Trojaner-Board
Seite 2 von 3 1 2 3
100 Beiträge dieses Themas auf einer Seite anzeigen

Trojaner-Board (https://www.trojaner-board.de/)
-   Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)
-   -   PC mit S.M.A.R.T. infiziert (https://www.trojaner-board.de/115090-pc-s-m-a-r-t-infiziert.html)

cosinus 20.05.2012 20:25
Dann bekommst du die Verküpfungen wohl so nicht mehr wieder.

Mach einen OTL-Fix, beende alle evtl. geöffneten Programme, auch Virenscanner deaktivieren (!), starte OTL und kopiere folgenden Text in die "Custom Scan/Fixes" Box (unten in OTL): (das ":OTL" muss mitkopiert werden!!!)


Code:
:OTL
IE - HKU\S-1-5-21-2402686319-3283966082-1766705785-1006\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com?SearchSource=10&ctid=CT2431245
IE - HKU\S-1-5-21-2402686319-3283966082-1766705785-1006\..\URLSearchHook: {cc05a3e3-64c3-4af2-bfc1-af0d66b69065} - C:\Programme\softonic-de3\prxtbsof0.dll (Conduit Ltd.)
IE - HKU\S-1-5-21-2402686319-3283966082-1766705785-1006\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2431245
FF - prefs.js..browser.search.defaultthis.engineName: "softonic-de3 Customized Web Search"
FF - prefs.js..browser.search.defaulturl: "http://search.conduit.com/ResultsExt.aspx?ctid=CT2431245&SearchSource=3&q={searchTerms}"
FF - prefs.js..keyword.URL: "http://search.conduit.com/ResultsExt.aspx?ctid=CT2431245&q="
FF - prefs.js..network.proxy.backup.ftp: "195.37.16.97"
FF - prefs.js..network.proxy.backup.ftp_port: 3128
FF - prefs.js..network.proxy.backup.gopher: "195.37.16.97"
FF - prefs.js..network.proxy.backup.gopher_port: 3128
FF - prefs.js..network.proxy.backup.socks: "195.37.16.97"
FF - prefs.js..network.proxy.backup.socks_port: 3128
FF - prefs.js..network.proxy.backup.ssl: "195.37.16.97"
FF - prefs.js..network.proxy.backup.ssl_port: 3128
FF - prefs.js..network.proxy.ftp: "195.37.16.97"
FF - prefs.js..network.proxy.ftp_port: 3128
FF - prefs.js..network.proxy.gopher: "195.37.16.97"
FF - prefs.js..network.proxy.gopher_port: 3128
FF - prefs.js..network.proxy.http: "195.37.16.97"
FF - prefs.js..network.proxy.http_port: 3128
FF - prefs.js..network.proxy.share_proxy_settings: true
FF - prefs.js..network.proxy.socks: "195.37.16.97"
FF - prefs.js..network.proxy.socks_port: 3128
FF - prefs.js..network.proxy.ssl: "195.37.16.97"
FF - prefs.js..network.proxy.ssl_port: 3128
[2012.05.06 13:03:46 | 000,000,000 | ---D | M] (ST-de3 Community Toolbar) -- C:\Dokumente und Einstellungen\Andreas\Anwendungsdaten\Mozilla\Firefox\Profiles\dipvdcel.default\extensions\{cc05a3e3-64c3-4af2-bfc1-af0d66b69065}
[2011.03.30 22:15:28 | 000,000,000 | ---D | M] (Conduit Engine) -- C:\Dokumente und Einstellungen\Andreas\Anwendungsdaten\Mozilla\Firefox\Profiles\dipvdcel.default\extensions\engine@conduit.com
[2010.05.02 19:30:31 | 000,000,756 | ---- | M] () -- C:\Dokumente und Einstellungen\Andreas\Anwendungsdaten\Mozilla\Firefox\Profiles\dipvdcel.default\searchplugins\conduit.xml
[2009.03.19 22:29:50 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Andreas\Anwendungsdaten\Mozilla\Extensions\zoozler@zla.bs
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (softonic-de3 Toolbar) - {cc05a3e3-64c3-4af2-bfc1-af0d66b69065} - C:\Programme\softonic-de3\prxtbsof0.dll (Conduit Ltd.)
O2 - BHO: (MSN Toolbar Helper) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Programme\MSN\Toolbar\3.0.0744.0\msneshellx.dll (Microsoft Corp.)
O3 - HKLM\..\Toolbar: (Veoh Web Player Video Finder) - {0FBB9689-D3D7-4f7a-A2E2-585B10099BFC} - C:\Programme\Veoh Networks\VeohWebPlayer\VeohIEToolbar.dll (Veoh Networks Inc)
O3 - HKLM\..\Toolbar: (MSN Toolbar) - {1E61ED7C-7CB8-49d6-B9E9-AB4C880C8414} - C:\Programme\MSN\Toolbar\3.0.0744.0\msneshellx.dll (Microsoft Corp.)
O3 - HKLM\..\Toolbar: (no name) - {BA52B914-B692-46c4-B683-905236F6F655} - No CLSID value found.
O3 - HKLM\..\Toolbar: (softonic-de3 Toolbar) - {cc05a3e3-64c3-4af2-bfc1-af0d66b69065} - C:\Programme\softonic-de3\prxtbsof0.dll (Conduit Ltd.)
O3 - HKU\S-1-5-21-2402686319-3283966082-1766705785-1006\..\Toolbar\WebBrowser: (no name) - {604BC32A-9680-40D1-9AC6-E06B23A1BA4C} - No CLSID value found.
O3 - HKU\S-1-5-21-2402686319-3283966082-1766705785-1006\..\Toolbar\WebBrowser: (no name) - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - No CLSID value found.
O3 - HKU\S-1-5-21-2402686319-3283966082-1766705785-1006\..\Toolbar\WebBrowser: (softonic-de3 Toolbar) - {CC05A3E3-64C3-4AF2-BFC1-AF0D66B69065} - C:\Programme\softonic-de3\prxtbsof0.dll (Conduit Ltd.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-2402686319-3283966082-1766705785-1006\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-2402686319-3283966082-1766705785-1006\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O8 - Extra context menu item: &Windows Live Search - res://C:\Programme\Windows Live Toolbar\msntb.dll/search.htm File not found
O32 - AutoRun File - [2009.02.10 13:07:13 | 000,000,320 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O33 - MountPoints2\{e4ace274-b075-11e0-8d84-0013200cf7d6}\Shell\AutoRun\command - "" = H:\RunClubSanDisk.exe
:Files
C:\Dokumente und Einstellungen\Sabine\Anwendungsdaten\PriceGong
C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Nx2gZRBpX3ZKtW
C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\-Nx2gZRBpX3ZKtWr
C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\-Nx2gZRBpX3ZKtW
:Commands
[purity]
[emptytemp]
[emptyflash]
[resethosts]
Klick dann oben links auf den Button Fix!
Das Logfile müsste geöffnet werden, wenn Du nach dem Fixen auf ok klickst, poste das bitte. Evtl. wird der Rechner neu gestartet.

Die mit diesem Script gefixten Einträge, Dateien und Ordner werden zur Sicherheit nicht vollständig gelöscht, es wird eine Sicherheitskopie auf der Systempartition im Ordner "_OTL" erstellt.

Hinweis: Das obige Script ist nur für diesen einen User in dieser Situtation erstellt worden. Es ist auf keinen anderen Rechner portierbar und darf nicht anderweitig verwandt werden, da es das System nachhaltig schädigen kann!

Atlanti 20.05.2012 23:03
Hi Arne,

ich habe den OTL-Fix ausgeführt und poste das Logfile:
Code:
All processes killed
========== OTL ==========
HKU\S-1-5-21-2402686319-3283966082-1766705785-1006\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully!
Registry value HKEY_USERS\S-1-5-21-2402686319-3283966082-1766705785-1006\Software\Microsoft\Internet Explorer\URLSearchHooks\\{cc05a3e3-64c3-4af2-bfc1-af0d66b69065} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{cc05a3e3-64c3-4af2-bfc1-af0d66b69065}\ deleted successfully.
C:\Programme\softonic-de3\prxtbsof0.dll moved successfully.
Registry key HKEY_USERS\S-1-5-21-2402686319-3283966082-1766705785-1006\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{afdbddaa-5d3f-42ee-b79c-185a7020515b}\ not found.
Prefs.js: "softonic-de3 Customized Web Search" removed from browser.search.defaultthis.engineName
Prefs.js: "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2431245&SearchSource=3&q={searchTerms}" removed from browser.search.defaulturl
Prefs.js: "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2431245&q=" removed from keyword.URL
Prefs.js: "195.37.16.97" removed from network.proxy.backup.ftp
Prefs.js: 3128 removed from network.proxy.backup.ftp_port
Prefs.js: "195.37.16.97" removed from network.proxy.backup.gopher
Prefs.js: 3128 removed from network.proxy.backup.gopher_port
Prefs.js: "195.37.16.97" removed from network.proxy.backup.socks
Prefs.js: 3128 removed from network.proxy.backup.socks_port
Prefs.js: "195.37.16.97" removed from network.proxy.backup.ssl
Prefs.js: 3128 removed from network.proxy.backup.ssl_port
Prefs.js: "195.37.16.97" removed from network.proxy.ftp
Prefs.js: 3128 removed from network.proxy.ftp_port
Prefs.js: "195.37.16.97" removed from network.proxy.gopher
Prefs.js: 3128 removed from network.proxy.gopher_port
Prefs.js: "195.37.16.97" removed from network.proxy.http
Prefs.js: 3128 removed from network.proxy.http_port
Prefs.js: true removed from network.proxy.share_proxy_settings
Prefs.js: "195.37.16.97" removed from network.proxy.socks
Prefs.js: 3128 removed from network.proxy.socks_port
Prefs.js: "195.37.16.97" removed from network.proxy.ssl
Prefs.js: 3128 removed from network.proxy.ssl_port
C:\Dokumente und Einstellungen\Andreas\Anwendungsdaten\Mozilla\Firefox\Profiles\dipvdcel.default\extensions\{cc05a3e3-64c3-4af2-bfc1-af0d66b69065}\searchplugin folder moved successfully.
C:\Dokumente und Einstellungen\Andreas\Anwendungsdaten\Mozilla\Firefox\Profiles\dipvdcel.default\extensions\{cc05a3e3-64c3-4af2-bfc1-af0d66b69065}\Plugins folder moved successfully.
C:\Dokumente und Einstellungen\Andreas\Anwendungsdaten\Mozilla\Firefox\Profiles\dipvdcel.default\extensions\{cc05a3e3-64c3-4af2-bfc1-af0d66b69065}\modules folder moved successfully.
C:\Dokumente und Einstellungen\Andreas\Anwendungsdaten\Mozilla\Firefox\Profiles\dipvdcel.default\extensions\{cc05a3e3-64c3-4af2-bfc1-af0d66b69065}\META-INF folder moved successfully.
C:\Dokumente und Einstellungen\Andreas\Anwendungsdaten\Mozilla\Firefox\Profiles\dipvdcel.default\extensions\{cc05a3e3-64c3-4af2-bfc1-af0d66b69065}\defaults folder moved successfully.
C:\Dokumente und Einstellungen\Andreas\Anwendungsdaten\Mozilla\Firefox\Profiles\dipvdcel.default\extensions\{cc05a3e3-64c3-4af2-bfc1-af0d66b69065}\components folder moved successfully.
C:\Dokumente und Einstellungen\Andreas\Anwendungsdaten\Mozilla\Firefox\Profiles\dipvdcel.default\extensions\{cc05a3e3-64c3-4af2-bfc1-af0d66b69065}\chrome folder moved successfully.
C:\Dokumente und Einstellungen\Andreas\Anwendungsdaten\Mozilla\Firefox\Profiles\dipvdcel.default\extensions\{cc05a3e3-64c3-4af2-bfc1-af0d66b69065} folder moved successfully.
C:\Dokumente und Einstellungen\Andreas\Anwendungsdaten\Mozilla\Firefox\Profiles\dipvdcel.default\extensions\engine@conduit.com\searchplugin folder moved successfully.
C:\Dokumente und Einstellungen\Andreas\Anwendungsdaten\Mozilla\Firefox\Profiles\dipvdcel.default\extensions\engine@conduit.com\META-INF folder moved successfully.
C:\Dokumente und Einstellungen\Andreas\Anwendungsdaten\Mozilla\Firefox\Profiles\dipvdcel.default\extensions\engine@conduit.com\lib folder moved successfully.
C:\Dokumente und Einstellungen\Andreas\Anwendungsdaten\Mozilla\Firefox\Profiles\dipvdcel.default\extensions\engine@conduit.com\DualPackage folder moved successfully.
C:\Dokumente und Einstellungen\Andreas\Anwendungsdaten\Mozilla\Firefox\Profiles\dipvdcel.default\extensions\engine@conduit.com\defaults folder moved successfully.
C:\Dokumente und Einstellungen\Andreas\Anwendungsdaten\Mozilla\Firefox\Profiles\dipvdcel.default\extensions\engine@conduit.com\components folder moved successfully.
C:\Dokumente und Einstellungen\Andreas\Anwendungsdaten\Mozilla\Firefox\Profiles\dipvdcel.default\extensions\engine@conduit.com\chrome folder moved successfully.
C:\Dokumente und Einstellungen\Andreas\Anwendungsdaten\Mozilla\Firefox\Profiles\dipvdcel.default\extensions\engine@conduit.com folder moved successfully.
C:\Dokumente und Einstellungen\Andreas\Anwendungsdaten\Mozilla\Firefox\Profiles\dipvdcel.default\searchplugins\conduit.xml moved successfully.
C:\Dokumente und Einstellungen\Andreas\Anwendungsdaten\Mozilla\Extensions\zoozler@zla.bs folder moved successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5C255C8A-E604-49b4-9D64-90988571CECB}\ not found.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{cc05a3e3-64c3-4af2-bfc1-af0d66b69065}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{cc05a3e3-64c3-4af2-bfc1-af0d66b69065}\ not found.
File C:\Programme\softonic-de3\prxtbsof0.dll not found.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d2ce3e00-f94a-4740-988e-03dc2f38c34f}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{d2ce3e00-f94a-4740-988e-03dc2f38c34f}\ deleted successfully.
C:\Programme\MSN\Toolbar\3.0.0744.0\msneshellx.dll moved successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{0FBB9689-D3D7-4f7a-A2E2-585B10099BFC} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0FBB9689-D3D7-4f7a-A2E2-585B10099BFC}\ deleted successfully.
C:\Programme\Veoh Networks\VeohWebPlayer\VeohIEToolbar.dll moved successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{1E61ED7C-7CB8-49d6-B9E9-AB4C880C8414} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1E61ED7C-7CB8-49d6-B9E9-AB4C880C8414}\ deleted successfully.
File C:\Programme\MSN\Toolbar\3.0.0744.0\msneshellx.dll not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{BA52B914-B692-46c4-B683-905236F6F655} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{BA52B914-B692-46c4-B683-905236F6F655}\ not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{cc05a3e3-64c3-4af2-bfc1-af0d66b69065} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{cc05a3e3-64c3-4af2-bfc1-af0d66b69065}\ not found.
File de3\prxtbsof0.dll not found.
Registry value HKEY_USERS\S-1-5-21-2402686319-3283966082-1766705785-1006\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{604BC32A-9680-40D1-9AC6-E06B23A1BA4C} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{604BC32A-9680-40D1-9AC6-E06B23A1BA4C}\ not found.
Registry value HKEY_USERS\S-1-5-21-2402686319-3283966082-1766705785-1006\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0}\ not found.
Registry value HKEY_USERS\S-1-5-21-2402686319-3283966082-1766705785-1006\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{CC05A3E3-64C3-4AF2-BFC1-AF0D66B69065} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CC05A3E3-64C3-4AF2-BFC1-AF0D66B69065}\ not found.
File de3\prxtbsof0.dll not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\HonorAutoRunSetting deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoCDBurning deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoDriveAutoRun deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoDriveTypeAutoRun deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoDrives deleted successfully.
Registry key HKEY_USERS\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel\ not found.
Registry key HKEY_USERS\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Restrictions\ not found.
Registry value HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoDriveTypeAutoRun deleted successfully.
Registry value HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoDriveAutoRun deleted successfully.
Registry key HKEY_USERS\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel\ not found.
Registry key HKEY_USERS\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Restrictions\ not found.
Registry value HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoDriveTypeAutoRun not found.
Registry value HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoDriveAutoRun not found.
Registry key HKEY_USERS\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel\ not found.
Registry key HKEY_USERS\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Restrictions\ not found.
Registry value HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoDriveTypeAutoRun deleted successfully.
Registry key HKEY_USERS\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel\ not found.
Registry key HKEY_USERS\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Restrictions\ not found.
Registry value HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoDriveTypeAutoRun deleted successfully.
Registry key HKEY_USERS\S-1-5-21-2402686319-3283966082-1766705785-1006\Software\Policies\Microsoft\Internet Explorer\Control Panel\ deleted successfully.
Registry key HKEY_USERS\S-1-5-21-2402686319-3283966082-1766705785-1006\Software\Policies\Microsoft\Internet Explorer\Restrictions\ deleted successfully.
Registry key HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\&Windows Live Search\ deleted successfully.
C:\AUTOEXEC.BAT moved successfully.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{e4ace274-b075-11e0-8d84-0013200cf7d6}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{e4ace274-b075-11e0-8d84-0013200cf7d6}\ not found.
File H:\RunClubSanDisk.exe not found.
========== FILES ==========
C:\Dokumente und Einstellungen\Sabine\Anwendungsdaten\PriceGong\Data folder moved successfully.
C:\Dokumente und Einstellungen\Sabine\Anwendungsdaten\PriceGong folder moved successfully.
C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Nx2gZRBpX3ZKtW moved successfully.
C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\-Nx2gZRBpX3ZKtWr moved successfully.
C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\-Nx2gZRBpX3ZKtW moved successfully.
========== COMMANDS ==========
 
[EMPTYTEMP]
 
User: Administrator
->Temp folder emptied: 180224 bytes
 
User: All Users
 
User: Andreas
->Temp folder emptied: 300405704 bytes
->Java cache emptied: 80370765 bytes
->FireFox cache emptied: 199954067 bytes
->Flash cache emptied: 3193738 bytes
 
User: Default User
->Temp folder emptied: 0 bytes
->Flash cache emptied: 41 bytes
 
User: LocalService
->Temp folder emptied: 66016 bytes
 
User: Markus
->Temp folder emptied: 33372966 bytes
->Java cache emptied: 84505063 bytes
->FireFox cache emptied: 35067956 bytes
->Flash cache emptied: 1571972 bytes
 
User: NetworkService
->Temp folder emptied: 638976 bytes
 
User: Sabine
->Temp folder emptied: 14188797 bytes
->Java cache emptied: 75099571 bytes
->FireFox cache emptied: 96483892 bytes
->Flash cache emptied: 9573 bytes
 
User: Silvia L
->Temp folder emptied: 651805334 bytes
->Java cache emptied: 29744481 bytes
->FireFox cache emptied: 476135479 bytes
->Flash cache emptied: 76156 bytes
 
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 19569 bytes
%systemroot%\System32 .tmp files removed: 8357255 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 369635891 bytes
RecycleBin emptied: 0 bytes
 
Total Files Cleaned = 2.347,00 mb
 
 
[EMPTYFLASH]
 
User: Administrator
 
User: All Users
 
User: Andreas
->Flash cache emptied: 0 bytes
 
User: Default User
->Flash cache emptied: 0 bytes
 
User: LocalService
 
User: Markus
->Flash cache emptied: 0 bytes
 
User: NetworkService
 
User: Sabine
->Flash cache emptied: 0 bytes
 
User: Silvia L
->Flash cache emptied: 0 bytes
 
Total Flash Files Cleaned = 0,00 mb
 
C:\WINDOWS\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully
 
OTL by OldTimer - Version 3.2.43.0 log created on 05202012_234445

Files\Folders moved on Reboot...
File\Folder C:\Dokumente und Einstellungen\NetworkService\Lokale Einstellungen\Temp\Perflib_Perfdata_294.dat not found!

Registry entries deleted on Reboot...

cosinus 21.05.2012 10:26
Bitte nun (im normalen Windows-Modus) dieses Tool von Kaspersky (TDSS-Killer) ausführen und das Log posten, Anleitung und Downloadlink hier => http://www.trojaner-board.de/82358-t...entfernen.html

Hinweis: Bitte den Virenscanner abstellen bevor du den TDSS-Killer ausführst, denn v.a. Avira meldet im TDSS-Tool oft einen Fehalalrm!

Das Tool so einstellen wie unten im Bild angegeben - klick auf change parameters und setze die Haken wie im folgenden Screenshot abgebildet,
Dann auf Start Scan klicken und wenn es durch ist auf den Button Report klicken um das Log anzuzeigen. Dieses bitte komplett posten.
Wenn du das Log nicht findest oder den Inhalt kopieren und in dein Posting übertragen kannst, dann schau bitte direkt auf deiner Windows-Systempartition (meistens Laufwerk C:) nach, da speichert der TDSS-Killer seine Logs.

Hinweis: Bitte nichts voreilig mit dem TDSS-Killer löschen! Falls Objekte vom TDSS-Killer bemängelt werden, alle mit der Aktion "skip" behandeln und hier nur das Log posten!

http://saved.im/mtkwmtcxexhp/setting...8_16-25-18.jpg

Atlanti 21.05.2012 21:22
Das Kaspersky-Tool hat 35 Threats gefunden. Hier mein Logfile:
Code:
22:12:26.0281 3756        TDSS rootkit removing tool 2.7.36.0 May 21 2012 16:40:16
22:12:27.0375 3756        ============================================================
22:12:27.0375 3756        Current date / time: 2012/05/21 22:12:27.0375
22:12:27.0375 3756        SystemInfo:
22:12:27.0375 3756       
22:12:27.0375 3756        OS Version: 5.1.2600 ServicePack: 3.0
22:12:27.0375 3756        Product type: Workstation
22:12:27.0375 3756        ComputerName: SILVIA
22:12:27.0375 3756        UserName: Andreas
22:12:27.0375 3756        Windows directory: C:\WINDOWS
22:12:27.0375 3756        System windows directory: C:\WINDOWS
22:12:27.0406 3756        Processor architecture: Intel x86
22:12:27.0406 3756        Number of processors: 1
22:12:27.0406 3756        Page size: 0x1000
22:12:27.0406 3756        Boot type: Normal boot
22:12:27.0406 3756        ============================================================
22:12:39.0046 3756        Drive \Device\Harddisk0\DR0 - Size: 0x2540BE4000 (149.01 Gb), SectorSize: 0x200, Cylinders: 0x4BFC, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000054
22:12:39.0093 3756        ============================================================
22:12:39.0093 3756        \Device\Harddisk0\DR0:
22:12:39.0093 3756        MBR partitions:
22:12:39.0093 3756        \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x139C5, BlocksNum 0x3F2ED1C
22:12:39.0109 3756        \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x44C27C7, BlocksNum 0xBB4FD03
22:12:39.0156 3756        \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x10012509, BlocksNum 0x14DDE93
22:12:39.0218 3756        \Device\Harddisk0\DR0\Partition3: MBR, Type 0x7, StartLBA 0x114F03DB, BlocksNum 0x1514D21
22:12:39.0218 3756        ============================================================
22:12:39.0468 3756        C: <-> \Device\Harddisk0\DR0\Partition0
22:12:40.0828 3756        E: <-> \Device\Harddisk0\DR0\Partition1
22:12:40.0875 3756        G: <-> \Device\Harddisk0\DR0\Partition3
22:12:40.0890 3756        F: <-> \Device\Harddisk0\DR0\Partition2
22:12:40.0906 3756        ============================================================
22:12:40.0906 3756        Initialize success
22:12:40.0906 3756        ============================================================
22:13:53.0968 3540        ============================================================
22:13:53.0968 3540        Scan started
22:13:53.0968 3540        Mode: Manual; SigCheck; TDLFS;
22:13:53.0968 3540        ============================================================
22:13:54.0484 3540        Abiosdsk - ok
22:13:54.0562 3540        abp480n5        (6abb91494fe6c59089b9336452ab2ea3) C:\WINDOWS\system32\DRIVERS\ABP480N5.SYS
22:13:57.0500 3540        abp480n5 - ok
22:13:57.0578 3540        ACEDRV05        (0a1e97197609f92d2425b67da0bb0a7f) C:\WINDOWS\system32\drivers\ACEDRV05.sys
22:13:57.0625 3540        ACEDRV05 ( UnsignedFile.Multi.Generic ) - warning
22:13:57.0625 3540        ACEDRV05 - detected UnsignedFile.Multi.Generic (1)
22:13:57.0656 3540        ACPI            (ac407f1a62c3a300b4f2b5a9f1d55b2c) C:\WINDOWS\system32\DRIVERS\ACPI.sys
22:13:57.0906 3540        ACPI - ok
22:13:57.0937 3540        ACPIEC          (9e1ca3160dafb159ca14f83b1e317f75) C:\WINDOWS\system32\drivers\ACPIEC.sys
22:13:58.0093 3540        ACPIEC - ok
22:13:58.0156 3540        AdobeFlashPlayerUpdateSvc (76d5a3d2a50402a0b9b6ed13c4371e79) C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
22:13:58.0187 3540        AdobeFlashPlayerUpdateSvc - ok
22:13:58.0234 3540        adpu160m        (9a11864873da202c996558b2106b0bbc) C:\WINDOWS\system32\DRIVERS\adpu160m.sys
22:13:58.0390 3540        adpu160m - ok
22:13:58.0437 3540        aec            (8bed39e3c35d6a489438b8141717a557) C:\WINDOWS\system32\drivers\aec.sys
22:13:58.0593 3540        aec - ok
22:13:58.0625 3540        AFD            (1e44bc1e83d8fd2305f8d452db109cf9) C:\WINDOWS\System32\drivers\afd.sys
22:13:58.0687 3540        AFD - ok
22:13:58.0734 3540        agp440          (08fd04aa961bdc77fb983f328334e3d7) C:\WINDOWS\system32\DRIVERS\agp440.sys
22:13:58.0921 3540        agp440 - ok
22:13:58.0968 3540        agpCPQ          (03a7e0922acfe1b07d5db2eeb0773063) C:\WINDOWS\system32\DRIVERS\agpCPQ.sys
22:13:59.0218 3540        agpCPQ - ok
22:13:59.0265 3540        Aha154x        (c23ea9b5f46c7f7910db3eab648ff013) C:\WINDOWS\system32\DRIVERS\aha154x.sys
22:13:59.0359 3540        Aha154x - ok
22:13:59.0390 3540        aic78u2        (19dd0fb48b0c18892f70e2e7d61a1529) C:\WINDOWS\system32\DRIVERS\aic78u2.sys
22:13:59.0546 3540        aic78u2 - ok
22:13:59.0578 3540        aic78xx        (b7fe594a7468aa0132deb03fb8e34326) C:\WINDOWS\system32\DRIVERS\aic78xx.sys
22:13:59.0781 3540        aic78xx - ok
22:13:59.0812 3540        Alerter        (738d80cc01d7bc7584be917b7f544394) C:\WINDOWS\system32\alrsvc.dll
22:14:00.0046 3540        Alerter - ok
22:14:00.0125 3540        ALG            (190cd73d4984f94d823f9444980513e5) C:\WINDOWS\System32\alg.exe
22:14:00.0281 3540        ALG - ok
22:14:00.0421 3540        AliIde          (1140ab9938809700b46bb88e46d72a96) C:\WINDOWS\system32\DRIVERS\aliide.sys
22:14:00.0593 3540        AliIde - ok
22:14:00.0718 3540        alim1541        (cb08aed0de2dd889a8a820cd8082d83c) C:\WINDOWS\system32\DRIVERS\alim1541.sys
22:14:00.0890 3540        alim1541 - ok
22:14:00.0906 3540        amdagp          (95b4fb835e28aa1336ceeb07fd5b9398) C:\WINDOWS\system32\DRIVERS\amdagp.sys
22:14:01.0796 3540        amdagp - ok
22:14:01.0890 3540        amsint          (79f5add8d24bd6893f2903a3e2f3fad6) C:\WINDOWS\system32\DRIVERS\amsint.sys
22:14:02.0062 3540        amsint - ok
22:14:02.0078 3540        AppMgmt - ok
22:14:02.0171 3540        asc            (62d318e9a0c8fc9b780008e724283707) C:\WINDOWS\system32\DRIVERS\asc.sys
22:14:02.0390 3540        asc - ok
22:14:02.0437 3540        asc3350p        (69eb0cc7714b32896ccbfd5edcbea447) C:\WINDOWS\system32\DRIVERS\asc3350p.sys
22:14:02.0531 3540        asc3350p - ok
22:14:02.0562 3540        asc3550        (5d8de112aa0254b907861e9e9c31d597) C:\WINDOWS\system32\DRIVERS\asc3550.sys
22:14:02.0734 3540        asc3550 - ok
22:14:02.0984 3540        aspnet_state    (0e5e4957549056e2bf2c49f4f6b601ad) C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
22:14:03.0046 3540        aspnet_state - ok
22:14:03.0125 3540        AsyncMac        (b153affac761e7f5fcfa822b9c4e97bc) C:\WINDOWS\system32\DRIVERS\asyncmac.sys
22:14:03.0312 3540        AsyncMac - ok
22:14:03.0406 3540        atapi          (9f3a2f5aa6875c72bf062c712cfa2674) C:\WINDOWS\system32\DRIVERS\atapi.sys
22:14:03.0593 3540        atapi - ok
22:14:03.0609 3540        Atdisk - ok
22:14:03.0687 3540        Ati HotKey Poller (a2eaeb497ca29ecaeaf0df66ad85c57d) C:\WINDOWS\system32\Ati2evxx.exe
22:14:03.0781 3540        Ati HotKey Poller - ok
22:14:03.0843 3540        ATI Smart      (312a17dff710a0f4e6d4dd1d52ead1a8) C:\WINDOWS\system32\ati2sgag.exe
22:14:03.0890 3540        ATI Smart ( UnsignedFile.Multi.Generic ) - warning
22:14:03.0890 3540        ATI Smart - detected UnsignedFile.Multi.Generic (1)
22:14:05.0546 3540        ati2mtag        (492bd2a5f65f218d4ede5764a3bb67e9) C:\WINDOWS\system32\DRIVERS\ati2mtag.sys
22:14:06.0890 3540        ati2mtag - ok
22:14:07.0843 3540        Atmarpc        (9916c1225104ba14794209cfa8012159) C:\WINDOWS\system32\DRIVERS\atmarpc.sys
22:14:08.0015 3540        Atmarpc - ok
22:14:08.0062 3540        AudioSrv        (58ed0d5452df7be732193e7999c6b9a4) C:\WINDOWS\System32\audiosrv.dll
22:14:08.0359 3540        AudioSrv - ok
22:14:08.0390 3540        audstub        (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys
22:14:08.0703 3540        audstub - ok
22:14:08.0750 3540        avmaudio        (728c4a6c722535c16d1025f51aa31e22) C:\WINDOWS\system32\DRIVERS\avmaudio.sys
22:14:08.0781 3540        avmaudio ( UnsignedFile.Multi.Generic ) - warning
22:14:08.0781 3540        avmaudio - detected UnsignedFile.Multi.Generic (1)
22:14:08.0859 3540        avmaura        (728c4a6c722535c16d1025f51aa31e22) C:\WINDOWS\system32\DRIVERS\avmaura.sys
22:14:08.0875 3540        avmaura ( UnsignedFile.Multi.Generic ) - warning
22:14:08.0875 3540        avmaura - detected UnsignedFile.Multi.Generic (1)
22:14:08.0921 3540        AVMCOWAN        (fc81a3af632ab366cbff0938b5f775fe) C:\WINDOWS\system32\DRIVERS\avmcowan.sys
22:14:08.0968 3540        AVMCOWAN - ok
22:14:09.0015 3540        AVMDSLPPPOE    (4460f56b12b898e75f989f290d14ab9e) C:\WINDOWS\system32\DRIVERS\avmdsloe.sys
22:14:09.0062 3540        AVMDSLPPPOE - ok
22:14:09.0093 3540        AVMNDSL        (70ecb88ca41e7f658025d1d442767fe9) C:\WINDOWS\system32\DRIVERS\avmndsl.sys
22:14:09.0109 3540        AVMNDSL - ok
22:14:09.0125 3540        AVMPORT        (02568a764ef2c37cfa6f9c471e67d475) C:\WINDOWS\System32\drivers\avmport.sys
22:14:09.0140 3540        AVMPORT ( UnsignedFile.Multi.Generic ) - warning
22:14:09.0140 3540        AVMPORT - detected UnsignedFile.Multi.Generic (1)
22:14:09.0171 3540        AVMWAN          (eb0ef89ccd0191aec96cd6093fb9770f) C:\WINDOWS\system32\DRIVERS\avmwan.sys
22:14:09.0187 3540        AVMWAN ( UnsignedFile.Multi.Generic ) - warning
22:14:09.0187 3540        AVMWAN - detected UnsignedFile.Multi.Generic (1)
22:14:09.0218 3540        Beep            (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys
22:14:09.0375 3540        Beep - ok
22:14:09.0437 3540        BITS            (d6f603772a789bb3228f310d650b8bd1) C:\WINDOWS\system32\qmgr.dll
22:14:09.0671 3540        BITS - ok
22:14:09.0703 3540        Browser        (b42057f06bbb98b31876c0b3f2b54e33) C:\WINDOWS\System32\browser.dll
22:14:09.0875 3540        Browser - ok
22:14:09.0984 3540        catchme - ok
22:14:10.0046 3540        cbidf          (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\DRIVERS\cbidf2k.sys
22:14:10.0218 3540        cbidf - ok
22:14:10.0234 3540        cbidf2k        (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys
22:14:10.0406 3540        cbidf2k - ok
22:14:10.0437 3540        cd20xrnt        (f3ec03299634490e97bbce94cd2954c7) C:\WINDOWS\system32\DRIVERS\cd20xrnt.sys
22:14:10.0562 3540        cd20xrnt - ok
22:14:10.0593 3540        Cdaudio        (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS\system32\drivers\Cdaudio.sys
22:14:10.0750 3540        Cdaudio - ok
22:14:10.0796 3540        Cdfs            (c885b02847f5d2fd45a24e219ed93b32) C:\WINDOWS\system32\drivers\Cdfs.sys
22:14:10.0953 3540        Cdfs - ok
22:14:10.0984 3540        Cdrom          (1f4260cc5b42272d71f79e570a27a4fe) C:\WINDOWS\system32\DRIVERS\cdrom.sys
22:14:11.0156 3540        Cdrom - ok
22:14:11.0171 3540        Changer - ok
22:14:11.0218 3540        CiSvc          (28e3040d1f1ca2008cd6b29dfebc9a5e) C:\WINDOWS\system32\cisvc.exe
22:14:11.0375 3540        CiSvc - ok
22:14:11.0390 3540        ClipSrv        (778a30ed3c134eb7e406afc407e9997d) C:\WINDOWS\system32\clipsrv.exe
22:14:11.0593 3540        ClipSrv - ok
22:14:11.0703 3540        clr_optimization_v2.0.50727_32 (d87acaed61e417bba546ced5e7e36d9c) C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
22:14:11.0718 3540        clr_optimization_v2.0.50727_32 - ok
22:14:11.0750 3540        CmdIde          (c687f81290303d90099b027a6474f99f) C:\WINDOWS\system32\DRIVERS\cmdide.sys
22:14:11.0953 3540        CmdIde - ok
22:14:11.0953 3540        COMSysApp - ok
22:14:12.0031 3540        Cpqarray        (3ee529119eed34cd212a215e8c40d4b6) C:\WINDOWS\system32\DRIVERS\cpqarray.sys
22:14:12.0203 3540        Cpqarray - ok
22:14:12.0234 3540        CryptSvc        (611f824e5c703a5a899f84c5f1699e4d) C:\WINDOWS\System32\cryptsvc.dll
22:14:12.0390 3540        CryptSvc - ok
22:14:12.0437 3540        dac2w2k        (e550e7418984b65a78299d248f0a7f36) C:\WINDOWS\system32\DRIVERS\dac2w2k.sys
22:14:12.0625 3540        dac2w2k - ok
22:14:12.0656 3540        dac960nt        (683789caa3864eb46125ae86ff677d34) C:\WINDOWS\system32\DRIVERS\dac960nt.sys
22:14:12.0828 3540        dac960nt - ok
22:14:12.0875 3540        DcomLaunch      (3127afbf2c1ed0ab14a1bbb7aaecb85b) C:\WINDOWS\system32\rpcss.dll
22:14:13.0000 3540        DcomLaunch - ok
22:14:13.0078 3540        de_serv - ok
22:14:13.0140 3540        Dhcp            (c29a1c9b75ba38fa37f8c44405dec360) C:\WINDOWS\System32\dhcpcsvc.dll
22:14:13.0296 3540        Dhcp - ok
22:14:13.0328 3540        Disk            (044452051f3e02e7963599fc8f4f3e25) C:\WINDOWS\system32\DRIVERS\disk.sys
22:14:13.0484 3540        Disk - ok
22:14:13.0484 3540        dmadmin - ok
22:14:13.0562 3540        dmboot          (0dcfc8395a99fecbb1ef771cec7fe4ea) C:\WINDOWS\system32\drivers\dmboot.sys
22:14:13.0765 3540        dmboot - ok
22:14:13.0812 3540        dmio            (53720ab12b48719d00e327da470a619a) C:\WINDOWS\system32\drivers\dmio.sys
22:14:13.0968 3540        dmio - ok
22:14:14.0015 3540        dmload          (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys
22:14:14.0156 3540        dmload - ok
22:14:14.0203 3540        dmserver        (25c83ffbba13b554eb6d59a9b2e2ee78) C:\WINDOWS\System32\dmserver.dll
22:14:14.0359 3540        dmserver - ok
22:14:14.0390 3540        DMusic          (8a208dfcf89792a484e76c40e5f50b45) C:\WINDOWS\system32\drivers\DMusic.sys
22:14:14.0546 3540        DMusic - ok
22:14:14.0578 3540        Dnscache        (407f3227ac618fd1ca54b335b083de07) C:\WINDOWS\System32\dnsrslvr.dll
22:14:14.0687 3540        Dnscache - ok
22:14:14.0734 3540        Dot3svc        (676e36c4ff5bcea1900f44182b9723e6) C:\WINDOWS\System32\dot3svc.dll
22:14:14.0906 3540        Dot3svc - ok
22:14:14.0937 3540        dpti2o          (40f3b93b4e5b0126f2f5c0a7a5e22660) C:\WINDOWS\system32\DRIVERS\dpti2o.sys
22:14:15.0109 3540        dpti2o - ok
22:14:15.0140 3540        drmkaud        (8f5fcff8e8848afac920905fbd9d33c8) C:\WINDOWS\system32\drivers\drmkaud.sys
22:14:15.0281 3540        drmkaud - ok
22:14:15.0312 3540        drvmcdb        (e814854e6b246ccf498874839ab64d77) C:\WINDOWS\system32\drivers\drvmcdb.sys
22:14:15.0343 3540        drvmcdb ( UnsignedFile.Multi.Generic ) - warning
22:14:15.0343 3540        drvmcdb - detected UnsignedFile.Multi.Generic (1)
22:14:15.0359 3540        drvnddm        (ee83a4ebae70bc93cf14879d062f548b) C:\WINDOWS\system32\drivers\drvnddm.sys
22:14:15.0375 3540        drvnddm ( UnsignedFile.Multi.Generic ) - warning
22:14:15.0375 3540        drvnddm - detected UnsignedFile.Multi.Generic (1)
22:14:15.0421 3540        E100B          (7d91dc6342248369f94d6eba0cf42e99) C:\WINDOWS\system32\DRIVERS\e100b325.sys
22:14:15.0453 3540        E100B - ok
22:14:15.0484 3540        eamon          (9309c5c9831203436e64cf2ae605c5d7) C:\WINDOWS\system32\DRIVERS\eamon.sys
22:14:16.0640 3540        eamon - ok
22:14:16.0671 3540        EapHost        (4e4f2fddab0a0736d7671134dcce91fb) C:\WINDOWS\System32\eapsvc.dll
22:14:16.0843 3540        EapHost - ok
22:14:16.0890 3540        ehdrv          (deff87f04ab5f6dd5edf2b80853bbe10) C:\WINDOWS\system32\DRIVERS\ehdrv.sys
22:14:16.0953 3540        ehdrv - ok
22:14:17.0156 3540        ekrn            (c7bb95cf9631aa401e4aded1648f6af7) C:\Programme\ESET\ESET NOD32 Antivirus\ekrn.exe
22:14:17.0203 3540        ekrn - ok
22:14:17.0234 3540        epfwtdir        (06c65ac0a703cf8eea4f284d901a1550) C:\WINDOWS\system32\DRIVERS\epfwtdir.sys
22:14:17.0250 3540        epfwtdir - ok
22:14:17.0281 3540        ERSvc          (877c18558d70587aa7823a1a308ac96b) C:\WINDOWS\System32\ersvc.dll
22:14:17.0437 3540        ERSvc - ok
22:14:17.0468 3540        Eventlog        (a3edbe9053889fb24ab22492472b39dc) C:\WINDOWS\system32\services.exe
22:14:17.0546 3540        Eventlog - ok
22:14:17.0593 3540        EventSystem    (af4f6b5739d18ca7972ab53e091cbc74) C:\WINDOWS\system32\es.dll
22:14:17.0640 3540        EventSystem - ok
22:14:17.0671 3540        Fastfat        (38d332a6d56af32635675f132548343e) C:\WINDOWS\system32\drivers\Fastfat.sys
22:14:17.0812 3540        Fastfat - ok
22:14:17.0890 3540        FastUserSwitchingCompatibility (2db7d303c36ddd055215052f118e8e75) C:\WINDOWS\System32\shsvcs.dll
22:14:17.0968 3540        FastUserSwitchingCompatibility - ok
22:14:18.0015 3540        Fax            (08b8b302af0d1b3b8543429bbac8f21f) C:\WINDOWS\system32\fxssvc.exe
22:14:18.0187 3540        Fax - ok
22:14:18.0203 3540        Fdc            (92cdd60b6730b9f50f6a1a0c1f8cdc81) C:\WINDOWS\system32\DRIVERS\fdc.sys
22:14:18.0343 3540        Fdc - ok
22:14:18.0421 3540        FDSLBASE        (7b6c1cd3bfecdc3f3bb023ce4dfb511b) C:\WINDOWS\system32\DRIVERS\fdslbase.sys
22:14:18.0500 3540        FDSLBASE - ok
22:14:18.0515 3540        Fips            (b0678a548587c5f1967b0d70bacad6c1) C:\WINDOWS\system32\drivers\Fips.sys
22:14:18.0687 3540        Fips - ok
22:14:18.0718 3540        Flpydisk        (9d27e7b80bfcdf1cdd9b555862d5e7f0) C:\WINDOWS\system32\DRIVERS\flpydisk.sys
22:14:18.0875 3540        Flpydisk - ok
22:14:18.0921 3540        FltMgr          (b2cf4b0786f8212cb92ed2b50c6db6b0) C:\WINDOWS\system32\drivers\fltmgr.sys
22:14:19.0078 3540        FltMgr - ok
22:14:19.0203 3540        FontCache3.0.0.0 (8ba7c024070f2b7fdd98ed8a4ba41789) C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
22:14:19.0218 3540        FontCache3.0.0.0 - ok
22:14:19.0250 3540        fssfltr        (c6ee3a87fe609d3e1db9dbd072a248de) C:\WINDOWS\system32\DRIVERS\fssfltr_tdi.sys
22:14:19.0265 3540        fssfltr - ok
22:14:19.0375 3540        fsssvc          (206ad9a89bf05dfa1621f1fc7b82592d) C:\Programme\Windows Live\Family Safety\fsssvc.exe
22:14:19.0437 3540        fsssvc - ok
22:14:19.0484 3540        Fs_Rec          (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS\system32\drivers\Fs_Rec.sys
22:14:19.0656 3540        Fs_Rec - ok
22:14:19.0687 3540        Ftdisk          (8f1955ce42e1484714b542f341647778) C:\WINDOWS\system32\DRIVERS\ftdisk.sys
22:14:19.0859 3540        Ftdisk - ok
22:14:19.0921 3540        GIVEIO          (77ebf3e9386daa51551af429052d88d0) C:\WINDOWS\system32\drivers\GIVEIO.sys
22:14:19.0953 3540        GIVEIO ( UnsignedFile.Multi.Generic ) - warning
22:14:19.0953 3540        GIVEIO - detected UnsignedFile.Multi.Generic (1)
22:14:19.0968 3540        Gpc            (0a02c63c8b144bd8c86b103dee7c86a2) C:\WINDOWS\system32\DRIVERS\msgpc.sys
22:14:20.0140 3540        Gpc - ok
22:14:20.0234 3540        gupdate1ca1de9760c74d6 (626a24ed1228580b9518c01930936df9) C:\Programme\Google\Update\GoogleUpdate.exe
22:14:20.0250 3540        gupdate1ca1de9760c74d6 - ok
22:14:20.0265 3540        gupdatem        (626a24ed1228580b9518c01930936df9) C:\Programme\Google\Update\GoogleUpdate.exe
22:14:20.0265 3540        gupdatem - ok
22:14:20.0312 3540        gusvc          (cc839e8d766cc31a7710c9f38cf3e375) C:\Programme\Google\Common\Google Updater\GoogleUpdaterService.exe
22:14:20.0328 3540        gusvc - ok
22:14:20.0406 3540        helpsvc        (cb66bf85bf599befd6c6a57c2e20357f) C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll
22:14:20.0562 3540        helpsvc - ok
22:14:20.0562 3540        HidServ - ok
22:14:20.0609 3540        HidUsb          (ccf82c5ec8a7326c3066de870c06daf1) C:\WINDOWS\system32\DRIVERS\hidusb.sys
22:14:20.0796 3540        HidUsb - ok
22:14:20.0859 3540        hkmsvc          (ed29f14101523a6e0e808107405d452c) C:\WINDOWS\System32\kmsvc.dll
22:14:21.0000 3540        hkmsvc - ok
22:14:21.0062 3540        hpn            (b028377dea0546a5fcfba928a8aefae0) C:\WINDOWS\system32\DRIVERS\hpn.sys
22:14:21.0218 3540        hpn - ok
22:14:21.0265 3540        HTTP            (f80a415ef82cd06ffaf0d971528ead38) C:\WINDOWS\system32\Drivers\HTTP.sys
22:14:21.0296 3540        HTTP - ok
22:14:21.0312 3540        HTTPFilter      (9e4adb854cebcfb81a4b36718feecd16) C:\WINDOWS\System32\w3ssl.dll
22:14:21.0468 3540        HTTPFilter - ok
22:14:21.0500 3540        i2omgmt        (9368670bd426ebea5e8b18a62416ec28) C:\WINDOWS\system32\drivers\i2omgmt.sys
22:14:21.0656 3540        i2omgmt - ok
22:14:21.0671 3540        i2omp          (f10863bf1ccc290babd1a09188ae49e0) C:\WINDOWS\system32\DRIVERS\i2omp.sys
22:14:21.0812 3540        i2omp - ok
22:14:21.0859 3540        i8042prt        (e283b97cfbeb86c1d86baed5f7846a92) C:\WINDOWS\system32\DRIVERS\i8042prt.sys
22:14:22.0015 3540        i8042prt - ok
22:14:22.0109 3540        ialm            (9a883c3c4d91292c0d09de7c728e781c) C:\WINDOWS\system32\DRIVERS\ialmnt5.sys
22:14:22.0234 3540        ialm - ok
22:14:22.0390 3540        IDriverT        (1cf03c69b49acb70c722df92755c0c8c) C:\Programme\Gemeinsame Dateien\InstallShield\Driver\11\Intel 32\IDriverT.exe
22:14:22.0406 3540        IDriverT ( UnsignedFile.Multi.Generic ) - warning
22:14:22.0406 3540        IDriverT - detected UnsignedFile.Multi.Generic (1)
22:14:22.0531 3540        idsvc          (c01ac32dc5c03076cfb852cb5da5229c) C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
22:14:22.0593 3540        idsvc - ok
22:14:22.0640 3540        IGDCTRL        (e28602c9e17b0ddce9f5deb3b3e2a635) C:\Programme\FRITZ!DSL\IGDCTRL.EXE
22:14:22.0656 3540        IGDCTRL - ok
22:14:22.0750 3540        Imapi          (083a052659f5310dd8b6a6cb05edcf8e) C:\WINDOWS\system32\DRIVERS\imapi.sys
22:14:22.0906 3540        Imapi - ok
22:14:22.0953 3540        ImapiService    (d4b413aa210c21e46aedd2ba5b68d38e) C:\WINDOWS\system32\imapi.exe
22:14:23.0109 3540        ImapiService - ok
22:14:23.0140 3540        ini910u        (4a40e045faee58631fd8d91afc620719) C:\WINDOWS\system32\DRIVERS\ini910u.sys
22:14:23.0312 3540        ini910u - ok
22:14:23.0359 3540        IntelIde        (69c4e3c9e67a1f103b94e14fdd5f3213) C:\WINDOWS\system32\DRIVERS\intelide.sys
22:14:23.0500 3540        IntelIde - ok
22:14:23.0562 3540        intelppm        (4c7d2750158ed6e7ad642d97bffae351) C:\WINDOWS\system32\DRIVERS\intelppm.sys
22:14:23.0718 3540        intelppm - ok
22:14:23.0750 3540        Ip6Fw          (3bb22519a194418d5fec05d800a19ad0) C:\WINDOWS\system32\drivers\ip6fw.sys
22:14:23.0921 3540        Ip6Fw - ok
22:14:23.0953 3540        IpFilterDriver  (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
22:14:24.0109 3540        IpFilterDriver - ok
22:14:24.0140 3540        IpInIp          (b87ab476dcf76e72010632b5550955f5) C:\WINDOWS\system32\DRIVERS\ipinip.sys
22:14:24.0265 3540        IpInIp - ok
22:14:24.0312 3540        IpNat          (cc748ea12c6effde940ee98098bf96bb) C:\WINDOWS\system32\DRIVERS\ipnat.sys
22:14:24.0468 3540        IpNat - ok
22:14:24.0500 3540        IPSec          (23c74d75e36e7158768dd63d92789a91) C:\WINDOWS\system32\DRIVERS\ipsec.sys
22:14:24.0656 3540        IPSec - ok
22:14:24.0687 3540        IRENUM          (c93c9ff7b04d772627a3646d89f7bf89) C:\WINDOWS\system32\DRIVERS\irenum.sys
22:14:24.0859 3540        IRENUM - ok
22:14:24.0906 3540        isapnp          (6dfb88f64135c525433e87648bda30de) C:\WINDOWS\system32\DRIVERS\isapnp.sys
22:14:25.0046 3540        isapnp - ok
22:14:25.0250 3540        JavaQuickStarterService (a38441ed570f190cc041a7be49488fa7) C:\Programme\Java\jre6\bin\jqs.exe
22:14:25.0281 3540        JavaQuickStarterService - ok
22:14:25.0296 3540        Kbdclass        (1704d8c4c8807b889e43c649b478a452) C:\WINDOWS\system32\DRIVERS\kbdclass.sys
22:14:25.0609 3540        Kbdclass - ok
22:14:25.0656 3540        kbdhid          (b6d6c117d771c98130497265f26d1882) C:\WINDOWS\system32\DRIVERS\kbdhid.sys
22:14:25.0906 3540        kbdhid - ok
22:14:26.0125 3540        kmixer          (692bcf44383d056aed41b045a323d378) C:\WINDOWS\system32\drivers\kmixer.sys
22:14:26.0328 3540        kmixer - ok
22:14:26.0406 3540        KSecDD          (b467646c54cc746128904e1654c750c1) C:\WINDOWS\system32\drivers\KSecDD.sys
22:14:26.0484 3540        KSecDD - ok
22:14:26.0515 3540        lanmanserver    (2bbdcb79900990f0716dfcb714e72de7) C:\WINDOWS\System32\srvsvc.dll
22:14:26.0562 3540        lanmanserver - ok
22:14:26.0656 3540        lanmanworkstation (1869b14b06b44b44af70548e1ea3303f) C:\WINDOWS\System32\wkssvc.dll
22:14:26.0765 3540        lanmanworkstation - ok
22:14:26.0781 3540        lbrtfdc - ok
22:14:26.0875 3540        LmHosts        (636714b7d43c8d0c80449123fd266920) C:\WINDOWS\System32\lmhsvc.dll
22:14:27.0015 3540        LmHosts - ok
22:14:27.0031 3540        Maplom - ok
22:14:27.0062 3540        MaplomL - ok
22:14:27.0125 3540        Messenger      (b7550a7107281d170ce85524b1488c98) C:\WINDOWS\System32\msgsvc.dll
22:14:27.0281 3540        Messenger - ok
22:14:27.0343 3540        mnmdd          (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS\system32\drivers\mnmdd.sys
22:14:27.0500 3540        mnmdd - ok
22:14:27.0531 3540        mnmsrvc        (c2f1d365fd96791b037ee504868065d3) C:\WINDOWS\system32\mnmsrvc.exe
22:14:27.0687 3540        mnmsrvc - ok
22:14:27.0718 3540        Modem          (6fb74ebd4ec57a6f1781de3852cc3362) C:\WINDOWS\system32\drivers\Modem.sys
22:14:27.0875 3540        Modem - ok
22:14:27.0890 3540        Mouclass        (b24ce8005deab254c0251e15cb71d802) C:\WINDOWS\system32\DRIVERS\mouclass.sys
22:14:28.0031 3540        Mouclass - ok
22:14:28.0078 3540        mouhid          (66a6f73c74e1791464160a7065ce711a) C:\WINDOWS\system32\DRIVERS\mouhid.sys
22:14:28.0218 3540        mouhid - ok
22:14:28.0250 3540        MountMgr        (a80b9a0bad1b73637dbcbba7df72d3fd) C:\WINDOWS\system32\drivers\MountMgr.sys
22:14:28.0406 3540        MountMgr - ok
22:14:28.0437 3540        MozillaMaintenance (96aa8ba23142cc8e2b30f3cae0c80254) C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe
22:14:28.0671 3540        MozillaMaintenance - ok
22:14:28.0781 3540        mraid35x        (3f4bb95e5a44f3be34824e8e7caf0737) C:\WINDOWS\system32\DRIVERS\mraid35x.sys
22:14:28.0953 3540        mraid35x - ok
22:14:29.0000 3540        MRxDAV          (11d42bb6206f33fbb3ba0288d3ef81bd) C:\WINDOWS\system32\DRIVERS\mrxdav.sys
22:14:29.0140 3540        MRxDAV - ok
22:14:29.0203 3540        MRxSmb          (7d304a5eb4344ebeeab53a2fe3ffb9f0) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
22:14:29.0296 3540        MRxSmb - ok
22:14:29.0343 3540        MSDTC          (35a031af38c55f92d28aa03ee9f12cc9) C:\WINDOWS\system32\msdtc.exe
22:14:29.0484 3540        MSDTC - ok
22:14:29.0531 3540        Msfs            (c941ea2454ba8350021d774daf0f1027) C:\WINDOWS\system32\drivers\Msfs.sys
22:14:29.0671 3540        Msfs - ok
22:14:29.0687 3540        MSIServer - ok
22:14:29.0750 3540        MSKSSRV        (d1575e71568f4d9e14ca56b7b0453bf1) C:\WINDOWS\system32\drivers\MSKSSRV.sys
22:14:29.0906 3540        MSKSSRV - ok
22:14:29.0921 3540        MSPCLOCK        (325bb26842fc7ccc1fcce2c457317f3e) C:\WINDOWS\system32\drivers\MSPCLOCK.sys
22:14:30.0062 3540        MSPCLOCK - ok
22:14:30.0078 3540        MSPQM          (bad59648ba099da4a17680b39730cb3d) C:\WINDOWS\system32\drivers\MSPQM.sys
22:14:30.0218 3540        MSPQM - ok
22:14:30.0250 3540        mssmbios        (af5f4f3f14a8ea2c26de30f7a1e17136) C:\WINDOWS\system32\DRIVERS\mssmbios.sys
22:14:30.0390 3540        mssmbios - ok
22:14:30.0484 3540        MSSQL$SQLEXPRESS - ok
22:14:30.0562 3540        MSSQLServerADHelper (1d89eb4e2a99cabd4e81225f4f4c4b25) C:\Programme\Microsoft SQL Server\90\Shared\sqladhlp90.exe
22:14:30.0593 3540        MSSQLServerADHelper - ok
22:14:30.0640 3540        Mup            (de6a75f5c270e756c5508d94b6cf68f5) C:\WINDOWS\system32\drivers\Mup.sys
22:14:30.0671 3540        Mup - ok
22:14:30.0750 3540        napagent        (46bb15ae2ac7d025d6d2567b876817bd) C:\WINDOWS\System32\qagentrt.dll
22:14:30.0906 3540        napagent - ok
22:14:30.0937 3540        NDIS            (1df7f42665c94b825322fae71721130d) C:\WINDOWS\system32\drivers\NDIS.sys
22:14:31.0093 3540        NDIS - ok
22:14:31.0109 3540        NdisTapi        (0109c4f3850dfbab279542515386ae22) C:\WINDOWS\system32\DRIVERS\ndistapi.sys
22:14:31.0140 3540        NdisTapi - ok
22:14:31.0171 3540        Ndisuio        (f927a4434c5028758a842943ef1a3849) C:\WINDOWS\system32\DRIVERS\ndisuio.sys
22:14:31.0328 3540        Ndisuio - ok
22:14:31.0375 3540        NdisWan        (edc1531a49c80614b2cfda43ca8659ab) C:\WINDOWS\system32\DRIVERS\ndiswan.sys
22:14:31.0593 3540        NdisWan - ok
22:14:31.0625 3540        NDProxy        (9282bd12dfb069d3889eb3fcc1000a9b) C:\WINDOWS\system32\drivers\NDProxy.sys
22:14:31.0671 3540        NDProxy - ok
22:14:31.0703 3540        NetBIOS        (5d81cf9a2f1a3a756b66cf684911cdf0) C:\WINDOWS\system32\DRIVERS\netbios.sys
22:14:31.0859 3540        NetBIOS - ok
22:14:31.0906 3540        NetBT          (74b2b2f5bea5e9a3dc021d685551bd3d) C:\WINDOWS\system32\DRIVERS\netbt.sys
22:14:32.0046 3540        NetBT - ok
22:14:32.0093 3540        NetDDE          (8ace4251bffd09ce75679fe940e996cc) C:\WINDOWS\system32\netdde.exe
22:14:32.0234 3540        NetDDE - ok
22:14:32.0250 3540        NetDDEdsdm      (8ace4251bffd09ce75679fe940e996cc) C:\WINDOWS\system32\netdde.exe
22:14:32.0406 3540        NetDDEdsdm - ok
22:14:32.0421 3540        NETFRITZ - ok
22:14:32.0453 3540        NETFWDSL - ok
22:14:32.0500 3540        Netlogon        (afb8261b56cba0d86aeb6df682af9785) C:\WINDOWS\system32\lsass.exe
22:14:32.0640 3540        Netlogon - ok
22:14:32.0671 3540        Netman          (e6d88f1f6745bf00b57e7855a2ab696c) C:\WINDOWS\System32\netman.dll
22:14:32.0828 3540        Netman - ok
22:14:32.0968 3540        NetSvc          (02d0798f376fcbd0210eda58476d0b1b) C:\Programme\Intel\PROSetWired\NCS\Sync\NetSvc.exe
22:14:32.0984 3540        NetSvc ( UnsignedFile.Multi.Generic ) - warning
22:14:32.0984 3540        NetSvc - detected UnsignedFile.Multi.Generic (1)
22:14:33.0093 3540        NetTcpPortSharing (d34612c5d02d026535b3095d620626ae) C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
22:14:33.0109 3540        NetTcpPortSharing - ok
22:14:33.0156 3540        Nla            (f1b67b6b0751ae0e6e964b02821206a3) C:\WINDOWS\System32\mswsock.dll
22:14:33.0187 3540        Nla - ok
22:14:33.0218 3540        Npfs            (3182d64ae053d6fb034f44b6def8034a) C:\WINDOWS\system32\drivers\Npfs.sys
22:14:33.0390 3540        Npfs - ok
22:14:33.0437 3540        Ntfs            (78a08dd6a8d65e697c18e1db01c5cdca) C:\WINDOWS\system32\drivers\Ntfs.sys
22:14:33.0640 3540        Ntfs - ok
22:14:33.0968 3540        NtLmSsp        (afb8261b56cba0d86aeb6df682af9785) C:\WINDOWS\system32\lsass.exe
22:14:34.0093 3540        NtLmSsp - ok
22:14:34.0171 3540        NtmsSvc        (56af4064996fa5bac9c449b1514b4770) C:\WINDOWS\system32\ntmssvc.dll
22:14:34.0343 3540        NtmsSvc - ok
22:14:34.0390 3540        Null            (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys
22:14:34.0546 3540        Null - ok
22:14:34.0656 3540        nv              (2b298519edbfcf451d43e0f1e8f1006d) C:\WINDOWS\system32\DRIVERS\nv4_mini.sys
22:14:34.0859 3540        nv - ok
22:14:34.0953 3540        NwlnkFlt        (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
22:14:35.0109 3540        NwlnkFlt - ok
22:14:35.0140 3540        NwlnkFwd        (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
22:14:35.0296 3540        NwlnkFwd - ok
22:14:35.0328 3540        Parport        (f84785660305b9b903fb3bca8ba29837) C:\WINDOWS\system32\DRIVERS\parport.sys
22:14:35.0468 3540        Parport - ok
22:14:35.0500 3540        PartMgr        (beb3ba25197665d82ec7065b724171c6) C:\WINDOWS\system32\drivers\PartMgr.sys
22:14:35.0640 3540        PartMgr - ok
22:14:35.0656 3540        ParVdm          (c2bf987829099a3eaa2ca6a0a90ecb4f) C:\WINDOWS\system32\drivers\ParVdm.sys
22:14:35.0828 3540        ParVdm - ok
22:14:35.0953 3540        PCD62X2 - ok
22:14:36.0000 3540        PCI            (387e8dedc343aa2d1efbc30580273acd) C:\WINDOWS\system32\DRIVERS\pci.sys
22:14:36.0156 3540        PCI - ok
22:14:36.0171 3540        PCIDump - ok
22:14:36.0218 3540        PCIIde          (59ba86d9a61cbcf4df8e598c331f5b82) C:\WINDOWS\system32\DRIVERS\pciide.sys
22:14:36.0359 3540        PCIIde - ok
22:14:36.0406 3540        Pcmcia          (a2a966b77d61847d61a3051df87c8c97) C:\WINDOWS\system32\drivers\Pcmcia.sys
22:14:36.0546 3540        Pcmcia - ok
22:14:36.0546 3540        PDCOMP - ok
22:14:36.0578 3540        PDFRAME - ok
22:14:36.0593 3540        PDRELI - ok
22:14:36.0625 3540        PDRFRAME - ok
22:14:36.0687 3540        PEDRV          (346d96d42790ad07458a11d317f4cd4b) C:\WINDOWS\system32\drivers\PEDRV.sys
22:14:36.0687 3540        PEDRV ( UnsignedFile.Multi.Generic ) - warning
22:14:36.0687 3540        PEDRV - detected UnsignedFile.Multi.Generic (1)
22:14:36.0734 3540        perc2          (6c14b9c19ba84f73d3a86dba11133101) C:\WINDOWS\system32\DRIVERS\perc2.sys
22:14:36.0890 3540        perc2 - ok
22:14:36.0921 3540        perc2hib        (f50f7c27f131afe7beba13e14a3b9416) C:\WINDOWS\system32\DRIVERS\perc2hib.sys
22:14:37.0078 3540        perc2hib - ok
22:14:37.0140 3540        PlugPlay        (a3edbe9053889fb24ab22492472b39dc) C:\WINDOWS\system32\services.exe
22:14:37.0187 3540        PlugPlay - ok
22:14:37.0218 3540        PolicyAgent    (afb8261b56cba0d86aeb6df682af9785) C:\WINDOWS\system32\lsass.exe
22:14:37.0375 3540        PolicyAgent - ok
22:14:37.0406 3540        PptpMiniport    (efeec01b1d3cf84f16ddd24d9d9d8f99) C:\WINDOWS\system32\DRIVERS\raspptp.sys
22:14:37.0593 3540        PptpMiniport - ok
22:14:37.0625 3540        prodrv06        (f2e3c8f1eb6ba0733e0a1f6373df7957) C:\WINDOWS\System32\drivers\prodrv06.sys
22:14:37.0656 3540        prodrv06 ( UnsignedFile.Multi.Generic ) - warning
22:14:37.0656 3540        prodrv06 - detected UnsignedFile.Multi.Generic (1)
22:14:37.0687 3540        prohlp02        (150307b52807d0c493c605ab913038ad) C:\WINDOWS\system32\drivers\prohlp02.sys
22:14:37.0703 3540        prohlp02 ( UnsignedFile.Multi.Generic ) - warning
22:14:37.0703 3540        prohlp02 - detected UnsignedFile.Multi.Generic (1)
22:14:37.0734 3540        prosync1        (f3471e7971ee62420451d958da635064) C:\WINDOWS\system32\drivers\prosync1.sys
22:14:37.0750 3540        prosync1 ( UnsignedFile.Multi.Generic ) - warning
22:14:37.0750 3540        prosync1 - detected UnsignedFile.Multi.Generic (1)
22:14:37.0765 3540        ProtectedStorage (afb8261b56cba0d86aeb6df682af9785) C:\WINDOWS\system32\lsass.exe
22:14:37.0921 3540        ProtectedStorage - ok
22:14:37.0953 3540        PSched          (09298ec810b07e5d582cb3a3f9255424) C:\WINDOWS\system32\DRIVERS\psched.sys
22:14:38.0093 3540        PSched - ok
22:14:38.0218 3540        Ptilink        (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys
22:14:38.0375 3540        Ptilink - ok
22:14:38.0609 3540        PxHelp20        (d86b4a68565e444d76457f14172c875a) C:\WINDOWS\system32\Drivers\PxHelp20.sys
22:14:38.0625 3540        PxHelp20 - ok
22:14:38.0812 3540        ql1080          (0a63fb54039eb5662433caba3b26dba7) C:\WINDOWS\system32\DRIVERS\ql1080.sys
22:14:39.0000 3540        ql1080 - ok
22:14:39.0125 3540        Ql10wnt        (6503449e1d43a0ff0201ad5cb1b8c706) C:\WINDOWS\system32\DRIVERS\ql10wnt.sys
22:14:39.0265 3540        Ql10wnt - ok
22:14:39.0359 3540        ql12160        (156ed0ef20c15114ca097a34a30d8a01) C:\WINDOWS\system32\DRIVERS\ql12160.sys
22:14:39.0515 3540        ql12160 - ok
22:14:39.0625 3540        ql1240          (70f016bebde6d29e864c1230a07cc5e6) C:\WINDOWS\system32\DRIVERS\ql1240.sys
22:14:39.0796 3540        ql1240 - ok
22:14:39.0953 3540        ql1280          (907f0aeea6bc451011611e732bd31fcf) C:\WINDOWS\system32\DRIVERS\ql1280.sys
22:14:40.0109 3540        ql1280 - ok
22:14:40.0187 3540        RasAcd          (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERS\rasacd.sys
22:14:40.0343 3540        RasAcd - ok
22:14:40.0531 3540        RasAuto        (f5ba6caccdb66c8f048e867563203246) C:\WINDOWS\System32\rasauto.dll
22:14:40.0687 3540        RasAuto - ok
22:14:40.0921 3540        Rasl2tp        (11b4a627bc9614b885c4969bfa5ff8a6) C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
22:14:41.0187 3540        Rasl2tp - ok
22:14:41.0687 3540        RasMan          (f9a7b66ea345726edb5862a46b1eccd5) C:\WINDOWS\System32\rasmans.dll
22:14:41.0890 3540        RasMan - ok
22:14:42.0015 3540        RasPppoe        (5bc962f2654137c9909c3d4603587dee) C:\WINDOWS\system32\DRIVERS\raspppoe.sys
22:14:42.0171 3540        RasPppoe - ok
22:14:42.0375 3540        Raspti          (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERS\raspti.sys
22:14:42.0562 3540        Raspti - ok
22:14:42.0890 3540        Rdbss          (7ad224ad1a1437fe28d89cf22b17780a) C:\WINDOWS\system32\DRIVERS\rdbss.sys
22:14:43.0093 3540        Rdbss - ok
22:14:43.0125 3540        RDPCDD          (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
22:14:43.0265 3540        RDPCDD - ok
22:14:43.0375 3540        rdpdr          (15cabd0f7c00c47c70124907916af3f1) C:\WINDOWS\system32\DRIVERS\rdpdr.sys
22:14:43.0531 3540        rdpdr - ok
22:14:43.0703 3540        RDPWD          (5b3055daa788bd688594d2f5981f2a83) C:\WINDOWS\system32\drivers\RDPWD.sys
22:14:43.0781 3540        RDPWD - ok
22:14:43.0828 3540        RDSessMgr      (263af18af0f3db99f574c95f284ccec9) C:\WINDOWS\system32\sessmgr.exe
22:14:43.0984 3540        RDSessMgr - ok
22:14:44.0015 3540        redbook        (ed761d453856f795a7fe056e42c36365) C:\WINDOWS\system32\DRIVERS\redbook.sys
22:14:44.0171 3540        redbook - ok
22:14:44.0218 3540        RemoteAccess    (0e97ec96d6942ceec2d188cc2eb69a01) C:\WINDOWS\System32\mprdim.dll
22:14:44.0359 3540        RemoteAccess - ok
22:14:44.0421 3540        ROOTMODEM      (d8b0b4ade32574b2d9c5cc34dc0dbbe7) C:\WINDOWS\system32\Drivers\RootMdm.sys
22:14:44.0578 3540        ROOTMODEM - ok
22:14:44.0593 3540        RpcLocator      (2a02e21867497df20b8fc95631395169) C:\WINDOWS\system32\locator.exe
22:14:44.0750 3540        RpcLocator - ok
22:14:44.0796 3540        RpcSs          (3127afbf2c1ed0ab14a1bbb7aaecb85b) C:\WINDOWS\System32\rpcss.dll
22:14:44.0859 3540        RpcSs - ok
22:14:44.0921 3540        RSVP            (4bdd71b4b521521499dfd14735c4f398) C:\WINDOWS\system32\rsvp.exe
22:14:45.0062 3540        RSVP - ok
22:14:45.0093 3540        rtl8139        (d507c1400284176573224903819ffda3) C:\WINDOWS\system32\DRIVERS\RTL8139.SYS
22:14:45.0218 3540        rtl8139 - ok
22:14:45.0265 3540        SamSs          (afb8261b56cba0d86aeb6df682af9785) C:\WINDOWS\system32\lsass.exe
22:14:45.0390 3540        SamSs - ok
22:14:45.0437 3540        SCardSvr        (dcec079fad95d36c8dd5cb6d779dfe32) C:\WINDOWS\System32\SCardSvr.exe
22:14:45.0578 3540        SCardSvr - ok
22:14:45.0625 3540        Schedule        (a050194a44d7fa8d7186ed2f4e8367ae) C:\WINDOWS\system32\schedsvc.dll
22:14:45.0781 3540        Schedule - ok
22:14:45.0921 3540        SeaPort        (4a5809a1d796e2675ac0332bf7b0cb11) C:\Programme\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
22:14:45.0953 3540        SeaPort - ok
22:14:45.0984 3540        Secdrv          (90a3935d05b494a5a39d37e71f09a677) C:\WINDOWS\system32\DRIVERS\secdrv.sys
22:14:46.0125 3540        Secdrv - ok
22:14:46.0171 3540        seclogon        (bee4cfd1d48c23b44cf4b974b0b79b2b) C:\WINDOWS\System32\seclogon.dll
22:14:46.0312 3540        seclogon - ok
22:14:46.0390 3540        senfilt        (b9c7617c1e8ab6fdff75d3c8dafcb4c8) C:\WINDOWS\system32\drivers\senfilt.sys
22:14:46.0468 3540        senfilt - ok
22:14:46.0500 3540        SENS            (2aac9b6ed9eddffb721d6452e34d67e3) C:\WINDOWS\system32\sens.dll
22:14:46.0640 3540        SENS - ok
22:14:46.0671 3540        serenum        (0f29512ccd6bead730039fb4bd2c85ce) C:\WINDOWS\system32\DRIVERS\serenum.sys
22:14:46.0828 3540        serenum - ok
22:14:46.0843 3540        Serial          (cf24eb4f0412c82bcd1f4f35a025e31d) C:\WINDOWS\system32\DRIVERS\serial.sys
22:14:46.0984 3540        Serial - ok
22:14:47.0046 3540        sfhlp01        (462aee0ea0481ea8bd45cac876a4ccc4) C:\WINDOWS\system32\drivers\sfhlp01.sys
22:14:47.0078 3540        sfhlp01 ( UnsignedFile.Multi.Generic ) - warning
22:14:47.0078 3540        sfhlp01 - detected UnsignedFile.Multi.Generic (1)
22:14:47.0125 3540        Sfloppy        (8e6b8c671615d126fdc553d1e2de5562) C:\WINDOWS\system32\DRIVERS\sfloppy.sys
22:14:47.0281 3540        Sfloppy - ok
22:14:47.0328 3540        SharedAccess    (cad058d5f8b889a87ca3eb3cf624dcef) C:\WINDOWS\System32\ipnathlp.dll
22:14:47.0515 3540        SharedAccess - ok
22:14:47.0546 3540        ShellHWDetection (2db7d303c36ddd055215052f118e8e75) C:\WINDOWS\System32\shsvcs.dll
22:14:47.0562 3540        ShellHWDetection - ok
22:14:47.0578 3540        Simbad - ok
22:14:47.0640 3540        sisagp          (6b33d0ebd30db32e27d1d78fe946a754) C:\WINDOWS\system32\DRIVERS\sisagp.sys
22:14:47.0796 3540        sisagp - ok
22:14:47.0875 3540        smwdm          (86c4d93b7b7818d066c52fdb03c6c921) C:\WINDOWS\system32\drivers\smwdm.sys
22:14:47.0906 3540        smwdm - ok
22:14:47.0968 3540        snapman        (be84408b1d205099af5cec8d6b045eb7) C:\WINDOWS\system32\DRIVERS\snapman.sys
22:14:47.0984 3540        snapman ( UnsignedFile.Multi.Generic ) - warning
22:14:47.0984 3540        snapman - detected UnsignedFile.Multi.Generic (1)
22:14:48.0015 3540        Sparrow        (83c0f71f86d3bdaf915685f3d568b20e) C:\WINDOWS\system32\DRIVERS\sparrow.sys
22:14:48.0078 3540        Sparrow - ok
22:14:48.0125 3540        splitter        (ab8b92451ecb048a4d1de7c3ffcb4a9f) C:\WINDOWS\system32\drivers\splitter.sys
22:14:48.0265 3540        splitter - ok
22:14:48.0312 3540        Spooler        (60784f891563fb1b767f70117fc2428f) C:\WINDOWS\system32\spoolsv.exe
22:14:48.0343 3540        Spooler - ok
22:14:48.0468 3540        SQLBrowser      (86ebd8b1f23e743aad21f4d5b4d40985) C:\Programme\Microsoft SQL Server\90\Shared\sqlbrowser.exe
22:14:48.0484 3540        SQLBrowser - ok
22:14:48.0515 3540        SQLWriter      (d89083c4eb02daca8f944b0e05e57f9d) C:\Programme\Microsoft SQL Server\90\Shared\sqlwriter.exe
22:14:48.0531 3540        SQLWriter - ok
22:14:48.0562 3540        sr              (50fa898f8c032796d3b1b9951bb5a90f) C:\WINDOWS\system32\DRIVERS\sr.sys
22:14:48.0703 3540        sr - ok
22:14:48.0812 3540        srservice      (fe77a85495065f3ad59c5c65b6c54182) C:\WINDOWS\system32\srsvc.dll
22:14:48.0953 3540        srservice - ok
22:14:49.0015 3540        Srv            (47ddfc2f003f7f9f0592c6874962a2e7) C:\WINDOWS\system32\DRIVERS\srv.sys
22:14:49.0093 3540        Srv - ok
22:14:49.0125 3540        sscdbhk5        (d7968049be0adbb6a57cee3960320911) C:\WINDOWS\system32\drivers\sscdbhk5.sys
22:14:49.0140 3540        sscdbhk5 ( UnsignedFile.Multi.Generic ) - warning
22:14:49.0140 3540        sscdbhk5 - detected UnsignedFile.Multi.Generic (1)
22:14:49.0171 3540        SSDPSRV        (4df5b05dfaec29e13e1ed6f6ee12c500) C:\WINDOWS\System32\ssdpsrv.dll
22:14:49.0328 3540        SSDPSRV - ok
22:14:49.0359 3540        SSHDRV51        (4217f2b8957c7e82e2a08d16bf4267cf) C:\WINDOWS\system32\drivers\SSHDRV51.sys
22:14:49.0390 3540        SSHDRV51 ( UnsignedFile.Multi.Generic ) - warning
22:14:49.0390 3540        SSHDRV51 - detected UnsignedFile.Multi.Generic (1)
22:14:49.0421 3540        SSHDRV62        (4be93e63c3da1a3a9e6aa82c362e172d) C:\WINDOWS\system32\drivers\SSHDRV62.sys
22:14:49.0468 3540        SSHDRV62 ( UnsignedFile.Multi.Generic ) - warning
22:14:49.0468 3540        SSHDRV62 - detected UnsignedFile.Multi.Generic (1)
22:14:49.0500 3540        SSHDRV76        (ef3504dd32e2ea222be0cbc9a0895f89) C:\WINDOWS\system32\drivers\SSHDRV76.sys
22:14:49.0500 3540        SSHDRV76 ( UnsignedFile.Multi.Generic ) - warning
22:14:49.0500 3540        SSHDRV76 - detected UnsignedFile.Multi.Generic (1)
22:14:49.0546 3540        ssrtln          (c3ffd65abfb6441e7606cf74f1155273) C:\WINDOWS\system32\drivers\ssrtln.sys
22:14:49.0562 3540        ssrtln ( UnsignedFile.Multi.Generic ) - warning
22:14:49.0562 3540        ssrtln - detected UnsignedFile.Multi.Generic (1)
22:14:49.0625 3540        stisvc          (bc2c5985611c5356b24aeb370953ded9) C:\WINDOWS\system32\wiaservc.dll
22:14:49.0812 3540        stisvc - ok
22:14:49.0875 3540        swenum          (3941d127aef12e93addf6fe6ee027e0f) C:\WINDOWS\system32\DRIVERS\swenum.sys
22:14:50.0031 3540        swenum - ok
22:14:50.0062 3540        swmidi          (8ce882bcc6cf8a62f2b2323d95cb3d01) C:\WINDOWS\system32\drivers\swmidi.sys
22:14:50.0187 3540        swmidi - ok
22:14:50.0218 3540        SwPrv - ok
22:14:50.0296 3540        symc810        (1ff3217614018630d0a6758630fc698c) C:\WINDOWS\system32\DRIVERS\symc810.sys
22:14:50.0437 3540        symc810 - ok
22:14:50.0453 3540        symc8xx        (070e001d95cf725186ef8b20335f933c) C:\WINDOWS\system32\DRIVERS\symc8xx.sys
22:14:50.0609 3540        symc8xx - ok
22:14:50.0640 3540        sym_hi          (80ac1c4abbe2df3b738bf15517a51f2c) C:\WINDOWS\system32\DRIVERS\sym_hi.sys
22:14:50.0781 3540        sym_hi - ok
22:14:50.0812 3540        sym_u3          (bf4fab949a382a8e105f46ebb4937058) C:\WINDOWS\system32\DRIVERS\sym_u3.sys
22:14:50.0984 3540        sym_u3 - ok
22:14:51.0000 3540        sysaudio        (8b83f3ed0f1688b4958f77cd6d2bf290) C:\WINDOWS\system32\drivers\sysaudio.sys
22:14:51.0156 3540        sysaudio - ok
22:14:51.0187 3540        SysmonLog      (2903fffa2523926d6219428040dce6b9) C:\WINDOWS\system32\smlogsvc.exe
22:14:51.0328 3540        SysmonLog - ok
22:14:51.0359 3540        TapiSrv        (05903cac4b98908d55ea5774775b382e) C:\WINDOWS\System32\tapisrv.dll
22:14:51.0515 3540        TapiSrv - ok
22:14:51.0562 3540        Tcpip          (9aefa14bd6b182d61e3119fa5f436d3d) C:\WINDOWS\system32\DRIVERS\tcpip.sys
22:14:51.0593 3540        Tcpip - ok
22:14:51.0640 3540        TDPIPE          (6471a66807f5e104e4885f5b67349397) C:\WINDOWS\system32\drivers\TDPIPE.sys
22:14:51.0781 3540        TDPIPE - ok
22:14:51.0843 3540        TDTCP          (c56b6d0402371cf3700eb322ef3aaf61) C:\WINDOWS\system32\drivers\TDTCP.sys
22:14:51.0984 3540        TDTCP - ok
22:14:52.0078 3540        TermDD          (88155247177638048422893737429d9e) C:\WINDOWS\system32\DRIVERS\termdd.sys
22:14:52.0234 3540        TermDD - ok
22:14:52.0296 3540        TermService    (b7de02c863d8f5a005a7bf375375a6a4) C:\WINDOWS\System32\termsrv.dll
22:14:52.0453 3540        TermService - ok
22:14:52.0515 3540        tfsnboio        (30698355067d07da5f9eb81132c9fdd6) C:\WINDOWS\system32\dla\tfsnboio.sys
22:14:52.0531 3540        tfsnboio ( UnsignedFile.Multi.Generic ) - warning
22:14:52.0531 3540        tfsnboio - detected UnsignedFile.Multi.Generic (1)
22:14:52.0562 3540        tfsncofs        (fb9d825bb4a2abdf24600f7505050e2b) C:\WINDOWS\system32\dla\tfsncofs.sys
22:14:52.0578 3540        tfsncofs ( UnsignedFile.Multi.Generic ) - warning
22:14:52.0578 3540        tfsncofs - detected UnsignedFile.Multi.Generic (1)
22:14:52.0593 3540        tfsndrct        (cafd8cca11aa1e8b6d2ea1ba8f70ec33) C:\WINDOWS\system32\dla\tfsndrct.sys
22:14:52.0609 3540        tfsndrct ( UnsignedFile.Multi.Generic ) - warning
22:14:52.0609 3540        tfsndrct - detected UnsignedFile.Multi.Generic (1)
22:14:52.0640 3540        tfsndres        (d4400188782aa797598958969c9657d4) C:\WINDOWS\system32\dla\tfsndres.sys
22:14:52.0656 3540        tfsndres ( UnsignedFile.Multi.Generic ) - warning
22:14:52.0656 3540        tfsndres - detected UnsignedFile.Multi.Generic (1)
22:14:52.0687 3540        tfsnifs        (b92f67a71cc8176f331b8aa8d9f555ad) C:\WINDOWS\system32\dla\tfsnifs.sys
22:14:52.0703 3540        tfsnifs ( UnsignedFile.Multi.Generic ) - warning
22:14:52.0703 3540        tfsnifs - detected UnsignedFile.Multi.Generic (1)
22:14:52.0734 3540        tfsnopio        (85985faa9a71e2358fcc2edefc2a3c5c) C:\WINDOWS\system32\dla\tfsnopio.sys
22:14:52.0765 3540        tfsnopio ( UnsignedFile.Multi.Generic ) - warning
22:14:52.0765 3540        tfsnopio - detected UnsignedFile.Multi.Generic (1)
22:14:52.0812 3540        tfsnpool        (bba22094f0f7c210567efdaf11f64495) C:\WINDOWS\system32\dla\tfsnpool.sys
22:14:52.0812 3540        tfsnpool ( UnsignedFile.Multi.Generic ) - warning
22:14:52.0812 3540        tfsnpool - detected UnsignedFile.Multi.Generic (1)
22:14:52.0843 3540        tfsnudf        (81340bef80b9811e98ce64611e67e3ff) C:\WINDOWS\system32\dla\tfsnudf.sys
22:14:52.0859 3540        tfsnudf ( UnsignedFile.Multi.Generic ) - warning
22:14:52.0859 3540        tfsnudf - detected UnsignedFile.Multi.Generic (1)
22:14:52.0875 3540        tfsnudfa        (c035fd116224ccc8325f384776b6a8bb) C:\WINDOWS\system32\dla\tfsnudfa.sys
22:14:52.0890 3540        tfsnudfa ( UnsignedFile.Multi.Generic ) - warning
22:14:52.0890 3540        tfsnudfa - detected UnsignedFile.Multi.Generic (1)
22:14:52.0921 3540        Themes          (2db7d303c36ddd055215052f118e8e75) C:\WINDOWS\System32\shsvcs.dll
22:14:52.0937 3540        Themes - ok
22:14:53.0015 3540        tifsfilter      (0a38016d71f794b8203c2aca2ae50318) C:\WINDOWS\system32\DRIVERS\tifsfilt.sys
22:14:53.0031 3540        tifsfilter ( UnsignedFile.Multi.Generic ) - warning
22:14:53.0031 3540        tifsfilter - detected UnsignedFile.Multi.Generic (1)
22:14:53.0062 3540        timounter      (72a519f77471038dd3e1a4e5637f6637) C:\WINDOWS\system32\DRIVERS\timntr.sys
22:14:53.0078 3540        timounter ( UnsignedFile.Multi.Generic ) - warning
22:14:53.0078 3540        timounter - detected UnsignedFile.Multi.Generic (1)
22:14:53.0125 3540        TosIde          (d213a9247dc347f305a2d4cc9b951487) C:\WINDOWS\system32\DRIVERS\toside.sys
22:14:53.0281 3540        TosIde - ok
22:14:53.0312 3540        TrkWks          (626504572b175867f30f3215c04b3e2f) C:\WINDOWS\system32\trkwks.dll
22:14:53.0453 3540        TrkWks - ok
22:14:53.0515 3540        Udfs            (5787b80c2e3c5e2f56c2a233d91fa2c9) C:\WINDOWS\system32\drivers\Udfs.sys
22:14:53.0671 3540        Udfs - ok
22:14:53.0703 3540        ultra          (1b698a51cd528d8da4ffaed66dfc51b9) C:\WINDOWS\system32\DRIVERS\ultra.sys
22:14:53.0796 3540        ultra - ok
22:14:53.0875 3540        Update          (402ddc88356b1bac0ee3dd1580c76a31) C:\WINDOWS\system32\DRIVERS\update.sys
22:14:54.0046 3540        Update - ok
22:14:54.0109 3540        upnphost        (1dfd8975d8c89214b98d9387c1125b49) C:\WINDOWS\System32\upnphost.dll
22:14:54.0265 3540        upnphost - ok
22:14:54.0312 3540        UPS            (9b11e6118958e63e1fef129466e2bda7) C:\WINDOWS\System32\ups.exe
22:14:54.0453 3540        UPS - ok
22:14:54.0468 3540        usbccgp        (173f317ce0db8e21322e71b7e60a27e8) C:\WINDOWS\system32\DRIVERS\usbccgp.sys
22:14:54.0625 3540        usbccgp - ok
22:14:54.0671 3540        usbehci        (65dcf09d0e37d4c6b11b5b0b76d470a7) C:\WINDOWS\system32\DRIVERS\usbehci.sys
22:14:54.0828 3540        usbehci - ok
22:14:54.0859 3540        usbhub          (1ab3cdde553b6e064d2e754efe20285c) C:\WINDOWS\system32\DRIVERS\usbhub.sys
22:14:55.0000 3540        usbhub - ok
22:14:55.0046 3540        usbprint        (a717c8721046828520c9edf31288fc00) C:\WINDOWS\system32\DRIVERS\usbprint.sys
22:14:55.0171 3540        usbprint - ok
22:14:55.0234 3540        usbscan        (a0b8cf9deb1184fbdd20784a58fa75d4) C:\WINDOWS\system32\DRIVERS\usbscan.sys
22:14:55.0390 3540        usbscan - ok
22:14:55.0437 3540        USBSTOR        (a32426d9b14a089eaa1d922e0c5801a9) C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
22:14:55.0593 3540        USBSTOR - ok
22:14:55.0609 3540        usbuhci        (26496f9dee2d787fc3e61ad54821ffe6) C:\WINDOWS\system32\DRIVERS\usbuhci.sys
22:14:55.0765 3540        usbuhci - ok
22:14:55.0843 3540        VgaSave        (0d3a8fafceacd8b7625cd549757a7df1) C:\WINDOWS\System32\drivers\vga.sys
22:14:56.0015 3540        VgaSave - ok
22:14:56.0062 3540        viaagp          (754292ce5848b3738281b4f3607eaef4) C:\WINDOWS\system32\DRIVERS\viaagp.sys
22:14:56.0187 3540        viaagp - ok
22:14:56.0203 3540        ViaIde          (3b3efcda263b8ac14fdf9cbdd0791b2e) C:\WINDOWS\system32\DRIVERS\viaide.sys
22:14:56.0343 3540        ViaIde - ok
22:14:56.0390 3540        VICHW11        (4d3d87d2e3d2fb59c7c75f025d8485c3) C:\WINDOWS\system32\drivers\VICHW11.sys
22:14:56.0406 3540        VICHW11 ( UnsignedFile.Multi.Generic ) - warning
22:14:56.0406 3540        VICHW11 - detected UnsignedFile.Multi.Generic (1)
22:14:56.0437 3540        VolSnap        (a5a712f4e880874a477af790b5186e1d) C:\WINDOWS\system32\drivers\VolSnap.sys
22:14:56.0578 3540        VolSnap - ok
22:14:56.0625 3540        VSS            (68f106273be29e7b7ef8266977268e78) C:\WINDOWS\System32\vssvc.exe
22:14:56.0781 3540        VSS - ok
22:14:56.0828 3540        w32time        (7b353059e665f8b7ad2bbeaef597cf45) C:\WINDOWS\system32\w32time.dll
22:14:57.0000 3540        w32time - ok
22:14:57.0031 3540        Wanarp          (e20b95baedb550f32dd489265c1da1f6) C:\WINDOWS\system32\DRIVERS\wanarp.sys
22:14:57.0171 3540        Wanarp - ok
22:14:57.0187 3540        WDICA - ok
22:14:57.0234 3540        wdmaud          (6768acf64b18196494413695f0c3a00f) C:\WINDOWS\system32\drivers\wdmaud.sys
22:14:57.0375 3540        wdmaud - ok
22:14:57.0406 3540        WebClient      (81727c9873e3905a2ffc1ebd07265002) C:\WINDOWS\System32\webclnt.dll
22:14:57.0546 3540        WebClient - ok
22:14:57.0593 3540        WinDriver6      (ef086e2ab4d899ad21ab96141cc20750) C:\WINDOWS\system32\drivers\windrvr6.sys
22:14:57.0609 3540        WinDriver6 ( UnsignedFile.Multi.Generic ) - warning
22:14:57.0609 3540        WinDriver6 - detected UnsignedFile.Multi.Generic (1)
22:14:57.0687 3540        winmgmt        (6f3f3973d97714cc5f906a19fe883729) C:\WINDOWS\system32\wbem\WMIsvc.dll
22:14:57.0843 3540        winmgmt - ok
22:14:57.0921 3540        WmdmPmSN        (c51b4a5c05a5475708e3c81c7765b71d) C:\WINDOWS\system32\MsPMSNSv.dll
22:14:58.0000 3540        WmdmPmSN - ok
22:14:58.0078 3540        WmiApSrv        (93908111ba57a6e60ec2fa2de202105c) C:\WINDOWS\system32\wbem\wmiapsrv.exe
22:14:58.0234 3540        WmiApSrv - ok
22:14:58.0343 3540        WMPNetworkSvc  (bf05650bb7df5e9ebdd25974e22403bb) C:\Programme\Windows Media Player\WMPNetwk.exe
22:14:58.0421 3540        WMPNetworkSvc - ok
22:14:58.0500 3540        WpdUsb          (cf4def1bf66f06964dc0d91844239104) C:\WINDOWS\system32\DRIVERS\wpdusb.sys
22:14:58.0531 3540        WpdUsb - ok
22:14:58.0562 3540        WS2IFSL        (6abe6e225adb5a751622a9cc3bc19ce8) C:\WINDOWS\System32\drivers\ws2ifsl.sys
22:14:58.0718 3540        WS2IFSL - ok
22:14:58.0750 3540        wscsvc          (300b3e84faf1a5c1f791c159ba28035d) C:\WINDOWS\system32\wscsvc.dll
22:14:58.0937 3540        wscsvc - ok
22:14:58.0968 3540        wuauserv        (7b4fe05202aa6bf9f4dfd0e6a0d8a085) C:\WINDOWS\system32\wuauserv.dll
22:14:59.0125 3540        wuauserv - ok
22:14:59.0156 3540        WudfPf          (f15feafffbb3644ccc80c5da584e6311) C:\WINDOWS\system32\DRIVERS\WudfPf.sys
22:14:59.0203 3540        WudfPf - ok
22:14:59.0281 3540        WudfRd          (28b524262bce6de1f7ef9f510ba3985b) C:\WINDOWS\system32\DRIVERS\wudfrd.sys
22:14:59.0328 3540        WudfRd - ok
22:14:59.0343 3540        WudfSvc        (05231c04253c5bc30b26cbaae680ed89) C:\WINDOWS\System32\WUDFSvc.dll
22:14:59.0375 3540        WudfSvc - ok
22:14:59.0421 3540        WZCSVC          (c4f109c005f6725162d2d12ca751e4a7) C:\WINDOWS\System32\wzcsvc.dll
22:14:59.0609 3540        WZCSVC - ok
22:14:59.0640 3540        xmlprov        (0ada34871a2e1cd2caafed1237a47750) C:\WINDOWS\System32\xmlprov.dll
22:14:59.0812 3540        xmlprov - ok
22:14:59.0890 3540        MBR (0x1B8)    (b16a2359f4962b0c622d81a1c1f4b703) \Device\Harddisk0\DR0
22:15:00.0515 3540        \Device\Harddisk0\DR0 - ok
22:15:00.0531 3540        Boot (0x1200)  (2eb41f71733fc1b167ba77b513b82ca3) \Device\Harddisk0\DR0\Partition0
22:15:00.0531 3540        \Device\Harddisk0\DR0\Partition0 - ok
22:15:00.0562 3540        Boot (0x1200)  (f8c0b12f66492d1cb39ab6bae85e468d) \Device\Harddisk0\DR0\Partition1
22:15:00.0562 3540        \Device\Harddisk0\DR0\Partition1 - ok
22:15:00.0593 3540        Boot (0x1200)  (348d3ab3d6d3273adcfec54ecabbe5f4) \Device\Harddisk0\DR0\Partition2
22:15:00.0593 3540        \Device\Harddisk0\DR0\Partition2 - ok
22:15:00.0640 3540        Boot (0x1200)  (9e7589c07169a1237fb1f050de979f86) \Device\Harddisk0\DR0\Partition3
22:15:00.0640 3540        \Device\Harddisk0\DR0\Partition3 - ok
22:15:00.0640 3540        ============================================================
22:15:00.0640 3540        Scan finished
22:15:00.0640 3540        ============================================================
22:15:00.0812 3588        Detected object count: 35
22:15:00.0812 3588        Actual detected object count: 35

cosinus 22.05.2012 10:52
Log ist unvollständig, die unter Zusammenfassung fehlt

Atlanti 22.05.2012 20:19
Sorry, da habe ich einen Fehler beim Kopieren gemacht. Hier der komplette Log:
Code:
22:12:26.0281 3756        TDSS rootkit removing tool 2.7.36.0 May 21 2012 16:40:16
22:12:27.0375 3756        ============================================================
22:12:27.0375 3756        Current date / time: 2012/05/21 22:12:27.0375
22:12:27.0375 3756        SystemInfo:
22:12:27.0375 3756       
22:12:27.0375 3756        OS Version: 5.1.2600 ServicePack: 3.0
22:12:27.0375 3756        Product type: Workstation
22:12:27.0375 3756        ComputerName: SILVIA
22:12:27.0375 3756        UserName: Andreas
22:12:27.0375 3756        Windows directory: C:\WINDOWS
22:12:27.0375 3756        System windows directory: C:\WINDOWS
22:12:27.0406 3756        Processor architecture: Intel x86
22:12:27.0406 3756        Number of processors: 1
22:12:27.0406 3756        Page size: 0x1000
22:12:27.0406 3756        Boot type: Normal boot
22:12:27.0406 3756        ============================================================
22:12:39.0046 3756        Drive \Device\Harddisk0\DR0 - Size: 0x2540BE4000 (149.01 Gb), SectorSize: 0x200, Cylinders: 0x4BFC, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000054
22:12:39.0093 3756        ============================================================
22:12:39.0093 3756        \Device\Harddisk0\DR0:
22:12:39.0093 3756        MBR partitions:
22:12:39.0093 3756        \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x139C5, BlocksNum 0x3F2ED1C
22:12:39.0109 3756        \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x44C27C7, BlocksNum 0xBB4FD03
22:12:39.0156 3756        \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x10012509, BlocksNum 0x14DDE93
22:12:39.0218 3756        \Device\Harddisk0\DR0\Partition3: MBR, Type 0x7, StartLBA 0x114F03DB, BlocksNum 0x1514D21
22:12:39.0218 3756        ============================================================
22:12:39.0468 3756        C: <-> \Device\Harddisk0\DR0\Partition0
22:12:40.0828 3756        E: <-> \Device\Harddisk0\DR0\Partition1
22:12:40.0875 3756        G: <-> \Device\Harddisk0\DR0\Partition3
22:12:40.0890 3756        F: <-> \Device\Harddisk0\DR0\Partition2
22:12:40.0906 3756        ============================================================
22:12:40.0906 3756        Initialize success
22:12:40.0906 3756        ============================================================
22:13:53.0968 3540        ============================================================
22:13:53.0968 3540        Scan started
22:13:53.0968 3540        Mode: Manual; SigCheck; TDLFS;
22:13:53.0968 3540        ============================================================
22:13:54.0484 3540        Abiosdsk - ok
22:13:54.0562 3540        abp480n5        (6abb91494fe6c59089b9336452ab2ea3) C:\WINDOWS\system32\DRIVERS\ABP480N5.SYS
22:13:57.0500 3540        abp480n5 - ok
22:13:57.0578 3540        ACEDRV05        (0a1e97197609f92d2425b67da0bb0a7f) C:\WINDOWS\system32\drivers\ACEDRV05.sys
22:13:57.0625 3540        ACEDRV05 ( UnsignedFile.Multi.Generic ) - warning
22:13:57.0625 3540        ACEDRV05 - detected UnsignedFile.Multi.Generic (1)
22:13:57.0656 3540        ACPI            (ac407f1a62c3a300b4f2b5a9f1d55b2c) C:\WINDOWS\system32\DRIVERS\ACPI.sys
22:13:57.0906 3540        ACPI - ok
22:13:57.0937 3540        ACPIEC          (9e1ca3160dafb159ca14f83b1e317f75) C:\WINDOWS\system32\drivers\ACPIEC.sys
22:13:58.0093 3540        ACPIEC - ok
22:13:58.0156 3540        AdobeFlashPlayerUpdateSvc (76d5a3d2a50402a0b9b6ed13c4371e79) C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
22:13:58.0187 3540        AdobeFlashPlayerUpdateSvc - ok
22:13:58.0234 3540        adpu160m        (9a11864873da202c996558b2106b0bbc) C:\WINDOWS\system32\DRIVERS\adpu160m.sys
22:13:58.0390 3540        adpu160m - ok
22:13:58.0437 3540        aec            (8bed39e3c35d6a489438b8141717a557) C:\WINDOWS\system32\drivers\aec.sys
22:13:58.0593 3540        aec - ok
22:13:58.0625 3540        AFD            (1e44bc1e83d8fd2305f8d452db109cf9) C:\WINDOWS\System32\drivers\afd.sys
22:13:58.0687 3540        AFD - ok
22:13:58.0734 3540        agp440          (08fd04aa961bdc77fb983f328334e3d7) C:\WINDOWS\system32\DRIVERS\agp440.sys
22:13:58.0921 3540        agp440 - ok
22:13:58.0968 3540        agpCPQ          (03a7e0922acfe1b07d5db2eeb0773063) C:\WINDOWS\system32\DRIVERS\agpCPQ.sys
22:13:59.0218 3540        agpCPQ - ok
22:13:59.0265 3540        Aha154x        (c23ea9b5f46c7f7910db3eab648ff013) C:\WINDOWS\system32\DRIVERS\aha154x.sys
22:13:59.0359 3540        Aha154x - ok
22:13:59.0390 3540        aic78u2        (19dd0fb48b0c18892f70e2e7d61a1529) C:\WINDOWS\system32\DRIVERS\aic78u2.sys
22:13:59.0546 3540        aic78u2 - ok
22:13:59.0578 3540        aic78xx        (b7fe594a7468aa0132deb03fb8e34326) C:\WINDOWS\system32\DRIVERS\aic78xx.sys
22:13:59.0781 3540        aic78xx - ok
22:13:59.0812 3540        Alerter        (738d80cc01d7bc7584be917b7f544394) C:\WINDOWS\system32\alrsvc.dll
22:14:00.0046 3540        Alerter - ok
22:14:00.0125 3540        ALG            (190cd73d4984f94d823f9444980513e5) C:\WINDOWS\System32\alg.exe
22:14:00.0281 3540        ALG - ok
22:14:00.0421 3540        AliIde          (1140ab9938809700b46bb88e46d72a96) C:\WINDOWS\system32\DRIVERS\aliide.sys
22:14:00.0593 3540        AliIde - ok
22:14:00.0718 3540        alim1541        (cb08aed0de2dd889a8a820cd8082d83c) C:\WINDOWS\system32\DRIVERS\alim1541.sys
22:14:00.0890 3540        alim1541 - ok
22:14:00.0906 3540        amdagp          (95b4fb835e28aa1336ceeb07fd5b9398) C:\WINDOWS\system32\DRIVERS\amdagp.sys
22:14:01.0796 3540        amdagp - ok
22:14:01.0890 3540        amsint          (79f5add8d24bd6893f2903a3e2f3fad6) C:\WINDOWS\system32\DRIVERS\amsint.sys
22:14:02.0062 3540        amsint - ok
22:14:02.0078 3540        AppMgmt - ok
22:14:02.0171 3540        asc            (62d318e9a0c8fc9b780008e724283707) C:\WINDOWS\system32\DRIVERS\asc.sys
22:14:02.0390 3540        asc - ok
22:14:02.0437 3540        asc3350p        (69eb0cc7714b32896ccbfd5edcbea447) C:\WINDOWS\system32\DRIVERS\asc3350p.sys
22:14:02.0531 3540        asc3350p - ok
22:14:02.0562 3540        asc3550        (5d8de112aa0254b907861e9e9c31d597) C:\WINDOWS\system32\DRIVERS\asc3550.sys
22:14:02.0734 3540        asc3550 - ok
22:14:02.0984 3540        aspnet_state    (0e5e4957549056e2bf2c49f4f6b601ad) C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
22:14:03.0046 3540        aspnet_state - ok
22:14:03.0125 3540        AsyncMac        (b153affac761e7f5fcfa822b9c4e97bc) C:\WINDOWS\system32\DRIVERS\asyncmac.sys
22:14:03.0312 3540        AsyncMac - ok
22:14:03.0406 3540        atapi          (9f3a2f5aa6875c72bf062c712cfa2674) C:\WINDOWS\system32\DRIVERS\atapi.sys
22:14:03.0593 3540        atapi - ok
22:14:03.0609 3540        Atdisk - ok
22:14:03.0687 3540        Ati HotKey Poller (a2eaeb497ca29ecaeaf0df66ad85c57d) C:\WINDOWS\system32\Ati2evxx.exe
22:14:03.0781 3540        Ati HotKey Poller - ok
22:14:03.0843 3540        ATI Smart      (312a17dff710a0f4e6d4dd1d52ead1a8) C:\WINDOWS\system32\ati2sgag.exe
22:14:03.0890 3540        ATI Smart ( UnsignedFile.Multi.Generic ) - warning
22:14:03.0890 3540        ATI Smart - detected UnsignedFile.Multi.Generic (1)
22:14:05.0546 3540        ati2mtag        (492bd2a5f65f218d4ede5764a3bb67e9) C:\WINDOWS\system32\DRIVERS\ati2mtag.sys
22:14:06.0890 3540        ati2mtag - ok
22:14:07.0843 3540        Atmarpc        (9916c1225104ba14794209cfa8012159) C:\WINDOWS\system32\DRIVERS\atmarpc.sys
22:14:08.0015 3540        Atmarpc - ok
22:14:08.0062 3540        AudioSrv        (58ed0d5452df7be732193e7999c6b9a4) C:\WINDOWS\System32\audiosrv.dll
22:14:08.0359 3540        AudioSrv - ok
22:14:08.0390 3540        audstub        (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys
22:14:08.0703 3540        audstub - ok
22:14:08.0750 3540        avmaudio        (728c4a6c722535c16d1025f51aa31e22) C:\WINDOWS\system32\DRIVERS\avmaudio.sys
22:14:08.0781 3540        avmaudio ( UnsignedFile.Multi.Generic ) - warning
22:14:08.0781 3540        avmaudio - detected UnsignedFile.Multi.Generic (1)
22:14:08.0859 3540        avmaura        (728c4a6c722535c16d1025f51aa31e22) C:\WINDOWS\system32\DRIVERS\avmaura.sys
22:14:08.0875 3540        avmaura ( UnsignedFile.Multi.Generic ) - warning
22:14:08.0875 3540        avmaura - detected UnsignedFile.Multi.Generic (1)
22:14:08.0921 3540        AVMCOWAN        (fc81a3af632ab366cbff0938b5f775fe) C:\WINDOWS\system32\DRIVERS\avmcowan.sys
22:14:08.0968 3540        AVMCOWAN - ok
22:14:09.0015 3540        AVMDSLPPPOE    (4460f56b12b898e75f989f290d14ab9e) C:\WINDOWS\system32\DRIVERS\avmdsloe.sys
22:14:09.0062 3540        AVMDSLPPPOE - ok
22:14:09.0093 3540        AVMNDSL        (70ecb88ca41e7f658025d1d442767fe9) C:\WINDOWS\system32\DRIVERS\avmndsl.sys
22:14:09.0109 3540        AVMNDSL - ok
22:14:09.0125 3540        AVMPORT        (02568a764ef2c37cfa6f9c471e67d475) C:\WINDOWS\System32\drivers\avmport.sys
22:14:09.0140 3540        AVMPORT ( UnsignedFile.Multi.Generic ) - warning
22:14:09.0140 3540        AVMPORT - detected UnsignedFile.Multi.Generic (1)
22:14:09.0171 3540        AVMWAN          (eb0ef89ccd0191aec96cd6093fb9770f) C:\WINDOWS\system32\DRIVERS\avmwan.sys
22:14:09.0187 3540        AVMWAN ( UnsignedFile.Multi.Generic ) - warning
22:14:09.0187 3540        AVMWAN - detected UnsignedFile.Multi.Generic (1)
22:14:09.0218 3540        Beep            (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys
22:14:09.0375 3540        Beep - ok
22:14:09.0437 3540        BITS            (d6f603772a789bb3228f310d650b8bd1) C:\WINDOWS\system32\qmgr.dll
22:14:09.0671 3540        BITS - ok
22:14:09.0703 3540        Browser        (b42057f06bbb98b31876c0b3f2b54e33) C:\WINDOWS\System32\browser.dll
22:14:09.0875 3540        Browser - ok
22:14:09.0984 3540        catchme - ok
22:14:10.0046 3540        cbidf          (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\DRIVERS\cbidf2k.sys
22:14:10.0218 3540        cbidf - ok
22:14:10.0234 3540        cbidf2k        (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys
22:14:10.0406 3540        cbidf2k - ok
22:14:10.0437 3540        cd20xrnt        (f3ec03299634490e97bbce94cd2954c7) C:\WINDOWS\system32\DRIVERS\cd20xrnt.sys
22:14:10.0562 3540        cd20xrnt - ok
22:14:10.0593 3540        Cdaudio        (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS\system32\drivers\Cdaudio.sys
22:14:10.0750 3540        Cdaudio - ok
22:14:10.0796 3540        Cdfs            (c885b02847f5d2fd45a24e219ed93b32) C:\WINDOWS\system32\drivers\Cdfs.sys
22:14:10.0953 3540        Cdfs - ok
22:14:10.0984 3540        Cdrom          (1f4260cc5b42272d71f79e570a27a4fe) C:\WINDOWS\system32\DRIVERS\cdrom.sys
22:14:11.0156 3540        Cdrom - ok
22:14:11.0171 3540        Changer - ok
22:14:11.0218 3540        CiSvc          (28e3040d1f1ca2008cd6b29dfebc9a5e) C:\WINDOWS\system32\cisvc.exe
22:14:11.0375 3540        CiSvc - ok
22:14:11.0390 3540        ClipSrv        (778a30ed3c134eb7e406afc407e9997d) C:\WINDOWS\system32\clipsrv.exe
22:14:11.0593 3540        ClipSrv - ok
22:14:11.0703 3540        clr_optimization_v2.0.50727_32 (d87acaed61e417bba546ced5e7e36d9c) C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
22:14:11.0718 3540        clr_optimization_v2.0.50727_32 - ok
22:14:11.0750 3540        CmdIde          (c687f81290303d90099b027a6474f99f) C:\WINDOWS\system32\DRIVERS\cmdide.sys
22:14:11.0953 3540        CmdIde - ok
22:14:11.0953 3540        COMSysApp - ok
22:14:12.0031 3540        Cpqarray        (3ee529119eed34cd212a215e8c40d4b6) C:\WINDOWS\system32\DRIVERS\cpqarray.sys
22:14:12.0203 3540        Cpqarray - ok
22:14:12.0234 3540        CryptSvc        (611f824e5c703a5a899f84c5f1699e4d) C:\WINDOWS\System32\cryptsvc.dll
22:14:12.0390 3540        CryptSvc - ok
22:14:12.0437 3540        dac2w2k        (e550e7418984b65a78299d248f0a7f36) C:\WINDOWS\system32\DRIVERS\dac2w2k.sys
22:14:12.0625 3540        dac2w2k - ok
22:14:12.0656 3540        dac960nt        (683789caa3864eb46125ae86ff677d34) C:\WINDOWS\system32\DRIVERS\dac960nt.sys
22:14:12.0828 3540        dac960nt - ok
22:14:12.0875 3540        DcomLaunch      (3127afbf2c1ed0ab14a1bbb7aaecb85b) C:\WINDOWS\system32\rpcss.dll
22:14:13.0000 3540        DcomLaunch - ok
22:14:13.0078 3540        de_serv - ok
22:14:13.0140 3540        Dhcp            (c29a1c9b75ba38fa37f8c44405dec360) C:\WINDOWS\System32\dhcpcsvc.dll
22:14:13.0296 3540        Dhcp - ok
22:14:13.0328 3540        Disk            (044452051f3e02e7963599fc8f4f3e25) C:\WINDOWS\system32\DRIVERS\disk.sys
22:14:13.0484 3540        Disk - ok
22:14:13.0484 3540        dmadmin - ok
22:14:13.0562 3540        dmboot          (0dcfc8395a99fecbb1ef771cec7fe4ea) C:\WINDOWS\system32\drivers\dmboot.sys
22:14:13.0765 3540        dmboot - ok
22:14:13.0812 3540        dmio            (53720ab12b48719d00e327da470a619a) C:\WINDOWS\system32\drivers\dmio.sys
22:14:13.0968 3540        dmio - ok
22:14:14.0015 3540        dmload          (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys
22:14:14.0156 3540        dmload - ok
22:14:14.0203 3540        dmserver        (25c83ffbba13b554eb6d59a9b2e2ee78) C:\WINDOWS\System32\dmserver.dll
22:14:14.0359 3540        dmserver - ok
22:14:14.0390 3540        DMusic          (8a208dfcf89792a484e76c40e5f50b45) C:\WINDOWS\system32\drivers\DMusic.sys
22:14:14.0546 3540        DMusic - ok
22:14:14.0578 3540        Dnscache        (407f3227ac618fd1ca54b335b083de07) C:\WINDOWS\System32\dnsrslvr.dll
22:14:14.0687 3540        Dnscache - ok
22:14:14.0734 3540        Dot3svc        (676e36c4ff5bcea1900f44182b9723e6) C:\WINDOWS\System32\dot3svc.dll
22:14:14.0906 3540        Dot3svc - ok
22:14:14.0937 3540        dpti2o          (40f3b93b4e5b0126f2f5c0a7a5e22660) C:\WINDOWS\system32\DRIVERS\dpti2o.sys
22:14:15.0109 3540        dpti2o - ok
22:14:15.0140 3540        drmkaud        (8f5fcff8e8848afac920905fbd9d33c8) C:\WINDOWS\system32\drivers\drmkaud.sys
22:14:15.0281 3540        drmkaud - ok
22:14:15.0312 3540        drvmcdb        (e814854e6b246ccf498874839ab64d77) C:\WINDOWS\system32\drivers\drvmcdb.sys
22:14:15.0343 3540        drvmcdb ( UnsignedFile.Multi.Generic ) - warning
22:14:15.0343 3540        drvmcdb - detected UnsignedFile.Multi.Generic (1)
22:14:15.0359 3540        drvnddm        (ee83a4ebae70bc93cf14879d062f548b) C:\WINDOWS\system32\drivers\drvnddm.sys
22:14:15.0375 3540        drvnddm ( UnsignedFile.Multi.Generic ) - warning
22:14:15.0375 3540        drvnddm - detected UnsignedFile.Multi.Generic (1)
22:14:15.0421 3540        E100B          (7d91dc6342248369f94d6eba0cf42e99) C:\WINDOWS\system32\DRIVERS\e100b325.sys
22:14:15.0453 3540        E100B - ok
22:14:15.0484 3540        eamon          (9309c5c9831203436e64cf2ae605c5d7) C:\WINDOWS\system32\DRIVERS\eamon.sys
22:14:16.0640 3540        eamon - ok
22:14:16.0671 3540        EapHost        (4e4f2fddab0a0736d7671134dcce91fb) C:\WINDOWS\System32\eapsvc.dll
22:14:16.0843 3540        EapHost - ok
22:14:16.0890 3540        ehdrv          (deff87f04ab5f6dd5edf2b80853bbe10) C:\WINDOWS\system32\DRIVERS\ehdrv.sys
22:14:16.0953 3540        ehdrv - ok
22:14:17.0156 3540        ekrn            (c7bb95cf9631aa401e4aded1648f6af7) C:\Programme\ESET\ESET NOD32 Antivirus\ekrn.exe
22:14:17.0203 3540        ekrn - ok
22:14:17.0234 3540        epfwtdir        (06c65ac0a703cf8eea4f284d901a1550) C:\WINDOWS\system32\DRIVERS\epfwtdir.sys
22:14:17.0250 3540        epfwtdir - ok
22:14:17.0281 3540        ERSvc          (877c18558d70587aa7823a1a308ac96b) C:\WINDOWS\System32\ersvc.dll
22:14:17.0437 3540        ERSvc - ok
22:14:17.0468 3540        Eventlog        (a3edbe9053889fb24ab22492472b39dc) C:\WINDOWS\system32\services.exe
22:14:17.0546 3540        Eventlog - ok
22:14:17.0593 3540        EventSystem    (af4f6b5739d18ca7972ab53e091cbc74) C:\WINDOWS\system32\es.dll
22:14:17.0640 3540        EventSystem - ok
22:14:17.0671 3540        Fastfat        (38d332a6d56af32635675f132548343e) C:\WINDOWS\system32\drivers\Fastfat.sys
22:14:17.0812 3540        Fastfat - ok
22:14:17.0890 3540        FastUserSwitchingCompatibility (2db7d303c36ddd055215052f118e8e75) C:\WINDOWS\System32\shsvcs.dll
22:14:17.0968 3540        FastUserSwitchingCompatibility - ok
22:14:18.0015 3540        Fax            (08b8b302af0d1b3b8543429bbac8f21f) C:\WINDOWS\system32\fxssvc.exe
22:14:18.0187 3540        Fax - ok
22:14:18.0203 3540        Fdc            (92cdd60b6730b9f50f6a1a0c1f8cdc81) C:\WINDOWS\system32\DRIVERS\fdc.sys
22:14:18.0343 3540        Fdc - ok
22:14:18.0421 3540        FDSLBASE        (7b6c1cd3bfecdc3f3bb023ce4dfb511b) C:\WINDOWS\system32\DRIVERS\fdslbase.sys
22:14:18.0500 3540        FDSLBASE - ok
22:14:18.0515 3540        Fips            (b0678a548587c5f1967b0d70bacad6c1) C:\WINDOWS\system32\drivers\Fips.sys
22:14:18.0687 3540        Fips - ok
22:14:18.0718 3540        Flpydisk        (9d27e7b80bfcdf1cdd9b555862d5e7f0) C:\WINDOWS\system32\DRIVERS\flpydisk.sys
22:14:18.0875 3540        Flpydisk - ok
22:14:18.0921 3540        FltMgr          (b2cf4b0786f8212cb92ed2b50c6db6b0) C:\WINDOWS\system32\drivers\fltmgr.sys
22:14:19.0078 3540        FltMgr - ok
22:14:19.0203 3540        FontCache3.0.0.0 (8ba7c024070f2b7fdd98ed8a4ba41789) C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
22:14:19.0218 3540        FontCache3.0.0.0 - ok
22:14:19.0250 3540        fssfltr        (c6ee3a87fe609d3e1db9dbd072a248de) C:\WINDOWS\system32\DRIVERS\fssfltr_tdi.sys
22:14:19.0265 3540        fssfltr - ok
22:14:19.0375 3540        fsssvc          (206ad9a89bf05dfa1621f1fc7b82592d) C:\Programme\Windows Live\Family Safety\fsssvc.exe
22:14:19.0437 3540        fsssvc - ok
22:14:19.0484 3540        Fs_Rec          (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS\system32\drivers\Fs_Rec.sys
22:14:19.0656 3540        Fs_Rec - ok
22:14:19.0687 3540        Ftdisk          (8f1955ce42e1484714b542f341647778) C:\WINDOWS\system32\DRIVERS\ftdisk.sys
22:14:19.0859 3540        Ftdisk - ok
22:14:19.0921 3540        GIVEIO          (77ebf3e9386daa51551af429052d88d0) C:\WINDOWS\system32\drivers\GIVEIO.sys
22:14:19.0953 3540        GIVEIO ( UnsignedFile.Multi.Generic ) - warning
22:14:19.0953 3540        GIVEIO - detected UnsignedFile.Multi.Generic (1)
22:14:19.0968 3540        Gpc            (0a02c63c8b144bd8c86b103dee7c86a2) C:\WINDOWS\system32\DRIVERS\msgpc.sys
22:14:20.0140 3540        Gpc - ok
22:14:20.0234 3540        gupdate1ca1de9760c74d6 (626a24ed1228580b9518c01930936df9) C:\Programme\Google\Update\GoogleUpdate.exe
22:14:20.0250 3540        gupdate1ca1de9760c74d6 - ok
22:14:20.0265 3540        gupdatem        (626a24ed1228580b9518c01930936df9) C:\Programme\Google\Update\GoogleUpdate.exe
22:14:20.0265 3540        gupdatem - ok
22:14:20.0312 3540        gusvc          (cc839e8d766cc31a7710c9f38cf3e375) C:\Programme\Google\Common\Google Updater\GoogleUpdaterService.exe
22:14:20.0328 3540        gusvc - ok
22:14:20.0406 3540        helpsvc        (cb66bf85bf599befd6c6a57c2e20357f) C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll
22:14:20.0562 3540        helpsvc - ok
22:14:20.0562 3540        HidServ - ok
22:14:20.0609 3540        HidUsb          (ccf82c5ec8a7326c3066de870c06daf1) C:\WINDOWS\system32\DRIVERS\hidusb.sys
22:14:20.0796 3540        HidUsb - ok
22:14:20.0859 3540        hkmsvc          (ed29f14101523a6e0e808107405d452c) C:\WINDOWS\System32\kmsvc.dll
22:14:21.0000 3540        hkmsvc - ok
22:14:21.0062 3540        hpn            (b028377dea0546a5fcfba928a8aefae0) C:\WINDOWS\system32\DRIVERS\hpn.sys
22:14:21.0218 3540        hpn - ok
22:14:21.0265 3540        HTTP            (f80a415ef82cd06ffaf0d971528ead38) C:\WINDOWS\system32\Drivers\HTTP.sys
22:14:21.0296 3540        HTTP - ok
22:14:21.0312 3540        HTTPFilter      (9e4adb854cebcfb81a4b36718feecd16) C:\WINDOWS\System32\w3ssl.dll
22:14:21.0468 3540        HTTPFilter - ok
22:14:21.0500 3540        i2omgmt        (9368670bd426ebea5e8b18a62416ec28) C:\WINDOWS\system32\drivers\i2omgmt.sys
22:14:21.0656 3540        i2omgmt - ok
22:14:21.0671 3540        i2omp          (f10863bf1ccc290babd1a09188ae49e0) C:\WINDOWS\system32\DRIVERS\i2omp.sys
22:14:21.0812 3540        i2omp - ok
22:14:21.0859 3540        i8042prt        (e283b97cfbeb86c1d86baed5f7846a92) C:\WINDOWS\system32\DRIVERS\i8042prt.sys
22:14:22.0015 3540        i8042prt - ok
22:14:22.0109 3540        ialm            (9a883c3c4d91292c0d09de7c728e781c) C:\WINDOWS\system32\DRIVERS\ialmnt5.sys
22:14:22.0234 3540        ialm - ok
22:14:22.0390 3540        IDriverT        (1cf03c69b49acb70c722df92755c0c8c) C:\Programme\Gemeinsame Dateien\InstallShield\Driver\11\Intel 32\IDriverT.exe
22:14:22.0406 3540        IDriverT ( UnsignedFile.Multi.Generic ) - warning
22:14:22.0406 3540        IDriverT - detected UnsignedFile.Multi.Generic (1)
22:14:22.0531 3540        idsvc          (c01ac32dc5c03076cfb852cb5da5229c) C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
22:14:22.0593 3540        idsvc - ok
22:14:22.0640 3540        IGDCTRL        (e28602c9e17b0ddce9f5deb3b3e2a635) C:\Programme\FRITZ!DSL\IGDCTRL.EXE
22:14:22.0656 3540        IGDCTRL - ok
22:14:22.0750 3540        Imapi          (083a052659f5310dd8b6a6cb05edcf8e) C:\WINDOWS\system32\DRIVERS\imapi.sys
22:14:22.0906 3540        Imapi - ok
22:14:22.0953 3540        ImapiService    (d4b413aa210c21e46aedd2ba5b68d38e) C:\WINDOWS\system32\imapi.exe
22:14:23.0109 3540        ImapiService - ok
22:14:23.0140 3540        ini910u        (4a40e045faee58631fd8d91afc620719) C:\WINDOWS\system32\DRIVERS\ini910u.sys
22:14:23.0312 3540        ini910u - ok
22:14:23.0359 3540        IntelIde        (69c4e3c9e67a1f103b94e14fdd5f3213) C:\WINDOWS\system32\DRIVERS\intelide.sys
22:14:23.0500 3540        IntelIde - ok
22:14:23.0562 3540        intelppm        (4c7d2750158ed6e7ad642d97bffae351) C:\WINDOWS\system32\DRIVERS\intelppm.sys
22:14:23.0718 3540        intelppm - ok
22:14:23.0750 3540        Ip6Fw          (3bb22519a194418d5fec05d800a19ad0) C:\WINDOWS\system32\drivers\ip6fw.sys
22:14:23.0921 3540        Ip6Fw - ok
22:14:23.0953 3540        IpFilterDriver  (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
22:14:24.0109 3540        IpFilterDriver - ok
22:14:24.0140 3540        IpInIp          (b87ab476dcf76e72010632b5550955f5) C:\WINDOWS\system32\DRIVERS\ipinip.sys
22:14:24.0265 3540        IpInIp - ok
22:14:24.0312 3540        IpNat          (cc748ea12c6effde940ee98098bf96bb) C:\WINDOWS\system32\DRIVERS\ipnat.sys
22:14:24.0468 3540        IpNat - ok
22:14:24.0500 3540        IPSec          (23c74d75e36e7158768dd63d92789a91) C:\WINDOWS\system32\DRIVERS\ipsec.sys
22:14:24.0656 3540        IPSec - ok
22:14:24.0687 3540        IRENUM          (c93c9ff7b04d772627a3646d89f7bf89) C:\WINDOWS\system32\DRIVERS\irenum.sys
22:14:24.0859 3540        IRENUM - ok
22:14:24.0906 3540        isapnp          (6dfb88f64135c525433e87648bda30de) C:\WINDOWS\system32\DRIVERS\isapnp.sys
22:14:25.0046 3540        isapnp - ok
22:14:25.0250 3540        JavaQuickStarterService (a38441ed570f190cc041a7be49488fa7) C:\Programme\Java\jre6\bin\jqs.exe
22:14:25.0281 3540        JavaQuickStarterService - ok
22:14:25.0296 3540        Kbdclass        (1704d8c4c8807b889e43c649b478a452) C:\WINDOWS\system32\DRIVERS\kbdclass.sys
22:14:25.0609 3540        Kbdclass - ok
22:14:25.0656 3540        kbdhid          (b6d6c117d771c98130497265f26d1882) C:\WINDOWS\system32\DRIVERS\kbdhid.sys
22:14:25.0906 3540        kbdhid - ok
22:14:26.0125 3540        kmixer          (692bcf44383d056aed41b045a323d378) C:\WINDOWS\system32\drivers\kmixer.sys
22:14:26.0328 3540        kmixer - ok
22:14:26.0406 3540        KSecDD          (b467646c54cc746128904e1654c750c1) C:\WINDOWS\system32\drivers\KSecDD.sys
22:14:26.0484 3540        KSecDD - ok
22:14:26.0515 3540        lanmanserver    (2bbdcb79900990f0716dfcb714e72de7) C:\WINDOWS\System32\srvsvc.dll
22:14:26.0562 3540        lanmanserver - ok
22:14:26.0656 3540        lanmanworkstation (1869b14b06b44b44af70548e1ea3303f) C:\WINDOWS\System32\wkssvc.dll
22:14:26.0765 3540        lanmanworkstation - ok
22:14:26.0781 3540        lbrtfdc - ok
22:14:26.0875 3540        LmHosts        (636714b7d43c8d0c80449123fd266920) C:\WINDOWS\System32\lmhsvc.dll
22:14:27.0015 3540        LmHosts - ok
22:14:27.0031 3540        Maplom - ok
22:14:27.0062 3540        MaplomL - ok
22:14:27.0125 3540        Messenger      (b7550a7107281d170ce85524b1488c98) C:\WINDOWS\System32\msgsvc.dll
22:14:27.0281 3540        Messenger - ok
22:14:27.0343 3540        mnmdd          (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS\system32\drivers\mnmdd.sys
22:14:27.0500 3540        mnmdd - ok
22:14:27.0531 3540        mnmsrvc        (c2f1d365fd96791b037ee504868065d3) C:\WINDOWS\system32\mnmsrvc.exe
22:14:27.0687 3540        mnmsrvc - ok
22:14:27.0718 3540        Modem          (6fb74ebd4ec57a6f1781de3852cc3362) C:\WINDOWS\system32\drivers\Modem.sys
22:14:27.0875 3540        Modem - ok
22:14:27.0890 3540        Mouclass        (b24ce8005deab254c0251e15cb71d802) C:\WINDOWS\system32\DRIVERS\mouclass.sys
22:14:28.0031 3540        Mouclass - ok
22:14:28.0078 3540        mouhid          (66a6f73c74e1791464160a7065ce711a) C:\WINDOWS\system32\DRIVERS\mouhid.sys
22:14:28.0218 3540        mouhid - ok
22:14:28.0250 3540        MountMgr        (a80b9a0bad1b73637dbcbba7df72d3fd) C:\WINDOWS\system32\drivers\MountMgr.sys
22:14:28.0406 3540        MountMgr - ok
22:14:28.0437 3540        MozillaMaintenance (96aa8ba23142cc8e2b30f3cae0c80254) C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe
22:14:28.0671 3540        MozillaMaintenance - ok
22:14:28.0781 3540        mraid35x        (3f4bb95e5a44f3be34824e8e7caf0737) C:\WINDOWS\system32\DRIVERS\mraid35x.sys
22:14:28.0953 3540        mraid35x - ok
22:14:29.0000 3540        MRxDAV          (11d42bb6206f33fbb3ba0288d3ef81bd) C:\WINDOWS\system32\DRIVERS\mrxdav.sys
22:14:29.0140 3540        MRxDAV - ok
22:14:29.0203 3540        MRxSmb          (7d304a5eb4344ebeeab53a2fe3ffb9f0) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
22:14:29.0296 3540        MRxSmb - ok
22:14:29.0343 3540        MSDTC          (35a031af38c55f92d28aa03ee9f12cc9) C:\WINDOWS\system32\msdtc.exe
22:14:29.0484 3540        MSDTC - ok
22:14:29.0531 3540        Msfs            (c941ea2454ba8350021d774daf0f1027) C:\WINDOWS\system32\drivers\Msfs.sys
22:14:29.0671 3540        Msfs - ok
22:14:29.0687 3540        MSIServer - ok
22:14:29.0750 3540        MSKSSRV        (d1575e71568f4d9e14ca56b7b0453bf1) C:\WINDOWS\system32\drivers\MSKSSRV.sys
22:14:29.0906 3540        MSKSSRV - ok
22:14:29.0921 3540        MSPCLOCK        (325bb26842fc7ccc1fcce2c457317f3e) C:\WINDOWS\system32\drivers\MSPCLOCK.sys
22:14:30.0062 3540        MSPCLOCK - ok
22:14:30.0078 3540        MSPQM          (bad59648ba099da4a17680b39730cb3d) C:\WINDOWS\system32\drivers\MSPQM.sys
22:14:30.0218 3540        MSPQM - ok
22:14:30.0250 3540        mssmbios        (af5f4f3f14a8ea2c26de30f7a1e17136) C:\WINDOWS\system32\DRIVERS\mssmbios.sys
22:14:30.0390 3540        mssmbios - ok
22:14:30.0484 3540        MSSQL$SQLEXPRESS - ok
22:14:30.0562 3540        MSSQLServerADHelper (1d89eb4e2a99cabd4e81225f4f4c4b25) C:\Programme\Microsoft SQL Server\90\Shared\sqladhlp90.exe
22:14:30.0593 3540        MSSQLServerADHelper - ok
22:14:30.0640 3540        Mup            (de6a75f5c270e756c5508d94b6cf68f5) C:\WINDOWS\system32\drivers\Mup.sys
22:14:30.0671 3540        Mup - ok
22:14:30.0750 3540        napagent        (46bb15ae2ac7d025d6d2567b876817bd) C:\WINDOWS\System32\qagentrt.dll
22:14:30.0906 3540        napagent - ok
22:14:30.0937 3540        NDIS            (1df7f42665c94b825322fae71721130d) C:\WINDOWS\system32\drivers\NDIS.sys
22:14:31.0093 3540        NDIS - ok
22:14:31.0109 3540        NdisTapi        (0109c4f3850dfbab279542515386ae22) C:\WINDOWS\system32\DRIVERS\ndistapi.sys
22:14:31.0140 3540        NdisTapi - ok
22:14:31.0171 3540        Ndisuio        (f927a4434c5028758a842943ef1a3849) C:\WINDOWS\system32\DRIVERS\ndisuio.sys
22:14:31.0328 3540        Ndisuio - ok
22:14:31.0375 3540        NdisWan        (edc1531a49c80614b2cfda43ca8659ab) C:\WINDOWS\system32\DRIVERS\ndiswan.sys
22:14:31.0593 3540        NdisWan - ok
22:14:31.0625 3540        NDProxy        (9282bd12dfb069d3889eb3fcc1000a9b) C:\WINDOWS\system32\drivers\NDProxy.sys
22:14:31.0671 3540        NDProxy - ok
22:14:31.0703 3540        NetBIOS        (5d81cf9a2f1a3a756b66cf684911cdf0) C:\WINDOWS\system32\DRIVERS\netbios.sys
22:14:31.0859 3540        NetBIOS - ok
22:14:31.0906 3540        NetBT          (74b2b2f5bea5e9a3dc021d685551bd3d) C:\WINDOWS\system32\DRIVERS\netbt.sys
22:14:32.0046 3540        NetBT - ok
22:14:32.0093 3540        NetDDE          (8ace4251bffd09ce75679fe940e996cc) C:\WINDOWS\system32\netdde.exe
22:14:32.0234 3540        NetDDE - ok
22:14:32.0250 3540        NetDDEdsdm      (8ace4251bffd09ce75679fe940e996cc) C:\WINDOWS\system32\netdde.exe
22:14:32.0406 3540        NetDDEdsdm - ok
22:14:32.0421 3540        NETFRITZ - ok
22:14:32.0453 3540        NETFWDSL - ok
22:14:32.0500 3540        Netlogon        (afb8261b56cba0d86aeb6df682af9785) C:\WINDOWS\system32\lsass.exe
22:14:32.0640 3540        Netlogon - ok
22:14:32.0671 3540        Netman          (e6d88f1f6745bf00b57e7855a2ab696c) C:\WINDOWS\System32\netman.dll
22:14:32.0828 3540        Netman - ok
22:14:32.0968 3540        NetSvc          (02d0798f376fcbd0210eda58476d0b1b) C:\Programme\Intel\PROSetWired\NCS\Sync\NetSvc.exe
22:14:32.0984 3540        NetSvc ( UnsignedFile.Multi.Generic ) - warning
22:14:32.0984 3540        NetSvc - detected UnsignedFile.Multi.Generic (1)
22:14:33.0093 3540        NetTcpPortSharing (d34612c5d02d026535b3095d620626ae) C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
22:14:33.0109 3540        NetTcpPortSharing - ok
22:14:33.0156 3540        Nla            (f1b67b6b0751ae0e6e964b02821206a3) C:\WINDOWS\System32\mswsock.dll
22:14:33.0187 3540        Nla - ok
22:14:33.0218 3540        Npfs            (3182d64ae053d6fb034f44b6def8034a) C:\WINDOWS\system32\drivers\Npfs.sys
22:14:33.0390 3540        Npfs - ok
22:14:33.0437 3540        Ntfs            (78a08dd6a8d65e697c18e1db01c5cdca) C:\WINDOWS\system32\drivers\Ntfs.sys
22:14:33.0640 3540        Ntfs - ok
22:14:33.0968 3540        NtLmSsp        (afb8261b56cba0d86aeb6df682af9785) C:\WINDOWS\system32\lsass.exe
22:14:34.0093 3540        NtLmSsp - ok
22:14:34.0171 3540        NtmsSvc        (56af4064996fa5bac9c449b1514b4770) C:\WINDOWS\system32\ntmssvc.dll
22:14:34.0343 3540        NtmsSvc - ok
22:14:34.0390 3540        Null            (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys
22:14:34.0546 3540        Null - ok
22:14:34.0656 3540        nv              (2b298519edbfcf451d43e0f1e8f1006d) C:\WINDOWS\system32\DRIVERS\nv4_mini.sys
22:14:34.0859 3540        nv - ok
22:14:34.0953 3540        NwlnkFlt        (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
22:14:35.0109 3540        NwlnkFlt - ok
22:14:35.0140 3540        NwlnkFwd        (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
22:14:35.0296 3540        NwlnkFwd - ok
22:14:35.0328 3540        Parport        (f84785660305b9b903fb3bca8ba29837) C:\WINDOWS\system32\DRIVERS\parport.sys
22:14:35.0468 3540        Parport - ok
22:14:35.0500 3540        PartMgr        (beb3ba25197665d82ec7065b724171c6) C:\WINDOWS\system32\drivers\PartMgr.sys
22:14:35.0640 3540        PartMgr - ok
22:14:35.0656 3540        ParVdm          (c2bf987829099a3eaa2ca6a0a90ecb4f) C:\WINDOWS\system32\drivers\ParVdm.sys
22:14:35.0828 3540        ParVdm - ok
22:14:35.0953 3540        PCD62X2 - ok
22:14:36.0000 3540        PCI            (387e8dedc343aa2d1efbc30580273acd) C:\WINDOWS\system32\DRIVERS\pci.sys
22:14:36.0156 3540        PCI - ok
22:14:36.0171 3540        PCIDump - ok
22:14:36.0218 3540        PCIIde          (59ba86d9a61cbcf4df8e598c331f5b82) C:\WINDOWS\system32\DRIVERS\pciide.sys
22:14:36.0359 3540        PCIIde - ok
22:14:36.0406 3540        Pcmcia          (a2a966b77d61847d61a3051df87c8c97) C:\WINDOWS\system32\drivers\Pcmcia.sys
22:14:36.0546 3540        Pcmcia - ok
22:14:36.0546 3540        PDCOMP - ok
22:14:36.0578 3540        PDFRAME - ok
22:14:36.0593 3540        PDRELI - ok
22:14:36.0625 3540        PDRFRAME - ok
22:14:36.0687 3540        PEDRV          (346d96d42790ad07458a11d317f4cd4b) C:\WINDOWS\system32\drivers\PEDRV.sys
22:14:36.0687 3540        PEDRV ( UnsignedFile.Multi.Generic ) - warning
22:14:36.0687 3540        PEDRV - detected UnsignedFile.Multi.Generic (1)
22:14:36.0734 3540        perc2          (6c14b9c19ba84f73d3a86dba11133101) C:\WINDOWS\system32\DRIVERS\perc2.sys
22:14:36.0890 3540        perc2 - ok
22:14:36.0921 3540        perc2hib        (f50f7c27f131afe7beba13e14a3b9416) C:\WINDOWS\system32\DRIVERS\perc2hib.sys
22:14:37.0078 3540        perc2hib - ok
22:14:37.0140 3540        PlugPlay        (a3edbe9053889fb24ab22492472b39dc) C:\WINDOWS\system32\services.exe
22:14:37.0187 3540        PlugPlay - ok
22:14:37.0218 3540        PolicyAgent    (afb8261b56cba0d86aeb6df682af9785) C:\WINDOWS\system32\lsass.exe
22:14:37.0375 3540        PolicyAgent - ok
22:14:37.0406 3540        PptpMiniport    (efeec01b1d3cf84f16ddd24d9d9d8f99) C:\WINDOWS\system32\DRIVERS\raspptp.sys
22:14:37.0593 3540        PptpMiniport - ok
22:14:37.0625 3540        prodrv06        (f2e3c8f1eb6ba0733e0a1f6373df7957) C:\WINDOWS\System32\drivers\prodrv06.sys
22:14:37.0656 3540        prodrv06 ( UnsignedFile.Multi.Generic ) - warning
22:14:37.0656 3540        prodrv06 - detected UnsignedFile.Multi.Generic (1)
22:14:37.0687 3540        prohlp02        (150307b52807d0c493c605ab913038ad) C:\WINDOWS\system32\drivers\prohlp02.sys
22:14:37.0703 3540        prohlp02 ( UnsignedFile.Multi.Generic ) - warning
22:14:37.0703 3540        prohlp02 - detected UnsignedFile.Multi.Generic (1)
22:14:37.0734 3540        prosync1        (f3471e7971ee62420451d958da635064) C:\WINDOWS\system32\drivers\prosync1.sys
22:14:37.0750 3540        prosync1 ( UnsignedFile.Multi.Generic ) - warning
22:14:37.0750 3540        prosync1 - detected UnsignedFile.Multi.Generic (1)
22:14:37.0765 3540        ProtectedStorage (afb8261b56cba0d86aeb6df682af9785) C:\WINDOWS\system32\lsass.exe
22:14:37.0921 3540        ProtectedStorage - ok
22:14:37.0953 3540        PSched          (09298ec810b07e5d582cb3a3f9255424) C:\WINDOWS\system32\DRIVERS\psched.sys
22:14:38.0093 3540        PSched - ok
22:14:38.0218 3540        Ptilink        (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys
22:14:38.0375 3540        Ptilink - ok
22:14:38.0609 3540        PxHelp20        (d86b4a68565e444d76457f14172c875a) C:\WINDOWS\system32\Drivers\PxHelp20.sys
22:14:38.0625 3540        PxHelp20 - ok
22:14:38.0812 3540        ql1080          (0a63fb54039eb5662433caba3b26dba7) C:\WINDOWS\system32\DRIVERS\ql1080.sys
22:14:39.0000 3540        ql1080 - ok
22:14:39.0125 3540        Ql10wnt        (6503449e1d43a0ff0201ad5cb1b8c706) C:\WINDOWS\system32\DRIVERS\ql10wnt.sys
22:14:39.0265 3540        Ql10wnt - ok
22:14:39.0359 3540        ql12160        (156ed0ef20c15114ca097a34a30d8a01) C:\WINDOWS\system32\DRIVERS\ql12160.sys
22:14:39.0515 3540        ql12160 - ok
22:14:39.0625 3540        ql1240          (70f016bebde6d29e864c1230a07cc5e6) C:\WINDOWS\system32\DRIVERS\ql1240.sys
22:14:39.0796 3540        ql1240 - ok
22:14:39.0953 3540        ql1280          (907f0aeea6bc451011611e732bd31fcf) C:\WINDOWS\system32\DRIVERS\ql1280.sys
22:14:40.0109 3540        ql1280 - ok
22:14:40.0187 3540        RasAcd          (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERS\rasacd.sys
22:14:40.0343 3540        RasAcd - ok
22:14:40.0531 3540        RasAuto        (f5ba6caccdb66c8f048e867563203246) C:\WINDOWS\System32\rasauto.dll
22:14:40.0687 3540        RasAuto - ok
22:14:40.0921 3540        Rasl2tp        (11b4a627bc9614b885c4969bfa5ff8a6) C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
22:14:41.0187 3540        Rasl2tp - ok
22:14:41.0687 3540        RasMan          (f9a7b66ea345726edb5862a46b1eccd5) C:\WINDOWS\System32\rasmans.dll
22:14:41.0890 3540        RasMan - ok
22:14:42.0015 3540        RasPppoe        (5bc962f2654137c9909c3d4603587dee) C:\WINDOWS\system32\DRIVERS\raspppoe.sys
22:14:42.0171 3540        RasPppoe - ok
22:14:42.0375 3540        Raspti          (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERS\raspti.sys
22:14:42.0562 3540        Raspti - ok
22:14:42.0890 3540        Rdbss          (7ad224ad1a1437fe28d89cf22b17780a) C:\WINDOWS\system32\DRIVERS\rdbss.sys
22:14:43.0093 3540        Rdbss - ok
22:14:43.0125 3540        RDPCDD          (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
22:14:43.0265 3540        RDPCDD - ok
22:14:43.0375 3540        rdpdr          (15cabd0f7c00c47c70124907916af3f1) C:\WINDOWS\system32\DRIVERS\rdpdr.sys
22:14:43.0531 3540        rdpdr - ok
22:14:43.0703 3540        RDPWD          (5b3055daa788bd688594d2f5981f2a83) C:\WINDOWS\system32\drivers\RDPWD.sys
22:14:43.0781 3540        RDPWD - ok
22:14:43.0828 3540        RDSessMgr      (263af18af0f3db99f574c95f284ccec9) C:\WINDOWS\system32\sessmgr.exe
22:14:43.0984 3540        RDSessMgr - ok
22:14:44.0015 3540        redbook        (ed761d453856f795a7fe056e42c36365) C:\WINDOWS\system32\DRIVERS\redbook.sys
22:14:44.0171 3540        redbook - ok
22:14:44.0218 3540        RemoteAccess    (0e97ec96d6942ceec2d188cc2eb69a01) C:\WINDOWS\System32\mprdim.dll
22:14:44.0359 3540        RemoteAccess - ok
22:14:44.0421 3540        ROOTMODEM      (d8b0b4ade32574b2d9c5cc34dc0dbbe7) C:\WINDOWS\system32\Drivers\RootMdm.sys
22:14:44.0578 3540        ROOTMODEM - ok
22:14:44.0593 3540        RpcLocator      (2a02e21867497df20b8fc95631395169) C:\WINDOWS\system32\locator.exe
22:14:44.0750 3540        RpcLocator - ok
22:14:44.0796 3540        RpcSs          (3127afbf2c1ed0ab14a1bbb7aaecb85b) C:\WINDOWS\System32\rpcss.dll
22:14:44.0859 3540        RpcSs - ok
22:14:44.0921 3540        RSVP            (4bdd71b4b521521499dfd14735c4f398) C:\WINDOWS\system32\rsvp.exe
22:14:45.0062 3540        RSVP - ok
22:14:45.0093 3540        rtl8139        (d507c1400284176573224903819ffda3) C:\WINDOWS\system32\DRIVERS\RTL8139.SYS
22:14:45.0218 3540        rtl8139 - ok
22:14:45.0265 3540        SamSs          (afb8261b56cba0d86aeb6df682af9785) C:\WINDOWS\system32\lsass.exe
22:14:45.0390 3540        SamSs - ok
22:14:45.0437 3540        SCardSvr        (dcec079fad95d36c8dd5cb6d779dfe32) C:\WINDOWS\System32\SCardSvr.exe
22:14:45.0578 3540        SCardSvr - ok
22:14:45.0625 3540        Schedule        (a050194a44d7fa8d7186ed2f4e8367ae) C:\WINDOWS\system32\schedsvc.dll
22:14:45.0781 3540        Schedule - ok
22:14:45.0921 3540        SeaPort        (4a5809a1d796e2675ac0332bf7b0cb11) C:\Programme\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
22:14:45.0953 3540        SeaPort - ok
22:14:45.0984 3540        Secdrv          (90a3935d05b494a5a39d37e71f09a677) C:\WINDOWS\system32\DRIVERS\secdrv.sys
22:14:46.0125 3540        Secdrv - ok
22:14:46.0171 3540        seclogon        (bee4cfd1d48c23b44cf4b974b0b79b2b) C:\WINDOWS\System32\seclogon.dll
22:14:46.0312 3540        seclogon - ok
22:14:46.0390 3540        senfilt        (b9c7617c1e8ab6fdff75d3c8dafcb4c8) C:\WINDOWS\system32\drivers\senfilt.sys
22:14:46.0468 3540        senfilt - ok
22:14:46.0500 3540        SENS            (2aac9b6ed9eddffb721d6452e34d67e3) C:\WINDOWS\system32\sens.dll
22:14:46.0640 3540        SENS - ok
22:14:46.0671 3540        serenum        (0f29512ccd6bead730039fb4bd2c85ce) C:\WINDOWS\system32\DRIVERS\serenum.sys
22:14:46.0828 3540        serenum - ok
22:14:46.0843 3540        Serial          (cf24eb4f0412c82bcd1f4f35a025e31d) C:\WINDOWS\system32\DRIVERS\serial.sys
22:14:46.0984 3540        Serial - ok
22:14:47.0046 3540        sfhlp01        (462aee0ea0481ea8bd45cac876a4ccc4) C:\WINDOWS\system32\drivers\sfhlp01.sys
22:14:47.0078 3540        sfhlp01 ( UnsignedFile.Multi.Generic ) - warning
22:14:47.0078 3540        sfhlp01 - detected UnsignedFile.Multi.Generic (1)
22:14:47.0125 3540        Sfloppy        (8e6b8c671615d126fdc553d1e2de5562) C:\WINDOWS\system32\DRIVERS\sfloppy.sys
22:14:47.0281 3540        Sfloppy - ok
22:14:47.0328 3540        SharedAccess    (cad058d5f8b889a87ca3eb3cf624dcef) C:\WINDOWS\System32\ipnathlp.dll
22:14:47.0515 3540        SharedAccess - ok
22:14:47.0546 3540        ShellHWDetection (2db7d303c36ddd055215052f118e8e75) C:\WINDOWS\System32\shsvcs.dll
22:14:47.0562 3540        ShellHWDetection - ok
22:14:47.0578 3540        Simbad - ok
22:14:47.0640 3540        sisagp          (6b33d0ebd30db32e27d1d78fe946a754) C:\WINDOWS\system32\DRIVERS\sisagp.sys
22:14:47.0796 3540        sisagp - ok
22:14:47.0875 3540        smwdm          (86c4d93b7b7818d066c52fdb03c6c921) C:\WINDOWS\system32\drivers\smwdm.sys
22:14:47.0906 3540        smwdm - ok
22:14:47.0968 3540        snapman        (be84408b1d205099af5cec8d6b045eb7) C:\WINDOWS\system32\DRIVERS\snapman.sys
22:14:47.0984 3540        snapman ( UnsignedFile.Multi.Generic ) - warning
22:14:47.0984 3540        snapman - detected UnsignedFile.Multi.Generic (1)
22:14:48.0015 3540        Sparrow        (83c0f71f86d3bdaf915685f3d568b20e) C:\WINDOWS\system32\DRIVERS\sparrow.sys
22:14:48.0078 3540        Sparrow - ok
22:14:48.0125 3540        splitter        (ab8b92451ecb048a4d1de7c3ffcb4a9f) C:\WINDOWS\system32\drivers\splitter.sys
22:14:48.0265 3540        splitter - ok
22:14:48.0312 3540        Spooler        (60784f891563fb1b767f70117fc2428f) C:\WINDOWS\system32\spoolsv.exe
22:14:48.0343 3540        Spooler - ok
22:14:48.0468 3540        SQLBrowser      (86ebd8b1f23e743aad21f4d5b4d40985) C:\Programme\Microsoft SQL Server\90\Shared\sqlbrowser.exe
22:14:48.0484 3540        SQLBrowser - ok
22:14:48.0515 3540        SQLWriter      (d89083c4eb02daca8f944b0e05e57f9d) C:\Programme\Microsoft SQL Server\90\Shared\sqlwriter.exe
22:14:48.0531 3540        SQLWriter - ok
22:14:48.0562 3540        sr              (50fa898f8c032796d3b1b9951bb5a90f) C:\WINDOWS\system32\DRIVERS\sr.sys
22:14:48.0703 3540        sr - ok
22:14:48.0812 3540        srservice      (fe77a85495065f3ad59c5c65b6c54182) C:\WINDOWS\system32\srsvc.dll
22:14:48.0953 3540        srservice - ok
22:14:49.0015 3540        Srv            (47ddfc2f003f7f9f0592c6874962a2e7) C:\WINDOWS\system32\DRIVERS\srv.sys
22:14:49.0093 3540        Srv - ok
22:14:49.0125 3540        sscdbhk5        (d7968049be0adbb6a57cee3960320911) C:\WINDOWS\system32\drivers\sscdbhk5.sys
22:14:49.0140 3540        sscdbhk5 ( UnsignedFile.Multi.Generic ) - warning
22:14:49.0140 3540        sscdbhk5 - detected UnsignedFile.Multi.Generic (1)
22:14:49.0171 3540        SSDPSRV        (4df5b05dfaec29e13e1ed6f6ee12c500) C:\WINDOWS\System32\ssdpsrv.dll
22:14:49.0328 3540        SSDPSRV - ok
22:14:49.0359 3540        SSHDRV51        (4217f2b8957c7e82e2a08d16bf4267cf) C:\WINDOWS\system32\drivers\SSHDRV51.sys
22:14:49.0390 3540        SSHDRV51 ( UnsignedFile.Multi.Generic ) - warning
22:14:49.0390 3540        SSHDRV51 - detected UnsignedFile.Multi.Generic (1)
22:14:49.0421 3540        SSHDRV62        (4be93e63c3da1a3a9e6aa82c362e172d) C:\WINDOWS\system32\drivers\SSHDRV62.sys
22:14:49.0468 3540        SSHDRV62 ( UnsignedFile.Multi.Generic ) - warning
22:14:49.0468 3540        SSHDRV62 - detected UnsignedFile.Multi.Generic (1)
22:14:49.0500 3540        SSHDRV76        (ef3504dd32e2ea222be0cbc9a0895f89) C:\WINDOWS\system32\drivers\SSHDRV76.sys
22:14:49.0500 3540        SSHDRV76 ( UnsignedFile.Multi.Generic ) - warning
22:14:49.0500 3540        SSHDRV76 - detected UnsignedFile.Multi.Generic (1)
22:14:49.0546 3540        ssrtln          (c3ffd65abfb6441e7606cf74f1155273) C:\WINDOWS\system32\drivers\ssrtln.sys
22:14:49.0562 3540        ssrtln ( UnsignedFile.Multi.Generic ) - warning
22:14:49.0562 3540        ssrtln - detected UnsignedFile.Multi.Generic (1)
22:14:49.0625 3540        stisvc          (bc2c5985611c5356b24aeb370953ded9) C:\WINDOWS\system32\wiaservc.dll
22:14:49.0812 3540        stisvc - ok
22:14:49.0875 3540        swenum          (3941d127aef12e93addf6fe6ee027e0f) C:\WINDOWS\system32\DRIVERS\swenum.sys
22:14:50.0031 3540        swenum - ok
22:14:50.0062 3540        swmidi          (8ce882bcc6cf8a62f2b2323d95cb3d01) C:\WINDOWS\system32\drivers\swmidi.sys
22:14:50.0187 3540        swmidi - ok
22:14:50.0218 3540        SwPrv - ok
22:14:50.0296 3540        symc810        (1ff3217614018630d0a6758630fc698c) C:\WINDOWS\system32\DRIVERS\symc810.sys
22:14:50.0437 3540        symc810 - ok
22:14:50.0453 3540        symc8xx        (070e001d95cf725186ef8b20335f933c) C:\WINDOWS\system32\DRIVERS\symc8xx.sys
22:14:50.0609 3540        symc8xx - ok
22:14:50.0640 3540        sym_hi          (80ac1c4abbe2df3b738bf15517a51f2c) C:\WINDOWS\system32\DRIVERS\sym_hi.sys
22:14:50.0781 3540        sym_hi - ok
22:14:50.0812 3540        sym_u3          (bf4fab949a382a8e105f46ebb4937058) C:\WINDOWS\system32\DRIVERS\sym_u3.sys
22:14:50.0984 3540        sym_u3 - ok
22:14:51.0000 3540        sysaudio        (8b83f3ed0f1688b4958f77cd6d2bf290) C:\WINDOWS\system32\drivers\sysaudio.sys
22:14:51.0156 3540        sysaudio - ok
22:14:51.0187 3540        SysmonLog      (2903fffa2523926d6219428040dce6b9) C:\WINDOWS\system32\smlogsvc.exe
22:14:51.0328 3540        SysmonLog - ok
22:14:51.0359 3540        TapiSrv        (05903cac4b98908d55ea5774775b382e) C:\WINDOWS\System32\tapisrv.dll
22:14:51.0515 3540        TapiSrv - ok
22:14:51.0562 3540        Tcpip          (9aefa14bd6b182d61e3119fa5f436d3d) C:\WINDOWS\system32\DRIVERS\tcpip.sys
22:14:51.0593 3540        Tcpip - ok
22:14:51.0640 3540        TDPIPE          (6471a66807f5e104e4885f5b67349397) C:\WINDOWS\system32\drivers\TDPIPE.sys
22:14:51.0781 3540        TDPIPE - ok
22:14:51.0843 3540        TDTCP          (c56b6d0402371cf3700eb322ef3aaf61) C:\WINDOWS\system32\drivers\TDTCP.sys
22:14:51.0984 3540        TDTCP - ok
22:14:52.0078 3540        TermDD          (88155247177638048422893737429d9e) C:\WINDOWS\system32\DRIVERS\termdd.sys
22:14:52.0234 3540        TermDD - ok
22:14:52.0296 3540        TermService    (b7de02c863d8f5a005a7bf375375a6a4) C:\WINDOWS\System32\termsrv.dll
22:14:52.0453 3540        TermService - ok
22:14:52.0515 3540        tfsnboio        (30698355067d07da5f9eb81132c9fdd6) C:\WINDOWS\system32\dla\tfsnboio.sys
22:14:52.0531 3540        tfsnboio ( UnsignedFile.Multi.Generic ) - warning
22:14:52.0531 3540        tfsnboio - detected UnsignedFile.Multi.Generic (1)
22:14:52.0562 3540        tfsncofs        (fb9d825bb4a2abdf24600f7505050e2b) C:\WINDOWS\system32\dla\tfsncofs.sys
22:14:52.0578 3540        tfsncofs ( UnsignedFile.Multi.Generic ) - warning
22:14:52.0578 3540        tfsncofs - detected UnsignedFile.Multi.Generic (1)
22:14:52.0593 3540        tfsndrct        (cafd8cca11aa1e8b6d2ea1ba8f70ec33) C:\WINDOWS\system32\dla\tfsndrct.sys
22:14:52.0609 3540        tfsndrct ( UnsignedFile.Multi.Generic ) - warning
22:14:52.0609 3540        tfsndrct - detected UnsignedFile.Multi.Generic (1)
22:14:52.0640 3540        tfsndres        (d4400188782aa797598958969c9657d4) C:\WINDOWS\system32\dla\tfsndres.sys
22:14:52.0656 3540        tfsndres ( UnsignedFile.Multi.Generic ) - warning
22:14:52.0656 3540        tfsndres - detected UnsignedFile.Multi.Generic (1)
22:14:52.0687 3540        tfsnifs        (b92f67a71cc8176f331b8aa8d9f555ad) C:\WINDOWS\system32\dla\tfsnifs.sys
22:14:52.0703 3540        tfsnifs ( UnsignedFile.Multi.Generic ) - warning
22:14:52.0703 3540        tfsnifs - detected UnsignedFile.Multi.Generic (1)
22:14:52.0734 3540        tfsnopio        (85985faa9a71e2358fcc2edefc2a3c5c) C:\WINDOWS\system32\dla\tfsnopio.sys
22:14:52.0765 3540        tfsnopio ( UnsignedFile.Multi.Generic ) - warning
22:14:52.0765 3540        tfsnopio - detected UnsignedFile.Multi.Generic (1)
22:14:52.0812 3540        tfsnpool        (bba22094f0f7c210567efdaf11f64495) C:\WINDOWS\system32\dla\tfsnpool.sys
22:14:52.0812 3540        tfsnpool ( UnsignedFile.Multi.Generic ) - warning
22:14:52.0812 3540        tfsnpool - detected UnsignedFile.Multi.Generic (1)
22:14:52.0843 3540        tfsnudf        (81340bef80b9811e98ce64611e67e3ff) C:\WINDOWS\system32\dla\tfsnudf.sys
22:14:52.0859 3540        tfsnudf ( UnsignedFile.Multi.Generic ) - warning
22:14:52.0859 3540        tfsnudf - detected UnsignedFile.Multi.Generic (1)
22:14:52.0875 3540        tfsnudfa        (c035fd116224ccc8325f384776b6a8bb) C:\WINDOWS\system32\dla\tfsnudfa.sys
22:14:52.0890 3540        tfsnudfa ( UnsignedFile.Multi.Generic ) - warning
22:14:52.0890 3540        tfsnudfa - detected UnsignedFile.Multi.Generic (1)
22:14:52.0921 3540        Themes          (2db7d303c36ddd055215052f118e8e75) C:\WINDOWS\System32\shsvcs.dll
22:14:52.0937 3540        Themes - ok
22:14:53.0015 3540        tifsfilter      (0a38016d71f794b8203c2aca2ae50318) C:\WINDOWS\system32\DRIVERS\tifsfilt.sys
22:14:53.0031 3540        tifsfilter ( UnsignedFile.Multi.Generic ) - warning
22:14:53.0031 3540        tifsfilter - detected UnsignedFile.Multi.Generic (1)
22:14:53.0062 3540        timounter      (72a519f77471038dd3e1a4e5637f6637) C:\WINDOWS\system32\DRIVERS\timntr.sys
22:14:53.0078 3540        timounter ( UnsignedFile.Multi.Generic ) - warning
22:14:53.0078 3540        timounter - detected UnsignedFile.Multi.Generic (1)
22:14:53.0125 3540        TosIde          (d213a9247dc347f305a2d4cc9b951487) C:\WINDOWS\system32\DRIVERS\toside.sys
22:14:53.0281 3540        TosIde - ok
22:14:53.0312 3540        TrkWks          (626504572b175867f30f3215c04b3e2f) C:\WINDOWS\system32\trkwks.dll
22:14:53.0453 3540        TrkWks - ok
22:14:53.0515 3540        Udfs            (5787b80c2e3c5e2f56c2a233d91fa2c9) C:\WINDOWS\system32\drivers\Udfs.sys
22:14:53.0671 3540        Udfs - ok
22:14:53.0703 3540        ultra          (1b698a51cd528d8da4ffaed66dfc51b9) C:\WINDOWS\system32\DRIVERS\ultra.sys
22:14:53.0796 3540        ultra - ok
22:14:53.0875 3540        Update          (402ddc88356b1bac0ee3dd1580c76a31) C:\WINDOWS\system32\DRIVERS\update.sys
22:14:54.0046 3540        Update - ok
22:14:54.0109 3540        upnphost        (1dfd8975d8c89214b98d9387c1125b49) C:\WINDOWS\System32\upnphost.dll
22:14:54.0265 3540        upnphost - ok
22:14:54.0312 3540        UPS            (9b11e6118958e63e1fef129466e2bda7) C:\WINDOWS\System32\ups.exe
22:14:54.0453 3540        UPS - ok
22:14:54.0468 3540        usbccgp        (173f317ce0db8e21322e71b7e60a27e8) C:\WINDOWS\system32\DRIVERS\usbccgp.sys
22:14:54.0625 3540        usbccgp - ok
22:14:54.0671 3540        usbehci        (65dcf09d0e37d4c6b11b5b0b76d470a7) C:\WINDOWS\system32\DRIVERS\usbehci.sys
22:14:54.0828 3540        usbehci - ok
22:14:54.0859 3540        usbhub          (1ab3cdde553b6e064d2e754efe20285c) C:\WINDOWS\system32\DRIVERS\usbhub.sys
22:14:55.0000 3540        usbhub - ok
22:14:55.0046 3540        usbprint        (a717c8721046828520c9edf31288fc00) C:\WINDOWS\system32\DRIVERS\usbprint.sys
22:14:55.0171 3540        usbprint - ok
22:14:55.0234 3540        usbscan        (a0b8cf9deb1184fbdd20784a58fa75d4) C:\WINDOWS\system32\DRIVERS\usbscan.sys
22:14:55.0390 3540        usbscan - ok
22:14:55.0437 3540        USBSTOR        (a32426d9b14a089eaa1d922e0c5801a9) C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
22:14:55.0593 3540        USBSTOR - ok
22:14:55.0609 3540        usbuhci        (26496f9dee2d787fc3e61ad54821ffe6) C:\WINDOWS\system32\DRIVERS\usbuhci.sys
22:14:55.0765 3540        usbuhci - ok
22:14:55.0843 3540        VgaSave        (0d3a8fafceacd8b7625cd549757a7df1) C:\WINDOWS\System32\drivers\vga.sys
22:14:56.0015 3540        VgaSave - ok
22:14:56.0062 3540        viaagp          (754292ce5848b3738281b4f3607eaef4) C:\WINDOWS\system32\DRIVERS\viaagp.sys
22:14:56.0187 3540        viaagp - ok
22:14:56.0203 3540        ViaIde          (3b3efcda263b8ac14fdf9cbdd0791b2e) C:\WINDOWS\system32\DRIVERS\viaide.sys
22:14:56.0343 3540        ViaIde - ok
22:14:56.0390 3540        VICHW11        (4d3d87d2e3d2fb59c7c75f025d8485c3) C:\WINDOWS\system32\drivers\VICHW11.sys
22:14:56.0406 3540        VICHW11 ( UnsignedFile.Multi.Generic ) - warning
22:14:56.0406 3540        VICHW11 - detected UnsignedFile.Multi.Generic (1)
22:14:56.0437 3540        VolSnap        (a5a712f4e880874a477af790b5186e1d) C:\WINDOWS\system32\drivers\VolSnap.sys
22:14:56.0578 3540        VolSnap - ok
22:14:56.0625 3540        VSS            (68f106273be29e7b7ef8266977268e78) C:\WINDOWS\System32\vssvc.exe
22:14:56.0781 3540        VSS - ok
22:14:56.0828 3540        w32time        (7b353059e665f8b7ad2bbeaef597cf45) C:\WINDOWS\system32\w32time.dll
22:14:57.0000 3540        w32time - ok
22:14:57.0031 3540        Wanarp          (e20b95baedb550f32dd489265c1da1f6) C:\WINDOWS\system32\DRIVERS\wanarp.sys
22:14:57.0171 3540        Wanarp - ok
22:14:57.0187 3540        WDICA - ok
22:14:57.0234 3540        wdmaud          (6768acf64b18196494413695f0c3a00f) C:\WINDOWS\system32\drivers\wdmaud.sys
22:14:57.0375 3540        wdmaud - ok
22:14:57.0406 3540        WebClient      (81727c9873e3905a2ffc1ebd07265002) C:\WINDOWS\System32\webclnt.dll
22:14:57.0546 3540        WebClient - ok
22:14:57.0593 3540        WinDriver6      (ef086e2ab4d899ad21ab96141cc20750) C:\WINDOWS\system32\drivers\windrvr6.sys
22:14:57.0609 3540        WinDriver6 ( UnsignedFile.Multi.Generic ) - warning
22:14:57.0609 3540        WinDriver6 - detected UnsignedFile.Multi.Generic (1)
22:14:57.0687 3540        winmgmt        (6f3f3973d97714cc5f906a19fe883729) C:\WINDOWS\system32\wbem\WMIsvc.dll
22:14:57.0843 3540        winmgmt - ok
22:14:57.0921 3540        WmdmPmSN        (c51b4a5c05a5475708e3c81c7765b71d) C:\WINDOWS\system32\MsPMSNSv.dll
22:14:58.0000 3540        WmdmPmSN - ok
22:14:58.0078 3540        WmiApSrv        (93908111ba57a6e60ec2fa2de202105c) C:\WINDOWS\system32\wbem\wmiapsrv.exe
22:14:58.0234 3540        WmiApSrv - ok
22:14:58.0343 3540        WMPNetworkSvc  (bf05650bb7df5e9ebdd25974e22403bb) C:\Programme\Windows Media Player\WMPNetwk.exe
22:14:58.0421 3540        WMPNetworkSvc - ok
22:14:58.0500 3540        WpdUsb          (cf4def1bf66f06964dc0d91844239104) C:\WINDOWS\system32\DRIVERS\wpdusb.sys
22:14:58.0531 3540        WpdUsb - ok
22:14:58.0562 3540        WS2IFSL        (6abe6e225adb5a751622a9cc3bc19ce8) C:\WINDOWS\System32\drivers\ws2ifsl.sys
22:14:58.0718 3540        WS2IFSL - ok
22:14:58.0750 3540        wscsvc          (300b3e84faf1a5c1f791c159ba28035d) C:\WINDOWS\system32\wscsvc.dll
22:14:58.0937 3540        wscsvc - ok
22:14:58.0968 3540        wuauserv        (7b4fe05202aa6bf9f4dfd0e6a0d8a085) C:\WINDOWS\system32\wuauserv.dll
22:14:59.0125 3540        wuauserv - ok
22:14:59.0156 3540        WudfPf          (f15feafffbb3644ccc80c5da584e6311) C:\WINDOWS\system32\DRIVERS\WudfPf.sys
22:14:59.0203 3540        WudfPf - ok
22:14:59.0281 3540        WudfRd          (28b524262bce6de1f7ef9f510ba3985b) C:\WINDOWS\system32\DRIVERS\wudfrd.sys
22:14:59.0328 3540        WudfRd - ok
22:14:59.0343 3540        WudfSvc        (05231c04253c5bc30b26cbaae680ed89) C:\WINDOWS\System32\WUDFSvc.dll
22:14:59.0375 3540        WudfSvc - ok
22:14:59.0421 3540        WZCSVC          (c4f109c005f6725162d2d12ca751e4a7) C:\WINDOWS\System32\wzcsvc.dll
22:14:59.0609 3540        WZCSVC - ok
22:14:59.0640 3540        xmlprov        (0ada34871a2e1cd2caafed1237a47750) C:\WINDOWS\System32\xmlprov.dll
22:14:59.0812 3540        xmlprov - ok
22:14:59.0890 3540        MBR (0x1B8)    (b16a2359f4962b0c622d81a1c1f4b703) \Device\Harddisk0\DR0
22:15:00.0515 3540        \Device\Harddisk0\DR0 - ok
22:15:00.0531 3540        Boot (0x1200)  (2eb41f71733fc1b167ba77b513b82ca3) \Device\Harddisk0\DR0\Partition0
22:15:00.0531 3540        \Device\Harddisk0\DR0\Partition0 - ok
22:15:00.0562 3540        Boot (0x1200)  (f8c0b12f66492d1cb39ab6bae85e468d) \Device\Harddisk0\DR0\Partition1
22:15:00.0562 3540        \Device\Harddisk0\DR0\Partition1 - ok
22:15:00.0593 3540        Boot (0x1200)  (348d3ab3d6d3273adcfec54ecabbe5f4) \Device\Harddisk0\DR0\Partition2
22:15:00.0593 3540        \Device\Harddisk0\DR0\Partition2 - ok
22:15:00.0640 3540        Boot (0x1200)  (9e7589c07169a1237fb1f050de979f86) \Device\Harddisk0\DR0\Partition3
22:15:00.0640 3540        \Device\Harddisk0\DR0\Partition3 - ok
22:15:00.0640 3540        ============================================================
22:15:00.0640 3540        Scan finished
22:15:00.0640 3540        ============================================================
22:15:00.0812 3588        Detected object count: 35
22:15:00.0812 3588        Actual detected object count: 35
22:19:16.0031 3588        ACEDRV05 ( UnsignedFile.Multi.Generic ) - skipped by user
22:19:16.0031 3588        ACEDRV05 ( UnsignedFile.Multi.Generic ) - User select action: Skip
22:19:16.0031 3588        ATI Smart ( UnsignedFile.Multi.Generic ) - skipped by user
22:19:16.0031 3588        ATI Smart ( UnsignedFile.Multi.Generic ) - User select action: Skip
22:19:16.0031 3588        avmaudio ( UnsignedFile.Multi.Generic ) - skipped by user
22:19:16.0031 3588        avmaudio ( UnsignedFile.Multi.Generic ) - User select action: Skip
22:19:16.0031 3588        avmaura ( UnsignedFile.Multi.Generic ) - skipped by user
22:19:16.0031 3588        avmaura ( UnsignedFile.Multi.Generic ) - User select action: Skip
22:19:16.0062 3588        AVMPORT ( UnsignedFile.Multi.Generic ) - skipped by user
22:19:16.0062 3588        AVMPORT ( UnsignedFile.Multi.Generic ) - User select action: Skip
22:19:16.0062 3588        AVMWAN ( UnsignedFile.Multi.Generic ) - skipped by user
22:19:16.0062 3588        AVMWAN ( UnsignedFile.Multi.Generic ) - User select action: Skip
22:19:16.0062 3588        drvmcdb ( UnsignedFile.Multi.Generic ) - skipped by user
22:19:16.0062 3588        drvmcdb ( UnsignedFile.Multi.Generic ) - User select action: Skip
22:19:16.0062 3588        drvnddm ( UnsignedFile.Multi.Generic ) - skipped by user
22:19:16.0062 3588        drvnddm ( UnsignedFile.Multi.Generic ) - User select action: Skip
22:19:16.0062 3588        GIVEIO ( UnsignedFile.Multi.Generic ) - skipped by user
22:19:16.0062 3588        GIVEIO ( UnsignedFile.Multi.Generic ) - User select action: Skip
22:19:16.0062 3588        IDriverT ( UnsignedFile.Multi.Generic ) - skipped by user
22:19:16.0062 3588        IDriverT ( UnsignedFile.Multi.Generic ) - User select action: Skip
22:19:16.0062 3588        NetSvc ( UnsignedFile.Multi.Generic ) - skipped by user
22:19:16.0062 3588        NetSvc ( UnsignedFile.Multi.Generic ) - User select action: Skip
22:19:16.0062 3588        PEDRV ( UnsignedFile.Multi.Generic ) - skipped by user
22:19:16.0062 3588        PEDRV ( UnsignedFile.Multi.Generic ) - User select action: Skip
22:19:16.0062 3588        prodrv06 ( UnsignedFile.Multi.Generic ) - skipped by user
22:19:16.0062 3588        prodrv06 ( UnsignedFile.Multi.Generic ) - User select action: Skip
22:19:16.0062 3588        prohlp02 ( UnsignedFile.Multi.Generic ) - skipped by user
22:19:16.0062 3588        prohlp02 ( UnsignedFile.Multi.Generic ) - User select action: Skip
22:19:16.0093 3588        prosync1 ( UnsignedFile.Multi.Generic ) - skipped by user
22:19:16.0093 3588        prosync1 ( UnsignedFile.Multi.Generic ) - User select action: Skip
22:19:16.0093 3588        sfhlp01 ( UnsignedFile.Multi.Generic ) - skipped by user
22:19:16.0093 3588        sfhlp01 ( UnsignedFile.Multi.Generic ) - User select action: Skip
22:19:16.0109 3588        snapman ( UnsignedFile.Multi.Generic ) - skipped by user
22:19:16.0109 3588        snapman ( UnsignedFile.Multi.Generic ) - User select action: Skip
22:19:16.0109 3588        sscdbhk5 ( UnsignedFile.Multi.Generic ) - skipped by user
22:19:16.0109 3588        sscdbhk5 ( UnsignedFile.Multi.Generic ) - User select action: Skip
22:19:16.0125 3588        SSHDRV51 ( UnsignedFile.Multi.Generic ) - skipped by user
22:19:16.0125 3588        SSHDRV51 ( UnsignedFile.Multi.Generic ) - User select action: Skip
22:19:16.0125 3588        SSHDRV62 ( UnsignedFile.Multi.Generic ) - skipped by user
22:19:16.0125 3588        SSHDRV62 ( UnsignedFile.Multi.Generic ) - User select action: Skip
22:19:16.0140 3588        SSHDRV76 ( UnsignedFile.Multi.Generic ) - skipped by user
22:19:16.0140 3588        SSHDRV76 ( UnsignedFile.Multi.Generic ) - User select action: Skip
22:19:16.0140 3588        ssrtln ( UnsignedFile.Multi.Generic ) - skipped by user
22:19:16.0140 3588        ssrtln ( UnsignedFile.Multi.Generic ) - User select action: Skip
22:19:16.0156 3588        tfsnboio ( UnsignedFile.Multi.Generic ) - skipped by user
22:19:16.0156 3588        tfsnboio ( UnsignedFile.Multi.Generic ) - User select action: Skip
22:19:16.0156 3588        tfsncofs ( UnsignedFile.Multi.Generic ) - skipped by user
22:19:16.0156 3588        tfsncofs ( UnsignedFile.Multi.Generic ) - User select action: Skip
22:19:16.0171 3588        tfsndrct ( UnsignedFile.Multi.Generic ) - skipped by user
22:19:16.0171 3588        tfsndrct ( UnsignedFile.Multi.Generic ) - User select action: Skip
22:19:16.0171 3588        tfsndres ( UnsignedFile.Multi.Generic ) - skipped by user
22:19:16.0171 3588        tfsndres ( UnsignedFile.Multi.Generic ) - User select action: Skip
22:19:16.0187 3588        tfsnifs ( UnsignedFile.Multi.Generic ) - skipped by user
22:19:16.0187 3588        tfsnifs ( UnsignedFile.Multi.Generic ) - User select action: Skip
22:19:16.0187 3588        tfsnopio ( UnsignedFile.Multi.Generic ) - skipped by user
22:19:16.0187 3588        tfsnopio ( UnsignedFile.Multi.Generic ) - User select action: Skip
22:19:16.0203 3588        tfsnpool ( UnsignedFile.Multi.Generic ) - skipped by user
22:19:16.0203 3588        tfsnpool ( UnsignedFile.Multi.Generic ) - User select action: Skip
22:19:16.0203 3588        tfsnudf ( UnsignedFile.Multi.Generic ) - skipped by user
22:19:16.0203 3588        tfsnudf ( UnsignedFile.Multi.Generic ) - User select action: Skip
22:19:16.0218 3588        tfsnudfa ( UnsignedFile.Multi.Generic ) - skipped by user
22:19:16.0218 3588        tfsnudfa ( UnsignedFile.Multi.Generic ) - User select action: Skip
22:19:16.0218 3588        tifsfilter ( UnsignedFile.Multi.Generic ) - skipped by user
22:19:16.0218 3588        tifsfilter ( UnsignedFile.Multi.Generic ) - User select action: Skip
22:19:16.0234 3588        timounter ( UnsignedFile.Multi.Generic ) - skipped by user
22:19:16.0234 3588        timounter ( UnsignedFile.Multi.Generic ) - User select action: Skip
22:19:16.0234 3588        VICHW11 ( UnsignedFile.Multi.Generic ) - skipped by user
22:19:16.0234 3588        VICHW11 ( UnsignedFile.Multi.Generic ) - User select action: Skip
22:19:16.0250 3588        WinDriver6 ( UnsignedFile.Multi.Generic ) - skipped by user
22:19:16.0250 3588        WinDriver6 ( UnsignedFile.Multi.Generic ) - User select action: Skip
22:19:36.0937 1124        Deinitialize success

cosinus 22.05.2012 20:36
Dann bitte jetzt CF ausführen:

ComboFix

Ein Leitfaden und Tutorium zur Nutzung von ComboFix
  • Schliesse alle Programme, vor allem dein Antivirenprogramm und andere Hintergrundwächter sowie deinen Internetbrowser.
  • Starte combofix.exe von deinem Desktop aus, bestätige die Warnmeldungen, führe die Updates durch (falls vorgeschlagen), installiere die Wiederherstellungskonsole (falls vorgeschlagen) und lass dein System durchsuchen.
    Vermeide es auch während Combofix läuft die Maus und Tastatur zu benutzen.
  • Im Anschluss öffnet sich automatisch eine combofix.txt, diesen Inhalt bitte kopieren ([Strg]a, [Strg]c) und in deinen Beitrag einfügen ([Strg]v). Die Datei findest du außerdem unter: C:\ComboFix.txt.
Wichtiger Hinweis:
Combofix darf ausschließlich ausgeführt werden, wenn ein Kompetenzler dies ausdrücklich empfohlen hat!

Es sollte nie auf eigene Initiative hin ausgeführt werden! Eine falsche Benutzung kann ernsthafte Computerprobleme nach sich ziehen und eine Bereinigung der Infektion noch erschweren.

Solltest du nach der Ausführung von Combofix Probleme beim Starten von Anwendungen haben und Meldungen erhalten wie

Zitat:
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
startest du Windows dann manuell neu und die Fehlermeldungen sollten nicht mehr auftauchen.

Atlanti 22.05.2012 22:51
Ich habe ComboFix ausgeführt und poste die Log-Datei:
[code]
Combofix Logfile:
Code:
ComboFix 12-05-22.02 - Andreas 22.05.2012  23:00:19.2.1 - x86
Microsoft Windows XP Home Edition  5.1.2600.3.1252.49.1031.18.510.285 [GMT 2:00]
ausgeführt von:: c:\dokumente und einstellungen\Andreas\Desktop\ComboFix.exe
AV: ESET NOD32 Antivirus 5.0 *Disabled/Updated* {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
.
.
((((((((((((((((((((((((((((((((((((  Weitere Löschungen  ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\dokumente und einstellungen\All Users\Anwendungsdaten\page
c:\dokumente und einstellungen\All Users\Anwendungsdaten\page\page.ico
c:\dokumente und einstellungen\All Users\Anwendungsdaten\page\page.URL
c:\dokumente und einstellungen\Andreas\WINDOWS
c:\dokumente und einstellungen\Markus\Desktop\Internet Explorer.lnk
c:\dokumente und einstellungen\Markus\WINDOWS
c:\dokumente und einstellungen\Sabine\WINDOWS
c:\dokumente und einstellungen\Silvia L\WINDOWS
c:\windows\_detmp.2
c:\windows\EventSystem.log
c:\windows\IsUn0407.exe
c:\windows\system32\avisynth.dll
c:\windows\system32\devil.dll
c:\windows\unin0407.exe
.
.
(((((((((((((((((((((((((((((((((((((((  Treiber/Dienste  )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Legacy_SSHNAS
.
.
(((((((((((((((((((((((  Dateien erstellt von 2012-04-22 bis 2012-05-22  ))))))))))))))))))))))))))))))
.
.
2012-05-21 17:15 . 2012-05-21 17:15        --------        d-sh--w-        c:\dokumente und einstellungen\Sabine\IETldCache
2012-05-20 21:44 . 2012-05-20 21:44        --------        d-----w-        C:\_OTL
2012-05-20 19:54 . 2012-05-20 19:54        73728        ----a-w-        c:\windows\system32\javacpl.cpl
2012-05-20 19:54 . 2012-05-20 19:54        476960        ----a-w-        c:\windows\system32\npdeployJava1.dll
2012-05-17 13:09 . 2012-05-17 13:09        --------        d-sh--w-        c:\dokumente und einstellungen\Andreas\IECompatCache
2012-05-17 13:02 . 2012-05-17 13:02        --------        d-sh--w-        c:\dokumente und einstellungen\Andreas\PrivacIE
2012-05-17 12:50 . 2012-05-17 12:50        419488        ----a-w-        c:\windows\system32\FlashPlayerApp.exe
2012-05-17 12:50 . 2012-05-17 12:50        70304        ----a-w-        c:\windows\system32\FlashPlayerCPLApp.cpl
2012-05-17 12:49 . 2012-05-17 12:49        --------        d-sh--w-        c:\dokumente und einstellungen\NetworkService\IETldCache
2012-05-17 12:49 . 2012-05-17 12:49        --------        d-sh--w-        c:\dokumente und einstellungen\Andreas\IETldCache
2012-05-17 11:46 . 2011-08-16 10:45        6144        ------w-        c:\windows\system32\dllcache\iecompat.dll
2012-05-17 11:33 . 2012-03-01 11:00        12800        ------w-        c:\windows\system32\dllcache\xpshims.dll
2012-05-17 11:33 . 2012-03-01 11:00        247808        ------w-        c:\windows\system32\dllcache\ieproxy.dll
2012-05-17 11:33 . 2012-03-01 11:00        743424        ------w-        c:\windows\system32\dllcache\iedvtool.dll
2012-05-17 11:19 . 2012-05-17 11:31        --------        dc----w-        c:\windows\ie8
2012-05-17 09:48 . 2011-11-03 15:28        387072        ------w-        c:\windows\system32\dllcache\qdvd.dll
2012-05-17 09:40 . 2010-09-18 06:52        954368        ------w-        c:\windows\system32\dllcache\mfc40.dll
2012-05-17 09:40 . 2010-09-18 06:52        953856        ------w-        c:\windows\system32\dllcache\mfc40u.dll
2012-05-17 09:40 . 2011-02-08 13:33        978944        ------w-        c:\windows\system32\dllcache\mfc42.dll
2012-05-17 09:39 . 2010-08-23 16:11        617472        ------w-        c:\windows\system32\dllcache\comctl32.dll
2012-05-17 09:39 . 2010-11-02 15:17        40960        ------w-        c:\windows\system32\dllcache\ndproxy.sys
2012-05-17 09:37 . 2011-04-21 13:37        105472        ------w-        c:\windows\system32\dllcache\mup.sys
2012-05-17 09:21 . 2012-01-09 16:20        139784        ------w-        c:\windows\system32\dllcache\rdpwd.sys
2012-05-17 09:19 . 2011-07-08 14:02        10496        ------w-        c:\windows\system32\dllcache\ndistapi.sys
2012-05-17 09:18 . 2012-01-11 19:06        3072        ------w-        c:\windows\system32\iacenc.dll
2012-05-17 09:18 . 2012-01-11 19:06        3072        ------w-        c:\windows\system32\dllcache\iacenc.dll
2012-05-17 09:13 . 2010-10-11 14:59        45568        ------w-        c:\windows\system32\dllcache\wab.exe
2012-05-15 19:40 . 2012-05-15 19:40        --------        d-----w-        c:\windows\l2schemas
2012-05-15 19:40 . 2012-05-15 19:40        --------        d-----w-        c:\windows\system32\de
2012-05-15 19:40 . 2012-05-15 19:40        --------        d-----w-        c:\windows\system32\bits
2012-05-15 19:28 . 2012-05-15 19:28        --------        d-----w-        c:\windows\EHome
2012-05-13 09:29 . 2012-05-13 09:29        --------        d-----w-        c:\dokumente und einstellungen\Administrator\Anwendungsdaten\Thunderbird
2012-05-13 09:29 . 2012-05-13 09:29        --------        d-----w-        c:\dokumente und einstellungen\Administrator\Lokale Einstellungen\Anwendungsdaten\Thunderbird
2012-05-12 21:38 . 2012-05-12 21:38        --------        d-----w-        c:\dokumente und einstellungen\Administrator\Anwendungsdaten\Malwarebytes
2012-05-12 21:38 . 2012-05-12 21:38        --------        d-----w-        c:\programme\Malwarebytes' Anti-Malware
2012-05-12 21:38 . 2012-04-04 13:56        22344        ----a-w-        c:\windows\system32\drivers\mbam.sys
2012-04-28 20:50 . 2012-04-28 20:50        --------        d-----w-        c:\programme\Mozilla Maintenance Service
2012-04-28 20:49 . 2012-04-28 20:49        129976        ----a-w-        c:\programme\Mozilla Firefox\maintenanceservice.exe
2012-04-28 20:49 . 2012-04-28 20:49        157352        ----a-w-        c:\programme\Mozilla Firefox\maintenanceservice_installer.exe
.
.
.
((((((((((((((((((((((((((((((((((((  Find3M Bericht  ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-05-20 19:54 . 2010-12-19 17:26        472864        ----a-w-        c:\windows\system32\deployJava1.dll
2012-04-11 13:51 . 2004-08-03 23:50        2071424        ----a-w-        c:\windows\system32\ntkrnlpa.exe
2012-04-11 13:51 . 2004-08-18 12:05        1862400        ----a-w-        c:\windows\system32\win32k.sys
2012-04-11 13:51 . 2004-08-18 12:05        2194944        ----a-w-        c:\windows\system32\ntoskrnl.exe
2012-03-01 11:00 . 2004-08-18 12:05        916992        ----a-w-        c:\windows\system32\wininet.dll
2012-03-01 11:00 . 2004-08-18 12:05        43520        ------w-        c:\windows\system32\licmgr10.dll
2012-03-01 11:00 . 2004-08-18 12:05        1469440        ------w-        c:\windows\system32\inetcpl.cpl
2012-03-01 01:15 . 2012-03-01 01:15        78336        ------w-        c:\windows\system32\ieencode.dll
2012-02-29 14:09 . 2004-08-18 12:05        177664        ----a-w-        c:\windows\system32\wintrust.dll
2012-02-29 14:09 . 2004-08-18 12:05        148480        ----a-w-        c:\windows\system32\imagehlp.dll
2012-02-29 12:17 . 2004-08-18 12:05        385024        ------w-        c:\windows\system32\html.iec
2009-02-10 11:07 . 2009-02-10 11:04        320        ----a-w-        c:\programme\AUTOEXEC.BAT
2012-04-28 20:49 . 2011-09-11 20:07        97208        ----a-w-        c:\programme\mozilla firefox\components\browsercomps.dll
.
.
((((((((((((((((((((((((((((  Autostartpunkte der Registrierung  ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"PhonostarAgent"="c:\programme\phonostar\ps_agent.exe" [2006-03-07 98304]
"PhonostarTimer"="c:\programme\phonostar\ps_timer.exe" [2006-03-07 151552]
"AVMUSBFernanschluss"="c:\dokumente und einstellungen\Andreas\Lokale Einstellungen\Apps\2.0\HZ72R5B8.EMX\XVPBD42E.DX6\frit..tion_8488884cfbcefd60_0002.0002_8541bf1f4a1c673d\AVMAutoStart.exe" [2010-12-11 147456]
"swg"="c:\programme\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-07-28 68856]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SoundMAXPnP"="c:\programme\Analog Devices\Core\smax4pnp.exe" [2004-10-14 1404928]
"UpdateManager"="c:\programme\Gemeinsame Dateien\Sonic\Update Manager\sgtray.exe" [2004-01-07 110592]
"dla"="c:\windows\system32\dla\tfswctrl.exe" [2004-12-06 127035]
"igfxtray"="c:\windows\system32\igfxtray.exe" [2005-09-20 94208]
"igfxhkcmd"="c:\windows\system32\hkcmd.exe" [2005-09-20 77824]
"igfxpers"="c:\windows\system32\igfxpers.exe" [2005-09-20 114688]
"EPSON Stylus DX4200 Series"="c:\windows\System32\spool\DRIVERS\W32X86\3\E_FATIAEE.EXE" [2005-03-07 98304]
"ATICCC"="c:\programme\ATI Technologies\ATI.ACE\cli.exe" [2006-01-02 45056]
"CanonMyPrinter"="c:\programme\Canon\MyPrinter\BJMyPrt.exe" [2010-03-24 2516296]
"CanonSolutionMenuEx"="c:\programme\Canon\Solution Menu EX\CNSEMAIN.EXE" [2010-04-02 1185112]
"egui"="c:\programme\ESET\ESET NOD32 Antivirus\egui.exe" [2011-09-22 3080264]
"Adobe Reader Speed Launcher"="c:\programme\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2012-03-27 37296]
"Adobe ARM"="c:\programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe" [2012-01-02 843712]
"SunJavaUpdateSched"="c:\programme\Gemeinsame Dateien\Java\Java Update\jusched.exe" [2012-01-18 254696]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
.
c:\dokumente und einstellungen\Sabine\Startmenü\Programme\Autostart\
FRITZ!dsl.lnk - C:\FritzDsl.exe [N/A]
.
c:\dokumente und einstellungen\Andreas\Startmenü\Programme\Autostart\
Office-Start.lnk - c:\programme\Microsoft Office\Office\OSA.EXE [1996-12-14 51984]
.
[HKLM\~\startupfolder\C:^Dokumente und Einstellungen^All Users^Startmenü^Programme^Autostart^Nikon Monitor.lnk]
path=c:\dokumente und einstellungen\All Users\Startmenü\Programme\Autostart\Nikon Monitor.lnk
backup=c:\windows\pss\Nikon Monitor.lnkCommon Startup
.
[HKLM\~\startupfolder\C:^Dokumente und Einstellungen^All Users^Startmenü^Programme^Autostart^phase6_18_erinnerung.lnk]
path=c:\dokumente und einstellungen\All Users\Startmenü\Programme\Autostart\phase6_18_erinnerung.lnk
backup=c:\windows\pss\phase6_18_erinnerung.lnkCommon Startup
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DVDLauncher]
2004-10-12 15:54        57344        ------w-        c:\programme\CyberLink\PowerDVD\DVDLauncher.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
2008-04-14 02:22        1695232        --sh--w-        c:\programme\Messenger\msmsgs.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
2001-07-09 08:50        155648        ----a-w-        c:\windows\system32\NeroCheck.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PCMService]
2004-04-11 19:15        290816        ------w-        c:\programme\Dell\Media Experience\PCMService.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
2007-07-28 21:00        68856        ----a-w-        c:\programme\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinampAgent]
2006-06-09 00:17        35328        ----a-w-        c:\programme\Winamp\winampa.exe
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Programme\\Veoh Networks\\VeohWebPlayer\\veohwebplayer.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Programme\\Windows Live\\Messenger\\wlcsdk.exe"=
"c:\\Programme\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Programme\\Windows Live\\Sync\\WindowsLiveSync.exe"=
"c:\\Programme\\FRITZ!DSL\\IGDCTRL.EXE"=
"c:\\Programme\\FRITZ!DSL\\FBOXUPD.EXE"=
"c:\\Dokumente und Einstellungen\\Silvia L\\Lokale Einstellungen\\Apps\\2.0\\OPPN2N80.RY9\\AYA3P9EE.ZQN\\frit..tion_8488884cfbcefd60_0002.0001_383382c5c60b72bd\\fritzbox-usb-fernanschluss.exe"=
"c:\\Dokumente und Einstellungen\\Sabine\\Lokale Einstellungen\\Apps\\2.0\\PJP7P1QR.PXO\\O6ZZM0JT.9QY\\frit..tion_8488884cfbcefd60_0002.0001_383382c5c60b72bd\\fritzbox-usb-fernanschluss.exe"=
"c:\\Programme\\Google\\Google Earth\\plugin\\geplugin.exe"=
"c:\\Dokumente und Einstellungen\\Andreas\\Lokale Einstellungen\\Apps\\2.0\\HZ72R5B8.EMX\\XVPBD42E.DX6\\frit..tion_8488884cfbcefd60_0002.0002_9409db79b3f040fd\\fritzbox-usb-fernanschluss.exe"=
"c:\\Dokumente und Einstellungen\\Sabine\\Lokale Einstellungen\\Apps\\2.0\\PJP7P1QR.PXO\\O6ZZM0JT.9QY\\frit..tion_8488884cfbcefd60_0002.0002_8541bf1f4a1c673d\\fritzbox-usb-fernanschluss.exe"=
"c:\\Dokumente und Einstellungen\\Silvia L\\Lokale Einstellungen\\Apps\\2.0\\OPPN2N80.RY9\\AYA3P9EE.ZQN\\frit..tion_8488884cfbcefd60_0002.0002_8541bf1f4a1c673d\\fritzbox-usb-fernanschluss.exe"=
"c:\\Dokumente und Einstellungen\\Andreas\\Lokale Einstellungen\\Apps\\2.0\\HZ72R5B8.EMX\\XVPBD42E.DX6\\frit..tion_8488884cfbcefd60_0002.0002_8541bf1f4a1c673d\\fritzbox-usb-fernanschluss.exe"=
"c:\\Programme\\Google\\Google Earth\\client\\googleearth.exe"=
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"2912:UDP"= 2912:UDP:Windows Media Format SDK (ps_olect.exe)
"2913:UDP"= 2913:UDP:Windows Media Format SDK (ps_olect.exe)
"2916:UDP"= 2916:UDP:Windows Media Format SDK (ps_olect.exe)
.
R1 ehdrv;ehdrv;c:\windows\system32\drivers\ehdrv.sys [04.08.2011 10:20 118104]
R1 epfwtdir;epfwtdir;c:\windows\system32\drivers\epfwtdir.sys [18.08.2008 14:27 103112]
R1 SSHDRV51;SSHDRV51;c:\windows\system32\drivers\SSHDRV51.sys [12.12.2007 22:07 21504]
R1 SSHDRV62;SSHDRV62;c:\windows\system32\drivers\SSHDRV62.sys [08.06.2005 19:54 108032]
R1 SSHDRV76;SSHDRV76;c:\windows\system32\drivers\SSHDRV76.sys [29.04.2006 18:41 53760]
R2 AVMPORT;AVMPORT;c:\windows\system32\drivers\avmport.sys [20.04.2005 22:55 59520]
R2 ekrn;ESET Service;c:\programme\Eset\ESET NOD32 Antivirus\ekrn.exe [22.09.2011 13:03 974944]
R2 IGDCTRL;AVM IGD CTRL Service;c:\programme\FRITZ!DSL\IGDCTRL.EXE [04.09.2007 11:14 87344]
R2 PEDRV;P&E Microcomputer System PCI Driver.;c:\windows\system32\drivers\pedrv.sys [03.08.2000 14:25 23296]
R2 VICHW11;P&E BDM Cable Driver II;c:\windows\system32\drivers\vichw11.sys [02.10.1998 10:20 5200]
R3 avmaudio;AVM Audio;c:\windows\system32\drivers\avmaudio.sys [11.11.2010 00:29 101248]
R3 avmaura;AVM USB-Fernanschluss;c:\windows\system32\drivers\avmaura.sys [21.02.2010 22:16 101248]
R3 AVMCOWAN;AVM ISDN CoNDIS WAN CAPI Treiber;c:\windows\system32\drivers\avmcowan.sys [08.06.2005 03:00 53248]
R3 AVMDSLPPPOE;AVM DSL PPPoE CAPI Treiber;c:\windows\system32\drivers\avmdsloe.sys [08.06.2005 03:00 45440]
R3 AVMNDSL;AVM DSL NDIS WAN CAPI Treiber;c:\windows\system32\drivers\avmndsl.sys [06.12.2001 02:00 38992]
S2 gupdate1ca1de9760c74d6;Google Update Service (gupdate1ca1de9760c74d6);c:\programme\Google\Update\GoogleUpdate.exe [15.08.2009 22:46 133104]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [17.05.2012 14:50 257696]
S3 AVMWAN;AVM NDIS WAN CAPI Treiber;c:\windows\system32\drivers\avmwan.sys [06.12.2001 02:00 29968]
S3 FDSLBASE;AVM FRITZ!Card DSL (WinXP/2000);c:\windows\system32\drivers\fdslbase.sys [19.04.2005 22:31 799488]
S3 gupdatem;Google Update-Dienst (gupdatem);c:\programme\Google\Update\GoogleUpdate.exe [15.08.2009 22:46 133104]
S3 MaplomL;MaplomL; [x]
S3 MozillaMaintenance;Mozilla Maintenance Service;c:\programme\Mozilla Maintenance Service\maintenanceservice.exe [28.04.2012 22:50 129976]
S3 NETFRITZ;AVM FRITZ!web PPP over ISDN;c:\windows\system32\DRIVERS\NETFRITZ.SYS --> c:\windows\system32\DRIVERS\NETFRITZ.SYS [?]
S3 NETFWDSL;AVM FRITZ!web DSL PPP;c:\windows\system32\DRIVERS\NETFWDSL.SYS --> c:\windows\system32\DRIVERS\NETFWDSL.SYS [?]
S3 PCD62X2;PCD62X2;\??\c:\dokume~1\Markus\LOKALE~1\Temp\PCD62X2.sys --> c:\dokume~1\Markus\LOKALE~1\Temp\PCD62X2.sys [?]
.
Inhalt des "geplante Tasks" Ordners
.
2012-05-22 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-05-17 12:50]
.
2012-05-22 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\programme\Google\Update\GoogleUpdate.exe [2009-08-15 20:46]
.
2012-05-22 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\programme\Google\Update\GoogleUpdate.exe [2009-08-15 20:46]
.
2005-04-08 c:\windows\Tasks\ISP-Anmeldungserinnerung 1.job
- c:\windows\system32\OOBE\oobebaln.exe [2004-08-18 02:22]
.
.
------- Zusätzlicher Suchlauf -------
.
uStart Page =
uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
mWindow Title = Arcor AG & Co. KG
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: In neuer Registerkarte im Hintergrund öffnen - c:\programme\Windows Live Toolbar\Components\de-de\msntabres.dll.mui/229?2b2a3019202741a8842d142413106c15
IE: In neuer Registerkarte im Vordergrund öffnen - c:\programme\Windows Live Toolbar\Components\de-de\msntabres.dll.mui/230?2b2a3019202741a8842d142413106c15
Trusted Zone: akamai.net\a248.e
Trusted Zone: bitdefender.com
Trusted Zone: netflame.cc\ssl-hints
TCP: DhcpNameServer = 192.168.178.1
DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} - hxxp://www.bitdefender.de/scan_de/scan8/oscan8.cab
DPF: {6CCE3920-3183-4B3D-808A-B12EB769DE12} - hxxp://www.commandondemand.com/eval/cod/cabs/cssweb.cab
FF - ProfilePath - c:\dokumente und einstellungen\Andreas\Anwendungsdaten\Mozilla\Firefox\Profiles\dipvdcel.default\
FF - prefs.js: browser.search.defaulturl -
FF - prefs.js: browser.startup.homepage - hxxp://www.heise.de/
FF - user.js: yahoo.homepage.dontask - true
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
HKLM-Run-Arcor Online - (no file)
AddRemove-ECMM Bayern A1 - c:\windows\unin0407.exe
AddRemove-Freescale USB_Lite by CMX V1 - h:\cmxusb~1\UNWISE.EXE
AddRemove-KnightsAndMerchants - c:\windows\unin0407.exe
AddRemove-Microsoft Interactive Training - c:\windows\IsUn0407.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, hxxp://www.gmer.net
Rootkit scan 2012-05-22 23:37
Windows 5.1.2600 Service Pack 3 NTFS
.
Scanne versteckte Prozesse...
.
Scanne versteckte Autostarteinträge...
.
Scanne versteckte Dateien...
.
Scan erfolgreich abgeschlossen
versteckte Dateien: 0
.
**************************************************************************
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_USERS\S-1-5-21-2402686319-3283966082-1766705785-1006\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
"??"=hex:c8,43,6c,d3,d7,93,53,42,ed,8e,fa,be,aa,ce,e4,97,b2,b3,72,3f,bc,69,c7,
  e3,bd,ec,44,a2,a0,9b,95,77,e4,aa,36,91,02,9c,45,f2,72,27,68,bb,e1,d1,75,83,\
"??"=hex:f9,6e,24,31,32,a3,23,9a,02,54,ea,f4,22,a7,19,32
.
[HKEY_USERS\S-1-5-21-2402686319-3283966082-1766705785-1006\Software\SecuROM\License information*]
"datasecu"=hex:31,10,5f,c0,5e,85,61,97,be,c7,1e,5c,38,ba,5d,38,c3,40,7d,98,19,
  c3,49,59,5a,07,4a,ad,c8,29,4c,24,d3,81,15,22,74,77,a2,da,10,3a,c0,10,dd,7a,\
"rkeysecu"=hex:88,4c,6b,3e,e6,77,54,7e,6e,47,ec,dd,1e,12,43,f8
.
--------------------- Durch laufende Prozesse gestartete DLLs ---------------------
.
- - - - - - - > 'winlogon.exe'(840)
c:\windows\system32\Ati2evxx.dll
.
- - - - - - - > 'explorer.exe'(2868)
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\windows\system32\Ati2evxx.exe
c:\windows\system32\Ati2evxx.exe
c:\programme\Java\jre6\bin\jqs.exe
c:\programme\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe
c:\programme\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
c:\programme\Microsoft SQL Server\90\Shared\sqlbrowser.exe
c:\programme\Microsoft SQL Server\90\Shared\sqlwriter.exe
c:\windows\system32\wbem\wmiapsrv.exe
c:\windows\Microsoft.NET\Framework\v2.0.50727\dfsvc.exe
c:\windows\system32\wscntfy.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2012-05-22  23:45:31 - PC wurde neu gestartet
ComboFix-quarantined-files.txt  2012-05-22 21:45
ComboFix2.txt  2009-04-04 15:30
.
Vor Suchlauf: 3.972.837.376 Bytes frei
Nach Suchlauf: 4.140.662.784 Bytes frei
.
- - End Of File - - 4E603F37DB69964549EFE7D2A35C258B
--- --- ---

cosinus 23.05.2012 09:36
Bitte nun Logs mit GMER und OSAM erstellen und posten.
GMER stürzt häufiger ab, wenn das Tool auch beim 2. Mal nicht will, lass es einfach weg und führ nur OSAM aus - die Online-Abfrage durch OSAM bitte überspringen.
Bei OSAM bitte darauf auch achten, dass Du das Log auch als *.log und nicht *.html oder so abspeicherst.

Hinweis: Zum Entpacken von OSAM bitte WinRAR oder 7zip verwenden! Stell auch unbedingt den Virenscanner ab, besonders der Scanner von McAfee meldet oft einen Fehalarm in OSAM!

Downloade dir bitte aswMBR.exe und speichere die Datei auf deinem Desktop.
  • Starte die aswMBR.exe - (aswMBR.exe Anleitung)
    Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten".
  • Das Tool wird dich fragen, ob Du mit der aktuellen Virendefinition von AVAST! dein System scannen willst. Beantworte diese Frage bitte mit Ja. (Sollte deine Firewall fragen, bitte den Zugriff auf das Internet zulassen )
    Der Download der Definitionen kann je nach Verbindung eine Weile dauern.
  • Klicke auf Scan.
  • Warte bitte bis Scan finished successfully im DOS-Fenster steht.
  • Drücke auf Save Log und speichere diese auf dem Desktop.
Poste mir die aswMBR.txt in deiner nächsten Antwort.

Wichtig: Drücke keinesfalls einen der Fix Buttons ohne Anweisung

Hinweis: Sollte der Scan Button ausgeblendet sein, schließe das Tool und starte es erneut. Sollte der Scan abbrechen und das Programm abstürzen, dann teile mir das mit und wähle unter AV Scan die Einstellung (none).



Noch ein Hinweis: Sollte aswMBR abstürzen und es kommt eine Meldung wie "aswMBR.exe funktioniert nicht mehr, dann mach Folgendes:
Starte aswMBR neu, wähle unten links im Drop-Down-Menü (unten links im Fenster von aswMBR) bei "AV scan" (none) aus und klick nochmal auf den Scan-Button.

Atlanti 25.05.2012 23:22
Hi Arne,
ich habe alle drei Scans ausgeführt und poste die Logs.
Gmer
[code]
GMER Logfile:
Code:
GMER 1.0.15.15641 - hxxp://www.gmer.net
Rootkit scan 2012-05-25 06:54:44
Windows 5.1.2600 Service Pack 3 Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-3 WDC_WD1600JB-75GVA0 rev.08.02D08
Running: 29ovvv08.exe; Driver: C:\DOKUME~1\Andreas\LOKALE~1\Temp\awtdypob.sys


---- Kernel code sections - GMER 1.0.15 ----

init            C:\WINDOWS\system32\drivers\senfilt.sys                                                          entry point in "init" section [0xF7B55F80]
.text          C:\WINDOWS\system32\drivers\SSHDRV76.sys                                                          section is writeable [0xEF21E000, 0x16204, 0xE8000020]
.pklstb        C:\WINDOWS\system32\drivers\SSHDRV76.sys                                                          entry point in ".pklstb" section [0xEF23C000]
.relo2          C:\WINDOWS\system32\drivers\SSHDRV76.sys                                                          unknown last section [0xEF24C000, 0x86, 0x42000040]
.text          C:\WINDOWS\system32\drivers\ACEDRV05.sys                                                          section is writeable [0xEECEF000, 0x30A4A, 0xE8000020]
.pklstb        C:\WINDOWS\system32\drivers\ACEDRV05.sys                                                          entry point in ".pklstb" section [0xEED31000]
.relo2          C:\WINDOWS\system32\drivers\ACEDRV05.sys                                                          unknown last section [0xEED4C000, 0x8E, 0x42000040]
init            C:\WINDOWS\System32\Drivers\PEDRV.SYS                                                            entry point in "init" section [0xEE955E00]

---- User code sections - GMER 1.0.15 ----

.text          C:\Programme\Mozilla Thunderbird\thunderbird.exe[1008] ntdll.dll!LdrLoadDll                      7C92632D 5 Bytes  JMP 1000CE88 C:\Programme\Mozilla Thunderbird\xul.dll (Mozilla Foundation)
.text          C:\Programme\Mozilla Thunderbird\thunderbird.exe[1008] kernel32.dll!VirtualAlloc                  7C809AF1 5 Bytes  JMP 10980BEA C:\Programme\Mozilla Thunderbird\xul.dll (Mozilla Foundation)
.text          C:\Programme\Mozilla Thunderbird\thunderbird.exe[1008] kernel32.dll!MapViewOfFile                7C80B9A5 5 Bytes  JMP 10980C30 C:\Programme\Mozilla Thunderbird\xul.dll (Mozilla Foundation)
.text          C:\Programme\Mozilla Thunderbird\thunderbird.exe[1008] GDI32.dll!CreateDIBSection                77EF9E19 5 Bytes  JMP 10980C57 C:\Programme\Mozilla Thunderbird\xul.dll (Mozilla Foundation)
.text          C:\Programme\ESET\ESET NOD32 Antivirus\ekrn.exe[1908] kernel32.dll!SetUnhandledExceptionFilter    7C84495D 4 Bytes  [C2, 04, 00, 00]

---- Devices - GMER 1.0.15 ----

AttachedDevice  \FileSystem\Ntfs \Ntfs                                                                            eamon.sys (Amon monitor/ESET)
AttachedDevice  \Driver\Tcpip \Device\Tcp                                                                        epfwtdir.sys (ESET Antivirus Network Redirector/ESET)
AttachedDevice  \Driver\Tcpip \Device\Tcp                                                                        fssfltr_tdi.sys (Family Safety Filter Driver (TDI)/Microsoft Corporation)

Device          \Driver\prodrv06 \Device\ProDrv06                                                                E1D7CC30

AttachedDevice  \Driver\Ftdisk \Device\HarddiskVolume1                                                            snapman.sys (Acronis Snapshot API/Acronis)
AttachedDevice  \Driver\Ftdisk \Device\HarddiskVolume2                                                            snapman.sys (Acronis Snapshot API/Acronis)

Device          \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-3                                                      prosync1.sys (StarForce Protection Synchronization Driver/Protection Technology)
Device          \Driver\atapi \Device\Ide\IdePort0                                                                prosync1.sys (StarForce Protection Synchronization Driver/Protection Technology)
Device          \Driver\atapi \Device\Ide\IdePort1                                                                prosync1.sys (StarForce Protection Synchronization Driver/Protection Technology)
Device          \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-e                                                      prosync1.sys (StarForce Protection Synchronization Driver/Protection Technology)

AttachedDevice  \Driver\Ftdisk \Device\HarddiskVolume3                                                            snapman.sys (Acronis Snapshot API/Acronis)
AttachedDevice  \Driver\Ftdisk \Device\HarddiskVolume4                                                            snapman.sys (Acronis Snapshot API/Acronis)
AttachedDevice  \Driver\Ftdisk \Device\HarddiskVolume5                                                            snapman.sys (Acronis Snapshot API/Acronis)
AttachedDevice  \Driver\Ftdisk \Device\HarddiskVolume6                                                            snapman.sys (Acronis Snapshot API/Acronis)

Device          \Driver\prohlp02 \Device\ProHlp02                                                                E17F5498
Device          \FileSystem\Fastfat \Fat                                                                          ED82CD20

AttachedDevice  \FileSystem\Fastfat \Fat                                                                          eamon.sys (Amon monitor/ESET)

Device          \FileSystem\Fs_Rec \FileSystem\UdfsCdRomRecognizer                                                tfsnifs.sys (Drive Letter Access Component/Sonic Solutions)
Device          \FileSystem\Fs_Rec \FileSystem\FatCdRomRecognizer                                                tfsnifs.sys (Drive Letter Access Component/Sonic Solutions)
Device          \FileSystem\Fs_Rec \FileSystem\CdfsRecognizer                                                    tfsnifs.sys (Drive Letter Access Component/Sonic Solutions)
Device          \FileSystem\Fs_Rec \FileSystem\FatDiskRecognizer                                                  tfsnifs.sys (Drive Letter Access Component/Sonic Solutions)
Device          \FileSystem\Fs_Rec \FileSystem\UdfsDiskRecognizer                                                tfsnifs.sys (Drive Letter Access Component/Sonic Solutions)
Device          \FileSystem\Cdfs \Cdfs                                                                            tfsnifs.sys (Drive Letter Access Component/Sonic Solutions)

---- Registry - GMER 1.0.15 ----

Reg            HKLM\SOFTWARE\Classes\CLSID\{A6392B2E-EC0C-02DF-5DD5-C85D492E0AA6}\InprocServer32@                C:\WINDOWS\system32\sbe.dll
Reg            HKLM\SOFTWARE\Classes\CLSID\{A6392B2E-EC0C-02DF-5DD5-C85D492E0AA6}\InprocServer32@ThreadingModel  Both

---- EOF - GMER 1.0.15 ----
--- --- ---


OSAM
Code:
OSAM Logfile:

       
Code:

       
Report of OSAM: Autorun Manager v5.0.11926.0
hxxp://www.online-solutions.ru/en/
Saved at 22:23:02 on 25.05.2012

OS: Windows XP Home Edition Service Pack 3 (Build 2600)
Default Browser: Mozilla Corporation Firefox 12.0

Scanner Settings
[x] Rootkits detection (hidden registry)
[x] Rootkits detection (hidden files)
[x] Retrieve files information
[x] Check Microsoft signatures

Filters
[ ] Trusted entries
[ ] Empty entries
[x] Hidden registry entries (rootkit activity)
[x] Exclusively opened files
[x] Not found files
[x] Files without detailed information
[x] Existing files
[ ] Non-startable services
[ ] Non-startable drivers
[x] Active entries
[x] Disabled entries


[Common]
-----( %SystemRoot%\Tasks )-----
"GoogleUpdateTaskMachineCore.job" - "Google Inc." - C:\Programme\Google\Update\GoogleUpdate.exe
"GoogleUpdateTaskMachineUA.job" - "Google Inc." - C:\Programme\Google\Update\GoogleUpdate.exe
"Adobe Flash Player Updater.job" - "Adobe Systems Incorporated" - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe

[Control Panel Objects]
-----( %SystemRoot%\system32 )-----
"FlashPlayerCPLApp.cpl" - "Adobe Systems Incorporated" - C:\WINDOWS\system32\FlashPlayerCPLApp.cpl
"infocardcpl.cpl" - "Microsoft Corporation" - C:\WINDOWS\system32\infocardcpl.cpl
"javacpl.cpl" - "Sun Microsystems, Inc." - C:\WINDOWS\system32\javacpl.cpl
"PRApplet.cpl" - "Intel(R) Corporation" - C:\WINDOWS\system32\PRApplet.cpl

[Drivers]
-----( HKLM\SYSTEM\CurrentControlSet\Services )-----
"ACEDRV05" (ACEDRV05) - "Protect Software GmbH" - C:\WINDOWS\system32\drivers\ACEDRV05.sys
"Acronis Snapshots Manager" (snapman) - "Acronis" - C:\WINDOWS\System32\DRIVERS\snapman.sys
"Acronis TrueImage Backup Archive Explorer" (timounter) - "Acronis" - C:\WINDOWS\System32\DRIVERS\timntr.sys
"Acronis TrueImage FS Filter" (tifsfilter) - "Acronis" - C:\WINDOWS\System32\DRIVERS\tifsfilt.sys
"AVM Audio" (avmaudio) - "AVM Berlin" - C:\WINDOWS\System32\DRIVERS\avmaudio.sys
"AVM FRITZ!web DSL PPP" (NETFWDSL) - ? - C:\WINDOWS\System32\DRIVERS\NETFWDSL.SYS  (File not found)
"AVM FRITZ!web PPP over ISDN" (NETFRITZ) - ? - C:\WINDOWS\System32\DRIVERS\NETFRITZ.SYS  (File not found)
"AVM NDIS WAN CAPI Treiber" (AVMWAN) - "AVM Berlin" - C:\WINDOWS\System32\DRIVERS\avmwan.sys
"AVM USB-Fernanschluss" (avmaura) - "AVM Berlin" - C:\WINDOWS\System32\DRIVERS\avmaura.sys
"AVMPORT" (AVMPORT) - "AVM Berlin" - C:\WINDOWS\System32\drivers\avmport.sys
"catchme" (catchme) - ? - C:\ComboFix\catchme.sys  (File not found)
"Changer" (Changer) - ? - C:\WINDOWS\system32\drivers\Changer.sys  (File not found)
"drvmcdb" (drvmcdb) - "Sonic Solutions" - C:\WINDOWS\System32\drivers\drvmcdb.sys
"drvnddm" (drvnddm) - "Sonic Solutions" - C:\WINDOWS\System32\drivers\drvnddm.sys
"ehdrv" (ehdrv) - "ESET" - C:\WINDOWS\System32\DRIVERS\ehdrv.sys
"FssFltr" (fssfltr) - "Microsoft Corporation" - C:\WINDOWS\System32\DRIVERS\fssfltr_tdi.sys
"lbrtfdc" (lbrtfdc) - ? - C:\WINDOWS\system32\drivers\lbrtfdc.sys  (File not found)
"Maplom" (Maplom) - ? - C:\WINDOWS\system32\drivers\Maplom.sys  (File not found)
"MaplomL" (MaplomL) - ? - C:\WINDOWS\system32\drivers\MaplomL.sys  (File not found)
"P&E BDM Cable Driver I" (GIVEIO) - ? - C:\WINDOWS\system32\drivers\GIVEIO.sys  (File found, but it contains no detailed information)
"P&E BDM Cable Driver II" (VICHW11) - ? - C:\WINDOWS\system32\drivers\VICHW11.sys  (File found, but it contains no detailed information)
"P&E Microcomputer System PCI Driver." (PEDRV) - ? - C:\WINDOWS\system32\drivers\PEDRV.sys  (File found, but it contains no detailed information)
"PCD62X2" (PCD62X2) - ? - C:\DOKUME~1\Markus\LOKALE~1\Temp\PCD62X2.sys  (File not found)
"PCIDump" (PCIDump) - ? - C:\WINDOWS\system32\drivers\PCIDump.sys  (File not found)
"PDCOMP" (PDCOMP) - ? - C:\WINDOWS\system32\drivers\PDCOMP.sys  (File not found)
"PDFRAME" (PDFRAME) - ? - C:\WINDOWS\system32\drivers\PDFRAME.sys  (File not found)
"PDRELI" (PDRELI) - ? - C:\WINDOWS\system32\drivers\PDRELI.sys  (File not found)
"PDRFRAME" (PDRFRAME) - ? - C:\WINDOWS\system32\drivers\PDRFRAME.sys  (File not found)
"PxHelp20" (PxHelp20) - "Sonic Solutions" - C:\WINDOWS\System32\Drivers\PxHelp20.sys
"sscdbhk5" (sscdbhk5) - "Sonic Solutions" - C:\WINDOWS\System32\drivers\sscdbhk5.sys
"SSHDRV51" (SSHDRV51) - ? - C:\WINDOWS\system32\drivers\SSHDRV51.sys  (File found, but it contains no detailed information)
"SSHDRV62" (SSHDRV62) - ? - C:\WINDOWS\system32\drivers\SSHDRV62.sys  (File found, but it contains no detailed information)
"SSHDRV76" (SSHDRV76) - ? - C:\WINDOWS\system32\drivers\SSHDRV76.sys
"ssrtln" (ssrtln) - "Sonic Solutions" - C:\WINDOWS\System32\drivers\ssrtln.sys
"StarForce Protection Environment Driver v6" (prodrv06) - "Protection Technology" - C:\WINDOWS\System32\drivers\prodrv06.sys
"StarForce Protection Helper Driver" (sfhlp01) - "Protection Technology" - C:\WINDOWS\System32\drivers\sfhlp01.sys
"StarForce Protection Helper Driver v2" (prohlp02) - "Protection Technology" - C:\WINDOWS\System32\drivers\prohlp02.sys
"StarForce Protection Synchronization Driver v1" (prosync1) - "Protection Technology" - C:\WINDOWS\System32\drivers\prosync1.sys
"tfsnboio" (tfsnboio) - "Sonic Solutions" - C:\WINDOWS\System32\dla\tfsnboio.sys
"tfsncofs" (tfsncofs) - "Sonic Solutions" - C:\WINDOWS\System32\dla\tfsncofs.sys
"tfsndrct" (tfsndrct) - "Sonic Solutions" - C:\WINDOWS\System32\dla\tfsndrct.sys
"tfsndres" (tfsndres) - "Sonic Solutions" - C:\WINDOWS\System32\dla\tfsndres.sys
"tfsnifs" (tfsnifs) - "Sonic Solutions" - C:\WINDOWS\System32\dla\tfsnifs.sys
"tfsnopio" (tfsnopio) - "Sonic Solutions" - C:\WINDOWS\System32\dla\tfsnopio.sys
"tfsnpool" (tfsnpool) - "Sonic Solutions" - C:\WINDOWS\System32\dla\tfsnpool.sys
"tfsnudf" (tfsnudf) - "Sonic Solutions" - C:\WINDOWS\System32\dla\tfsnudf.sys
"tfsnudfa" (tfsnudfa) - "Sonic Solutions" - C:\WINDOWS\System32\dla\tfsnudfa.sys
"WDICA" (WDICA) - ? - C:\WINDOWS\system32\drivers\WDICA.sys  (File not found)
"WinDriver6" (WinDriver6) - "Jungo" - C:\WINDOWS\System32\drivers\windrvr6.sys

[Explorer]
-----( HKCU\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved )-----
{BDEADF00-C265-11d0-BCED-00A0C90AB50F} "Webordner" - "Microsoft Corporation" - C:\PROGRA~1\GEMEIN~1\MICROS~1\WEBFOL~1\MSONSEXT.DLL
-----( HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components )-----
{89B4C1CD-B018-4511-B0A1-5476DBF70820} "StubPath" - "Microsoft Corporation" - C:\WINDOWS\system32\Rundll32.exe C:\WINDOWS\system32\mscories.dll,Install
-----( HKLM\Software\Classes\Folder\shellex\ColumnHandlers )-----
{F9DB5320-233E-11D1-9F84-707F02C10627} "PDF Shell Extension" - "Adobe Systems, Inc." - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\PDFShell.dll
-----( HKLM\Software\Classes\Protocols\Filter )-----
{1E66F26B-79EE-11D2-8710-00C04F79ED0D} "Cor MIME Filter, CorFltr, CorFltr 1" - "Microsoft Corporation" - C:\WINDOWS\system32\mscoree.dll
{1E66F26B-79EE-11D2-8710-00C04F79ED0D} "Cor MIME Filter, CorFltr, CorFltr 1" - "Microsoft Corporation" - C:\WINDOWS\system32\mscoree.dll
{1E66F26B-79EE-11D2-8710-00C04F79ED0D} "Cor MIME Filter, CorFltr, CorFltr 1" - "Microsoft Corporation" - C:\WINDOWS\system32\mscoree.dll
-----( HKLM\Software\Classes\Protocols\Handler )-----
{314111c7-a502-11d2-bbca-00c04f8ec294} "HxProtocol Class" - "Microsoft Corporation" - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Help\hxds.dll
{828030A1-22C1-4009-854F-8E305202313F} "livecall" - "Microsoft Corporation" - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
{828030A1-22C1-4009-854F-8E305202313F} "msnim" - "Microsoft Corporation" - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
{03C514A3-1EFB-4856-9F99-10D7BE1653C0} "Windows Live Mail HTML Asynchronous Pluggable Protocol Handler" - "Microsoft Corporation" - C:\Programme\Windows Live\Mail\mailcomm.dll
-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved )-----
{23170F69-40C1-278A-1000-000100020000} "7-Zip Shell Extension" - "Igor Pavlov" - C:\Programme\7-Zip\7-zip.dll
{0563DB41-F538-4B37-A92D-4659049B7766} "CLSID_WLMCMimeFilter" - "Microsoft Corporation" - C:\Programme\Windows Live\Mail\mailcomm.dll
{42071714-76d4-11d1-8b24-00a0c9068ff3} "CPL-Erweiterung für Anzeigeverschiebung" - ? -   (File not found | COM-object registry key not found)
{5CA3D70E-1895-11CF-8E15-001234567890} "DriveLetterAccess" - "Sonic Solutions" - C:\WINDOWS\system32\dla\tfswshx.dll
{B089FE88-FB52-11D3-BDF1-0050DA34150D} "ESET Smart Security - Context Menu Shell Extension" - "ESET" - C:\Programme\ESET\ESET NOD32 Antivirus\shellExt.dll
{B28C18DB-6816-4F31-9630-397683E3C2C3} "Filzip Shell Extension" - ? - C:\Programme\Filzip\fzshext.dll
{1D2680C9-0E2A-469d-B787-065558BC7D43} "Fusion Cache" - "Microsoft Corporation" - C:\WINDOWS\system32\mscoree.dll
{853FE2B1-B769-11d0-9C4E-00C04FB6C6FA} "Kontextmenü für die Verschlüsselung" - ? -   (File not found | COM-object registry key not found)
{BB7DF450-F119-11CD-8465-00AA00425D90} "Microsoft Access Custom Icon Handler" - "Microsoft Corporation" - C:\Programme\Microsoft Office\Office\soa800.dll
{993BE281-6695-4BA5-8A2A-7AACBFAAB69E} "Microsoft Office Metadata Handler" - "Microsoft Corporation" - C:\PROGRA~1\GEMEIN~1\MICROS~1\OFFICE12\msoshext.dll
{C41662BB-1FA0-4CE0-8DC5-9B7F8279FF97} "Microsoft Office Thumbnail Handler" - "Microsoft Corporation" - C:\PROGRA~1\GEMEIN~1\MICROS~1\OFFICE12\msoshext.dll
{0006F045-0000-0000-C000-000000000046} "Outlook-Dateisymbolerweiterung" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~4\Office\OLKFSTUB.DLL
{DEE12703-6333-4D4E-8F34-738C4DCC2E04} "RecordNow! SendToExt" - ? - C:\Programme\Sonic\RecordNow!\shlext.dll
{E37E2028-CE1A-4f42-AF05-6CEABC4E5D75} "Shell Icon Handler for Application References" - "Microsoft Corporation" - C:\WINDOWS\system32\dfshim.dll
{764BF0E1-F219-11ce-972D-00AA00A14F56} "Shellerweiterungen für die Dateikomprimierung" - ? -   (File not found | COM-object registry key not found)
{e82a2d71-5b2f-43a0-97b8-81be15854de8} "ShellLink for Application References" - "Microsoft Corporation" - C:\WINDOWS\system32\dfshim.dll
{5E2121EE-0300-11D4-8D3B-444553540000} "SimpleShlExt Class" - ? - C:\Programme\ATI Technologies\ATI.ACE\atiacmxx.dll
{2BE99FD4-A181-4996-BFA9-58C5FFD11F6C} "Windows Live Photo Gallery Autoplay Drop Target" - "Microsoft Corporation" - C:\Programme\Windows Live\Photo Gallery\WLXPhotoGallery.exe
{00F30F64-AC33-42F5-8FD1-5DC2D3FDE06C} "Windows Live Photo Gallery Editor Drop Target" - "Microsoft Corporation" - C:\Programme\Windows Live\Photo Gallery\WLXPhotoGallery.exe
{00F3712A-CA79-45B4-9E4D-D7891E7F8B9D} "Windows Live Photo Gallery Editor Shim" - "Microsoft Corporation" - C:\Programme\Windows Live\Photo Gallery\PhotoViewerShim.dll
{00F30F90-3E96-453B-AFCD-D71989ECC2C7} "Windows Live Photo Gallery Viewer Autoplay Shim" - "Microsoft Corporation" - C:\Programme\Windows Live\Photo Gallery\PhotoViewerShim.dll
{00F33137-EE26-412F-8D71-F84E4C2C6625} "Windows Live Photo Gallery Viewer Autoplay Shim" - "Microsoft Corporation" - C:\Programme\Windows Live\Photo Gallery\PhotoViewerShim.dll
{00F374B7-B390-4884-B372-2FC349F2172B} "Windows Live Photo Gallery Viewer Drop Target" - "Microsoft Corporation" - C:\Programme\Windows Live\Photo Gallery\WLXPhotoGallery.exe
{00F346CB-35A4-465B-8B8F-65A29DBAB1F6} "Windows Live Photo Gallery Viewer Shim" - "Microsoft Corporation" - C:\Programme\Windows Live\Photo Gallery\PhotoViewerShim.dll
{B41DB860-8EE4-11D2-9906-E49FADC173CA} "WinRAR" - ? - C:\Programme\WinRAR\rarext.dll  (File found, but it contains no detailed information)
{06A2568A-CED6-4187-BB20-400B8C02BE5A} "{06A2568A-CED6-4187-BB20-400B8C02BE5A}" - "Microsoft Corporation" - C:\Programme\Windows Live\Photo Gallery\WLXPhotoAcquireWizard.exe

[Internet Explorer]
-----( HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser )-----
<binary data> "&Windows Live Toolbar" - "Microsoft Corporation" - C:\Programme\Windows Live\Toolbar\wltcore.dll
<binary data> "Google Toolbar" - "Google Inc." - C:\Programme\Google\Google Toolbar\GoogleToolbar_32.dll
ITBar7Height "ITBar7Height" - ? -   (File not found | COM-object registry key not found)
<binary data> "ITBar7Layout" - ? -   (File not found | COM-object registry key not found)
<binary data> "ITBarLayout" - ? -   (File not found | COM-object registry key not found)
-----( HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units )-----
{BB21F850-63F4-4EC9-BF9D-565BD30C9AE9} "a-squared Scanner" - "Emsi Software GmbH" - C:\WINDOWS\DOWNLO~1\asquared.ocx / hxxp://ax.emsisoft.com/asquared.cab
{6531D99C-0D0E-4293-B3CB-A3E1D0D41847} "AhnASP Control" - "AhnLab, Inc." - C:\PROGRA~1\AhnLab\ASP\COMPON~1\AhnASP\AhnASP.ocx / hxxp://aspglobal.ahnlab.com/asp/cab/AhnASP.cab
{5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} "BDSCANONLINE Control" - "SOFTWIN" - C:\WINDOWS\DOWNLO~1\oscan8.ocx / hxxp://www.bitdefender.de/scan_de/scan8/oscan8.cab
{6CCE3920-3183-4B3D-808A-B12EB769DE12} "CSS Web Installer Class" - "Authentium, Inc." - C:\WINDOWS\Downloaded Program Files\cssweb.dll / hxxp://www.commandondemand.com/eval/cod/cabs/cssweb.cab
{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA} "Java Plug-in 1.4.2_03" - "JavaSoft / Sun Microsystems, Inc." - C:\Programme\Java\j2re1.4.2_03\bin\npjpi142_03.dll / hxxp://java.sun.com/update/1.4.2/jinstall-1_4_2_03-windows-i586.cab
{8AD9C840-044E-11D1-B3E9-00805F499D93} "Java Plug-in 1.6.0_32" - "Sun Microsystems, Inc." - C:\Programme\Java\jre6\bin\npjpi160_32.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_32-windows-i586.cab
{CAFEEFAC-0016-0000-0032-ABCDEFFEDCBA} "Java Plug-in 1.6.0_32" - "Sun Microsystems, Inc." - C:\Programme\Java\jre6\bin\npjpi160_32.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_32-windows-i586.cab
{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} "Java Plug-in 1.6.0_32" - "Sun Microsystems, Inc." - C:\Programme\Java\jre6\bin\npjpi160_32.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_32-windows-i586.cab
{EF791A6B-FC12-4C68-99EF-FB9E207A39E6} "McFreeScan Class" - "McAfee, Inc." - C:\WINDOWS\McAfee.com\FreeScan\mcfscan.dll / hxxp://download.mcafee.com/molbin/iss-loc/mcfscan/2,2,0,5587/mcfscan.cab
{2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} "Symantec AntiVirus scanner" - "Symantec Corporation" - C:\WINDOWS\Downloaded Program Files\avsniff.dll / hxxp://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
{644E432F-49D3-41A1-8DD5-E099162EEEC5} "Symantec RuFSI Utility Class" - "Symantec Corporation" - C:\WINDOWS\Downloaded Program Files\rufsi.dll / hxxp://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
{17492023-C23A-453E-A040-C7C580BBF700} "Windows Genuine Advantage Validation Tool" - "Microsoft Corporation" - C:\WINDOWS\system32\LegitCheckControl.DLL / hxxp://download.microsoft.com/download/C/0/C/C0CBBA88-A6F2-48D9-9B0E-1719D1177202/LegitCheckControl.cab
{E2883E8F-472F-4FB0-9522-AC9BF37916A7} "{E2883E8F-472F-4FB0-9522-AC9BF37916A7}" - ? -   (File not found | COM-object registry key not found) / hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
-----( HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions )-----
"Exec" - ? - C:\WINDOWS\bdoscandel.exe  (File found, but it contains no detailed information)
{5F7B1267-94A9-47F5-98DB-E99415F33AEC} "In Blog veröffentlichen" - "Microsoft Corporation" - C:\Programme\Windows Live\Writer\WriterBrowserExtension.dll
-----( HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar )-----
<binary data> "&Windows Live Toolbar" - "Microsoft Corporation" - C:\Programme\Windows Live\Toolbar\wltcore.dll
<binary data> "Google Toolbar" - "Google Inc." - C:\Programme\Google\Google Toolbar\GoogleToolbar_32.dll
-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects )-----
{18DF081C-E8AD-4283-A596-FA578C2EBDC3} "Adobe PDF Link Helper" - "Adobe Systems Incorporated" - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
{5CA3D70E-1895-11CF-8E15-001234567890} "DriveLetterAccess" - "Sonic Solutions" - C:\WINDOWS\system32\dla\tfswshx.dll
{AA58ED58-01DD-4d91-8333-CF10577473F7} "Google Toolbar Helper" - "Google Inc." - C:\Programme\Google\Google Toolbar\GoogleToolbar_32.dll
{AF69DE43-7D58-4638-B6FA-CE66B5AD205D} "Google Toolbar Notifier BHO" - "Google Inc." - C:\Programme\Google\GoogleToolbarNotifier\5.7.7227.1100\swg.dll
{DBC80044-A445-435b-BC74-9C25C1C588A9} "Java(tm) Plug-In 2 SSV Helper" - "Sun Microsystems, Inc." - C:\Programme\Java\jre6\bin\jp2ssv.dll
{761497BB-D6F0-462C-B6EB-D4DAF1D92D43} "Java(tm) Plug-In SSV Helper" - "Sun Microsystems, Inc." - C:\Programme\Java\jre6\bin\ssv.dll
{E7E6F031-17CE-4C07-BC86-EABFE594F69C} "JQSIEStartDetectorImpl Class" - "Sun Microsystems, Inc." - C:\Programme\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
{6EBF7485-159F-4bff-A14F-B9E3AAC4465B} "Search Helper" - "Microsoft Corporation" - C:\Programme\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
{9030D464-4C02-4ABF-8ECC-5164760863C6} "Windows Live Anmelde-Hilfsprogramm" - "Microsoft Corporation" - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
{E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} "Windows Live Toolbar Helper" - "Microsoft Corporation" - C:\Programme\Windows Live\Toolbar\wltcore.dll

[Logon]
-----( %UserProfile%\Startmenü\Programme\Autostart )-----
"desktop.ini" - ? - C:\Dokumente und Einstellungen\Andreas\Startmenü\Programme\Autostart\desktop.ini
"Office-Start.lnk" - ? - C:\Programme\Microsoft Office\Office\OSA.EXE  (Shortcut exists | File exists)
-----( HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run )-----
"AVMUSBFernanschluss" - "AVM Berlin" - "C:\Dokumente und Einstellungen\Andreas\Lokale Einstellungen\Apps\2.0\XJZ9WPM1.M0D\ZM9NZ9KV.GJR\frit..tion_8488884cfbcefd60_0002.0002_8541bf1f4a1c673d\AVMAutoStart.exe"
"PhonostarAgent" - ? - C:\Programme\phonostar\ps_agent.exe
"PhonostarTimer" - ? - C:\Programme\phonostar\ps_timer.exe
"swg" - "Google Inc." - "C:\Programme\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Run )-----
"Adobe ARM" - "Adobe Systems Incorporated" - "C:\Programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe"
"Adobe Reader Speed Launcher" - "Adobe Systems Incorporated" - "C:\Programme\Adobe\Reader 9.0\Reader\Reader_sl.exe"
"ATICCC" - "ATI Technologies Inc." - "C:\Programme\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay
"CanonMyPrinter" - "CANON INC." - C:\Programme\Canon\MyPrinter\BJMyPrt.exe /logon
"CanonSolutionMenuEx" - "CANON INC." - C:\Programme\Canon\Solution Menu EX\CNSEMAIN.EXE /logon
"dla" - "Sonic Solutions" - C:\WINDOWS\system32\dla\tfswctrl.exe
"egui" - "ESET" - "C:\Programme\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
"SunJavaUpdateSched" - "Sun Microsystems, Inc." - "C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe"
"UpdateManager" - "Sonic Solutions" - "C:\Programme\Gemeinsame Dateien\Sonic\Update Manager\sgtray.exe" /r

[Print Monitors]
-----( HKLM\SYSTEM\CurrentControlSet\Control\Print\Monitors )-----
"avm:" - "AVM Berlin GmbH" - C:\WINDOWS\system32\avmprmon.dll
"Canon BJNP Port" - "CANON INC." - C:\WINDOWS\system32\CNMNPPM.DLL
"eDocPortMonitor" - "May Software" - C:\Programme\Gemeinsame Dateien\MAYComputer\eDocPrintPro\eDocPort.dll

[Services]
-----( HKLM\SYSTEM\CurrentControlSet\Services )-----
".NET Runtime Optimization Service v2.0.50727_X86" (clr_optimization_v2.0.50727_32) - "Microsoft Corporation" - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
"Adobe Flash Player Update Service" (AdobeFlashPlayerUpdateSvc) - "Adobe Systems Incorporated" - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
"Anwendungsverwaltung" (AppMgmt) - ? - C:\WINDOWS\System32\appmgmts.dll  (File not found)
"ASP.NET-Zustandsdienst" (aspnet_state) - "Microsoft Corporation" - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
"ATI Smart" (ATI Smart) - ? - C:\WINDOWS\system32\ati2sgag.exe
"AVM FRITZ!web Routing Service" (de_serv) - ? - C:\Programme\Gemeinsame Dateien\AVM\de_serv.exe  (File not found)
"AVM IGD CTRL Service" (IGDCTRL) - "AVM Berlin" - C:\Programme\FRITZ!DSL\IGDCTRL.EXE
"ESET Service" (ekrn) - "ESET" - C:\Programme\ESET\ESET NOD32 Antivirus\ekrn.exe
"Google Software Updater" (gusvc) - "Google" - C:\Programme\Google\Common\Google Updater\GoogleUpdaterService.exe
"Google Update Service (gupdate1ca1de9760c74d6)" (gupdate1ca1de9760c74d6) - "Google Inc." - C:\Programme\Google\Update\GoogleUpdate.exe
"Google Update-Dienst (gupdatem)" (gupdatem) - "Google Inc." - C:\Programme\Google\Update\GoogleUpdate.exe
"InstallDriver Table Manager" (IDriverT) - "Macrovision Corporation" - C:\Programme\Gemeinsame Dateien\InstallShield\Driver\11\Intel 32\IDriverT.exe
"Intel NCS NetService" (NetSvc) - "Intel(R) Corporation" - C:\Programme\Intel\PROSetWired\NCS\Sync\NetSvc.exe
"Java Quick Starter" (JavaQuickStarterService) - "Sun Microsystems, Inc." - C:\Programme\Java\jre6\bin\jqs.exe
"Mozilla Maintenance Service" (MozillaMaintenance) - "Mozilla Foundation" - C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe
"SeaPort" (SeaPort) - "Microsoft Corporation" - C:\Programme\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
"SQL Server (SQLEXPRESS)" (MSSQL$SQLEXPRESS) - "Microsoft Corporation" - C:\Programme\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe
"SQL Server VSS Writer" (SQLWriter) - "Microsoft Corporation" - C:\Programme\Microsoft SQL Server\90\Shared\sqlwriter.exe
"SQL Server-Browser" (SQLBrowser) - "Microsoft Corporation" - C:\Programme\Microsoft SQL Server\90\Shared\sqlbrowser.exe
"Windows CardSpace" (idsvc) - "Microsoft Corporation" - C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
"Windows Live Family Safety-Dienst" (fsssvc) - "Microsoft Corporation" - C:\Programme\Windows Live\Family Safety\fsssvc.exe
"Windows Presentation Foundation Font Cache 3.0.0.0" (FontCache3.0.0.0) - "Microsoft Corporation" - C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe

[Winlogon]
-----( HKCU\Control Panel\Desktop )-----
"SCRNSAVE.EXE" - "M. H. Hörl" - C:\WINDOWS\JKDEFR~1.SCR
-----( HKCU\Control Panel\IOProcs )-----
"MVB" - ? - mvfs32.dll  (File not found)
-----( HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions )-----
{c6dc5466-785a-11d2-84d0-00c04fb169f7} "Softwareinstallation" - ? - appmgmts.dll  (File not found)
-----( HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify )-----
"WgaLogon" - "Microsoft Corporation" - C:\WINDOWS\system32\WgaLogon.dll

===[ Logfile end ]=========================================[ Logfile end ]===

--- --- ---

If You have questions or want to get some help, You can visit hxxp://forum.online-solutions.ru
aswMBR
Code:
aswMBR version 0.9.9.1665 Copyright(c) 2011 AVAST Software
Run date: 2012-05-25 23:18:37
-----------------------------
23:18:37.593    OS Version: Windows 5.1.2600 Service Pack 3
23:18:37.593    Number of processors: 1 586 0x401
23:18:37.593    ComputerName: SILVIA  UserName:
23:18:40.468    Initialize success
23:21:36.640    AVAST engine defs: 12052500
23:21:42.265    Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-3
23:21:42.281    Disk 0 Vendor: WDC_WD1600JB-75GVA0 08.02D08 Size: 152587MB BusType: 3
23:21:42.296    Disk 0 MBR read successfully
23:21:42.296    Disk 0 MBR scan
23:21:43.531    Disk 0 unknown MBR code
23:21:43.562    Disk 0 Partition 1 00    DE Dell Utility Dell 4.1      39 MB offset 63
23:21:44.500    Disk 0 Partition 2 80 (A) 07    HPFS/NTFS NTFS        32349 MB offset 80325
23:21:45.171    Disk 0 Partition 3 00    DB  CP/M / CTOS MSWIN4.1    2816 MB offset 66332385
23:21:45.593    Disk 0 Partition - 00    05    Extended            117381 MB offset 72099720
23:21:45.593    Disk 0 Partition 4 00    07    HPFS/NTFS NTFS        95903 MB offset 72099783
23:21:45.812    Disk 0 Partition - 00    05    Extended            10683 MB offset 268510410
23:21:45.875    Disk 0 scanning sectors +312496380
23:21:46.546    Disk 0 scanning C:\WINDOWS\system32\drivers
23:23:08.765    Service scanning
23:24:25.593    Modules scanning
23:24:51.656    Disk 0 trace - called modules:
23:24:51.687    ntoskrnl.exe CLASSPNP.SYS disk.sys prosync1.sys hal.dll atapi.sys pciide.sys PCIIDEX.SYS
23:24:51.687    1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x82bcdab8]
23:24:51.687    3 CLASSPNP.SYS[f85b8fd7] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP0T0L0-3[0x82b65b00]
23:24:51.703    \Driver\atapi[0x82ba9960] -> IRP_MJ_INTERNAL_DEVICE_CONTROL -> prosync1.sys[0xf8a80661]
23:24:54.656    AVAST engine scan C:\WINDOWS
23:25:49.781    AVAST engine scan C:\WINDOWS\system32
23:39:54.125    AVAST engine scan C:\WINDOWS\system32\drivers
23:40:43.000    AVAST engine scan C:\Dokumente und Einstellungen\Andreas
23:44:31.531    AVAST engine scan C:\Dokumente und Einstellungen\All Users
23:45:46.531    Scan finished successfully
00:16:00.250    Disk 0 MBR has been saved successfully to "C:\Dokumente und Einstellungen\Andreas\Desktop\MBR.dat"
00:16:00.578    The log file has been saved successfully to "C:\Dokumente und Einstellungen\Andreas\Desktop\aswMBR.txt"

cosinus 26.05.2012 00:01
Wir sollten den MBR fixen, sichere für den Fall der Fälle ALLE wichtigen Daten, auch wenn meistens alles glatt geht.

Hinweis: Mach bitte NICHT den MBR-Fix, wenn du noch andere Betriebssysteme wie zB Ubuntu installiert hast, ein MBR-Fix mit Windows-Tools macht ein parallel installiertes (Dualboot) Linux unbootbar.
Mach den Fix auch dann nicht, wenn du zB mit TrueCrypt oder anderen Verschlüsselungsprogrammen eine Vollverschlüsselung der Windowspartition bzw. gesamten Festplatte hast

Starte nach der Datensicherung aswmbr erneut und klick auf den Button FIXMBR.

Hinweis: Bitte den Virenscanner abstellen bevor du aswMBR ausführst, denn v.a. Avira meldet darin oft einen Fehalalrm!

Anschließend Windows neu starten und ein neues Log mit aswMBR machen.

Atlanti 26.05.2012 21:58
Der MBR-Fix ging problemlos. Hier das Logfile meines letzten aswMBR-Scans:
Code:
aswMBR version 0.9.9.1665 Copyright(c) 2011 AVAST Software
Run date: 2012-05-26 21:30:27
-----------------------------
21:30:27.421    OS Version: Windows 5.1.2600 Service Pack 3
21:30:27.421    Number of processors: 1 586 0x401
21:30:27.421    ComputerName: SILVIA  UserName:
21:30:34.000    Initialize success
21:32:09.328    AVAST engine defs: 12052500
22:26:26.000    Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-3
22:26:26.000    Disk 0 Vendor: WDC_WD1600JB-75GVA0 08.02D08 Size: 152587MB BusType: 3
22:26:26.015    Disk 0 MBR read successfully
22:26:26.031    Disk 0 MBR scan
22:26:26.093    Disk 0 Windows XP default MBR code
22:26:26.093    Disk 0 Partition 1 00    DE Dell Utility Dell 4.1      39 MB offset 63
22:26:26.125    Disk 0 Partition 2 80 (A) 07    HPFS/NTFS NTFS        32349 MB offset 80325
22:26:26.140    Disk 0 Partition 3 00    DB  CP/M / CTOS MSWIN4.1    2816 MB offset 66332385
22:26:26.156    Disk 0 Partition - 00    05    Extended            117381 MB offset 72099720
22:26:26.156    Disk 0 Partition 4 00    07    HPFS/NTFS NTFS        95903 MB offset 72099783
22:26:26.156    Disk 0 Partition - 00    05    Extended            10683 MB offset 268510410
22:26:26.187    Disk 0 scanning sectors +312496380
22:26:26.328    Disk 0 scanning C:\WINDOWS\system32\drivers
22:26:51.015    Service scanning
22:27:19.125    Modules scanning
22:27:26.390    Disk 0 trace - called modules:
22:27:26.406    ntoskrnl.exe CLASSPNP.SYS disk.sys prosync1.sys hal.dll atapi.sys pciide.sys PCIIDEX.SYS
22:27:26.406    1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x82bcdab8]
22:27:26.421    3 CLASSPNP.SYS[f85b8fd7] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP0T0L0-3[0x82b65b00]
22:27:26.421    \Driver\atapi[0x82ba9960] -> IRP_MJ_INTERNAL_DEVICE_CONTROL -> prosync1.sys[0xf8a80661]
22:27:27.531    AVAST engine scan C:\WINDOWS
22:27:49.515    AVAST engine scan C:\WINDOWS\system32
22:32:29.031    AVAST engine scan C:\WINDOWS\system32\drivers
22:32:51.562    AVAST engine scan C:\Dokumente und Einstellungen\Andreas
22:35:55.718    AVAST engine scan C:\Dokumente und Einstellungen\All Users
22:36:37.343    Scan finished successfully
22:50:29.031    Disk 0 MBR has been saved successfully to "C:\Dokumente und Einstellungen\Andreas\Desktop\MBR.dat"
22:50:29.046    The log file has been saved successfully to "C:\Dokumente und Einstellungen\Andreas\Desktop\aswMBR2.txt"
22:55:51.343    Disk 0 MBR has been saved successfully to "C:\Dokumente und Einstellungen\Andreas\Desktop\MBR.dat"
22:55:51.734    The log file has been saved successfully to "C:\Dokumente und Einstellungen\Andreas\Desktop\aswMBR2.txt"

cosinus 28.05.2012 14:37
Sieht ok aus. Wir sollten fast durch sein. Mach bitte zur Kontrolle Vollscans mit Malwarebytes und SASW und poste die Logs.
Denk dran beide Tools zu updaten vor dem Scan!!

Atlanti 30.05.2012 06:38
Ich habe beide Scans ausgeführt und ich poste die Logs

Malwarebytes
Code:
Malwarebytes Anti-Malware 1.61.0.1400
www.malwarebytes.org

Datenbank Version: v2012.05.28.04

Windows XP Service Pack 3 x86 NTFS
Internet Explorer 8.0.6001.18702
Andreas :: SILVIA [Administrator]

28.05.2012 18:48:07
mbam-log-2012-05-28 (18-48-07).txt

Art des Suchlaufs: Vollständiger Suchlauf
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 421387
Laufzeit: 2 Stunde(n), 23 Minute(n), 30 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 0
(Keine bösartigen Objekte gefunden)

(Ende)
SuprtAntiSpyware
Code:
SUPERAntiSpyware Scan Log
hxxp://www.superantispyware.com

Generated 05/30/2012 at 02:29 AM

Application Version : 5.0.1150

Core Rules Database Version : 8653
Trace Rules Database Version: 6465

Scan type      : Complete Scan
Total Scan Time : 05:47:31

Operating System Information
Windows XP Home Edition 32-bit, Service Pack 3 (Build 5.01.2600)
Administrator

Memory items scanned      : 768
Memory threats detected  : 0
Registry items scanned    : 36274
Registry threats detected : 0
File items scanned        : 121112
File threats detected    : 352

Adware.Tracking Cookie
        C:\Dokumente und Einstellungen\Andreas\Cookies\andreas@ad.yieldmanager[2].txt [ /ad.yieldmanager ]
        C:\Dokumente und Einstellungen\Andreas\Cookies\andreas@ad2.adfarm1.adition[2].txt [ /ad2.adfarm1.adition ]
        C:\Dokumente und Einstellungen\Andreas\Cookies\andreas@ad3.adfarm1.adition[1].txt [ /ad3.adfarm1.adition ]
        C:\Dokumente und Einstellungen\Andreas\Cookies\andreas@ad4.adfarm1.adition[1].txt [ /ad4.adfarm1.adition ]
        C:\Dokumente und Einstellungen\Andreas\Cookies\andreas@adcloudmedia[1].txt [ /adcloudmedia ]
        C:\Dokumente und Einstellungen\Andreas\Cookies\andreas@adfarm1.adition[2].txt [ /adfarm1.adition ]
        C:\Dokumente und Einstellungen\Andreas\Cookies\andreas@ads.quartermedia[1].txt [ /ads.quartermedia ]
        C:\Dokumente und Einstellungen\Andreas\Cookies\andreas@ads.travelaudience[2].txt [ /ads.travelaudience ]
        C:\Dokumente und Einstellungen\Andreas\Cookies\andreas@adserving.ezanga[2].txt [ /adserving.ezanga ]
        C:\Dokumente und Einstellungen\Andreas\Cookies\andreas@adtech[1].txt [ /adtech ]
        C:\Dokumente und Einstellungen\Andreas\Cookies\andreas@airfrance.bannerfactory[1].txt [ /airfrance.bannerfactory ]
        C:\Dokumente und Einstellungen\Andreas\Cookies\andreas@apmebf[1].txt [ /apmebf ]
        C:\Dokumente und Einstellungen\Andreas\Cookies\andreas@clickpayz10.91423.blueseek[2].txt [ /clickpayz10.91423.blueseek ]
        C:\Dokumente und Einstellungen\Andreas\Cookies\andreas@content.yieldmanager[1].txt [ /content.yieldmanager ]
        C:\Dokumente und Einstellungen\Andreas\Cookies\andreas@doubleclick[1].txt [ /doubleclick ]
        C:\Dokumente und Einstellungen\Andreas\Cookies\andreas@eas.apm.emediate[2].txt [ /eas.apm.emediate ]
        C:\Dokumente und Einstellungen\Andreas\Cookies\andreas@invitemedia[1].txt [ /invitemedia ]
        C:\Dokumente und Einstellungen\Andreas\Cookies\andreas@mediaplex[1].txt [ /mediaplex ]
        C:\Dokumente und Einstellungen\Andreas\Cookies\andreas@msnportal.112.2o7[1].txt [ /msnportal.112.2o7 ]
        C:\Dokumente und Einstellungen\Andreas\Cookies\andreas@myroitracking[1].txt [ /myroitracking ]
        C:\Dokumente und Einstellungen\Andreas\Cookies\andreas@serving-sys[1].txt [ /serving-sys ]
        C:\Dokumente und Einstellungen\Andreas\Cookies\andreas@sevenoneintermedia.112.2o7[1].txt [ /sevenoneintermedia.112.2o7 ]
        C:\Dokumente und Einstellungen\Andreas\Cookies\andreas@specificclick[1].txt [ /specificclick ]
        C:\Dokumente und Einstellungen\Andreas\Cookies\andreas@statcounter[2].txt [ /statcounter ]
        C:\Dokumente und Einstellungen\Andreas\Cookies\andreas@statse.webtrendslive[1].txt [ /statse.webtrendslive ]
        C:\Dokumente und Einstellungen\Andreas\Cookies\andreas@tracking.hannoversche[2].txt [ /tracking.hannoversche ]
        C:\Dokumente und Einstellungen\Andreas\Cookies\andreas@tracking.mindshare[1].txt [ /tracking.mindshare ]
        C:\Dokumente und Einstellungen\Andreas\Cookies\andreas@tracking.quisma[1].txt [ /tracking.quisma ]
        C:\Dokumente und Einstellungen\Andreas\Cookies\andreas@tradedoubler[2].txt [ /tradedoubler ]
        C:\Dokumente und Einstellungen\Andreas\Cookies\andreas@traffictrack[2].txt [ /traffictrack ]
        C:\Dokumente und Einstellungen\Andreas\Cookies\andreas@turismopaisvasco.solution.weborama[2].txt [ /turismopaisvasco.solution.weborama ]
        C:\Dokumente und Einstellungen\Andreas\Cookies\andreas@webmasterplan[1].txt [ /webmasterplan ]
        C:\Dokumente und Einstellungen\Andreas\Cookies\andreas@weborama[1].txt [ /weborama ]
        C:\Dokumente und Einstellungen\Andreas\Cookies\andreas@zanox-affiliate[1].txt [ /zanox-affiliate ]
        C:\Dokumente und Einstellungen\Andreas\Cookies\andreas@zanox[1].txt [ /zanox ]
        C:\Dokumente und Einstellungen\Andreas\Cookies\andreas@zedo[2].txt [ /zedo ]
        C:\Dokumente und Einstellungen\Andreas\Cookies\QB57L0M5.txt [ /atdmt.com ]
        C:\Dokumente und Einstellungen\Andreas\Cookies\andreas@shopica[2].txt [ /shopica.com ]
        C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\Cookies\markus@yadro[2].txt [ Cookie:markus@yadro.ru/ ]
        C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\Cookies\markus@bs.serving-sys[1].txt [ Cookie:markus@bs.serving-sys.com/ ]
        C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\Cookies\markus@apmebf[1].txt [ Cookie:markus@apmebf.com/ ]
        C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\Cookies\markus@libri.112.2o7[1].txt [ Cookie:markus@libri.112.2o7.net/ ]
        C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\Cookies\markus@tradedoubler[1].txt [ Cookie:markus@tradedoubler.com/ ]
        C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\Cookies\markus@cgi-bin[2].txt [ Cookie:markus@imrworldwide.com/cgi-bin ]
        C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\Cookies\markus@fastclick[1].txt [ Cookie:markus@fastclick.net/ ]
        C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\Cookies\markus@ad.yieldmanager[2].txt [ Cookie:markus@ad.yieldmanager.com/ ]
        C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\Cookies\markus@mediaplex[1].txt [ Cookie:markus@mediaplex.com/ ]
        C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\Cookies\markus@atdmt[1].txt [ Cookie:markus@atdmt.com/ ]
        C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\Cookies\markus@traffictrack[2].txt [ Cookie:markus@traffictrack.de/ ]
        C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\Cookies\markus@advertising[2].txt [ Cookie:markus@advertising.com/ ]
        C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\Cookies\markus@serving-sys[2].txt [ Cookie:markus@serving-sys.com/ ]
        C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\Cookies\markus@adfarm1.adition[1].txt [ Cookie:markus@adfarm1.adition.com/ ]
        C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\Cookies\markus@adtech[1].txt [ Cookie:markus@adtech.de/ ]
        C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\Cookies\markus@specificclick[1].txt [ Cookie:markus@specificclick.net/ ]
        C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\Cookies\markus@kontera[2].txt [ Cookie:markus@kontera.com/ ]
        C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\Cookies\markus@cdn5.specificclick[1].txt [ Cookie:markus@cdn5.specificclick.net/ ]
        C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\Cookies\markus@cgi-bin[10].txt [ Cookie:markus@www3.addfreestats.com/cgi-bin ]
        C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\Cookies\markus@ads.quartermedia[1].txt [ Cookie:markus@ads.quartermedia.de/ ]
        C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\Cookies\markus@adviva[2].txt [ Cookie:markus@adviva.net/ ]
        C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\Cookies\markus@999999122331222[1].txt [ Cookie:markus@track.webtrekk.de/999999122331222/ ]
        C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\Cookies\markus@471497967328727[1].txt [ Cookie:markus@track.webtrekk.de/471497967328727/ ]
        C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\Cookies\markus@zanox[1].txt [ Cookie:markus@zanox.com/ ]
        C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\Cookies\markus@webmasterplan[2].txt [ Cookie:markus@webmasterplan.com/ ]
        C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\Cookies\markus@gamestar[1].txt [ Cookie:markus@de.sitestat.com/idgcom-de/gamestar/ ]
        C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\Cookies\markus@112.2o7[2].txt [ Cookie:markus@112.2o7.net/ ]
        C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\Cookies\markus@zanox-affiliate[2].txt [ Cookie:markus@zanox-affiliate.de/ ]
        C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\Cookies\markus@43682891[2].txt [ Cookie:markus@server.iad.liveperson.net/hc/43682891 ]
        C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\Cookies\markus@rambler[1].txt [ Cookie:markus@rambler.ru/ ]
        C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\Cookies\markus@microsoftsto.112.2o7[1].txt [ Cookie:markus@microsoftsto.112.2o7.net/ ]
        C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\Cookies\markus@diepresse[2].txt [ Cookie:markus@de.sitestat.com/styria/diepresse/ ]
        C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\Cookies\markus@muenchen-de[1].txt [ Cookie:markus@de.sitestat.com/pm/muenchen-de/ ]
        C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\Cookies\markus@ebusiness.springer-business-media[1].txt [ Cookie:markus@ebusiness.springer-business-media.de/ ]
        C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\Cookies\markus@sex[2].txt [ Cookie:markus@sex.de/ ]
        C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\Cookies\markus@computerwoche[1].txt [ Cookie:markus@de.sitestat.com/idgcom-de/computerwoche/ ]
        C:\DOKUMENTE UND EINSTELLUNGEN\SABINE\Cookies\sabine@clkads[2].txt [ Cookie:sabine@clkads.com/adServe/ ]
        C:\DOKUMENTE UND EINSTELLUNGEN\SABINE\Cookies\sabine@doubleclick[1].txt [ Cookie:sabine@doubleclick.net/ ]
        C:\DOKUMENTE UND EINSTELLUNGEN\SABINE\Cookies\sabine@clkads[3].txt [ Cookie:sabine@clkads.com/adServe/banners ]
        C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\Cookies\silvia_l@doubleclick[2].txt [ Cookie:silvia l@doubleclick.net/ ]
        C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\Cookies\silvia_l@ads.quartermedia[2].txt [ Cookie:silvia l@ads.quartermedia.de/ ]
        C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\Cookies\silvia_l@smartadserver[1].txt [ Cookie:silvia l@smartadserver.com/ ]
        C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\Cookies\silvia_l@tradedoubler[2].txt [ Cookie:silvia l@tradedoubler.com/ ]
        C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\Cookies\silvia_l@parship.122.2o7[1].txt [ Cookie:silvia l@parship.122.2o7.net/ ]
        C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\Cookies\silvia_l@adtech[1].txt [ Cookie:silvia l@adtech.de/ ]
        C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\Cookies\silvia_l@tto2.traffictrack[2].txt [ Cookie:silvia l@tto2.traffictrack.de/ ]
        C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\Cookies\silvia_l@advertising[1].txt [ Cookie:silvia l@advertising.com/ ]
        C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\Cookies\silvia_l@tracking.mindshare[1].txt [ Cookie:silvia l@tracking.mindshare.de/ ]
        C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\Cookies\silvia_l@bluestreak[1].txt [ Cookie:silvia l@bluestreak.com/ ]
        C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\Cookies\silvia_l@track.webtrekk[1].txt [ Cookie:silvia l@track.webtrekk.de/690190909878901/ ]
        C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\Cookies\silvia_l@a6.adserver01[2].txt [ Cookie:silvia l@a6.adserver01.de/ ]
        C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\Cookies\silvia_l@de.sitestat[3].txt [ Cookie:silvia l@de.sitestat.com/sport1/dsf-de/ ]
        C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\Cookies\silvia_l@serving-sys[1].txt [ Cookie:silvia l@serving-sys.com/ ]
        C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\Cookies\silvia_l@adviva[2].txt [ Cookie:silvia l@adviva.net/ ]
        C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\Cookies\silvia_l@ad.zanox[1].txt [ Cookie:silvia l@ad.zanox.com/ ]
        C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\Cookies\silvia_l@mediaplex[2].txt [ Cookie:silvia l@mediaplex.com/ ]
        C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\Cookies\silvia_l@apmebf[1].txt [ Cookie:silvia l@apmebf.com/ ]
        C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\Cookies\silvia_l@hitbox[1].txt [ Cookie:silvia l@hitbox.com/ ]
        C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\Cookies\silvia_l@atdmt[2].txt [ Cookie:silvia l@atdmt.com/ ]
        C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\Cookies\silvia_l@warnerbros.112.2o7[1].txt [ Cookie:silvia l@warnerbros.112.2o7.net/ ]
        C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\Cookies\silvia_l@tracking.quisma[1].txt [ Cookie:silvia l@tracking.quisma.com/ ]
        C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\Cookies\silvia_l@stats.rfw-sport[1].txt [ Cookie:silvia l@stats.rfw-sport.de/ ]
        C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\Cookies\silvia_l@content.yieldmanager[3].txt [ Cookie:silvia l@content.yieldmanager.com/ak/ ]
        C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\Cookies\silvia_l@2o7[1].txt [ Cookie:silvia l@2o7.net/ ]
        C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\Cookies\silvia l@fit-z-de[1].txt [ Cookie:silvia l@de.sitestat.com/haba/fit-z-de/ ]
        C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\Cookies\silvia_l@adserver.71i[1].txt [ Cookie:silvia l@adserver.71i.de/ ]
        C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\Cookies\silvia_l@stat.onestat[2].txt [ Cookie:silvia l@stat.onestat.com/ ]
        C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\Cookies\silvia_l@zbox.zanox[1].txt [ Cookie:silvia l@zbox.zanox.com/ ]
        C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\Cookies\silvia_l@bs.serving-sys[2].txt [ Cookie:silvia l@bs.serving-sys.com/ ]
        C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\Cookies\silvia_l@de.sitestat[1].txt [ Cookie:silvia l@de.sitestat.com/styria/diepresse/ ]
        C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\Cookies\silvia l@haba[1].txt [ Cookie:silvia l@de.sitestat.com/haba/ ]
        C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\Cookies\silvia l@999999122331222[1].txt [ Cookie:silvia l@track.webtrekk.de/999999122331222/ ]
        C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\Cookies\silvia_l@iacas.adbureau[1].txt [ Cookie:silvia l@iacas.adbureau.net/ ]
        C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\Cookies\silvia_l@webmasterplan[2].txt [ Cookie:silvia l@webmasterplan.com/ ]
        C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\Cookies\silvia_l@de.sitestat[4].txt [ Cookie:silvia l@de.sitestat.com/sport1/ ]
        C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\Cookies\silvia_l@zanox[1].txt [ Cookie:silvia l@zanox.com/ ]
        C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\Cookies\silvia_l@msnportal.112.2o7[1].txt [ Cookie:silvia l@msnportal.112.2o7.net/ ]
        C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\Cookies\silvia_l@sevenoneintermedia.112.2o7[1].txt [ Cookie:silvia l@sevenoneintermedia.112.2o7.net/ ]
        C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\Cookies\silvia_l@go.dynamic-tracking[1].txt [ Cookie:silvia l@go.dynamic-tracking.de/ ]
        C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\Cookies\silvia_l@questionmarket[1].txt [ Cookie:silvia l@questionmarket.com/ ]
        C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\Cookies\silvia_l@xiti[1].txt [ Cookie:silvia l@xiti.com/ ]
        C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\Cookies\silvia_l@unitymedia[1].txt [ Cookie:silvia l@unitymedia.de/ ]
        C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\Cookies\silvia_l@cdn5.specificclick[2].txt [ Cookie:silvia l@cdn5.specificclick.net/ ]
        .im.banner.t-online.de [ C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\DEPWSR1V.DEFAULT\COOKIES.SQLITE ]
        .doubleclick.net [ C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\DEPWSR1V.DEFAULT\COOKIES.SQLITE ]
        .bs.serving-sys.com [ C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\DEPWSR1V.DEFAULT\COOKIES.SQLITE ]
        .serving-sys.com [ C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\DEPWSR1V.DEFAULT\COOKIES.SQLITE ]
        .serving-sys.com [ C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\DEPWSR1V.DEFAULT\COOKIES.SQLITE ]
        .serving-sys.com [ C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\DEPWSR1V.DEFAULT\COOKIES.SQLITE ]
        .serving-sys.com [ C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\DEPWSR1V.DEFAULT\COOKIES.SQLITE ]
        .serving-sys.com [ C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\DEPWSR1V.DEFAULT\COOKIES.SQLITE ]
        .adviva.net [ C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\DEPWSR1V.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\DEPWSR1V.DEFAULT\COOKIES.SQLITE ]
        .viacom.adbureau.net [ C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\DEPWSR1V.DEFAULT\COOKIES.SQLITE ]
        .2o7.net [ C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\DEPWSR1V.DEFAULT\COOKIES.SQLITE ]
        .viacom.adbureau.net [ C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\DEPWSR1V.DEFAULT\COOKIES.SQLITE ]
        .atdmt.com [ C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\DEPWSR1V.DEFAULT\COOKIES.SQLITE ]
        .2o7.net [ C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\DEPWSR1V.DEFAULT\COOKIES.SQLITE ]
        .imrworldwide.com [ C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\DEPWSR1V.DEFAULT\COOKIES.SQLITE ]
        .imrworldwide.com [ C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\DEPWSR1V.DEFAULT\COOKIES.SQLITE ]
        eas.apm.emediate.eu [ C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\DEPWSR1V.DEFAULT\COOKIES.SQLITE ]
        eas.apm.emediate.eu [ C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\DEPWSR1V.DEFAULT\COOKIES.SQLITE ]
        .advertising.com [ C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\DEPWSR1V.DEFAULT\COOKIES.SQLITE ]
        .advertising.com [ C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\DEPWSR1V.DEFAULT\COOKIES.SQLITE ]
        .traffictrack.de [ C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\DEPWSR1V.DEFAULT\COOKIES.SQLITE ]
        uk.media.xbox360.ign.com [ C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\DEPWSR1V.DEFAULT\COOKIES.SQLITE ]
        uk.media.xbox360.ign.com [ C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\DEPWSR1V.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\DEPWSR1V.DEFAULT\COOKIES.SQLITE ]
        .ads.quartermedia.de [ C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\DEPWSR1V.DEFAULT\COOKIES.SQLITE ]
        .ads.quartermedia.de [ C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\DEPWSR1V.DEFAULT\COOKIES.SQLITE ]
        .ads.quartermedia.de [ C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\DEPWSR1V.DEFAULT\COOKIES.SQLITE ]
        ad.adition.net [ C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\DEPWSR1V.DEFAULT\COOKIES.SQLITE ]
        ad.adition.net [ C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\DEPWSR1V.DEFAULT\COOKIES.SQLITE ]
        .adtech.de [ C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\DEPWSR1V.DEFAULT\COOKIES.SQLITE ]
        .collective-media.net [ C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\DEPWSR1V.DEFAULT\COOKIES.SQLITE ]
        heim-handwerk-media.com [ C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\DEPWSR1V.DEFAULT\COOKIES.SQLITE ]
        heim-handwerk-media.com [ C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\DEPWSR1V.DEFAULT\COOKIES.SQLITE ]
        de.sitestat.com [ C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\DEPWSR1V.DEFAULT\COOKIES.SQLITE ]
        .apmebf.com [ C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\DEPWSR1V.DEFAULT\COOKIES.SQLITE ]
        .mediaplex.com [ C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\DEPWSR1V.DEFAULT\COOKIES.SQLITE ]
        .mediaplex.com [ C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\DEPWSR1V.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\DEPWSR1V.DEFAULT\COOKIES.SQLITE ]
        .tradedoubler.com [ C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\DEPWSR1V.DEFAULT\COOKIES.SQLITE ]
        .tradedoubler.com [ C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\DEPWSR1V.DEFAULT\COOKIES.SQLITE ]
        .de.at.atwola.com [ C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\DEPWSR1V.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\DEPWSR1V.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\DEPWSR1V.DEFAULT\COOKIES.SQLITE ]
        .youporn.com [ C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\DEPWSR1V.DEFAULT\COOKIES.SQLITE ]
        .youporn.com [ C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\DEPWSR1V.DEFAULT\COOKIES.SQLITE ]
        .youporn.com [ C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\DEPWSR1V.DEFAULT\COOKIES.SQLITE ]
        ads.youporn.com [ C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\DEPWSR1V.DEFAULT\COOKIES.SQLITE ]
        .adultfriendfinder.com [ C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\DEPWSR1V.DEFAULT\COOKIES.SQLITE ]
        .xfuckbook.com [ C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\DEPWSR1V.DEFAULT\COOKIES.SQLITE ]
        .sex.de [ C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\DEPWSR1V.DEFAULT\COOKIES.SQLITE ]
        .sex.de [ C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\DEPWSR1V.DEFAULT\COOKIES.SQLITE ]
        track.effiliation.com [ C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\DEPWSR1V.DEFAULT\COOKIES.SQLITE ]
        .tradedoubler.com [ C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\DEPWSR1V.DEFAULT\COOKIES.SQLITE ]
        .smartadserver.com [ C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\DEPWSR1V.DEFAULT\COOKIES.SQLITE ]
        .smartadserver.com [ C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\DEPWSR1V.DEFAULT\COOKIES.SQLITE ]
        .smartadserver.com [ C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\DEPWSR1V.DEFAULT\COOKIES.SQLITE ]
        .serving-sys.com [ C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\DEPWSR1V.DEFAULT\COOKIES.SQLITE ]
        .serving-sys.com [ C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\DEPWSR1V.DEFAULT\COOKIES.SQLITE ]
        .bluestreak.com [ C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\DEPWSR1V.DEFAULT\COOKIES.SQLITE ]
        .agofev.122.2o7.net [ C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\DEPWSR1V.DEFAULT\COOKIES.SQLITE ]
        .gmeurope.112.2o7.net [ C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\DEPWSR1V.DEFAULT\COOKIES.SQLITE ]
        delivery.ads.coupling-media.com [ C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\DEPWSR1V.DEFAULT\COOKIES.SQLITE ]
        .apmebf.com [ C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\DEPWSR1V.DEFAULT\COOKIES.SQLITE ]
        .ad.adnet.de [ C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\DEPWSR1V.DEFAULT\COOKIES.SQLITE ]
        ad.zanox.com [ C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\DEPWSR1V.DEFAULT\COOKIES.SQLITE ]
        .microsoftxna.112.2o7.net [ C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\DEPWSR1V.DEFAULT\COOKIES.SQLITE ]
        .amazon-adsystem.com [ C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\DEPWSR1V.DEFAULT\COOKIES.SQLITE ]
        .amazon-adsystem.com [ C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\DEPWSR1V.DEFAULT\COOKIES.SQLITE ]
        C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\COOKIES\MARKUS@AD1.OKTOBERFEST[2].TXT [ /AD1.OKTOBERFEST ]
        C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\COOKIES\MARKUS@DOUBLECLICK[2].TXT [ /DOUBLECLICK ]
        C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\COOKIES\MARKUS@AD.ZANOX[2].TXT [ /AD.ZANOX ]
        C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\COOKIES\MARKUS@ADS.HEIAS[1].TXT [ /ADS.HEIAS ]
        C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\COOKIES\MARKUS@AD.LOKALISTEN[2].TXT [ /AD.LOKALISTEN ]
        C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\COOKIES\MARKUS@ADS.US.E-PLANNING[1].TXT [ /ADS.US.E-PLANNING ]
        C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\COOKIES\MARKUS@ADSERVER1.MOKONO[1].TXT [ /ADSERVER1.MOKONO ]
        C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\COOKIES\MARKUS@MICROSOFTINTERNETEXPLORER.112.2O7[1].TXT [ /MICROSOFTINTERNETEXPLORER.112.2O7 ]
        C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\COOKIES\MARKUS@TTO2.TRAFFICTRACK[1].TXT [ /TTO2.TRAFFICTRACK ]
        C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS\COOKIES\MARKUS@MSNPORTAL.112.2O7[1].TXT [ /MSNPORTAL.112.2O7 ]
        .doubleclick.net [ C:\DOKUMENTE UND EINSTELLUNGEN\SABINE\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\9OFD1I9S.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SABINE\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\9OFD1I9S.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SABINE\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\9OFD1I9S.DEFAULT\COOKIES.SQLITE ]
        .yieldmanager.net [ C:\DOKUMENTE UND EINSTELLUNGEN\SABINE\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\9OFD1I9S.DEFAULT\COOKIES.SQLITE ]
        .atdmt.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SABINE\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\9OFD1I9S.DEFAULT\COOKIES.SQLITE ]
        .atdmt.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SABINE\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\9OFD1I9S.DEFAULT\COOKIES.SQLITE ]
        .tracking.quisma.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SABINE\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\9OFD1I9S.DEFAULT\COOKIES.SQLITE ]
        .adinterax.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SABINE\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\9OFD1I9S.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SABINE\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\9OFD1I9S.DEFAULT\COOKIES.SQLITE ]
        tracking.mlsat02.de [ C:\DOKUMENTE UND EINSTELLUNGEN\SABINE\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\9OFD1I9S.DEFAULT\COOKIES.SQLITE ]
        .apmebf.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SABINE\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\9OFD1I9S.DEFAULT\COOKIES.SQLITE ]
        .mediaplex.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SABINE\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\9OFD1I9S.DEFAULT\COOKIES.SQLITE ]
        .bs.serving-sys.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SABINE\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\9OFD1I9S.DEFAULT\COOKIES.SQLITE ]
        .bs.serving-sys.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SABINE\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\9OFD1I9S.DEFAULT\COOKIES.SQLITE ]
        .imrworldwide.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SABINE\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\9OFD1I9S.DEFAULT\COOKIES.SQLITE ]
        .imrworldwide.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SABINE\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\9OFD1I9S.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SABINE\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\9OFD1I9S.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SABINE\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\9OFD1I9S.DEFAULT\COOKIES.SQLITE ]
        .tradedoubler.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SABINE\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\9OFD1I9S.DEFAULT\COOKIES.SQLITE ]
        .tradedoubler.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SABINE\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\9OFD1I9S.DEFAULT\COOKIES.SQLITE ]
        .tradedoubler.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SABINE\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\9OFD1I9S.DEFAULT\COOKIES.SQLITE ]
        .traffictrack.de [ C:\DOKUMENTE UND EINSTELLUNGEN\SABINE\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\9OFD1I9S.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\DOKUMENTE UND EINSTELLUNGEN\SABINE\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\9OFD1I9S.DEFAULT\COOKIES.SQLITE ]
        .xiti.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SABINE\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\9OFD1I9S.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SABINE\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\9OFD1I9S.DEFAULT\COOKIES.SQLITE ]
        ad2.adfarm1.adition.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SABINE\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\9OFD1I9S.DEFAULT\COOKIES.SQLITE ]
        ad.zanox.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SABINE\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\9OFD1I9S.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SABINE\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\9OFD1I9S.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SABINE\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\9OFD1I9S.DEFAULT\COOKIES.SQLITE ]
        adfarm1.adition.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SABINE\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\9OFD1I9S.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SABINE\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\9OFD1I9S.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SABINE\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\9OFD1I9S.DEFAULT\COOKIES.SQLITE ]
        tracking.klicktel.de [ C:\DOKUMENTE UND EINSTELLUNGEN\SABINE\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\9OFD1I9S.DEFAULT\COOKIES.SQLITE ]
        tracking.klicktel.de [ C:\DOKUMENTE UND EINSTELLUNGEN\SABINE\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\9OFD1I9S.DEFAULT\COOKIES.SQLITE ]
        .im.banner.t-online.de [ C:\DOKUMENTE UND EINSTELLUNGEN\SABINE\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\9OFD1I9S.DEFAULT\COOKIES.SQLITE ]
        .mediaplex.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SABINE\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\9OFD1I9S.DEFAULT\COOKIES.SQLITE ]
        .adinterax.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SABINE\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\9OFD1I9S.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\DOKUMENTE UND EINSTELLUNGEN\SABINE\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\9OFD1I9S.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\DOKUMENTE UND EINSTELLUNGEN\SABINE\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\9OFD1I9S.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\DOKUMENTE UND EINSTELLUNGEN\SABINE\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\9OFD1I9S.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\DOKUMENTE UND EINSTELLUNGEN\SABINE\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\9OFD1I9S.DEFAULT\COOKIES.SQLITE ]
        .adtech.de [ C:\DOKUMENTE UND EINSTELLUNGEN\SABINE\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\9OFD1I9S.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SABINE\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\9OFD1I9S.DEFAULT\COOKIES.SQLITE ]
        .serving-sys.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SABINE\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\9OFD1I9S.DEFAULT\COOKIES.SQLITE ]
        .serving-sys.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SABINE\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\9OFD1I9S.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SABINE\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\9OFD1I9S.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SABINE\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\9OFD1I9S.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SABINE\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\9OFD1I9S.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SABINE\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\9OFD1I9S.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SABINE\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\9OFD1I9S.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SABINE\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\9OFD1I9S.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SABINE\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\9OFD1I9S.DEFAULT\COOKIES.SQLITE ]
        ad1.adfarm1.adition.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SABINE\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\9OFD1I9S.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SABINE\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\9OFD1I9S.DEFAULT\COOKIES.SQLITE ]
        .serving-sys.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SABINE\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\9OFD1I9S.DEFAULT\COOKIES.SQLITE ]
        .serving-sys.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SABINE\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\9OFD1I9S.DEFAULT\COOKIES.SQLITE ]
        .serving-sys.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SABINE\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\9OFD1I9S.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SABINE\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\9OFD1I9S.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SABINE\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\9OFD1I9S.DEFAULT\COOKIES.SQLITE ]
        .ad.adnet.de [ C:\DOKUMENTE UND EINSTELLUNGEN\SABINE\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\9OFD1I9S.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SABINE\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\9OFD1I9S.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SABINE\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\9OFD1I9S.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SABINE\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\9OFD1I9S.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SABINE\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\9OFD1I9S.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SABINE\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\9OFD1I9S.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SABINE\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\9OFD1I9S.DEFAULT\COOKIES.SQLITE ]
        .zanox.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SABINE\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\9OFD1I9S.DEFAULT\COOKIES.SQLITE ]
        .media6degrees.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SABINE\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\9OFD1I9S.DEFAULT\COOKIES.SQLITE ]
        .media6degrees.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SABINE\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\9OFD1I9S.DEFAULT\COOKIES.SQLITE ]
        .media6degrees.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SABINE\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\9OFD1I9S.DEFAULT\COOKIES.SQLITE ]
        .media6degrees.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SABINE\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\9OFD1I9S.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SABINE\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\9OFD1I9S.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SABINE\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\9OFD1I9S.DEFAULT\COOKIES.SQLITE ]
        ad3.adfarm1.adition.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SABINE\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\9OFD1I9S.DEFAULT\COOKIES.SQLITE ]
        .doubleclick.net [ C:\DOKUMENTE UND EINSTELLUNGEN\SABINE\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\9OFD1I9S.DEFAULT\COOKIES.SQLITE ]
        www.usenext.de [ C:\DOKUMENTE UND EINSTELLUNGEN\SABINE\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\9OFD1I9S.DEFAULT\COOKIES.SQLITE ]
        .tracking.quisma.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SABINE\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\9OFD1I9S.DEFAULT\COOKIES.SQLITE ]
        adserver.71i.de [ C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\X1LN8J15.DEFAULT\COOKIES.SQLITE ]
        .advertising.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\X1LN8J15.DEFAULT\COOKIES.SQLITE ]
        .adopt.euroclick.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\X1LN8J15.DEFAULT\COOKIES.SQLITE ]
        .atdmt.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\X1LN8J15.DEFAULT\COOKIES.SQLITE ]
        eas.apm.emediate.eu [ C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\X1LN8J15.DEFAULT\COOKIES.SQLITE ]
        .ads.quartermedia.de [ C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\X1LN8J15.DEFAULT\COOKIES.SQLITE ]
        .2o7.net [ C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\X1LN8J15.DEFAULT\COOKIES.SQLITE ]
        .2o7.net [ C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\X1LN8J15.DEFAULT\COOKIES.SQLITE ]
        .2o7.net [ C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\X1LN8J15.DEFAULT\COOKIES.SQLITE ]
        .2o7.net [ C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\X1LN8J15.DEFAULT\COOKIES.SQLITE ]
        .2o7.net [ C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\X1LN8J15.DEFAULT\COOKIES.SQLITE ]
        .2o7.net [ C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\X1LN8J15.DEFAULT\COOKIES.SQLITE ]
        .statcounter.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\X1LN8J15.DEFAULT\COOKIES.SQLITE ]
        .statcounter.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\X1LN8J15.DEFAULT\COOKIES.SQLITE ]
        .statcounter.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\X1LN8J15.DEFAULT\COOKIES.SQLITE ]
        .statcounter.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\X1LN8J15.DEFAULT\COOKIES.SQLITE ]
        .statcounter.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\X1LN8J15.DEFAULT\COOKIES.SQLITE ]
        .statcounter.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\X1LN8J15.DEFAULT\COOKIES.SQLITE ]
        media.adrevolver.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\X1LN8J15.DEFAULT\COOKIES.SQLITE ]
        media.adrevolver.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\X1LN8J15.DEFAULT\COOKIES.SQLITE ]
        .112.2o7.net [ C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\X1LN8J15.DEFAULT\COOKIES.SQLITE ]
        .112.2o7.net [ C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\X1LN8J15.DEFAULT\COOKIES.SQLITE ]
        .statcounter.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\X1LN8J15.DEFAULT\COOKIES.SQLITE ]
        .statcounter.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\X1LN8J15.DEFAULT\COOKIES.SQLITE ]
        .ad.adnet.de [ C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\X1LN8J15.DEFAULT\COOKIES.SQLITE ]
        rotator.adjuggler.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\X1LN8J15.DEFAULT\COOKIES.SQLITE ]
        adsrv.admediate.net [ C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\X1LN8J15.DEFAULT\COOKIES.SQLITE ]
        .msnportal.112.2o7.net [ C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\X1LN8J15.DEFAULT\COOKIES.SQLITE ]
        .partypoker.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\X1LN8J15.DEFAULT\COOKIES.SQLITE ]
        .statcounter.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\X1LN8J15.DEFAULT\COOKIES.SQLITE ]
        ads1.w3hoster.de [ C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\X1LN8J15.DEFAULT\COOKIES.SQLITE ]
        .2o7.net [ C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\X1LN8J15.DEFAULT\COOKIES.SQLITE ]
        .2o7.net [ C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\X1LN8J15.DEFAULT\COOKIES.SQLITE ]
        .2o7.net [ C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\X1LN8J15.DEFAULT\COOKIES.SQLITE ]
        .2o7.net [ C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\X1LN8J15.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\X1LN8J15.DEFAULT\COOKIES.SQLITE ]
        track.webtrekk.de [ C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\X1LN8J15.DEFAULT\COOKIES.SQLITE ]
        ads1.w3hoster.de [ C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\X1LN8J15.DEFAULT\COOKIES.SQLITE ]
        .2o7.net [ C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\X1LN8J15.DEFAULT\COOKIES.SQLITE ]
        .e-2dj6wmloamc5glp.stats.esomniture.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\X1LN8J15.DEFAULT\COOKIES.SQLITE ]
        .nextag.de [ C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\X1LN8J15.DEFAULT\COOKIES.SQLITE ]
        .nextag.de [ C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\X1LN8J15.DEFAULT\COOKIES.SQLITE ]
        .nextag.de [ C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\X1LN8J15.DEFAULT\COOKIES.SQLITE ]
        .nextag.de [ C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\X1LN8J15.DEFAULT\COOKIES.SQLITE ]
        de.sitestat.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\X1LN8J15.DEFAULT\COOKIES.SQLITE ]
        .hamburgerabendblatt.122.2o7.net [ C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\X1LN8J15.DEFAULT\COOKIES.SQLITE ]
        .imrworldwide.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\X1LN8J15.DEFAULT\COOKIES.SQLITE ]
        .imrworldwide.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\X1LN8J15.DEFAULT\COOKIES.SQLITE ]
        .guj.122.2o7.net [ C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\X1LN8J15.DEFAULT\COOKIES.SQLITE ]
        .indextools.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\X1LN8J15.DEFAULT\COOKIES.SQLITE ]
        adserving.favorit-network.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\X1LN8J15.DEFAULT\COOKIES.SQLITE ]
        stats.hotel509.server4you.de [ C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\X1LN8J15.DEFAULT\COOKIES.SQLITE ]
        C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\COOKIES\SILVIA_L@ADS.PLANETACTIVE[2].TXT [ /ADS.PLANETACTIVE ]
        C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\COOKIES\SILVIA_L@ZANOX-AFFILIATE[2].TXT [ /ZANOX-AFFILIATE ]
        C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\COOKIES\SILVIA_L@AD.71I[1].TXT [ /AD.71I ]
        C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\COOKIES\SILVIA_L@SPECIFICCLICK[1].TXT [ /SPECIFICCLICK ]
        C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\COOKIES\SILVIA_L@ADS.HEIAS[2].TXT [ /ADS.HEIAS ]
        C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\COOKIES\SILVIA_L@KOMTRACK[1].TXT [ /KOMTRACK ]
        C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\COOKIES\SILVIA_L@KOMTRACK[3].TXT [ /KOMTRACK ]
        C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\COOKIES\SILVIA_L@TRAFFICTRACK[2].TXT [ /TRAFFICTRACK ]
        C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\COOKIES\SILVIA_L@AD.PERFORMANCE-NETZWERK[1].TXT [ /AD.PERFORMANCE-NETZWERK ]
        C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\COOKIES\SILVIA_L@IMRWORLDWIDE[2].TXT [ /IMRWORLDWIDE ]
        C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\COOKIES\SILVIA_L@CONTENT.YIELDMANAGER[2].TXT [ /CONTENT.YIELDMANAGER ]
        C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\COOKIES\SILVIA_L@AD.YIELDMANAGER[1].TXT [ /AD.YIELDMANAGER ]
        C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\COOKIES\SILVIA_L@STARDOLL.122.2O7[1].TXT [ /STARDOLL.122.2O7 ]
        C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\COOKIES\SILVIA_L@A7.ADSERVER01[2].TXT [ /A7.ADSERVER01 ]
        C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\COOKIES\SILVIA_L@AD.YN-ADS[2].TXT [ /AD.YN-ADS ]
        C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\COOKIES\SILVIA_L@EHG-FOXMOVIES.HITBOX[1].TXT [ /EHG-FOXMOVIES.HITBOX ]
        C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\COOKIES\SILVIA_L@AD.AD-SRV[2].TXT [ /AD.AD-SRV ]
        C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\COOKIES\SILVIA_L@WWW.ACTIVE-TRACKING[1].TXT [ /WWW.ACTIVE-TRACKING ]
        C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\COOKIES\SILVIA_L@ADFARM1.ADITION[2].TXT [ /ADFARM1.ADITION ]
        C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\COOKIES\SILVIA_L@AD.BAUERVERLAG[1].TXT [ /AD.BAUERVERLAG ]
        C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\COOKIES\SILVIA_L@WWW.ETRACKER[1].TXT [ /WWW.ETRACKER ]
        C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\COOKIES\SILVIA_L@EAS.APM.EMEDIATE[1].TXT [ /EAS.APM.EMEDIATE ]
        C:\DOKUMENTE UND EINSTELLUNGEN\SILVIA L\COOKIES\SILVIA_L@FASTCLICK[1].TXT [ /FASTCLICK ]

cosinus 30.05.2012 11:10
Sieht ok aus, da wurden nur Cookies gefunden.
Cookies sind keine Schädlinge direkt, aber es besteht die Gefahr der missbräuchlichen Verwendung (eindeutige Wiedererkennung zB für gezielte Werbung o.ä. => HTTP-Cookie )


Wegen Cookies und anderer Dinge im Web: Um die Pest von vornherein zu blocken (also TrackingCookies, Werbebanner etc.) müsstest du dir mal sowas wie MVPS Hosts File anschauen => Blocking Unwanted Parasites with a Hosts File - sinnvollerweise solltest du alle 4 Wochen mal bei MVPS nachsehen, ob er eine neue Hosts Datei herausgebracht hat.

Ansonsten gibt es noch gute Cookiemanager, Erweiterungen für den Firefox zB wäre da CookieCuller http://filepony.de/download-cookie_culler/
Wenn du aber damit leben kannst, dich bei jeder Browsersession überall neu einzuloggen (zB Facebook, Ebay, GMX, oder auch Trojaner-Board) dann stell den Browser einfach so ein, dass einfach alles beim Beenden des Browser inkl. Cookies gelöscht wird.

Ich halte es so, dass ich zum "wilden Surfen" den Opera-Browser oder Chromium unter meinem Linux verwende. Mein Hauptbrowser (Firefox) speichert nur die Cookies von den Sites die ich auch will, alles andere lehne ich manuell ab (der FF fragt mich immer) - die anderen Browser nehmen alles an Cookies zwar an, aber spätestens beim nächsten Start von Opera oder Chromium sind keine Cookies mehr da.

Ist dein System nun wieder in Ordnung oder gibt's noch andere Funde oder Probleme?


Alle Zeitangaben in WEZ +1. Es ist jetzt 23:56 Uhr.
Seite 2 von 3 1 2 3
100 Beiträge dieses Themas auf einer Seite anzeigen

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19