Trojaner-Board - Stealer.exe - System jetzt in Ordnung?

Trojaner-Board (https://www.trojaner-board.de/)

- Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)

- - Stealer.exe - System jetzt in Ordnung? (https://www.trojaner-board.de/103745-stealer-exe-system-ordnung.html)

Ok danke, habe es jetzt aufgeführt, hier kommt der Log.

Grüße

Zitat:

All processes killed
========== OTL ==========
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Cdrom\\AutoRun|DWORD:1 /E : value set successfully!
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{68706b28-e040-11de-9af8-806e6f6e6963}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{68706b28-e040-11de-9af8-806e6f6e6963}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{68706b28-e040-11de-9af8-806e6f6e6963}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{68706b28-e040-11de-9af8-806e6f6e6963}\ not found.
File D:\Run.exe not found.
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 35979085 bytes
->Flash cache emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: ErichZann
->Temp folder emptied: 68401451 bytes
->Temporary Internet Files folder emptied: 16302683 bytes
->Java cache emptied: 9201175 bytes
->FireFox cache emptied: 38193602 bytes
->Flash cache emptied: 790 bytes

User: Benutzername2
->Temp folder emptied: 28068790 bytes
->Temporary Internet Files folder emptied: 10591136 bytes
->Java cache emptied: 144624 bytes
->FireFox cache emptied: 367161142 bytes
->Flash cache emptied: 3924 bytes

User: Public

User: Name
->Temp folder emptied: 150377584 bytes
->Temporary Internet Files folder emptied: 41507855 bytes
->Java cache emptied: 1 bytes
->FireFox cache emptied: 52287466 bytes
->Flash cache emptied: 115 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 311296 bytes
%systemroot%\System32 .tmp files removed: 1619120 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 594600886 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 67899 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 1.349,00 mb

C:\Windows\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully

OTL by OldTimer - Version 3.2.29.1 log created on 10042011_205316

Files\Folders moved on Reboot...
File move failed. C:\Users\Name\AppData\Local\Temp\vmware-Name\manifest.txt.1 scheduled to be moved on reboot.
File move failed. C:\Users\Name\AppData\Local\Temp\FXSAPIDebugLogFile.txt scheduled to be moved on reboot.
File\Folder C:\Users\Name\AppData\Local\Temp\~DFF120C5559F8F7084.TMP not found!
C:\Windows\temp\vmware-SYSTEM\vmware-usbarb-SYSTEM-2300.log moved successfully.

Registry entries deleted on Reboot...

Bitte nun dieses Tool von Kaspersky ausführen und das Log posten => http://www.trojaner-board.de/82358-t...entfernen.html

Das Tool so einstellen wie unten im Bild angegeben - klick auf change parameters und setze die Haken wie im folgenden Screenshot abgebildet,
Dann auf Start Scan klicken und wenn es durch ist auf den Button Report klicken um das Log anzuzeigen. Dieses bitte komplett posten.

http://saved.im/mtkwmtcxexhp/setting...8_16-25-18.jpg

Falls du durch die Infektion auf deine Dokumente/Eigenen Dateien nicht zugreifen kannst, Verknüpfungen auf dem Desktop oder im Startmenü unter "alle Programme" fehlen, bitte unhide ausführen:
Downloade dir bitte unhide.exe und speichere diese Datei auf deinem Desktop.
Starte das Tool und es sollten alle Dateien und Ordner wieder sichtbar sein. ( Könnte eine Weile dauern )
http://www.trojaner-board.de/images/icons/icon4.gif Windows-Vista und Windows-7-User müssen das Tool per Rechtsklick als Administrator ausführen! http://www.trojaner-board.de/images/icons/icon4.gif

Ok, hier kommt der log. Der eine "Fund" gehört anscheinend zu daemon tools, was ich bei mir installiert habe.

Grüße

Zitat:

08:39:27.0695 4664 TDSS rootkit removing tool 2.6.4.0 Oct 3 2011 17:37:01
08:39:27.0914 4664 ============================================================
08:39:27.0914 4664 Current date / time: 2011/10/05 08:39:27.0914
08:39:27.0914 4664 SystemInfo:
08:39:27.0914 4664
08:39:27.0914 4664 OS Version: 6.1.7601 ServicePack: 1.0
08:39:27.0914 4664 Product type: Workstation
08:39:27.0914 4664 ComputerName: Name
08:39:27.0914 4664 UserName: ErichZann
08:39:27.0914 4664 Windows directory: C:\Windows
08:39:27.0914 4664 System windows directory: C:\Windows
08:39:27.0914 4664 Running under WOW64
08:39:27.0914 4664 Processor architecture: Intel x64
08:39:27.0914 4664 Number of processors: 4
08:39:27.0914 4664 Page size: 0x1000
08:39:27.0914 4664 Boot type: Normal boot
08:39:27.0914 4664 ============================================================
08:39:28.0912 4664 Initialize success
08:40:12.0374 3692 ============================================================
08:40:12.0374 3692 Scan started
08:40:12.0374 3692 Mode: Manual; SigCheck; TDLFS;
08:40:12.0374 3692 ============================================================
08:40:12.0842 3692 1394ohci (a87d604aea360176311474c87a63bb88) C:\Windows\system32\drivers\1394ohci.sys
08:40:13.0013 3692 1394ohci - ok
08:40:13.0029 3692 ACPI (d81d9e70b8a6dd14d42d7b4efa65d5f2) C:\Windows\system32\drivers\ACPI.sys
08:40:13.0045 3692 ACPI - ok
08:40:13.0076 3692 AcpiPmi (99f8e788246d495ce3794d7e7821d2ca) C:\Windows\system32\drivers\acpipmi.sys
08:40:13.0123 3692 AcpiPmi - ok
08:40:13.0169 3692 adp94xx (2f6b34b83843f0c5118b63ac634f5bf4) C:\Windows\system32\DRIVERS\adp94xx.sys
08:40:13.0185 3692 adp94xx - ok
08:40:13.0216 3692 adpahci (597f78224ee9224ea1a13d6350ced962) C:\Windows\system32\DRIVERS\adpahci.sys
08:40:13.0232 3692 adpahci - ok
08:40:13.0247 3692 adpu320 (e109549c90f62fb570b9540c4b148e54) C:\Windows\system32\DRIVERS\adpu320.sys
08:40:13.0263 3692 adpu320 - ok
08:40:13.0294 3692 afcdp (d9a76e6e541e2e61c78140b65db63e6a) C:\Windows\system32\DRIVERS\afcdp.sys
08:40:28.0426 3692 afcdp - ok
08:40:28.0489 3692 AFD (d5b031c308a409a0a576bff4cf083d30) C:\Windows\system32\drivers\afd.sys
08:40:28.0535 3692 AFD - ok
08:40:28.0551 3692 agp440 (608c14dba7299d8cb6ed035a68a15799) C:\Windows\system32\drivers\agp440.sys
08:40:28.0567 3692 agp440 - ok
08:40:28.0582 3692 aliide (5812713a477a3ad7363c7438ca2ee038) C:\Windows\system32\drivers\aliide.sys
08:40:28.0598 3692 aliide - ok
08:40:28.0629 3692 amdide (1ff8b4431c353ce385c875f194924c0c) C:\Windows\system32\drivers\amdide.sys
08:40:28.0660 3692 amdide - ok
08:40:28.0707 3692 amdiox64 (6a2eeb0c4133b20773bb3dd0b7b377b4) C:\Windows\system32\DRIVERS\amdiox64.sys
08:40:28.0738 3692 amdiox64 - ok
08:40:28.0754 3692 AmdK8 (7024f087cff1833a806193ef9d22cda9) C:\Windows\system32\DRIVERS\amdk8.sys
08:40:28.0785 3692 AmdK8 - ok
08:40:28.0925 3692 amdkmdag (5b03217859b014b090cb5060c1d96875) C:\Windows\system32\DRIVERS\atikmdag.sys
08:40:29.0113 3692 amdkmdag - ok
08:40:29.0128 3692 amdkmdap (35d2184a99ad4cd5d17284d6c9f382c9) C:\Windows\system32\DRIVERS\atikmpag.sys
08:40:29.0159 3692 amdkmdap - ok
08:40:29.0175 3692 AmdPPM (1e56388b3fe0d031c44144eb8c4d6217) C:\Windows\system32\DRIVERS\amdppm.sys
08:40:29.0191 3692 AmdPPM - ok
08:40:29.0222 3692 amdsata (d4121ae6d0c0e7e13aa221aa57ef2d49) C:\Windows\system32\drivers\amdsata.sys
08:40:29.0237 3692 amdsata - ok
08:40:29.0253 3692 amdsbs (f67f933e79241ed32ff46a4f29b5120b) C:\Windows\system32\DRIVERS\amdsbs.sys
08:40:29.0253 3692 amdsbs - ok
08:40:29.0269 3692 amdxata (540daf1cea6094886d72126fd7c33048) C:\Windows\system32\drivers\amdxata.sys
08:40:29.0284 3692 amdxata - ok
08:40:29.0362 3692 AnyDVD (821e7e501226ee344fdb0f40ee46109d) C:\Windows\system32\Drivers\AnyDVD.sys
08:40:29.0409 3692 AnyDVD - ok
08:40:29.0471 3692 AODDriver4.01 (f312fad7dbd49ed21a194ac71b497832) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys
08:40:29.0518 3692 AODDriver4.01 - ok
08:40:29.0549 3692 AppID (89a69c3f2f319b43379399547526d952) C:\Windows\system32\drivers\appid.sys
08:40:29.0627 3692 AppID - ok
08:40:29.0690 3692 arc (c484f8ceb1717c540242531db7845c4e) C:\Windows\system32\DRIVERS\arc.sys
08:40:29.0705 3692 arc - ok
08:40:29.0721 3692 arcsas (019af6924aefe7839f61c830227fe79c) C:\Windows\system32\DRIVERS\arcsas.sys
08:40:29.0721 3692 arcsas - ok
08:40:29.0752 3692 aswFsBlk (5a68b880c16ad5a6aa20b49a47ffff24) C:\Windows\system32\drivers\aswFsBlk.sys
08:40:29.0783 3692 aswFsBlk - ok
08:40:29.0830 3692 aswMonFlt (230613be2d3da8053879be5ed2848f2d) C:\Windows\system32\drivers\aswMonFlt.sys
08:40:29.0861 3692 aswMonFlt - ok
08:40:29.0877 3692 aswRdr (0dc1996ae4178d7d14744ef6b3082313) C:\Windows\system32\drivers\aswRdr.sys
08:40:29.0893 3692 aswRdr - ok
08:40:29.0955 3692 aswSnx (b6ff911c23775cdfdd49612d92637af4) C:\Windows\system32\drivers\aswSnx.sys
08:40:30.0002 3692 aswSnx - ok
08:40:30.0017 3692 aswSP (5a590d8516376aed1829fc07d3bdaa4b) C:\Windows\system32\drivers\aswSP.sys
08:40:30.0033 3692 aswSP - ok
08:40:30.0049 3692 aswTdi (3239c0082fb0c1c4ee323730b85690a5) C:\Windows\system32\drivers\aswTdi.sys
08:40:30.0064 3692 aswTdi - ok
08:40:30.0095 3692 AsyncMac (769765ce2cc62867468cea93969b2242) C:\Windows\system32\DRIVERS\asyncmac.sys
08:40:30.0173 3692 AsyncMac - ok
08:40:30.0205 3692 atapi (02062c0b390b7729edc9e69c680a6f3c) C:\Windows\system32\drivers\atapi.sys
08:40:30.0205 3692 atapi - ok
08:40:30.0267 3692 AtiHDAudioService (dbb487d09f56c674430ac454fd8bcab9) C:\Windows\system32\drivers\AtihdW76.sys
08:40:30.0314 3692 AtiHDAudioService - ok
08:40:30.0361 3692 AtiHdmiService (fb7602c5c508be281368aae0b61b51c6) C:\Windows\system32\drivers\AtiHdmi.sys
08:40:30.0392 3692 AtiHdmiService - ok
08:40:30.0579 3692 atikmdag (5b03217859b014b090cb5060c1d96875) C:\Windows\system32\DRIVERS\atikmdag.sys
08:40:30.0673 3692 atikmdag - ok
08:40:30.0719 3692 b06bdrv (3e5b191307609f7514148c6832bb0842) C:\Windows\system32\DRIVERS\bxvbda.sys
08:40:30.0766 3692 b06bdrv - ok
08:40:30.0797 3692 b57nd60a (b5ace6968304a3900eeb1ebfd9622df2) C:\Windows\system32\DRIVERS\b57nd60a.sys
08:40:30.0844 3692 b57nd60a - ok
08:40:30.0860 3692 Beep (16a47ce2decc9b099349a5f840654746) C:\Windows\system32\drivers\Beep.sys
08:40:30.0922 3692 Beep - ok
08:40:31.0156 3692 blbdrive (61583ee3c3a17003c4acd0475646b4d3) C:\Windows\system32\DRIVERS\blbdrive.sys
08:40:31.0203 3692 blbdrive - ok
08:40:31.0250 3692 bowser (6c02a83164f5cc0a262f4199f0871cf5) C:\Windows\system32\DRIVERS\bowser.sys
08:40:31.0265 3692 bowser - ok
08:40:31.0297 3692 BrFiltLo (f09eee9edc320b5e1501f749fde686c8) C:\Windows\system32\DRIVERS\BrFiltLo.sys
08:40:31.0312 3692 BrFiltLo - ok
08:40:31.0328 3692 BrFiltUp (b114d3098e9bdb8bea8b053685831be6) C:\Windows\system32\DRIVERS\BrFiltUp.sys
08:40:31.0328 3692 BrFiltUp - ok
08:40:31.0359 3692 Brserid (43bea8d483bf1870f018e2d02e06a5bd) C:\Windows\System32\Drivers\Brserid.sys
08:40:31.0390 3692 Brserid - ok
08:40:31.0406 3692 BrSerWdm (a6eca2151b08a09caceca35c07f05b42) C:\Windows\System32\Drivers\BrSerWdm.sys
08:40:31.0453 3692 BrSerWdm - ok
08:40:31.0453 3692 BrUsbMdm (b79968002c277e869cf38bd22cd61524) C:\Windows\System32\Drivers\BrUsbMdm.sys
08:40:31.0484 3692 BrUsbMdm - ok
08:40:31.0499 3692 BrUsbSer (a87528880231c54e75ea7a44943b38bf) C:\Windows\System32\Drivers\BrUsbSer.sys
08:40:31.0531 3692 BrUsbSer - ok
08:40:31.0531 3692 BTHMODEM (9da669f11d1f894ab4eb69bf546a42e8) C:\Windows\system32\DRIVERS\bthmodem.sys
08:40:31.0562 3692 BTHMODEM - ok
08:40:31.0593 3692 cdfs (b8bd2bb284668c84865658c77574381a) C:\Windows\system32\DRIVERS\cdfs.sys
08:40:31.0609 3692 cdfs - ok
08:40:31.0655 3692 cdrom (f036ce71586e93d94dab220d7bdf4416) C:\Windows\system32\drivers\cdrom.sys
08:40:31.0687 3692 cdrom - ok
08:40:31.0702 3692 circlass (d7cd5c4e1b71fa62050515314cfb52cf) C:\Windows\system32\DRIVERS\circlass.sys
08:40:31.0733 3692 circlass - ok
08:40:31.0765 3692 CLFS (fe1ec06f2253f691fe36217c592a0206) C:\Windows\system32\CLFS.sys
08:40:31.0780 3692 CLFS - ok
08:40:31.0796 3692 CmBatt (0840155d0bddf1190f84a663c284bd33) C:\Windows\system32\DRIVERS\CmBatt.sys
08:40:31.0827 3692 CmBatt - ok
08:40:31.0858 3692 cmdide (e19d3f095812725d88f9001985b94edd) C:\Windows\system32\drivers\cmdide.sys
08:40:31.0858 3692 cmdide - ok
08:40:31.0905 3692 CNG (d5fea92400f12412b3922087c09da6a5) C:\Windows\system32\Drivers\cng.sys
08:40:31.0952 3692 CNG - ok
08:40:31.0967 3692 Compbatt (102de219c3f61415f964c88e9085ad14) C:\Windows\system32\DRIVERS\compbatt.sys
08:40:31.0967 3692 Compbatt - ok
08:40:31.0983 3692 CompositeBus (03edb043586cceba243d689bdda370a8) C:\Windows\system32\drivers\CompositeBus.sys
08:40:32.0014 3692 CompositeBus - ok
08:40:32.0030 3692 crcdisk (1c827878a998c18847245fe1f34ee597) C:\Windows\system32\DRIVERS\crcdisk.sys
08:40:32.0045 3692 crcdisk - ok
08:40:32.0061 3692 CSC (54da3dfd29ed9f1619b6f53f3ce55e49) C:\Windows\system32\drivers\csc.sys
08:40:32.0092 3692 CSC - ok
08:40:32.0123 3692 CT20XUT (229e3b8f266abdafd54e4a372b9d5ddc) C:\Windows\system32\drivers\CT20XUT.SYS
08:40:32.0139 3692 CT20XUT - ok
08:40:32.0155 3692 CT20XUT.SYS (229e3b8f266abdafd54e4a372b9d5ddc) C:\Windows\System32\drivers\CT20XUT.SYS
08:40:32.0170 3692 CT20XUT.SYS - ok
08:40:32.0201 3692 ctac32k (eb3843a91a10150c9e05607cbcb44090) C:\Windows\system32\drivers\ctac32k.sys
08:40:32.0217 3692 ctac32k - ok
08:40:32.0233 3692 ctaud2k (bc06efb59a2316537765462dfe40f764) C:\Windows\system32\drivers\ctaud2k.sys
08:40:32.0248 3692 ctaud2k - ok
08:40:32.0279 3692 CTEXFIFX (63b2b6ce9d3ef182981fb64bd5433da4) C:\Windows\system32\drivers\CTEXFIFX.SYS
08:40:32.0295 3692 CTEXFIFX - ok
08:40:32.0311 3692 CTEXFIFX.SYS (63b2b6ce9d3ef182981fb64bd5433da4) C:\Windows\System32\drivers\CTEXFIFX.SYS
08:40:32.0342 3692 CTEXFIFX.SYS - ok
08:40:32.0357 3692 CTHWIUT (6d115cc80873b85fd80dda1c41f75a2c) C:\Windows\system32\drivers\CTHWIUT.SYS
08:40:32.0357 3692 CTHWIUT - ok
08:40:32.0373 3692 CTHWIUT.SYS (6d115cc80873b85fd80dda1c41f75a2c) C:\Windows\System32\drivers\CTHWIUT.SYS
08:40:32.0373 3692 CTHWIUT.SYS - ok
08:40:32.0389 3692 ctprxy2k (ebc9548ef5838cb5aa8f18b3ac28af12) C:\Windows\system32\drivers\ctprxy2k.sys
08:40:32.0404 3692 ctprxy2k - ok
08:40:32.0420 3692 ctsfm2k (459bee1682121842285c162e2d98d81a) C:\Windows\system32\drivers\ctsfm2k.sys
08:40:32.0420 3692 ctsfm2k - ok
08:40:32.0482 3692 DfsC (9bb2ef44eaa163b29c4a4587887a0fe4) C:\Windows\system32\Drivers\dfsc.sys
08:40:32.0545 3692 DfsC - ok
08:40:32.0576 3692 discache (13096b05847ec78f0977f2c0f79e9ab3) C:\Windows\system32\drivers\discache.sys
08:40:32.0638 3692 discache - ok
08:40:32.0669 3692 Disk (9819eee8b5ea3784ec4af3b137a5244c) C:\Windows\system32\DRIVERS\disk.sys
08:40:32.0669 3692 Disk - ok
08:40:32.0716 3692 DRIVER_B - ok
08:40:32.0763 3692 drmkaud (9b19f34400d24df84c858a421c205754) C:\Windows\system32\drivers\drmkaud.sys
08:40:32.0810 3692 drmkaud - ok
08:40:32.0857 3692 DXGKrnl (f5bee30450e18e6b83a5012c100616fd) C:\Windows\System32\drivers\dxgkrnl.sys
08:40:32.0872 3692 DXGKrnl - ok
08:40:32.0950 3692 ebdrv (dc5d737f51be844d8c82c695eb17372f) C:\Windows\system32\DRIVERS\evbda.sys
08:40:33.0028 3692 ebdrv - ok
08:40:33.0059 3692 ElbyCDIO (a05fc7eca0966ebb70e4d17b855a853b) C:\Windows\system32\Drivers\ElbyCDIO.sys
08:40:33.0075 3692 ElbyCDIO - ok
08:40:33.0091 3692 elxstor (0e5da5369a0fcaea12456dd852545184) C:\Windows\system32\DRIVERS\elxstor.sys
08:40:33.0137 3692 elxstor - ok
08:40:33.0153 3692 emupia (c26133b6165928fbd156c6fe570f9ed2) C:\Windows\system32\drivers\emupia2k.sys
08:40:33.0153 3692 emupia - ok
08:40:33.0184 3692 ErrDev (34a3c54752046e79a126e15c51db409b) C:\Windows\system32\drivers\errdev.sys
08:40:33.0231 3692 ErrDev - ok
08:40:33.0262 3692 exfat (a510c654ec00c1e9bdd91eeb3a59823b) C:\Windows\system32\drivers\exfat.sys
08:40:33.0309 3692 exfat - ok
08:40:33.0325 3692 fastfat (0adc83218b66a6db380c330836f3e36d) C:\Windows\system32\drivers\fastfat.sys
08:40:33.0356 3692 fastfat - ok
08:40:33.0387 3692 fdc (d765d19cd8ef61f650c384f62fac00ab) C:\Windows\system32\DRIVERS\fdc.sys
08:40:33.0387 3692 fdc - ok
08:40:33.0418 3692 FileInfo (655661be46b5f5f3fd454e2c3095b930) C:\Windows\system32\drivers\fileinfo.sys
08:40:33.0418 3692 FileInfo - ok
08:40:33.0434 3692 Filetrace (5f671ab5bc87eea04ec38a6cd5962a47) C:\Windows\system32\drivers\filetrace.sys
08:40:33.0481 3692 Filetrace - ok
08:40:33.0481 3692 flpydisk (c172a0f53008eaeb8ea33fe10e177af5) C:\Windows\system32\DRIVERS\flpydisk.sys
08:40:33.0496 3692 flpydisk - ok
08:40:33.0527 3692 FltMgr (da6b67270fd9db3697b20fce94950741) C:\Windows\system32\drivers\fltmgr.sys
08:40:33.0543 3692 FltMgr - ok
08:40:33.0543 3692 FsDepends (d43703496149971890703b4b1b723eac) C:\Windows\system32\drivers\FsDepends.sys
08:40:33.0559 3692 FsDepends - ok
08:40:33.0574 3692 Fs_Rec (e95ef8547de20cf0603557c0cf7a9462) C:\Windows\system32\drivers\Fs_Rec.sys
08:40:33.0574 3692 Fs_Rec - ok
08:40:33.0605 3692 fvevol (1f7b25b858fa27015169fe95e54108ed) C:\Windows\system32\DRIVERS\fvevol.sys
08:40:33.0637 3692 fvevol - ok
08:40:33.0652 3692 gagp30kx (8c778d335c9d272cfd3298ab02abe3b6) C:\Windows\system32\DRIVERS\gagp30kx.sys
08:40:33.0668 3692 gagp30kx - ok
08:40:33.0683 3692 gdrv - ok
08:40:33.0715 3692 GEARAspiWDM (e403aacf8c7bb11375122d2464560311) C:\Windows\system32\DRIVERS\GEARAspiWDM.sys
08:40:33.0715 3692 GEARAspiWDM - ok
08:40:33.0793 3692 ha20x2k (a3f010d5dbfb589a3b3288c05c2ea3f9) C:\Windows\system32\drivers\ha20x2k.sys
08:40:33.0839 3692 ha20x2k - ok
08:40:33.0855 3692 hamachi (1e6438d4ea6e1174a3b3b1edc4de660b) C:\Windows\system32\DRIVERS\hamachi.sys
08:40:33.0871 3692 hamachi - ok
08:40:33.0886 3692 hcmon (8cdad7b707ddd77d45588f74d59c9aff) C:\Windows\system32\drivers\hcmon.sys
08:40:33.0886 3692 hcmon - ok
08:40:33.0902 3692 hcw85cir (f2523ef6460fc42405b12248338ab2f0) C:\Windows\system32\drivers\hcw85cir.sys
08:40:33.0917 3692 hcw85cir - ok
08:40:33.0964 3692 HdAudAddService (975761c778e33cd22498059b91e7373a) C:\Windows\system32\drivers\HdAudio.sys
08:40:33.0980 3692 HdAudAddService - ok
08:40:34.0011 3692 HDAudBus (97bfed39b6b79eb12cddbfeed51f56bb) C:\Windows\system32\drivers\HDAudBus.sys
08:40:34.0058 3692 HDAudBus - ok
08:40:34.0058 3692 HidBatt (78e86380454a7b10a5eb255dc44a355f) C:\Windows\system32\DRIVERS\HidBatt.sys
08:40:34.0073 3692 HidBatt - ok
08:40:34.0089 3692 HidBth (7fd2a313f7afe5c4dab14798c48dd104) C:\Windows\system32\DRIVERS\hidbth.sys
08:40:34.0151 3692 HidBth - ok
08:40:34.0151 3692 HidIr (0a77d29f311b88cfae3b13f9c1a73825) C:\Windows\system32\DRIVERS\hidir.sys
08:40:34.0167 3692 HidIr - ok
08:40:34.0214 3692 HidUsb (9592090a7e2b61cd582b612b6df70536) C:\Windows\system32\DRIVERS\hidusb.sys
08:40:34.0245 3692 HidUsb - ok
08:40:34.0276 3692 HpSAMD (39d2abcd392f3d8a6dce7b60ae7b8efc) C:\Windows\system32\drivers\HpSAMD.sys
08:40:34.0292 3692 HpSAMD - ok
08:40:34.0323 3692 HTTP (0ea7de1acb728dd5a369fd742d6eee28) C:\Windows\system32\drivers\HTTP.sys
08:40:34.0385 3692 HTTP - ok
08:40:34.0417 3692 hwpolicy (a5462bd6884960c9dc85ed49d34ff392) C:\Windows\system32\drivers\hwpolicy.sys
08:40:34.0417 3692 hwpolicy - ok
08:40:34.0448 3692 i8042prt (fa55c73d4affa7ee23ac4be53b4592d3) C:\Windows\system32\drivers\i8042prt.sys
08:40:34.0448 3692 i8042prt - ok
08:40:34.0495 3692 iaStorV (aaaf44db3bd0b9d1fb6969b23ecc8366) C:\Windows\system32\drivers\iaStorV.sys
08:40:34.0510 3692 iaStorV - ok
08:40:34.0526 3692 iirsp (5c18831c61933628f5bb0ea2675b9d21) C:\Windows\system32\DRIVERS\iirsp.sys
08:40:34.0541 3692 iirsp - ok
08:40:34.0588 3692 IntcAzAudAddService (f04d22d7a49a1b2210dbadf0b803e870) C:\Windows\system32\drivers\RTKVHD64.sys
08:40:34.0619 3692 IntcAzAudAddService - ok
08:40:34.0651 3692 intelide (f00f20e70c6ec3aa366910083a0518aa) C:\Windows\system32\drivers\intelide.sys
08:40:34.0651 3692 intelide - ok
08:40:34.0666 3692 intelppm (ada036632c664caa754079041cf1f8c1) C:\Windows\system32\DRIVERS\intelppm.sys
08:40:34.0697 3692 intelppm - ok
08:40:34.0729 3692 IpFilterDriver (c9f0e1bd74365a8771590e9008d22ab6) C:\Windows\system32\DRIVERS\ipfltdrv.sys
08:40:34.0791 3692 IpFilterDriver - ok
08:40:34.0807 3692 IPMIDRV (0fc1aea580957aa8817b8f305d18ca3a) C:\Windows\system32\drivers\IPMIDrv.sys
08:40:34.0822 3692 IPMIDRV - ok
08:40:34.0822 3692 IPNAT (af9b39a7e7b6caa203b3862582e9f2d0) C:\Windows\system32\drivers\ipnat.sys
08:40:34.0869 3692 IPNAT - ok
08:40:34.0900 3692 IRENUM (3abf5e7213eb28966d55d58b515d5ce9) C:\Windows\system32\drivers\irenum.sys
08:40:34.0916 3692 IRENUM - ok
08:40:34.0947 3692 isapnp (2f7b28dc3e1183e5eb418df55c204f38) C:\Windows\system32\drivers\isapnp.sys
08:40:34.0947 3692 isapnp - ok
08:40:34.0978 3692 iScsiPrt (d931d7309deb2317035b07c9f9e6b0bd) C:\Windows\system32\drivers\msiscsi.sys
08:40:34.0994 3692 iScsiPrt - ok
08:40:35.0009 3692 kbdclass (bc02336f1cba7dcc7d1213bb588a68a5) C:\Windows\system32\DRIVERS\kbdclass.sys
08:40:35.0025 3692 kbdclass - ok
08:40:35.0041 3692 kbdhid (0705eff5b42a9db58548eec3b26bb484) C:\Windows\system32\DRIVERS\kbdhid.sys
08:40:35.0056 3692 kbdhid - ok
08:40:35.0056 3692 KSecDD (ccd53b5bd33ce0c889e830d839c8b66e) C:\Windows\system32\Drivers\ksecdd.sys
08:40:35.0072 3692 KSecDD - ok
08:40:35.0103 3692 KSecPkg (9ff918a261752c12639e8ad4208d2c2f) C:\Windows\system32\Drivers\ksecpkg.sys
08:40:35.0119 3692 KSecPkg - ok
08:40:35.0119 3692 ksthunk (6869281e78cb31a43e969f06b57347c4) C:\Windows\system32\drivers\ksthunk.sys
08:40:35.0150 3692 ksthunk - ok
08:40:35.0197 3692 lltdio (1538831cf8ad2979a04c423779465827) C:\Windows\system32\DRIVERS\lltdio.sys
08:40:35.0243 3692 lltdio - ok
08:40:35.0275 3692 LSI_FC (1a93e54eb0ece102495a51266dcdb6a6) C:\Windows\system32\DRIVERS\lsi_fc.sys
08:40:35.0275 3692 LSI_FC - ok
08:40:35.0290 3692 LSI_SAS (1047184a9fdc8bdbff857175875ee810) C:\Windows\system32\DRIVERS\lsi_sas.sys
08:40:35.0306 3692 LSI_SAS - ok
08:40:35.0306 3692 LSI_SAS2 (30f5c0de1ee8b5bc9306c1f0e4a75f93) C:\Windows\system32\DRIVERS\lsi_sas2.sys
08:40:35.0321 3692 LSI_SAS2 - ok
08:40:35.0337 3692 LSI_SCSI (0504eacaff0d3c8aed161c4b0d369d4a) C:\Windows\system32\DRIVERS\lsi_scsi.sys
08:40:35.0337 3692 LSI_SCSI - ok
08:40:35.0368 3692 luafv (43d0f98e1d56ccddb0d5254cff7b356e) C:\Windows\system32\drivers\luafv.sys
08:40:35.0431 3692 luafv - ok
08:40:35.0477 3692 LVPr2M64 (b3944d06eb4b64d57bd7e5fe89415f58) C:\Windows\system32\DRIVERS\LVPr2M64.sys
08:40:35.0509 3692 LVPr2M64 - ok
08:40:35.0524 3692 LVPr2Mon (b3944d06eb4b64d57bd7e5fe89415f58) C:\Windows\system32\DRIVERS\LVPr2M64.sys
08:40:35.0540 3692 LVPr2Mon - ok
08:40:35.0571 3692 LVRS64 (803085f59ec92b3827cc4d90fcbfd335) C:\Windows\system32\DRIVERS\lvrs64.sys
08:40:35.0587 3692 LVRS64 - ok
08:40:35.0680 3692 LVUVC64 (a8d7c97016e6b76ef472a4c7ab357ee3) C:\Windows\system32\DRIVERS\lvuvc64.sys
08:40:35.0743 3692 LVUVC64 - ok
08:40:35.0758 3692 megasas (a55805f747c6edb6a9080d7c633bd0f4) C:\Windows\system32\DRIVERS\megasas.sys
08:40:35.0774 3692 megasas - ok
08:40:35.0789 3692 MegaSR (baf74ce0072480c3b6b7c13b2a94d6b3) C:\Windows\system32\DRIVERS\MegaSR.sys
08:40:35.0789 3692 MegaSR - ok
08:40:35.0805 3692 Modem (800ba92f7010378b09f9ed9270f07137) C:\Windows\system32\drivers\modem.sys
08:40:35.0852 3692 Modem - ok
08:40:35.0867 3692 monitor (b03d591dc7da45ece20b3b467e6aadaa) C:\Windows\system32\DRIVERS\monitor.sys
08:40:35.0899 3692 monitor - ok
08:40:35.0914 3692 mouclass (7d27ea49f3c1f687d357e77a470aea99) C:\Windows\system32\DRIVERS\mouclass.sys
08:40:35.0930 3692 mouclass - ok
08:40:35.0945 3692 mouhid (d3bf052c40b0c4166d9fd86a4288c1e6) C:\Windows\system32\DRIVERS\mouhid.sys
08:40:35.0992 3692 mouhid - ok
08:40:36.0023 3692 mountmgr (32e7a3d591d671a6df2db515a5cbe0fa) C:\Windows\system32\drivers\mountmgr.sys
08:40:36.0039 3692 mountmgr - ok
08:40:36.0055 3692 mpio (a44b420d30bd56e145d6a2bc8768ec58) C:\Windows\system32\drivers\mpio.sys
08:40:36.0070 3692 mpio - ok
08:40:36.0086 3692 mpsdrv (6c38c9e45ae0ea2fa5e551f2ed5e978f) C:\Windows\system32\drivers\mpsdrv.sys
08:40:36.0117 3692 mpsdrv - ok
08:40:36.0148 3692 MRxDAV (dc722758b8261e1abafd31a3c0a66380) C:\Windows\system32\drivers\mrxdav.sys
08:40:36.0211 3692 MRxDAV - ok
08:40:36.0242 3692 mrxsmb (a5d9106a73dc88564c825d317cac68ac) C:\Windows\system32\DRIVERS\mrxsmb.sys
08:40:36.0304 3692 mrxsmb - ok
08:40:36.0335 3692 mrxsmb10 (d711b3c1d5f42c0c2415687be09fc163) C:\Windows\system32\DRIVERS\mrxsmb10.sys
08:40:36.0367 3692 mrxsmb10 - ok
08:40:36.0398 3692 mrxsmb20 (9423e9d355c8d303e76b8cfbd8a5c30c) C:\Windows\system32\DRIVERS\mrxsmb20.sys
08:40:36.0413 3692 mrxsmb20 - ok
08:40:36.0429 3692 msahci (c25f0bafa182cbca2dd3c851c2e75796) C:\Windows\system32\drivers\msahci.sys
08:40:36.0445 3692 msahci - ok
08:40:36.0460 3692 msdsm (db801a638d011b9633829eb6f663c900) C:\Windows\system32\drivers\msdsm.sys
08:40:36.0460 3692 msdsm - ok
08:40:36.0491 3692 Msfs (aa3fb40e17ce1388fa1bedab50ea8f96) C:\Windows\system32\drivers\Msfs.sys
08:40:36.0507 3692 Msfs - ok
08:40:36.0523 3692 mshidkmdf (f9d215a46a8b9753f61767fa72a20326) C:\Windows\System32\drivers\mshidkmdf.sys
08:40:36.0601 3692 mshidkmdf - ok
08:40:36.0616 3692 msisadrv (d916874bbd4f8b07bfb7fa9b3ccae29d) C:\Windows\system32\drivers\msisadrv.sys
08:40:36.0632 3692 msisadrv - ok
08:40:36.0663 3692 MSKSSRV (49ccf2c4fea34ffad8b1b59d49439366) C:\Windows\system32\drivers\MSKSSRV.sys
08:40:36.0679 3692 MSKSSRV - ok
08:40:36.0710 3692 MSPCLOCK (bdd71ace35a232104ddd349ee70e1ab3) C:\Windows\system32\drivers\MSPCLOCK.sys
08:40:36.0741 3692 MSPCLOCK - ok
08:40:36.0757 3692 MSPQM (4ed981241db27c3383d72092b618a1d0) C:\Windows\system32\drivers\MSPQM.sys
08:40:36.0835 3692 MSPQM - ok
08:40:36.0866 3692 MsRPC (759a9eeb0fa9ed79da1fb7d4ef78866d) C:\Windows\system32\drivers\MsRPC.sys
08:40:36.0913 3692 MsRPC - ok
08:40:36.0928 3692 mssmbios (0eed230e37515a0eaee3c2e1bc97b288) C:\Windows\system32\drivers\mssmbios.sys
08:40:36.0928 3692 mssmbios - ok
08:40:36.0944 3692 MSTEE (2e66f9ecb30b4221a318c92ac2250779) C:\Windows\system32\drivers\MSTEE.sys
08:40:36.0991 3692 MSTEE - ok
08:40:37.0006 3692 MTConfig (7ea404308934e675bffde8edf0757bcd) C:\Windows\system32\DRIVERS\MTConfig.sys
08:40:37.0037 3692 MTConfig - ok
08:40:37.0053 3692 Mup (f9a18612fd3526fe473c1bda678d61c8) C:\Windows\system32\Drivers\mup.sys
08:40:37.0069 3692 Mup - ok
08:40:37.0084 3692 NativeWifiP (1ea3749c4114db3e3161156ffffa6b33) C:\Windows\system32\DRIVERS\nwifi.sys
08:40:37.0115 3692 NativeWifiP - ok
08:40:37.0147 3692 NDIS (79b47fd40d9a817e932f9d26fac0a81c) C:\Windows\system32\drivers\ndis.sys
08:40:37.0178 3692 NDIS - ok
08:40:37.0193 3692 NdisCap (9f9a1f53aad7da4d6fef5bb73ab811ac) C:\Windows\system32\DRIVERS\ndiscap.sys
08:40:37.0225 3692 NdisCap - ok
08:40:37.0256 3692 NdisTapi (30639c932d9fef22b31268fe25a1b6e5) C:\Windows\system32\DRIVERS\ndistapi.sys
08:40:37.0271 3692 NdisTapi - ok
08:40:37.0303 3692 Ndisuio (136185f9fb2cc61e573e676aa5402356) C:\Windows\system32\DRIVERS\ndisuio.sys
08:40:37.0334 3692 Ndisuio - ok
08:40:37.0365 3692 NdisWan (53f7305169863f0a2bddc49e116c2e11) C:\Windows\system32\DRIVERS\ndiswan.sys
08:40:37.0427 3692 NdisWan - ok
08:40:37.0443 3692 NDProxy (015c0d8e0e0421b4cfd48cffe2825879) C:\Windows\system32\drivers\NDProxy.sys
08:40:37.0474 3692 NDProxy - ok
08:40:37.0505 3692 NetBIOS (86743d9f5d2b1048062b14b1d84501c4) C:\Windows\system32\DRIVERS\netbios.sys
08:40:37.0537 3692 NetBIOS - ok
08:40:37.0568 3692 NetBT (09594d1089c523423b32a4229263f068) C:\Windows\system32\DRIVERS\netbt.sys
08:40:37.0599 3692 NetBT - ok
08:40:37.0630 3692 nfrd960 (77889813be4d166cdab78ddba990da92) C:\Windows\system32\DRIVERS\nfrd960.sys
08:40:37.0646 3692 nfrd960 - ok
08:40:37.0677 3692 nmwcdcx64 (4b300dc9b143c99674b6ecd917384155) C:\Windows\system32\drivers\ccdcmbox64.sys
08:40:37.0724 3692 nmwcdcx64 - ok
08:40:37.0739 3692 nmwcdx64 (dd1d06c2a7e048766482256ab8c755cf) C:\Windows\system32\drivers\ccdcmbx64.sys
08:40:37.0771 3692 nmwcdx64 - ok
08:40:37.0786 3692 Npfs (1e4c4ab5c9b8dd13179bbdc75a2a01f7) C:\Windows\system32\drivers\Npfs.sys
08:40:37.0817 3692 Npfs - ok
08:40:37.0817 3692 nsiproxy (e7f5ae18af4168178a642a9247c63001) C:\Windows\system32\drivers\nsiproxy.sys
08:40:37.0864 3692 nsiproxy - ok
08:40:37.0927 3692 Ntfs (a2f74975097f52a00745f9637451fdd8) C:\Windows\system32\drivers\Ntfs.sys
08:40:38.0005 3692 Ntfs - ok
08:40:38.0020 3692 Null (9899284589f75fa8724ff3d16aed75c1) C:\Windows\system32\drivers\Null.sys
08:40:38.0051 3692 Null - ok
08:40:38.0083 3692 nvraid (0a92cb65770442ed0dc44834632f66ad) C:\Windows\system32\drivers\nvraid.sys
08:40:38.0098 3692 nvraid - ok
08:40:38.0114 3692 nvstor (dab0e87525c10052bf65f06152f37e4a) C:\Windows\system32\drivers\nvstor.sys
08:40:38.0129 3692 nvstor - ok
08:40:38.0161 3692 nv_agp (270d7cd42d6e3979f6dd0146650f0e05) C:\Windows\system32\drivers\nv_agp.sys
08:40:38.0161 3692 nv_agp - ok
08:40:38.0192 3692 ohci1394 (3589478e4b22ce21b41fa1bfc0b8b8a0) C:\Windows\system32\drivers\ohci1394.sys
08:40:38.0239 3692 ohci1394 - ok
08:40:38.0270 3692 ossrv (0e2de427ebe106e7e5b52869d5c99f68) C:\Windows\system32\drivers\ctoss2k.sys
08:40:38.0285 3692 ossrv - ok
08:40:38.0317 3692 Parport (0086431c29c35be1dbc43f52cc273887) C:\Windows\system32\DRIVERS\parport.sys
08:40:38.0332 3692 Parport - ok
08:40:38.0348 3692 partmgr (871eadac56b0a4c6512bbe32753ccf79) C:\Windows\system32\drivers\partmgr.sys
08:40:38.0348 3692 partmgr - ok
08:40:38.0395 3692 pccsmcfd (bc0018c2d29f655188a0ed3fa94fdb24) C:\Windows\system32\DRIVERS\pccsmcfdx64.sys
08:40:38.0426 3692 pccsmcfd - ok
08:40:38.0457 3692 pci (94575c0571d1462a0f70bde6bd6ee6b3) C:\Windows\system32\drivers\pci.sys
08:40:38.0473 3692 pci - ok
08:40:38.0488 3692 pciide (b5b8b5ef2e5cb34df8dcf8831e3534fa) C:\Windows\system32\drivers\pciide.sys
08:40:38.0504 3692 pciide - ok
08:40:38.0519 3692 pcmcia (b2e81d4e87ce48589f98cb8c05b01f2f) C:\Windows\system32\DRIVERS\pcmcia.sys
08:40:38.0535 3692 pcmcia - ok
08:40:38.0535 3692 pcw (d6b9c2e1a11a3a4b26a182ffef18f603) C:\Windows\system32\drivers\pcw.sys
08:40:38.0551 3692 pcw - ok
08:40:38.0582 3692 PEAUTH (68769c3356b3be5d1c732c97b9a80d6e) C:\Windows\system32\drivers\peauth.sys
08:40:38.0629 3692 PEAUTH - ok
08:40:38.0675 3692 PptpMiniport (f92a2c41117a11a00be01ca01a7fcde9) C:\Windows\system32\DRIVERS\raspptp.sys
08:40:38.0738 3692 PptpMiniport - ok
08:40:38.0753 3692 Processor (0d922e23c041efb1c3fac2a6f943c9bf) C:\Windows\system32\DRIVERS\processr.sys
08:40:38.0769 3692 Processor - ok
08:40:38.0816 3692 Psched (0557cf5a2556bd58e26384169d72438d) C:\Windows\system32\DRIVERS\pacer.sys
08:40:38.0831 3692 Psched - ok
08:40:38.0894 3692 ql2300 (a53a15a11ebfd21077463ee2c7afeef0) C:\Windows\system32\DRIVERS\ql2300.sys
08:40:38.0941 3692 ql2300 - ok
08:40:38.0956 3692 ql40xx (4f6d12b51de1aaeff7dc58c4d75423c8) C:\Windows\system32\DRIVERS\ql40xx.sys
08:40:38.0972 3692 ql40xx - ok
08:40:38.0987 3692 QWAVEdrv (76707bb36430888d9ce9d705398adb6c) C:\Windows\system32\drivers\qwavedrv.sys
08:40:39.0003 3692 QWAVEdrv - ok
08:40:39.0019 3692 RasAcd (5a0da8ad5762fa2d91678a8a01311704) C:\Windows\system32\DRIVERS\rasacd.sys
08:40:39.0081 3692 RasAcd - ok
08:40:39.0112 3692 RasAgileVpn (7ecff9b22276b73f43a99a15a6094e90) C:\Windows\system32\DRIVERS\AgileVpn.sys
08:40:39.0143 3692 RasAgileVpn - ok
08:40:39.0175 3692 Rasl2tp (471815800ae33e6f1c32fb1b97c490ca) C:\Windows\system32\DRIVERS\rasl2tp.sys
08:40:39.0237 3692 Rasl2tp - ok
08:40:39.0237 3692 RasPppoe (855c9b1cd4756c5e9a2aa58a15f58c25) C:\Windows\system32\DRIVERS\raspppoe.sys
08:40:39.0268 3692 RasPppoe - ok
08:40:39.0299 3692 RasSstp (e8b1e447b008d07ff47d016c2b0eeecb) C:\Windows\system32\DRIVERS\rassstp.sys
08:40:39.0315 3692 RasSstp - ok
08:40:39.0346 3692 rdbss (77f665941019a1594d887a74f301fa2f) C:\Windows\system32\DRIVERS\rdbss.sys
08:40:39.0377 3692 rdbss - ok
08:40:39.0393 3692 rdpbus (302da2a0539f2cf54d7c6cc30c1f2d8d) C:\Windows\system32\DRIVERS\rdpbus.sys
08:40:39.0409 3692 rdpbus - ok
08:40:39.0409 3692 RDPCDD (cea6cc257fc9b7715f1c2b4849286d24) C:\Windows\system32\DRIVERS\RDPCDD.sys
08:40:39.0440 3692 RDPCDD - ok
08:40:39.0471 3692 RDPDR (1b6163c503398b23ff8b939c67747683) C:\Windows\system32\drivers\rdpdr.sys
08:40:39.0502 3692 RDPDR - ok
08:40:39.0533 3692 RDPENCDD (bb5971a4f00659529a5c44831af22365) C:\Windows\system32\drivers\rdpencdd.sys
08:40:39.0580 3692 RDPENCDD - ok
08:40:39.0580 3692 RDPREFMP (216f3fa57533d98e1f74ded70113177a) C:\Windows\system32\drivers\rdprefmp.sys
08:40:39.0611 3692 RDPREFMP - ok
08:40:39.0643 3692 RDPWD (15b66c206b5cb095bab980553f38ed23) C:\Windows\system32\drivers\RDPWD.sys
08:40:39.0674 3692 RDPWD - ok
08:40:39.0705 3692 rdyboost (34ed295fa0121c241bfef24764fc4520) C:\Windows\system32\drivers\rdyboost.sys
08:40:39.0721 3692 rdyboost - ok
08:40:39.0752 3692 regi (4d9afddda0efe97cdbfd3b5fa48b05f6) C:\Windows\system32\drivers\regi.sys
08:40:39.0752 3692 regi - ok
08:40:39.0783 3692 rspndr (ddc86e4f8e7456261e637e3552e804ff) C:\Windows\system32\DRIVERS\rspndr.sys
08:40:39.0830 3692 rspndr - ok
08:40:39.0861 3692 RTHDMIAzAudService (34f05c417f038ffa3bef69b798d7d7dd) C:\Windows\system32\drivers\RtHDMIVX.sys
08:40:39.0908 3692 RTHDMIAzAudService - ok
08:40:39.0939 3692 RTL8167 (f65f171165fbb613f7aa3cc78e8cab42) C:\Windows\system32\DRIVERS\Rt64win7.sys
08:40:40.0001 3692 RTL8167 - ok
08:40:40.0017 3692 s3cap (e60c0a09f997826c7627b244195ab581) C:\Windows\system32\drivers\vms3cap.sys
08:40:40.0048 3692 s3cap - ok
08:40:40.0064 3692 sbp2port (ac03af3329579fffb455aa2daabbe22b) C:\Windows\system32\drivers\sbp2port.sys
08:40:40.0079 3692 sbp2port - ok
08:40:40.0111 3692 scfilter (253f38d0d7074c02ff8deb9836c97d2b) C:\Windows\system32\DRIVERS\scfilter.sys
08:40:40.0173 3692 scfilter - ok
08:40:40.0189 3692 secdrv (3ea8a16169c26afbeb544e0e48421186) C:\Windows\system32\drivers\secdrv.sys
08:40:40.0235 3692 secdrv - ok
08:40:40.0251 3692 Serenum (cb624c0035412af0debec78c41f5ca1b) C:\Windows\system32\DRIVERS\serenum.sys
08:40:40.0267 3692 Serenum - ok
08:40:40.0282 3692 Serial (c1d8e28b2c2adfaec4ba89e9fda69bd6) C:\Windows\system32\DRIVERS\serial.sys
08:40:40.0298 3692 Serial - ok
08:40:40.0329 3692 sermouse (1c545a7d0691cc4a027396535691c3e3) C:\Windows\system32\DRIVERS\sermouse.sys
08:40:40.0329 3692 sermouse - ok
08:40:40.0360 3692 sffdisk (a554811bcd09279536440c964ae35bbf) C:\Windows\system32\drivers\sffdisk.sys
08:40:40.0376 3692 sffdisk - ok
08:40:40.0407 3692 sffp_mmc (ff414f0baefeba59bc6c04b3db0b87bf) C:\Windows\system32\drivers\sffp_mmc.sys
08:40:40.0454 3692 sffp_mmc - ok
08:40:40.0469 3692 sffp_sd (dd85b78243a19b59f0637dcf284da63c) C:\Windows\system32\drivers\sffp_sd.sys
08:40:40.0501 3692 sffp_sd - ok
08:40:40.0516 3692 sfloppy (a9d601643a1647211a1ee2ec4e433ff4) C:\Windows\system32\DRIVERS\sfloppy.sys
08:40:40.0547 3692 sfloppy - ok
08:40:40.0579 3692 SiSRaid2 (843caf1e5fde1ffd5ff768f23a51e2e1) C:\Windows\system32\DRIVERS\SiSRaid2.sys
08:40:40.0594 3692 SiSRaid2 - ok
08:40:40.0610 3692 SiSRaid4 (6a6c106d42e9ffff8b9fcb4f754f6da4) C:\Windows\system32\DRIVERS\sisraid4.sys
08:40:40.0625 3692 SiSRaid4 - ok
08:40:40.0641 3692 Smb (548260a7b8654e024dc30bf8a7c5baa4) C:\Windows\system32\DRIVERS\smb.sys
08:40:40.0672 3692 Smb - ok
08:40:40.0703 3692 snapman (db0f68b3bbc1429826cca1e31ff8b00b) C:\Windows\system32\DRIVERS\snapman.sys
08:40:40.0750 3692 snapman - ok
08:40:40.0781 3692 spldr (b9e31e5cacdfe584f34f730a677803f9) C:\Windows\system32\drivers\spldr.sys
08:40:40.0797 3692 spldr - ok
08:40:40.0859 3692 sptd (602884696850c86434530790b110e8eb) C:\Windows\system32\Drivers\sptd.sys
08:40:40.0859 3692 Suspicious file (NoAccess): C:\Windows\system32\Drivers\sptd.sys. md5: 602884696850c86434530790b110e8eb
08:40:40.0859 3692 sptd ( LockedFile.Multi.Generic ) - warning
08:40:40.0859 3692 sptd - detected LockedFile.Multi.Generic (1)
08:40:40.0906 3692 srv (441fba48bff01fdb9d5969ebc1838f0b) C:\Windows\system32\DRIVERS\srv.sys
08:40:40.0937 3692 srv - ok
08:40:40.0953 3692 srv2 (b4adebbf5e3677cce9651e0f01f7cc28) C:\Windows\system32\DRIVERS\srv2.sys
08:40:40.0984 3692 srv2 - ok
08:40:41.0015 3692 srvnet (27e461f0be5bff5fc737328f749538c3) C:\Windows\system32\DRIVERS\srvnet.sys
08:40:41.0062 3692 srvnet - ok
08:40:41.0125 3692 stexstor (f3817967ed533d08327dc73bc4d5542a) C:\Windows\system32\DRIVERS\stexstor.sys
08:40:41.0125 3692 stexstor - ok
08:40:41.0156 3692 storflt (7785dc213270d2fc066538daf94087e7) C:\Windows\system32\drivers\vmstorfl.sys
08:40:41.0171 3692 storflt - ok
08:40:41.0187 3692 storvsc (d34e4943d5ac096c8edeebfd80d76e23) C:\Windows\system32\drivers\storvsc.sys
08:40:41.0203 3692 storvsc - ok
08:40:41.0218 3692 swenum (d01ec09b6711a5f8e7e6564a4d0fbc90) C:\Windows\system32\drivers\swenum.sys
08:40:41.0218 3692 swenum - ok
08:40:41.0296 3692 tap0901 (6e8732acfd4c8d1ec4a4e872168b8b92) C:\Windows\system32\DRIVERS\tap0901.sys
08:40:41.0327 3692 tap0901 - ok
08:40:41.0374 3692 Tcpip (f0e98c00a09fdf791525829a1d14240f) C:\Windows\system32\drivers\tcpip.sys
08:40:41.0437 3692 Tcpip - ok
08:40:41.0468 3692 TCPIP6 (f0e98c00a09fdf791525829a1d14240f) C:\Windows\system32\DRIVERS\tcpip.sys
08:40:41.0499 3692 TCPIP6 - ok
08:40:41.0530 3692 tcpipreg (df687e3d8836bfb04fcc0615bf15a519) C:\Windows\system32\drivers\tcpipreg.sys
08:40:41.0561 3692 tcpipreg - ok
08:40:41.0577 3692 TDPIPE (3371d21011695b16333a3934340c4e7c) C:\Windows\system32\drivers\tdpipe.sys
08:40:41.0608 3692 TDPIPE - ok
08:40:41.0639 3692 tdrpman258 (bf7ac81df6fbe09438d9dc7188178ea9) C:\Windows\system32\DRIVERS\tdrpm258.sys
08:40:41.0671 3692 tdrpman258 - ok
08:40:41.0702 3692 TDTCP (e4245bda3190a582d55ed09e137401a9) C:\Windows\system32\drivers\tdtcp.sys
08:40:41.0733 3692 TDTCP - ok
08:40:41.0764 3692 tdx (ddad5a7ab24d8b65f8d724f5c20fd806) C:\Windows\system32\DRIVERS\tdx.sys
08:40:41.0827 3692 tdx - ok
08:40:41.0842 3692 TermDD (561e7e1f06895d78de991e01dd0fb6e5) C:\Windows\system32\drivers\termdd.sys
08:40:41.0842 3692 TermDD - ok
08:40:41.0873 3692 timounter (2c1caf5563548a15515eab07d2a069c6) C:\Windows\system32\DRIVERS\timntr.sys
08:40:41.0905 3692 timounter - ok
08:40:41.0905 3692 truecrypt - ok
08:40:41.0936 3692 tssecsrv (ce18b2cdfc837c99e5fae9ca6cba5d30) C:\Windows\system32\DRIVERS\tssecsrv.sys
08:40:41.0998 3692 tssecsrv - ok
08:40:42.0029 3692 TsUsbFlt (d11c783e3ef9a3c52c0ebe83cc5000e9) C:\Windows\system32\drivers\tsusbflt.sys
08:40:42.0045 3692 TsUsbFlt - ok
08:40:42.0092 3692 tunnel (3566a8daafa27af944f5d705eaa64894) C:\Windows\system32\DRIVERS\tunnel.sys
08:40:42.0154 3692 tunnel - ok
08:40:42.0170 3692 uagp35 (b4dd609bd7e282bfc683cec7eaaaad67) C:\Windows\system32\DRIVERS\uagp35.sys
08:40:42.0170 3692 uagp35 - ok
08:40:42.0201 3692 udfs (ff4232a1a64012baa1fd97c7b67df593) C:\Windows\system32\DRIVERS\udfs.sys
08:40:42.0295 3692 udfs - ok
08:40:42.0341 3692 uliagpkx (4bfe1bc28391222894cbf1e7d0e42320) C:\Windows\system32\drivers\uliagpkx.sys
08:40:42.0373 3692 uliagpkx - ok
08:40:42.0451 3692 UltraMonUtility (694bcf23662f97d987cf4c6739c35f8b) C:\Program Files (x86)\Common Files\Realtime Soft\UltraMonMirrorDrv\x64\UltraMonUtility.sys
08:40:42.0482 3692 UltraMonUtility - ok
08:40:42.0529 3692 umbus (dc54a574663a895c8763af0fa1ff7561) C:\Windows\system32\drivers\umbus.sys
08:40:42.0575 3692 umbus - ok
08:40:42.0591 3692 UmPass (b2e8e8cb557b156da5493bbddcc1474d) C:\Windows\system32\DRIVERS\umpass.sys
08:40:42.0622 3692 UmPass - ok
08:40:42.0638 3692 upperdev (69405c5429ef448b319f08042b897fc6) C:\Windows\system32\DRIVERS\usbser_lowerfltx64.sys
08:40:42.0669 3692 upperdev - ok
08:40:42.0716 3692 USBAAPL64 (9e58997a211c8c9ac9e6cffa53614a73) C:\Windows\system32\Drivers\usbaapl64.sys
08:40:42.0763 3692 USBAAPL64 - ok
08:40:42.0794 3692 usbaudio (82e8f44688e6fac57b5b7c6fc7adbc2a) C:\Windows\system32\drivers\usbaudio.sys
08:40:42.0825 3692 usbaudio - ok
08:40:42.0856 3692 usbccgp (6f1a3157a1c89435352ceb543cdb359c) C:\Windows\system32\DRIVERS\usbccgp.sys
08:40:42.0872 3692 usbccgp - ok
08:40:42.0903 3692 usbcir (af0892a803fdda7492f595368e3b68e7) C:\Windows\system32\drivers\usbcir.sys
08:40:42.0934 3692 usbcir - ok
08:40:42.0965 3692 usbehci (c025055fe7b87701eb042095df1a2d7b) C:\Windows\system32\DRIVERS\usbehci.sys
08:40:43.0012 3692 usbehci - ok
08:40:43.0043 3692 usbfilter (6648c6d7323a2ce0c4776c36cefbcb14) C:\Windows\system32\DRIVERS\usbfilter.sys
08:40:43.0059 3692 usbfilter - ok
08:40:43.0090 3692 usbhub (287c6c9410b111b68b52ca298f7b8c24) C:\Windows\system32\DRIVERS\usbhub.sys
08:40:43.0121 3692 usbhub - ok
08:40:43.0153 3692 usbohci (9840fc418b4cbd632d3d0a667a725c31) C:\Windows\system32\DRIVERS\usbohci.sys
08:40:43.0168 3692 usbohci - ok
08:40:43.0199 3692 usbprint (73188f58fb384e75c4063d29413cee3d) C:\Windows\system32\DRIVERS\usbprint.sys
08:40:43.0215 3692 usbprint - ok
08:40:43.0246 3692 usbscan (aaa2513c8aed8b54b189fd0c6b1634c0) C:\Windows\system32\DRIVERS\usbscan.sys
08:40:43.0277 3692 usbscan - ok
08:40:43.0324 3692 usbser (4acee387fa8fd39f83564fcd2fc234f2) C:\Windows\system32\drivers\usbser.sys
08:40:43.0340 3692 usbser - ok
08:40:43.0355 3692 UsbserFilt (0305d5f7d5751d0ae763250eb78dc5d7) C:\Windows\system32\DRIVERS\usbser_lowerfltx64j.sys
08:40:43.0402 3692 UsbserFilt - ok
08:40:43.0433 3692 USBSTOR (fed648b01349a3c8395a5169db5fb7d6) C:\Windows\system32\DRIVERS\USBSTOR.SYS
08:40:43.0465 3692 USBSTOR - ok
08:40:43.0496 3692 usbuhci (81fb2216d3a60d1284455d511797db3d) C:\Windows\system32\DRIVERS\usbuhci.sys
08:40:43.0527 3692 usbuhci - ok
08:40:43.0543 3692 usbvideo (454800c2bc7f3927ce030141ee4f4c50) C:\Windows\System32\Drivers\usbvideo.sys
08:40:43.0574 3692 usbvideo - ok
08:40:43.0589 3692 vdrvroot (c5c876ccfc083ff3b128f933823e87bd) C:\Windows\system32\drivers\vdrvroot.sys
08:40:43.0605 3692 vdrvroot - ok
08:40:43.0636 3692 vga (da4da3f5e02943c2dc8c6ed875de68dd) C:\Windows\system32\DRIVERS\vgapnp.sys
08:40:43.0667 3692 vga - ok
08:40:43.0683 3692 VgaSave (53e92a310193cb3c03bea963de7d9cfc) C:\Windows\System32\drivers\vga.sys
08:40:43.0730 3692 VgaSave - ok
08:40:43.0745 3692 vhdmp (2ce2df28c83aeaf30084e1b1eb253cbb) C:\Windows\system32\drivers\vhdmp.sys
08:40:43.0761 3692 vhdmp - ok
08:40:43.0792 3692 viaide (e5689d93ffe4e5d66c0178761240dd54) C:\Windows\system32\drivers\viaide.sys
08:40:43.0823 3692 viaide - ok
08:40:43.0855 3692 vmbus (86ea3e79ae350fea5331a1303054005f) C:\Windows\system32\drivers\vmbus.sys
08:40:43.0870 3692 vmbus - ok
08:40:43.0886 3692 VMBusHID (7de90b48f210d29649380545db45a187) C:\Windows\system32\drivers\VMBusHID.sys
08:40:43.0901 3692 VMBusHID - ok
08:40:43.0917 3692 vmci (cdaa992c18f3f3612444c818a478cf57) C:\Windows\system32\drivers\vmci.sys
08:40:43.0917 3692 vmci - ok
08:40:43.0933 3692 vmkbd (ea9c266cd4b4bb7c7d818c1c27461959) C:\Windows\system32\drivers\VMkbd.sys
08:40:43.0933 3692 vmkbd - ok
08:40:43.0948 3692 VMnetAdapter (9d54f1339e78c95bf3d9939ebcb66378) C:\Windows\system32\DRIVERS\vmnetadapter.sys
08:40:43.0948 3692 VMnetAdapter - ok
08:40:43.0964 3692 VMnetBridge (fb54ef3aa613d2832fd3812e7cb2fc75) C:\Windows\system32\DRIVERS\vmnetbridge.sys
08:40:43.0979 3692 VMnetBridge - ok
08:40:43.0995 3692 VMnetuserif (479948eb42e189c076b45ebaf2d12bbc) C:\Windows\system32\drivers\vmnetuserif.sys
08:40:44.0011 3692 VMnetuserif - ok
08:40:44.0026 3692 VMparport (a8a805479334da10cfe10a4e20b6f25b) C:\Windows\system32\drivers\VMparport.sys
08:40:44.0026 3692 VMparport - ok
08:40:44.0057 3692 vmusb (415b167695c4b5960a13098622ef3d80) C:\Windows\system32\Drivers\vmusb.sys
08:40:44.0073 3692 vmusb - ok
08:40:44.0089 3692 vmx86 (05645d6651ca7a02298aae475bbcad6e) C:\Windows\system32\drivers\vmx86.sys
08:40:44.0089 3692 vmx86 - ok
08:40:44.0104 3692 volmgr (d2aafd421940f640b407aefaaebd91b0) C:\Windows\system32\drivers\volmgr.sys
08:40:44.0120 3692 volmgr - ok
08:40:44.0151 3692 volmgrx (a255814907c89be58b79ef2f189b843b) C:\Windows\system32\drivers\volmgrx.sys
08:40:44.0198 3692 volmgrx - ok
08:40:44.0213 3692 volsnap (0d08d2f3b3ff84e433346669b5e0f639) C:\Windows\system32\drivers\volsnap.sys
08:40:44.0229 3692 volsnap - ok
08:40:44.0245 3692 vsmraid (5e2016ea6ebaca03c04feac5f330d997) C:\Windows\system32\DRIVERS\vsmraid.sys
08:40:44.0260 3692 vsmraid - ok
08:40:44.0307 3692 vstor2-ws60 (69f57e89e6ebc5012d210527af005a70) C:\Program Files (x86)\VMware\VMware Workstation\vstor2-ws60.sys
08:40:44.0323 3692 vstor2-ws60 - ok
08:40:44.0338 3692 vwifibus (36d4720b72b5c5d9cb2b9c29e9df67a1) C:\Windows\System32\drivers\vwifibus.sys
08:40:44.0385 3692 vwifibus - ok
08:40:44.0401 3692 WacomPen (4e9440f4f152a7b944cb1663d3935a3e) C:\Windows\system32\DRIVERS\wacompen.sys
08:40:44.0432 3692 WacomPen - ok
08:40:44.0447 3692 WANARP (356afd78a6ed4457169241ac3965230c) C:\Windows\system32\DRIVERS\wanarp.sys
08:40:44.0510 3692 WANARP - ok
08:40:44.0510 3692 Wanarpv6 (356afd78a6ed4457169241ac3965230c) C:\Windows\system32\DRIVERS\wanarp.sys
08:40:44.0541 3692 Wanarpv6 - ok
08:40:44.0572 3692 Wd (72889e16ff12ba0f235467d6091b17dc) C:\Windows\system32\DRIVERS\wd.sys
08:40:44.0572 3692 Wd - ok
08:40:44.0588 3692 Wdf01000 (441bd2d7b4f98134c3a4f9fa570fd250) C:\Windows\system32\drivers\Wdf01000.sys
08:40:44.0603 3692 Wdf01000 - ok
08:40:44.0635 3692 WfpLwf (611b23304bf067451a9fdee01fbdd725) C:\Windows\system32\DRIVERS\wfplwf.sys
08:40:44.0650 3692 WfpLwf - ok
08:40:44.0666 3692 WIMMount (05ecaec3e4529a7153b3136ceb49f0ec) C:\Windows\system32\drivers\wimmount.sys
08:40:44.0681 3692 WIMMount - ok
08:40:44.0713 3692 WinUsb (fe88b288356e7b47b74b13372add906d) C:\Windows\system32\DRIVERS\WinUsb.sys
08:40:44.0744 3692 WinUsb - ok
08:40:44.0775 3692 WmBEnum (e7f4937b613b1e4294100c9d4efc36a9) C:\Windows\system32\drivers\WmBEnum.sys
08:40:44.0791 3692 WmBEnum - ok
08:40:44.0822 3692 WmFilter (6f6f2b263002b243d3501c7e6c8fc11d) C:\Windows\system32\drivers\WmFilter.sys
08:40:44.0837 3692 WmFilter - ok
08:40:44.0869 3692 WmHidLo (1584f8d5fdfe44c03dba85a2106b937f) C:\Windows\system32\drivers\WmHidLo.sys
08:40:44.0900 3692 WmHidLo - ok
08:40:44.0915 3692 WmiAcpi (f6ff8944478594d0e414d3f048f0d778) C:\Windows\system32\drivers\wmiacpi.sys
08:40:44.0947 3692 WmiAcpi - ok
08:40:44.0978 3692 WmVirHid (52b4fcc6afaec0ffd80bda63f9b140cd) C:\Windows\system32\drivers\WmVirHid.sys
08:40:44.0993 3692 WmVirHid - ok
08:40:45.0009 3692 WmXlCore (395b3e7fba81bdc4501641b3b2cf2e20) C:\Windows\system32\drivers\WmXlCore.sys
08:40:45.0025 3692 WmXlCore - ok
08:40:45.0040 3692 ws2ifsl (6bcc1d7d2fd2453957c5479a32364e52) C:\Windows\system32\drivers\ws2ifsl.sys
08:40:45.0071 3692 ws2ifsl - ok
08:40:45.0103 3692 WudfPf (d3381dc54c34d79b22cee0d65ba91b7c) C:\Windows\system32\drivers\WudfPf.sys
08:40:45.0181 3692 WudfPf - ok
08:40:45.0196 3692 WUDFRd (cf8d590be3373029d57af80914190682) C:\Windows\system32\DRIVERS\WUDFRd.sys
08:40:45.0227 3692 WUDFRd - ok
08:40:45.0274 3692 xnacc (4a5ce13408945e525503b5f73d29b9c5) C:\Windows\system32\DRIVERS\xnacc.sys
08:40:45.0305 3692 xnacc - ok
08:40:45.0337 3692 MBR (0x1B8) (a36c5e4f47e84449ff07ed3517b43a31) \Device\Harddisk0\DR0
08:40:45.0368 3692 \Device\Harddisk0\DR0 - ok
08:40:45.0383 3692 MBR (0x1B8) (a36c5e4f47e84449ff07ed3517b43a31) \Device\Harddisk1\DR1
08:40:45.0430 3692 \Device\Harddisk1\DR1 - ok
08:40:45.0446 3692 Boot (0x1200) (b234af2efb73d5e37d390d2f3663bccc) \Device\Harddisk0\DR0\Partition0
08:40:45.0446 3692 \Device\Harddisk0\DR0\Partition0 - ok
08:40:45.0461 3692 Boot (0x1200) (1872abe5f860cee20c6ead0e6c93b373) \Device\Harddisk0\DR0\Partition1
08:40:45.0477 3692 \Device\Harddisk0\DR0\Partition1 - ok
08:40:45.0477 3692 Boot (0x1200) (6c820c33e15d55526f8dc94c47db34a2) \Device\Harddisk0\DR0\Partition2
08:40:45.0477 3692 \Device\Harddisk0\DR0\Partition2 - ok
08:40:45.0493 3692 Boot (0x1200) (b2d16a74b116effeb8695791a9fde18b) \Device\Harddisk1\DR1\Partition0
08:40:45.0493 3692 \Device\Harddisk1\DR1\Partition0 - ok
08:40:45.0493 3692 ============================================================
08:40:45.0493 3692 Scan finished
08:40:45.0493 3692 ============================================================
08:40:45.0508 4732 Detected object count: 1
08:40:45.0508 4732 Actual detected object count: 1
08:42:07.0736 4732 sptd ( LockedFile.Multi.Generic ) - skipped by user
08:42:07.0736 4732 sptd ( LockedFile.Multi.Generic ) - User select action: Skip

Dann bitte jetzt CF ausführen:

ComboFix

Ein Leitfaden und Tutorium zur Nutzung von ComboFix

Lade dir ComboFix hier herunter auf deinen Desktop.

Schliesse alle Programme, vor allem dein Antivirenprogramm und andere Hintergrundwächter sowie deinen Internetbrowser.

Starte cofi.exe von deinem Desktop aus, bestätige die Warnmeldungen, führe die Updates durch (falls vorgeschlagen), installiere die Wiederherstellungskonsole (falls vorgeschlagen) und lass dein System durchsuchen.
Vermeide es auch während Combofix läuft die Maus und Tastatur zu benutzen.

Im Anschluss öffnet sich automatisch eine combofix.txt, diesen Inhalt bitte kopieren ([Strg]a, [Strg]c) und in deinen Beitrag einfügen ([Strg]v). Die Datei findest du außerdem unter: C:\ComboFix.txt.

Wichtiger Hinweis:

Combofix darf ausschließlich ausgeführt werden, wenn ein Kompetenzler dies ausdrücklich empfohlen hat!
Es sollte nie auf eigene Initiative hin ausgeführt werden! Eine falsche Benutzung kann ernsthafte Computerprobleme nach sich ziehen und eine Bereinigung der Infektion noch erschweren.

Hm das funktioniert irgendwie nicht... ich führe das als administrator aus, aber gleich zu beginn des scans kommt eine fehlermeldung, und nach über einer Stunde lässt sich da keine Aktivität erkennen... Ich habe auch neugestartet und es nochmal probiert.. ich hänge einen screenshot an.

Oje, du bist schon der 2. mit dieser Meldung :(
Ich fürchte da hat sich ein Bug eingeschlichen.
Ist CF mittlerweile weiter oder bleibt es an dieser Stelle hängen?

Öhm, ich habe es ja irgendwann, nach geschätzt 1,5 stunden abgebrochen, dann neugestartet und nur kurz getestet... aber beim ersten mal war auch keine festplattenaktivität oder so mehr zu hören.. hmm

Starte Windows neu, lösch die alte combofix.exe, lade CF neu runter und probier es bitte nochmal.

Ok, hab ich gemacht, gleicher Fehler und es läuft nicht weiter.

Dann müssen wir erstmal abwarten oder lassen CF vorerst nur weg.

Downloade dir bitte aswMBR.exe und speichere die Datei auf deinem Desktop.

Starte die aswMBR.exe Vista und Win7 User mit Rechtsklick "als Admininstartor starten"
Das Tool wird dich fragen, ob Du mit der aktuellen Virendefinition von AVAST! dein System scannen willst. Beantworte diese Frage bitte mit Ja. (Sollte deine Firewall fragen, bitte den Zugriff auf das Internet zulassen) Der Download der Definitionen kann je nach Verbindung eine Weile dauern.
Klicke auf Scan.
Warte bitte bis Scan finished successfully im DOS Fenster steht.
Drücke auf Save Log und speichere diese auf dem Desktop.

Poste mir die aswMBR.txt in deiner nächsten Antwort. Wichtig: Drücke keinesfalls einen der Fix Buttons ohne Anweisung Hinweis: Sollte der Scan Button ausgeblendet sein, schließe das Tool und starte es erneut. Sollte es erneut nicht klappen teile mir das bitte mit.

Ok, hier ist der log:

Zitat:

aswMBR version 0.9.8.986 Copyright(c) 2011 AVAST Software
Run date: 2011-10-06 06:36:47
-----------------------------
06:36:47.306 OS Version: Windows x64 6.1.7601 Service Pack 1
06:36:47.306 Number of processors: 4 586 0x402
06:36:47.306 ComputerName: Name UserName:
06:36:47.743 Initialize success
06:36:47.899 AVAST engine defs: 11100501
06:37:07.711 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0
06:37:07.727 Disk 0 Vendor: SAMSUNG_HD103SJ 1AJ100E4 Size: 953869MB BusType: 3
06:37:07.727 Disk 1 \Device\Harddisk1\DR1 -> \Device\Ide\IdeDeviceP1T0L0-1
06:37:07.742 Disk 1 Vendor: SAMSUNG_HD204UI 1AQ10001 Size: 1907729MB BusType: 3
06:37:09.755 Disk 0 MBR read successfully
06:37:09.755 Disk 0 MBR scan
06:37:09.770 Disk 0 Windows 7 default MBR code
06:37:09.770 Service scanning
06:37:13.171 Service sptd C:\Windows\System32\Drivers\sptd.sys **LOCKED** 32
06:37:14.747 Modules scanning
06:37:14.747 Disk 0 trace - called modules:
06:37:14.778 ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys >>UNKNOWN [0xfffffa80039ab2c0]<<
06:37:14.778 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa8004b19060]
06:37:14.793 3 CLASSPNP.SYS[fffff8800168c43f] -> nt!IofCallDriver -> [0xfffffa8004802580]
06:37:14.809 5 ACPI.sys[fffff88000e3a7a1] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP0T0L0-0[0xfffffa8004804060]
06:37:14.809 \Driver\atapi[0xfffffa8003ae2c70] -> IRP_MJ_CREATE -> 0xfffffa80039ab2c0
06:37:15.059 AVAST engine scan C:\Windows
06:37:17.102 AVAST engine scan C:\Windows\system32
06:38:24.276 AVAST engine scan C:\Windows\system32\drivers
06:38:31.218 AVAST engine scan C:\Users\Benutzername
06:39:03.728 AVAST engine scan C:\ProgramData
06:40:31.322 Scan finished successfully
06:41:59.666 Disk 0 MBR has been saved successfully to "C:\Users\Name\Downloads\MBR.dat"
06:41:59.666 The log file has been saved successfully to "C:\Users\Name\Downloads\aswMBR.txt"

Ok, der MBR ist i.O.

Starte Windows neu, lösch die alte combofix.exe, lade CF neu runter und probier es bitte nochmal.

Ok, diesmal hat es geklappt:

Combofix Logfile:

Code:

ComboFix 11-10-06.03 - Benutzername1 06.10.2011  19:12:24.1.4 - x64

Microsoft Windows 7 Professional   6.1.7601.1.1252.49.1031.18.4094.2870 [GMT 2:00]

ausgeführt von:: c:\users\Name\Desktop\ComboFix.exe

AV: avast! Antivirus *Enabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}

SP: avast! Antivirus *Enabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}

SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

.

.

((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))

.

.

c:\users\Benutzername1\AppData\Roaming\inst.exe

c:\users\Name\AppData\Roaming\vso_ts_preview.xml

.

.

(((((((((((((((((((((((   Dateien erstellt von 2011-09-06 bis 2011-10-06  ))))))))))))))))))))))))))))))

.

.

2011-10-06 17:18 . 2011-10-06 17:18        --------        d-----w-        c:\users\Benutzername2\AppData\Local\temp

2011-10-06 17:18 . 2011-10-06 17:18        --------        d-----w-        c:\users\Benutzername1\AppData\Local\temp

2011-10-06 17:18 . 2011-10-06 17:18        --------        d-----w-        c:\users\Default\AppData\Local\temp

2011-10-04 18:53 . 2011-10-04 18:53        --------        d-----w-        C:\_OTL

2011-09-28 17:35 . 2000-01-28 16:17        557328        ----a-w-        c:\program files\Common Files\Microsoft Shared\dao\dao360.dll

2011-09-28 17:33 . 2011-09-28 17:34        --------        d-----w-        c:\program files (x86)\Schwedisch AKTIV

2011-09-25 09:23 . 2011-09-25 10:15        --------        d-----w-        c:\program files\UltraVNC

2011-09-23 20:28 . 2011-09-23 20:28        --------        d-----w-        c:\users\Name\AppData\Roaming\Malwarebytes

2011-09-23 20:28 . 2011-09-23 20:28        --------        d-----w-        c:\users\Benutzername1\AppData\Roaming\Malwarebytes

2011-09-23 20:28 . 2011-09-23 20:28        --------        d-----w-        c:\programdata\Malwarebytes

2011-09-23 20:28 . 2011-09-23 20:28        --------        d-----w-        c:\program files (x86)\Malwarebytes Anti-Malware

2011-09-23 20:28 . 2011-08-31 15:00        25416        ----a-w-        c:\windows\system32\drivers\mbam.sys

2011-09-23 20:07 . 2011-09-23 20:07        --------        d-----w-        c:\program files (x86)\Common Files\Java

2011-09-18 11:02 . 2011-09-18 11:02        --------        d-----r-        c:\users\Benutzername1\AppData\Roaming\Brother

2011-09-11 11:01 . 2011-09-11 11:01        --------        d-----w-        c:\users\Name\AppData\Roaming\atitray

2011-09-11 11:00 . 2011-09-11 11:00        --------        d-----w-        c:\users\Benutzername1\AppData\Roaming\atitray

2011-09-11 10:58 . 2011-10-06 17:09        --------        d-----w-        c:\program files (x86)\ATI Tray Tools

2011-09-11 10:53 . 2011-09-11 10:53        --------        d-----w-        c:\users\Benutzername1\AppData\Local\AMD

2011-09-11 09:46 . 2011-09-11 09:46        --------        d-----w-        c:\users\Name\AppData\Local\AMD

2011-09-11 09:46 . 2011-09-11 09:46        --------        d-----w-        c:\programdata\ATI

2011-09-11 09:45 . 2011-09-11 09:45        --------        d-----w-        c:\program files\Common Files\ATI Technologies

2011-09-11 09:45 . 2011-09-11 09:45        --------        d-----w-        c:\program files (x86)\Common Files\ATI Technologies

2011-09-11 09:44 . 2011-09-11 09:44        --------        d-----w-        c:\programdata\AMD

2011-09-11 09:42 . 2011-09-11 09:44        --------        d-----w-        c:\program files\ATI Technologies

.

.

.

((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2011-09-23 20:06 . 2011-05-16 16:18        404640        ----a-w-        c:\windows\SysWow64\FlashPlayerCPLApp.cpl

2011-09-07 09:32 . 2010-06-24 10:33        18328        ----a-w-        c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll

2011-09-06 20:45 . 2010-06-29 06:20        41184        ----a-w-        c:\windows\avastSS.scr

2011-09-06 20:45 . 2010-02-12 18:43        199304        ----a-w-        c:\windows\SysWow64\aswBoot.exe

2011-09-06 20:45 . 2011-01-14 10:48        254400        ----a-w-        c:\windows\system32\aswBoot.exe

2011-09-06 20:38 . 2011-04-19 13:33        601944        ----a-w-        c:\windows\system32\drivers\aswSnx.sys

2011-09-06 20:38 . 2010-02-12 18:44        301912        ----a-w-        c:\windows\system32\drivers\aswSP.sys

2011-09-06 20:36 . 2010-02-12 18:44        42328        ----a-w-        c:\windows\system32\drivers\aswRdr.sys

2011-09-06 20:36 . 2010-02-12 18:44        58200        ----a-w-        c:\windows\system32\drivers\aswTdi.sys

2011-09-06 20:36 . 2010-02-12 18:44        65368        ----a-w-        c:\windows\system32\drivers\aswMonFlt.sys

2011-09-06 20:36 . 2010-02-12 18:44        24408        ----a-w-        c:\windows\system32\drivers\aswFsBlk.sys

2011-08-18 11:27 . 2010-12-24 16:18        3766        --sha-w-        c:\programdata\KGyGaAvL.sys

2011-07-28 22:23 . 2011-07-28 22:23        9980416        ----a-w-        c:\windows\system32\drivers\atikmdag.sys

2011-07-28 22:09 . 2011-07-28 22:09        23921664        ----a-w-        c:\windows\system32\atio6axx.dll

2011-07-28 21:44 . 2011-07-28 21:44        18388480        ----a-w-        c:\windows\SysWow64\atioglxx.dll

2011-07-28 21:40 . 2011-07-28 21:40        151552        ----a-w-        c:\windows\system32\atiapfxx.exe

2011-07-28 21:40 . 2011-07-28 21:40        726528        ----a-w-        c:\windows\SysWow64\aticfx32.dll

2011-07-28 21:39 . 2011-07-28 21:39        852992        ----a-w-        c:\windows\system32\aticfx64.dll

2011-07-28 21:36 . 2011-07-28 21:36        462848        ----a-w-        c:\windows\system32\ATIDEMGX.dll

2011-07-28 21:36 . 2011-07-28 21:36        485376        ----a-w-        c:\windows\system32\atieclxx.exe

2011-07-28 21:35 . 2011-07-28 21:35        204288        ----a-w-        c:\windows\system32\atiesrxx.exe

2011-07-28 21:34 . 2011-07-28 21:34        120320        ----a-w-        c:\windows\system32\atitmm64.dll

2011-07-28 21:34 . 2011-07-28 21:34        423424        ----a-w-        c:\windows\system32\atipdl64.dll

2011-07-28 21:33 . 2011-07-28 21:33        356352        ----a-w-        c:\windows\SysWow64\atipdlxx.dll

2011-07-28 21:33 . 2011-07-28 21:33        278528        ----a-w-        c:\windows\SysWow64\Oemdspif.dll

2011-07-28 21:33 . 2011-07-28 21:33        21504        ----a-w-        c:\windows\system32\atimuixx.dll

2011-07-28 21:33 . 2011-07-28 21:33        59392        ----a-w-        c:\windows\system32\atiedu64.dll

2011-07-28 21:33 . 2011-07-28 21:33        43520        ----a-w-        c:\windows\SysWow64\ati2edxx.dll

2011-07-28 21:30 . 2011-07-28 21:30        4198912        ----a-w-        c:\windows\SysWow64\atidxx32.dll

2011-07-28 21:20 . 2011-07-28 21:20        4943360        ----a-w-        c:\windows\system32\atidxx64.dll

2011-07-28 21:12 . 2011-07-28 21:12        1113088        ----a-w-        c:\windows\system32\atiumd6v.dll

2011-07-28 21:11 . 2011-07-28 21:11        1828864        ----a-w-        c:\windows\SysWow64\atiumdmv.dll

2011-07-28 21:11 . 2011-07-28 21:11        3871744        ----a-w-        c:\windows\system32\atiumd6a.dll

2011-07-28 21:11 . 2011-07-28 21:11        51200        ----a-w-        c:\windows\system32\aticalrt64.dll

2011-07-28 21:11 . 2011-07-28 21:11        46080        ----a-w-        c:\windows\SysWow64\aticalrt.dll

2011-07-28 21:11 . 2011-07-28 21:11        44544        ----a-w-        c:\windows\system32\aticalcl64.dll

2011-07-28 21:11 . 2011-07-28 21:11        44032        ----a-w-        c:\windows\SysWow64\aticalcl.dll

2011-07-28 21:10 . 2011-07-28 21:10        9644544        ----a-w-        c:\windows\system32\aticaldd64.dll

2011-07-28 21:09 . 2011-07-28 21:09        4256768        ----a-w-        c:\windows\SysWow64\atiumdag.dll

2011-07-28 21:07 . 2011-07-28 21:07        8247296        ----a-w-        c:\windows\SysWow64\aticaldd.dll

2011-07-28 21:03 . 2011-07-28 21:03        4056064        ----a-w-        c:\windows\SysWow64\atiumdva.dll

2011-07-28 21:02 . 2011-07-28 21:02        5399040        ----a-w-        c:\windows\system32\atiumd64.dll

2011-07-28 21:01 . 2011-07-28 21:01        58880        ----a-w-        c:\windows\system32\coinst.dll

2011-07-28 20:54 . 2011-07-28 20:54        378368        ----a-w-        c:\windows\system32\atiadlxx.dll

2011-07-28 20:54 . 2011-07-28 20:54        266240        ----a-w-        c:\windows\SysWow64\atiadlxy.dll

2011-07-28 20:54 . 2011-07-28 20:54        15360        ----a-w-        c:\windows\system32\atig6pxx.dll

2011-07-28 20:54 . 2011-07-28 20:54        13312        ----a-w-        c:\windows\SysWow64\atiglpxx.dll

2011-07-28 20:54 . 2011-07-28 20:54        13312        ----a-w-        c:\windows\system32\atiglpxx.dll

2011-07-28 20:54 . 2011-07-28 20:54        39936        ----a-w-        c:\windows\system32\atig6txx.dll

2011-07-28 20:54 . 2011-07-28 20:54        32768        ----a-w-        c:\windows\SysWow64\atigktxx.dll

2011-07-28 20:54 . 2011-07-28 20:54        309248        ----a-w-        c:\windows\system32\drivers\atikmpag.sys

2011-07-28 20:53 . 2011-07-28 20:53        40960        ----a-w-        c:\windows\system32\atiuxp64.dll

2011-07-28 20:53 . 2011-07-28 20:53        31744        ----a-w-        c:\windows\SysWow64\atiuxpag.dll

2011-07-28 20:53 . 2011-07-28 20:53        38912        ----a-w-        c:\windows\system32\atiu9p64.dll

2011-07-28 20:53 . 2011-07-28 20:53        29184        ----a-w-        c:\windows\SysWow64\atiu9pag.dll

2011-07-28 20:52 . 2011-07-28 20:52        53248        ----a-w-        c:\windows\system32\drivers\ati2erec.dll

2011-07-28 20:51 . 2011-07-28 20:51        53760        ----a-w-        c:\windows\system32\atimpc64.dll

2011-07-28 20:51 . 2011-07-28 20:51        53760        ----a-w-        c:\windows\system32\amdpcom64.dll

2011-07-28 20:51 . 2011-07-28 20:51        52736        ----a-w-        c:\windows\SysWow64\atimpc32.dll

2011-07-28 20:51 . 2011-07-28 20:51        52736        ----a-w-        c:\windows\SysWow64\amdpcom32.dll

2011-07-22 05:42 . 2011-09-04 19:49        2303488        ----a-w-        c:\windows\system32\jscript9.dll

2011-07-22 05:36 . 2011-09-04 19:49        1389056        ----a-w-        c:\windows\system32\wininet.dll

2011-07-22 05:32 . 2011-09-04 19:49        2382848        ----a-w-        c:\windows\system32\mshtml.tlb

2011-07-22 02:54 . 2011-09-04 19:49        1797632        ----a-w-        c:\windows\SysWow64\jscript9.dll

2011-07-22 02:48 . 2011-09-04 19:49        1126912        ----a-w-        c:\windows\SysWow64\wininet.dll

2011-07-22 02:44 . 2011-09-04 19:49        2382848        ----a-w-        c:\windows\SysWow64\mshtml.tlb

2011-07-19 03:05 . 2010-06-12 08:05        472808        ----a-w-        c:\windows\SysWow64\deployJava1.dll

2011-07-16 05:41 . 2011-09-04 19:48        362496        ----a-w-        c:\windows\system32\wow64win.dll

2011-07-16 05:41 . 2011-09-04 19:48        243200        ----a-w-        c:\windows\system32\wow64.dll

2011-07-16 05:41 . 2011-09-04 19:48        13312        ----a-w-        c:\windows\system32\wow64cpu.dll

2011-07-16 05:39 . 2011-09-04 19:48        16384        ----a-w-        c:\windows\system32\ntvdm64.dll

2011-07-16 05:37 . 2011-09-04 19:48        421888        ----a-w-        c:\windows\system32\KernelBase.dll

2011-07-16 05:21 . 2011-09-04 19:48        6144        ---ha-w-        c:\windows\system32\api-ms-win-security-base-l1-1-0.dll

2011-07-16 05:21 . 2011-09-04 19:48        4608        ---ha-w-        c:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll

2011-07-16 05:21 . 2011-09-04 19:48        4096        ---ha-w-        c:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll

2011-07-16 05:21 . 2011-09-04 19:48        4096        ---ha-w-        c:\windows\system32\api-ms-win-core-synch-l1-1-0.dll

2011-07-16 05:21 . 2011-09-04 19:48        3584        ---ha-w-        c:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll

2011-07-16 05:21 . 2011-09-04 19:48        3072        ---ha-w-        c:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll

2011-07-16 05:21 . 2011-09-04 19:48        3072        ---ha-w-        c:\windows\system32\api-ms-win-core-util-l1-1-0.dll

2011-07-16 05:21 . 2011-09-04 19:48        3072        ---ha-w-        c:\windows\system32\api-ms-win-core-string-l1-1-0.dll

2011-07-16 05:21 . 2011-09-04 19:48        4608        ---ha-w-        c:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll

2011-07-16 05:21 . 2011-09-04 19:48        4096        ---ha-w-        c:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll

2011-07-16 05:21 . 2011-09-04 19:48        3584        ---ha-w-        c:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll

2011-07-16 05:21 . 2011-09-04 19:48        3584        ---ha-w-        c:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll

2011-07-16 05:21 . 2011-09-04 19:48        3584        ---ha-w-        c:\windows\system32\api-ms-win-core-misc-l1-1-0.dll

2011-07-16 05:21 . 2011-09-04 19:48        3584        ---ha-w-        c:\windows\system32\api-ms-win-core-memory-l1-1-0.dll

2011-07-16 05:21 . 2011-09-04 19:48        3584        ---ha-w-        c:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll

2011-07-16 05:21 . 2011-09-04 19:48        3072        ---ha-w-        c:\windows\system32\api-ms-win-core-profile-l1-1-0.dll

2011-07-16 05:21 . 2011-09-04 19:48        3072        ---ha-w-        c:\windows\system32\api-ms-win-core-io-l1-1-0.dll

2011-07-16 05:21 . 2011-09-04 19:48        3072        ---ha-w-        c:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll

2011-07-16 05:21 . 2011-09-04 19:48        4096        ---ha-w-        c:\windows\system32\api-ms-win-core-localization-l1-1-0.dll

2011-07-16 05:21 . 2011-09-04 19:48        5120        ---ha-w-        c:\windows\system32\api-ms-win-core-file-l1-1-0.dll

2011-07-16 05:21 . 2011-09-04 19:48        3584        ---ha-w-        c:\windows\system32\api-ms-win-core-heap-l1-1-0.dll

2011-07-16 05:21 . 2011-09-04 19:48        3072        ---ha-w-        c:\windows\system32\api-ms-win-core-handle-l1-1-0.dll

2011-07-16 05:21 . 2011-09-04 19:48        3072        ---ha-w-        c:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll

2011-07-16 05:21 . 2011-09-04 19:48        3072        ---ha-w-        c:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll

2011-07-16 05:21 . 2011-09-04 19:48        3072        ---ha-w-        c:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll

2011-07-16 05:21 . 2011-09-04 19:48        3072        ---ha-w-        c:\windows\system32\api-ms-win-core-debug-l1-1-0.dll

2011-07-16 05:21 . 2011-09-04 19:48        3072        ---ha-w-        c:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll

2011-07-16 05:21 . 2011-09-04 19:48        3072        ---ha-w-        c:\windows\system32\api-ms-win-core-console-l1-1-0.dll

.

.

((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))

.

.

*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 

REGEDIT4

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]

"avast"="c:\program files\Alwil Software\Avast5\avastUI.exe" [2011-09-06 3722416]

.

c:\users\Name\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\

ATI Tray Tools.lnk - c:\program files (x86)\ATI Tray Tools\atitray.exe [2011-8-15 890880]

.

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\

UltraMon.lnk - c:\windows\Installer\{FDE4D6B0-F762-4783-A850-63541BCA64FF}\IcoUltraMon.ico [2010-1-12 29310]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"ConsentPromptBehaviorAdmin"= 5 (0x5)

"ConsentPromptBehaviorUser"= 3 (0x3)

"EnableUIADesktopToggle"= 0 (0x0)

"PromptOnSecureDesktop"= 0 (0x0)

.

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]

Security Packages        REG_MULTI_SZ           kerberos msv1_0 schannel wdigest tspkg pku2u livessp

.

R2 gupdate;Google Update Service (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-02-06 135664]

R3 afcdp;afcdp;c:\windows\system32\DRIVERS\afcdp.sys [x]

R3 afcdpsrv;Acronis Nonstop Backup service;c:\program files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe [2010-06-09 2480048]

R3 Creative Audio Engine Licensing Service;Creative Audio Engine Licensing Service;c:\program files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [2011-04-20 79360]

R3 CT20XUT;CT20XUT;c:\windows\system32\drivers\CT20XUT.SYS [x]

R3 CTEXFIFX;CTEXFIFX;c:\windows\system32\drivers\CTEXFIFX.SYS [x]

R3 CTHWIUT;CTHWIUT;c:\windows\system32\drivers\CTHWIUT.SYS [x]

R3 DAUpdaterSvc;Dragon Age: Origins - Content Updater;d:\spiele\Dragon Age\bin_ship\DAUpdaterSvc.Service.exe [2009-07-26 25832]

R3 gupdatem;Google Update-Dienst (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-02-06 135664]

R3 Hamachi2Svc;LogMeIn Hamachi 2.0 Tunneling Engine;c:\program files (x86)\LogMeIn Hamachi\hamachi-2.exe [2010-12-06 2101640]

R3 LVPr2M64;Logitech LVPr2M64 Driver;c:\windows\system32\DRIVERS\LVPr2M64.sys [x]

R3 LVPrcS64;Process Monitor;c:\program files\Common Files\Logishrd\LVMVFM\LVPrcSrv.exe [2010-05-07 197976]

R3 LVRS64;Logitech RightSound Filter Driver;c:\windows\system32\DRIVERS\lvrs64.sys [x]

R3 nmwcdcx64;Nokia USB Generic;c:\windows\system32\drivers\ccdcmbox64.sys [x]

R3 nmwcdx64;Nokia USB Phone Parent;c:\windows\system32\drivers\ccdcmbx64.sys [x]

R3 SwitchBoard;SwitchBoard;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]

R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]

R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys [x]

R3 usbfilter;AMD USB Filter Driver;c:\windows\system32\DRIVERS\usbfilter.sys [x]

S0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [x]

S0 tdrpman258;Acronis Try&Decide and Restore Points filter (build 258);c:\windows\system32\DRIVERS\tdrpm258.sys [x]

S1 aswSnx;aswSnx; [x]

S1 aswSP;aswSP; [x]

S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [x]

S2 AMD FUEL Service;AMD FUEL Service;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2011-07-28 361984]

S2 AODDriver4.01;AODDriver4.01;c:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [2011-06-24 55424]

S2 aswFsBlk;aswFsBlk; [x]

S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [x]

S2 regi;regi;c:\windows\system32\drivers\regi.sys [x]

S2 UltraMonUtility;UltraMon Utility Driver;c:\program files (x86)\Common Files\Realtime Soft\UltraMonMirrorDrv\x64\UltraMonUtility.sys [2008-11-14 20512]

S2 vmci;VMware vmci;c:\windows\system32\drivers\vmci.sys [x]

S2 VMUSBArbService;VMware USB Arbitration Service;c:\program files (x86)\Common Files\VMware\USB\vmware-usbarbitrator.exe [2009-10-22 563760]

S3 amdiox64;AMD IO Driver;c:\windows\system32\DRIVERS\amdiox64.sys [x]

S3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atikmdag.sys [x]

S3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [x]

S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys [x]

S3 CT20XUT.SYS;CT20XUT.SYS;c:\windows\System32\drivers\CT20XUT.SYS [x]

S3 CTEXFIFX.SYS;CTEXFIFX.SYS;c:\windows\System32\drivers\CTEXFIFX.SYS [x]

S3 CTHWIUT.SYS;CTHWIUT.SYS;c:\windows\System32\drivers\CTHWIUT.SYS [x]

S3 LVUVC64;Logitech QuickCam Pro 9000(UVC);c:\windows\system32\DRIVERS\lvuvc64.sys [x]

S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [x]

S4 DRIVER_B;DRIVER_B;c:\windows\system32\Drivers\DRIVER_BIN64 [x]

.

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]

2010-08-16 11:43        451872        ----a-w-        c:\program files (x86)\Common Files\LightScribe\LSRunOnce.exe

.

Inhalt des "geplante Tasks" Ordners

.

2011-10-06 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job

- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-02-06 10:14]

.

2011-10-06 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-02-06 10:14]

.

.

--------- x86-64 -----------

.

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]

@="{472083B0-C522-11CF-8763-00608CC02F24}"

[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]

2011-09-06 20:45        134384        ----a-w-        c:\program files\Alwil Software\Avast5\ashShA64.dll

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]

"LoadAppInit_DLLs"=0x0

.

------- Zusätzlicher Suchlauf -------

.

uLocal Page = c:\windows\system32\blank.htm

mLocal Page = c:\windows\SysWOW64\blank.htm

IE: E&xport to Microsoft Excel - c:\progra~2\MICROS~2\Office12\EXCEL.EXE/3000

IE: {{7578ADEA-D65F-4C89-A249-B1C88B6FFC20} - c:\program files (x86)\ICQ7.5\ICQ.exe

LSP: c:\program files (x86)\VMware\VMware Workstation\vsocklib.dll

TCP: DhcpNameServer = 192.168.0.1

FF - ProfilePath - c:\users\Benutzername1\AppData\Roaming\Mozilla\Firefox\Profiles\5czwg713.default\

.

- - - - Entfernte verwaiste Registrierungseinträge - - - -

.

AddRemove-{E07B7A31-E160-466D-A003-3BB7B8989D52} - c:\program files (x86)\Full Tilt Poker.Net\uninstall.exe

.

.

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\DRIVER_B]

"ImagePath"="\??\c:\windows\system32\Drivers\DRIVER_BIN64"

.

--------------------- Gesperrte Registrierungsschluessel ---------------------

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

"BlindDial"=dword:00000000

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]

@Denied: (Full) (Everyone)

.

Zeit der Fertigstellung: 2011-10-06  19:21:18

ComboFix-quarantined-files.txt  2011-10-06 17:21

.

Vor Suchlauf: 7 Verzeichnis(se), 81.071.706.112 Bytes frei

Nach Suchlauf: 11 Verzeichnis(se), 80.683.126.784 Bytes frei

.

- - End Of File - - ADAF7B7FB2CD5E03B51A09C055945FA4[/QUOTE]

--- --- ---

Sieht ok aus. Mach bitte zur Kontrolle Vollscans mit Malwarebytes und SASW und poste die Logs.
Denk dran beide Tools zu updaten vor dem Scan!!

Anschließend über den OnlineScanner von ESET eine zusätzliche Meinung zu holen ist auch nicht verkehrt:

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

hier kommen sie:

Zitat:

SUPERAntiSpyware Scan Log
SUPERAntiSpyware.com | Remove Malware | Remove Spyware - AntiMalware, AntiSpyware, AntiAdware!

Generated 10/07/2011 at 10:58 PM

Application Version : 5.0.1128

Core Rules Database Version : 7771
Trace Rules Database Version: 5583

Scan type : Complete Scan
Total Scan Time : 01:23:29

Operating System Information
Windows 7 Professional 64-bit, Service Pack 1 (Build 6.01.7601)
UAC On - Administrator

Memory items scanned : 615
Memory threats detected : 0
Registry items scanned : 78780
Registry threats detected : 0
File items scanned : 357052
File threats detected : 146

Adware.Tracking Cookie
C:\Users\Benutzer1\AppData\Roaming\Microsoft\Windows\Cookies\Benutzer1@doubleclick[1].txt [ /doubleclick ]
C:\Users\Benutzer1\AppData\Roaming\Microsoft\Windows\Cookies\QQRZBZ19.txt [ /2o7.net ]
C:\Users\Benutzer1\AppData\Roaming\Microsoft\Windows\Cookies\330765TF.txt [ /mediaplex.com ]
C:\Users\Benutzer1\AppData\Roaming\Microsoft\Windows\Cookies\7P7L5EGT.txt [ /ad.yieldmanager.com ]
C:\Users\Benutzer1\AppData\Roaming\Microsoft\Windows\Cookies\N67VDKA4.txt [ /atdmt.com ]
C:\Users\Benutzer1\AppData\Roaming\Microsoft\Windows\Cookies\QU6KAF0P.txt [ /apmebf.com ]
C:\Users\Benutzer1\AppData\Roaming\Microsoft\Windows\Cookies\GA1GP1C9.txt [ /fl01.ct2.comclick.com ]
C:\USERS\Benutzer1\AppData\Roaming\Microsoft\Windows\Cookies\Low\Benutzer1@msnportal.112.2o7[1].txt [ Cookie:Benutzer1@msnportal.112.2o7.net/ ]
C:\USERS\Benutzer1\AppData\Roaming\Microsoft\Windows\Cookies\Low\Benutzer1@serving-sys[2].txt [ Cookie:Benutzer1@serving-sys.com/ ]
C:\USERS\Benutzer1\AppData\Roaming\Microsoft\Windows\Cookies\Low\Benutzer1@atdmt[2].txt [ Cookie:Benutzer1@atdmt.com/ ]
C:\USERS\Benutzer1\AppData\Roaming\Microsoft\Windows\Cookies\Low\Benutzer1@advertising[1].txt [ Cookie:Benutzer1@advertising.com/ ]
C:\USERS\Benutzer1\Cookies\330765TF.txt [ Cookie:Benutzer1@mediaplex.com/ ]
C:\USERS\Benutzer1\Cookies\7P7L5EGT.txt [ Cookie:Benutzer1@ad.yieldmanager.com/ ]
C:\USERS\Benutzer1\Cookies\N67VDKA4.txt [ Cookie:Benutzer1@atdmt.com/ ]
C:\USERS\Benutzer1\Cookies\QU6KAF0P.txt [ Cookie:Benutzer1@apmebf.com/ ]
C:\USERS\Benutzer1\Cookies\GA1GP1C9.txt [ Cookie:Benutzer1@fl01.ct2.comclick.com/ ]
C:\USERS\Benutzer2\AppData\Roaming\Microsoft\Windows\Cookies\Benutzer2@imrworldwide[2].txt [ Cookie:Benutzer2@imrworldwide.com/cgi-bin ]
C:\USERS\Benutzer2\AppData\Roaming\Microsoft\Windows\Cookies\Benutzer2@track.adform[1].txt [ Cookie:Benutzer2@track.adform.net/ ]
C:\USERS\Benutzer2\AppData\Roaming\Microsoft\Windows\Cookies\Benutzer2@adform[2].txt [ Cookie:Benutzer2@adform.net/ ]
C:\USERS\Benutzer2\AppData\Roaming\Microsoft\Windows\Cookies\Benutzer2@atdmt[2].txt [ Cookie:Benutzer2@atdmt.com/ ]
C:\USERS\Benutzer2\AppData\Roaming\Microsoft\Windows\Cookies\Benutzer2@eyewonder[2].txt [ Cookie:Benutzer2@eyewonder.com/ ]
C:\USERS\Benutzer2\AppData\Roaming\Microsoft\Windows\Cookies\Low\Benutzer2@imrworldwide[1].txt [ Cookie:Benutzer2@imrworldwide.com/cgi-bin ]
C:\USERS\Benutzer2\AppData\Roaming\Microsoft\Windows\Cookies\Low\Benutzer2@atdmt[2].txt [ Cookie:Benutzer2@atdmt.com/ ]
C:\USERS\Benutzer2\AppData\Roaming\Microsoft\Windows\Cookies\Low\Benutzer2@apmebf[1].txt [ Cookie:Benutzer2@apmebf.com/ ]
C:\USERS\Benutzer2\AppData\Roaming\Microsoft\Windows\Cookies\Low\Benutzer2@ad.yieldmanager[2].txt [ Cookie:Benutzer2@ad.yieldmanager.com/ ]
C:\USERS\Benutzer2\AppData\Roaming\Microsoft\Windows\Cookies\Low\Benutzer2@fl01.ct2.comclick[1].txt [ Cookie:Benutzer2@fl01.ct2.comclick.com/ ]
C:\USERS\Benutzer2\AppData\Roaming\Microsoft\Windows\Cookies\Low\Benutzer2@serving-sys[2].txt [ Cookie:Benutzer2@serving-sys.com/ ]
C:\USERS\Benutzer2\Cookies\Benutzer2@imrworldwide[2].txt [ Cookie:Benutzer2@imrworldwide.com/cgi-bin ]
C:\USERS\Benutzer2\Cookies\Benutzer2@track.adform[1].txt [ Cookie:Benutzer2@track.adform.net/ ]
C:\USERS\Benutzer2\Cookies\Benutzer2@adform[2].txt [ Cookie:Benutzer2@adform.net/ ]
C:\USERS\Benutzer2\Cookies\Benutzer2@atdmt[2].txt [ Cookie:Benutzer2@atdmt.com/ ]
C:\USERS\Benutzer2\Cookies\Benutzer2@eyewonder[2].txt [ Cookie:Benutzer2@eyewonder.com/ ]
C:\USERS\Benutzer1\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\Benutzer1@BS.SERVING-SYS[1].TXT [ /BS.SERVING-SYS ]
.webmasterplan.com [ C:\USERS\Benutzer1\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5CZWG713.DEFAULT\COOKIES.SQLITE ]
.ads.quartermedia.de [ C:\USERS\Benutzer1\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5CZWG713.DEFAULT\COOKIES.SQLITE ]
.ads.quartermedia.de [ C:\USERS\Benutzer1\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5CZWG713.DEFAULT\COOKIES.SQLITE ]
.im.banner.t-online.de [ C:\USERS\Benutzer1\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5CZWG713.DEFAULT\COOKIES.SQLITE ]
.traffictrack.de [ C:\USERS\Benutzer1\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5CZWG713.DEFAULT\COOKIES.SQLITE ]
.collective-media.net [ C:\USERS\Benutzer1\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5CZWG713.DEFAULT\COOKIES.SQLITE ]
.kontera.com [ C:\USERS\Benutzer1\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5CZWG713.DEFAULT\COOKIES.SQLITE ]
.kontera.com [ C:\USERS\Benutzer1\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5CZWG713.DEFAULT\COOKIES.SQLITE ]
.kontera.com [ C:\USERS\Benutzer1\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5CZWG713.DEFAULT\COOKIES.SQLITE ]
.tacoda.net [ C:\USERS\Benutzer1\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5CZWG713.DEFAULT\COOKIES.SQLITE ]
.tacoda.net [ C:\USERS\Benutzer1\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5CZWG713.DEFAULT\COOKIES.SQLITE ]
.tacoda.net [ C:\USERS\Benutzer1\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5CZWG713.DEFAULT\COOKIES.SQLITE ]
.at.atwola.com [ C:\USERS\Benutzer1\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5CZWG713.DEFAULT\COOKIES.SQLITE ]
.advertising.com [ C:\USERS\Benutzer1\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5CZWG713.DEFAULT\COOKIES.SQLITE ]
.advertising.com [ C:\USERS\Benutzer1\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5CZWG713.DEFAULT\COOKIES.SQLITE ]
.specificclick.net [ C:\USERS\Benutzer1\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5CZWG713.DEFAULT\COOKIES.SQLITE ]
.specificclick.net [ C:\USERS\Benutzer1\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5CZWG713.DEFAULT\COOKIES.SQLITE ]
.specificclick.net [ C:\USERS\Benutzer1\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5CZWG713.DEFAULT\COOKIES.SQLITE ]
.specificclick.net [ C:\USERS\Benutzer1\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5CZWG713.DEFAULT\COOKIES.SQLITE ]
.adviva.net [ C:\USERS\Benutzer1\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5CZWG713.DEFAULT\COOKIES.SQLITE ]
tracking.mlsat02.de [ C:\USERS\Benutzer1\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5CZWG713.DEFAULT\COOKIES.SQLITE ]
.doubleclick.net [ C:\USERS\Benutzer1\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5CZWG713.DEFAULT\COOKIES.SQLITE ]
ad.yieldmanager.com [ C:\USERS\Benutzer1\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5CZWG713.DEFAULT\COOKIES.SQLITE ]
ad.yieldmanager.com [ C:\USERS\Benutzer1\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5CZWG713.DEFAULT\COOKIES.SQLITE ]
.tradedoubler.com [ C:\USERS\Benutzer1\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5CZWG713.DEFAULT\COOKIES.SQLITE ]
.tradedoubler.com [ C:\USERS\Benutzer1\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5CZWG713.DEFAULT\COOKIES.SQLITE ]
.tradedoubler.com [ C:\USERS\Benutzer1\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5CZWG713.DEFAULT\COOKIES.SQLITE ]
.atdmt.com [ C:\USERS\Benutzer1\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5CZWG713.DEFAULT\COOKIES.SQLITE ]
.atdmt.com [ C:\USERS\Benutzer1\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5CZWG713.DEFAULT\COOKIES.SQLITE ]
ww251.smartadserver.com [ C:\USERS\Benutzer1\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5CZWG713.DEFAULT\COOKIES.SQLITE ]
.smartadserver.com [ C:\USERS\Benutzer1\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5CZWG713.DEFAULT\COOKIES.SQLITE ]
.smartadserver.com [ C:\USERS\Benutzer1\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5CZWG713.DEFAULT\COOKIES.SQLITE ]
.smartadserver.com [ C:\USERS\Benutzer1\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5CZWG713.DEFAULT\COOKIES.SQLITE ]
.smartadserver.com [ C:\USERS\Benutzer1\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5CZWG713.DEFAULT\COOKIES.SQLITE ]
.content.yieldmanager.com [ C:\USERS\Benutzer1\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5CZWG713.DEFAULT\COOKIES.SQLITE ]
ad.yieldmanager.com [ C:\USERS\Benutzer1\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5CZWG713.DEFAULT\COOKIES.SQLITE ]
ad.yieldmanager.com [ C:\USERS\Benutzer1\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5CZWG713.DEFAULT\COOKIES.SQLITE ]
.smartadserver.com [ C:\USERS\Benutzer1\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5CZWG713.DEFAULT\COOKIES.SQLITE ]
ad.yieldmanager.com [ C:\USERS\Benutzer1\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5CZWG713.DEFAULT\COOKIES.SQLITE ]
ad.yieldmanager.com [ C:\USERS\Benutzer1\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5CZWG713.DEFAULT\COOKIES.SQLITE ]
.adviva.net [ C:\USERS\Benutzer1\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5CZWG713.DEFAULT\COOKIES.SQLITE ]
.zanox.com [ C:\USERS\Benutzer1\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5CZWG713.DEFAULT\COOKIES.SQLITE ]
.apmebf.com [ C:\USERS\Benutzer1\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5CZWG713.DEFAULT\COOKIES.SQLITE ]
.apmebf.com [ C:\USERS\Benutzer1\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5CZWG713.DEFAULT\COOKIES.SQLITE ]
.doubleclick.net [ C:\USERS\Benutzer1\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5CZWG713.DEFAULT\COOKIES.SQLITE ]
.tribalfusion.com [ C:\USERS\Benutzer1\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5CZWG713.DEFAULT\COOKIES.SQLITE ]
statse.webtrendslive.com [ C:\USERS\Benutzer1\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5CZWG713.DEFAULT\COOKIES.SQLITE ]
.2o7.net [ C:\USERS\Benutzer1\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5CZWG713.DEFAULT\COOKIES.SQLITE ]
.2o7.net [ C:\USERS\Benutzer1\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5CZWG713.DEFAULT\COOKIES.SQLITE ]
C:\USERS\Benutzer2\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\Benutzer2@2O7[1].TXT [ /2O7 ]
C:\USERS\Benutzer2\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\Benutzer2@BS.SERVING-SYS[1].TXT [ /BS.SERVING-SYS ]
.imrworldwide.com [ C:\USERS\Benutzer2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\D2Q7RFN7.DEFAULT\COOKIES.SQLITE ]
.imrworldwide.com [ C:\USERS\Benutzer2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\D2Q7RFN7.DEFAULT\COOKIES.SQLITE ]
.revsci.net [ C:\USERS\Benutzer2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\D2Q7RFN7.DEFAULT\COOKIES.SQLITE ]
.svd.112.2o7.net [ C:\USERS\Benutzer2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\D2Q7RFN7.DEFAULT\COOKIES.SQLITE ]
.atdmt.com [ C:\USERS\Benutzer2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\D2Q7RFN7.DEFAULT\COOKIES.SQLITE ]
.atdmt.com [ C:\USERS\Benutzer2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\D2Q7RFN7.DEFAULT\COOKIES.SQLITE ]
.atdmt.com [ C:\USERS\Benutzer2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\D2Q7RFN7.DEFAULT\COOKIES.SQLITE ]
.atdmt.com [ C:\USERS\Benutzer2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\D2Q7RFN7.DEFAULT\COOKIES.SQLITE ]
.revsci.net [ C:\USERS\Benutzer2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\D2Q7RFN7.DEFAULT\COOKIES.SQLITE ]
.revsci.net [ C:\USERS\Benutzer2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\D2Q7RFN7.DEFAULT\COOKIES.SQLITE ]
.xiti.com [ C:\USERS\Benutzer2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\D2Q7RFN7.DEFAULT\COOKIES.SQLITE ]
.revsci.net [ C:\USERS\Benutzer2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\D2Q7RFN7.DEFAULT\COOKIES.SQLITE ]
.revsci.net [ C:\USERS\Benutzer2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\D2Q7RFN7.DEFAULT\COOKIES.SQLITE ]
.yadro.ru [ C:\USERS\Benutzer2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\D2Q7RFN7.DEFAULT\COOKIES.SQLITE ]
statse.webtrendslive.com [ C:\USERS\Benutzer2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\D2Q7RFN7.DEFAULT\COOKIES.SQLITE ]
de.sitestat.com [ C:\USERS\Benutzer2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\D2Q7RFN7.DEFAULT\COOKIES.SQLITE ]
.statcounter.com [ C:\USERS\Benutzer2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\D2Q7RFN7.DEFAULT\COOKIES.SQLITE ]
stat.swedbank.se [ C:\USERS\Benutzer2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\D2Q7RFN7.DEFAULT\COOKIES.SQLITE ]
.adsby.webtraffic.se [ C:\USERS\Benutzer2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\D2Q7RFN7.DEFAULT\COOKIES.SQLITE ]
.media browser [ C:\USERS\Name\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZWZXUYCN.DEFAULT\COOKIES.SQLITE ]
.media browser [ C:\USERS\Name\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZWZXUYCN.DEFAULT\COOKIES.SQLITE ]
.media browser [ C:\USERS\Name\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZWZXUYCN.DEFAULT\COOKIES.SQLITE ]
.mediafire.com [ C:\USERS\Name\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZWZXUYCN.DEFAULT\COOKIES.SQLITE ]
forum.pcstats.com [ C:\USERS\Name\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZWZXUYCN.DEFAULT\COOKIES.SQLITE ]
forum.pcstats.com [ C:\USERS\Name\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZWZXUYCN.DEFAULT\COOKIES.SQLITE ]
Windfinder - wind, wave & weather reports, forecasts & statistics / webcams, satellite images, isobar maps, tides [ C:\USERS\Name\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZWZXUYCN.DEFAULT\COOKIES.SQLITE ]
.team-mediaportal.com [ C:\USERS\Name\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZWZXUYCN.DEFAULT\COOKIES.SQLITE ]
.team-mediaportal.com [ C:\USERS\Name\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZWZXUYCN.DEFAULT\COOKIES.SQLITE ]
.norbergmedia.de [ C:\USERS\Name\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZWZXUYCN.DEFAULT\COOKIES.SQLITE ]
.nordclick.de [ C:\USERS\Name\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZWZXUYCN.DEFAULT\COOKIES.SQLITE ]
mediafiles-express.com [ C:\USERS\Name\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZWZXUYCN.DEFAULT\COOKIES.SQLITE ]
.ddl-warez.in [ C:\USERS\Name\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZWZXUYCN.DEFAULT\COOKIES.SQLITE ]
.apmebf.com [ C:\USERS\Name\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZWZXUYCN.DEFAULT\COOKIES.SQLITE ]
.mediaplex.com [ C:\USERS\Name\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZWZXUYCN.DEFAULT\COOKIES.SQLITE ]
tracking.klicktel.de [ C:\USERS\Name\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZWZXUYCN.DEFAULT\COOKIES.SQLITE ]
tracking.klicktel.de [ C:\USERS\Name\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZWZXUYCN.DEFAULT\COOKIES.SQLITE ]
Windfinder - wind, wave & weather reports, forecasts & statistics / webcams, satellite images, isobar maps, tides [ C:\USERS\Name\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZWZXUYCN.DEFAULT\COOKIES.SQLITE ]
.webmasterplan.com [ C:\USERS\Name\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZWZXUYCN.DEFAULT\COOKIES.SQLITE ]
.zieltrack.com [ C:\USERS\Name\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZWZXUYCN.DEFAULT\COOKIES.SQLITE ]
ad.zanox.com [ C:\USERS\Name\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZWZXUYCN.DEFAULT\COOKIES.SQLITE ]
.ero-advertising.com [ C:\USERS\Name\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZWZXUYCN.DEFAULT\COOKIES.SQLITE ]
ad.yieldmanager.com [ C:\USERS\Name\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZWZXUYCN.DEFAULT\COOKIES.SQLITE ]
ad.yieldmanager.com [ C:\USERS\Name\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZWZXUYCN.DEFAULT\COOKIES.SQLITE ]
ad.yieldmanager.com [ C:\USERS\Name\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZWZXUYCN.DEFAULT\COOKIES.SQLITE ]
.networkedmediatank.com [ C:\USERS\Name\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZWZXUYCN.DEFAULT\COOKIES.SQLITE ]
.networkedmediatank.com [ C:\USERS\Name\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZWZXUYCN.DEFAULT\COOKIES.SQLITE ]
.networkedmediatank.com [ C:\USERS\Name\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZWZXUYCN.DEFAULT\COOKIES.SQLITE ]
.networkedmediatank.com [ C:\USERS\Name\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZWZXUYCN.DEFAULT\COOKIES.SQLITE ]
.networkedmediatank.com [ C:\USERS\Name\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZWZXUYCN.DEFAULT\COOKIES.SQLITE ]
tracking.fahrrad.de [ C:\USERS\Name\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZWZXUYCN.DEFAULT\COOKIES.SQLITE ]
.test.com [ C:\USERS\Name\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZWZXUYCN.DEFAULT\COOKIES.SQLITE ]
Media Markt [ C:\USERS\Name\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZWZXUYCN.DEFAULT\COOKIES.SQLITE ]
sitestats.ets.org [ C:\USERS\Name\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZWZXUYCN.DEFAULT\COOKIES.SQLITE ]
livestat.derstandard.at [ C:\USERS\Name\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZWZXUYCN.DEFAULT\COOKIES.SQLITE ]
.newsclick.de [ C:\USERS\Name\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZWZXUYCN.DEFAULT\COOKIES.SQLITE ]
.newsclick.de [ C:\USERS\Name\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZWZXUYCN.DEFAULT\COOKIES.SQLITE ]
.norstat.se [ C:\USERS\Name\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZWZXUYCN.DEFAULT\COOKIES.SQLITE ]
.norstat.se [ C:\USERS\Name\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZWZXUYCN.DEFAULT\COOKIES.SQLITE ]
.norstat.se [ C:\USERS\Name\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZWZXUYCN.DEFAULT\COOKIES.SQLITE ]
de.sitestat.com [ C:\USERS\Name\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZWZXUYCN.DEFAULT\COOKIES.SQLITE ]
de.sitestat.com [ C:\USERS\Name\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZWZXUYCN.DEFAULT\COOKIES.SQLITE ]
stat.swedbank.se [ C:\USERS\Name\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZWZXUYCN.DEFAULT\COOKIES.SQLITE ]

Zitat:

Malwarebytes' Anti-Malware 1.51.2.1300
Malwarebytes : Free anti-malware, anti-virus and spyware removal download

Database version: 7898

Windows 6.1.7601 Service Pack 1
Internet Explorer 9.0.8112.16421

08.10.2011 08:01:04
mbam-log-2011-10-08 (08-01-04).txt

Scan type: Full scan (C:\|)
Objects scanned: 520810
Time elapsed: 43 minute(s), 7 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

Zitat:

ESETSmartInstaller@High as CAB hook log:
OnlineScanner64.ocx - registred OK
OnlineScanner.ocx - registred OK
# version=7
# iexplore.exe=9.00.8112.16421 (WIN7_IE9_RTM.110308-0330)
# OnlineScanner.ocx=1.0.0.6528
# api_version=3.0.2
# EOSSerial=2e2099035754ed42b2de10dc548dd22f
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2011-10-08 09:57:23
# local_time=2011-10-08 11:57:23 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=768 16777215 100 0 52058503 52058503 0 0
# compatibility_mode=5893 16776574 100 94 14829085 69684978 0 0
# compatibility_mode=8192 67108863 100 0 107 107 0 0
# scanned=585458
# found=0
# cleaned=0
# scan_time=12714