software\CoDeSys ENI Server\ENI.exe [2009-01-20 651264]
S2 hasplms;Sentinel HASP License Manager;c:\windows\system32\hasplms.exe  -run [x]
S2 lxea_device;lxea_device;c:\windows\system32\lxeacoms.exe [2010-04-14 598696]
S2 sftlist;Application Virtualization Client;c:\program files\Microsoft Application Virtualization Client\sftlist.exe [2011-10-01 508776]
S2 VMCService;Vodafone Mobile Connect Service;c:\program files\Vodafone\Vodafone Mobile Connect\Bin\VMCService.exe [2010-03-25 9216]
S3 BBUpdate;BBUpdate;c:\program files\Microsoft\BingBar\7.1.391.0\SeaPort.exe [2012-06-11 240208]
S3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C62x86.sys [2010-07-29 68208]
S3 Sftfs;Sftfs;c:\windows\system32\DRIVERS\Sftfslh.sys [2011-10-01 579944]
S3 Sftplay;Sftplay;c:\windows\system32\DRIVERS\Sftplaylh.sys [2011-10-01 194408]
S3 Sftredir;Sftredir;c:\windows\system32\DRIVERS\Sftredirlh.sys [2011-10-01 21864]
S3 Sftvol;Sftvol;c:\windows\system32\DRIVERS\Sftvollh.sys [2011-10-01 19304]
S3 sftvsa;Application Virtualization Service Agent;c:\program files\Microsoft Application Virtualization Client\sftvsa.exe [2011-10-01 219496]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*NewlyCreated* - 74013785
*Deregistered* - 74013785
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
HPZ12        REG_MULTI_SZ          Pml Driver HPZ12 Net Driver HPZ12
.
Inhalt des "geplante Tasks" Ordners
.
2013-06-09 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-06-12 09:08]
.
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = hxxp://search.babylon.com/?babsrc=HP_ss&mntrId=e4d8297d00000000000074f06db8c6b1&tlver=1.4.19.19&affID=17162
uInternet Settings,ProxyOverride = <local>
IE: An vorhandene PDF-Datei anfügen - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
IE: Linkziel an vorhandene PDF-Datei anhängen - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Linkziel in Adobe PDF konvertieren - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Send image to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Send page to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
FF - ProfilePath - c:\users\Sven\AppData\Roaming\Mozilla\Firefox\Profiles\b8l0ror2.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://www.google.de/
FF - prefs.js: keyword.URL - hxxp://search.babylon.com/?babsrc=SP_ss&mntrId=e4d8297d00000000000074f06db8c6b1&tlver=1.4.19.19&instlRef=&affID=17162&q=
FF - user.js: extensions.softonic_i.newTab - false
FF - user.js: extensions.softonic_i.tlbrSrchUrl - hxxp://search.softonic.com/MON00015/tb_v1?SearchSource=1&cc=&q=
FF - user.js: extensions.softonic_i.id - e4d8297d000000000000485d606de441
FF - user.js: extensions.softonic_i.instlDay - 15387
FF - user.js: extensions.softonic_i.vrsn - 1.5.11.5
FF - user.js: extensions.softonic_i.vrsni - 1.5.11.5
FF - user.js: extensions.softonic_i.vrsnTs - 1.5.11.518:28
FF - user.js: extensions.softonic_i.prtnrId - softonic
FF - user.js: extensions.softonic_i.prdct - softonic
FF - user.js: extensions.softonic_i.aflt - SD
FF - user.js: extensions.softonic_i.smplGrp - eng7
FF - user.js: extensions.softonic_i.tlbrId - de12JANdefault
FF - user.js: extensions.softonic_i.instlRef - MON00015
FF - user.js: extensions.softonic_i.dfltLng - de
FF - user.js: extensions.softonic_i.excTlbr - false
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Toolbar-Locked - (no file)
HKLM-Run-EeeSplendidAgent - c:\program files\ASUS\EPC\EeeSplendid\AsAgent.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\windows\\system32\\Macromed\\Flash\\FlashUtil32_11_7_700_202_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\windows\\system32\\Macromed\\Flash\\FlashUtil32_11_7_700_202_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2013-06-09  18:57:02
ComboFix-quarantined-files.txt  2013-06-09 16:57
.
Vor Suchlauf: 11 Verzeichnis(se), 21.525.082.112 Bytes frei
Nach Suchlauf: 17 Verzeichnis(se), 21.053.616.128 Bytes frei
.
- - End Of File - - BA02559899E938F4EFEC773ED9AB1531
A36C5E4F47E84449FF07ED3517B43A31

markusg 09.06.2013 18:45
Hi,
malwarebytes:
Downloade Dir bitte Malwarebytes
  • Installiere
    das Programm in den vorgegebenen Pfad.
    Vista und Win7 User mit Rechtsklick "als Administrator starten"
  • Starte Malwarebytes, klicke auf Aktualisierung --> Suche
    nach Aktualisierung
  • Wenn das Update beendet wurde, aktiviere vollständiger Scan durchführen und drücke auf Scannen.
  • Wenn der Scan beendet
    ist, klicke auf Ergebnisse anzeigen.
  • Versichere Dich, dass alle Funde markiert sind und drücke Entferne Auswahl.
  • Poste
    das Logfile, welches sich in Notepad öffnet, hier in den Thread.
  • Nachträglich kannst du den Bericht unter "Log Dateien" finden.

browni85 09.06.2013 20:29
Sorry, der Malwarebytes- Suchlauf arbeitet noch...

markusg 09.06.2013 20:30
lass solche zwischenposts bitte weg, poste das Log einfach, wenns da ist :-)
schau jetzt eh erst mal fußball und ess was.

browni85 09.06.2013 22:24
Komischer Weise ergab der Suchlauf keine Treffer. Konnte daher auch nichts entfernen.

Code:
Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2013.06.09.04

Windows 7 Service Pack 1 x86 NTFS
Internet Explorer 10.0.9200.16576
Sven :: SVENR-PC [Administrator]

09.06.2013 20:36:17
mbam-log-2013-06-09 (20-36-17).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|Q:\|)
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 408079
Laufzeit: 2 Stunde(n), 28 Minute(n), 47 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 0
(Keine bösartigen Objekte gefunden)

(Ende)

markusg 09.06.2013 22:32
lade den CCleaner standard:
CCleaner - Download - Filepony
falls der CCleaner
bereits instaliert, überspringen.
öffnen, Tools (extras),uninstall Llist, als txt speichern. öffnen.
hinter, jedes von dir benötigte programm, schreibe notwendig.
hinter, jedes, von dir nicht benötigte, unnötig.
hinter, dir unbekannte, unbekannt.
liste posten.

b

browni85 09.06.2013 23:35
Code:
ABBYY FineReader 6.0 Sprint        ABBYY Software House        05.07.2011        116MB        6.00.2146.41621        notwendig
Adobe AIR        Adobe Systems Inc.        16.09.2010                1.5.3.9130                            notwendig
Adobe Flash Player 11 ActiveX        Adobe Systems Incorporated        24.05.2013        6,00MB        11.7.700.202  notwenig
Adobe Flash Player 11 Plugin        Adobe Systems Incorporated        24.05.2013        6,00MB        11.7.700.202  notwendig
Adobe Reader 9.1 MUI        Adobe Systems Incorporated        15.09.2010        650MB        9.1.0                  notwendig
Adobe Shockwave Player 11.6        Adobe Systems, Inc.        17.02.2012                11.6.4.634            notwendig
Akamai NetSession Interface        Akamai Technologies, Inc        14.08.2012                              unbekannt
ASUS WebStorage        eCareme Technologies, Inc.        17.11.2011                3.0.108.222                    notwendig
ASUSUpdate for Eee PC        ASUSTeK Computer Inc.        26.02.2011                1.04.01                        notwendig
AsusVibe2.0        ASUSTEK        14.05.2012                2.0.9.157                                              notwendig
Atheros Client Installation Program        Atheros        15.09.2010                7.0                            notwendig
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver        Atheros Communications Inc.        15.09.2010                1.0.0.34    notwendig
Avira Free Antivirus        Avira        15.11.2012        124MB        12.1.9.1236                                    notwendig
AviSynth 2.5                12.05.2013                                                                      unbekannt
Babylon toolbar                02.03.2011                                                                      unnötig
Bing Bar        Microsoft Corporation        21.02.2013        464KB        7.1.391.0                              unnötig
Boingo Wi-Fi        Boingo Wireless, Inc.        25.02.2011        25,4MB        1.7.0048                              notwendig
Broadcom Wireless Network Adapter        AzureWave        15.09.2010                1.00.0000              notwendig
CapsHook        AsusTek Computer        15.09.2010                1.0.0.5                                notwendig
CCleaner        Piriform        24.05.2013                4.02                                          notwendig
CoDeSys for Automation Alliance        3S-Smart Software Solutions GmbH        17.10.2011                      notwendig
CyberLink YouCam        CyberLink Corp.        15.09.2010        55,9MB        2.0.3718a                              notwendig
DivX-Setup        DivX, LLC        23.11.2011                2.6.0.34                                      notwendig
Dr.Eee        Aibelive Co., Ltd.        25.02.2011        90,5MB        4.0.0.4                                        notwendig
ebi.BookReader3J        eBOOK Initiative Japan Co., Ltd.        15.09.2010        18,6MB        3.75.14        unbekannt
Eee Docking 3.8.1        ASUSTek Computer Inc.        15.09.2010                3.8.1                          notwendig
EeeSplendid        ASUS        15.09.2010                5.1.2.0011                                            notwendig
EPLAN Education 2.1        EPLAN Software & Service        24.02.2012        32,2MB        2.1.4.5325            notwendig
EPLAN License Client        EPLAN Software & Service        24.02.2012        31,6MB        9.1.6.10400            notwendig
EPLAN Platform 2.1        EPLAN Software & Service        24.02.2012        350MB        2.1.4.5325            notwendig
EPLAN Training Electric P8 Erste Schritte                16.02.2012                                      notwendig
EPLAN Trial Education Addon 2.1        EPLAN Software & Service        24.02.2012        3,99GB        2.1.4.5325    notwendig
FontResizer        ASUSTek        15.09.2010        2,12MB        1.01.0011                                              notwendig
Game Park Console        Oberon Media, Inc.        15.09.2010        19,6MB        6.2.0.3                        unbekannt
Hotkey Service        AsusTek Computer Inc.        15.09.2010                1.31                                  notwendig
Intel(R) Graphics Media Accelerator Driver        Intel Corporation        26.02.2011        54,2MB        8.14.10.2117        notwendig
Intel® Matrix Storage Manager        Intel Corporation        26.02.2011                                      unbekannt
Java 7 Update 21        Oracle        14.03.2013        129MB        7.0.210                                        unbekannt
Lexmark                05.07.2011                1.0.0.0                                                        notwendig
Lexmark S300-S400 Series        Lexmark International, Inc.        05.07.2011                              notwendig
Lexmark Symbolleiste                12.12.2011                4.63.37.0                                      notwendig
Lexmark Tools for Office                05.07.2011                1.29.0.0                              notwendig
LiveUpdate        AsusTek Computer Inc.        15.09.2010        20,2MB        1.22                                  notwendig
LocaleMe        ASUS        15.09.2010        14,6MB        1.3                                                    notwendig
LTspice IV                03.01.2012                                                                      notwendig
Malwarebytes Anti-Malware Version 1.75.0.1300        Malwarebytes Corporation        09.06.2013        19,2MB        1.75.0.1300  notwendig
Microsoft .NET Framework 4 Client Profile        Microsoft Corporation        05.03.2011        38,8MB        4.0.30319            notwendig
Microsoft .NET Framework 4 Client Profile DEU Language Pack        Microsoft Corporation        05.03.2011        2,93MB        4.0.30319    notwendig
Microsoft .NET Framework 4 Extended        Microsoft Corporation        24.02.2012        51,9MB        4.0.30319      notwendig
Microsoft Office 2010        Microsoft Corporation        15.09.2010        6,31MB        14.0.4763.1000                notwendig
Microsoft Office Klick-und-Los 2010        Microsoft Corporation        25.02.2011                14.0.4763.1000 notwendig
Microsoft Office Starter 2010 - Deutsch        Microsoft Corporation        25.02.2011                14.0.4763.1000 notwendig
Microsoft PowerPoint Viewer        Microsoft Corporation        13.12.2012        197MB        14.0.6029.1000        notwendig
Microsoft Silverlight        Microsoft Corporation        15.03.2013        202MB        5.1.20125.0                    unbekannt
Microsoft SQL Server 2005 Compact Edition [ENU]        Microsoft Corporation        25.02.2011        1,72MB        3.1.0000  notwendig
Microsoft Sync Framework Runtime Native v1.0 (x86)        Microsoft Corporation        25.02.2011        625KB        1.0.1215.0  notwendig
Microsoft Sync Framework Services Native v1.0 (x86)        Microsoft Corporation        25.02.2011        1,44MB        1.0.1215.0  notwendig
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053        Microsoft Corporation        24.01.2012        250KB        8.0.50727.4053  notwendig
Microsoft Visual C++ 2005 Redistributable        Microsoft Corporation        17.06.2011        300KB        8.0.61001  notwendig
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570        Microsoft Corporation        28.04.2011        598KB        9.0.30729.5570  notwendig
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148        Microsoft Corporation        25.02.2011        596KB        9.0.30729.4148  notwendig
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161        Microsoft Corporation        17.06.2011        600KB        9.0.30729.6161  notwendig
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219        Microsoft Corporation        16.05.2012        16,5MB        10.0.40219      notwendig
mkv2vob        3r1c        23.12.2012        10,1MB        2.4.9                                                          notwendig
Mozilla Firefox 9.0.1 (x86 de)        Mozilla        03.01.2012        36,9MB        9.0.1                                  notwendig
MSXML 4.0 SP2 (KB973688)        Microsoft Corporation        15.09.2010        1,34MB        4.20.9876.0            unbekannt
MSXML 4.0 SP3 Parser (KB2721691)        Microsoft Corporation        13.07.2012        1,53MB        4.30.2114.0    unbekannt
MSXML 4.0 SP3 Parser (KB2758694)        Microsoft Corporation        10.01.2013        1,54MB        4.30.2117.0    unbekannt
MSXML 4.0 SP3 Parser (KB973685)        Microsoft Corporation        15.09.2010        1,53MB        4.30.2107.0            unbekannt
NVIDIA Display Control Panel        NVIDIA Corporation        26.02.2011                6.14.12.5743          notwendig
NVIDIA Drivers        NVIDIA Corporation        07.11.2011        65,1MB        1.10.62.40                            notwendig
OOBERegBackup        ASUSTeK Computer Inc.        25.02.2011                                                      notwendig
PDFCreator        Frank Heindörfer, Philip Chinery        23.05.2012                1.3.2                  notwendig
Ralink RT2860 Wireless LAN Card        Ralink        15.09.2010                1.2.0.1                                notwendig
Realtek High Definition Audio Driver        Realtek Semiconductor Corp.        25.02.2011                6.0.1.6186  notwendig
ScreenSaverPatch        ASUSTeK Computer Inc.        25.02.2011                                              notwendig
Softonic toolbar  on IE and Chrome                17.02.2012                                              unnötig
sPlan 6.0 (Demo)                17.02.2012                                                              notwendig
sPlan 7.0 (Demo)                01.04.2012                                                              notwendig
Super Hybrid Engine        AsusTek Computer        15.09.2010                2.13                          notwendig
Synaptics Pointing Device Driver        Synaptics Incorporated        16.09.2010                14.0.16.0      notwendig
syncables desktop SE        syncables        15.09.2010        163MB        5.5.746.11492                          notwendig
Videora iPod touch Converter 6        Red Kawa        12.05.2013                6                              unnötig
VLC media player 2.0.0        VideoLAN        25.02.2012                2.0.0                                  notwendig
Vodafone Mobile Connect Lite        Vodafone        24.10.2011        33,9MB        9.4.9.22273                    unnötig
WEB.DE Club SmartFax        WEB.DE GmbH        23.02.2013                2.00.223                              notwendig
WIDCOMM Bluetooth Software        Broadcom Corporation        15.09.2010        118MB        6.3.0.5500            notwendig
Windows Live Anmelde-Assistent        Microsoft Corporation        25.02.2011        1,93MB        5.000.818.5            notwendig
Windows Live Essentials        Microsoft Corporation        25.02.2011                14.0.8089.0726                notwendig
Windows Live Sync        Microsoft Corporation        25.02.2011        2,79MB        14.0.8089.726                  notwendig
Windows Live-Uploadtool        Microsoft Corporation        25.02.2011        224KB        14.0.8014.1029                notwendig
WinRAR 4.10 (32-Bit)        win.rar GmbH        22.01.2012                4.10.0                                notwendig

markusg 09.06.2013 23:44
deinstaliere:
Adobe Flash Player alle
Adobe - Adobe Flash Player installieren
neueste version laden, instalieren.
adobe reader:
Adobe - Adobe Reader herunterladen - Alle Versionen
haken bei mcafee security scan raus nehmen
bitte auch mal den adobe reader wie folgt konfigurieren:
adobe reader öffnen, bearbeiten, voreinstellungen.
allgemein:
nur zertifizierte zusatz module verwenden, anhaken.
Sicherheit (erweitert)
Erweiterte Sicherheit anhaken
und alle Dateien auswählen.
internet:
hier sollte alles deaktiviert werden, es ist sehr unsicher pdfs automatisch zu öffnen, zu downloaden etc.
es ist immer besser diese direkt abzuspeichern da man nur so die kontrolle hat was auf dem pc vor geht.
bei javascript den haken bei java script verwenden raus nehmen
bei updater, automatisch instalieren wählen.
übernehmen /ok

deinstaliere:
AviSynth
Babylon
Bing
ebi
Mozilla Firefox : hilfe, update, aktuell ist version 22
Softonic
Videora
Vodafone

Öffne CCleaner, analysieren, starten, pc neustarten
Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

browni85 11.06.2013 20:09
Die Adobe Programme konnte ich noch nicht wieder installieren. Fehlermeldung: "Aktionsliste nicht gefunden". Denke das liegt daran, dass ich nicht mehr online bin. Trotz eingeschaltetem W-Lan geht der Laptop nicht mehr online. Firefox habe ich ebenfalls deinstalliert. Nun öffnet er ständig den Internet-Explorer selbstständig. Hier die Adw-Textdatei:

Code:
# AdwCleaner v2.303 - Datei am 11/06/2013 um 18:46:32 erstellt
# Aktualisiert am 08/06/2013 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (32 bits)
# Benutzer : Sven - SVENR-PC
# Bootmodus : Normal
# Ausgeführt unter : C:\Users\Sven\Desktop\adwcleaner.exe
# Option [Löschen]


**** [Dienste] ****


***** [Dateien / Ordner] *****

Datei Gelöscht : C:\Program Files\Mozilla Firefox\searchplugins\babylon.xml
Datei Gelöscht : C:\user.js
Datei Gelöscht : C:\Users\Public\Desktop\eBay.lnk
Datei Gelöscht : C:\Users\Sven\AppData\Roaming\Mozilla\Firefox\Profiles\b8l0ror2.default\searchplugins\Askcom.xml
Ordner Gelöscht : C:\ProgramData\Ask
Ordner Gelöscht : C:\Users\Sven\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb
Ordner Gelöscht : C:\Users\Sven\AppData\LocalLow\BabylonToolbar
Ordner Gelöscht : C:\Users\Sven\AppData\LocalLow\boost_interprocess
Ordner Gelöscht : C:\Users\Sven\AppData\Roaming\pdfforge

***** [Registrierungsdatenbank] *****

Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{1F096B29-E9DA-4D64-8D63-936BE7762CC5}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2EECD738-5844-4A99-B4B6-146BF802613B}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2EECD738-5844-4A99-B4B6-146BF802613B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{7ABBFE1C-E485-44AA-8F36-353751B4124D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{2EECD738-5844-4A99-B4B6-146BF802613B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{E46C8196-B634-44A1-AF6E-957C64278AB1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{9E393F82-2644-4AB6-B994-1AD39D6C59EE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\dhkplhfnhceodhffomolpfigojocbpcb
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\BabylonToolbarsrv_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\BabylonToolbarsrv_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\softonic_ggl_1_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\softonic_ggl_1_RASMANCS

***** [Internet Browser] *****

-\\ Internet Explorer v10.0.9200.16576

Ersetzt : [HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://search.babylon.com/?babsrc=HP_ss&mntrId=e4d8297d00000000000074f06db8c6b1&tlver=1.4.19.19&affID=17162 --> hxxp://www.google.com

-\\ Mozilla Firefox v [Version kann nicht ermittelt werden]

Datei : C:\Users\Sven\AppData\Roaming\Mozilla\Firefox\Profiles\b8l0ror2.default\prefs.js

C:\Users\Sven\AppData\Roaming\Mozilla\Firefox\Profiles\b8l0ror2.default\user.js ... Gelöscht !

Gelöscht : user_pref("browser.search.defaultengine", "Ask.com");
Gelöscht : user_pref("browser.search.defaultenginename", "Search the web (Babylon)");
Gelöscht : user_pref("browser.search.order.1", "Ask.com");
Gelöscht : user_pref("extensions.BabylonToolbar.aflt", "orgnl");
Gelöscht : user_pref("extensions.BabylonToolbar.bbDpng", 17);
Gelöscht : user_pref("extensions.BabylonToolbar.cntry", "DE");
Gelöscht : user_pref("extensions.BabylonToolbar.dfltLng", "DE");
Gelöscht : user_pref("extensions.BabylonToolbar.firstRun", false);
Gelöscht : user_pref("extensions.BabylonToolbar.hdrMd5", "70856BE9C8EAC7164BADFE42EB100152");
Gelöscht : user_pref("extensions.BabylonToolbar.lastActv", "3");
Gelöscht : user_pref("extensions.BabylonToolbar.lastDP", 17);
Gelöscht : user_pref("extensions.BabylonToolbar.lastVrsnTs", "");
Gelöscht : user_pref("extensions.BabylonToolbar.mntrFFxVrsn", "9.0");
Gelöscht : user_pref("extensions.BabylonToolbar.propectorlck", 86472763);
Gelöscht : user_pref("extensions.BabylonToolbar.prtkDS", 1);
Gelöscht : user_pref("extensions.BabylonToolbar.smplGrp", "free");
Gelöscht : user_pref("extensions.softonic.admin", false);
Gelöscht : user_pref("extensions.softonic.aflt", "SD");
Gelöscht : user_pref("extensions.softonic.cntry", "DE");
Gelöscht : user_pref("extensions.softonic.cv", "cv5");
Gelöscht : user_pref("extensions.softonic.dfltLng", "DE");
Gelöscht : user_pref("extensions.softonic.dfltSrch", false);
Gelöscht : user_pref("extensions.softonic.envrmnt", "production");
Gelöscht : user_pref("extensions.softonic.excTlbr", false);
Gelöscht : user_pref("extensions.softonic.hdrMd5", "9A8035514F3C958A9723BE6EDC95E34F");
Gelöscht : user_pref("extensions.softonic.hmpg", false);
Gelöscht : user_pref("extensions.softonic.id", "e4d8297d000000000000485d606de441");
Gelöscht : user_pref("extensions.softonic.instlDay", "15387");
Gelöscht : user_pref("extensions.softonic.instlRef", "MON00015");
Gelöscht : user_pref("extensions.softonic.lastVrsnTs", "1.5.11.518:28:35");
Gelöscht : user_pref("extensions.softonic.mntrvrsn", "1.3.0");
Gelöscht : user_pref("extensions.softonic.newTab", false);
Gelöscht : user_pref("extensions.softonic.noFFXTlbr", false);
Gelöscht : user_pref("extensions.softonic.prdct", "softonic");
Gelöscht : user_pref("extensions.softonic.prtnrId", "softonic");
Gelöscht : user_pref("extensions.softonic.sg", "az");
Gelöscht : user_pref("extensions.softonic.smplGrp", "eng7");
Gelöscht : user_pref("extensions.softonic.tlbrId", "base");
Gelöscht : user_pref("extensions.softonic.tlbrSrchUrl", "hxxp://search.softonic.com/MON00015/tb_v1?SearchSource[...]
Gelöscht : user_pref("extensions.softonic.updateRunOnce", true);
Gelöscht : user_pref("extensions.softonic.updateRunOnce1", true);
Gelöscht : user_pref("extensions.softonic.vrsn", "1.5.11.5");
Gelöscht : user_pref("extensions.softonic.vrsnTs", "1.5.11.518:28:35");
Gelöscht : user_pref("extensions.softonic.vrsni", "1.5.11.5");
Gelöscht : user_pref("extensions.softonic_i.aflt", "SD");
Gelöscht : user_pref("extensions.softonic_i.dfltLng", "de");
Gelöscht : user_pref("extensions.softonic_i.excTlbr", false);
Gelöscht : user_pref("extensions.softonic_i.id", "e4d8297d000000000000485d606de441");
Gelöscht : user_pref("extensions.softonic_i.instlDay", "15387");
Gelöscht : user_pref("extensions.softonic_i.instlRef", "MON00015");
Gelöscht : user_pref("extensions.softonic_i.newTab", false);
Gelöscht : user_pref("extensions.softonic_i.prdct", "softonic");
Gelöscht : user_pref("extensions.softonic_i.prtnrId", "softonic");
Gelöscht : user_pref("extensions.softonic_i.smplGrp", "eng7");
Gelöscht : user_pref("extensions.softonic_i.tlbrId", "de12JANdefault");
Gelöscht : user_pref("extensions.softonic_i.tlbrSrchUrl", "hxxp://search.softonic.com/MON00015/tb_v1?SearchSour[...]
Gelöscht : user_pref("extensions.softonic_i.vrsn", "1.5.11.5");
Gelöscht : user_pref("extensions.softonic_i.vrsnTs", "1.5.11.518:28:35");
Gelöscht : user_pref("extensions.softonic_i.vrsni", "1.5.11.5");
Gelöscht : user_pref("keyword.URL", "hxxp://search.babylon.com/?babsrc=SP_ss&mntrId=e4d8297d00000000000074f06db[...]

-\\ Google Chrome v [Version kann nicht ermittelt werden]

Datei : C:\Users\Sven\AppData\Local\Google\Chrome\User Data\Default\Preferences

[OK] Die Datei ist sauber.

*************************

AdwCleaner[S1].txt - [7718 octets] - [11/06/2013 18:46:32]

########## EOF - C:\AdwCleaner[S1].txt - [7778 octets] ##########

markusg 12.06.2013 11:08
seit wann geht das Gerät nich mehr online?
Ein Leitfaden und Tutorium zur Nutzung von ComboFix
versuch mal die internet verbindung zu reparieren.

browni85 23.06.2013 23:17
Hi,
Internetverbindung steht wieder. Wie solls weitergehen? Hoffe es gibt noch Hoffnung

markusg 04.07.2013 13:31
hi neues otl log bitte

browni85 05.07.2013 21:33
Hi, hier das neue OTL Log
Code:
OTL logfile created on: 05.07.2013 18:30:44 - Run 4
OTL by OldTimer - Version 3.2.69.0    Folder = C:\Users\Sven\Desktop
 Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.10.9200.16614)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
1,99 Gb Total Physical Memory | 1,22 Gb Available Physical Memory | 61,13% Memory free
3,98 Gb Paging File | 2,90 Gb Available in Paging File | 72,80% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\windows | %ProgramFiles% = C:\Program Files
Drive C: | 100,00 Gb Total Space | 18,73 Gb Free Space | 18,73% Space Free | Partition Type: NTFS
Drive D: | 117,87 Gb Total Space | 61,53 Gb Free Space | 52,21% Space Free | Partition Type: NTFS
 
Computer Name: SVENR-PC | User Name: Sven | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - [2013.06.09 01:32:12 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Sven\Desktop\OTL.exe
PRC - [2013.06.05 01:01:52 | 004,489,472 | ---- | M] (Akamai Technologies, Inc.) -- C:\Users\Sven\AppData\Local\Akamai\netsession_win.exe
PRC - [2012.11.30 04:55:25 | 000,271,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\conhost.exe
PRC - [2012.11.23 04:48:41 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe
PRC - [2012.08.01 09:13:22 | 000,348,664 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
PRC - [2012.05.02 01:42:28 | 000,086,224 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe
PRC - [2012.05.02 00:34:34 | 000,110,032 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe
PRC - [2012.04.24 02:11:55 | 000,080,336 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
PRC - [2011.10.01 09:30:42 | 000,219,496 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Application Virtualization Client\sftvsa.exe
PRC - [2011.10.01 09:30:36 | 000,508,776 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Application Virtualization Client\sftlist.exe
PRC - [2011.07.29 01:08:12 | 001,259,376 | ---- | M] () -- C:\Program Files\DivX\DivX Update\DivXUpdate.exe
PRC - [2011.02.25 07:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2010.09.27 10:37:24 | 004,180,576 | ---- | M] (SafeNet Inc.) -- C:\Windows\System32\hasplms.exe
PRC - [2010.09.16 02:18:38 | 003,058,304 | ---- | M] (ASUS) -- C:\Windows\AsScrPro.exe
PRC - [2010.08.10 00:04:58 | 001,244,592 | ---- | M] (ASUSTeK Computer Inc.) -- C:\Program Files\EeePC\HotkeyService\HotkeyService.exe
PRC - [2010.06.12 06:56:42 | 000,976,872 | ---- | M] (AsusTek Computer Inc.) -- C:\Program Files\Asus\LiveUpdate\LiveUpdate.exe
PRC - [2010.05.29 01:41:36 | 000,445,344 | ---- | M] (ASUS) -- C:\Program Files\EeePC\CapsHook\CapsHook.exe
PRC - [2010.05.21 22:42:48 | 000,828,704 | ---- | M] (Broadcom Corporation.) -- C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
PRC - [2010.05.21 22:42:48 | 000,652,576 | ---- | M] (Broadcom Corporation.) -- C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
PRC - [2010.05.05 15:18:46 | 000,148,280 | ---- | M] () -- C:\Program Files\Lexmark S300-S400 Series\ezprint.exe
PRC - [2010.05.05 15:18:43 | 000,770,728 | ---- | M] () -- C:\Program Files\Lexmark S300-S400 Series\lxeamon.exe
PRC - [2010.04.14 22:45:21 | 000,598,696 | ---- | M] ( ) -- C:\Windows\System32\lxeacoms.exe
PRC - [2009.11.19 15:44:14 | 000,083,240 | ---- | M] (Synaptics Incorporated) -- C:\Program Files\Synaptics\SynTP\SynAsusAcpi.exe
PRC - [2009.09.11 20:41:02 | 000,100,328 | ---- | M] (ASUSTeK Computer Inc.) -- C:\Program Files\EeePC\HotkeyService\HotKeyMon.exe
PRC - [2009.08.19 02:35:56 | 000,219,136 | ---- | M] () -- C:\Windows\System32\AsusService.exe
PRC - [2009.08.12 13:32:56 | 000,365,936 | ---- | M] (Boingo Wireless, Inc.) -- C:\Program Files\Boingo\Boingo Wi-Fi\Boingo Wi-Fi.exe
PRC - [2009.06.05 04:03:32 | 000,186,904 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
PRC - [2009.06.05 04:03:06 | 000,354,840 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
PRC - [2009.01.20 08:45:48 | 000,245,760 | ---- | M] (3S-Smart Software Solutions GmbH) -- C:\Program Files\3S Software\CoDeSys ENI Server\ENISysTray.exe
PRC - [2009.01.20 08:45:46 | 000,651,264 | ---- | M] (3S-Smart Software Solutions GmbH) -- C:\Program Files\3S Software\CoDeSys ENI Server\ENI.exe
 
 
========== Modules (No Company Name) ==========
 
MOD - [2013.05.24 05:05:35 | 012,436,480 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\30e3a21202000677d0a9270572251477\System.Windows.Forms.ni.dll
MOD - [2013.05.24 05:04:20 | 000,971,264 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\764f15e86c82662e977bd418bd6318c1\System.Configuration.ni.dll
MOD - [2013.02.14 09:18:05 | 001,670,144 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\7366a39c36523a084bc11c230929ff92\Microsoft.VisualBasic.ni.dll
MOD - [2013.01.10 12:47:00 | 001,592,832 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\eead6629e384a5b69f9ae35284b7eeed\System.Drawing.ni.dll
MOD - [2013.01.10 12:46:04 | 005,453,312 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml\f687c43e9fdec031988b33ae722c4613\System.Xml.ni.dll
MOD - [2013.01.10 12:45:50 | 007,989,760 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System\369f8bdca364e2b4936d18dea582912c\System.ni.dll
MOD - [2013.01.10 12:45:34 | 011,493,376 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\mscorlib\7150b9136fad5b79e88f6c7f9d3d2c39\mscorlib.ni.dll
MOD - [2011.08.19 04:25:36 | 000,471,040 | ---- | M] () -- C:\Program Files\Lexmark Toolbar\resource.dll
MOD - [2011.08.19 04:09:40 | 000,528,384 | ---- | M] () -- C:\Program Files\Lexmark Toolbar\toolband.dll
MOD - [2011.07.29 01:09:42 | 000,096,112 | ---- | M] () -- C:\Program Files\DivX\DivX Update\DivXUpdateCheck.dll
MOD - [2011.07.29 01:08:12 | 001,259,376 | ---- | M] () -- C:\Program Files\DivX\DivX Update\DivXUpdate.exe
MOD - [2010.09.02 13:08:00 | 000,118,784 | ---- | M] () -- C:\PROGRA~1\ASUS\ASUSWE~1\30108~1.222\ASUSWS~1.DLL
MOD - [2010.05.21 22:42:58 | 000,132,384 | ---- | M] () -- C:\Program Files\WIDCOMM\Bluetooth Software\btkeyind.dll
MOD - [2010.05.05 15:18:46 | 000,148,280 | ---- | M] () -- C:\Program Files\Lexmark S300-S400 Series\ezprint.exe
MOD - [2010.05.05 15:18:43 | 000,770,728 | ---- | M] () -- C:\Program Files\Lexmark S300-S400 Series\lxeamon.exe
MOD - [2010.04.05 12:56:07 | 000,716,954 | ---- | M] () -- C:\Program Files\Lexmark S300-S400 Series\Epwizard.DLL
MOD - [2010.04.05 12:55:15 | 000,159,890 | ---- | M] () -- C:\Program Files\Lexmark S300-S400 Series\customui.dll
MOD - [2010.04.05 12:55:04 | 000,061,604 | ---- | M] () -- C:\Program Files\Lexmark S300-S400 Series\Epfunct.DLL
MOD - [2010.04.05 12:54:59 | 000,123,033 | ---- | M] () -- C:\Program Files\Lexmark S300-S400 Series\Eputil.DLL
MOD - [2010.04.05 12:54:52 | 000,143,502 | ---- | M] () -- C:\Program Files\Lexmark S300-S400 Series\Imagutil.DLL
MOD - [2010.04.01 19:24:28 | 001,159,168 | ---- | M] () -- C:\Program Files\Lexmark S300-S400 Series\lxeaDRS.dll
MOD - [2010.04.01 19:23:27 | 000,389,120 | ---- | M] () -- C:\Program Files\Lexmark S300-S400 Series\lxeascw.dll
MOD - [2009.06.23 13:11:04 | 000,102,400 | ---- | M] () -- C:\Program Files\Lexmark S300-S400 Series\EPOEMDll.dll
MOD - [2009.06.23 13:10:29 | 000,045,056 | ---- | M] () -- C:\Program Files\Lexmark S300-S400 Series\epstring.dll
MOD - [2009.06.23 13:09:11 | 002,203,648 | ---- | M] () -- C:\Program Files\Lexmark S300-S400 Series\EPWizRes.dll
MOD - [2009.05.27 14:16:50 | 000,192,512 | ---- | M] () -- C:\Windows\System32\spool\drivers\w32x86\3\lxeadatr.dll
MOD - [2009.05.27 14:13:36 | 000,081,920 | ---- | M] () -- C:\Windows\System32\spool\drivers\w32x86\3\lxeacats.dll
MOD - [2009.04.28 09:56:29 | 000,024,064 | ---- | M] () -- C:\Windows\System32\LXEAsmr.dll
MOD - [2009.04.07 21:25:27 | 000,409,600 | ---- | M] () -- C:\Program Files\Lexmark S300-S400 Series\iptk.dll
MOD - [2009.03.10 07:43:49 | 000,155,648 | ---- | M] () -- C:\Program Files\Lexmark S300-S400 Series\lxeacaps.dll
MOD - [2009.03.02 16:25:47 | 000,151,552 | ---- | M] () -- C:\Program Files\Lexmark S300-S400 Series\lxeaptp.dll
MOD - [2009.02.20 10:48:03 | 000,299,008 | ---- | M] () -- C:\Windows\System32\LXEAsm.dll
 
 
========== Services (SafeList) ==========
 
SRV - [2013.06.27 13:12:33 | 000,234,096 | ---- | M] (soft Xpansion) [On_Demand | Stopped] -- C:\Program Files\Common Files\soft Xpansion\sxds10.exe -- (SXDS10)
SRV - [2013.06.18 16:21:21 | 000,117,144 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2012.05.02 01:42:28 | 000,086,224 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Program Files\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2012.05.02 00:34:34 | 000,110,032 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2011.10.01 09:30:42 | 000,219,496 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Program Files\Microsoft Application Virtualization Client\sftvsa.exe -- (sftvsa)
SRV - [2011.10.01 09:30:36 | 000,508,776 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Microsoft Application Virtualization Client\sftlist.exe -- (sftlist)
SRV - [2010.09.27 10:37:24 | 004,180,576 | ---- | M] (SafeNet Inc.) [Auto | Running] -- C:\Windows\System32\hasplms.exe -- (hasplms)
SRV - [2010.05.21 22:42:48 | 000,652,576 | ---- | M] (Broadcom Corporation.) [Auto | Running] -- C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe -- (btwdins)
SRV - [2010.04.14 22:45:21 | 000,598,696 | ---- | M] ( ) [Auto | Running] -- C:\Windows\System32\lxeacoms.exe -- (lxea_device)
SRV - [2010.04.14 22:45:14 | 000,193,192 | ---- | M] () [Auto | Stopped] -- C:\windows\System32\spool\DRIVERS\W32X86\3\\lxeaserv.exe -- (lxeaCATSCustConnectService)
SRV - [2009.08.19 02:35:56 | 000,219,136 | ---- | M] () [Auto | Running] -- C:\Windows\System32\AsusService.exe -- (AsusService)
SRV - [2009.07.14 03:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc)
SRV - [2009.07.14 03:15:41 | 000,680,960 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\mpsvc.dll -- (WinDefend)
SRV - [2009.06.05 04:03:06 | 000,354,840 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe -- (IAANTMON)
SRV - [2009.01.20 08:45:46 | 000,651,264 | ---- | M] (3S-Smart Software Solutions GmbH) [Auto | Running] -- C:\Program Files\3S Software\CoDeSys ENI Server\ENI.exe -- (ENI Server)
 
 
========== Driver Services (SafeList) ==========
 
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Users\Sven\AppData\Local\Temp\catchme.sys -- (catchme)
DRV - [2012.04.27 10:20:04 | 000,137,928 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\System32\drivers\avipbb.sys -- (avipbb)
DRV - [2012.04.25 00:32:27 | 000,083,392 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\Windows\System32\drivers\avgntflt.sys -- (avgntflt)
DRV - [2012.04.16 21:17:40 | 000,036,000 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\System32\drivers\avkmgr.sys -- (avkmgr)
DRV - [2011.10.01 09:30:42 | 000,019,304 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Sftvollh.sys -- (Sftvol)
DRV - [2011.10.01 09:30:40 | 000,021,864 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Running] -- C:\Windows\System32\drivers\Sftredirlh.sys -- (Sftredir)
DRV - [2011.10.01 09:30:38 | 000,194,408 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Sftplaylh.sys -- (Sftplay)
DRV - [2011.10.01 09:30:36 | 000,579,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Sftfslh.sys -- (Sftfs)
DRV - [2010.11.20 12:24:41 | 000,052,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV - [2010.11.20 11:59:44 | 000,035,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\winusb.sys -- (WinUsb)
DRV - [2010.09.27 15:24:50 | 000,356,864 | ---- | M] (SafeNet Inc.) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\aksfridge.sys -- (aksfridge)
DRV - [2010.08.04 04:54:36 | 000,105,576 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\nvhda32v.sys -- (NVHDA)
DRV - [2010.08.04 04:54:27 | 000,019,656 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\nvpciflt.sys -- (nvpciflt)
DRV - [2010.08.04 04:54:25 | 010,913,864 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm)
DRV - [2010.07.29 07:25:03 | 000,068,208 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\L1C62x86.sys -- (L1C)
DRV - [2010.06.17 15:14:27 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\System32\drivers\ssmdrv.sys -- (ssmdrv)
DRV - [2010.03.31 03:40:20 | 000,011,520 | ---- | M] () [Kernel | System | Running] -- C:\Windows\System32\drivers\AsUpIO.sys -- (AsUpIO)
DRV - [2009.12.09 23:27:18 | 000,588,800 | ---- | M] (SafeNet Inc.) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\hardlock.sys -- (hardlock)
DRV - [2009.08.18 13:06:44 | 000,114,688 | ---- | M] (ZTE Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ZTEusbnet.sys -- (ZTEusbnet)
DRV - [2009.08.18 13:06:44 | 000,105,088 | ---- | M] (ZTE Incorporated) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\zteusbvoice.sys -- (ZTEusbvoice)
DRV - [2009.08.18 13:06:44 | 000,105,088 | ---- | M] (ZTE Incorporated) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ZTEusbser6k.sys -- (ZTEusbser6k)
DRV - [2009.08.18 13:06:44 | 000,105,088 | ---- | M] (ZTE Incorporated) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ZTEusbnmea.sys -- (ZTEusbnmea)
DRV - [2009.08.18 13:06:44 | 000,105,088 | ---- | M] (ZTE Incorporated) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ZTEusbmdm6k.sys -- (ZTEusbmdm6k)
DRV - [2009.08.18 13:06:44 | 000,009,216 | R--- | M] (ZTE Incorporated) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\massfilter.sys -- (massfilter)
DRV - [2009.07.20 11:29:40 | 000,013,880 | ---- | M] ( ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\kbfiltr.sys -- (kbfiltr)
DRV - [2009.07.14 01:52:10 | 000,014,336 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\vwifimp.sys -- (vwifimp)
DRV - [2009.07.14 00:02:46 | 001,096,704 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\athr.sys -- (athr)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = hxxp://search.certified-toolbar.com?si=46364&tid=3869&ver=3.2&ts=1372331311378&tguid=46364-3869-1372331311378-F34F996BBA65222AF36F65470360D025&st=chrome&q=
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Default_Page_URL = about:newtab
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = hxxp://search.certified-toolbar.com?si=46364&tid=3869&ver=3.2&ts=1372331311378&tguid=46364-3869-1372331311378-F34F996BBA65222AF36F65470360D025&st=chrome&q=
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Search Bar = hxxp://search.certified-toolbar.com?si=46364&tid=3869&ver=3.2&ts=1372331311378&tguid=46364-3869-1372331311378-F34F996BBA65222AF36F65470360D025&st=chrome&q=
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Search Page = hxxp://search.certified-toolbar.com?si=46364&tid=3869&ver=3.2&ts=1372331311378&tguid=46364-3869-1372331311378-F34F996BBA65222AF36F65470360D025&st=chrome&q=
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Start Default_Page_URL = about:newtab
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Start Page = about:newtab
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&form=ASUTDF&pc=MAAU&src=IE-SearchBox
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://search.certified-toolbar.com?si=46364&tid=3869&ver=3.2&ts=1372331311378&tguid=46364-3869-1372331311378-F34F996BBA65222AF36F65470360D025&st=chrome&q=
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://eeepc.asus.com [binary data]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = hxxp://search.certified-toolbar.com?si=46364&tid=3869&ver=3.2&ts=1372331311378&tguid=46364-3869-1372331311378-F34F996BBA65222AF36F65470360D025&st=chrome&q=
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.giga.de/my_homepage/0022/ [binary data]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Default_Page_URL = about:newtab
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = hxxp://search.certified-toolbar.com?si=46364&tid=3869&ver=3.2&ts=1372331311378&tguid=46364-3869-1372331311378-F34F996BBA65222AF36F65470360D025&st=chrome&q=
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Search Bar = hxxp://search.certified-toolbar.com?si=46364&tid=3869&ver=3.2&ts=1372331311378&tguid=46364-3869-1372331311378-F34F996BBA65222AF36F65470360D025&st=chrome&q=
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Search Page = hxxp://search.certified-toolbar.com?si=46364&tid=3869&ver=3.2&ts=1372331311378&tguid=46364-3869-1372331311378-F34F996BBA65222AF36F65470360D025&st=chrome&q=
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Start Default_Page_URL = about:newtab
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Start Page = about:newtab
IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&form=ASUTDF&pc=MAAU&src=IE-SearchBox
IE - HKCU\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKCU\..\SearchScopes\{8F1BF7D7-889E-4DF9-8F9A-31CDD2257326}: "URL" = hxxp://websearch.ask.com/redirect?client=ie&tb=ORJ&o=&src=kw&q={searchTerms}&locale=&apn_ptnrs=&apn_dtid=OSJ000&apn_uid=5DE843DB-F9D8-49E9-8490-FC40EA83AE15&apn_sauid=A9823F38-E594-4DA2-B4B9-F03E3D4DB1F1
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local>
 
========== FireFox ==========
 
FF - prefs.js..browser.search.defaultengine: "Web Search"
FF - prefs.js..browser.search.defaultenginename: "Web Search"
FF - prefs.js..browser.search.order.1: "Web Search"
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.search.useDBForOrder: false
FF - prefs.js..browser.startup.homepage: "hxxp://www.google.de/|hxxp://www.giga.de/my_homepage/0022/"
FF - prefs.js..extensions.enabledAddons: %7B23fcfd51-4958-4f00-80a3-ae97e717ed8b%7D:2.1.2.145
FF - prefs.js..extensions.enabledAddons: %7BB45418F9-6406-4828-9D1A-35313FB1E2D6%7D:1.0
FF - prefs.js..extensions.enabledAddons: ad80235d-5e5a-4a1d-a891-51b66a3e70f8%408f877d80-6977-415f-ac14-b52043838c19.com:0.91.16
FF - prefs.js..extensions.enabledAddons: amazon-icon%40winload.de:1.0
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:22.0
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}:6.0.29
FF - prefs.js..extensions.enabledItems: {23fcfd51-4958-4f00-80a3-ae97e717ed8b}:2.1.2.145
FF - prefs.js..keyword.URL: "hxxp://search.certified-toolbar.com?si=46364&tid=3869&ver=3.2&ts=1372331311378&tguid=46364-3869-1372331311378-F34F996BBA65222AF36F65470360D025&st=chrome&q="
FF - user.js - File not found
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\windows\system32\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.21.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8081.0709: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@soft-xpansion/npsxpdf: C:\Program Files\Common Files\Freemium\np-sxpdf.dll (soft-Xpansion)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.0: C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{23fcfd51-4958-4f00-80a3-ae97e717ed8b}: C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2011.11.23 23:50:21 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{B45418F9-6406-4828-9D1A-35313FB1E2D6}: C:\ProgramData\Freemium\Free PDF Perfect\Data\fftb [2013.06.27 13:59:55 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 22.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 22.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins
FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\{B45418F9-6406-4828-9D1A-35313FB1E2D6}: C:\ProgramData\Freemium\Free PDF Perfect\Data\fftb [2013.06.27 13:59:55 | 000,000,000 | ---D | M]
 
[2011.02.25 15:45:21 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Sven\AppData\Roaming\mozilla\Extensions
[2013.06.28 18:06:59 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Sven\AppData\Roaming\mozilla\Firefox\Profiles\b8l0ror2.default\extensions
[2013.06.27 13:55:55 | 000,000,000 | ---D | M] (FoxyDeal) -- C:\Users\Sven\AppData\Roaming\mozilla\Firefox\Profiles\b8l0ror2.default\extensions\{F58A62EB-38DC-43C4-A539-DC52E135208D}
[2013.06.28 18:06:59 | 000,000,000 | ---D | M] ("Plus-HD-2.4") -- C:\Users\Sven\AppData\Roaming\mozilla\Firefox\Profiles\b8l0ror2.default\extensions\ad80235d-5e5a-4a1d-a891-51b66a3e70f8@8f877d80-6977-415f-ac14-b52043838c19.com
[2013.06.27 04:12:47 | 000,000,000 | ---D | M] (Amazon-Icon) -- C:\Users\Sven\AppData\Roaming\mozilla\Firefox\Profiles\b8l0ror2.default\extensions\amazon-icon@winload.de
[2013.06.27 04:12:50 | 000,000,000 | ---D | M] (Spartipps von SparPilot.com) -- C:\Users\Sven\AppData\Roaming\mozilla\Firefox\Profiles\b8l0ror2.default\extensions\sparpilot@sparpilot.com
[2013.06.28 18:06:57 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Sven\AppData\Roaming\mozilla\Firefox\Profiles\b8l0ror2.default\extensions\ad80235d-5e5a-4a1d-a891-51b66a3e70f8@8f877d80-6977-415f-ac14-b52043838c19.com\chrome\content\extensionCode
[2013.06.27 13:09:23 | 000,003,307 | ---- | M] () -- C:\Users\Sven\AppData\Roaming\mozilla\firefox\profiles\b8l0ror2.default\searchplugins\Web Search.xml
[2013.06.11 18:00:01 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\mozilla firefox\extensions
[2012.07.02 10:13:42 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA}
[2013.06.27 02:56:05 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\mozilla firefox\browser\extensions
[2013.06.27 02:56:05 | 000,000,000 | ---D | M] (Default) -- C:\Program Files\mozilla firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
[2011.11.23 23:50:21 | 000,000,000 | ---D | M] (DivX Plus Web Player HTML5 &lt;video&gt;) -- C:\PROGRAM FILES\DIVX\DIVX PLUS WEB PLAYER\FIREFOX\DIVXHTML5
[2013.06.27 13:59:55 | 000,000,000 | ---D | M] (Free PDF Perfect) -- C:\PROGRAMDATA\FREEMIUM\FREE PDF PERFECT\DATA\FFTB
[2013.06.27 13:09:23 | 000,003,307 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\Web Search.xml
 
========== Chrome  ==========
 
CHR - homepage:
CHR - homepage: chrome://newtab
CHR - plugin: Erster Nutzer (Enabled) = C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll
CHR - plugin: Error reading preferences file
CHR - Extension: Docs = C:\Users\Sven\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.0.0.6_0\
CHR - Extension: Plus-HD-2.4 = C:\Users\Sven\AppData\Local\Google\Chrome\User Data\Default\Extensions\hojmbfiljpkaijkdifoaacbpallpfkkf\1.23.9_0\crossrider
CHR - Extension: Plus-HD-2.4 = C:\Users\Sven\AppData\Local\Google\Chrome\User Data\Default\Extensions\hojmbfiljpkaijkdifoaacbpallpfkkf\1.23.9_0\
CHR - Extension: Mehr Leistung und Videoformate fr dein HTML5 video = C:\Users\Sven\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm\2.1.2.145_0\
 
O1 HOSTS File: ([2013.06.09 18:52:46 | 000,000,027 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1      localhost
O2 - BHO: (Lexmark Symbolleiste) - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll ()
O2 - BHO: (Plus-HD-2.4) - {11111111-1111-1111-1111-110311341134} - C:\Program Files\Plus-HD-2.4\Plus-HD-2.4-bho.dll (Plus HD)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (Lexmark ) - {D2C5E510-BE6D-42CC-9F61-E4F939078474} - C:\Program Files\Lexmark Printable Web\bho.dll ()
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O3 - HKLM\..\Toolbar: (Lexmark Symbolleiste) - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll ()
O3 - HKLM\..\Toolbar: (Free PDF Perfect) - {EFC2B9BE-AB2B-47F1-A47D-9EB28E58C917} - C:\Program Files\Freemium\Free PDF Perfect\ieagent32.dll (soft Xpansion)
O3 - HKCU\..\Toolbar\ShellBrowser: (Lexmark Symbolleiste) - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll ()
O3 - HKCU\..\Toolbar\WebBrowser: (Lexmark Symbolleiste) - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll ()
O4 - HKLM..\Run: [ASUS Screen Saver Protector] C:\Windows\AsScrPro.exe (ASUS)
O4 - HKLM..\Run: [ASUSPRP] C:\Program Files\ASUS\APRP\APRP.EXE (ASUSTek Computer Inc.)
O4 - HKLM..\Run: [ASUSWebStorage] C:\Program Files\ASUS\ASUS WebStorage\3.0.108.222\AsusWSPanel.exe (ecareme)
O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
O4 - HKLM..\Run: [Boingo Wi-Fi] C:\Program Files\Boingo\Boingo Wi-Fi\Boingo.lnk ()
O4 - HKLM..\Run: [CapsHook] C:\windows\System32\AsusSender.exe (ASUSTek Computer Inc.)
O4 - HKLM..\Run: [DivXUpdate] C:\Program Files\DivX\DivX Update\DivXUpdate.exe ()
O4 - HKLM..\Run: [Eee Docking] C:\Program Files\ASUS\Eee Docking\Eee Docking.exe ()
O4 - HKLM..\Run: [ENISysTray] C:\Program Files\3S Software\CoDeSys ENI Server\ENISysTray.exe (3S-Smart Software Solutions GmbH)
O4 - HKLM..\Run: [EzPrint] C:\Program Files\Lexmark S300-S400 Series\ezprint.exe ()
O4 - HKLM..\Run: [GraphicsSwitch] C:\windows\System32\AsusSender.exe (ASUSTek Computer Inc.)
O4 - HKLM..\Run: [HotkeyMon] C:\windows\System32\AsusSender.exe (ASUSTek Computer Inc.)
O4 - HKLM..\Run: [HotkeyService] C:\windows\System32\AsusSender.exe (ASUSTek Computer Inc.)
O4 - HKLM..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe (Intel Corporation)
O4 - HKLM..\Run: [LiveUpdate] C:\windows\System32\AsusSender.exe (ASUSTek Computer Inc.)
O4 - HKLM..\Run: [lxeamon.exe] C:\Program Files\Lexmark S300-S400 Series\lxeamon.exe ()
O4 - HKLM..\Run: [OOBESetup] C:\Program Files\asus\OOBERegBackup\OOBERegBackup.exe (ASUSTeK Computer Inc.)
O4 - HKLM..\Run: [SuperHybridEngine] C:\windows\System32\AsusSender.exe (ASUSTek Computer Inc.)
O4 - HKLM..\Run: [SynAsusAcpi] C:\Program Files\Synaptics\SynTP\SynAsusAcpi.exe (Synaptics Incorporated)
O4 - HKCU..\Run: [Akamai NetSession Interface] C:\Users\Sven\AppData\Local\Akamai\netsession_win.exe (Akamai Technologies, Inc.)
O4 - HKCU..\Run: [Syncables] C:\Program Files\syncables\syncables desktop\Syncables.exe (syncables, LLC)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: DisallowRun = 1
O8 - Extra context menu item: An vorhandene PDF-Datei anfügen - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html File not found
O8 - Extra context menu item: Linkziel an vorhandene PDF-Datei anhängen - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html File not found
O8 - Extra context menu item: Linkziel in Adobe PDF konvertieren - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html File not found
O8 - Extra context menu item: Send image to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm ()
O8 - Extra context menu item: Send page to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra Button: @C:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra 'Tools' menuitem : @C:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{3E67E7CF-8EB2-4DD0-AA83-5A2AC84F85E4}: DhcpNameServer = 192.168.0.1
O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Aibelive\Voice Command\Skype4COM.dll (Skype Technologies)
O20 - AppInit_DLLs: (C:\Windows\System32\nvinit.dll) - C:\Windows\System32\nvinit.dll (NVIDIA Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009.06.10 23:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
 
========== Files/Folders - Created Within 30 Days ==========
 
[2030.01.02 00:57:39 | 000,000,000 | ---D | C] -- C:\Boot
[2013.06.27 15:48:24 | 000,000,000 | ---D | C] -- C:\windows\System32\hdined32.nls.{00021401-0000-0000-C000-000000000046}
[2013.06.27 15:45:16 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\burnatonce
[2013.06.27 15:45:14 | 000,000,000 | ---D | C] -- C:\Program Files\burnatonce
[2013.06.27 15:10:14 | 000,000,000 | ---D | C] -- C:\Users\Sven\Desktop\Kaspersky Rescue2Usb
[2013.06.27 15:08:59 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\Temp6b047a3b5851db94350fd655feb56c56_
[2013.06.27 15:08:55 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\Tempdce68784fe4c9a7fab075b784b61a6c3_
[2013.06.27 14:00:27 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Freemium
[2013.06.27 13:59:51 | 000,000,000 | ---D | C] -- C:\Program Files\Freemium
[2013.06.27 13:56:37 | 000,000,000 | ---D | C] -- C:\Program Files\Covus Freemium
[2013.06.27 13:56:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Package Cache
[2013.06.27 13:55:55 | 000,000,000 | ---D | C] -- C:\Program Files\FoxyDeal
[2013.06.27 13:54:40 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\DownloadGuide
[2013.06.27 13:13:08 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\soft Xpansion
[2013.06.27 13:12:32 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Freemium
[2013.06.27 13:12:28 | 000,000,000 | ---D | C] -- C:\ProgramData\Freemium
[2013.06.27 13:09:43 | 000,000,000 | ---D | C] -- C:\Program Files\Plus-HD-2.4
[2013.06.27 04:12:48 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\Tempf47793602db20deaa9dcdd2c57d352c2
[2013.06.27 04:12:47 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\Temp6b047a3b5851db94350fd655feb56c56
[2013.06.27 04:12:43 | 000,000,000 | ---D | C] -- C:\Users\Sven\ChromeExtensions
[2013.06.27 04:12:42 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\Tempdce68784fe4c9a7fab075b784b61a6c3
[2013.06.27 02:56:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Mozilla
[2013.06.27 02:56:07 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Maintenance Service
[2013.06.09 23:51:43 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
[2013.06.09 23:51:42 | 000,000,000 | ---D | C] -- C:\Program Files\CCleaner
[2013.06.09 23:50:07 | 004,378,864 | ---- | C] (Piriform Ltd) -- C:\Users\Sven\Desktop\ccsetup402.exe
[2013.06.09 20:33:00 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Roaming\Malwarebytes
[2013.06.09 20:31:54 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2013.06.09 20:31:53 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2013.06.09 20:31:51 | 000,022,856 | ---- | C] (Malwarebytes Corporation) -- C:\windows\System32\drivers\mbam.sys
[2013.06.09 20:31:51 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2013.06.09 20:28:45 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\Programs
[2013.06.09 20:27:37 | 010,285,040 | ---- | C] (Malwarebytes Corporation                                    ) -- C:\Users\Sven\Desktop\mbam-setup-1.75.0.1300.exe
[2013.06.09 18:57:09 | 000,000,000 | -HSD | C] -- C:\$RECYCLE.BIN
[2013.06.09 18:52:44 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\temp
[2013.06.09 18:36:56 | 000,518,144 | ---- | C] (SteelWerX) -- C:\windows\SWREG.exe
[2013.06.09 18:36:56 | 000,406,528 | ---- | C] (SteelWerX) -- C:\windows\SWSC.exe
[2013.06.09 18:36:56 | 000,060,416 | ---- | C] (NirSoft) -- C:\windows\NIRCMD.exe
[2013.06.09 18:36:40 | 000,000,000 | ---D | C] -- C:\Qoobox
[2013.06.09 18:36:15 | 000,000,000 | ---D | C] -- C:\windows\erdnt
[2013.06.09 18:35:27 | 005,078,680 | R--- | C] (Swearware) -- C:\Users\Sven\Desktop\ComboFix.exe
[2013.06.09 17:37:18 | 002,237,968 | ---- | C] (Kaspersky Lab ZAO) -- C:\Users\Sven\Desktop\tdsskiller.exe
[2013.06.09 16:40:59 | 000,000,000 | ---D | C] -- C:\_OTL
[2013.06.09 01:31:16 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Sven\Desktop\OTL.exe
[1 C:\Users\Sven\Desktop\*.tmp files -> C:\Users\Sven\Desktop\*.tmp -> ]
 
========== Files - Modified Within 30 Days ==========
 
[2013.07.05 17:29:28 | 000,009,696 | -H-- | M] () -- C:\windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2013.07.05 17:29:28 | 000,009,696 | -H-- | M] () -- C:\windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2013.07.05 17:21:58 | 000,001,180 | ---- | M] () -- C:\windows\tasks\Plus-HD-2.4-updater.job
[2013.07.05 17:21:57 | 000,001,878 | ---- | M] () -- C:\windows\tasks\Plus-HD-2.4-chromeinstaller.job
[2013.07.05 17:21:57 | 000,001,804 | ---- | M] () -- C:\windows\tasks\Plus-HD-2.4-firefoxinstaller.job
[2013.07.05 17:21:56 | 000,001,184 | ---- | M] () -- C:\windows\tasks\Plus-HD-2.4-codedownloader.job
[2013.07.05 17:21:56 | 000,001,084 | ---- | M] () -- C:\windows\tasks\Plus-HD-2.4-enabler.job
[2013.07.05 17:21:45 | 000,067,584 | --S- | M] () -- C:\windows\bootstat.dat
[2013.07.05 17:21:36 | 1602,740,224 | -HS- | M] () -- C:\hiberfil.sys
[2013.06.28 12:26:54 | 000,269,096 | ---- | M] () -- C:\windows\System32\FNTCACHE.DAT
[2013.06.27 15:09:00 | 000,000,186 | ---- | M] () -- C:\Users\Sven\Desktop\Amazon.de.url
[2013.06.27 14:00:27 | 000,002,108 | ---- | M] () -- C:\Users\Sven\Desktop\Free PDF Perfect.lnk
[2013.06.27 13:59:59 | 000,010,464 | ---- | M] () -- C:\windows\System32\sx_p2d.tlb
[2013.06.27 13:54:48 | 000,000,207 | ---- | M] () -- C:\Users\Sven\Desktop\Amazon.url
[2013.06.27 13:34:48 | 000,000,862 | ---- | M] () -- C:\windows\System32\InstallUtil.InstallLog
[2013.06.27 13:08:23 | 000,697,314 | ---- | M] () -- C:\windows\System32\perfh007.dat
[2013.06.27 13:08:23 | 000,652,592 | ---- | M] () -- C:\windows\System32\perfh009.dat
[2013.06.27 13:08:23 | 000,148,320 | ---- | M] () -- C:\windows\System32\perfc007.dat
[2013.06.27 13:08:23 | 000,121,266 | ---- | M] () -- C:\windows\System32\perfc009.dat
[2013.06.27 04:11:43 | 000,576,768 | ---- | M] () -- C:\Users\Sven\Desktop\Kaspersky-USB-Rescue-Disk-Maker-Setup.exe
[2013.06.27 04:00:18 | 327,749,632 | ---- | M] () -- C:\Users\Sven\Desktop\kav_rescue_10.iso
[2013.06.27 02:56:09 | 000,001,105 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2013.06.11 17:48:48 | 000,648,201 | ---- | M] () -- C:\Users\Sven\Desktop\adwcleaner.exe
[2013.06.09 23:40:18 | 004,378,864 | ---- | M] (Piriform Ltd) -- C:\Users\Sven\Desktop\ccsetup402.exe
[2013.06.09 20:31:54 | 000,001,067 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2013.06.09 20:23:08 | 010,285,040 | ---- | M] (Malwarebytes Corporation                                    ) -- C:\Users\Sven\Desktop\mbam-setup-1.75.0.1300.exe
[2013.06.09 18:52:46 | 000,000,027 | ---- | M] () -- C:\windows\System32\drivers\etc\hosts
[2013.06.09 18:26:42 | 005,078,680 | R--- | M] (Swearware) -- C:\Users\Sven\Desktop\ComboFix.exe
[2013.06.09 17:20:24 | 002,237,968 | ---- | M] (Kaspersky Lab ZAO) -- C:\Users\Sven\Desktop\tdsskiller.exe
[2013.06.09 16:50:12 | 000,719,025 | ---- | M] () -- C:\Users\Sven\Desktop\MovedFiles.zip
[2013.06.09 01:33:00 | 000,377,856 | ---- | M] () -- C:\Users\Sven\Desktop\gmer_2.1.19163.exe
[2013.06.09 01:32:38 | 000,000,000 | ---- | M] () -- C:\Users\Sven\defogger_reenable
[2013.06.09 01:32:12 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Sven\Desktop\OTL.exe
[2013.06.09 01:31:54 | 000,050,477 | ---- | M] () -- C:\Users\Sven\Desktop\Defogger.exe
[1 C:\Users\Sven\Desktop\*.tmp files -> C:\Users\Sven\Desktop\*.tmp -> ]
 
========== Files Created - No Company Name ==========
 
[2030.01.02 00:57:40 | 000,383,786 | RHS- | C] () -- C:\bootmgr
[2013.06.27 14:00:27 | 000,002,108 | ---- | C] () -- C:\Users\Sven\Desktop\Free PDF Perfect.lnk
[2013.06.27 13:12:39 | 000,010,464 | ---- | C] () -- C:\windows\System32\sx_p2d.tlb
[2013.06.27 13:10:40 | 000,000,862 | ---- | C] () -- C:\windows\System32\InstallUtil.InstallLog
[2013.06.27 13:10:03 | 000,001,180 | ---- | C] () -- C:\windows\tasks\Plus-HD-2.4-updater.job
[2013.06.27 13:10:00 | 000,001,084 | ---- | C] () -- C:\windows\tasks\Plus-HD-2.4-enabler.job
[2013.06.27 13:09:56 | 000,001,184 | ---- | C] () -- C:\windows\tasks\Plus-HD-2.4-codedownloader.job
[2013.06.27 13:09:48 | 000,001,804 | ---- | C] () -- C:\windows\tasks\Plus-HD-2.4-firefoxinstaller.job
[2013.06.27 13:09:45 | 000,001,878 | ---- | C] () -- C:\windows\tasks\Plus-HD-2.4-chromeinstaller.job
[2013.06.27 13:09:24 | 000,023,624 | ---- | C] () -- C:\windows\Launcher.exe
[2013.06.27 13:08:26 | 000,000,207 | ---- | C] () -- C:\Users\Sven\Desktop\Amazon.url
[2013.06.27 04:12:47 | 000,000,186 | ---- | C] () -- C:\Users\Sven\Desktop\Amazon.de.url
[2013.06.27 04:12:04 | 000,576,768 | ---- | C] () -- C:\Users\Sven\Desktop\Kaspersky-USB-Rescue-Disk-Maker-Setup.exe
[2013.06.27 04:10:31 | 327,749,632 | ---- | C] () -- C:\Users\Sven\Desktop\kav_rescue_10.iso
[2013.06.27 02:56:09 | 000,001,117 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
[2013.06.27 02:56:09 | 000,001,105 | ---- | C] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2013.06.11 18:06:20 | 000,648,201 | ---- | C] () -- C:\Users\Sven\Desktop\adwcleaner.exe
[2013.06.09 20:31:54 | 000,001,067 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2013.06.09 18:36:56 | 000,256,000 | ---- | C] () -- C:\windows\PEV.exe
[2013.06.09 18:36:56 | 000,208,896 | ---- | C] () -- C:\windows\MBR.exe
[2013.06.09 18:36:56 | 000,098,816 | ---- | C] () -- C:\windows\sed.exe
[2013.06.09 18:36:56 | 000,080,412 | ---- | C] () -- C:\windows\grep.exe
[2013.06.09 18:36:56 | 000,068,096 | ---- | C] () -- C:\windows\zip.exe
[2013.06.09 16:50:11 | 000,719,025 | ---- | C] () -- C:\Users\Sven\Desktop\MovedFiles.zip
[2013.06.09 01:32:38 | 000,000,000 | ---- | C] () -- C:\Users\Sven\defogger_reenable
[2013.06.09 01:31:22 | 000,050,477 | ---- | C] () -- C:\Users\Sven\Desktop\Defogger.exe
[2013.06.09 01:31:20 | 000,377,856 | ---- | C] () -- C:\Users\Sven\Desktop\gmer_2.1.19163.exe
[2012.01.03 13:44:40 | 000,003,843 | ---- | C] () -- C:\windows\scad3.INI
[2011.10.17 10:22:15 | 000,060,416 | ---- | C] () -- C:\windows\System32\OPCENUM.EXE
[2011.10.17 10:22:14 | 000,075,264 | ---- | C] () -- C:\windows\System32\callrproxy.dll
[2011.07.16 10:43:19 | 000,000,000 | ---- | C] () -- C:\Users\Sven\AppData\Local\{752E86BD-94FD-4368-95D6-4646DDA49DFC}
 
========== ZeroAccess Check ==========
 
[2009.07.14 06:42:31 | 000,000,227 | RHS- | M] () -- C:\windows\assembly\Desktop.ini
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2013.02.27 06:55:05 | 012,872,704 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010.11.20 14:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2009.07.14 03:16:17 | 000,342,528 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
 
========== LOP Check ==========
 
[2011.02.25 14:35:24 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\ASUS WebStorage
[2011.03.02 17:38:36 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2011.02.25 15:39:58 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\com.nyt.timesreader.78C54164786ADE80CB31E1C5D95607D0938C987A.1
[2012.05.23 11:28:53 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Downloaded Installations
[2011.09.26 16:27:06 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\PDF Software
[2013.06.09 16:44:14 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\SoftGrid Client
[2011.02.25 17:53:04 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\TP
[2011.10.24 23:23:32 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Vodafone
[2011.02.25 14:00:48 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\VoiceCommand
[2013.02.23 15:37:11 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\WEB.DE
 
========== Purity Check ==========
 
 

< End of report >

markusg 05.07.2013 23:45
Hi,


otl fix

Fixen mit OTL

  • Starte bitte die OTL.exe.
  • Kopiere nun den Inhalt aus der Codebox in die Textbox.

Code:
:OTL
:files
:Commands
[emptytemp]
  • Solltest du deinen Benutzernamen z. B. durch "*****" unkenntlich gemacht haben, so füge an entsprechender Stelle deinen richtigen Benutzernamen ein. Andernfalls wird der Fix nicht funktionieren.
  • Schließe bitte nun alle Programme.
  • Klicke nun bitte auf den Fix Button.
  • OTL kann gegebenfalls einen Neustart verlangen. Bitte dies zulassen.
  • Nach dem Neustart findest Du ein Textdokument auf deinem Desktop.
    ( Auch zu finden unter C:\_OTL\MovedFiles\<Uhrzeit_Datum>.txt)
    Kopiere nun den Inhalt hier in Deinen Thread


bitte teste, ob es im Firefox, internet explorer, und sonstigen
evtl. instalierte Browser, irgendwelche ungewollten toolbars, umleitungen oder sonstigen Probleme gibt.
Teste wie pc und programme allgemein laufen.


Alle Zeitangaben in WEZ +1. Es ist jetzt 16:21 Uhr.

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19