Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)
-   -   Firefox startet nicht, Taskmanager hängt extrem (https://www.trojaner-board.de/106755-firefox-startet-taskmanager-haengt-extrem.html)

Hirakou 22.12.2011 21:08

Firefox startet nicht, Taskmanager hängt extrem
 
Hey Leute, ich hoffe ihr könnt mir helfen.
Ich hab die Boardsuche benutzt und auch Google, aber ich bin zu keinem Ergebniss gekommen. :heulen:
Ich schildere kurz das Problem:
Wenn ich meinen Taskmanager öffne, dann dauert es schonma 3-5 Sekunden bis sich überhaupt irgendwas tut, zuerst öffnet sich das Fenster und dann kommt das Icon in der Taskleiste langsam hinterher.
So weit, so gut, aber der Manager hängt extrem und braucht allein 30 Sekunden bis er die Prozesse geladen hat und auf Klicken mit der Maus reagiert er auch erst 5-10 Sekunden später.
Und dann hab ich neuerdings auch noch ein Problem mit Firefox, ich kann 1000 Mal auf die Verknüpfung klicken und es tut sich nichts, außerdem hat der PC ab und zu kurze hänger und die Systemauslastung steigt an.
Könnt ihr mir helfen, ich verzweifel noch mit dem Ding.. :killpc:
Danke schonmal im Voraus. :dankeschoen:

markusg 22.12.2011 21:38

hi
Falls noch nicht vorhanden, lade Dir bitte OTL von Oldtimer herunter und speichere es auf Deinem Desktop
Code:

activex
netsvcs
msconfig
%SYSTEMDRIVE%\*.
%PROGRAMFILES%\*.exe
%LOCALAPPDATA%\*.exe
%systemroot%\*. /mp /s
/md5start
userinit.exe
eventlog.dll
scecli.dll
netlogon.dll
cngaudit.dll
ws2ifsl.sys
sceclt.dll
ntelogon.dll
winlogon.exe
logevent.dll
user32.DLL
explorer.exe
iaStor.sys
nvstor.sys
atapi.sys
IdeChnDr.sys
viasraid.sys
AGP440.sys
vaxscsi.sys
nvatabus.sys
viamraid.sys
nvata.sys
nvgts.sys
iastorv.sys
ViPrt.sys
eNetHook.dll
ahcix86.sys
KR10N.sys
nvstor32.sys
ahcix86s.sys
/md5stop
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav
%systemroot%\system32\*.dll /lockedfiles
%USERPROFILE%\*.*
%USERPROFILE%\Local Settings\Temp\*.exe
%USERPROFILE%\Local Settings\Temp\*.dll
%USERPROFILE%\Application Data\*.exe
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems|Windows /rs
CREATERESTOREPOINT

  • Schliesse bitte nun alle Programme. (Wichtig)
  • Klicke nun bitte auf den Quick Scan Button.
  • Kopiere
    nun den Inhalt aus OTL.txt und Extra.txt hier in Deinen Thread

Hirakou 22.12.2011 23:08

Extras.txt

Code:

OTL Extras logfile created on: 22.12.2011 22:13:29 - Run 1
OTL by OldTimer - Version 3.2.31.0    Folder = C:\Users\Dell\Desktop
 Professional Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
3,00 Gb Total Physical Memory | 2,12 Gb Available Physical Memory | 70,69% Memory free
5,99 Gb Paging File | 4,91 Gb Available in Paging File | 82,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 455,59 Gb Total Space | 249,10 Gb Free Space | 54,68% Space Free | Partition Type: NTFS
Drive D: | 232,88 Gb Total Space | 186,31 Gb Free Space | 80,00% Space Free | Partition Type: NTFS
Drive E: | 10,00 Gb Total Space | 2,78 Gb Free Space | 27,76% Space Free | Partition Type: NTFS
 
Computer Name: DELL-STUDIO | User Name: Dell | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
 
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
 
========== Shell Spawning ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
========== Security Center Settings ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
"FirewallDisableNotify" = 0
"AntiVirusDisableNotify" = 0
"UpdatesDisableNotify" = 0
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
 
========== System Restore Settings ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0
 
========== Firewall Settings ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0
 
========== Authorized Applications List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
 
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{0A0CADCF-78DA-33C4-A350-CD51849B9702}" = Microsoft .NET Framework 4 Extended
"{1226B9A5-FBFD-4120-9AED-08CABCDAF3AB}" = Nokia Ovi Player
"{1E11EE30-C0D4-46BC-9142-27EB4C37BE35}" = Angry Birds
"{24036256-BFDB-4CD3-BE8A-A3D6160F2E16}" = TuneUp Utilities 2011
"{2436F2A8-4B7E-4B6C-AE4E-604C84AA6A4F}" = Nero Core Components 10
"{26A24AE4-039D-4CA4-87B4-2F83216022FF}" = Java(TM) 6 Update 29
"{2A0A6470-FD0F-4F45-9B11-85F3167DB943}" = Nokia Flashing Cable Driver
"{2BF0AE92-C3BC-4112-9066-1546342B1FAE}" = Call of Duty(R) - World at War(TM) 1.2 Patch
"{340A2AD6-0679-46DA-9180-DABBD5B36FD1}" = BitDefender Total Security 2011
"{3521F7CF-9343-4C1F-AE5E-0D2A57A18D2B}" = Call of Duty(R) - World at War(TM) 1.5 Patch
"{39DB116F-E088-486F-B13C-8925ECE7A6E5}" = 3D Sound Back Beta0.1
"{39F4C6F9-618A-4E5B-8FB2-6BD661174E32}" = Überwachungstool für die Intel® Turbo-Boost-Technik
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{3DAD83B9-4C8B-4AC6-BF5E-B9FB181CCBE8}" = Nokia Service Tool Drivers
"{4216D328-0FE8-48B8-85B8-BD300E6F080F}" = Nokia Connectivity Cable Driver
"{4343080E-91B7-4388-AB4D-FB1000008200}" = Dead Rising 2
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{523B2B1B-D8DB-4B41-90FF-C4D799E2758A}" = Nero ControlCenter 10 Help (CHM)
"{54194F60-988C-4D03-B922-C2B00EFDA39A}" = NVIDIA PhysX
"{5449FB4F-1802-4D5B-A6D8-087DB1142147}" = Realtek HDMI Audio Driver for ATI
"{54B7A3C7-0940-4C16-A509-FC3C3758D22A}_is1" = Amnesia - The Dark Descent
"{555868C6-49FB-484F-BB43-8980651A1B00}" = Nero BurnRights 10 Help (CHM)
"{576CA494-F771-4B10-9AF0-8ED4A7AFB0CC}_is1" = Amnesia - The Dark Descent Demo
"{57752979-A1C9-4C02-856B-FBB27AC4E02C}" = QuickTime
"{5A32C25A-7E99-4A77-B419-B47DA290DD67}" = Phoenix Service Software
"{5A3C1721-F8ED-11E0-8AFB-B8AC6F97B88E}" = Google Earth
"{5D4C60AA-84E6-4E1A-8A68-69970D387BE1}" = TuneUp Utilities Language Pack (de-DE)
"{5E1375CB-6792-4464-8715-CC3EC83D48FA}" = VirtualDJ Home FREE
"{5F4B9958-F507-449A-A6E1-FD223314AF5A}" = TMPGEnc 4.0 XPress Testversion
"{65BB0407-4CC8-4DC7-952E-3EEFDF05602A}" = Nero Update
"{66A405D2-BA14-4594-BF36-B3B544F0754E}" = Stronghold Legends
"{6D3245B1-8DB8-4A23-9CD2-2C90F40ABAF6}" = MSVC80_x86_v2
"{6DFB899F-17A2-48F0-A533-ED8D6866CF38}" = Nero Control Center 10
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{7A5D731D-B4B3-490E-B339-75685712BAAB}" = Nero Burning ROM 10
"{7C11154F-3539-4CB5-979D-EF7913473E53}" = Prince of Persia
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{853A4763-6643-4604-8D64-28BDD8925F4C}" = Apple Application Support
"{8FB1B528-E260-451E-9B55-E9152F94B80B}" = Microsoft Games for Windows - LIVE Redistributable
"{90110407-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Professional Edition 2003
"{90120000-0020-0407-0000-0000000FF1CE}" = Compatibility Pack für 2007 Office System
"{933B4015-4618-4716-A828-5289FC03165F}" = VC80CRTRedist - 8.0.50727.6195
"{942E5031-2BD6-4C1B-918C-C8A1CBAE7B8C}" = Microsoft IntelliPoint 8.2
"{943CFD7D-5336-47AF-9418-E02473A5A517}" = Nero BurnRights 10
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{9559F7CA-5E34-4237-A2D9-D856464AD727}" = Project64 1.6
"{97EE1BAC-C04F-4935-8110-B1BBAB99D09D}" = Call of Duty(R) - World at War(TM) 1.4.1 Patch
"{986A654F-F1E4-11DD-9FCA-005056C00008}" = Paragon Partition Manager™ 11 Personal Demo
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9A996B6A-846E-4A89-B9C4-17546B7BE49F}" = Burnout(TM) Paradise The Ultimate Box
"{9B6B24BE-80E7-46C4-9FA5-B167D5E0F345}" = Nero BurningROM 10 Help (CHM)
"{9FD6F1A8-5550-46AF-8509-271DF0E768B5}" = Dual-Core Optimizer
"{A25FF1C0-80B6-4B8B-A551-DC525697A408}" = AMD APP SDK Runtime
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AC76BA86-7AD7-1031-7B44-AA1000000001}" = Adobe Reader X (10.1.1) - Deutsch
"{AEDBD563-24BB-4EE3-8366-A654DAC2D988}" = Mirror's Edge™
"{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1" = Spybot - Search & Destroy
"{B547567F-6BD1-3E76-E945-9DA067EF5AAA}" = AMD Catalyst Install Manager
"{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}" = Die*Sims™*3
"{C2E4B5BD-32DB-4817-A060-341AB17C3F90}" = Bonjour
"{C41300B9-185D-475E-BFEC-39EF732F19B1}" = Apple Software Update
"{CACAEB5F-174D-4C7C-AC56-A33289A807CA}" = Apple Mobile Device Support
"{CC862A04-B2B0-4A79-ADD2-4B76D6CF4DCD}" = Call of Duty(R) - World at War(TM) 1.4 Patch
"{CD95D125-2992-4858-B3EF-5F6FB52FBAD6}" = Skype Toolbars
"{D4AEC53C-1720-41D9-B6D7-6A60DE62D444}" = PC Connectivity Solution
"{D80A6A73-E58A-4673-AFF5-F12D7110661F}" = Call of Duty(R) - World at War(TM)
"{D8A39D68-A269-45C2-8730-23AA08F75D64}" = O2Micro Flash Memory Card Windows Driver
"{E3E71D07-CD27-46CB-8448-16D4FB29AA13}" = Microsoft WSE 3.0 Runtime
"{E4423F16-0E98-4855-BFF4-3EF016C55D67}" = Nokia_Multimedia_Common_Components_2_5
"{E633D396-5188-4E9D-8F6B-BFB8BF3467E8}" = Skype™ 5.1
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F38FD0E4-B991-462B-873D-F2115EADD093}" = Nokia PC Suite
"{F59A9E08-A6A4-4ACF-91F2-D0344956C30B}" = iTunes
"{F750C986-5310-3A5A-95F8-4EC71C8AC01C}" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"{F97E3841-CA9D-4964-9D64-26066241D26F}" = Microsoft Games for Windows - LIVE
"{FE83F463-7E61-4B18-9FA0-B94B90A0B6B9}" = Nero Burning ROM 10
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"504244733D18C8F63FF584AEB290E3904E791693" = Windows-Treiberpaket - Nokia pccsmcfd  (08/22/2008 7.0.0.0)
"6DA48AFDE796708D5A4C9121A83E7617A63A9A15" = Windows-Treiberpaket - Nokia Modem  (10/07/2010 4.6)
"7-Zip" = 7-Zip 9.20
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"AnyDVD" = AnyDVD
"Audacity_is1" = Audacity 1.2.6
"Aura DVD Ripper Professional_is1" = Aura DVD Ripper Professional 1.3.3
"Aura Software Manager_is1" = Aura Software Manager 1.0.3
"AviSynth" = AviSynth 2.5
"BitDefender" = BitDefender Total Security 2011
"Call of Duty Black Ops GERMAN Uncut 1.00" = Call of Duty Black Ops GERMAN Uncut 1.00
"CrystalDiskInfo_is1" = CrystalDiskInfo 3.10.0
"CyberGhost VPN_is1" = CyberGhost VPN
"Demo von StarCraft II" = Demo von StarCraft II
"DESkey DK2 Uninstall" = DK2 Drivers v 6.21.0.169
"DivX Setup.divx.com" = DivX-Setup
"E5372C32E8562C76C24DBA6525002B1031495F34" = Windows-Treiberpaket - Nokia Modem  (06/09/2010 7.01.0.8)
"FileZilla Client" = FileZilla Client 3.5.0
"Firebird SQL Server D" = Firebird SQL Server - MAGIX Edition
"FLSINST" = FLS-4 Driver Installation
"Free Audio CD Burner_is1" = Free Audio CD Burner version 1.4.7
"Free iPod Video Converter_is1" = Free iPod Video Converter 1.34
"Free YouTube to MP3 Converter_is1" = Free YouTube to MP3 Converter version 3.9.40.602
"GCFScape_is1" = GCFScape 1.8.2
"GFWL_{4343080E-91B7-4388-AB4D-FB1000008200}" = Dead Rising 2
"InstallShield_{2BF0AE92-C3BC-4112-9066-1546342B1FAE}" = Call of Duty(R) - World at War(TM) 1.2 Patch
"InstallShield_{3521F7CF-9343-4C1F-AE5E-0D2A57A18D2B}" = Call of Duty(R) - World at War(TM) 1.5 Patch
"InstallShield_{97EE1BAC-C04F-4935-8110-B1BBAB99D09D}" = Call of Duty(R) - World at War(TM) 1.4.1 Patch
"InstallShield_{CC862A04-B2B0-4A79-ADD2-4B76D6CF4DCD}" = Call of Duty(R) - World at War(TM) 1.4 Patch
"InstallShield_{D80A6A73-E58A-4673-AFF5-F12D7110661F}" = Call of Duty(R) - World at War(TM)
"InstallShield_{D8A39D68-A269-45C2-8730-23AA08F75D64}" = O2Micro Flash Memory Card Windows Driver
"JDownloader" = JDownloader
"LAME for Audacity_is1" = LAME v3.98.3 for Audacity
"LameACM" = LameACM
"MAGIX Fotobuch" = MAGIX Fotobuch 3.6
"MAGIX Online Druck Service D" = MAGIX Online Druck Service 3.4.3.0 (D)
"MAGIX Screenshare D" = MAGIX Screenshare 4.3.6.1987 (D)
"MAGIX Xtreme Web Designer 5 D" = MAGIX Xtreme Web Designer 5 5.0.1.8579 (D)
"McAfee Security Scan" = McAfee Security Scan Plus
"Media Converter SA Edition" = Media Converter SA Edition 0.8
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile DEU Language Pack" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"Microsoft IntelliPoint 8.2" = Microsoft IntelliPoint 8.2
"Mozilla Firefox 9.0.1 (x86 de)" = Mozilla Firefox 9.0.1 (x86 de)
"Nokia PC Suite" = Nokia PC Suite
"NSS" = Norton Security Scan
"Opera 11.60.1185" = Opera 11.60
"Phoenix Service Software 2009.20.010.39068_is1" = Phoenix Service Software 2009.20.010.39068
"PowerISO" = PowerISO
"Sauerbraten" = Sauerbraten
"Serious Sam HD The First Encounter_is1" = Serious Sam HD The First Encounter
"Steam App 40950" = Stronghold
"Steam App 47400" = Stronghold 3
"Steam App 57940" = Duke Nukem Forever Demo
"Steam App 620" = Portal 2
"SWiSH Max4" = SWiSH Max4
"TuneUp Utilities 2011" = TuneUp Utilities 2011
"Uninstall_is1" = Uninstall 1.0.0.1
"Videora Nokia 5800 XpressMusic Converter" = Videora Nokia 5800 XpressMusic Converter 6
"Virtual DJ Home - Atomix Productions" = Virtual DJ Home - Atomix Productions
"VLC media player" = VLC media player 1.1.11
"WBFS Manager 3.0" = WBFS Manager 3.0
"WinGimp-2.0_is1" = GIMP 2.6.11
"WinRAR archiver" = WinRAR
"WMV9_VCM" = Microsoft Windows Media Video 9 VCM
 
========== HKEY_CURRENT_USER Uninstall List ==========
 
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{EF36A836-BF89-4A4F-B079-057B0C68C1E0}" = Sid Meier's Civilization IV Colonization
"f018cf21c0452c64" = AVM FRITZ!Box USB-Fernanschluss
"Tropico 4 Demo" = Tropico 4 Demo 1.00
 
========== Last 10 Event Log Errors ==========
 
[ Application Events ]
Error - 21.12.2011 14:02:23 | Computer Name = Dell-Studio | Source = SideBySide | ID = 16842785
Description = Fehler beim Generieren des Aktivierungskontextes für "C:\Program Files\Nokia\Nokia
 PC Suite 7\TIS_Windows7PIM.dll".  Die abhängige Assemblierung "Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0""
 konnte nicht gefunden werden.  Verwenden Sie für eine detaillierte Diagnose das Programm
 "sxstrace.exe".
 
Error - 21.12.2011 14:05:15 | Computer Name = Dell-Studio | Source = SideBySide | ID = 16842815
Description = Fehler beim Generieren des Aktivierungskontextes für "c:\program files\spybot
 - search & destroy\DelZip179.dll". Fehler in Manifest- oder Richtliniendatei "c:\program
 files\spybot - search & destroy\DelZip179.dll" in Zeile 8.  Der Wert "*" des "language"-Attributs
 im assemblyIdentity-Element ist ungültig.
 
Error - 21.12.2011 17:30:55 | Computer Name = Dell-Studio | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: opera.exe, Version: 11.52.1100.0,
 Zeitstempel: 0x4e9c6c1d  Name des fehlerhaften Moduls: Opera.dll, Version: 11.52.1100.0,
 Zeitstempel: 0x4e9c79de  Ausnahmecode: 0xc0000005  Fehleroffset: 0x00673ea6  ID des fehlerhaften
 Prozesses: 0x137c  Startzeit der fehlerhaften Anwendung: 0x01ccbff2eaf003b3  Pfad der
 fehlerhaften Anwendung: C:\Program Files\Opera\opera.exe  Pfad des fehlerhaften Moduls:
 C:\Program Files\Opera\Opera.dll  Berichtskennung: 103fb50a-2c1b-11e1-af40-0021708d5458
 
Error - 22.12.2011 11:48:53 | Computer Name = Dell-Studio | Source = Application Hang | ID = 1002
Description = Programm taskmgr.exe, Version 6.1.7601.17514 kann nicht mehr unter
 Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf
in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem
 zu suchen.    Prozess-ID: 1278    Startzeit: 01ccc0c12d0d943b    Endzeit: 13    Anwendungspfad:
 C:\Windows\system32\taskmgr.exe    Berichts-ID: 70a8f56a-2cb4-11e1-af40-0021708d5458

 
Error - 22.12.2011 13:00:02 | Computer Name = Dell-Studio | Source = Application Hang | ID = 1002
Description = Programm taskmgr.exe, Version 6.1.7601.17514 kann nicht mehr unter
 Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf
in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem
 zu suchen.    Prozess-ID: 1f4    Startzeit: 01ccc0caef93fc35    Endzeit: 130    Anwendungspfad:
 C:\Windows\system32\taskmgr.exe    Berichts-ID: 61312b9e-2cbe-11e1-af40-0021708d5458

 
Error - 22.12.2011 13:05:09 | Computer Name = Dell-Studio | Source = Application Hang | ID = 1002
Description = Programm taskmgr.exe, Version 6.1.7601.17514 kann nicht mehr unter
 Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf
in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem
 zu suchen.    Prozess-ID: 101c    Startzeit: 01ccc0cbaea14ca1    Endzeit: 38    Anwendungspfad:
 C:\Windows\system32\taskmgr.exe    Berichts-ID: 18838f1f-2cbf-11e1-af40-0021708d5458

 
Error - 22.12.2011 15:39:33 | Computer Name = Dell-Studio | Source = VSS | ID = 18
Description =
 
Error - 22.12.2011 15:39:33 | Computer Name = Dell-Studio | Source = VSS | ID = 8193
Description =
 
Error - 22.12.2011 15:39:33 | Computer Name = Dell-Studio | Source = System Restore | ID = 8193
Description =
 
Error - 22.12.2011 15:56:13 | Computer Name = Dell-Studio | Source = Application Hang | ID = 1002
Description = Programm taskmgr.exe, Version 6.1.7601.17514 kann nicht mehr unter
 Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf
in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem
 zu suchen.    Prozess-ID: cf0    Startzeit: 01ccc0e3bb599b0c    Endzeit: 187    Anwendungspfad:
 C:\Windows\system32\taskmgr.exe    Berichts-ID: ff220e02-2cd6-11e1-b5e4-0021708d5458

 
[ System Events ]
Error - 22.12.2011 15:51:47 | Computer Name = Dell-Studio | Source = Service Control Manager | ID = 7001
Description = Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location
 Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:  %%1068
 
Error - 22.12.2011 15:51:48 | Computer Name = Dell-Studio | Source = Service Control Manager | ID = 7001
Description = Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location
 Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:  %%1068
 
Error - 22.12.2011 15:51:48 | Computer Name = Dell-Studio | Source = Service Control Manager | ID = 7001
Description = Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location
 Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:  %%1068
 
Error - 22.12.2011 15:51:48 | Computer Name = Dell-Studio | Source = Service Control Manager | ID = 7001
Description = Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location
 Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:  %%1068
 
Error - 22.12.2011 15:51:48 | Computer Name = Dell-Studio | Source = Service Control Manager | ID = 7001
Description = Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location
 Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:  %%1068
 
Error - 22.12.2011 15:51:48 | Computer Name = Dell-Studio | Source = Service Control Manager | ID = 7001
Description = Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location
 Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:  %%1068
 
Error - 22.12.2011 15:51:48 | Computer Name = Dell-Studio | Source = Service Control Manager | ID = 7001
Description = Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location
 Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:  %%1068
 
Error - 22.12.2011 15:53:49 | Computer Name = Dell-Studio | Source = atikmdag | ID = 52236
Description = CPLIB :: General - Invalid Parameter
 
Error - 22.12.2011 15:53:49 | Computer Name = Dell-Studio | Source = atikmdag | ID = 43029
Description = Display is not active
 
Error - 22.12.2011 15:54:44 | Computer Name = Dell-Studio | Source = Service Control Manager | ID = 7001
Description = Der Dienst "Heimnetzgruppen-Anbieter" ist vom Dienst "Funktionssuchanbieter-Host"
 abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:  %%1058
 
[ TuneUp Events ]
Error - 15.12.2011 17:28:05 | Computer Name = Dell-Studio | Source = TuneUp.UtilitiesSvc | ID = 300
Description =
 
Error - 15.12.2011 17:28:06 | Computer Name = Dell-Studio | Source = TuneUp.UtilitiesSvc | ID = 300
Description =
 
Error - 15.12.2011 17:28:06 | Computer Name = Dell-Studio | Source = TuneUp.UtilitiesSvc | ID = 300
Description =
 
 
< End of report >


Hirakou 22.12.2011 23:12

OTL.txt


Code:

OTL logfile created on: 22.12.2011 22:13:29 - Run 1
OTL by OldTimer - Version 3.2.31.0    Folder = C:\Users\Dell\Desktop
 Professional Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
3,00 Gb Total Physical Memory | 2,12 Gb Available Physical Memory | 70,69% Memory free
5,99 Gb Paging File | 4,91 Gb Available in Paging File | 82,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 455,59 Gb Total Space | 249,10 Gb Free Space | 54,68% Space Free | Partition Type: NTFS
Drive D: | 232,88 Gb Total Space | 186,31 Gb Free Space | 80,00% Space Free | Partition Type: NTFS
Drive E: | 10,00 Gb Total Space | 2,78 Gb Free Space | 27,76% Space Free | Partition Type: NTFS
 
Computer Name: DELL-STUDIO | User Name: Dell | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - [2011.12.22 22:12:30 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Users\Dell\Desktop\OTL.exe
PRC - [2011.12.21 08:42:28 | 000,924,632 | ---- | M] (Mozilla Corporation) -- C:\Programme\Mozilla Firefox\firefox.exe
PRC - [2011.08.01 14:56:42 | 001,821,576 | ---- | M] (Microsoft Corporation) -- C:\Programme\Microsoft IntelliPoint\ipoint.exe
PRC - [2011.08.01 14:56:42 | 000,412,552 | ---- | M] (Microsoft Corporation) -- C:\Programme\Microsoft IntelliPoint\dpupdchk.exe
PRC - [2011.07.17 13:01:18 | 002,090,016 | ---- | M] (BitDefender S.R.L.) -- C:\Programme\BitDefender\BitDefender 2011\vsserv.exe
PRC - [2011.07.17 13:01:04 | 001,451,928 | ---- | M] (BitDefender S.R.L.) -- C:\Programme\BitDefender\BitDefender 2011\bdagent.exe
PRC - [2011.06.18 10:16:04 | 000,064,048 | ---- | M] (BitDefender S.R.L.) -- C:\Programme\BitDefender\BitDefender 2011\pchooklaunch32.exe
PRC - [2011.06.18 10:12:23 | 000,043,936 | ---- | M] (BitDefender S.R.L.) -- C:\Programme\BitDefender\BitDefender 2011\updatesrv.exe
PRC - [2011.06.06 11:55:28 | 000,064,952 | ---- | M] (Adobe Systems Incorporated) -- C:\Programme\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2011.03.30 18:49:44 | 000,671,552 | ---- | M] (TuneUp Software) -- C:\Programme\TuneUp Utilities 2011\TuneUpUtilitiesApp32.exe
PRC - [2011.03.30 18:48:00 | 001,523,008 | ---- | M] (TuneUp Software) -- C:\Programme\TuneUp Utilities 2011\TuneUpUtilitiesService32.exe
PRC - [2011.03.04 10:39:14 | 000,584,488 | ---- | M] (Nero AG) -- C:\Programme\Nero\Update\NASvc.exe
PRC - [2011.02.25 06:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2010.11.20 13:17:56 | 001,121,792 | ---- | M] (Microsoft Corporation) -- C:\Programme\Windows Media Player\wmpnetwk.exe
PRC - [2010.11.20 13:17:47 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe
PRC - [2009.08.18 02:36:36 | 000,348,160 | ---- | M] (AMD) -- C:\Windows\System32\atieclxx.exe
PRC - [2009.08.18 02:36:08 | 000,176,128 | ---- | M] (AMD) -- C:\Windows\System32\atiesrxx.exe
PRC - [2009.03.05 15:07:20 | 002,260,480 | RHS- | M] (Safer-Networking Ltd.) -- C:\Programme\Spybot - Search & Destroy\TeaTimer.exe
PRC - [2009.01.26 14:31:10 | 001,153,368 | ---- | M] (Safer Networking Ltd.) -- C:\Programme\Spybot - Search & Destroy\SDWinSec.exe
 
 
========== Modules (No Company Name) ==========
 
MOD - [2011.12.21 08:42:28 | 002,124,760 | ---- | M] () -- C:\Programme\Mozilla Firefox\mozjs.dll
MOD - [2011.07.17 13:01:05 | 000,185,040 | ---- | M] () -- C:\Programme\BitDefender\BitDefender 2011\framework.dll
MOD - [2011.06.18 10:14:24 | 000,109,344 | ---- | M] () -- C:\Programme\BitDefender\BitDefender 2011\connector.dll
MOD - [2011.06.18 10:14:05 | 000,189,184 | ---- | M] () -- C:\Programme\BitDefender\BitDefender 2011\txmlutil.dll
MOD - [2011.05.22 18:21:36 | 000,093,696 | ---- | M] () -- C:\Programme\FileZilla FTP Client\fzshellext.dll
MOD - [2010.03.15 11:28:22 | 000,141,824 | ---- | M] () -- C:\Programme\WinRAR\RarExt.dll
 
 
========== Win32 Services (SafeList) ==========
 
SRV - [2011.12.10 12:23:11 | 000,419,624 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2011.07.17 13:01:18 | 002,090,016 | ---- | M] (BitDefender S.R.L.) [Auto | Running] -- C:\Program Files\BitDefender\BitDefender 2011\vsserv.exe -- (VSSERV)
SRV - [2011.07.05 10:28:46 | 002,428,968 | ---- | M] (mobile concepts GmbH) [On_Demand | Stopped] -- C:\Programme\CyberGhost VPN\CGVPNCliService.exe -- (CGVPNCliSrvc)
SRV - [2011.06.18 10:12:23 | 000,043,936 | ---- | M] (BitDefender S.R.L.) [Auto | Running] -- C:\Program Files\BitDefender\BitDefender 2011\updatesrv.exe -- (Updatesrv)
SRV - [2011.06.06 11:55:28 | 000,064,952 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2011.03.30 18:48:00 | 001,523,008 | ---- | M] (TuneUp Software) [Auto | Running] -- C:\Program Files\TuneUp Utilities 2011\TuneUpUtilitiesService32.exe -- (TuneUp.UtilitiesSvc)
SRV - [2011.03.30 18:45:32 | 000,029,504 | ---- | M] (TuneUp Software) [Auto | Running] -- C:\Windows\System32\uxtuneup.dll -- (UxTuneUp)
SRV - [2011.03.04 10:39:14 | 000,584,488 | ---- | M] (Nero AG) [Auto | Running] -- C:\Program Files\Nero\Update\NASvc.exe -- (NAUpdate)
SRV - [2011.02.22 21:25:17 | 000,307,544 | ---- | M] (BitDefender) [On_Demand | Stopped] -- C:\Programme\Common Files\BitDefender\BitDefender Arrakis Server\bin\arrakis3.exe -- (Update Server)
SRV - [2010.12.08 13:31:06 | 000,628,736 | ---- | M] (Nokia) [On_Demand | Stopped] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)
SRV - [2010.01.15 13:49:20 | 000,227,232 | ---- | M] (McAfee, Inc.) [On_Demand | Stopped] -- C:\Program Files\McAfee Security Scan\2.0.181\McCHSvc.exe -- (McComponentHostService)
SRV - [2009.11.02 12:48:12 | 000,099,728 | ---- | M] (Intel(R) Corporation) [Disabled | Stopped] -- C:\Program Files\Intel\TurboBoost\TurboBoost.exe -- (TurboBoost)
SRV - [2009.08.18 02:36:08 | 000,176,128 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\System32\atiesrxx.exe -- (AMD External Events Utility)
SRV - [2009.07.14 02:16:15 | 000,016,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\StorSvc.dll -- (StorSvc)
SRV - [2009.07.14 02:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc)
SRV - [2009.07.14 02:16:12 | 001,004,544 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\PeerDistSvc.dll -- (PeerDistSvc)
SRV - [2009.07.14 02:15:41 | 000,680,960 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programme\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2009.01.26 14:31:10 | 001,153,368 | ---- | M] (Safer Networking Ltd.) [Auto | Running] -- C:\Programme\Spybot - Search & Destroy\SDWinSec.exe -- (SBSDWSCService)
SRV - [2005.11.17 14:18:52 | 001,527,900 | ---- | M] (MAGIX®) [Disabled | Stopped] -- C:\Programme\MAGIX\Common\Database\bin\fbserver.exe -- (FirebirdServerMAGIXInstance)
 
 
========== Driver Services (SafeList) ==========
 
DRV - [2011.12.02 18:38:08 | 000,199,528 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\RtHDMIV.sys -- (RTHDMIAzAudService)
DRV - [2011.09.08 09:23:34 | 000,211,984 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\AtihdW73.sys -- (AtiHDAudioService)
DRV - [2011.08.01 14:56:42 | 000,045,288 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\dc3d.sys -- (dc3d) MS Hardware Device Detection Driver (USB)
DRV - [2011.06.30 18:18:56 | 000,122,552 | ---- | M] (BitDefender LLC) [Kernel | On_Demand | Running] -- C:\Programme\BitDefender\BitDefender 2011\bdselfpr.sys -- (bdselfpr)
DRV - [2011.06.25 17:18:22 | 000,010,454 | ---- | M] (Data Encryption Systems Limited) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\parldr2k.sys -- (PARLDR2K)
DRV - [2011.06.25 16:28:29 | 000,033,402 | ---- | M] (Data Encryption Systems Limited) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\flsvcom.sys -- (FLSVCOM)
DRV - [2011.06.25 16:28:29 | 000,008,344 | ---- | M] (Data Encryption Systems Limited) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\flsser.sys -- (FLSSER)
DRV - [2011.06.25 16:28:28 | 000,033,404 | ---- | M] (Data Encryption Systems Limited) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\fle5wnnt.sys -- (FLE5WNNT)
DRV - [2011.06.25 16:28:28 | 000,016,314 | ---- | M] (Data Encryption Systems Limited) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\flspar.sys -- (FLSPAR)
DRV - [2011.06.25 16:28:28 | 000,013,440 | ---- | M] (Data Encryption Systems Limited) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\flsiface.sys -- (FLSIFACE)
DRV - [2011.06.18 09:12:52 | 000,306,320 | ---- | M] (BitDefender S.R.L.) [File_System | Auto | Running] -- C:\Windows\System32\drivers\trufos.sys -- (Trufos)
DRV - [2011.04.09 09:16:10 | 000,353,096 | ---- | M] (BitDefender) [File_System | Boot | Running] -- C:\Windows\system32\DRIVERS\bdfsfltr.sys -- (bdfsfltr)
DRV - [2011.03.25 03:57:58 | 000,020,480 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\usbohci.sys -- (usbohci)
DRV - [2011.02.10 10:22:58 | 000,010,064 | ---- | M] (TuneUp Software) [Kernel | On_Demand | Running] -- C:\Programme\TuneUp Utilities 2011\TuneUpUtilitiesDriver32.sys -- (TuneUpUtilitiesDrv)
DRV - [2011.02.03 20:52:56 | 000,101,248 | ---- | M] (AVM Berlin) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\avmaudio.sys -- (avmaudio)
DRV - [2010.12.02 11:13:26 | 000,023,168 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ccdcmbo.sys -- (nmwcdc)
DRV - [2010.12.02 11:13:22 | 000,018,304 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ccdcmb.sys -- (nmwcd)
DRV - [2010.12.02 09:36:42 | 000,137,600 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\nmwcdnsu.sys -- (nmwcdnsu)
DRV - [2010.12.02 09:36:42 | 000,008,576 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\nmwcdnsuc.sys -- (nmwcdnsuc)
DRV - [2010.12.01 20:06:29 | 000,108,104 | ---- | M] (SlySoft, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\AnyDVD.sys -- (AnyDVD)
DRV - [2010.11.20 13:30:15 | 000,175,360 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\system32\drivers\vmbus.sys -- (vmbus)
DRV - [2010.11.20 13:30:15 | 000,040,704 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\system32\drivers\vmstorfl.sys -- (storflt)
DRV - [2010.11.20 13:30:15 | 000,028,032 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\storvsc.sys -- (storvsc)
DRV - [2010.11.20 13:30:14 | 000,160,128 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\vhdmp.sys -- (vhdmp)
DRV - [2010.11.20 13:30:12 | 000,053,120 | ---- | M] () [Kernel | System | Running] -- C:\Windows\system32\drivers\termdd.sys -- (TermDD)
DRV - [2010.11.20 13:30:10 | 000,085,376 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\sbp2port.sys -- (sbp2port)
DRV - [2010.11.20 13:30:05 | 000,233,344 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\msiscsi.sys -- (iScsiPrt)
DRV - [2010.11.20 13:30:04 | 000,116,096 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\msdsm.sys -- (msdsm)
DRV - [2010.11.20 13:30:01 | 000,130,432 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\mpio.sys -- (mpio)
DRV - [2010.11.20 11:24:41 | 000,052,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV - [2010.11.20 11:01:12 | 000,164,864 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\system32\drivers\1394ohci.sys -- (1394ohci)
DRV - [2010.11.20 11:00:24 | 000,039,936 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\system32\drivers\umbus.sys -- (umbus)
DRV - [2010.11.20 11:00:21 | 000,304,128 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\system32\drivers\HdAudio.sys -- (HdAudAddService)
DRV - [2010.11.20 11:00:21 | 000,146,432 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\System32\Drivers\usbvideo.sys -- (usbvideo) USB-Videogerät (WDM)
DRV - [2010.11.20 10:59:46 | 000,027,648 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\usbser.sys -- (usbser)
DRV - [2010.11.20 10:59:44 | 000,080,768 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\usbaudio.sys -- (usbaudio) USB-Audiotreiber (WDM)
DRV - [2010.11.20 10:59:44 | 000,035,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\winusb.sys -- (WinUsb)
DRV - [2010.11.20 10:50:21 | 000,031,232 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\system32\drivers\CompositeBus.sys -- (CompositeBus)
DRV - [2010.11.20 10:50:10 | 000,028,160 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\kbdhid.sys -- (kbdhid)
DRV - [2010.11.20 10:19:15 | 000,065,536 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\IPMIDrv.sys -- (IPMIDRV)
DRV - [2010.11.20 10:14:45 | 000,017,920 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\VMBusHID.sys -- (VMBusHID)
DRV - [2010.11.20 10:14:41 | 000,005,632 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\vms3cap.sys -- (s3cap)
DRV - [2010.11.20 09:54:02 | 000,084,992 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\system32\drivers\sdbus.sys -- (sdbus)
DRV - [2010.11.20 09:47:55 | 000,010,240 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\acpipmi.sys -- (AcpiPmi)
DRV - [2010.08.20 17:41:54 | 000,088,144 | ---- | M] (BitDefender) [Kernel | System | Running] -- C:\Programme\Common Files\BitDefender\BitDefender Firewall\bdfwfpf.sys -- (bdfwfpf)
DRV - [2010.08.20 14:41:58 | 000,072,784 | ---- | M] (BitDefender) [Kernel | System | Running] -- c:\Programme\Common Files\BitDefender\BitDefender Firewall\bdfndisf6.sys -- (Bdfndisf)
DRV - [2010.07.30 13:16:46 | 000,008,192 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\usbser_lowerfltj.sys -- (UsbserFilt)
DRV - [2010.07.30 13:16:44 | 000,008,192 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\usbser_lowerflt.sys -- (upperdev)
DRV - [2010.06.28 11:55:42 | 000,970,320 | ---- | M] (BitDefender) [File_System | Disabled | Stopped] -- C:\Windows\System32\drivers\avckf.sys -- (avckf)
DRV - [2010.06.28 11:55:36 | 000,633,424 | ---- | M] (BitDefender) [File_System | Disabled | Stopped] -- C:\Windows\System32\drivers\avc3.sys -- (avc3)
DRV - [2010.05.28 12:24:56 | 000,040,560 | ---- | M] (Paragon Software Group) [Kernel | Boot | Running] -- C:\Windows\system32\DRIVERS\hotcore3.sys -- (hotcore3)
DRV - [2010.05.13 15:52:04 | 000,152,528 | ---- | M] (BitDefender S.R.L. Bucharest, ROMANIA) [File_System | On_Demand | Running] -- C:\Windows\System32\drivers\bdfm.sys -- (BDFM)
DRV - [2010.02.25 16:51:02 | 000,025,216 | ---- | M] (The OpenVPN Project) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\tap0901.sys -- (tap0901)
DRV - [2010.01.19 18:32:40 | 000,085,128 | ---- | M] (BitDefender) [Kernel | System | Running] -- C:\Windows\System32\drivers\bdvedisk.sys -- (Bdvedisk)
DRV - [2009.11.02 12:45:44 | 000,014,808 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\System32\drivers\TurboB.sys -- (TurboB)
DRV - [2009.08.18 03:48:06 | 004,994,560 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\atikmdag.sys -- (atikmdag)
DRV - [2009.07.14 02:26:15 | 000,053,312 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\agp440.sys -- (agp440)
DRV - [2009.07.14 02:26:15 | 000,014,912 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\amdide.sys -- (amdide)
DRV - [2009.07.14 02:20:45 | 000,012,368 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\pciide.sys -- (pciide)
DRV - [2009.07.14 02:20:44 | 000,105,024 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\nv_agp.sys -- (nv_agp)
DRV - [2009.07.14 02:20:44 | 000,028,240 | ---- | M] () [Kernel | System | Running] -- C:\Windows\system32\drivers\mssmbios.sys -- (mssmbios)
DRV - [2009.07.14 02:20:36 | 000,046,656 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\isapnp.sys -- (isapnp)
DRV - [2009.07.14 02:20:36 | 000,042,576 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\system32\drivers\kbdclass.sys -- (kbdclass)
DRV - [2009.07.14 02:20:36 | 000,015,424 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\intelide.sys -- (intelide)
DRV - [2009.07.14 02:20:28 | 000,057,936 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\gagp30kx.sys -- (gagp30kx)
DRV - [2009.07.14 02:20:28 | 000,022,096 | ---- | M] () [Kernel | Disabled | Stopped] -- C:\Windows\system32\DRIVERS\crcdisk.sys -- (crcdisk)
DRV - [2009.07.14 02:19:11 | 000,057,424 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\uliagpkx.sys -- (uliagpkx)
DRV - [2009.07.14 02:19:11 | 000,019,024 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\wd.sys -- (Wd)
DRV - [2009.07.14 02:19:10 | 000,055,888 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\uagp35.sys -- (uagp35)
DRV - [2009.07.14 02:19:10 | 000,053,328 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\viaagp.sys -- (viaagp)
DRV - [2009.07.14 02:19:10 | 000,012,240 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\system32\drivers\swenum.sys -- (swenum)
DRV - [2009.07.14 02:19:03 | 000,180,288 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\pcmcia.sys -- (pcmcia)
DRV - [2009.07.14 00:51:35 | 000,008,192 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\umpass.sys -- (UmPass)
DRV - [2009.07.14 00:51:34 | 000,056,320 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\bthmodem.sys -- (BTHMODEM)
DRV - [2009.07.14 00:51:33 | 000,091,136 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\hidbth.sys -- (HidBth)
DRV - [2009.07.14 00:51:29 | 000,062,464 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\ohci1394.sys -- (ohci1394) OHCI-konformer 1394-Hostcontroller (alt)
DRV - [2009.07.14 00:51:18 | 000,086,016 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\usbcir.sys -- (usbcir) eHome-Infrarotempfänger (USBCIR)
DRV - [2009.07.14 00:51:17 | 000,037,888 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\circlass.sys -- (circlass)
DRV - [2009.07.14 00:51:05 | 000,037,888 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\hidir.sys -- (HidIr)
DRV - [2009.07.14 00:46:55 | 000,012,288 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\MTConfig.sys -- (MTConfig)
DRV - [2009.07.14 00:46:53 | 000,021,632 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\wacompen.sys -- (WacomPen)
DRV - [2009.07.14 00:45:52 | 000,013,824 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\sfloppy.sys -- (sfloppy)
DRV - [2009.07.14 00:45:52 | 000,012,288 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\sffp_mmc.sys -- (sffp_mmc)
DRV - [2009.07.14 00:45:45 | 000,025,088 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\fdc.sys -- (fdc)
DRV - [2009.07.14 00:45:45 | 000,019,968 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\flpydisk.sys -- (flpydisk)
DRV - [2009.07.14 00:45:35 | 000,079,360 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\parport.sys -- (Parport)
DRV - [2009.07.14 00:45:33 | 000,083,456 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\serial.sys -- (Serial)
DRV - [2009.07.14 00:45:29 | 000,008,704 | ---- | M] () [Kernel | Auto | Stopped] -- C:\Windows\system32\DRIVERS\parvdm.sys -- (Parvdm)
DRV - [2009.07.14 00:45:28 | 000,017,920 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\serenum.sys -- (Serenum)
DRV - [2009.07.14 00:45:08 | 000,019,968 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\sermouse.sys -- (sermouse)
DRV - [2009.07.14 00:19:21 | 000,021,504 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\HidBatt.sys -- (HidBatt)
DRV - [2009.07.14 00:19:19 | 000,007,168 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\errdev.sys -- (ErrDev)
DRV - [2009.07.14 00:19:17 | 000,011,264 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\system32\drivers\wmiacpi.sys -- (WmiAcpi)
DRV - [2009.07.14 00:11:24 | 000,080,896 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\system32\drivers\i8042prt.sys -- (i8042prt)
DRV - [2009.07.14 00:11:04 | 000,055,296 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\amdk8.sys -- (AmdK8)
DRV - [2009.07.14 00:11:04 | 000,052,736 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\viac7.sys -- (ViaC7)
DRV - [2009.07.14 00:11:04 | 000,052,736 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\amdppm.sys -- (AmdPPM)
DRV - [2009.07.14 00:11:04 | 000,052,224 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\processr.sys -- (Processor)
DRV - [2009.07.13 23:02:51 | 004,231,168 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\netw5v32.sys -- (netw5v32) Intel(R)
DRV - [2009.07.13 23:02:49 | 000,229,888 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\k57nd60x.sys -- (k57nd60x) Broadcom NetLink (TM)
DRV - [2008.08.26 08:26:12 | 000,018,816 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\pccsmcfd.sys -- (pccsmcfd)
DRV - [2008.03.14 07:04:29 | 000,046,652 | ---- | M] (PowerISO Computing, Inc.) [Kernel | System | Running] -- C:\Windows\System32\drivers\scdemu.sys -- (SCDEmu)
DRV - [2007.06.29 13:47:34 | 000,034,304 | ---- | M] (AMD, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\AmdLLD.sys -- (AmdLLD)
DRV - [2006.11.14 17:35:20 | 000,037,376 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\rixdptsk.sys -- (rismxdp)
DRV - [2005.11.22 11:12:32 | 000,042,624 | ---- | M] (Data Encryption Systems Limited) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\dk2drv.sys -- (dk2drv)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 00 30 B8 89 93 F0 CB 01  [binary data]
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
 
========== FireFox ==========
 
FF - prefs.js..browser.search.defaultenginename: "Facemoods Search"
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.startup.homepage: "hxxp://www.google.de/||hxxp://www.facebook.com/"
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23
FF - prefs.js..extensions.enabledItems: {ACAA314B-EEBA-48e4-AD47-84E31C44796C}:1.0.1
FF - prefs.js..extensions.enabledItems: FFToolbar@bitdefender.com:2.0
FF - prefs.js..extensions.enabledItems: {23fcfd51-4958-4f00-80a3-ae97e717ed8b}:2.1.1.94
FF - prefs.js..extensions.enabledItems: {6904342A-8307-11DF-A508-4AE2DFD72085}:2.1.1.94
FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.6
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=:  File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\FFToolbar@bitdefender.com: C:\Program Files\BitDefender\BitDefender 2011\bdaphffext\ [2011.10.11 18:02:35 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{23fcfd51-4958-4f00-80a3-ae97e717ed8b}: C:\Program Files\DivX\DivX Plus Web Player\firefox\html5video [2011.03.11 23:37:19 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{6904342A-8307-11DF-A508-4AE2DFD72085}: C:\Program Files\DivX\DivX Plus Web Player\firefox\wpa [2011.03.11 23:37:19 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 9.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011.12.22 18:05:10 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 9.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011.09.19 14:54:45 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\bdThunderbird@bitdefender.com: C:\Program Files\BitDefender\BitDefender 2011\bdtbext\ [2011.10.11 18:02:35 | 000,000,000 | ---D | M]
 
[2011.02.02 21:12:40 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Dell\AppData\Roaming\mozilla\Extensions
[2011.12.20 16:50:37 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Dell\AppData\Roaming\mozilla\Firefox\Profiles\n7wz0213.default\extensions
[2011.02.03 18:42:09 | 000,000,000 | ---D | M] ("DVDVideoSoft Menu") -- C:\Users\Dell\AppData\Roaming\mozilla\Firefox\Profiles\n7wz0213.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}
[2011.11.12 18:25:33 | 000,000,000 | ---D | M] (Greasemonkey) -- C:\Users\Dell\AppData\Roaming\mozilla\Firefox\Profiles\n7wz0213.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}
[2011.12.20 16:50:37 | 000,000,000 | ---D | M] (FoxyProxy Standard) -- C:\Users\Dell\AppData\Roaming\mozilla\Firefox\Profiles\n7wz0213.default\extensions\foxyproxy@eric.h.jung
[2011.12.22 18:05:09 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions
() (No name found) -- C:\USERS\DELL\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\N7WZ0213.DEFAULT\EXTENSIONS\{D10D0BF8-F5B5-C8B4-A8B2-2B9879E08C5D}.XPI
[2011.12.21 08:42:29 | 000,121,816 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2011.10.03 05:06:04 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll
[2011.12.21 06:08:50 | 000,001,392 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\amazondotcom-de.xml
[2011.12.21 06:02:40 | 000,002,252 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\bing.xml
[2011.12.21 06:08:50 | 000,001,153 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay-de.xml
[2011.12.21 06:08:50 | 000,006,805 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\leo_ende_de.xml
[2011.12.21 06:08:50 | 000,001,178 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-de.xml
[2011.12.21 06:08:50 | 000,001,105 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo-de.xml
 
O1 HOSTS File: ([2011.12.22 20:50:11 | 000,000,027 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1      localhost
O2 - BHO: (DivX Plus Web Player HTML5 <video>) - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Programme\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Programme\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (DivX HiQ) - {593DDEC6-7468-4cdd-90E1-42DADAA222E9} - C:\Programme\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
O2 - BHO: (Skype Plug-In) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O3 - HKLM\..\Toolbar: (Bitdefender Toolbar) - {381FFDE8-2394-4F90-B10D-FC6124A40F8C} - C:\Programme\BitDefender\BitDefender 2011\ietoolbar.dll (BitDefender S.R.L.)
O4 - HKLM..\Run: [BDAgent] C:\Program Files\BitDefender\BitDefender 2011\bdagent.exe (BitDefender S.R.L.)
O4 - HKLM..\Run: [BitDefender Antiphishing Helper] C:\Program Files\BitDefender\BitDefender 2011\ieshow.exe (BitDefender S.R.L.)
O4 - HKLM..\Run: [NokiaMusic FastStart] C:\Program Files\Nokia\Ovi Player\NokiaOviPlayer.exe (Nokia)
O4 - HKCU..\Run: [SpybotSD TeaTimer] C:\Programme\Spybot - Search & Destroy\TeaTimer.exe (Safer-Networking Ltd.)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutorun = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Users\Dell\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm ()
O8 - Extra context menu item: Nach Microsoft &Excel exportieren - C:\Programme\Microsoft Office\OFFICE11\EXCEL.EXE (Microsoft Corporation)
O9 - Extra Button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra Button: Recherchieren - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Programme\Microsoft Office\OFFICE11\REFIEBAR.DLL (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Programme\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://active.macromedia.com/flash2/cabs/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{BD2B9DE0-579C-4040-BD43-B6F0EAC6852D}: DhcpNameServer = 192.168.2.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{C9423DBA-B676-4608-91BA-8ECDD0E96D9D}: DhcpNameServer = 192.168.2.1
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\Programme\Common Files\microsoft shared\Web Components\10\OWC10.DLL (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\Programme\Common Files\microsoft shared\Web Components\11\OWC11.DLL (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Programme\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O18 - Protocol\Filter\text/xml {807553E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Common Files\microsoft shared\OFFICE11\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) -C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) -C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) -C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009.06.10 22:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun)
ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
ActiveX: {25FFAAD0-F4A3-4164-95FF-4461E9F35D51} - .NET Framework
ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX: {3C3901C5-3455-3E0A-A214-0B093A5070A6} - .NET Framework
ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX: {73FA19D0-2D75-11D2-995D-00C04F98BBC9} - Webordner
ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\System32\ie4uinit.exe -BaseSettings
ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install
ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP
ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\System32\ie4uinit.exe -UserIconConfig
ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
 
NetSvcs: FastUserSwitchingCompatibility -  File not found
NetSvcs: Ias - C:\Windows\System32\ias.dll (Microsoft Corporation)
NetSvcs: Nla -  File not found
NetSvcs: Ntmssvc -  File not found
NetSvcs: NWCWorkstation -  File not found
NetSvcs: Nwsapagent -  File not found
NetSvcs: SRService -  File not found
NetSvcs: UxTuneUp - C:\Windows\System32\uxtuneup.dll (TuneUp Software)
NetSvcs: WmdmPmSp -  File not found
NetSvcs: LogonHours -  File not found
NetSvcs: PCAudit -  File not found
NetSvcs: helpsvc -  File not found
NetSvcs: uploadmgr -  File not found
 
 
CREATERESTOREPOINT
Restore point Set: OTL Restore Point
 
========== Files/Folders - Created Within 30 Days ==========
 
[2011.12.22 22:11:09 | 000,584,192 | ---- | C] (OldTimer Tools) -- C:\Users\Dell\Desktop\OTL.exe
[2011.12.22 20:51:41 | 000,000,000 | -HSD | C] -- C:\$RECYCLE.BIN
[2011.12.22 20:51:38 | 000,000,000 | ---D | C] -- C:\Windows\temp
[2011.12.22 20:51:38 | 000,000,000 | ---D | C] -- C:\Users\Dell\AppData\Local\temp
[2011.12.22 20:39:30 | 000,518,144 | ---- | C] (SteelWerX) -- C:\Windows\SWREG.exe
[2011.12.22 20:39:30 | 000,406,528 | ---- | C] (SteelWerX) -- C:\Windows\SWSC.exe
[2011.12.22 20:39:30 | 000,060,416 | ---- | C] (NirSoft) -- C:\Windows\NIRCMD.exe
[2011.12.22 20:39:25 | 000,000,000 | ---D | C] -- C:\Windows\ERDNT
[2011.12.22 20:36:14 | 004,348,814 | R--- | C] (Swearware) -- C:\ComboFix.exe
[2011.12.22 20:30:07 | 000,000,000 | ---D | C] -- C:\Qoobox
[2011.12.20 22:03:35 | 003,296,600 | ---- | C] (Dolby Laboratories) -- C:\Windows\System32\R4EEP32H.dll
[2011.12.20 22:03:35 | 000,357,720 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RTEEP32H.dll
[2011.12.20 22:03:35 | 000,345,944 | ---- | C] (Dolby Laboratories) -- C:\Windows\System32\R4EED32H.dll
[2011.12.20 22:03:35 | 000,295,768 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RH3DHT32.dll
[2011.12.20 22:03:35 | 000,295,768 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RH3DAA32.dll
[2011.12.20 22:03:35 | 000,170,840 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RTEED32H.dll
[2011.12.20 22:03:35 | 000,103,256 | ---- | C] (Dolby Laboratories) -- C:\Windows\System32\R4EEL32H.dll
[2011.12.20 22:03:35 | 000,088,408 | ---- | C] (Dolby Laboratories) -- C:\Windows\System32\R4EEA32H.dll
[2011.12.20 22:03:35 | 000,076,120 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RTEEL32H.dll
[2011.12.20 22:03:35 | 000,064,856 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RTEEG32H.dll
[2011.12.20 22:03:35 | 000,061,272 | ---- | C] (Dolby Laboratories) -- C:\Windows\System32\R4EEG32H.dll
[2011.12.20 21:53:10 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\newfolder3
[2011.12.20 20:51:55 | 000,000,000 | ---D | C] -- C:\Program Files\Realtek
[2011.12.20 20:51:53 | 000,000,000 | -H-D | C] -- C:\Program Files\Temp
[2011.12.20 17:44:17 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth
[2011.12.13 10:50:57 | 000,000,000 | ---D | C] -- C:\Users\Dell\Desktop\Zubehör
[2011.12.11 11:52:26 | 000,000,000 | -HSD | C] -- C:\Users\Dell\Phone Browser
[2011.12.10 14:42:11 | 000,000,000 | ---D | C] -- C:\Users\Dell\AppData\Local\Chromium
[2011.12.08 15:46:25 | 000,000,000 | ---D | C] -- C:\Users\Dell\Desktop\sh3u56f
[2011.12.08 15:20:42 | 000,000,000 | ---D | C] -- C:\Users\Dell\Documents\Stronghold 3
[2011.11.27 16:12:00 | 000,000,000 | ---D | C] -- C:\Users\Dell\AppData\Roaming\SWiSH Max4
[2011.11.27 16:07:26 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SWiSH Max4
[2011.11.27 16:07:24 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LameACM
[2011.11.27 16:07:24 | 000,000,000 | ---D | C] -- C:\Program Files\LameACM
[2011.11.27 16:06:59 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\SWiSHzone.com
[2011.11.27 16:06:57 | 000,000,000 | ---D | C] -- C:\Program Files\SWiSH Max4
[2011.11.27 15:53:32 | 056,654,648 | ---- | C] (SWiSHzone.com) -- C:\Users\Dell\Desktop\SetupSwishmax4.exe
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
 
========== Files - Modified Within 30 Days ==========
 
[2011.12.22 22:12:30 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Users\Dell\Desktop\OTL.exe
[2011.12.22 21:39:16 | 000,001,094 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2011.12.22 21:01:42 | 000,014,832 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2011.12.22 21:01:42 | 000,014,832 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2011.12.22 20:59:25 | 000,705,096 | ---- | M] () -- C:\Windows\System32\perfh007.dat
[2011.12.22 20:59:25 | 000,660,374 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2011.12.22 20:59:25 | 000,151,424 | ---- | M] () -- C:\Windows\System32\perfc007.dat
[2011.12.22 20:59:25 | 000,124,370 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2011.12.22 20:54:21 | 000,001,090 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2011.12.22 20:53:55 | 000,000,434 | -H-- | M] () -- C:\Windows\tasks\Norton Security Scan for Dell.job
[2011.12.22 20:53:49 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2011.12.22 20:53:41 | 2411,900,928 | -HS- | M] () -- C:\hiberfil.sys
[2011.12.22 20:50:11 | 000,000,027 | ---- | M] () -- C:\Windows\System32\drivers\etc\hosts
[2011.12.22 20:27:12 | 004,348,814 | R--- | M] (Swearware) -- C:\ComboFix.exe
[2011.12.22 18:05:16 | 000,001,094 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2011.12.20 17:44:17 | 000,002,172 | ---- | M] () -- C:\Users\Public\Desktop\Google Earth.lnk
[2011.12.15 14:23:25 | 000,387,392 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2011.12.13 11:03:24 | 001,328,721 | ---- | M] () -- C:\Users\Dell\Desktop\iw3mp_17.rar
[2011.12.13 10:50:52 | 002,399,568 | ---- | M] () -- C:\Users\Dell\Desktop\Zubehoer.rar
[2011.12.10 17:45:23 | 000,641,127 | ---- | M] () -- C:\Users\Dell\Desktop\PeZBOT_002p_-_World_at_War.zip
[2011.12.10 13:54:44 | 000,363,580 | ---- | M] () -- C:\Users\Dell\Desktop\loc.v
[2011.12.08 15:46:22 | 001,204,704 | ---- | M] () -- C:\Users\Dell\Desktop\sh3u56f.rar
[2011.12.06 20:23:34 | 005,615,808 | ---- | M] () -- C:\Users\Dell\Desktop\Taio_Cruz_ft._Flo_Rida_-_Hangover_Hardwell_Extende....mp3
[2011.11.27 16:07:26 | 000,000,982 | ---- | M] () -- C:\Users\Public\Desktop\SWiSH Max4.lnk
[2011.11.27 16:06:37 | 056,654,648 | ---- | M] (SWiSHzone.com) -- C:\Users\Dell\Desktop\SetupSwishmax4.exe
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
 
========== Files Created - No Company Name ==========
 
[2011.12.22 20:39:30 | 000,256,000 | ---- | C] () -- C:\Windows\PEV.exe
[2011.12.22 20:39:30 | 000,208,896 | ---- | C] () -- C:\Windows\MBR.exe
[2011.12.22 20:39:30 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe
[2011.12.22 20:39:30 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe
[2011.12.22 20:39:30 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe
[2011.12.20 17:44:17 | 000,002,172 | ---- | C] () -- C:\Users\Public\Desktop\Google Earth.lnk
[2011.12.13 11:03:50 | 003,330,048 | ---- | C] () -- C:\Users\Dell\Desktop\iw3mp.exe
[2011.12.13 11:03:12 | 001,328,721 | ---- | C] () -- C:\Users\Dell\Desktop\iw3mp_17.rar
[2011.12.13 10:50:29 | 002,399,568 | ---- | C] () -- C:\Users\Dell\Desktop\Zubehoer.rar
[2011.12.11 11:52:50 | 003,515,964 | ---- | C] () -- C:\Users\Dell\Desktop\Rihanna feat. Calvin Harris - We Found Love.mp3
[2011.12.10 17:45:20 | 000,641,127 | ---- | C] () -- C:\Users\Dell\Desktop\PeZBOT_002p_-_World_at_War.zip
[2011.12.10 15:03:05 | 000,363,580 | ---- | C] () -- C:\Users\Dell\Desktop\loc.v
[2011.12.08 15:46:10 | 001,204,704 | ---- | C] () -- C:\Users\Dell\Desktop\sh3u56f.rar
[2011.12.06 20:17:23 | 005,615,808 | ---- | C] () -- C:\Users\Dell\Desktop\Taio_Cruz_ft._Flo_Rida_-_Hangover_Hardwell_Extende....mp3
[2011.11.27 16:07:26 | 000,000,982 | ---- | C] () -- C:\Users\Public\Desktop\SWiSH Max4.lnk
[2011.09.27 17:51:24 | 000,007,615 | ---- | C] () -- C:\Users\Dell\AppData\Local\Resmon.ResmonCfg
[2011.07.28 16:49:12 | 000,053,760 | ---- | C] () -- C:\Windows\System32\OVDecode.dll
[2011.06.25 16:28:34 | 000,000,064 | ---- | C] () -- C:\Windows\FLS1.INI
[2011.06.25 16:28:29 | 000,081,920 | ---- | C] () -- C:\Windows\System32\FLSDEVCP.EXE
[2011.06.25 16:28:27 | 001,695,744 | ---- | C] () -- C:\Windows\System32\flsinst.dll
[2011.06.25 16:28:27 | 000,004,122 | ---- | C] () -- C:\Windows\System32\flsinst.ini
[2011.06.23 20:20:14 | 000,233,344 | ---- | C] () -- C:\Windows\System32\drivers\msiscsi.sys
[2011.06.23 20:19:54 | 000,164,864 | ---- | C] () -- C:\Windows\System32\drivers\1394ohci.sys
[2011.06.23 20:19:52 | 000,116,096 | ---- | C] () -- C:\Windows\System32\drivers\msdsm.sys
[2011.06.23 20:19:49 | 000,053,120 | ---- | C] () -- C:\Windows\System32\drivers\termdd.sys
[2011.06.23 20:19:47 | 000,085,376 | ---- | C] () -- C:\Windows\System32\drivers\sbp2port.sys
[2011.06.23 20:19:45 | 000,160,128 | ---- | C] () -- C:\Windows\System32\drivers\vhdmp.sys
[2011.06.23 20:19:39 | 000,146,432 | ---- | C] () -- C:\Windows\System32\drivers\usbvideo.sys
[2011.06.23 20:19:39 | 000,130,432 | ---- | C] () -- C:\Windows\System32\drivers\mpio.sys
[2011.06.23 20:19:37 | 000,028,032 | ---- | C] () -- C:\Windows\System32\drivers\storvsc.sys
[2011.06.23 20:19:27 | 000,084,992 | ---- | C] () -- C:\Windows\System32\drivers\sdbus.sys
[2011.06.23 20:19:23 | 000,080,768 | ---- | C] () -- C:\Windows\System32\drivers\USBAUDIO.sys
[2011.06.23 20:19:18 | 000,066,048 | ---- | C] () -- C:\Windows\System32\PrintBrmUi.exe
[2011.06.23 20:19:17 | 000,031,232 | ---- | C] () -- C:\Windows\System32\drivers\CompositeBus.sys
[2011.06.23 20:19:15 | 000,017,920 | ---- | C] () -- C:\Windows\System32\drivers\VMBusHID.sys
[2011.06.23 20:19:15 | 000,010,240 | ---- | C] () -- C:\Windows\System32\drivers\acpipmi.sys
[2011.06.23 20:19:14 | 000,065,536 | ---- | C] () -- C:\Windows\System32\drivers\IPMIDrv.sys
[2011.06.23 20:19:14 | 000,028,160 | ---- | C] () -- C:\Windows\System32\drivers\kbdhid.sys
[2011.06.23 20:19:14 | 000,027,648 | ---- | C] () -- C:\Windows\System32\drivers\usbser.sys
[2011.06.23 20:19:13 | 000,304,128 | ---- | C] () -- C:\Windows\System32\drivers\HdAudio.sys
[2011.06.23 20:19:13 | 000,108,544 | ---- | C] () -- C:\Windows\System32\drivers\hdaudbus.sys
[2011.06.23 20:19:13 | 000,039,936 | ---- | C] () -- C:\Windows\System32\drivers\umbus.sys
[2011.06.23 20:19:11 | 000,005,632 | ---- | C] () -- C:\Windows\System32\drivers\vms3cap.sys
[2011.05.11 14:05:49 | 000,020,480 | ---- | C] () -- C:\Windows\System32\drivers\usbohci.sys
[2011.04.27 21:23:36 | 000,143,744 | ---- | C] () -- C:\Windows\System32\drivers\nvstor.sys
[2011.04.27 21:23:36 | 000,117,120 | ---- | C] () -- C:\Windows\System32\drivers\nvraid.sys
[2011.04.27 21:23:36 | 000,080,256 | ---- | C] () -- C:\Windows\System32\drivers\amdsata.sys
[2011.04.27 21:23:35 | 000,332,160 | ---- | C] () -- C:\Windows\System32\drivers\iaStorV.sys
[2011.04.15 20:21:54 | 000,120,200 | ---- | C] () -- C:\Windows\System32\DLLDEV32i.dll
[2011.04.15 20:21:34 | 000,007,119 | ---- | C] () -- C:\Windows\mgxoschk.ini
[2011.04.14 20:17:29 | 000,000,259 | ---- | C] () -- C:\Windows\WinInit.Ini
[2011.03.13 20:37:56 | 000,000,040 | -HS- | C] () -- C:\ProgramData\.zreglib
[2011.02.02 23:08:15 | 000,000,016 | ---- | C] () -- C:\Windows\System32\asdict.dat
[2011.02.02 22:44:14 | 000,063,007 | ---- | C] () -- C:\ProgramData\bdinstall.bin
[2011.02.02 21:22:32 | 000,000,400 | ---- | C] () -- C:\Windows\ODBC.INI
[2011.02.02 21:12:36 | 000,000,000 | ---- | C] () -- C:\Windows\nsreg.dat
[2011.02.02 21:06:22 | 000,000,056 | -H-- | C] () -- C:\Windows\System32\ezsidmv.dat
[2011.02.02 13:30:31 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
[2010.07.08 09:37:14 | 000,101,544 | ---- | C] () -- C:\Program Files\Common Files\LinkInstaller.exe
[2010.04.02 17:17:34 | 000,179,091 | ---- | C] () -- C:\Windows\System32\xlive.dll.cat
[2009.11.02 12:45:44 | 000,014,808 | ---- | C] () -- C:\Windows\System32\drivers\TurboB.sys
[2009.07.14 10:00:12 | 000,705,096 | ---- | C] () -- C:\Windows\System32\perfh007.dat
[2009.07.14 10:00:12 | 000,295,922 | ---- | C] () -- C:\Windows\System32\perfi007.dat
[2009.07.14 10:00:12 | 000,151,424 | ---- | C] () -- C:\Windows\System32\perfc007.dat
[2009.07.14 10:00:12 | 000,038,104 | ---- | C] () -- C:\Windows\System32\perfd007.dat
[2009.07.14 05:57:37 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2009.07.14 05:33:53 | 000,387,392 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT
[2009.07.14 03:05:48 | 000,660,374 | ---- | C] () -- C:\Windows\System32\perfh009.dat
[2009.07.14 03:05:48 | 000,291,294 | ---- | C] () -- C:\Windows\System32\perfi009.dat
[2009.07.14 03:05:48 | 000,124,370 | ---- | C] () -- C:\Windows\System32\perfc009.dat
[2009.07.14 03:05:48 | 000,031,548 | ---- | C] () -- C:\Windows\System32\perfd009.dat
[2009.07.14 03:05:05 | 000,000,741 | ---- | C] () -- C:\Windows\System32\NOISE.DAT
[2009.07.14 03:04:11 | 000,215,943 | ---- | C] () -- C:\Windows\System32\dssec.dat
[2009.07.14 01:59:16 | 000,013,568 | ---- | C] () -- C:\Windows\System32\drivers\BrFiltLo.sys
[2009.07.14 01:59:02 | 000,062,336 | ---- | C] () -- C:\Windows\System32\drivers\BrSerWdm.sys
[2009.07.14 01:58:59 | 000,005,248 | ---- | C] () -- C:\Windows\System32\drivers\BrFiltUp.sys
[2009.07.14 01:58:35 | 000,011,904 | ---- | C] () -- C:\Windows\System32\drivers\BrUsbSer.sys
[2009.07.14 01:58:27 | 000,012,160 | ---- | C] () -- C:\Windows\System32\drivers\BrUsbMdm.sys
[2009.07.14 01:57:25 | 000,272,128 | ---- | C] () -- C:\Windows\System32\drivers\BrSerId.sys
[2009.07.14 01:55:09 | 001,332,736 | ---- | C] () -- C:\Windows\System32\hpotiop1.dll
[2009.07.14 00:55:01 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2009.07.14 00:51:43 | 000,073,728 | ---- | C] () -- C:\Windows\System32\BthpanContextHandler.dll
[2009.07.14 00:51:35 | 000,008,192 | ---- | C] () -- C:\Windows\System32\drivers\umpass.sys
[2009.07.14 00:51:34 | 000,056,320 | ---- | C] () -- C:\Windows\System32\drivers\bthmodem.sys
[2009.07.14 00:51:33 | 000,091,136 | ---- | C] () -- C:\Windows\System32\drivers\hidbth.sys
[2009.07.14 00:51:29 | 000,062,464 | ---- | C] () -- C:\Windows\System32\drivers\ohci1394.sys
[2009.07.14 00:51:18 | 000,086,016 | ---- | C] () -- C:\Windows\System32\drivers\usbcir.sys
[2009.07.14 00:51:17 | 000,037,888 | ---- | C] () -- C:\Windows\System32\drivers\circlass.sys
[2009.07.14 00:51:05 | 000,037,888 | ---- | C] () -- C:\Windows\System32\drivers\hidir.sys
[2009.07.14 00:46:55 | 000,012,288 | ---- | C] () -- C:\Windows\System32\drivers\MTConfig.sys
[2009.07.14 00:46:53 | 000,021,632 | ---- | C] () -- C:\Windows\System32\drivers\wacompen.sys
[2009.07.14 00:46:05 | 000,022,096 | ---- | C] () -- C:\Windows\System32\drivers\crcdisk.sys
[2009.07.14 00:45:52 | 000,013,824 | ---- | C] () -- C:\Windows\System32\drivers\sfloppy.sys
[2009.07.14 00:45:52 | 000,012,288 | ---- | C] () -- C:\Windows\System32\drivers\sffp_mmc.sys
[2009.07.14 00:45:45 | 000,025,088 | ---- | C] () -- C:\Windows\System32\drivers\fdc.sys
[2009.07.14 00:45:45 | 000,019,968 | ---- | C] () -- C:\Windows\System32\drivers\flpydisk.sys
[2009.07.14 00:45:35 | 000,079,360 | ---- | C] () -- C:\Windows\System32\drivers\parport.sys
[2009.07.14 00:45:33 | 000,083,456 | ---- | C] () -- C:\Windows\System32\drivers\serial.sys
[2009.07.14 00:45:29 | 000,008,704 | ---- | C] () -- C:\Windows\System32\drivers\parvdm.sys
[2009.07.14 00:45:28 | 000,017,920 | ---- | C] () -- C:\Windows\System32\drivers\serenum.sys
[2009.07.14 00:45:08 | 000,019,968 | ---- | C] () -- C:\Windows\System32\drivers\sermouse.sys
[2009.07.14 00:45:08 | 000,012,240 | ---- | C] () -- C:\Windows\System32\drivers\swenum.sys
[2009.07.14 00:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\System32\BWContextHandler.dll
[2009.07.14 00:25:51 | 000,105,024 | ---- | C] () -- C:\Windows\System32\drivers\NV_AGP.SYS
[2009.07.14 00:25:48 | 000,057,424 | ---- | C] () -- C:\Windows\System32\drivers\ULIAGPKX.SYS
[2009.07.14 00:25:42 | 000,057,936 | ---- | C] () -- C:\Windows\System32\drivers\GAGP30KX.SYS
[2009.07.14 00:25:41 | 000,055,888 | ---- | C] () -- C:\Windows\System32\drivers\UAGP35.SYS
[2009.07.14 00:25:40 | 000,053,328 | ---- | C] () -- C:\Windows\System32\drivers\VIAAGP.SYS
[2009.07.14 00:25:37 | 000,053,312 | ---- | C] () -- C:\Windows\System32\drivers\AGP440.sys
[2009.07.14 00:25:36 | 000,053,312 | ---- | C] () -- C:\Windows\System32\drivers\AMDAGP.SYS
[2009.07.14 00:25:36 | 000,052,304 | ---- | C] () -- C:\Windows\System32\drivers\SISAGP.SYS
[2009.07.14 00:19:30 | 000,180,288 | ---- | C] () -- C:\Windows\System32\drivers\pcmcia.sys
[2009.07.14 00:19:29 | 000,046,656 | ---- | C] () -- C:\Windows\System32\drivers\isapnp.sys
[2009.07.14 00:19:26 | 000,028,240 | ---- | C] () -- C:\Windows\System32\drivers\mssmbios.sys
[2009.07.14 00:19:21 | 000,021,504 | ---- | C] () -- C:\Windows\System32\drivers\hidbatt.sys
[2009.07.14 00:19:19 | 000,007,168 | ---- | C] () -- C:\Windows\System32\drivers\errdev.sys
[2009.07.14 00:19:17 | 000,011,264 | ---- | C] () -- C:\Windows\System32\drivers\wmiacpi.sys
[2009.07.14 00:11:31 | 000,019,024 | ---- | C] () -- C:\Windows\System32\drivers\wd.sys
[2009.07.14 00:11:24 | 000,080,896 | ---- | C] () -- C:\Windows\System32\drivers\i8042prt.sys
[2009.07.14 00:11:20 | 000,016,976 | ---- | C] () -- C:\Windows\System32\drivers\viaide.sys
[2009.07.14 00:11:20 | 000,012,368 | ---- | C] () -- C:\Windows\System32\drivers\pciide.sys
[2009.07.14 00:11:19 | 000,015,424 | ---- | C] () -- C:\Windows\System32\drivers\intelide.sys
[2009.07.14 00:11:19 | 000,014,912 | ---- | C] () -- C:\Windows\System32\drivers\amdide.sys
[2009.07.14 00:11:18 | 000,015,952 | ---- | C] () -- C:\Windows\System32\drivers\cmdide.sys
[2009.07.14 00:11:17 | 000,014,400 | ---- | C] () -- C:\Windows\System32\drivers\aliide.sys
[2009.07.14 00:11:15 | 000,042,576 | ---- | C] () -- C:\Windows\System32\drivers\kbdclass.sys
[2009.07.14 00:11:04 | 000,055,296 | ---- | C] () -- C:\Windows\System32\drivers\amdk8.sys
[2009.07.14 00:11:04 | 000,052,736 | ---- | C] () -- C:\Windows\System32\drivers\viac7.sys
[2009.07.14 00:11:04 | 000,052,736 | ---- | C] () -- C:\Windows\System32\drivers\amdppm.sys
[2009.07.14 00:11:04 | 000,052,224 | ---- | C] () -- C:\Windows\System32\drivers\processr.sys
[2009.07.13 23:54:14 | 000,026,624 | ---- | C] () -- C:\Windows\System32\drivers\hcw85cir.sys
[2009.07.13 23:09:19 | 000,095,824 | ---- | C] () -- C:\Windows\System32\drivers\lsi_fc.sys
[2009.07.13 23:09:18 | 000,106,064 | ---- | C] () -- C:\Windows\System32\drivers\ql40xx.sys
[2009.07.13 23:09:18 | 000,096,848 | ---- | C] () -- C:\Windows\System32\drivers\lsi_scsi.sys
[2009.07.13 23:09:18 | 000,089,168 | ---- | C] () -- C:\Windows\System32\drivers\lsi_sas.sys
[2009.07.13 23:09:18 | 000,077,888 | ---- | C] () -- C:\Windows\System32\drivers\sisraid4.sys
[2009.07.13 23:09:18 | 000,054,864 | ---- | C] () -- C:\Windows\System32\drivers\lsi_sas2.sys
[2009.07.13 23:09:18 | 000,021,072 | ---- | C] () -- C:\Windows\System32\drivers\stexstor.sys
[2009.07.13 23:09:17 | 000,235,584 | ---- | C] () -- C:\Windows\System32\drivers\MegaSR.sys
[2009.07.13 23:09:17 | 000,086,608 | ---- | C] () -- C:\Windows\System32\drivers\arcsas.sys
[2009.07.13 23:09:17 | 000,076,368 | ---- | C] () -- C:\Windows\System32\drivers\arc.sys
[2009.07.13 23:09:17 | 000,067,152 | ---- | C] () -- C:\Windows\System32\drivers\HpSAMD.sys
[2009.07.13 23:09:17 | 000,044,624 | ---- | C] () -- C:\Windows\System32\drivers\nfrd960.sys
[2009.07.13 23:09:17 | 000,041,040 | ---- | C] () -- C:\Windows\System32\drivers\iirsp.sys
[2009.07.13 23:09:16 | 000,297,552 | ---- | C] () -- C:\Windows\System32\drivers\adpahci.sys
[2009.07.13 23:09:16 | 000,146,512 | ---- | C] () -- C:\Windows\System32\drivers\adpu320.sys
[2009.06.18 19:29:04 | 000,197,654 | ---- | C] () -- C:\Windows\System32\atiicdxx.dat
[2009.06.10 22:26:10 | 000,673,088 | ---- | C] () -- C:\Windows\System32\mlang.dat
[2009.06.10 22:20:26 | 000,070,720 | ---- | C] () -- C:\Windows\System32\drivers\djsvs.sys
[2009.06.10 22:20:24 | 000,141,904 | ---- | C] () -- C:\Windows\System32\drivers\vsmraid.sys
[2009.06.10 22:20:08 | 000,040,016 | ---- | C] () -- C:\Windows\System32\drivers\sisraid2.sys
[2009.06.10 22:20:06 | 001,383,488 | ---- | C] () -- C:\Windows\System32\drivers\ql2300.sys
[2009.06.10 22:20:03 | 000,159,312 | ---- | C] () -- C:\Windows\System32\drivers\amdsbs.sys
[2009.06.10 22:19:35 | 000,030,800 | ---- | C] () -- C:\Windows\System32\drivers\megasas.sys
[2009.06.10 22:19:19 | 000,453,712 | ---- | C] () -- C:\Windows\System32\drivers\elxstor.sys
[2009.06.10 22:19:05 | 000,422,976 | ---- | C] () -- C:\Windows\System32\drivers\adp94xx.sys
[2009.06.10 22:17:55 | 003,100,160 | ---- | C] () -- C:\Windows\System32\drivers\evbdx.sys
[2009.06.10 22:17:52 | 000,430,080 | ---- | C] () -- C:\Windows\System32\drivers\bxvbdx.sys
[2009.02.18 17:55:22 | 000,294,912 | ---- | C] () -- C:\Windows\System32\ATIODE.exe
[2009.02.03 20:52:04 | 000,045,056 | ---- | C] () -- C:\Windows\System32\ATIODCLI.exe
[2007.01.31 13:50:32 | 000,913,408 | ---- | C] () -- C:\Windows\System32\xreglib.dll
[2005.05.06 19:06:00 | 000,016,480 | ---- | C] () -- C:\Windows\System32\rixdicon.dll
[2003.02.20 17:53:42 | 000,005,702 | ---- | C] () -- C:\Windows\System32\OUTLPERF.INI
[2001.08.29 13:11:40 | 000,398,848 | R--- | C] () -- C:\Windows\System32\dk2win32.dll
 
========== LOP Check ==========
 
[2009.07.14 05:53:46 | 000,028,348 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
 
========== Purity Check ==========
 
 
 
========== Custom Scans ==========
 
 
< %SYSTEMDRIVE%\*. >
[2011.12.22 20:51:41 | 000,000,000 | -HSD | M] -- C:\$RECYCLE.BIN
[2009.06.04 11:26:16 | 000,000,000 | ---D | M] -- C:\ATI
[2011.07.31 22:02:38 | 000,000,000 | ---D | M] -- C:\Boot
[2011.12.20 17:44:40 | 000,000,000 | ---D | M] -- C:\Config.Msi
[2011.03.02 22:07:34 | 000,000,000 | ---D | M] -- C:\DELL
[2008.08.05 13:36:12 | 000,000,000 | ---D | M] -- C:\doctemp
[2009.07.14 05:53:55 | 000,000,000 | -HSD | M] -- C:\Documents and Settings
[2008.12.04 20:49:57 | 000,000,000 | -HSD | M] -- C:\Dokumente und Einstellungen
[2011.10.07 15:01:11 | 000,000,000 | ---D | M] -- C:\Download
[2009.12.05 21:22:34 | 000,000,000 | ---D | M] -- C:\Downloads
[2008.09.05 07:19:14 | 000,000,000 | ---D | M] -- C:\Drivers
[2011.01.01 19:05:48 | 000,000,000 | ---D | M] -- C:\Fraps
[2011.01.13 11:07:19 | 000,000,000 | ---D | M] -- C:\MeinBackup
[2009.07.26 19:40:38 | 000,000,000 | R--D | M] -- C:\MSOCache
[2010.02.13 19:54:36 | 000,000,000 | ---D | M] -- C:\Nokia
[2010.12.26 11:48:39 | 000,000,000 | ---D | M] -- C:\OutputFolder
[2009.07.14 03:37:05 | 000,000,000 | ---D | M] -- C:\PerfLogs
[2011.12.20 20:51:55 | 000,000,000 | R--D | M] -- C:\Program Files
[2011.09.08 09:52:50 | 000,000,000 | ---D | M] -- C:\ProgramData
[2008.12.04 20:49:57 | 000,000,000 | -HSD | M] -- C:\Programme
[2009.11.13 22:21:58 | 000,000,000 | ---D | M] -- C:\PSFonts
[2011.12.22 20:51:39 | 000,000,000 | ---D | M] -- C:\Qoobox
[2011.02.02 13:51:20 | 000,000,000 | ---D | M] -- C:\Recovery
[2011.12.22 22:28:43 | 000,000,000 | -HSD | M] -- C:\System Volume Information
[2010.08.15 14:26:41 | 000,000,000 | ---D | M] -- C:\totalcmd
[2011.07.21 17:46:04 | 000,000,000 | R--D | M] -- C:\Users
[2011.12.22 20:51:38 | 000,000,000 | ---D | M] -- C:\Windows
[2011.04.25 08:46:22 | 000,000,000 | ---D | M] -- C:\Windows.old
 
< %PROGRAMFILES%\*.exe >
 
< %LOCALAPPDATA%\*.exe >
 
< %systemroot%\*. /mp /s >
 
 
< MD5 for: AGP440.SYS  >
[2009.07.14 02:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\ERDNT\cache\AGP440.sys
[2009.07.14 02:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_x86_neutral_a97a2a0d0fbc6696\AGP440.sys
[2009.07.14 02:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.1.7600.16385_none_b9e9435f20046eeb\AGP440.sys
[2009.07.14 02:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.1.7601.17514_none_bc1a57271cf2f285\AGP440.sys
[2009.07.14 02:26:15 | 000,053,312 | ---- | M] () Unable to obtain MD5 -- C:\Windows\System32\drivers\AGP440.sys
 
< MD5 for: ATAPI.SYS  >
[2009.07.14 02:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\ERDNT\cache\atapi.sys
[2009.07.14 02:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\System32\drivers\atapi.sys
[2009.07.14 02:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_x86_neutral_fab873f3e8a3315c\atapi.sys
[2009.07.14 02:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.1.7600.16385_none_dd0e7e3d82dd640d\atapi.sys
[2009.07.14 02:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.1.7601.17514_none_df3f92057fcbe7a7\atapi.sys
 
< MD5 for: CNGAUDIT.DLL  >
[2009.07.14 02:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\ERDNT\cache\cngaudit.dll
[2009.07.14 02:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\System32\cngaudit.dll
[2009.07.14 02:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_e83a414890e8132b\cngaudit.dll
 
< MD5 for: EVENTLOG.DLL  >
[2011.02.22 21:18:51 | 000,008,376 | ---- | M] () MD5=68F9AD291B0C16F6B4AAEBFC26960EFA -- C:\Program Files\Common Files\BitDefender\BitDefender Arrakis Server\lib\eventlog.dll
 
< MD5 for: EXPLORER.EXE  >
[2011.02.26 06:19:21 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=0FB9C74046656D1579A64660AD67B746 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_54149f9ef14031fc\explorer.exe
[2009.07.14 02:14:20 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=15BC38A7492BEFE831966ADB477CF76F -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_518afd35db100430\explorer.exe
[2011.02.26 06:51:13 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=255CF508D7CFB10E0794D6AC93280BD8 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20910_none_525b5180f3f95373\explorer.exe
[2009.10.31 06:45:39 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=2626FC9755BE22F805D3CFA0CE3EE727 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_51a66d6ddafc2ed1\explorer.exe
[2011.02.26 06:33:07 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=2AF58D15EDC06EC6FDACCE1F19482BBF -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16768_none_51a3a583dafd0cef\explorer.exe
[2010.11.20 13:17:09 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_53bc10fdd7fe87ca\explorer.exe
[2011.02.25 06:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\ERDNT\cache\explorer.exe
[2011.02.25 06:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\explorer.exe
[2011.02.25 06:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_5389023fd8245f84\explorer.exe
[2009.08.03 06:49:47 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=9FF6C4C91A3711C0A3B18F87B08B518D -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_526619d4f3f142e6\explorer.exe
[2009.08.03 06:35:50 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=B95EEB0F4E5EFBF1038A35B3351CF047 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_51e07e31dad00878\explorer.exe
[2009.10.31 07:00:51 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=C76153C7ECA00FA852BB0C193378F917 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_52283b2af41f3691\explorer.exe
 
< MD5 for: IASTORV.SYS  >
[2011.03.11 06:38:51 | 000,332,160 | ---- | M] (Intel Corporation) MD5=5CD5F9A5444E6CDCB0AC89BD62D8B76E -- C:\Windows\System32\DriverStore\FileRepository\iastorv.inf_x86_neutral_0bcee2057afcc090\iaStorV.sys
[2011.03.11 06:38:51 | 000,332,160 | ---- | M] (Intel Corporation) MD5=5CD5F9A5444E6CDCB0AC89BD62D8B76E -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.1.7601.17577_none_b0daddb9e6380745\iaStorV.sys
[2011.03.11 06:43:55 | 000,332,160 | ---- | M] (Intel Corporation) MD5=71F1A494FEDF4B33C02C4A6A28D6D9E9 -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.1.7600.16778_none_aef580fde910b4b0\iaStorV.sys
[2011.03.11 06:28:00 | 000,332,160 | ---- | M] (Intel Corporation) MD5=778D0E6D7D9EBA0C403BADBAAD41DB20 -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.1.7601.21680_none_b152a892ff64119f\iaStorV.sys
[2009.07.14 02:20:36 | 000,332,352 | ---- | M] (Intel Corporation) MD5=934AF4D7C5F457B9F0743F4299B77B67 -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.1.7600.16385_none_aee7a89be91b9000\iaStorV.sys
[2010.11.20 13:29:54 | 000,332,160 | ---- | M] (Intel Corporation) MD5=A3CAE5D281DB4CFF7CFF8233507EE5AD -- C:\Windows\System32\DriverStore\FileRepository\iastorv.inf_x86_neutral_668286aa35d55928\iaStorV.sys
[2010.11.20 13:29:54 | 000,332,160 | ---- | M] (Intel Corporation) MD5=A3CAE5D281DB4CFF7CFF8233507EE5AD -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.1.7601.17514_none_b118bc63e60a139a\iaStorV.sys
[2011.03.11 06:52:21 | 000,332,160 | ---- | M] (Intel Corporation) MD5=B9039A34C2F8769490DCC494E2402445 -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.1.7600.20921_none_afae2d45020c148b\iaStorV.sys
[2011.03.11 06:38:51 | 000,332,160 | ---- | M] () Unable to obtain MD5 -- C:\Windows\System32\drivers\iaStorV.sys
 
< MD5 for: NETLOGON.DLL  >
[2010.11.20 13:20:28 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\ERDNT\cache\netlogon.dll
[2010.11.20 13:20:28 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\System32\netlogon.dll
[2010.11.20 13:20:28 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7601.17514_none_ffbf212e963c0162\netlogon.dll
[2009.07.14 02:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7600.16385_none_fd8e0d66994d7dc8\netlogon.dll
 
< MD5 for: NVSTOR.SYS  >
[2011.03.11 06:39:00 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=4380E59A170D88C4F1022EFF6719A8A4 -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_x86_neutral_0276fc3b3ea60d41\nvstor.sys
[2011.03.11 06:39:00 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=4380E59A170D88C4F1022EFF6719A8A4 -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7601.17577_none_3ba44e691d6eb11d\nvstor.sys
[2011.03.11 06:44:01 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=4520B63899E867F354EE012D34E11536 -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7600.16778_none_39bef1ad20475e88\nvstor.sys
[2011.03.11 06:28:10 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=66D468654A58594F5F3BA63D5AD5B1AF -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7601.21680_none_3c1c1942369abb77\nvstor.sys
[2011.03.11 06:52:25 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=8A7583A3B58D3EEB28BB26626526BC91 -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7600.20921_none_3a779df43942be63\nvstor.sys
[2010.11.20 13:30:06 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=9283C58EBAA2618F93482EB5DABCEC82 -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_x86_neutral_dd659ed032d28a14\nvstor.sys
[2010.11.20 13:30:06 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=9283C58EBAA2618F93482EB5DABCEC82 -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7601.17514_none_3be22d131d40bd72\nvstor.sys
[2009.07.14 02:20:44 | 000,142,416 | ---- | M] (NVIDIA Corporation) MD5=C99F251A5DE63C6F129CF71933ACED0F -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7600.16385_none_39b1194b205239d8\nvstor.sys
[2011.03.11 06:39:00 | 000,143,744 | ---- | M] () Unable to obtain MD5 -- C:\Windows\System32\drivers\nvstor.sys
 
< MD5 for: SCECLI.DLL  >
[2009.07.14 02:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_37e4387f3a6f0483\scecli.dll
[2010.11.20 13:21:04 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\ERDNT\cache\scecli.dll
[2010.11.20 13:21:04 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\System32\scecli.dll
[2010.11.20 13:21:04 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_3a154c47375d881d\scecli.dll
 
< MD5 for: USER32.DLL  >
[2009.07.14 02:16:17 | 000,811,520 | ---- | M] (Microsoft Corporation) MD5=34B7E222E81FAFA885F0C5F2CFA56861 -- C:\Windows\winsxs\x86_microsoft-windows-user32_31bf3856ad364e35_6.1.7600.16385_none_cd0ec264ceb014a3\user32.dll
[2010.11.20 13:21:33 | 000,811,520 | ---- | M] (Microsoft Corporation) MD5=F1DD3ACAEE5E6B4BBC69BC6DF75CEF66 -- C:\Windows\ERDNT\cache\user32.dll
[2010.11.20 13:21:33 | 000,811,520 | ---- | M] (Microsoft Corporation) MD5=F1DD3ACAEE5E6B4BBC69BC6DF75CEF66 -- C:\Windows\System32\user32.dll
[2010.11.20 13:21:33 | 000,811,520 | ---- | M] (Microsoft Corporation) MD5=F1DD3ACAEE5E6B4BBC69BC6DF75CEF66 -- C:\Windows\winsxs\x86_microsoft-windows-user32_31bf3856ad364e35_6.1.7601.17514_none_cf3fd62ccb9e983d\user32.dll
 
< MD5 for: USERINIT.EXE  >
[2010.11.20 13:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\ERDNT\cache\userinit.exe
[2010.11.20 13:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\System32\userinit.exe
[2010.11.20 13:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe
[2009.07.14 02:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_dbff103933038d7c\userinit.exe
 
< MD5 for: WINLOGON.EXE  >
[2009.10.28 07:17:59 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=37CDB7E72EB66BA85A87CBE37E7F03FD -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16447_none_6fc699643622d177\winlogon.exe
[2009.10.28 06:52:08 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=3BABE6767C78FBF5FB8435FEED187F30 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.20560_none_703394514f56f7c2\winlogon.exe
[2010.11.20 13:17:54 | 000,286,720 | ---- | M] (Microsoft Corporation) MD5=6D13E1406F50C66E2A95D97F22C47560 -- C:\Windows\ERDNT\cache\winlogon.exe
[2010.11.20 13:17:54 | 000,286,720 | ---- | M] (Microsoft Corporation) MD5=6D13E1406F50C66E2A95D97F22C47560 -- C:\Windows\System32\winlogon.exe
[2010.11.20 13:17:54 | 000,286,720 | ---- | M] (Microsoft Corporation) MD5=6D13E1406F50C66E2A95D97F22C47560 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_71ca6b0233339500\winlogon.exe
[2009.07.14 02:14:45 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=8EC6A4AB12B8F3759E21F8E3A388F2CF -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_6f99573a36451166\winlogon.exe
 
< MD5 for: WS2IFSL.SYS  >
[2009.07.14 00:55:02 | 000,016,384 | ---- | M] (Microsoft Corporation) MD5=6DB3276587B853BF886B69528FDB048C -- C:\Windows\System32\drivers\ws2ifsl.sys
[2009.07.14 00:55:02 | 000,016,384 | ---- | M] (Microsoft Corporation) MD5=6DB3276587B853BF886B69528FDB048C -- C:\Windows\winsxs\x86_microsoft-windows-w..rastructure-ws2ifsl_31bf3856ad364e35_6.1.7600.16385_none_4f5cf6f829213bb2\ws2ifsl.sys
 
< %systemroot%\system32\drivers\*.sys /lockedfiles >
[2010.11.20 11:01:12 | 000,164,864 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\1394ohci.sys
[2010.11.20 09:47:55 | 000,010,240 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\acpipmi.sys
[2009.07.14 02:26:15 | 000,422,976 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\adp94xx.sys
[2009.07.14 02:26:17 | 000,297,552 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\adpahci.sys
[2009.07.14 02:26:15 | 000,146,512 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\adpu320.sys
[2009.07.14 02:26:15 | 000,053,312 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\AGP440.sys
[2009.07.14 02:26:15 | 000,014,400 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\aliide.sys
[2009.07.14 02:26:15 | 000,053,312 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\AMDAGP.SYS
[2009.07.14 02:26:15 | 000,014,912 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\amdide.sys
[2009.07.14 00:11:04 | 000,055,296 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\amdk8.sys
[2009.07.14 00:11:04 | 000,052,736 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\amdppm.sys
[2011.03.11 06:38:37 | 000,080,256 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\amdsata.sys
[2009.07.14 02:26:15 | 000,159,312 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\amdsbs.sys
[2009.07.14 02:26:15 | 000,076,368 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\arc.sys
[2009.07.14 02:26:15 | 000,086,608 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\arcsas.sys
[2010.05.13 15:52:04 | 000,152,528 | ---- | M] (BitDefender S.R.L. Bucharest, ROMANIA) Unable to obtain MD5 -- C:\Windows\system32\drivers\bdfm.sys
[2011.04.09 09:16:10 | 000,353,096 | ---- | M] (BitDefender) Unable to obtain MD5 -- C:\Windows\system32\drivers\bdfsfltr.sys
[2009.07.13 23:53:28 | 000,013,568 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\BrFiltLo.sys
[2009.07.13 23:53:28 | 000,005,248 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\BrFiltUp.sys
[2009.07.14 01:57:25 | 000,272,128 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\BrSerId.sys
[2009.07.13 23:53:32 | 000,062,336 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\BrSerWdm.sys
[2009.07.13 23:53:33 | 000,012,160 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\BrUsbMdm.sys
[2009.07.13 23:53:33 | 000,011,904 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\BrUsbSer.sys
[2009.07.14 00:51:34 | 000,056,320 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\bthmodem.sys
[2009.07.13 23:02:48 | 000,430,080 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\bxvbdx.sys
[2009.07.14 00:51:17 | 000,037,888 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\circlass.sys
[2009.07.14 02:26:21 | 000,015,952 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\cmdide.sys
[2010.11.20 10:50:21 | 000,031,232 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\CompositeBus.sys
[2009.07.14 02:20:28 | 000,022,096 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\crcdisk.sys
[2009.07.14 02:20:28 | 000,070,720 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\djsvs.sys
[2009.07.14 02:20:28 | 000,453,712 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\elxstor.sys
[2009.07.14 00:19:19 | 000,007,168 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\errdev.sys
[2009.07.13 23:02:48 | 003,100,160 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\evbdx.sys
[2009.07.14 00:45:45 | 000,025,088 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\fdc.sys
[2009.07.14 00:45:45 | 000,019,968 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\flpydisk.sys
[2009.07.14 02:20:28 | 000,057,936 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\GAGP30KX.SYS
[2009.07.13 23:54:14 | 000,026,624 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\hcw85cir.sys
[2010.11.20 10:59:29 | 000,108,544 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\hdaudbus.sys
[2010.11.20 11:00:21 | 000,304,128 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\HdAudio.sys
[2009.07.14 00:19:21 | 000,021,504 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\hidbatt.sys
[2009.07.14 00:51:33 | 000,091,136 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\hidbth.sys
[2009.07.14 00:51:05 | 000,037,888 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\hidir.sys
[2009.07.14 02:20:28 | 000,067,152 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\HpSAMD.sys
[2009.07.14 00:11:24 | 000,080,896 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\i8042prt.sys
[2011.03.11 06:38:51 | 000,332,160 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\iaStorV.sys
[2009.07.14 02:20:36 | 000,041,040 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\iirsp.sys
[2009.07.14 02:20:36 | 000,015,424 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\intelide.sys
[2010.11.20 10:19:15 | 000,065,536 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\IPMIDrv.sys
[2009.07.14 02:20:36 | 000,046,656 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\isapnp.sys
[2009.07.14 02:20:36 | 000,042,576 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\kbdclass.sys
[2010.11.20 10:50:10 | 000,028,160 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\kbdhid.sys
[2009.07.14 02:20:36 | 000,095,824 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\lsi_fc.sys
[2009.07.14 02:20:37 | 000,089,168 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\lsi_sas.sys
[2009.07.14 02:20:36 | 000,054,864 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\lsi_sas2.sys
[2009.07.14 02:20:36 | 000,096,848 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\lsi_scsi.sys
[2009.07.14 02:20:36 | 000,030,800 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\megasas.sys
[2009.07.14 02:20:36 | 000,235,584 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\MegaSR.sys
[2010.11.20 13:30:01 | 000,130,432 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\mpio.sys
[2010.11.20 13:30:04 | 000,116,096 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\msdsm.sys
[2010.11.20 13:30:05 | 000,233,344 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\msiscsi.sys
[2009.07.14 02:20:44 | 000,028,240 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\mssmbios.sys
[2009.07.14 00:46:55 | 000,012,288 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\MTConfig.sys
[2009.07.14 02:20:44 | 000,044,624 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\nfrd960.sys
[2011.03.11 06:39:00 | 000,117,120 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\nvraid.sys
[2011.03.11 06:39:00 | 000,143,744 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\nvstor.sys
[2009.07.14 02:20:44 | 000,105,024 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\NV_AGP.SYS
[2009.07.14 00:51:29 | 000,062,464 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\ohci1394.sys
[2009.07.14 00:45:35 | 000,079,360 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\parport.sys
[2009.07.14 00:45:29 | 000,008,704 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\parvdm.sys
[2009.07.14 02:20:45 | 000,012,368 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\pciide.sys
[2009.07.14 02:19:03 | 000,180,288 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\pcmcia.sys
[2009.07.14 00:11:04 | 000,052,224 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\processr.sys
[2009.07.14 02:19:04 | 001,383,488 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\ql2300.sys
[2009.07.14 02:19:04 | 000,106,064 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\ql40xx.sys
[2010.11.20 13:30:10 | 000,085,376 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\sbp2port.sys
[2010.11.20 09:54:02 | 000,084,992 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\sdbus.sys
[2009.07.14 00:45:28 | 000,017,920 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\serenum.sys
[2009.07.14 00:45:33 | 000,083,456 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\serial.sys
[2009.07.14 00:45:08 | 000,019,968 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\sermouse.sys
[2009.07.14 00:45:52 | 000,012,288 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\sffp_mmc.sys
[2009.07.14 00:45:52 | 000,013,824 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\sfloppy.sys
[2009.07.14 02:19:03 | 000,052,304 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\SISAGP.SYS
[2009.07.14 02:19:04 | 000,040,016 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\sisraid2.sys
[2009.07.14 02:19:04 | 000,077,888 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\sisraid4.sys
[2009.07.14 02:19:04 | 000,021,072 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\stexstor.sys
[2010.11.20 13:30:15 | 000,028,032 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\storvsc.sys
[2009.07.14 02:19:10 | 000,012,240 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\swenum.sys
[2010.11.20 13:30:12 | 000,053,120 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\termdd.sys
[2009.07.14 02:19:10 | 000,055,888 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\UAGP35.SYS
[2009.07.14 02:19:11 | 000,057,424 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\ULIAGPKX.SYS
[2010.11.20 11:00:24 | 000,039,936 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\umbus.sys
[2009.07.14 00:51:35 | 000,008,192 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\umpass.sys
[2010.11.20 10:59:44 | 000,080,768 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\USBAUDIO.sys
[2009.07.14 00:51:18 | 000,086,016 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\usbcir.sys
[2011.03.25 03:57:58 | 000,020,480 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\usbohci.sys
[2010.11.20 10:59:46 | 000,027,648 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\usbser.sys
[2010.11.20 11:00:21 | 000,146,432 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\usbvideo.sys
[2010.11.20 13:30:14 | 000,160,128 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\vhdmp.sys
[2009.07.14 02:19:10 | 000,053,328 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\VIAAGP.SYS
[2009.07.14 00:11:04 | 000,052,736 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\viac7.sys
[2009.07.14 02:19:10 | 000,016,976 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\viaide.sys
[2010.11.20 10:14:45 | 000,017,920 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\VMBusHID.sys
[2010.11.20 10:14:41 | 000,005,632 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\vms3cap.sys
[2009.07.14 02:19:11 | 000,141,904 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\vsmraid.sys
[2009.07.14 00:46:53 | 000,021,632 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\wacompen.sys
[2009.07.14 02:19:11 | 000,019,024 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\wd.sys
[2009.07.14 00:19:17 | 000,011,264 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\wmiacpi.sys
 
< %systemroot%\System32\config\*.sav >
 
< %systemroot%\system32\*.dll /lockedfiles >
 
< %USERPROFILE%\*.* >
[2011.10.30 14:01:22 | 000,001,452 | ---- | M] () -- C:\Users\Dell\.recently-used.xbel
[2011.12.22 22:52:16 | 008,912,896 | -HS- | M] () -- C:\Users\Dell\NTUSER.DAT
[2011.12.22 22:52:16 | 000,262,144 | -HS- | M] () -- C:\Users\Dell\ntuser.dat.LOG1
[2011.02.02 13:51:30 | 000,000,000 | -HS- | M] () -- C:\Users\Dell\ntuser.dat.LOG2
[2011.02.02 13:52:32 | 000,065,536 | -HS- | M] () -- C:\Users\Dell\NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TM.blf
[2011.02.02 13:52:32 | 000,524,288 | -HS- | M] () -- C:\Users\Dell\NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TMContainer00000000000000000001.regtrans-ms
[2011.02.02 13:52:32 | 000,524,288 | -HS- | M] () -- C:\Users\Dell\NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TMContainer00000000000000000002.regtrans-ms
[2011.02.02 13:51:31 | 000,000,020 | -HS- | M] () -- C:\Users\Dell\ntuser.ini
 
< %USERPROFILE%\Local Settings\Temp\*.exe >
 
< %USERPROFILE%\Local Settings\Temp\*.dll >
 
< %USERPROFILE%\Application Data\*.exe >
 
< HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems|Windows /rs >
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems\\Required: DebugWindows [binary data]
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems\\Windows: %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,12288,512 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
 
<          >
 
========== Alternate Data Streams ==========
 
@Alternate Data Stream - 124 bytes -> C:\ProgramData\TEMP:96D0C06F

< End of report >


Hirakou 02.01.2012 10:37

Wie lang dauert normalerweise das Auswerten der Logfiles?

markusg 02.01.2012 17:20

sorry ich hab deinen thread irgendwie übersehen!
1. spybot deinstalieren, neustarten.
es stört die reinigung und ist auch nicht mehr sonderlich hilfreich.
Combofix darf ausschließlich ausgeführt werden, wenn dies von einem Team Mitglied angewiesen wurde!
Es sollte nie auf eigene Initiative hin ausgeführt werden! Eine falsche Benutzung kann ernsthafte Computerprobleme nach sich
ziehen und eine Bereinigung der Infektion noch erschweren.

Bitte downloade dir Combofix.exe und speichere es unbedingt auf deinem Desktop.
  • Besuche folgende Seite für Downloadlinks und Anweisungen für dieses
    Tool

    Ein Leitfaden und Tutorium zur Nutzung von ComboFix
  • Hinweis:
    Gehe sicher das all deine Anti Virus und Anti Malware Programme abgeschalten sind, damit diese Combofix nicht bei der Arbeit stören.
  • Poste bitte die C:\Combofix.txt in deiner nächsten Antwort.

Hirakou 05.01.2012 11:31

Hier ist das Log:


Code:

ComboFix 12-01-05.01 - Dell 05.01.2012  11:12:49.2.2 - x86 NETWORK
Microsoft Windows 7 Professional  6.1.7601.1.1252.49.1031.18.3067.2494 [GMT 1:00]
ausgeführt von:: c:\users\Dell\Desktop\ComboFix1.exe
AV: BitDefender Antivirus *Disabled/Outdated* {50909708-FF80-02AF-F814-B28405891E92}
FW: BitDefender Firewall *Disabled* {68AB162D-B5EF-03F7-D34B-1BB1FB5A59E9}
SP: BitDefender AntiSpyware *Disabled/Updated* {EBF176EC-D9BA-0D21-C2A4-89F67E0E542F}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 * Neuer Wiederherstellungspunkt wurde erstellt
.
.
(((((((((((((((((((((((  Dateien erstellt von 2011-12-05 bis 2012-01-05  ))))))))))))))))))))))))))))))
.
.
2011-12-22 17:05 . 2011-12-21 07:42        43992        ----a-w-        c:\program files\Mozilla Firefox\mozutils.dll
2011-12-22 17:05 . 2011-12-21 04:29        626688        ----a-w-        c:\program files\Mozilla Firefox\msvcr80.dll
2011-12-22 17:05 . 2011-12-21 04:29        548864        ----a-w-        c:\program files\Mozilla Firefox\msvcp80.dll
2011-12-22 17:05 . 2011-12-21 04:29        479232        ----a-w-        c:\program files\Mozilla Firefox\msvcm80.dll
2011-12-20 19:51 . 2011-12-20 20:53        --------        d-----w-        c:\program files\Realtek
2011-12-20 19:51 . 2011-12-20 21:04        --------        d--h--w-        c:\program files\Temp
2011-12-20 19:51 . 2011-12-13 10:01        1698408        ----a-w-        c:\windows\RtlExUpd.dll
2011-12-20 19:51 . 2006-02-07 14:40        204800        ----a-w-        c:\program files\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\iuser.dll
2011-12-20 19:51 . 2006-02-07 14:40        69715        ----a-w-        c:\program files\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\ctor.dll
2011-12-20 19:51 . 2006-02-07 14:40        274432        ----a-w-        c:\program files\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\iscript.dll
2011-12-20 19:51 . 2006-02-07 14:45        757760        ----a-w-        c:\program files\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\iKernel.dll
2011-12-20 19:51 . 2005-11-13 22:19        5632        ----a-w-        c:\program files\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\DotNetInstaller.exe
2011-12-20 19:51 . 2011-12-20 19:51        200836        ----a-w-        c:\program files\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\iGdi.dll
2011-12-20 19:51 . 2011-12-20 19:51        331908        ----a-w-        c:\program files\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\setup.dll
2011-12-14 08:48 . 2011-11-24 04:25        2342912        ----a-w-        c:\windows\system32\win32k.sys
2011-12-14 08:48 . 2011-11-05 04:26        2048        ----a-w-        c:\windows\system32\tzres.dll
2011-12-14 08:47 . 2011-10-15 05:38        534528        ----a-w-        c:\windows\system32\EncDec.dll
2011-12-14 08:47 . 2011-10-26 04:28        38912        ----a-w-        c:\windows\system32\csrsrv.dll
2011-12-14 08:47 . 2011-10-26 04:47        3912560        ----a-w-        c:\windows\system32\ntoskrnl.exe
2011-12-14 08:47 . 2011-10-26 04:47        3967856        ----a-w-        c:\windows\system32\ntkrnlpa.exe
2011-12-11 10:52 . 2011-12-11 10:52        --------        d-sh--w-        c:\users\Dell\Phone Browser
2011-12-10 13:42 . 2011-12-10 13:42        --------        d-----w-        c:\users\Dell\AppData\Local\Chromium
.
.
.
((((((((((((((((((((((((((((((((((((  Find3M Bericht  ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-11-27 17:01 . 2011-06-18 07:46        414368        ----a-w-        c:\windows\system32\FlashPlayerCPLApp.cpl
2010-07-08 08:37 . 2010-07-08 08:37        101544        ----a-w-        c:\program files\Common Files\LinkInstaller.exe
2011-12-21 07:42 . 2011-04-24 16:04        121816        ----a-w-        c:\program files\mozilla firefox\components\browsercomps.dll
.
.
((((((((((((((((((((((((((((  Autostartpunkte der Registrierung  ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BDAgent"="c:\program files\BitDefender\BitDefender 2011\bdagent.exe" [2011-07-17 1451928]
"NokiaMusic FastStart"="c:\program files\Nokia\Ovi Player\NokiaOviPlayer.exe" [2010-10-20 2192752]
"IntelliPoint"="c:\program files\Microsoft IntelliPoint\ipoint.exe" [2011-08-01 1821576]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BitDefender Antiphishing Helper]
2011-06-18 09:13        92352        ----a-w-        c:\program files\BitDefender\BitDefender 2011\ieshow.exe
.
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"PC Suite Tray"="c:\program files\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray
"Steam"="c:\program files\Steam\Steam.exe" -silent
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe"
"DivXUpdate"="c:\program files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 10.0\Reader\Reader_sl.exe"
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" -atboottime
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe"
"amd_dc_opt"=c:\program files\AMD\Dual-Core Optimizer\amd_dc_opt.exe
.
R1 Bdvedisk;Bdvedisk;c:\windows\system32\DRIVERS\bdvedisk.sys [2010-01-19 85128]
R2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files\Common Files\Adobe\ARM\1.0\armsvc.exe [2011-06-06 64952]
R2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2009-08-18 176128]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 dk2drv;DK2 WindowsNT Driver;c:\windows\system32\Drivers\dk2drv.sys [2005-11-22 42624]
R2 FLE5WNNT;FLE-5 WindowsNT Driver;c:\windows\System32\Drivers\fle5wnnt.sys [2011-06-25 33404]
R2 FLSIFACE;FLSIFACE;c:\windows\System32\Drivers\flsiface.sys [2011-06-25 13440]
R2 FLSPAR;FLSPAR;c:\windows\System32\Drivers\flspar.sys [2011-06-25 16314]
R2 FLSSER;FLSSER;c:\windows\System32\Drivers\flsser.sys [2011-06-25 8344]
R2 FLSVCOM;FLSVCOM;c:\windows\System32\Drivers\flsvcom.sys [2011-06-25 33402]
R2 gupdate;Google Update-Dienst (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2011-10-06 136176]
R2 NAUpdate;Nero Update;c:\program files\Nero\Update\NASvc.exe [2011-03-04 584488]
R2 PARLDR2K;PARLDR2K;c:\windows\system32\drivers\parldr2k.sys [2011-06-25 10454]
R2 TuneUp.UtilitiesSvc;TuneUp Utilities Service;c:\program files\TuneUp Utilities 2011\TuneUpUtilitiesService32.exe [2011-03-30 1523008]
R2 TurboB;Turbo Boost UI Monitor driver;c:\windows\system32\DRIVERS\TurboB.sys [2009-11-02 14808]
R2 Updatesrv;BitDefender Desktop Update Service;c:\program files\BitDefender\BitDefender 2011\updatesrv.exe [2011-06-18 43936]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW73.sys [2011-09-08 211984]
R3 avmaudio;AVM Audio;c:\windows\system32\DRIVERS\avmaudio.sys [2011-02-03 101248]
R3 BDFM;BDFM;c:\windows\system32\DRIVERS\bdfm.sys [2010-05-13 152528]
R3 CGVPNCliSrvc;CyberGhost VPN Client;c:\program files\CyberGhost VPN\CGVPNCliService.exe [2011-07-05 2428968]
R3 dc3d;MS Hardware Device Detection Driver (USB);c:\windows\system32\DRIVERS\dc3d.sys [2011-08-01 45288]
R3 gupdatem;Google Update-Dienst (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [2011-10-06 136176]
R3 McComponentHostService;McAfee Security Scan Component Host Service;c:\program files\McAfee Security Scan\2.0.181\McCHSvc.exe [2010-01-15 227232]
R3 nmwcdnsu;Nokia USB Flashing Phone Parent;c:\windows\system32\drivers\nmwcdnsu.sys [2010-12-02 137600]
R3 nmwcdnsuc;Nokia USB Flashing Generic;c:\windows\system32\drivers\nmwcdnsuc.sys [2010-12-02 8576]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 52224]
R3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files\TuneUp Utilities 2011\TuneUpUtilitiesDriver32.sys [2011-02-10 10064]
R3 Update Server;BitDefender Update Server v2;c:\program files\Common Files\BitDefender\BitDefender Arrakis Server\bin\arrakis3.exe [2011-02-22 307544]
R4 avc3;avc3;c:\windows\system32\DRIVERS\avc3.sys [2010-06-28 633424]
R4 avckf;avckf;c:\windows\system32\DRIVERS\avckf.sys [2010-06-28 970320]
R4 FirebirdServerMAGIXInstance;Firebird Server - MAGIX Instance;c:\program files\MAGIX\Common\Database\bin\fbserver.exe [2005-11-17 1527900]
R4 TurboBoost;TurboBoost;c:\program files\Intel\TurboBoost\TurboBoost.exe [2009-11-02 99728]
S0 hotcore3;hc3ServiceName;c:\windows\system32\DRIVERS\hotcore3.sys [2010-05-28 40560]
S1 Bdfndisf;BitDefender Firewall NDIS 6 Filter Driver;c:\program files\common files\bitdefender\bitdefender firewall\bdfndisf6.sys [2010-08-20 72784]
S1 bdfwfpf;bdfwfpf;c:\program files\Common Files\BitDefender\BitDefender Firewall\bdfwfpf.sys [2010-08-20 88144]
S3 k57nd60x;Broadcom NetLink (TM)-Gigabit-Ethernet - NDIS 6.0;c:\windows\system32\DRIVERS\k57nd60x.sys [2009-07-13 229888]
S3 netw5v32;Intel(R) Wireless WiFi Link 5000-Serie - Adaptertreiber für Windows Vista 32 Bit;c:\windows\system32\DRIVERS\netw5v32.sys [2009-07-13 4231168]
.
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost  - NetSvcs
UxTuneUp
.
Inhalt des "geplante Tasks" Ordners
.
2012-01-05 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2011-10-06 20:45]
.
2012-01-05 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2011-10-06 20:45]
.
2011-12-28 c:\windows\Tasks\Norton Security Scan for Dell.job
- c:\progra~1\NORTON~2\Engine\351~1.8\Nss.exe [2011-11-02 23:02]
.
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = about:blank
mStart Page = about:blank
uInternet Settings,ProxyOverride = *.local
IE: Free YouTube to MP3 Converter - c:\users\Dell\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm
IE: Nach Microsoft &Excel exportieren - c:\progra~1\MICROS~1\OFFICE11\EXCEL.EXE/3000
TCP: DhcpNameServer = 192.168.2.1
FF - ProfilePath - c:\users\Dell\AppData\Roaming\Mozilla\Firefox\Profiles\n7wz0213.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://www.google.de/||hxxp://www.facebook.com/
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_USERS\S-1-5-21-19526181-302486724-255597020-1000\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
"??"=hex:72,0f,9a,b5,d6,1b,d8,3b,3c,0a,58,73,63,fb,74,92,e6,3a,a0,c8,75,50,6c,
  bb,93,53,02,4d,fc,0d,0f,a5,c7,9b,51,8c,e7,05,1f,67,de,1c,d4,2d,72,2b,c1,f7,\
"??"=hex:35,fc,c6,3d,c9,02,ad,db,37,1f,61,de,0f,33,8f,50
.
[HKEY_USERS\S-1-5-21-19526181-302486724-255597020-1000\Software\SecuROM\License information*]
"datasecu"=hex:1d,d8,40,c1,2c,60,6f,62,17,a3,5e,e1,7d,e1,8f,f7,3c,88,58,fa,9e,
  ac,ef,6d,5a,d9,c6,2a,88,ad,6a,08,c7,35,b1,44,d0,2f,6f,01,76,71,77,4e,1e,c9,\
"rkeysecu"=hex:3f,56,5f,4b,9e,d0,6b,f8,61,68,41,da,d2,0d,a7,ec
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
--------------------- Durch laufende Prozesse gestartete DLLs ---------------------
.
- - - - - - - > 'Explorer.exe'(1076)
c:\windows\system32\CmdLineExt.dll
.
Zeit der Fertigstellung: 2012-01-05  11:23:08
ComboFix-quarantined-files.txt  2012-01-05 10:23
ComboFix2.txt  2011-12-22 19:51
.
Vor Suchlauf: 23 Verzeichnis(se), 264.180.375.552 Bytes frei
Nach Suchlauf: 24 Verzeichnis(se), 264.090.193.920 Bytes frei
.
- - End Of File - - 3670F241F572B1CE80117E43BD5AC7EB


markusg 05.01.2012 12:58

malwarebytes:
Downloade Dir bitte Malwarebytes
  • Installiere
    das Programm in den vorgegebenen Pfad.
    Vista und Win7 User mit Rechtsklick "als Administrator starten"
  • Starte Malwarebytes, klicke auf Aktualisierung --> Suche
    nach Aktualisierung
  • Wenn das Update beendet wurde, aktiviere vollständiger Scan durchführen und drücke auf Scannen.
  • Wenn der Scan beendet
    ist, klicke auf Ergebnisse anzeigen.
  • Versichere Dich, dass alle Funde markiert sind und drücke Entferne Auswahl.
  • Poste
    das Logfile, welches sich in Notepad öffnet, hier in den Thread.
  • Nachträglich kannst du den Bericht unter "Log Dateien" finden.

Hirakou 05.01.2012 18:20

Fertig. :lach:

Code:

Malwarebytes Anti-Malware (Test) 1.60.0.1800
www.malwarebytes.org

Datenbank Version: v2012.01.05.02

Windows 7 Service Pack 1 x86 NTFS
Internet Explorer 9.0.8112.16421
Dell :: DELL-STUDIO [Administrator]

Schutz: Aktiviert

05.01.2012 15:03:48
mbam-log-2012-01-05 (15-03-48).txt

Art des Suchlaufs: Vollständiger Suchlauf
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 524989
Laufzeit: 3 Stunde(n), 4 Minute(n), 40 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 3
C:\Users\Dell\Desktop\Phoenix\Phx_data\Res\GCFMgr.exe (Trojan.Agent) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Dell\Desktop\Phoenix\Phx_data\Res\EmuCfg.exe (Trojan.Agent) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Dell\Desktop\Phoenix\Phx_data\Res\ss.exe (Backdoor.Bot) -> Erfolgreich gelöscht und in Quarantäne gestellt.

(Ende)


markusg 05.01.2012 18:38

prüfe bitte ob der firefox wieder läuft

Hirakou 05.01.2012 18:42

nein, läuft leider immer noch nicht

markusg 05.01.2012 18:51

lass mal den tdss killer laufen log posten
http://www.trojaner-board.de/82358-t...entfernen.html

Hirakou 05.01.2012 19:01

Code:

18:57:47.0906 3328        TDSS rootkit removing tool 2.6.25.0 Dec 23 2011 14:51:16
18:57:49.0913 3328        ============================================================
18:57:49.0913 3328        Current date / time: 2012/01/05 18:57:49.0913
18:57:49.0913 3328        SystemInfo:
18:57:49.0913 3328       
18:57:49.0913 3328        OS Version: 6.1.7601 ServicePack: 1.0
18:57:49.0913 3328        Product type: Workstation
18:57:49.0916 3328        ComputerName: DELL-STUDIO
18:57:49.0916 3328        UserName: Dell
18:57:49.0916 3328        Windows directory: C:\Windows
18:57:49.0916 3328        System windows directory: C:\Windows
18:57:49.0916 3328        Processor architecture: Intel x86
18:57:49.0916 3328        Number of processors: 2
18:57:49.0916 3328        Page size: 0x1000
18:57:49.0916 3328        Boot type: Normal boot
18:57:49.0916 3328        ============================================================
18:57:53.0328 3328        Initialize success
18:58:57.0612 3780        ============================================================
18:58:57.0612 3780        Scan started
18:58:57.0612 3780        Mode: Manual;
18:58:57.0612 3780        ============================================================
18:58:59.0983 3780        1394ohci        (1b133875b8aa8ac48969bd3458afe9f5) C:\Windows\system32\drivers\1394ohci.sys
18:58:59.0983 3780        1394ohci - ok
18:59:00.0046 3780        ACPI            (cea80c80bed809aa0da6febc04733349) C:\Windows\system32\drivers\ACPI.sys
18:59:00.0046 3780        ACPI - ok
18:59:00.0077 3780        AcpiPmi        (1efbc664abff416d1d07db115dcb264f) C:\Windows\system32\drivers\acpipmi.sys
18:59:00.0077 3780        AcpiPmi - ok
18:59:00.0170 3780        adp94xx        (21e785ebd7dc90a06391141aac7892fb) C:\Windows\system32\DRIVERS\adp94xx.sys
18:59:00.0170 3780        adp94xx - ok
18:59:00.0202 3780        adpahci        (0c676bc278d5b59ff5abd57bbe9123f2) C:\Windows\system32\DRIVERS\adpahci.sys
18:59:00.0217 3780        adpahci - ok
18:59:00.0264 3780        adpu320        (7c7b5ee4b7b822ec85321fe23a27db33) C:\Windows\system32\DRIVERS\adpu320.sys
18:59:00.0264 3780        adpu320 - ok
18:59:00.0342 3780        AFD            (9ebbba55060f786f0fcaa3893bfa2806) C:\Windows\system32\drivers\afd.sys
18:59:00.0342 3780        AFD - ok
18:59:00.0389 3780        agp440          (507812c3054c21cef746b6ee3d04dd6e) C:\Windows\system32\drivers\agp440.sys
18:59:00.0389 3780        agp440 - ok
18:59:00.0482 3780        aic78xx        (8b30250d573a8f6b4bd23195160d8707) C:\Windows\system32\DRIVERS\djsvs.sys
18:59:00.0482 3780        aic78xx - ok
18:59:00.0545 3780        aliide          (0d40bcf52ea90fc7df2aeab6503dea44) C:\Windows\system32\drivers\aliide.sys
18:59:00.0560 3780        aliide - ok
18:59:00.0607 3780        amdagp          (3c6600a0696e90a463771c7422e23ab5) C:\Windows\system32\drivers\amdagp.sys
18:59:00.0607 3780        amdagp - ok
18:59:00.0654 3780        amdide          (cd5914170297126b6266860198d1d4f0) C:\Windows\system32\drivers\amdide.sys
18:59:00.0654 3780        amdide - ok
18:59:00.0685 3780        AmdK8          (00dda200d71bac534bf56a9db5dfd666) C:\Windows\system32\DRIVERS\amdk8.sys
18:59:00.0685 3780        AmdK8 - ok
18:59:00.0748 3780        AmdLLD          (ad8fa28d8ed0d0a689a0559085ce0f18) C:\Windows\system32\DRIVERS\AmdLLD.sys
18:59:00.0748 3780        AmdLLD - ok
18:59:00.0794 3780        AmdPPM          (3cbf30f5370fda40dd3e87df38ea53b6) C:\Windows\system32\DRIVERS\amdppm.sys
18:59:00.0794 3780        AmdPPM - ok
18:59:00.0841 3780        amdsata        (d320bf87125326f996d4904fe24300fc) C:\Windows\system32\drivers\amdsata.sys
18:59:00.0857 3780        amdsata - ok
18:59:00.0919 3780        amdsbs          (ea43af0c423ff267355f74e7a53bdaba) C:\Windows\system32\DRIVERS\amdsbs.sys
18:59:00.0919 3780        amdsbs - ok
18:59:00.0950 3780        amdxata        (46387fb17b086d16dea267d5be23a2f2) C:\Windows\system32\drivers\amdxata.sys
18:59:00.0966 3780        amdxata - ok
18:59:01.0028 3780        AnyDVD          (40c279a23bd43553bfba6e88a9b38ae2) C:\Windows\system32\Drivers\AnyDVD.sys
18:59:01.0028 3780        AnyDVD - ok
18:59:01.0091 3780        AppID          (aea177f783e20150ace5383ee368da19) C:\Windows\system32\drivers\appid.sys
18:59:01.0106 3780        AppID - ok
18:59:01.0184 3780        arc            (2932004f49677bd84dbc72edb754ffb3) C:\Windows\system32\DRIVERS\arc.sys
18:59:01.0184 3780        arc - ok
18:59:01.0216 3780        arcsas          (5d6f36c46fd283ae1b57bd2e9feb0bc7) C:\Windows\system32\DRIVERS\arcsas.sys
18:59:01.0231 3780        arcsas - ok
18:59:01.0294 3780        AsyncMac        (add2ade1c2b285ab8378d2daaf991481) C:\Windows\system32\DRIVERS\asyncmac.sys
18:59:01.0294 3780        AsyncMac - ok
18:59:01.0340 3780        atapi          (338c86357871c167a96ab976519bf59e) C:\Windows\system32\drivers\atapi.sys
18:59:01.0340 3780        atapi - ok
18:59:01.0418 3780        AtiHDAudioService (84faf3d287d56d210f84db7c1349d43b) C:\Windows\system32\drivers\AtihdW73.sys
18:59:01.0434 3780        AtiHDAudioService - ok
18:59:01.0559 3780        atikmdag        (04f09923a393e4e0e8453a8f78361e73) C:\Windows\system32\DRIVERS\atikmdag.sys
18:59:01.0730 3780        atikmdag - ok
18:59:01.0808 3780        avc3            (c6cf76384dfc739b0be55abb79ad4dc0) C:\Windows\system32\DRIVERS\avc3.sys
18:59:01.0840 3780        avc3 - ok
18:59:01.0918 3780        avckf          (b758a219e95c085405b1e356a8267610) C:\Windows\system32\DRIVERS\avckf.sys
18:59:01.0964 3780        avckf - ok
18:59:02.0011 3780        avmaudio        (728c4a6c722535c16d1025f51aa31e22) C:\Windows\system32\DRIVERS\avmaudio.sys
18:59:02.0027 3780        avmaudio - ok
18:59:02.0089 3780        b06bdrv        (1a231abec60fd316ec54c66715543cec) C:\Windows\system32\DRIVERS\bxvbdx.sys
18:59:02.0105 3780        b06bdrv - ok
18:59:02.0152 3780        b57nd60x        (bd8869eb9cde6bbe4508d869929869ee) C:\Windows\system32\DRIVERS\b57nd60x.sys
18:59:02.0167 3780        b57nd60x - ok
18:59:02.0230 3780        BDFM            (8d4efc5c378bffe34c298c92f37d3b14) C:\Windows\system32\DRIVERS\bdfm.sys
18:59:02.0230 3780        BDFM - ok
18:59:02.0308 3780        Bdfndisf        (817fc12bc93a70b0449ebefaa4d6f4d2) c:\program files\common files\bitdefender\bitdefender firewall\bdfndisf6.sys
18:59:02.0323 3780        Bdfndisf - ok
18:59:02.0386 3780        bdfsfltr        (c3e025d46368e3d18085eef26ef6f6a1) C:\Windows\system32\DRIVERS\bdfsfltr.sys
18:59:02.0386 3780        bdfsfltr - ok
18:59:02.0401 3780        bdfwfpf        (f16b1b98871a44192c0364a23b57ff35) C:\Program Files\Common Files\BitDefender\BitDefender Firewall\bdfwfpf.sys
18:59:02.0417 3780        bdfwfpf - ok
18:59:02.0479 3780        bdselfpr        (2daa9e807c11b4677cafc1e43a98f8ce) C:\Program Files\BitDefender\BitDefender 2011\bdselfpr.sys
18:59:02.0479 3780        bdselfpr - ok
18:59:02.0542 3780        Bdvedisk        (375cd0b9f433465ec6f50d4df44e9448) C:\Windows\system32\DRIVERS\bdvedisk.sys
18:59:02.0542 3780        Bdvedisk - ok
18:59:02.0588 3780        Beep            (505506526a9d467307b3c393dedaf858) C:\Windows\system32\drivers\Beep.sys
18:59:02.0588 3780        Beep - ok
18:59:02.0620 3780        blbdrive        (2287078ed48fcfc477b05b20cf38f36f) C:\Windows\system32\DRIVERS\blbdrive.sys
18:59:02.0620 3780        blbdrive - ok
18:59:02.0698 3780        bowser          (8f2da3028d5fcbd1a060a3de64cd6506) C:\Windows\system32\DRIVERS\bowser.sys
18:59:02.0713 3780        bowser - ok
18:59:02.0744 3780        BrFiltLo        (9f9acc7f7ccde8a15c282d3f88b43309) C:\Windows\system32\DRIVERS\BrFiltLo.sys
18:59:02.0744 3780        BrFiltLo - ok
18:59:02.0791 3780        BrFiltUp        (56801ad62213a41f6497f96dee83755a) C:\Windows\system32\DRIVERS\BrFiltUp.sys
18:59:02.0791 3780        BrFiltUp - ok
18:59:02.0854 3780        BridgeMP        (77361d72a04f18809d0efb6cceb74d4b) C:\Windows\system32\DRIVERS\bridge.sys
18:59:02.0854 3780        BridgeMP - ok
18:59:02.0885 3780        Brserid        (845b8ce732e67f3b4133164868c666ea) C:\Windows\System32\Drivers\Brserid.sys
18:59:02.0900 3780        Brserid - ok
18:59:02.0932 3780        BrSerWdm        (203f0b1e73adadbbb7b7b1fabd901f6b) C:\Windows\System32\Drivers\BrSerWdm.sys
18:59:02.0947 3780        BrSerWdm - ok
18:59:02.0963 3780        BrUsbMdm        (bd456606156ba17e60a04e18016ae54b) C:\Windows\System32\Drivers\BrUsbMdm.sys
18:59:02.0963 3780        BrUsbMdm - ok
18:59:03.0010 3780        BrUsbSer        (af72ed54503f717a43268b3cc5faec2e) C:\Windows\System32\Drivers\BrUsbSer.sys
18:59:03.0010 3780        BrUsbSer - ok
18:59:03.0041 3780        BTHMODEM        (ed3df7c56ce0084eb2034432fc56565a) C:\Windows\system32\DRIVERS\bthmodem.sys
18:59:03.0056 3780        BTHMODEM - ok
18:59:03.0166 3780        catchme - ok
18:59:03.0197 3780        cdfs            (77ea11b065e0a8ab902d78145ca51e10) C:\Windows\system32\DRIVERS\cdfs.sys
18:59:03.0197 3780        cdfs - ok
18:59:03.0244 3780        cdrom          (be167ed0fdb9c1fa1133953c18d5a6c9) C:\Windows\system32\DRIVERS\cdrom.sys
18:59:03.0275 3780        cdrom - ok
18:59:03.0337 3780        circlass        (3fe3fe94a34df6fb06e6418d0f6a0060) C:\Windows\system32\DRIVERS\circlass.sys
18:59:03.0337 3780        circlass - ok
18:59:03.0384 3780        CLFS            (635181e0e9bbf16871bf5380d71db02d) C:\Windows\system32\CLFS.sys
18:59:03.0384 3780        CLFS - ok
18:59:03.0431 3780        CmBatt          (dea805815e587dad1dd2c502220b5616) C:\Windows\system32\DRIVERS\CmBatt.sys
18:59:03.0431 3780        CmBatt - ok
18:59:03.0478 3780        cmdide          (c537b1db64d495b9b4717b4d6d9edbf2) C:\Windows\system32\drivers\cmdide.sys
18:59:03.0478 3780        cmdide - ok
18:59:03.0524 3780        CNG            (1b675691ed940766149c93e8f4488d68) C:\Windows\system32\Drivers\cng.sys
18:59:03.0524 3780        CNG - ok
18:59:03.0556 3780        Compbatt        (a6023d3823c37043986713f118a89bee) C:\Windows\system32\DRIVERS\compbatt.sys
18:59:03.0571 3780        Compbatt - ok
18:59:03.0618 3780        CompositeBus    (cbe8c58a8579cfe5fccf809e6f114e89) C:\Windows\system32\drivers\CompositeBus.sys
18:59:03.0634 3780        CompositeBus - ok
18:59:03.0680 3780        crcdisk        (2c4ebcfc84a9b44f209dff6c6e6c61d1) C:\Windows\system32\DRIVERS\crcdisk.sys
18:59:03.0680 3780        crcdisk - ok
18:59:03.0727 3780        CSC            (3c2177a897b4ca2788c6fb0c3fd81d4b) C:\Windows\system32\drivers\csc.sys
18:59:03.0758 3780        CSC - ok
18:59:03.0805 3780        dc3d            (90f8539fa0de4aafe4fdbe7f95d6a512) C:\Windows\system32\DRIVERS\dc3d.sys
18:59:03.0821 3780        dc3d - ok
18:59:03.0868 3780        DfsC            (f024449c97ec1e464aaffda18593db88) C:\Windows\system32\Drivers\dfsc.sys
18:59:03.0883 3780        DfsC - ok
18:59:03.0914 3780        discache        (1a050b0274bfb3890703d490f330c0da) C:\Windows\system32\drivers\discache.sys
18:59:03.0914 3780        discache - ok
18:59:03.0961 3780        Disk            (565003f326f99802e68ca78f2a68e9ff) C:\Windows\system32\DRIVERS\disk.sys
18:59:03.0977 3780        Disk - ok
18:59:04.0039 3780        dk2drv          (dd3a2ba0f02ece964669295a54c5b9a2) C:\Windows\system32\Drivers\dk2drv.sys
18:59:04.0039 3780        dk2drv - ok
18:59:04.0117 3780        drmkaud        (b918e7c5f9bf77202f89e1a9539f2eb4) C:\Windows\system32\drivers\drmkaud.sys
18:59:04.0117 3780        drmkaud - ok
18:59:04.0164 3780        DXGKrnl        (23f5d28378a160352ba8f817bd8c71cb) C:\Windows\System32\drivers\dxgkrnl.sys
18:59:04.0211 3780        DXGKrnl - ok
18:59:04.0289 3780        ebdrv          (024e1b5cac09731e4d868e64dbfb4ab0) C:\Windows\system32\DRIVERS\evbdx.sys
18:59:04.0382 3780        ebdrv - ok
18:59:04.0445 3780        ElbyCDIO        (d71233d7ccc2e64f8715a20428d5a33b) C:\Windows\system32\Drivers\ElbyCDIO.sys
18:59:04.0460 3780        ElbyCDIO - ok
18:59:04.0507 3780        elxstor        (0ed67910c8c326796faa00b2bf6d9d3c) C:\Windows\system32\DRIVERS\elxstor.sys
18:59:04.0507 3780        elxstor - ok
18:59:04.0554 3780        ErrDev          (8fc3208352dd3912c94367a206ab3f11) C:\Windows\system32\drivers\errdev.sys
18:59:04.0554 3780        ErrDev - ok
18:59:04.0616 3780        exfat          (2dc9108d74081149cc8b651d3a26207f) C:\Windows\system32\drivers\exfat.sys
18:59:04.0616 3780        exfat - ok
18:59:04.0648 3780        fastfat        (7e0ab74553476622fb6ae36f73d97d35) C:\Windows\system32\drivers\fastfat.sys
18:59:04.0663 3780        fastfat - ok
18:59:04.0694 3780        fdc            (e817a017f82df2a1f8cfdbda29388b29) C:\Windows\system32\DRIVERS\fdc.sys
18:59:04.0710 3780        fdc - ok
18:59:04.0726 3780        FileInfo        (6cf00369c97f3cf563be99be983d13d8) C:\Windows\system32\drivers\fileinfo.sys
18:59:04.0726 3780        FileInfo - ok
18:59:04.0757 3780        Filetrace      (42c51dc94c91da21cb9196eb64c45db9) C:\Windows\system32\drivers\filetrace.sys
18:59:04.0757 3780        Filetrace - ok
18:59:04.0819 3780        FLE5WNNT        (ea7ed2075d7eed73dd5658835b61c558) C:\Windows\System32\Drivers\fle5wnnt.sys
18:59:04.0866 3780        FLE5WNNT - ok
18:59:05.0053 3780        flpydisk        (87907aa70cb3c56600f1c2fb8841579b) C:\Windows\system32\DRIVERS\flpydisk.sys
18:59:05.0069 3780        flpydisk - ok
18:59:05.0100 3780        FLSIFACE        (ebacbf7f420bbaa0cfd98bfc02a0ec40) C:\Windows\System32\Drivers\flsiface.sys
18:59:05.0116 3780        FLSIFACE - ok
18:59:05.0147 3780        FLSPAR          (f85ec1ad593b1f889cf664d68da27274) C:\Windows\System32\Drivers\flspar.sys
18:59:05.0162 3780        FLSPAR - ok
18:59:05.0194 3780        FLSSER          (84bf89b463893461c664880463e3eede) C:\Windows\System32\Drivers\flsser.sys
18:59:05.0209 3780        FLSSER - ok
18:59:05.0225 3780        FLSVCOM        (18d789fefbb60020f3448bb27bbde8e5) C:\Windows\System32\Drivers\flsvcom.sys
18:59:05.0240 3780        FLSVCOM - ok
18:59:05.0287 3780        FltMgr          (7520ec808e0c35e0ee6f841294316653) C:\Windows\system32\drivers\fltmgr.sys
18:59:05.0287 3780        FltMgr - ok
18:59:05.0318 3780        FsDepends      (1a16b57943853e598cff37fe2b8cbf1d) C:\Windows\system32\drivers\FsDepends.sys
18:59:05.0318 3780        FsDepends - ok
18:59:05.0350 3780        Fs_Rec          (a574b4360e438977038aae4bf60d79a2) C:\Windows\system32\drivers\Fs_Rec.sys
18:59:05.0350 3780        Fs_Rec - ok
18:59:05.0412 3780        fvevol          (8a73e79089b282100b9393b644cb853b) C:\Windows\system32\DRIVERS\fvevol.sys
18:59:05.0412 3780        fvevol - ok
18:59:05.0459 3780        gagp30kx        (65ee0c7a58b65e74ae05637418153938) C:\Windows\system32\DRIVERS\gagp30kx.sys
18:59:05.0474 3780        gagp30kx - ok
18:59:05.0506 3780        GEARAspiWDM    (8182ff89c65e4d38b2de4bb0fb18564e) C:\Windows\system32\DRIVERS\GEARAspiWDM.sys
18:59:05.0521 3780        GEARAspiWDM - ok
18:59:05.0615 3780        hcw85cir        (c44e3c2bab6837db337ddee7544736db) C:\Windows\system32\drivers\hcw85cir.sys
18:59:05.0630 3780        hcw85cir - ok
18:59:05.0677 3780        HdAudAddService (a5ef29d5315111c80a5c1abad14c8972) C:\Windows\system32\drivers\HdAudio.sys
18:59:05.0693 3780        HdAudAddService - ok
18:59:05.0755 3780        HDAudBus        (9036377b8a6c15dc2eec53e489d159b5) C:\Windows\system32\drivers\HDAudBus.sys
18:59:05.0755 3780        HDAudBus - ok
18:59:05.0786 3780        HidBatt        (1d58a7f3e11a9731d0eaaaa8405acc36) C:\Windows\system32\DRIVERS\HidBatt.sys
18:59:05.0786 3780        HidBatt - ok
18:59:05.0818 3780        HidBth          (89448f40e6df260c206a193a4683ba78) C:\Windows\system32\DRIVERS\hidbth.sys
18:59:05.0818 3780        HidBth - ok
18:59:05.0864 3780        HidIr          (cf50b4cf4a4f229b9f3c08351f99ca5e) C:\Windows\system32\DRIVERS\hidir.sys
18:59:05.0864 3780        HidIr - ok
18:59:05.0927 3780        HidUsb          (10c19f8290891af023eaec0832e1eb4d) C:\Windows\system32\DRIVERS\hidusb.sys
18:59:05.0942 3780        HidUsb - ok
18:59:06.0005 3780        hotcore3        (48ed16c0c98c950843e673eeee02ac94) C:\Windows\system32\DRIVERS\hotcore3.sys
18:59:06.0020 3780        hotcore3 - ok
18:59:06.0083 3780        HpSAMD          (295fdc419039090eb8b49ffdbb374549) C:\Windows\system32\drivers\HpSAMD.sys
18:59:06.0083 3780        HpSAMD - ok
18:59:06.0145 3780        HTTP            (871917b07a141bff43d76d8844d48106) C:\Windows\system32\drivers\HTTP.sys
18:59:06.0145 3780        HTTP - ok
18:59:06.0192 3780        hwpolicy        (0c4e035c7f105f1299258c90886c64c5) C:\Windows\system32\drivers\hwpolicy.sys
18:59:06.0192 3780        hwpolicy - ok
18:59:06.0239 3780        i8042prt        (f151f0bdc47f4a28b1b20a0818ea36d6) C:\Windows\system32\drivers\i8042prt.sys
18:59:06.0239 3780        i8042prt - ok
18:59:06.0286 3780        iaStorV        (5cd5f9a5444e6cdcb0ac89bd62d8b76e) C:\Windows\system32\drivers\iaStorV.sys
18:59:06.0301 3780        iaStorV - ok
18:59:06.0364 3780        iirsp          (4173ff5708f3236cf25195fecd742915) C:\Windows\system32\DRIVERS\iirsp.sys
18:59:06.0379 3780        iirsp - ok
18:59:06.0410 3780        intelide        (a0f12f2c9ba6c72f3987ce780e77c130) C:\Windows\system32\drivers\intelide.sys
18:59:06.0410 3780        intelide - ok
18:59:06.0457 3780        intelppm        (3b514d27bfc4accb4037bc6685f766e0) C:\Windows\system32\DRIVERS\intelppm.sys
18:59:06.0457 3780        intelppm - ok
18:59:06.0488 3780        IpFilterDriver  (709d1761d3b19a932ff0238ea6d50200) C:\Windows\system32\DRIVERS\ipfltdrv.sys
18:59:06.0504 3780        IpFilterDriver - ok
18:59:06.0551 3780        IPMIDRV        (4bd7134618c1d2a27466a099062547bf) C:\Windows\system32\drivers\IPMIDrv.sys
18:59:06.0566 3780        IPMIDRV - ok
18:59:06.0598 3780        IPNAT          (a5fa468d67abcdaa36264e463a7bb0cd) C:\Windows\system32\drivers\ipnat.sys
18:59:06.0598 3780        IPNAT - ok
18:59:06.0660 3780        IRENUM          (42996cff20a3084a56017b7902307e9f) C:\Windows\system32\drivers\irenum.sys
18:59:06.0660 3780        IRENUM - ok
18:59:06.0707 3780        isapnp          (1f32bb6b38f62f7df1a7ab7292638a35) C:\Windows\system32\drivers\isapnp.sys
18:59:06.0707 3780        isapnp - ok
18:59:06.0738 3780        iScsiPrt        (cb7a9abb12b8415bce5d74994c7ba3ae) C:\Windows\system32\drivers\msiscsi.sys
18:59:06.0754 3780        iScsiPrt - ok
18:59:06.0800 3780        k57nd60x        (c4c95805b85bce1eb9d20f4a02fc5f9b) C:\Windows\system32\DRIVERS\k57nd60x.sys
18:59:06.0816 3780        k57nd60x - ok
18:59:06.0847 3780        kbdclass        (adef52ca1aeae82b50df86b56413107e) C:\Windows\system32\drivers\kbdclass.sys
18:59:06.0847 3780        kbdclass - ok
18:59:06.0894 3780        kbdhid          (9e3ced91863e6ee98c24794d05e27a71) C:\Windows\system32\drivers\kbdhid.sys
18:59:06.0910 3780        kbdhid - ok
18:59:06.0956 3780        KSecDD          (412cea1aa78cc02a447f5c9e62b32ff1) C:\Windows\system32\Drivers\ksecdd.sys
18:59:06.0956 3780        KSecDD - ok
18:59:07.0003 3780        KSecPkg        (26c046977e85b95036453d7b88ba1820) C:\Windows\system32\Drivers\ksecpkg.sys
18:59:07.0003 3780        KSecPkg - ok
18:59:07.0066 3780        lltdio          (f7611ec07349979da9b0ae1f18ccc7a6) C:\Windows\system32\DRIVERS\lltdio.sys
18:59:07.0066 3780        lltdio - ok
18:59:07.0112 3780        LSI_FC          (eb119a53ccf2acc000ac71b065b78fef) C:\Windows\system32\DRIVERS\lsi_fc.sys
18:59:07.0128 3780        LSI_FC - ok
18:59:07.0159 3780        LSI_SAS        (8ade1c877256a22e49b75d1cc9161f9c) C:\Windows\system32\DRIVERS\lsi_sas.sys
18:59:07.0159 3780        LSI_SAS - ok
18:59:07.0190 3780        LSI_SAS2        (dc9dc3d3daa0e276fd2ec262e38b11e9) C:\Windows\system32\DRIVERS\lsi_sas2.sys
18:59:07.0190 3780        LSI_SAS2 - ok
18:59:07.0237 3780        LSI_SCSI        (0a036c7d7cab643a7f07135ac47e0524) C:\Windows\system32\DRIVERS\lsi_scsi.sys
18:59:07.0237 3780        LSI_SCSI - ok
18:59:07.0268 3780        luafv          (6703e366cc18d3b6e534f5cf7df39cee) C:\Windows\system32\drivers\luafv.sys
18:59:07.0268 3780        luafv - ok
18:59:07.0331 3780        MBAMProtector  (b7ca8cc3f978201856b6ab82f40953c3) C:\Windows\system32\drivers\mbam.sys
18:59:07.0346 3780        MBAMProtector - ok
18:59:07.0409 3780        megasas        (0fff5b045293002ab38eb1fd1fc2fb74) C:\Windows\system32\DRIVERS\megasas.sys
18:59:07.0409 3780        megasas - ok
18:59:07.0440 3780        MegaSR          (dcbab2920c75f390caf1d29f675d03d6) C:\Windows\system32\DRIVERS\MegaSR.sys
18:59:07.0456 3780        MegaSR - ok
18:59:07.0487 3780        Modem          (f001861e5700ee84e2d4e52c712f4964) C:\Windows\system32\drivers\modem.sys
18:59:07.0487 3780        Modem - ok
18:59:07.0534 3780        monitor        (79d10964de86b292320e9dfe02282a23) C:\Windows\system32\DRIVERS\monitor.sys
18:59:07.0534 3780        monitor - ok
18:59:07.0580 3780        mouclass        (fb18cc1d4c2e716b6b903b0ac0cc0609) C:\Windows\system32\DRIVERS\mouclass.sys
18:59:07.0580 3780        mouclass - ok
18:59:07.0627 3780        mouhid          (2c388d2cd01c9042596cf3c8f3c7b24d) C:\Windows\system32\DRIVERS\mouhid.sys
18:59:07.0627 3780        mouhid - ok
18:59:07.0690 3780        mountmgr        (fc8771f45ecccfd89684e38842539b9b) C:\Windows\system32\drivers\mountmgr.sys
18:59:07.0690 3780        mountmgr - ok
18:59:07.0736 3780        mpio            (2d699fb6e89ce0d8da14ecc03b3edfe0) C:\Windows\system32\drivers\mpio.sys
18:59:07.0768 3780        mpio - ok
18:59:07.0814 3780        mpsdrv          (ad2723a7b53dd1aacae6ad8c0bfbf4d0) C:\Windows\system32\drivers\mpsdrv.sys
18:59:07.0830 3780        mpsdrv - ok
18:59:07.0861 3780        MRxDAV          (ceb46ab7c01c9f825f8cc6babc18166a) C:\Windows\system32\drivers\mrxdav.sys
18:59:07.0877 3780        MRxDAV - ok
18:59:07.0908 3780        mrxsmb          (5d16c921e3671636c0eba3bbaac5fd25) C:\Windows\system32\DRIVERS\mrxsmb.sys
18:59:07.0924 3780        mrxsmb - ok
18:59:07.0970 3780        mrxsmb10        (6d17a4791aca19328c685d256349fefc) C:\Windows\system32\DRIVERS\mrxsmb10.sys
18:59:07.0986 3780        mrxsmb10 - ok
18:59:08.0002 3780        mrxsmb20        (b81f204d146000be76651a50670a5e9e) C:\Windows\system32\DRIVERS\mrxsmb20.sys
18:59:08.0017 3780        mrxsmb20 - ok
18:59:08.0048 3780        msahci          (012c5f4e9349e711e11e0f19a8589f0a) C:\Windows\system32\drivers\msahci.sys
18:59:08.0064 3780        msahci - ok
18:59:08.0095 3780        msdsm          (55055f8ad8be27a64c831322a780a228) C:\Windows\system32\drivers\msdsm.sys
18:59:08.0111 3780        msdsm - ok
18:59:08.0158 3780        Msfs            (daefb28e3af5a76abcc2c3078c07327f) C:\Windows\system32\drivers\Msfs.sys
18:59:08.0158 3780        Msfs - ok
18:59:08.0189 3780        mshidkmdf      (3e1e5767043c5af9367f0056295e9f84) C:\Windows\System32\drivers\mshidkmdf.sys
18:59:08.0189 3780        mshidkmdf - ok
18:59:08.0220 3780        msisadrv        (0a4e5757ae09fa9622e3158cc1aef114) C:\Windows\system32\drivers\msisadrv.sys
18:59:08.0236 3780        msisadrv - ok
18:59:08.0282 3780        MSKSSRV        (8c0860d6366aaffb6c5bb9df9448e631) C:\Windows\system32\drivers\MSKSSRV.sys
18:59:08.0282 3780        MSKSSRV - ok
18:59:08.0314 3780        MSPCLOCK        (3ea8b949f963562cedbb549eac0c11ce) C:\Windows\system32\drivers\MSPCLOCK.sys
18:59:08.0314 3780        MSPCLOCK - ok
18:59:08.0345 3780        MSPQM          (f456e973590d663b1073e9c463b40932) C:\Windows\system32\drivers\MSPQM.sys
18:59:08.0345 3780        MSPQM - ok
18:59:08.0392 3780        MsRPC          (0e008fc4819d238c51d7c93e7b41e560) C:\Windows\system32\drivers\MsRPC.sys
18:59:08.0392 3780        MsRPC - ok
18:59:08.0423 3780        mssmbios        (fc6b9ff600cc585ea38b12589bd4e246) C:\Windows\system32\drivers\mssmbios.sys
18:59:08.0423 3780        mssmbios - ok
18:59:08.0454 3780        MSTEE          (b42c6b921f61a6e55159b8be6cd54a36) C:\Windows\system32\drivers\MSTEE.sys
18:59:08.0470 3780        MSTEE - ok
18:59:08.0501 3780        MTConfig        (33599130f44e1f34631cea241de8ac84) C:\Windows\system32\DRIVERS\MTConfig.sys
18:59:08.0516 3780        MTConfig - ok
18:59:08.0532 3780        Mup            (159fad02f64e6381758c990f753bcc80) C:\Windows\system32\Drivers\mup.sys
18:59:08.0548 3780        Mup - ok
18:59:08.0594 3780        NativeWifiP    (26384429fcd85d83746f63e798ab1480) C:\Windows\system32\DRIVERS\nwifi.sys
18:59:08.0594 3780        NativeWifiP - ok
18:59:08.0688 3780        NDIS            (e7c54812a2aaf43316eb6930c1ffa108) C:\Windows\system32\drivers\ndis.sys
18:59:08.0688 3780        NDIS - ok
18:59:08.0719 3780        NdisCap        (0e1787aa6c9191d3d319e8bafe86f80c) C:\Windows\system32\DRIVERS\ndiscap.sys
18:59:08.0719 3780        NdisCap - ok
18:59:08.0766 3780        NdisTapi        (e4a8aec125a2e43a9e32afeea7c9c888) C:\Windows\system32\DRIVERS\ndistapi.sys
18:59:08.0766 3780        NdisTapi - ok
18:59:08.0813 3780        Ndisuio        (d8a65dafb3eb41cbb622745676fcd072) C:\Windows\system32\DRIVERS\ndisuio.sys
18:59:08.0813 3780        Ndisuio - ok
18:59:08.0860 3780        NdisWan        (38fbe267e7e6983311179230facb1017) C:\Windows\system32\DRIVERS\ndiswan.sys
18:59:08.0860 3780        NdisWan - ok
18:59:08.0906 3780        NDProxy        (a4bdc541e69674fbff1a8ff00be913f2) C:\Windows\system32\drivers\NDProxy.sys
18:59:08.0922 3780        NDProxy - ok
18:59:08.0953 3780        NetBIOS        (80b275b1ce3b0e79909db7b39af74d51) C:\Windows\system32\DRIVERS\netbios.sys
18:59:08.0953 3780        NetBIOS - ok
18:59:09.0000 3780        NetBT          (280122ddcf04b378edd1ad54d71c1e54) C:\Windows\system32\DRIVERS\netbt.sys
18:59:09.0000 3780        NetBT - ok
18:59:09.0172 3780        netw5v32        (58218ec6b61b1169cf54aab0d00f5fe2) C:\Windows\system32\DRIVERS\netw5v32.sys
18:59:09.0281 3780        netw5v32 - ok
18:59:09.0328 3780        nfrd960        (1d85c4b390b0ee09c7a46b91efb2c097) C:\Windows\system32\DRIVERS\nfrd960.sys
18:59:09.0328 3780        nfrd960 - ok
18:59:09.0390 3780        nmwcd          (712bc0c22ba00b2ba324c6b8df668ee7) C:\Windows\system32\drivers\ccdcmb.sys
18:59:09.0406 3780        nmwcd - ok
18:59:09.0452 3780        nmwcdc          (7312987b6ccde6f6cee32c14bed1ca2e) C:\Windows\system32\drivers\ccdcmbo.sys
18:59:09.0468 3780        nmwcdc - ok
18:59:09.0499 3780        nmwcdnsu        (99145c5d4b6c4d6f5ce83ee6abffe294) C:\Windows\system32\drivers\nmwcdnsu.sys
18:59:09.0515 3780        nmwcdnsu - ok
18:59:09.0546 3780        nmwcdnsuc      (faee7b61c6885b091cec1ff06da2e1ab) C:\Windows\system32\drivers\nmwcdnsuc.sys
18:59:09.0562 3780        nmwcdnsuc - ok
18:59:09.0593 3780        Npfs            (1db262a9f8c087e8153d89bef3d2235f) C:\Windows\system32\drivers\Npfs.sys
18:59:09.0608 3780        Npfs - ok
18:59:09.0640 3780        nsiproxy        (e9a0a4d07e53d8fea2bb8387a3293c58) C:\Windows\system32\drivers\nsiproxy.sys
18:59:09.0640 3780        nsiproxy - ok
18:59:09.0702 3780        Ntfs            (81189c3d7763838e55c397759d49007a) C:\Windows\system32\drivers\Ntfs.sys
18:59:09.0718 3780        Ntfs - ok
18:59:09.0749 3780        Null            (f9756a98d69098dca8945d62858a812c) C:\Windows\system32\drivers\Null.sys
18:59:09.0749 3780        Null - ok
18:59:09.0796 3780        nvraid          (b3e25ee28883877076e0e1ff877d02e0) C:\Windows\system32\drivers\nvraid.sys
18:59:09.0796 3780        nvraid - ok
18:59:09.0842 3780        nvstor          (4380e59a170d88c4f1022eff6719a8a4) C:\Windows\system32\drivers\nvstor.sys
18:59:09.0858 3780        nvstor - ok
18:59:09.0905 3780        nv_agp          (5a0983915f02bae73267cc2a041f717d) C:\Windows\system32\drivers\nv_agp.sys
18:59:09.0920 3780        nv_agp - ok
18:59:09.0967 3780        ohci1394        (08a70a1f2cdde9bb49b885cb817a66eb) C:\Windows\system32\drivers\ohci1394.sys
18:59:09.0967 3780        ohci1394 - ok
18:59:10.0045 3780        PARLDR2K        (b129365892b2e7b5155e601a4924cd2f) C:\Windows\system32\drivers\parldr2k.sys
18:59:10.0061 3780        PARLDR2K - ok
18:59:10.0217 3780        Parport        (2ea877ed5dd9713c5ac74e8ea7348d14) C:\Windows\system32\DRIVERS\parport.sys
18:59:10.0217 3780        Parport - ok
18:59:10.0279 3780        partmgr        (bf8f6af06da75b336f07e23aef97d93b) C:\Windows\system32\drivers\partmgr.sys
18:59:10.0279 3780        partmgr - ok
18:59:10.0310 3780        Parvdm          (eb0a59f29c19b86479d36b35983daadc) C:\Windows\system32\DRIVERS\parvdm.sys
18:59:10.0326 3780        Parvdm - ok
18:59:10.0373 3780        pccsmcfd        (fd2041e9ba03db7764b2248f02475079) C:\Windows\system32\DRIVERS\pccsmcfd.sys
18:59:10.0388 3780        pccsmcfd - ok
18:59:10.0420 3780        pci            (673e55c3498eb970088e812ea820aa8f) C:\Windows\system32\drivers\pci.sys
18:59:10.0420 3780        pci - ok
18:59:10.0466 3780        pciide          (afe86f419014db4e5593f69ffe26ce0a) C:\Windows\system32\drivers\pciide.sys
18:59:10.0466 3780        pciide - ok
18:59:10.0498 3780        pcmcia          (f396431b31693e71e8a80687ef523506) C:\Windows\system32\DRIVERS\pcmcia.sys
18:59:10.0498 3780        pcmcia - ok
18:59:10.0529 3780        pcw            (250f6b43d2b613172035c6747aeeb19f) C:\Windows\system32\drivers\pcw.sys
18:59:10.0529 3780        pcw - ok
18:59:10.0560 3780        PEAUTH          (9e0104ba49f4e6973749a02bf41344ed) C:\Windows\system32\drivers\peauth.sys
18:59:10.0576 3780        PEAUTH - ok
18:59:10.0654 3780        Point32        (896d916de06f5502d301e8c4dc442ae8) C:\Windows\system32\DRIVERS\point32.sys
18:59:10.0669 3780        Point32 - ok
18:59:10.0716 3780        PptpMiniport    (631e3e205ad6d86f2aed6a4a8e69f2db) C:\Windows\system32\DRIVERS\raspptp.sys
18:59:10.0716 3780        PptpMiniport - ok
18:59:10.0747 3780        Processor      (85b1e3a0c7585bc4aae6899ec6fcf011) C:\Windows\system32\DRIVERS\processr.sys
18:59:10.0747 3780        Processor - ok
18:59:10.0810 3780        Psched          (6270ccae2a86de6d146529fe55b3246a) C:\Windows\system32\DRIVERS\pacer.sys
18:59:10.0810 3780        Psched - ok
18:59:10.0856 3780        ql2300          (ab95ecf1f6659a60ddc166d8315b0751) C:\Windows\system32\DRIVERS\ql2300.sys
18:59:10.0888 3780        ql2300 - ok
18:59:10.0934 3780        ql40xx          (b4dd51dd25182244b86737dc51af2270) C:\Windows\system32\DRIVERS\ql40xx.sys
18:59:10.0934 3780        ql40xx - ok
18:59:10.0966 3780        QWAVEdrv        (584078ca1b95ca72df2a27c336f9719d) C:\Windows\system32\drivers\qwavedrv.sys
18:59:10.0966 3780        QWAVEdrv - ok
18:59:10.0997 3780        RasAcd          (30a81b53c766d0133bb86d234e5556ab) C:\Windows\system32\DRIVERS\rasacd.sys
18:59:10.0997 3780        RasAcd - ok
18:59:11.0044 3780        RasAgileVpn    (57ec4aef73660166074d8f7f31c0d4fd) C:\Windows\system32\DRIVERS\AgileVpn.sys
18:59:11.0044 3780        RasAgileVpn - ok
18:59:11.0075 3780        Rasl2tp        (d9f91eafec2815365cbe6d167e4e332a) C:\Windows\system32\DRIVERS\rasl2tp.sys
18:59:11.0090 3780        Rasl2tp - ok
18:59:11.0137 3780        RasPppoe        (0fe8b15916307a6ac12bfb6a63e45507) C:\Windows\system32\DRIVERS\raspppoe.sys
18:59:11.0137 3780        RasPppoe - ok
18:59:11.0168 3780        RasSstp        (44101f495a83ea6401d886e7fd70096b) C:\Windows\system32\DRIVERS\rassstp.sys
18:59:11.0184 3780        RasSstp - ok
18:59:11.0215 3780        rdbss          (d528bc58a489409ba40334ebf96a311b) C:\Windows\system32\DRIVERS\rdbss.sys
18:59:11.0231 3780        rdbss - ok
18:59:11.0262 3780        rdpbus          (0d8f05481cb76e70e1da06ee9f0da9df) C:\Windows\system32\DRIVERS\rdpbus.sys
18:59:11.0262 3780        rdpbus - ok
18:59:11.0293 3780        RDPCDD          (23dae03f29d253ae74c44f99e515f9a1) C:\Windows\system32\DRIVERS\RDPCDD.sys
18:59:11.0293 3780        RDPCDD - ok
18:59:11.0340 3780        RDPDR          (b973fcfc50dc1434e1970a146f7e3885) C:\Windows\system32\drivers\rdpdr.sys
18:59:11.0356 3780        RDPDR - ok
18:59:11.0371 3780        RDPENCDD        (5a53ca1598dd4156d44196d200c94b8a) C:\Windows\system32\drivers\rdpencdd.sys
18:59:11.0371 3780        RDPENCDD - ok
18:59:11.0402 3780        RDPREFMP        (44b0a53cd4f27d50ed461dae0c0b4e1f) C:\Windows\system32\drivers\rdprefmp.sys
18:59:11.0402 3780        RDPREFMP - ok
18:59:11.0449 3780        RDPWD          (288b06960d78428ff89e811632684e20) C:\Windows\system32\drivers\RDPWD.sys
18:59:11.0465 3780        RDPWD - ok
18:59:11.0527 3780        rdyboost        (518395321dc96fe2c9f0e96ac743b656) C:\Windows\system32\drivers\rdyboost.sys
18:59:11.0543 3780        rdyboost - ok
18:59:11.0590 3780        rismxdp        (6c1f93c0760c9f79a1869d07233df39d) C:\Windows\system32\DRIVERS\rixdptsk.sys
18:59:11.0605 3780        rismxdp - ok
18:59:11.0636 3780        rspndr          (032b0d36ad92b582d869879f5af5b928) C:\Windows\system32\DRIVERS\rspndr.sys
18:59:11.0636 3780        rspndr - ok
18:59:11.0714 3780        RTHDMIAzAudService (99ffd5bbb261203fda695c84fa8be9f6) C:\Windows\system32\drivers\RtHDMIV.sys
18:59:11.0730 3780        RTHDMIAzAudService - ok
18:59:11.0777 3780        s3cap          (7fa7f2e249a5dcbb7970630e15e1f482) C:\Windows\system32\drivers\vms3cap.sys
18:59:11.0777 3780        s3cap - ok
18:59:11.0839 3780        sbp2port        (05d860da1040f111503ac416ccef2bca) C:\Windows\system32\drivers\sbp2port.sys
18:59:11.0839 3780        sbp2port - ok
18:59:11.0917 3780        SCDEmu          (e9bbd87afd80dc1212ecd762858b45c7) C:\Windows\system32\drivers\SCDEmu.sys
18:59:11.0917 3780        SCDEmu - ok
18:59:11.0964 3780        scfilter        (0693b5ec673e34dc147e195779a4dcf6) C:\Windows\system32\DRIVERS\scfilter.sys
18:59:11.0964 3780        scfilter - ok
18:59:12.0026 3780        sdbus          (0328be1c7f1cba23848179f8762e391c) C:\Windows\system32\drivers\sdbus.sys
18:59:12.0042 3780        sdbus - ok
18:59:12.0089 3780        secdrv          (90a3935d05b494a5a39d37e71f09a677) C:\Windows\system32\drivers\secdrv.sys
18:59:12.0089 3780        secdrv - ok
18:59:12.0151 3780        Serenum        (9ad8b8b515e3df6acd4212ef465de2d1) C:\Windows\system32\DRIVERS\serenum.sys
18:59:12.0151 3780        Serenum - ok
18:59:12.0182 3780        Serial          (5fb7fcea0490d821f26f39cc5ea3d1e2) C:\Windows\system32\DRIVERS\serial.sys
18:59:12.0182 3780        Serial - ok
18:59:12.0229 3780        sermouse        (79bffb520327ff916a582dfea17aa813) C:\Windows\system32\DRIVERS\sermouse.sys
18:59:12.0229 3780        sermouse - ok
18:59:12.0276 3780        sffdisk        (9f976e1eb233df46fce808d9dea3eb9c) C:\Windows\system32\DRIVERS\sffdisk.sys
18:59:12.0276 3780        sffdisk - ok
18:59:12.0307 3780        sffp_mmc        (932a68ee27833cfd57c1639d375f2731) C:\Windows\system32\drivers\sffp_mmc.sys
18:59:12.0307 3780        sffp_mmc - ok
18:59:12.0354 3780        sffp_sd        (6d4ccaedc018f1cf52866bbbaa235982) C:\Windows\system32\DRIVERS\sffp_sd.sys
18:59:12.0354 3780        sffp_sd - ok
18:59:12.0401 3780        sfloppy        (db96666cc8312ebc45032f30b007a547) C:\Windows\system32\DRIVERS\sfloppy.sys
18:59:12.0401 3780        sfloppy - ok
18:59:12.0479 3780        sisagp          (2565cac0dc9fe0371bdce60832582b2e) C:\Windows\system32\drivers\sisagp.sys
18:59:12.0479 3780        sisagp - ok
18:59:12.0510 3780        SiSRaid2        (a9f0486851becb6dda1d89d381e71055) C:\Windows\system32\DRIVERS\SiSRaid2.sys
18:59:12.0526 3780        SiSRaid2 - ok
18:59:12.0541 3780        SiSRaid4        (3727097b55738e2f554972c3be5bc1aa) C:\Windows\system32\DRIVERS\sisraid4.sys
18:59:12.0557 3780        SiSRaid4 - ok
18:59:12.0604 3780        Smb            (3e21c083b8a01cb70ba1f09303010fce) C:\Windows\system32\DRIVERS\smb.sys
18:59:12.0619 3780        Smb - ok
18:59:12.0650 3780        spldr          (95cf1ae7527fb70f7816563cbc09d942) C:\Windows\system32\drivers\spldr.sys
18:59:12.0650 3780        spldr - ok
18:59:12.0728 3780        srv            (e4c2764065d66ea1d2d3ebc28fe99c46) C:\Windows\system32\DRIVERS\srv.sys
18:59:12.0791 3780        srv - ok
18:59:12.0838 3780        srv2            (03f0545bd8d4c77fa0ae1ceedfcc71ab) C:\Windows\system32\DRIVERS\srv2.sys
18:59:12.0853 3780        srv2 - ok
18:59:12.0884 3780        srvnet          (be6bd660caa6f291ae06a718a4fa8abc) C:\Windows\system32\DRIVERS\srvnet.sys
18:59:12.0900 3780        srvnet - ok
18:59:12.0978 3780        stexstor        (db32d325c192b801df274bfd12a7e72b) C:\Windows\system32\DRIVERS\stexstor.sys
18:59:12.0978 3780        stexstor - ok
18:59:13.0009 3780        storflt        (472af0311073dceceaa8fa18ba2bdf89) C:\Windows\system32\drivers\vmstorfl.sys
18:59:13.0025 3780        storflt - ok
18:59:13.0072 3780        storvsc        (dcaffd62259e0bdb433dd67b5bb37619) C:\Windows\system32\drivers\storvsc.sys
18:59:13.0087 3780        storvsc - ok
18:59:13.0118 3780        swenum          (e58c78a848add9610a4db6d214af5224) C:\Windows\system32\drivers\swenum.sys
18:59:13.0118 3780        swenum - ok
18:59:13.0196 3780        tap0901        (1e89de7a4fb7a854ebb241d0aa8996dd) C:\Windows\system32\DRIVERS\tap0901.sys
18:59:13.0212 3780        tap0901 - ok
18:59:13.0274 3780        Tcpip          (65d10b191c59c5501a1263fc33f6894b) C:\Windows\system32\drivers\tcpip.sys
18:59:13.0337 3780        Tcpip - ok
18:59:13.0399 3780        TCPIP6          (65d10b191c59c5501a1263fc33f6894b) C:\Windows\system32\DRIVERS\tcpip.sys
18:59:13.0399 3780        TCPIP6 - ok
18:59:13.0430 3780        tcpipreg        (cca24162e055c3714ce5a88b100c64ed) C:\Windows\system32\drivers\tcpipreg.sys
18:59:13.0446 3780        tcpipreg - ok
18:59:13.0493 3780        TDPIPE          (1cb91b2bd8f6dd367dfc2ef26fd751b2) C:\Windows\system32\drivers\tdpipe.sys
18:59:13.0508 3780        TDPIPE - ok
18:59:13.0540 3780        TDTCP          (2c10395baa4847f83042813c515cc289) C:\Windows\system32\drivers\tdtcp.sys
18:59:13.0555 3780        TDTCP - ok
18:59:13.0586 3780        tdx            (b459575348c20e8121d6039da063c704) C:\Windows\system32\DRIVERS\tdx.sys
18:59:13.0602 3780        tdx - ok
18:59:13.0633 3780        TermDD          (04dbf4b01ea4bf25a9a3e84affac9b20) C:\Windows\system32\drivers\termdd.sys
18:59:13.0649 3780        TermDD - ok
18:59:13.0711 3780        Trufos          (a919775c03303d0e0690b315d26a5e1d) C:\Windows\system32\DRIVERS\Trufos.sys
18:59:13.0727 3780        Trufos - ok
18:59:13.0774 3780        tssecsrv        (254bb140eee3c59d6114c1a86b636877) C:\Windows\system32\DRIVERS\tssecsrv.sys
18:59:13.0789 3780        tssecsrv - ok
18:59:13.0852 3780        TsUsbFlt        (fd1d6c73e6333be727cbcc6054247654) C:\Windows\system32\drivers\tsusbflt.sys
18:59:13.0852 3780        TsUsbFlt - ok
18:59:13.0945 3780        TuneUpUtilitiesDrv (f2107c9d85ec0df116939ccce06ae697) C:\Program Files\TuneUp Utilities 2011\TuneUpUtilitiesDriver32.sys
18:59:13.0945 3780        TuneUpUtilitiesDrv - ok
18:59:14.0008 3780        tunnel          (b2fa25d9b17a68bb93d58b0556e8c90d) C:\Windows\system32\DRIVERS\tunnel.sys
18:59:14.0023 3780        tunnel - ok
18:59:14.0070 3780        TurboB          (08d15ade5701acadbbb2b59ab349f74f) C:\Windows\system32\DRIVERS\TurboB.sys
18:59:14.0086 3780        TurboB - ok
18:59:14.0132 3780        uagp35          (750fbcb269f4d7dd2e420c56b795db6d) C:\Windows\system32\DRIVERS\uagp35.sys
18:59:14.0132 3780        uagp35 - ok
18:59:14.0179 3780        udfs            (ee43346c7e4b5e63e54f927babbb32ff) C:\Windows\system32\DRIVERS\udfs.sys
18:59:14.0195 3780        udfs - ok
18:59:14.0273 3780        uliagpkx        (44e8048ace47befbfdc2e9be4cbc8880) C:\Windows\system32\drivers\uliagpkx.sys
18:59:14.0273 3780        uliagpkx - ok
18:59:14.0335 3780        umbus          (d295bed4b898f0fd999fcfa9b32b071b) C:\Windows\system32\drivers\umbus.sys
18:59:14.0335 3780        umbus - ok
18:59:14.0398 3780        UmPass          (7550ad0c6998ba1cb4843e920ee0feac) C:\Windows\system32\DRIVERS\umpass.sys
18:59:14.0398 3780        UmPass - ok
18:59:14.0460 3780        upperdev        (e526a166e6acafd0a9b3841d3941669e) C:\Windows\system32\DRIVERS\usbser_lowerflt.sys
18:59:14.0476 3780        upperdev - ok
18:59:14.0522 3780        USBAAPL        (d4fb6ecc60a428564ba8768b0e23c0fc) C:\Windows\system32\Drivers\usbaapl.sys
18:59:14.0538 3780        USBAAPL - ok
18:59:14.0600 3780        usbaudio        (1d9f2bd026e8e2d45033a4df3f16b78c) C:\Windows\system32\drivers\usbaudio.sys
18:59:14.0616 3780        usbaudio - ok
18:59:14.0663 3780        usbccgp        (bd9c55d7023c5de374507acc7a14e2ac) C:\Windows\system32\DRIVERS\usbccgp.sys
18:59:14.0678 3780        usbccgp - ok
18:59:14.0710 3780        usbcir          (04ec7cec62ec3b6d9354eee93327fc82) C:\Windows\system32\drivers\usbcir.sys
18:59:14.0725 3780        usbcir - ok
18:59:14.0756 3780        usbehci        (f92de757e4b7ce9c07c5e65423f3ae3b) C:\Windows\system32\DRIVERS\usbehci.sys
18:59:14.0772 3780        usbehci - ok
18:59:14.0834 3780        usbhub          (8dc94aec6a7e644a06135ae7506dc2e9) C:\Windows\system32\DRIVERS\usbhub.sys
18:59:14.0881 3780        usbhub - ok
18:59:14.0928 3780        usbohci        (e185d44fac515a18d9deddc23c2cdf44) C:\Windows\system32\drivers\usbohci.sys
18:59:14.0928 3780        usbohci - ok
18:59:14.0975 3780        usbprint        (797d862fe0875e75c7cc4c1ad7b30252) C:\Windows\system32\DRIVERS\usbprint.sys
18:59:14.0975 3780        usbprint - ok
18:59:15.0022 3780        usbscan        (576096ccbc07e7c4ea4f5e6686d6888f) C:\Windows\system32\DRIVERS\usbscan.sys
18:59:15.0022 3780        usbscan - ok
18:59:15.0084 3780        usbser          (31181de6190b39fc8007dffd1a48ffd6) C:\Windows\system32\drivers\usbser.sys
18:59:15.0100 3780        usbser - ok
18:59:15.0146 3780        UsbserFilt      (6f3e3c6811b930d2414552a2e4a40f36) C:\Windows\system32\DRIVERS\usbser_lowerfltj.sys
18:59:15.0146 3780        UsbserFilt - ok
18:59:15.0193 3780        USBSTOR        (f991ab9cc6b908db552166768176896a) C:\Windows\system32\DRIVERS\USBSTOR.SYS
18:59:15.0209 3780        USBSTOR - ok
18:59:15.0240 3780        usbuhci        (68df884cf41cdada664beb01daf67e3d) C:\Windows\system32\DRIVERS\usbuhci.sys
18:59:15.0240 3780        usbuhci - ok
18:59:15.0302 3780        usbvideo        (45f4e7bf43db40a6c6b4d92c76cbc3f2) C:\Windows\System32\Drivers\usbvideo.sys
18:59:15.0318 3780        usbvideo - ok
18:59:15.0365 3780        vdrvroot        (a059c4c3edb09e07d21a8e5c0aabd3cb) C:\Windows\system32\drivers\vdrvroot.sys
18:59:15.0365 3780        vdrvroot - ok
18:59:15.0443 3780        vga            (17c408214ea61696cec9c66e388b14f3) C:\Windows\system32\DRIVERS\vgapnp.sys
18:59:15.0443 3780        vga - ok
18:59:15.0474 3780        VgaSave        (8e38096ad5c8570a6f1570a61e251561) C:\Windows\System32\drivers\vga.sys
18:59:15.0474 3780        VgaSave - ok
18:59:15.0536 3780        vhdmp          (5461686cca2fda57b024547733ab42e3) C:\Windows\system32\drivers\vhdmp.sys
18:59:15.0552 3780        vhdmp - ok
18:59:15.0583 3780        viaagp          (c829317a37b4bea8f39735d4b076e923) C:\Windows\system32\drivers\viaagp.sys
18:59:15.0583 3780        viaagp - ok
18:59:15.0614 3780        ViaC7          (e02f079a6aa107f06b16549c6e5c7b74) C:\Windows\system32\DRIVERS\viac7.sys
18:59:15.0614 3780        ViaC7 - ok
18:59:15.0661 3780        viaide          (e43574f6a56a0ee11809b48c09e4fd3c) C:\Windows\system32\drivers\viaide.sys
18:59:15.0677 3780        viaide - ok
18:59:15.0724 3780        vmbus          (c2f2911156fdc7817c52829c86da494e) C:\Windows\system32\drivers\vmbus.sys
18:59:15.0755 3780        vmbus - ok
18:59:15.0786 3780        VMBusHID        (d4d77455211e204f370d08f4963063ce) C:\Windows\system32\drivers\VMBusHID.sys
18:59:15.0802 3780        VMBusHID - ok
18:59:15.0817 3780        volmgr          (4c63e00f2f4b5f86ab48a58cd990f212) C:\Windows\system32\drivers\volmgr.sys
18:59:15.0833 3780        volmgr - ok
18:59:15.0895 3780        volmgrx        (b5bb72067ddddbbfb04b2f89ff8c3c87) C:\Windows\system32\drivers\volmgrx.sys
18:59:15.0895 3780        volmgrx - ok
18:59:15.0911 3780        volsnap        (f497f67932c6fa693d7de2780631cfe7) C:\Windows\system32\drivers\volsnap.sys
18:59:15.0958 3780        volsnap - ok
18:59:16.0036 3780        vsmraid        (9dfa0cc2f8855a04816729651175b631) C:\Windows\system32\DRIVERS\vsmraid.sys
18:59:16.0036 3780        vsmraid - ok
18:59:16.0082 3780        vwifibus        (90567b1e658001e79d7c8bbd3dde5aa6) C:\Windows\System32\drivers\vwifibus.sys
18:59:16.0082 3780        vwifibus - ok
18:59:16.0129 3780        WacomPen        (de3721e89c653aa281428c8a69745d90) C:\Windows\system32\DRIVERS\wacompen.sys
18:59:16.0129 3780        WacomPen - ok
18:59:16.0176 3780        WANARP          (3c3c78515f5ab448b022bdf5b8ffdd2e) C:\Windows\system32\DRIVERS\wanarp.sys
18:59:16.0192 3780        WANARP - ok
18:59:16.0192 3780        Wanarpv6        (3c3c78515f5ab448b022bdf5b8ffdd2e) C:\Windows\system32\DRIVERS\wanarp.sys
18:59:16.0192 3780        Wanarpv6 - ok
18:59:16.0238 3780        Wd              (1112a9badacb47b7c0bb0392e3158dff) C:\Windows\system32\DRIVERS\wd.sys
18:59:16.0254 3780        Wd - ok
18:59:16.0270 3780        Wdf01000        (9950e3d0f08141c7e89e64456ae7dc73) C:\Windows\system32\drivers\Wdf01000.sys
18:59:16.0285 3780        Wdf01000 - ok
18:59:16.0332 3780        WfpLwf          (8b9a943f3b53861f2bfaf6c186168f79) C:\Windows\system32\DRIVERS\wfplwf.sys
18:59:16.0332 3780        WfpLwf - ok
18:59:16.0363 3780        WIMMount        (5cf95b35e59e2a38023836fff31be64c) C:\Windows\system32\drivers\wimmount.sys
18:59:16.0379 3780        WIMMount - ok
18:59:16.0457 3780        WinUsb          (a67e5f9a400f3bd1be3d80613b45f708) C:\Windows\system32\DRIVERS\WinUsb.sys
18:59:16.0472 3780        WinUsb - ok
18:59:16.0535 3780        WmiAcpi        (0217679b8fca58714c3bf2726d2ca84e) C:\Windows\system32\drivers\wmiacpi.sys
18:59:16.0535 3780        WmiAcpi - ok
18:59:16.0628 3780        ws2ifsl        (6db3276587b853bf886b69528fdb048c) C:\Windows\system32\drivers\ws2ifsl.sys
18:59:16.0628 3780        ws2ifsl - ok
18:59:16.0660 3780        WudfPf          (e714a1c0354636837e20ccbf00888ee7) C:\Windows\system32\drivers\WudfPf.sys
18:59:16.0675 3780        WudfPf - ok
18:59:16.0738 3780        WUDFRd          (1023ee888c9b47178c5293ed5336ab69) C:\Windows\system32\DRIVERS\WUDFRd.sys
18:59:16.0738 3780        WUDFRd - ok
18:59:16.0784 3780        MBR (0x1B8)    (a36c5e4f47e84449ff07ed3517b43a31) \Device\Harddisk0\DR0
18:59:16.0847 3780        \Device\Harddisk0\DR0 - ok
18:59:16.0862 3780        MBR (0x1B8)    (5c616939100b85e558da92b899a0fc36) \Device\Harddisk1\DR1
18:59:16.0862 3780        \Device\Harddisk1\DR1 - ok
18:59:16.0878 3780        Boot (0x1200)  (214ef0629ec1ef9bf0914d2718419c71) \Device\Harddisk0\DR0\Partition0
18:59:16.0878 3780        \Device\Harddisk0\DR0\Partition0 - ok
18:59:16.0894 3780        Boot (0x1200)  (4a1cf225da04774af94ff5f13c1d0e2a) \Device\Harddisk0\DR0\Partition1
18:59:16.0894 3780        \Device\Harddisk0\DR0\Partition1 - ok
18:59:16.0894 3780        Boot (0x1200)  (b630a39284fc54e7a3e9ce4aa391368f) \Device\Harddisk1\DR1\Partition0
18:59:16.0894 3780        \Device\Harddisk1\DR1\Partition0 - ok
18:59:16.0894 3780        ============================================================
18:59:16.0894 3780        Scan finished
18:59:16.0894 3780        ============================================================
18:59:16.0909 2428        Detected object count: 0
18:59:16.0909 2428        Actual detected object count: 0


markusg 05.01.2012 19:32

lade hitmanpro:
http://www.trojaner-board.de/99424-c...o-scannen.html
doppelklicken, settings, license, activate test license
scanner, dort funde in quarantäne, nach scan.
dann am ende log als xml exportieren und hier anhängen

Hirakou 05.01.2012 20:15

Code:

<Log computer="DELL-STUDIO" scan="Normal" version="3.5.9.131" date="2012-01-05T19:40:41" timeSpentInSecs="331" filesProcessed="168264"><Item type="Suspicious" score="38.0" status="None"></Item><Item type="Repair" score="0.0" status="Deleted"><File path="C:\Users\Dell\AppData\Roaming\Microsoft\Windows\Cookies\dell@ads.creative-serving[1].txt" /></Item><Item type="Repair" score="0.0" status="Deleted"><File path="C:\Users\Dell\AppData\Roaming\Microsoft\Windows\Cookies\dell@ads.fling[1].txt" /></Item><Item type="Repair" score="0.0" status="Deleted"><File path="C:\Users\Dell\AppData\Roaming\Microsoft\Windows\Cookies\dell@adtech[2].txt" /></Item><Item type="Repair" score="0.0" status="Deleted"><File path="C:\Users\Dell\AppData\Roaming\Microsoft\Windows\Cookies\dell@clicksor[2].txt" /></Item><Item type="Repair" score="0.0" status="Deleted"><File path="C:\Users\Dell\AppData\Roaming\Microsoft\Windows\Cookies\dell@content.yieldmanager[1].txt" /></Item><Item type="Repair" score="0.0" status="Deleted"><File path="C:\Users\Dell\AppData\Roaming\Microsoft\Windows\Cookies\dell@content.yieldmanager[3].txt" /></Item><Item type="Repair" score="0.0" status="Deleted"><File path="C:\Users\Dell\AppData\Roaming\Microsoft\Windows\Cookies\dell@creative-serving[1].txt" /></Item><Item type="Repair" score="0.0" status="Deleted"><File path="C:\Users\Dell\AppData\Roaming\Microsoft\Windows\Cookies\dell@eaeacom.112.2o7[1].txt" /></Item><Item type="Repair" score="0.0" status="Deleted"><File path="C:\Users\Dell\AppData\Roaming\Microsoft\Windows\Cookies\dell@fl01.ct2.comclick[2].txt" /></Item><Item type="Repair" score="0.0" status="Deleted"><File path="C:\Users\Dell\AppData\Roaming\Microsoft\Windows\Cookies\dell@invitemedia[1].txt" /></Item><Item type="Repair" score="0.0" status="Deleted"><File path="C:\Users\Dell\AppData\Roaming\Microsoft\Windows\Cookies\dell@mm.chitika[1].txt" /></Item><Item type="Repair" score="0.0" status="Deleted"><File path="C:\Users\Dell\AppData\Roaming\Microsoft\Windows\Cookies\dell@msnportal.112.2o7[1].txt" /></Item><Item type="Repair" score="0.0" status="Deleted"><File path="C:\Users\Dell\AppData\Roaming\Microsoft\Windows\Cookies\dell@myroitracking[1].txt" /></Item><Item type="Repair" score="0.0" status="Deleted"><File path="C:\Users\Dell\AppData\Roaming\Microsoft\Windows\Cookies\dell@overture[2].txt" /></Item><Item type="Repair" score="0.0" status="Deleted"><File path="C:\Users\Dell\AppData\Roaming\Microsoft\Windows\Cookies\dell@revsci[2].txt" /></Item><Item type="Repair" score="0.0" status="Deleted"><File path="C:\Users\Dell\AppData\Roaming\Microsoft\Windows\Cookies\dell@serving-sys[2].txt" /></Item><Item type="Repair" score="0.0" status="Deleted"><File path="C:\Users\Dell\AppData\Roaming\Microsoft\Windows\Cookies\dell@track.effiliation[1].txt" /></Item><Item type="Repair" score="0.0" status="Deleted"><File path="C:\Users\Dell\AppData\Roaming\Microsoft\Windows\Cookies\dell@track.effiliation[2].txt" /></Item><Item type="Repair" score="0.0" status="Deleted"><File path="C:\Users\Dell\AppData\Roaming\Microsoft\Windows\Cookies\dell@xiti[1].txt" /></Item><Item type="Repair" score="0.0" status="Deleted"><File path="C:\Users\Dell\AppData\Roaming\Microsoft\Windows\Cookies\Q04LVW60.txt" /></Item><Item type="Repair" score="0.0" status="Deleted"><File path="C:\Users\Dell\AppData\Roaming\Mozilla\Firefox\Profiles\n7wz0213.default\cookies.sqlite:2o7.net" /></Item><Item type="Repair" score="0.0" status="Deleted"><File path="C:\Users\Dell\AppData\Roaming\Mozilla\Firefox\Profiles\n7wz0213.default\cookies.sqlite:ad.adnet.de" /></Item><Item type="Repair" score="0.0" status="Deleted"><File path="C:\Users\Dell\AppData\Roaming\Mozilla\Firefox\Profiles\n7wz0213.default\cookies.sqlite:ad.zanox.com" /></Item><Item type="Repair" score="0.0" status="Deleted"><File path="C:\Users\Dell\AppData\Roaming\Mozilla\Firefox\Profiles\n7wz0213.default\cookies.sqlite:de.partypoker.com" /></Item><Item type="Repair" score="0.0" status="Deleted"><File path="C:\Users\Dell\AppData\Roaming\Mozilla\Firefox\Profiles\n7wz0213.default\cookies.sqlite:de.sitestat.com" /></Item><Item type="Repair" score="0.0" status="Deleted"><File path="C:\Users\Dell\AppData\Roaming\Mozilla\Firefox\Profiles\n7wz0213.default\cookies.sqlite:partypoker.com" /></Item><Item type="Repair" score="0.0" status="Deleted"><File path="C:\Users\Dell\AppData\Roaming\Mozilla\Firefox\Profiles\n7wz0213.default\cookies.sqlite:rts.pgmediaserve.com" /></Item><Item type="Repair" score="0.0" status="Deleted"><File path="C:\Users\Dell\AppData\Roaming\Mozilla\Firefox\Profiles\n7wz0213.default\cookies.sqlite:stats.computecmedia.de" /></Item><Item type="Repair" score="0.0" status="Deleted"><File path="C:\Users\Dell\AppData\Roaming\Mozilla\Firefox\Profiles\n7wz0213.default\cookies.sqlite:track.webtrekk.de" /></Item><Item type="Repair" score="0.0" status="Deleted"><File path="C:\Users\Dell\AppData\Roaming\Mozilla\Firefox\Profiles\n7wz0213.default\cookies.sqlite:www.etracker.de" /></Item><Item type="Repair" score="0.0" status="Deleted"><File path="C:\Users\Dell\AppData\Roaming\Mozilla\Firefox\Profiles\n7wz0213.default\cookies.sqlite:xiti.com" /></Item><Item type="Repair" score="0.0" status="Deleted"><File path="C:\Users\Dell\AppData\Roaming\Mozilla\Firefox\Profiles\n7wz0213.default\cookies.sqlite:yadro.ru" /></Item><Item type="Malware" malwareName="Trojan" score="106.0" status="Deleted"><Scanners><Scanner id="Ikarus" name="Trojan-Dropper!IK" /></Scanners><File path="C:\Users\Dell\Downloads\SteamEmu\SteamLauncher.exe" hash="2A0ADC3CAA9F100C643E51B345D212E8192C7667F627163D87990DB30F55B59E" /></Item></Log>


Alle Zeitangaben in WEZ +1. Es ist jetzt 23:28 Uhr.

Copyright ©2000-2024, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129