Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)
-   -   TR/SmallFI, TR/ATRAPS.Gen und TR/ATRAPS.Gen von Avira gefunden - was nun? (https://www.trojaner-board.de/117060-tr-smallfi-tr-atraps-gen-tr-atraps-gen-avira-gefunden.html)

Gruffalo 11.06.2012 16:12
TR/SmallFI, TR/ATRAPS.Gen und TR/ATRAPS.Gen von Avira gefunden - was nun?
 
Liebe Helfer,
ich bekam heute durch AVIRA den Sicherheitshinweis, dass "Viren oder unerwünschte Programme" gefunden wurden. Ich habe darauf hin diese Dateien in Quarantäne verschoben und einen Suchlauf gestartet. Das Protokoll sieht aus wie folgt:
Zitat:
Avira Free Antivirus
Erstellungsdatum der Reportdatei: Montag, 11. Juni 2012 12:51

Es wird nach 3814688 Virenstämmen gesucht.

Das Programm läuft als uneingeschränkte Vollversion.
Online-Dienste stehen zur Verfügung.

Lizenznehmer : Avira AntiVir Personal - Free Antivirus
Seriennummer : 0000149996-ADJIE-0000001
Plattform : Windows 7 Home Premium
Windowsversion : (plain) [6.1.7600]
Boot Modus : Normal gebootet
Benutzername : SYSTEM
Computername : THINKPAD

Versionsinformationen:
BUILD.DAT : 12.0.0.1125 41829 Bytes 02.05.2012 16:34:00
AVSCAN.EXE : 12.3.0.15 466896 Bytes 08.05.2012 15:15:36
AVSCAN.DLL : 12.3.0.15 66256 Bytes 08.05.2012 15:15:36
LUKE.DLL : 12.3.0.15 68304 Bytes 08.05.2012 15:15:39
AVSCPLR.DLL : 12.3.0.14 97032 Bytes 08.05.2012 15:15:41
AVREG.DLL : 12.3.0.17 232200 Bytes 10.05.2012 16:21:45
VBASE000.VDF : 7.10.0.0 19875328 Bytes 06.11.2009 18:18:34
VBASE001.VDF : 7.11.0.0 13342208 Bytes 14.12.2010 09:07:39
VBASE002.VDF : 7.11.19.170 14374912 Bytes 20.12.2011 17:58:06
VBASE003.VDF : 7.11.21.238 4472832 Bytes 01.02.2012 16:56:03
VBASE004.VDF : 7.11.26.44 4329472 Bytes 28.03.2012 15:49:25
VBASE005.VDF : 7.11.29.136 2166272 Bytes 10.05.2012 16:21:11
VBASE006.VDF : 7.11.29.137 2048 Bytes 10.05.2012 16:21:11
VBASE007.VDF : 7.11.29.138 2048 Bytes 10.05.2012 16:21:11
VBASE008.VDF : 7.11.29.139 2048 Bytes 10.05.2012 16:21:11
VBASE009.VDF : 7.11.29.140 2048 Bytes 10.05.2012 16:21:11
VBASE010.VDF : 7.11.29.141 2048 Bytes 10.05.2012 16:21:12
VBASE011.VDF : 7.11.29.142 2048 Bytes 10.05.2012 16:21:13
VBASE012.VDF : 7.11.29.143 2048 Bytes 10.05.2012 16:21:14
VBASE013.VDF : 7.11.29.144 2048 Bytes 10.05.2012 16:21:15
VBASE014.VDF : 7.11.30.3 198144 Bytes 14.05.2012 12:43:07
VBASE015.VDF : 7.11.30.69 186368 Bytes 17.05.2012 16:17:17
VBASE016.VDF : 7.11.30.143 223744 Bytes 21.05.2012 09:39:57
VBASE017.VDF : 7.11.30.207 287744 Bytes 23.05.2012 16:52:07
VBASE018.VDF : 7.11.31.57 188416 Bytes 28.05.2012 14:20:43
VBASE019.VDF : 7.11.31.111 214528 Bytes 30.05.2012 15:56:53
VBASE020.VDF : 7.11.31.151 116736 Bytes 31.05.2012 15:57:01
VBASE021.VDF : 7.11.31.205 134144 Bytes 03.06.2012 15:56:54
VBASE022.VDF : 7.11.32.9 169472 Bytes 05.06.2012 21:01:09
VBASE023.VDF : 7.11.32.85 155648 Bytes 08.06.2012 18:13:16
VBASE024.VDF : 7.11.32.86 2048 Bytes 08.06.2012 18:13:16
VBASE025.VDF : 7.11.32.87 2048 Bytes 08.06.2012 18:13:16
VBASE026.VDF : 7.11.32.88 2048 Bytes 08.06.2012 18:13:16
VBASE027.VDF : 7.11.32.89 2048 Bytes 08.06.2012 18:13:16
VBASE028.VDF : 7.11.32.90 2048 Bytes 08.06.2012 18:13:16
VBASE029.VDF : 7.11.32.91 2048 Bytes 08.06.2012 18:13:16
VBASE030.VDF : 7.11.32.92 2048 Bytes 08.06.2012 18:13:16
VBASE031.VDF : 7.11.32.116 77824 Bytes 10.06.2012 19:38:48
Engineversion : 8.2.10.80
AEVDF.DLL : 8.1.2.8 106867 Bytes 01.06.2012 15:57:08
AESCRIPT.DLL : 8.1.4.24 450939 Bytes 31.05.2012 16:00:15
AESCN.DLL : 8.1.8.2 131444 Bytes 27.01.2012 16:49:01
AESBX.DLL : 8.2.5.10 606580 Bytes 29.05.2012 16:00:48
AERDL.DLL : 8.1.9.15 639348 Bytes 08.09.2011 21:16:06
AEPACK.DLL : 8.2.16.16 807288 Bytes 29.05.2012 16:00:18
AEOFFICE.DLL : 8.1.2.28 201082 Bytes 27.04.2012 05:10:35
AEHEUR.DLL : 8.1.4.36 4874615 Bytes 31.05.2012 15:59:54
AEHELP.DLL : 8.1.21.0 254326 Bytes 11.05.2012 17:49:04
AEGEN.DLL : 8.1.5.28 422260 Bytes 27.04.2012 05:10:20
AEEXP.DLL : 8.1.0.44 82293 Bytes 29.05.2012 16:00:50
AEEMU.DLL : 8.1.3.0 393589 Bytes 01.09.2011 21:46:01
AECORE.DLL : 8.1.25.10 201080 Bytes 31.05.2012 15:57:33
AEBB.DLL : 8.1.1.0 53618 Bytes 01.09.2011 21:46:01
AVWINLL.DLL : 12.3.0.15 27344 Bytes 08.05.2012 15:15:34
AVPREF.DLL : 12.3.0.15 51920 Bytes 08.05.2012 15:15:36
AVREP.DLL : 12.3.0.15 179208 Bytes 08.05.2012 15:15:41
AVARKT.DLL : 12.3.0.15 211408 Bytes 08.05.2012 15:15:35
AVEVTLOG.DLL : 12.3.0.15 169168 Bytes 08.05.2012 15:15:36
SQLITE3.DLL : 3.7.0.1 398288 Bytes 08.05.2012 15:15:41
AVSMTP.DLL : 12.3.0.15 63440 Bytes 08.05.2012 15:15:36
NETNT.DLL : 12.3.0.15 17104 Bytes 08.05.2012 15:15:39
RCIMAGE.DLL : 12.3.0.15 4447952 Bytes 08.05.2012 15:15:35
RCTEXT.DLL : 12.3.0.15 98512 Bytes 08.05.2012 15:15:35

Konfiguration für den aktuellen Suchlauf:
Job Name..............................: Vollständige Systemprüfung
Konfigurationsdatei...................: C:\Program Files (x86)\Avira\AntiVir Desktop\sysscan.avp
Protokollierung.......................: standard
Primäre Aktion........................: quarantäne
Sekundäre Aktion......................: ignorieren
Durchsuche Masterbootsektoren.........: ein
Durchsuche Bootsektoren...............: ein
Bootsektoren..........................: C:, Q:,
Durchsuche aktive Programme...........: ein
Laufende Programme erweitert..........: ein
Durchsuche Registrierung..............: ein
Suche nach Rootkits...................: ein
Integritätsprüfung von Systemdateien..: aus
Datei Suchmodus.......................: Alle Dateien
Durchsuche Archive....................: ein
Rekursionstiefe einschränken..........: 20
Archiv Smart Extensions...............: ein
Makrovirenheuristik...................: ein
Dateiheuristik........................: erweitert

Beginn des Suchlaufs: Montag, 11. Juni 2012 12:51

Der Suchlauf über die Masterbootsektoren wird begonnen:
Masterbootsektor HD0
[INFO] Es wurde kein Virus gefunden!

Der Suchlauf über die Bootsektoren wird begonnen:
Bootsektor 'C:\'
[INFO] Es wurde kein Virus gefunden!
Bootsektor 'Q:\'
[INFO] Es wurde kein Virus gefunden!

Der Suchlauf nach versteckten Objekten wird begonnen.

Der Suchlauf über gestartete Prozesse wird begonnen:
Durchsuche Prozess 'avscan.exe' - '89' Modul(e) wurden durchsucht
Durchsuche Prozess 'avcenter.exe' - '86' Modul(e) wurden durchsucht
Durchsuche Prozess 'tvt_reg_monitor_svc.exe' - '31' Modul(e) wurden durchsucht
Durchsuche Prozess 'SUService.exe' - '65' Modul(e) wurden durchsucht
Durchsuche Prozess 'SeaPort.exe' - '65' Modul(e) wurden durchsucht
Durchsuche Prozess 'iviRegMgr.exe' - '22' Modul(e) wurden durchsucht
Durchsuche Prozess 'jusched.exe' - '38' Modul(e) wurden durchsucht
Durchsuche Prozess 'activmgr.exe' - '57' Modul(e) wurden durchsucht
Durchsuche Prozess 'AdobeARM.exe' - '52' Modul(e) wurden durchsucht
Durchsuche Prozess 'avgnt.exe' - '77' Modul(e) wurden durchsucht
Durchsuche Prozess 'ContentTransferWMDetector.exe' - '36' Modul(e) wurden durchsucht
Durchsuche Prozess 'iTunesHelper.exe' - '75' Modul(e) wurden durchsucht
Durchsuche Prozess 'MCPLaunch.exe' - '26' Modul(e) wurden durchsucht
Durchsuche Prozess 'rundll32.exe' - '29' Modul(e) wurden durchsucht
Durchsuche Prozess 'SvcGuiHlpr.exe' - '72' Modul(e) wurden durchsucht
Durchsuche Prozess 'TpScrex.exe' - '30' Modul(e) wurden durchsucht
Durchsuche Prozess 'TPONSCR.exe' - '20' Modul(e) wurden durchsucht
Durchsuche Prozess 'DevDtct2.exe' - '44' Modul(e) wurden durchsucht
Durchsuche Prozess 'SEPCSuite.exe' - '146' Modul(e) wurden durchsucht
Durchsuche Prozess 'SoftAuto.exe' - '53' Modul(e) wurden durchsucht
Durchsuche Prozess 'CTZDetec.exe' - '27' Modul(e) wurden durchsucht
Durchsuche Prozess 'IAANTMon.exe' - '36' Modul(e) wurden durchsucht
Durchsuche Prozess 'IAAnotif.exe' - '39' Modul(e) wurden durchsucht
Durchsuche Prozess 'tpfnf6r.exe' - '18' Modul(e) wurden durchsucht
Durchsuche Prozess 'TPOSDSVC.exe' - '41' Modul(e) wurden durchsucht
Durchsuche Prozess 'AcDeskBandHlpr.exe' - '77' Modul(e) wurden durchsucht
Durchsuche Prozess 'tpnumlkd.exe' - '21' Modul(e) wurden durchsucht
Durchsuche Prozess 'AcSvc.exe' - '95' Modul(e) wurden durchsucht
Durchsuche Prozess 'SupServ.exe' - '22' Modul(e) wurden durchsucht
Durchsuche Prozess 'MICMUTE.exe' - '32' Modul(e) wurden durchsucht
Durchsuche Prozess 'IJPLMSVC.EXE' - '22' Modul(e) wurden durchsucht
Durchsuche Prozess 'CTDevSrv.exe' - '17' Modul(e) wurden durchsucht
Durchsuche Prozess 'mDNSResponder.exe' - '41' Modul(e) wurden durchsucht
Durchsuche Prozess 'AppleMobileDeviceService.exe' - '35' Modul(e) wurden durchsucht
Durchsuche Prozess 'avguard.exe' - '73' Modul(e) wurden durchsucht
Durchsuche Prozess 'AcPrfMgrSvc.exe' - '70' Modul(e) wurden durchsucht
Durchsuche Prozess 'tpnumlk.exe' - '24' Modul(e) wurden durchsucht
Durchsuche Prozess 'TPHKSVC.exe' - '33' Modul(e) wurden durchsucht
Durchsuche Prozess 'sched.exe' - '42' Modul(e) wurden durchsucht

Der Suchlauf auf Verweise zu ausführbaren Dateien (Registry) wird begonnen:
Die Registry wurde durchsucht ( '3018' Dateien ).


Der Suchlauf über die ausgewählten Dateien wird begonnen:

Beginne mit der Suche in 'C:\' <Windows7_OS>
C:\Program Files (x86)\Activ Software\Inspire\help\de\webhelp.jar
[WARNUNG] Einige Dateien dieses Archives sind auf mehrere Teilarchive verteilt (multiple volume)
C:\Program Files (x86)\Activ Software\Inspire\help\de\whatsnew\webhelp.jar
[WARNUNG] Einige Dateien dieses Archives sind auf mehrere Teilarchive verteilt (multiple volume)
C:\Users\Claudia\AppData\Local\{80639323-beb1-9b13-7dd5-31196d650826}\U\00000001.@
[FUND] Ist das Trojanische Pferd TR/Small.FI
[HINWEIS] Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '561d46fd.qua' verschoben!
C:\Users\Claudia\AppData\Local\{80639323-beb1-9b13-7dd5-31196d650826}\U\80000000.@
[FUND] Ist das Trojanische Pferd TR/ATRAPS.Gen
[HINWEIS] Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '4e8a695a.qua' verschoben!
C:\Users\Claudia\AppData\Local\{80639323-beb1-9b13-7dd5-31196d650826}\U\800000cb.@
[FUND] Ist das Trojanische Pferd TR/ATRAPS.Gen2
[HINWEIS] Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '1cd533b2.qua' verschoben!
C:\Users\Claudia\Documents\STEX Päd HA\Who is my E-pal.pptx
[0] Archivtyp: ZIP
--> docProps/thumbnail.jpeg
[1] Archivtyp: ZIP
--> word/media/image4.jpeg
[WARNUNG] Die Datei konnte nicht gelesen werden!
C:\Users\Claudia\Downloads\ActivInspire_main_res_v1.1_DEU.as4a
[WARNUNG] Die Datei ist kennwortgeschützt
C:\Users\Claudia\Downloads\avira_free_antivirus_de.exe
[WARNUNG] Die Datei ist kennwortgeschützt
C:\Users\Tilo\Desktop\Tilo\Sicherung Stick 11.11.11\f4\uninstall.exe
[WARNUNG] Die Version dieses Archives wird nicht unterstützt
C:\Users\Tilo\Desktop\Tilo\Sicherung Stick 31-03-11\Wechseldatenträger\f4\uninstall.exe
[WARNUNG] Die Version dieses Archives wird nicht unterstützt
C:\Users\Tilo\Desktop\Tilo\Stick Sicherung 14.02.11\f4\uninstall.exe
[WARNUNG] Die Version dieses Archives wird nicht unterstützt
Beginne mit der Suche in 'Q:\' <Lenovo_Recovery>


Ende des Suchlaufs: Montag, 11. Juni 2012 15:21
Benötigte Zeit: 2:30:30 Stunde(n)

Der Suchlauf wurde vollständig durchgeführt.

37945 Verzeichnisse wurden überprüft
664478 Dateien wurden geprüft
3 Viren bzw. unerwünschte Programme wurden gefunden
0 Dateien wurden als verdächtig eingestuft
0 Dateien wurden gelöscht
0 Viren bzw. unerwünschte Programme wurden repariert
3 Dateien wurden in die Quarantäne verschoben
0 Dateien wurden umbenannt
0 Dateien konnten nicht durchsucht werden
664475 Dateien ohne Befall
8623 Archive wurden durchsucht
8 Warnungen
3 Hinweise
818575 Objekte wurden beim Rootkitscan durchsucht
0 Versteckte Objekte wurden gefunden

Trotz des Verschiebens in die Quarantäne zeigt mir AVIRA immer wieder erneut die gleichen Funde in regelmäßigen Meldungen. Ich habe dazu gegoogelt und verschiedene Foreneinträge gefunden, aber nur die Hälfte davon verstanden. Deshalb möchte ich auf eure Hilfe zurück greifen.
Zunächst habe ich die Anti-Malware, die hier angegeben ist, heruntergeladen und damit einen Scan durchgeführt. Dieser hat keine Funde ergeben. Aber ist mein Computer jetzt sicher?
Hier das Logfile:

Zitat:
Malwarebytes Anti-Malware 1.61.0.1400
www.malwarebytes.org

Datenbank Version: v2012.06.11.05

Windows 7 x64 NTFS
Internet Explorer 9.0.8112.16421
admin :: THINKPAD [Administrator]

11.06.2012 16:41:20
mbam-log-2012-06-11 (16-41-20).txt

Art des Suchlaufs: Quick-Scan
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 257364
Laufzeit: 6 Minute(n), 37 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 0
(Keine bösartigen Objekte gefunden)

(Ende)
Ich bedanke mich herzlich für eure Hilfe
Gruffalo

Chris4You 11.06.2012 16:18
Hi,

Rootkit....

Combofix
Lade Combo Fix von http://download.bleepingcomputer.com/sUBs/ComboFix.exe und speichert es auf den Desktop.

Achtung: In einigen wenigen Fällen kann es vorkommen, das der Rechner nicht mehr booten kann und Neuaufgesetzt werden muß!

Alle Fenster schliessen und combofix.exe starten und bestätige die folgende Abfrage mit 1 und drücke Enter.

Der Scan mit Combofix kann einige Zeit in Anspruch nehmen, also habe etwas Geduld. Während des Scans bitte nichts am Rechner unternehmen
Es kann möglich sein, dass der Rechner zwischendurch neu gestartet wird.
Nach Scanende wird ein Report (ComboFix.txt) angezeigt, den bitte kopieren und in deinem Thread einfuegen. Das Log solltest Du unter C:\ComboFix.txt finden...

Danach MAM updaten und FULLSCAN, Log posten...

chris

Ps.: Bin morgen den ganzen Tag unterwegs...

Gruffalo 11.06.2012 17:30
Vielen Dank Chris für deine schnelle Hilfe. Ich habe Combofix heruntergeladen und ausgeführt, doch seit 30 min zeigt es mir nur ein Fenster an in dem steht:
Zitat:
Bitte warten. ComboFix wird vorbereitet, um ausgeführt zu werden. Versuche, einen neuen Systemwiederherstellungspunkt zu erstellen.
Soll ich weiter warten?
Gruffalo

Chris4You 11.06.2012 18:15
Hi,

tut sich auf der Festplatte noch was?
Wenn nein, Rechner in den abgesicherten Modus neu booten (F8 beim Booten drücken) und nochmal probieren...

Falls er wieder hängenbleibt,
Hitman

Lade Dir die passende Version von Hitman runter (32/64Bit), laufen lassen und Log posten.
ACHTUNG: Firewall muss für Hitman geöffnet sein (Zugriff unbedingt erlauben!)
Downloads - SurfRight
Zur Beseitigung kann eine 30-Tage kostenlose Lizenz angefordert werden...

Sonst scannen wir über CD von aussen...

chris
Ps.: Nach dem Start von CF nichts mehr am Rechner machen (keine Maus bewegen etc....)

Gruffalo 11.06.2012 21:01
Hallo Chris,
CF hat sich wieder aufgehängt, also habe ich Hitman heruntergeladen und auf dem Rechner laufen lassen. Das Log ist ziemlich unübersichtlich - tut mir leid. ABer das hat er gefunden: (wenn du mit der Suchfunktion "Trojaner" eingibst, findest du es schnell):

Zitat:
<?xml version="1.0"?>
<Log filesProcessed="56452" timeSpentInSecs="1459" date="2012-06-11T21:12:29" version="3.6.0.156" scan="Normal" computer="THINKPAD"><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\h2o2uvkg.default\cookies.sqlite:112.2o7.net"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\h2o2uvkg.default\cookies.sqlite:122.2o7.net"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\h2o2uvkg.default\cookies.sqlite:247realmedia.com"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\h2o2uvkg.default\cookies.sqlite:2o7.net"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\h2o2uvkg.default\cookies.sqlite:ad.360yield.com"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\h2o2uvkg.default\cookies.sqlite:ad.ad-srv.net"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\h2o2uvkg.default\cookies.sqlite:ad.adc-serv.net"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\h2o2uvkg.default\cookies.sqlite:ad.adition.net"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\h2o2uvkg.default\cookies.sqlite:ad.adnet.de"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\h2o2uvkg.default\cookies.sqlite:ad.adserver01.de"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\h2o2uvkg.default\cookies.sqlite:ad.servestats.com"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\h2o2uvkg.default\cookies.sqlite:ad.yieldmanager.com"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\h2o2uvkg.default\cookies.sqlite:ad.zanox.com"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\h2o2uvkg.default\cookies.sqlite:adbrite.com"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\h2o2uvkg.default\cookies.sqlite:adinterax.com"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\h2o2uvkg.default\cookies.sqlite:ads-lb.creative-serving.com"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\h2o2uvkg.default\cookies.sqlite:ads.1a-infosysteme.de"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\h2o2uvkg.default\cookies.sqlite:ads.adcloud.net"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\h2o2uvkg.default\cookies.sqlite:ads.creative-serving.com"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\h2o2uvkg.default\cookies.sqlite:ads.etonix.de"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\h2o2uvkg.default\cookies.sqlite:ads.how-to-do.it"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\h2o2uvkg.default\cookies.sqlite:ads.jenapolis.dotcloud.com"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\h2o2uvkg.default\cookies.sqlite:ads.linguee.com"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\h2o2uvkg.default\cookies.sqlite:ads.pointroll.com"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\h2o2uvkg.default\cookies.sqlite:ads.spinsoft.de"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\h2o2uvkg.default\cookies.sqlite:ads.undertone.com"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\h2o2uvkg.default\cookies.sqlite:ads.weimar-gmbh.com"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\h2o2uvkg.default\cookies.sqlite:adserver.adtechus.com"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\h2o2uvkg.default\cookies.sqlite:adserver.advertisingbox.com"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\h2o2uvkg.default\cookies.sqlite:adserver.gb5.motorpresse.de"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\h2o2uvkg.default\cookies.sqlite:adserver.mvg-werbung.de"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\h2o2uvkg.default\cookies.sqlite:adserver1.mokono.com"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\h2o2uvkg.default\cookies.sqlite:adtech.de"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\h2o2uvkg.default\cookies.sqlite:advertising.com"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\h2o2uvkg.default\cookies.sqlite:adviva.net"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\h2o2uvkg.default\cookies.sqlite:apmebf.com"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\h2o2uvkg.default\cookies.sqlite:at.atwola.com"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\h2o2uvkg.default\cookies.sqlite:atdmt.com"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\h2o2uvkg.default\cookies.sqlite:bs.serving-sys.com"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\h2o2uvkg.default\cookies.sqlite:burstnet.com"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\h2o2uvkg.default\cookies.sqlite:casalemedia.com"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\h2o2uvkg.default\cookies.sqlite:clickbank.net"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\h2o2uvkg.default\cookies.sqlite:collective-media.net"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\h2o2uvkg.default\cookies.sqlite:counter.hitslink.com"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\h2o2uvkg.default\cookies.sqlite:cunda.122.2o7.net"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\h2o2uvkg.default\cookies.sqlite:de.sitestat.com"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\h2o2uvkg.default\cookies.sqlite:doubleclick.net"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\h2o2uvkg.default\cookies.sqlite:eas.apm.emediate.eu"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\h2o2uvkg.default\cookies.sqlite:eas21.emediate.eu"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\h2o2uvkg.default\cookies.sqlite:educationcom.112.2o7.net"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\h2o2uvkg.default\cookies.sqlite:ehg-sz.hitbox.com"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\h2o2uvkg.default\cookies.sqlite:ewstv.112.2o7.net"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\h2o2uvkg.default\cookies.sqlite:fastclick.net"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\h2o2uvkg.default\cookies.sqlite:findarticles.com"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\h2o2uvkg.default\cookies.sqlite:fr.sitestat.com"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\h2o2uvkg.default\cookies.sqlite:getclicky.com"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\h2o2uvkg.default\cookies.sqlite:gmeurope.112.2o7.net"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\h2o2uvkg.default\cookies.sqlite:guj.122.2o7.net"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\h2o2uvkg.default\cookies.sqlite:hotelreservationservice.122.2o7.net"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\h2o2uvkg.default\cookies.sqlite:in.getclicky.com"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\h2o2uvkg.default\cookies.sqlite:interclick.com"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\h2o2uvkg.default\cookies.sqlite:invitemedia.com"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\h2o2uvkg.default\cookies.sqlite:kontera.com"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\h2o2uvkg.default\cookies.sqlite:lokalportal24de.112.2o7.net"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\h2o2uvkg.default\cookies.sqlite:loyaltypartner.122.2o7.net"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\h2o2uvkg.default\cookies.sqlite:media6degrees.com"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\h2o2uvkg.default\cookies.sqlite:mediaplex.com"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\h2o2uvkg.default\cookies.sqlite:mm.chitika.net"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\h2o2uvkg.default\cookies.sqlite:olympiaverlag.122.2o7.net"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\h2o2uvkg.default\cookies.sqlite:overture.com"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\h2o2uvkg.default\cookies.sqlite:pointroll.com"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\h2o2uvkg.default\cookies.sqlite:questionmarket.com"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\h2o2uvkg.default\cookies.sqlite:realmedia.com"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\h2o2uvkg.default\cookies.sqlite:revsci.net"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\h2o2uvkg.default\cookies.sqlite:ru4.com"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\h2o2uvkg.default\cookies.sqlite:serving-sys.com"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\h2o2uvkg.default\cookies.sqlite:smartadserver.com"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\h2o2uvkg.default\cookies.sqlite:specificclick.net"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\h2o2uvkg.default\cookies.sqlite:statcounter.com"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\h2o2uvkg.default\cookies.sqlite:static.getclicky.com"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\h2o2uvkg.default\cookies.sqlite:stats.complex.com"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\h2o2uvkg.default\cookies.sqlite:statse.webtrendslive.com"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\h2o2uvkg.default\cookies.sqlite:tacoda.at.atwola.com"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\h2o2uvkg.default\cookies.sqlite:track.adform.net"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\h2o2uvkg.default\cookies.sqlite:track.effiliation.com"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\h2o2uvkg.default\cookies.sqlite:track.solocpm.com"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\h2o2uvkg.default\cookies.sqlite:track.zalando.de"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\h2o2uvkg.default\cookies.sqlite:tradedoubler.com"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\h2o2uvkg.default\cookies.sqlite:tribalfusion.com"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\h2o2uvkg.default\cookies.sqlite:tsleducation.112.2o7.net"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\h2o2uvkg.default\cookies.sqlite:ww251.smartadserver.com"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\h2o2uvkg.default\cookies.sqlite:www.burstnet.com"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\h2o2uvkg.default\cookies.sqlite:www.etracker.de"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\h2o2uvkg.default\cookies.sqlite:www.googleadservices.com"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\h2o2uvkg.default\cookies.sqlite:xiti.com"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\h2o2uvkg.default\cookies.sqlite:yieldmanager.net"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Claudia\AppData\Roaming\Mozilla\Firefox\Profiles\h2o2uvkg.default\cookies.sqlite:zedo.com"/></Item><Item status="Quarantiend" score="110.0" type="Malware" malwareName="Trojan"><Scanners><Scanner name="Trojan.Siggen4.4395" id="DrWeb"/></Scanners><File path="C:\Users\Claudia\Desktop\OTL.exe" hash="5CB5EDB9467746029282CBC82A1718E6C7C62CC2A676029EF96C5136AB9BBFA0"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Tilo\AppData\Roaming\Mozilla\Firefox\Profiles\57xg6rc1.default\cookies.sqlite:112.2o7.net"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Tilo\AppData\Roaming\Mozilla\Firefox\Profiles\57xg6rc1.default\cookies.sqlite:247realmedia.com"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Tilo\AppData\Roaming\Mozilla\Firefox\Profiles\57xg6rc1.default\cookies.sqlite:2o7.net"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Tilo\AppData\Roaming\Mozilla\Firefox\Profiles\57xg6rc1.default\cookies.sqlite:activenetwork.122.2o7.net"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Tilo\AppData\Roaming\Mozilla\Firefox\Profiles\57xg6rc1.default\cookies.sqlite:ad.360yield.com"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Tilo\AppData\Roaming\Mozilla\Firefox\Profiles\57xg6rc1.default\cookies.sqlite:ad.ad-srv.net"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Tilo\AppData\Roaming\Mozilla\Firefox\Profiles\57xg6rc1.default\cookies.sqlite:ad.adc-serv.net"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Tilo\AppData\Roaming\Mozilla\Firefox\Profiles\57xg6rc1.default\cookies.sqlite:ad.adition.net"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Tilo\AppData\Roaming\Mozilla\Firefox\Profiles\57xg6rc1.default\cookies.sqlite:ad.adnet.de"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Tilo\AppData\Roaming\Mozilla\Firefox\Profiles\57xg6rc1.default\cookies.sqlite:ad.adserver01.de"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Tilo\AppData\Roaming\Mozilla\Firefox\Profiles\57xg6rc1.default\cookies.sqlite:ad.cpc.unister-gmbh.de"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Tilo\AppData\Roaming\Mozilla\Firefox\Profiles\57xg6rc1.default\cookies.sqlite:ad.yieldmanager.com"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Tilo\AppData\Roaming\Mozilla\Firefox\Profiles\57xg6rc1.default\cookies.sqlite:ad.zanox.com"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Tilo\AppData\Roaming\Mozilla\Firefox\Profiles\57xg6rc1.default\cookies.sqlite:adbrite.com"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Tilo\AppData\Roaming\Mozilla\Firefox\Profiles\57xg6rc1.default\cookies.sqlite:adinterax.com"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Tilo\AppData\Roaming\Mozilla\Firefox\Profiles\57xg6rc1.default\cookies.sqlite:ads.adcloud.net"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Tilo\AppData\Roaming\Mozilla\Firefox\Profiles\57xg6rc1.default\cookies.sqlite:ads.brandwire.tv"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Tilo\AppData\Roaming\Mozilla\Firefox\Profiles\57xg6rc1.default\cookies.sqlite:ads.cnn.com"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Tilo\AppData\Roaming\Mozilla\Firefox\Profiles\57xg6rc1.default\cookies.sqlite:ads.creative-serving.com"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Tilo\AppData\Roaming\Mozilla\Firefox\Profiles\57xg6rc1.default\cookies.sqlite:ads.czol.org"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Tilo\AppData\Roaming\Mozilla\Firefox\Profiles\57xg6rc1.default\cookies.sqlite:ads.immobilienscout24.de"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Tilo\AppData\Roaming\Mozilla\Firefox\Profiles\57xg6rc1.default\cookies.sqlite:ads.pointroll.com"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Tilo\AppData\Roaming\Mozilla\Firefox\Profiles\57xg6rc1.default\cookies.sqlite:ads.quartermedia.de"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Tilo\AppData\Roaming\Mozilla\Firefox\Profiles\57xg6rc1.default\cookies.sqlite:ads.spinsoft.de"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Tilo\AppData\Roaming\Mozilla\Firefox\Profiles\57xg6rc1.default\cookies.sqlite:ads.travel-overland.de"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Tilo\AppData\Roaming\Mozilla\Firefox\Profiles\57xg6rc1.default\cookies.sqlite:ads.undertone.com"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Tilo\AppData\Roaming\Mozilla\Firefox\Profiles\57xg6rc1.default\cookies.sqlite:adserver.ask1.org"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Tilo\AppData\Roaming\Mozilla\Firefox\Profiles\57xg6rc1.default\cookies.sqlite:adserver.kino-zeit.de"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Tilo\AppData\Roaming\Mozilla\Firefox\Profiles\57xg6rc1.default\cookies.sqlite:adserver.sevenload.com"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Tilo\AppData\Roaming\Mozilla\Firefox\Profiles\57xg6rc1.default\cookies.sqlite:adserver.traffictrack.de"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Tilo\AppData\Roaming\Mozilla\Firefox\Profiles\57xg6rc1.default\cookies.sqlite:adserver.yopi.de"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Tilo\AppData\Roaming\Mozilla\Firefox\Profiles\57xg6rc1.default\cookies.sqlite:adtech.de"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Tilo\AppData\Roaming\Mozilla\Firefox\Profiles\57xg6rc1.default\cookies.sqlite:advertising.com"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Tilo\AppData\Roaming\Mozilla\Firefox\Profiles\57xg6rc1.default\cookies.sqlite:adviva.net"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Tilo\AppData\Roaming\Mozilla\Firefox\Profiles\57xg6rc1.default\cookies.sqlite:aerlingus.122.2o7.net"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Tilo\AppData\Roaming\Mozilla\Firefox\Profiles\57xg6rc1.default\cookies.sqlite:apmebf.com"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Tilo\AppData\Roaming\Mozilla\Firefox\Profiles\57xg6rc1.default\cookies.sqlite:atdmt.com"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Tilo\AppData\Roaming\Mozilla\Firefox\Profiles\57xg6rc1.default\cookies.sqlite:autoscout24.112.2o7.net"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Tilo\AppData\Roaming\Mozilla\Firefox\Profiles\57xg6rc1.default\cookies.sqlite:bluestreak.com"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Tilo\AppData\Roaming\Mozilla\Firefox\Profiles\57xg6rc1.default\cookies.sqlite:bs.serving-sys.com"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Tilo\AppData\Roaming\Mozilla\Firefox\Profiles\57xg6rc1.default\cookies.sqlite:c.atdmt.com"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Tilo\AppData\Roaming\Mozilla\Firefox\Profiles\57xg6rc1.default\cookies.sqlite:casalemedia.com"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Tilo\AppData\Roaming\Mozilla\Firefox\Profiles\57xg6rc1.default\cookies.sqlite:collective-media.net"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Tilo\AppData\Roaming\Mozilla\Firefox\Profiles\57xg6rc1.default\cookies.sqlite:conrad.122.2o7.net"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Tilo\AppData\Roaming\Mozilla\Firefox\Profiles\57xg6rc1.default\cookies.sqlite:content.yieldmanager.com"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Tilo\AppData\Roaming\Mozilla\Firefox\Profiles\57xg6rc1.default\cookies.sqlite:daimlerag.122.2o7.net"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Tilo\AppData\Roaming\Mozilla\Firefox\Profiles\57xg6rc1.default\cookies.sqlite:de.sitestat.com"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Tilo\AppData\Roaming\Mozilla\Firefox\Profiles\57xg6rc1.default\cookies.sqlite:deutschepostag.112.2o7.net"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Tilo\AppData\Roaming\Mozilla\Firefox\Profiles\57xg6rc1.default\cookies.sqlite:dmtracker.com"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Tilo\AppData\Roaming\Mozilla\Firefox\Profiles\57xg6rc1.default\cookies.sqlite:doubleclick.net"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Tilo\AppData\Roaming\Mozilla\Firefox\Profiles\57xg6rc1.default\cookies.sqlite:eas.apm.emediate.eu"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Tilo\AppData\Roaming\Mozilla\Firefox\Profiles\57xg6rc1.default\cookies.sqlite:eas4.emediate.eu"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Tilo\AppData\Roaming\Mozilla\Firefox\Profiles\57xg6rc1.default\cookies.sqlite:eas8.emediate.eu"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Tilo\AppData\Roaming\Mozilla\Firefox\Profiles\57xg6rc1.default\cookies.sqlite:efeducationfirst.112.2o7.net"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Tilo\AppData\Roaming\Mozilla\Firefox\Profiles\57xg6rc1.default\cookies.sqlite:ehg-sz.hitbox.com"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Tilo\AppData\Roaming\Mozilla\Firefox\Profiles\57xg6rc1.default\cookies.sqlite:ehg-tfl.hitbox.com"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Tilo\AppData\Roaming\Mozilla\Firefox\Profiles\57xg6rc1.default\cookies.sqlite:emjcd.com"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Tilo\AppData\Roaming\Mozilla\Firefox\Profiles\57xg6rc1.default\cookies.sqlite:fastclick.net"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Tilo\AppData\Roaming\Mozilla\Firefox\Profiles\57xg6rc1.default\cookies.sqlite:fl01.ct2.comclick.com"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Tilo\AppData\Roaming\Mozilla\Firefox\Profiles\57xg6rc1.default\cookies.sqlite:fls.doubleclick.net"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Tilo\AppData\Roaming\Mozilla\Firefox\Profiles\57xg6rc1.default\cookies.sqlite:fr.sitestat.com"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Tilo\AppData\Roaming\Mozilla\Firefox\Profiles\57xg6rc1.default\cookies.sqlite:gmglobalgm.112.2o7.net"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Tilo\AppData\Roaming\Mozilla\Firefox\Profiles\57xg6rc1.default\cookies.sqlite:ice.112.2o7.net"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Tilo\AppData\Roaming\Mozilla\Firefox\Profiles\57xg6rc1.default\cookies.sqlite:in.getclicky.com"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Tilo\AppData\Roaming\Mozilla\Firefox\Profiles\57xg6rc1.default\cookies.sqlite:interclick.com"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Tilo\AppData\Roaming\Mozilla\Firefox\Profiles\57xg6rc1.default\cookies.sqlite:invitemedia.com"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Tilo\AppData\Roaming\Mozilla\Firefox\Profiles\57xg6rc1.default\cookies.sqlite:james.adbutler.de"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Tilo\AppData\Roaming\Mozilla\Firefox\Profiles\57xg6rc1.default\cookies.sqlite:kontera.com"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Tilo\AppData\Roaming\Mozilla\Firefox\Profiles\57xg6rc1.default\cookies.sqlite:loccitane.solution.weborama.fr"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Tilo\AppData\Roaming\Mozilla\Firefox\Profiles\57xg6rc1.default\cookies.sqlite:media6degrees.com"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Tilo\AppData\Roaming\Mozilla\Firefox\Profiles\57xg6rc1.default\cookies.sqlite:mediaplex.com"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Tilo\AppData\Roaming\Mozilla\Firefox\Profiles\57xg6rc1.default\cookies.sqlite:msnportal.112.2o7.net"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Tilo\AppData\Roaming\Mozilla\Firefox\Profiles\57xg6rc1.default\cookies.sqlite:mtvn.112.2o7.net"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Tilo\AppData\Roaming\Mozilla\Firefox\Profiles\57xg6rc1.default\cookies.sqlite:nissaneurope.112.2o7.net"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Tilo\AppData\Roaming\Mozilla\Firefox\Profiles\57xg6rc1.default\cookies.sqlite:olympiaverlag.122.2o7.net"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Tilo\AppData\Roaming\Mozilla\Firefox\Profiles\57xg6rc1.default\cookies.sqlite:opodo.122.2o7.net"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Tilo\AppData\Roaming\Mozilla\Firefox\Profiles\57xg6rc1.default\cookies.sqlite:overture.com"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Tilo\AppData\Roaming\Mozilla\Firefox\Profiles\57xg6rc1.default\cookies.sqlite:pointroll.com"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Tilo\AppData\Roaming\Mozilla\Firefox\Profiles\57xg6rc1.default\cookies.sqlite:questionmarket.com"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Tilo\AppData\Roaming\Mozilla\Firefox\Profiles\57xg6rc1.default\cookies.sqlite:randomhouse.122.2o7.net"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Tilo\AppData\Roaming\Mozilla\Firefox\Profiles\57xg6rc1.default\cookies.sqlite:revsci.net"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Tilo\AppData\Roaming\Mozilla\Firefox\Profiles\57xg6rc1.default\cookies.sqlite:rotator.adjuggler.com"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Tilo\AppData\Roaming\Mozilla\Firefox\Profiles\57xg6rc1.default\cookies.sqlite:ru4.com"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Tilo\AppData\Roaming\Mozilla\Firefox\Profiles\57xg6rc1.default\cookies.sqlite:serving-sys.com"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Tilo\AppData\Roaming\Mozilla\Firefox\Profiles\57xg6rc1.default\cookies.sqlite:sevenoneintermedia.112.2o7.net"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Tilo\AppData\Roaming\Mozilla\Firefox\Profiles\57xg6rc1.default\cookies.sqlite:skydeutschland.122.2o7.net"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Tilo\AppData\Roaming\Mozilla\Firefox\Profiles\57xg6rc1.default\cookies.sqlite:smartadserver.com"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Tilo\AppData\Roaming\Mozilla\Firefox\Profiles\57xg6rc1.default\cookies.sqlite:sonyeurope.112.2o7.net"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Tilo\AppData\Roaming\Mozilla\Firefox\Profiles\57xg6rc1.default\cookies.sqlite:specificclick.net"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Tilo\AppData\Roaming\Mozilla\Firefox\Profiles\57xg6rc1.default\cookies.sqlite:stat.4u.pl"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Tilo\AppData\Roaming\Mozilla\Firefox\Profiles\57xg6rc1.default\cookies.sqlite:statcounter.com"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Tilo\AppData\Roaming\Mozilla\Firefox\Profiles\57xg6rc1.default\cookies.sqlite:stats.jac-systeme.de"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Tilo\AppData\Roaming\Mozilla\Firefox\Profiles\57xg6rc1.default\cookies.sqlite:statse.webtrendslive.com"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Tilo\AppData\Roaming\Mozilla\Firefox\Profiles\57xg6rc1.default\cookies.sqlite:tele2de.112.2o7.net"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Tilo\AppData\Roaming\Mozilla\Firefox\Profiles\57xg6rc1.default\cookies.sqlite:thomascookag.122.2o7.net"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Tilo\AppData\Roaming\Mozilla\Firefox\Profiles\57xg6rc1.default\cookies.sqlite:track.adform.net"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Tilo\AppData\Roaming\Mozilla\Firefox\Profiles\57xg6rc1.default\cookies.sqlite:track.effiliation.com"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Tilo\AppData\Roaming\Mozilla\Firefox\Profiles\57xg6rc1.default\cookies.sqlite:track.webtrekk.de"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Tilo\AppData\Roaming\Mozilla\Firefox\Profiles\57xg6rc1.default\cookies.sqlite:tradedoubler.com"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Tilo\AppData\Roaming\Mozilla\Firefox\Profiles\57xg6rc1.default\cookies.sqlite:tribalfusion.com"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Tilo\AppData\Roaming\Mozilla\Firefox\Profiles\57xg6rc1.default\cookies.sqlite:weborama.fr"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Tilo\AppData\Roaming\Mozilla\Firefox\Profiles\57xg6rc1.default\cookies.sqlite:ww251.smartadserver.com"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Tilo\AppData\Roaming\Mozilla\Firefox\Profiles\57xg6rc1.default\cookies.sqlite:www.burstnet.com"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Tilo\AppData\Roaming\Mozilla\Firefox\Profiles\57xg6rc1.default\cookies.sqlite:www.emjcd.com"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Tilo\AppData\Roaming\Mozilla\Firefox\Profiles\57xg6rc1.default\cookies.sqlite:www.etracker.de"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Tilo\AppData\Roaming\Mozilla\Firefox\Profiles\57xg6rc1.default\cookies.sqlite:www.googleadservices.com"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Tilo\AppData\Roaming\Mozilla\Firefox\Profiles\57xg6rc1.default\cookies.sqlite:xiti.com"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Tilo\AppData\Roaming\Mozilla\Firefox\Profiles\57xg6rc1.default\cookies.sqlite:yieldmanager.net"/></Item><Item status="Deleted" score="0.0" type="Repair"><File path="C:\Users\Tilo\AppData\Roaming\Mozilla\Firefox\Profiles\57xg6rc1.default\cookies.sqlite:zedo.com"/></Item></Log>f
Ich hoffe, jetzt ist das Problem beseitigt?!
1000 Dank, Gruffalo

Chris4You 13.06.2012 06:48
Hi,

bitte das Log als Anhang posten, es ist nicht vollständig!
In dem geposteten Teil ist auf jeden Fall nicht das drin, was er hätte finden sollen...

chris

Gruffalo 13.06.2012 15:23
Hallo Chris,
ich hatte das Log von Hitman vorsichtshalber markiert und kopiert und dann auch in word abgespeichert. Das Log von Hitman konnte ich dann tatsächlich nicht mehr in den Dateien finden. Also hier der Anhang in word.
Am Montag hatte ich noch einmal nach HITMAN AVIRA drüber laufen lassen und es meldete wieder die 3 Funde - den Suchdurchlauf brach ich dann ab, weil es schon fast Mitternacht war.

Code:


Avira Free Antivirus
Erstellungsdatum der Reportdatei: Montag, 11. Juni 2012  22:22

Es wird nach 3818089 Virenstämmen gesucht.

Das Programm läuft als uneingeschränkte Vollversion.
Online-Dienste stehen zur Verfügung.

Lizenznehmer  : Avira AntiVir Personal - Free Antivirus
Seriennummer  : 0000149996-ADJIE-0000001
Plattform      : Windows 7 Home Premium
Windowsversion : (plain)  [6.1.7600]
Boot Modus    : Normal gebootet
Benutzername  : SYSTEM
Computername  : THINKPAD

Versionsinformationen:
BUILD.DAT      : 12.0.0.1125    41829 Bytes  02.05.2012 16:34:00
AVSCAN.EXE    : 12.3.0.15    466896 Bytes  08.05.2012 15:15:36
AVSCAN.DLL    : 12.3.0.15      66256 Bytes  08.05.2012 15:15:36
LUKE.DLL      : 12.3.0.15      68304 Bytes  08.05.2012 15:15:39
AVSCPLR.DLL    : 12.3.0.14      97032 Bytes  08.05.2012 15:15:41
AVREG.DLL      : 12.3.0.17    232200 Bytes  10.05.2012 16:21:45
VBASE000.VDF  : 7.10.0.0    19875328 Bytes  06.11.2009 18:18:34
VBASE001.VDF  : 7.11.0.0    13342208 Bytes  14.12.2010 09:07:39
VBASE002.VDF  : 7.11.19.170 14374912 Bytes  20.12.2011 17:58:06
VBASE003.VDF  : 7.11.21.238  4472832 Bytes  01.02.2012 16:56:03
VBASE004.VDF  : 7.11.26.44  4329472 Bytes  28.03.2012 15:49:25
VBASE005.VDF  : 7.11.29.136  2166272 Bytes  10.05.2012 16:21:11
VBASE006.VDF  : 7.11.29.137    2048 Bytes  10.05.2012 16:21:11
VBASE007.VDF  : 7.11.29.138    2048 Bytes  10.05.2012 16:21:11
VBASE008.VDF  : 7.11.29.139    2048 Bytes  10.05.2012 16:21:11
VBASE009.VDF  : 7.11.29.140    2048 Bytes  10.05.2012 16:21:11
VBASE010.VDF  : 7.11.29.141    2048 Bytes  10.05.2012 16:21:12
VBASE011.VDF  : 7.11.29.142    2048 Bytes  10.05.2012 16:21:13
VBASE012.VDF  : 7.11.29.143    2048 Bytes  10.05.2012 16:21:14
VBASE013.VDF  : 7.11.29.144    2048 Bytes  10.05.2012 16:21:15
VBASE014.VDF  : 7.11.30.3    198144 Bytes  14.05.2012 12:43:07
VBASE015.VDF  : 7.11.30.69    186368 Bytes  17.05.2012 16:17:17
VBASE016.VDF  : 7.11.30.143  223744 Bytes  21.05.2012 09:39:57
VBASE017.VDF  : 7.11.30.207  287744 Bytes  23.05.2012 16:52:07
VBASE018.VDF  : 7.11.31.57    188416 Bytes  28.05.2012 14:20:43
VBASE019.VDF  : 7.11.31.111  214528 Bytes  30.05.2012 15:56:53
VBASE020.VDF  : 7.11.31.151  116736 Bytes  31.05.2012 15:57:01
VBASE021.VDF  : 7.11.31.205  134144 Bytes  03.06.2012 15:56:54
VBASE022.VDF  : 7.11.32.9    169472 Bytes  05.06.2012 21:01:09
VBASE023.VDF  : 7.11.32.85    155648 Bytes  08.06.2012 18:13:16
VBASE024.VDF  : 7.11.32.133  127488 Bytes  11.06.2012 19:38:49
VBASE025.VDF  : 7.11.32.134    2048 Bytes  11.06.2012 19:38:49
VBASE026.VDF  : 7.11.32.135    2048 Bytes  11.06.2012 19:38:49
VBASE027.VDF  : 7.11.32.136    2048 Bytes  11.06.2012 19:38:50
VBASE028.VDF  : 7.11.32.137    2048 Bytes  11.06.2012 19:38:50
VBASE029.VDF  : 7.11.32.138    2048 Bytes  11.06.2012 19:38:50
VBASE030.VDF  : 7.11.32.139    2048 Bytes  11.06.2012 19:38:50
VBASE031.VDF  : 7.11.32.140    2048 Bytes  11.06.2012 19:38:50
Engineversion  : 8.2.10.80
AEVDF.DLL      : 8.1.2.8      106867 Bytes  01.06.2012 15:57:08
AESCRIPT.DLL  : 8.1.4.24      450939 Bytes  31.05.2012 16:00:15
AESCN.DLL      : 8.1.8.2      131444 Bytes  27.01.2012 16:49:01
AESBX.DLL      : 8.2.5.10      606580 Bytes  29.05.2012 16:00:48
AERDL.DLL      : 8.1.9.15      639348 Bytes  08.09.2011 21:16:06
AEPACK.DLL    : 8.2.16.16    807288 Bytes  29.05.2012 16:00:18
AEOFFICE.DLL  : 8.1.2.28      201082 Bytes  27.04.2012 05:10:35
AEHEUR.DLL    : 8.1.4.36    4874615 Bytes  31.05.2012 15:59:54
AEHELP.DLL    : 8.1.21.0      254326 Bytes  11.05.2012 17:49:04
AEGEN.DLL      : 8.1.5.28      422260 Bytes  27.04.2012 05:10:20
AEEXP.DLL      : 8.1.0.44      82293 Bytes  29.05.2012 16:00:50
AEEMU.DLL      : 8.1.3.0      393589 Bytes  01.09.2011 21:46:01
AECORE.DLL    : 8.1.25.10    201080 Bytes  31.05.2012 15:57:33
AEBB.DLL      : 8.1.1.0        53618 Bytes  01.09.2011 21:46:01
AVWINLL.DLL    : 12.3.0.15      27344 Bytes  08.05.2012 15:15:34
AVPREF.DLL    : 12.3.0.15      51920 Bytes  08.05.2012 15:15:36
AVREP.DLL      : 12.3.0.15    179208 Bytes  08.05.2012 15:15:41
AVARKT.DLL    : 12.3.0.15    211408 Bytes  08.05.2012 15:15:35
AVEVTLOG.DLL  : 12.3.0.15    169168 Bytes  08.05.2012 15:15:36
SQLITE3.DLL    : 3.7.0.1      398288 Bytes  08.05.2012 15:15:41
AVSMTP.DLL    : 12.3.0.15      63440 Bytes  08.05.2012 15:15:36
NETNT.DLL      : 12.3.0.15      17104 Bytes  08.05.2012 15:15:39
RCIMAGE.DLL    : 12.3.0.15    4447952 Bytes  08.05.2012 15:15:35
RCTEXT.DLL    : 12.3.0.15      98512 Bytes  08.05.2012 15:15:35

Konfiguration für den aktuellen Suchlauf:
Job Name..............................: Vollständige Systemprüfung
Konfigurationsdatei...................: C:\Program Files (x86)\Avira\AntiVir Desktop\sysscan.avp
Protokollierung.......................: standard
Primäre Aktion........................: quarantäne
Sekundäre Aktion......................: ignorieren
Durchsuche Masterbootsektoren.........: ein
Durchsuche Bootsektoren...............: ein
Bootsektoren..........................: C:, Q:,
Durchsuche aktive Programme...........: ein
Laufende Programme erweitert..........: ein
Durchsuche Registrierung..............: ein
Suche nach Rootkits...................: ein
Integritätsprüfung von Systemdateien..: aus
Datei Suchmodus.......................: Alle Dateien
Durchsuche Archive....................: ein
Rekursionstiefe einschränken..........: 20
Archiv Smart Extensions...............: ein
Makrovirenheuristik...................: ein
Dateiheuristik........................: erweitert

Beginn des Suchlaufs: Montag, 11. Juni 2012  22:22

Der Suchlauf über die Masterbootsektoren wird begonnen:
Masterbootsektor HD0
    [INFO]      Es wurde kein Virus gefunden!

Der Suchlauf über die Bootsektoren wird begonnen:
Bootsektor 'C:\'
    [INFO]      Es wurde kein Virus gefunden!
Bootsektor 'Q:\'
    [INFO]      Es wurde kein Virus gefunden!

Der Suchlauf nach versteckten Objekten wird begonnen.

Der Suchlauf über gestartete Prozesse wird begonnen:
Durchsuche Prozess 'avscan.exe' - '89' Modul(e) wurden durchsucht
Durchsuche Prozess 'avcenter.exe' - '107' Modul(e) wurden durchsucht
Durchsuche Prozess 'tvt_reg_monitor_svc.exe' - '31' Modul(e) wurden durchsucht
Durchsuche Prozess 'SUService.exe' - '65' Modul(e) wurden durchsucht
Durchsuche Prozess 'SeaPort.exe' - '65' Modul(e) wurden durchsucht
Durchsuche Prozess 'iviRegMgr.exe' - '22' Modul(e) wurden durchsucht
Durchsuche Prozess 'jusched.exe' - '38' Modul(e) wurden durchsucht
Durchsuche Prozess 'activmgr.exe' - '57' Modul(e) wurden durchsucht
Durchsuche Prozess 'AdobeARM.exe' - '52' Modul(e) wurden durchsucht
Durchsuche Prozess 'avgnt.exe' - '77' Modul(e) wurden durchsucht
Durchsuche Prozess 'ContentTransferWMDetector.exe' - '36' Modul(e) wurden durchsucht
Durchsuche Prozess 'iTunesHelper.exe' - '75' Modul(e) wurden durchsucht
Durchsuche Prozess 'MCPLaunch.exe' - '26' Modul(e) wurden durchsucht
Durchsuche Prozess 'rundll32.exe' - '29' Modul(e) wurden durchsucht
Durchsuche Prozess 'DevDtct2.exe' - '44' Modul(e) wurden durchsucht
Durchsuche Prozess 'SEPCSuite.exe' - '153' Modul(e) wurden durchsucht
Durchsuche Prozess 'SoftAuto.exe' - '53' Modul(e) wurden durchsucht
Durchsuche Prozess 'TpScrex.exe' - '30' Modul(e) wurden durchsucht
Durchsuche Prozess 'TPONSCR.exe' - '20' Modul(e) wurden durchsucht
Durchsuche Prozess 'CTZDetec.exe' - '27' Modul(e) wurden durchsucht
Durchsuche Prozess 'IAAnotif.exe' - '39' Modul(e) wurden durchsucht
Durchsuche Prozess 'tpfnf6r.exe' - '18' Modul(e) wurden durchsucht
Durchsuche Prozess 'TPOSDSVC.exe' - '41' Modul(e) wurden durchsucht
Durchsuche Prozess 'SvcGuiHlpr.exe' - '72' Modul(e) wurden durchsucht
Durchsuche Prozess 'IAANTMon.exe' - '36' Modul(e) wurden durchsucht
Durchsuche Prozess 'AcDeskBandHlpr.exe' - '77' Modul(e) wurden durchsucht
Durchsuche Prozess 'tpnumlkd.exe' - '21' Modul(e) wurden durchsucht
Durchsuche Prozess 'AcSvc.exe' - '94' Modul(e) wurden durchsucht
Durchsuche Prozess 'SupServ.exe' - '22' Modul(e) wurden durchsucht
Durchsuche Prozess 'MICMUTE.exe' - '32' Modul(e) wurden durchsucht
Durchsuche Prozess 'IJPLMSVC.EXE' - '22' Modul(e) wurden durchsucht
Durchsuche Prozess 'CTDevSrv.exe' - '17' Modul(e) wurden durchsucht
Durchsuche Prozess 'mDNSResponder.exe' - '41' Modul(e) wurden durchsucht
Durchsuche Prozess 'AppleMobileDeviceService.exe' - '35' Modul(e) wurden durchsucht
Durchsuche Prozess 'avguard.exe' - '69' Modul(e) wurden durchsucht
Durchsuche Prozess 'AcPrfMgrSvc.exe' - '70' Modul(e) wurden durchsucht
Durchsuche Prozess 'tpnumlk.exe' - '24' Modul(e) wurden durchsucht
Durchsuche Prozess 'TPHKSVC.exe' - '33' Modul(e) wurden durchsucht
Durchsuche Prozess 'sched.exe' - '42' Modul(e) wurden durchsucht

Der Suchlauf auf Verweise zu ausführbaren Dateien (Registry) wird begonnen:
Die Registry wurde durchsucht ( '3142' Dateien ).


Der Suchlauf über die ausgewählten Dateien wird begonnen:

Beginne mit der Suche in 'C:\' <Windows7_OS>
C:\Program Files (x86)\Activ Software\Inspire\help\de\webhelp.jar
  [WARNUNG]  Einige Dateien dieses Archives sind auf mehrere Teilarchive verteilt  (multiple volume)
C:\Program Files (x86)\Activ Software\Inspire\help\de\whatsnew\webhelp.jar
  [WARNUNG]  Einige Dateien dieses Archives sind auf mehrere Teilarchive verteilt  (multiple volume)
C:\Users\Claudia\AppData\Local\{80639323-beb1-9b13-7dd5-31196d650826}\U\00000001.@
  [FUND]      Ist das Trojanische Pferd TR/Small.FI
  [HINWEIS]  Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '576cc283.qua' verschoben!
C:\Users\Claudia\AppData\Local\{80639323-beb1-9b13-7dd5-31196d650826}\U\80000000.@
  [FUND]      Ist das Trojanische Pferd TR/ATRAPS.Gen
  [HINWEIS]  Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '4ffbed24.qua' verschoben!
C:\Users\Claudia\AppData\Local\{80639323-beb1-9b13-7dd5-31196d650826}\U\800000cb.@
  [FUND]      Ist das Trojanische Pferd TR/ATRAPS.Gen2
  [HINWEIS]  Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '1da4b7cc.qua' verschoben!
C:\Users\Claudia\Documents\STEX Päd HA\Who is my E-pal.pptx
  [0] Archivtyp: ZIP
  --> docProps/thumbnail.jpeg
      [1] Archivtyp: ZIP
    --> word/media/image4.jpeg
        [WARNUNG]  Die Datei konnte nicht gelesen werden!
C:\Users\Claudia\Downloads\ActivInspire_main_res_v1.1_DEU.as4a
  [WARNUNG]  Die Datei ist kennwortgeschützt
C:\Users\Claudia\Downloads\avira_free_antivirus_de.exe
  [WARNUNG]  Die Datei ist kennwortgeschützt
C:\Users\Tilo\Desktop\Tilo\Sicherung Stick 11.11.11\f4\uninstall.exe
  [WARNUNG]  Die Version dieses Archives wird nicht unterstützt
C:\Users\Tilo\Desktop\Tilo\Sicherung Stick 31-03-11\Wechseldatenträger\f4\uninstall.exe
  [WARNUNG]  Die Version dieses Archives wird nicht unterstützt
C:\Users\Tilo\Desktop\Tilo\Stick Sicherung 14.02.11\f4\uninstall.exe
  [WARNUNG]  Die Version dieses Archives wird nicht unterstützt


Ende des Suchlaufs: Montag, 11. Juni 2012  23:43
Benötigte Zeit:  1:21:08 Stunde(n)

Der Suchlauf wurde abgebrochen!

  22639 Verzeichnisse wurden überprüft
 575369 Dateien wurden geprüft
      3 Viren bzw. unerwünschte Programme wurden gefunden
      0 Dateien wurden als verdächtig eingestuft
      0 Dateien wurden gelöscht
      0 Viren bzw. unerwünschte Programme wurden repariert
      3 Dateien wurden in die Quarantäne verschoben
      0 Dateien wurden umbenannt
      0 Dateien konnten nicht durchsucht werden
 575366 Dateien ohne Befall
  8589 Archive wurden durchsucht
      8 Warnungen
      3 Hinweise
 819472 Objekte wurden beim Rootkitscan durchsucht
      0 Versteckte Objekte wurden gefunden

Gestern startete ich einen neuen Suchdurchlauf mit AVIRA und es fand nichts mehr.
Code:


Avira Free Antivirus
Erstellungsdatum der Reportdatei: Dienstag, 12. Juni 2012  15:50

Es wird nach 3818089 Virenstämmen gesucht.

Das Programm läuft als uneingeschränkte Vollversion.
Online-Dienste stehen zur Verfügung.

Lizenznehmer  : Avira AntiVir Personal - Free Antivirus
Seriennummer  : 0000149996-ADJIE-0000001
Plattform      : Windows 7 Home Premium
Windowsversion : (plain)  [6.1.7600]
Boot Modus    : Normal gebootet
Benutzername  : SYSTEM
Computername  : THINKPAD

Versionsinformationen:
BUILD.DAT      : 12.0.0.1125    41829 Bytes  02.05.2012 16:34:00
AVSCAN.EXE    : 12.3.0.15    466896 Bytes  08.05.2012 15:15:36
AVSCAN.DLL    : 12.3.0.15      66256 Bytes  08.05.2012 15:15:36
LUKE.DLL      : 12.3.0.15      68304 Bytes  08.05.2012 15:15:39
AVSCPLR.DLL    : 12.3.0.14      97032 Bytes  08.05.2012 15:15:41
AVREG.DLL      : 12.3.0.17    232200 Bytes  10.05.2012 16:21:45
VBASE000.VDF  : 7.10.0.0    19875328 Bytes  06.11.2009 18:18:34
VBASE001.VDF  : 7.11.0.0    13342208 Bytes  14.12.2010 09:07:39
VBASE002.VDF  : 7.11.19.170 14374912 Bytes  20.12.2011 17:58:06
VBASE003.VDF  : 7.11.21.238  4472832 Bytes  01.02.2012 16:56:03
VBASE004.VDF  : 7.11.26.44  4329472 Bytes  28.03.2012 15:49:25
VBASE005.VDF  : 7.11.29.136  2166272 Bytes  10.05.2012 16:21:11
VBASE006.VDF  : 7.11.29.137    2048 Bytes  10.05.2012 16:21:11
VBASE007.VDF  : 7.11.29.138    2048 Bytes  10.05.2012 16:21:11
VBASE008.VDF  : 7.11.29.139    2048 Bytes  10.05.2012 16:21:11
VBASE009.VDF  : 7.11.29.140    2048 Bytes  10.05.2012 16:21:11
VBASE010.VDF  : 7.11.29.141    2048 Bytes  10.05.2012 16:21:12
VBASE011.VDF  : 7.11.29.142    2048 Bytes  10.05.2012 16:21:13
VBASE012.VDF  : 7.11.29.143    2048 Bytes  10.05.2012 16:21:14
VBASE013.VDF  : 7.11.29.144    2048 Bytes  10.05.2012 16:21:15
VBASE014.VDF  : 7.11.30.3    198144 Bytes  14.05.2012 12:43:07
VBASE015.VDF  : 7.11.30.69    186368 Bytes  17.05.2012 16:17:17
VBASE016.VDF  : 7.11.30.143  223744 Bytes  21.05.2012 09:39:57
VBASE017.VDF  : 7.11.30.207  287744 Bytes  23.05.2012 16:52:07
VBASE018.VDF  : 7.11.31.57    188416 Bytes  28.05.2012 14:20:43
VBASE019.VDF  : 7.11.31.111  214528 Bytes  30.05.2012 15:56:53
VBASE020.VDF  : 7.11.31.151  116736 Bytes  31.05.2012 15:57:01
VBASE021.VDF  : 7.11.31.205  134144 Bytes  03.06.2012 15:56:54
VBASE022.VDF  : 7.11.32.9    169472 Bytes  05.06.2012 21:01:09
VBASE023.VDF  : 7.11.32.85    155648 Bytes  08.06.2012 18:13:16
VBASE024.VDF  : 7.11.32.133  127488 Bytes  11.06.2012 19:38:49
VBASE025.VDF  : 7.11.32.134    2048 Bytes  11.06.2012 19:38:49
VBASE026.VDF  : 7.11.32.135    2048 Bytes  11.06.2012 19:38:49
VBASE027.VDF  : 7.11.32.136    2048 Bytes  11.06.2012 19:38:50
VBASE028.VDF  : 7.11.32.137    2048 Bytes  11.06.2012 19:38:50
VBASE029.VDF  : 7.11.32.138    2048 Bytes  11.06.2012 19:38:50
VBASE030.VDF  : 7.11.32.139    2048 Bytes  11.06.2012 19:38:50
VBASE031.VDF  : 7.11.32.140    2048 Bytes  11.06.2012 19:38:50
Engineversion  : 8.2.10.80
AEVDF.DLL      : 8.1.2.8      106867 Bytes  01.06.2012 15:57:08
AESCRIPT.DLL  : 8.1.4.24      450939 Bytes  31.05.2012 16:00:15
AESCN.DLL      : 8.1.8.2      131444 Bytes  27.01.2012 16:49:01
AESBX.DLL      : 8.2.5.10      606580 Bytes  29.05.2012 16:00:48
AERDL.DLL      : 8.1.9.15      639348 Bytes  08.09.2011 21:16:06
AEPACK.DLL    : 8.2.16.16    807288 Bytes  29.05.2012 16:00:18
AEOFFICE.DLL  : 8.1.2.28      201082 Bytes  27.04.2012 05:10:35
AEHEUR.DLL    : 8.1.4.36    4874615 Bytes  31.05.2012 15:59:54
AEHELP.DLL    : 8.1.21.0      254326 Bytes  11.05.2012 17:49:04
AEGEN.DLL      : 8.1.5.28      422260 Bytes  27.04.2012 05:10:20
AEEXP.DLL      : 8.1.0.44      82293 Bytes  29.05.2012 16:00:50
AEEMU.DLL      : 8.1.3.0      393589 Bytes  01.09.2011 21:46:01
AECORE.DLL    : 8.1.25.10    201080 Bytes  31.05.2012 15:57:33
AEBB.DLL      : 8.1.1.0        53618 Bytes  01.09.2011 21:46:01
AVWINLL.DLL    : 12.3.0.15      27344 Bytes  08.05.2012 15:15:34
AVPREF.DLL    : 12.3.0.15      51920 Bytes  08.05.2012 15:15:36
AVREP.DLL      : 12.3.0.15    179208 Bytes  08.05.2012 15:15:41
AVARKT.DLL    : 12.3.0.15    211408 Bytes  08.05.2012 15:15:35
AVEVTLOG.DLL  : 12.3.0.15    169168 Bytes  08.05.2012 15:15:36
SQLITE3.DLL    : 3.7.0.1      398288 Bytes  08.05.2012 15:15:41
AVSMTP.DLL    : 12.3.0.15      63440 Bytes  08.05.2012 15:15:36
NETNT.DLL      : 12.3.0.15      17104 Bytes  08.05.2012 15:15:39
RCIMAGE.DLL    : 12.3.0.15    4447952 Bytes  08.05.2012 15:15:35
RCTEXT.DLL    : 12.3.0.15      98512 Bytes  08.05.2012 15:15:35

Konfiguration für den aktuellen Suchlauf:
Job Name..............................: Vollständige Systemprüfung
Konfigurationsdatei...................: C:\Program Files (x86)\Avira\AntiVir Desktop\sysscan.avp
Protokollierung.......................: standard
Primäre Aktion........................: quarantäne
Sekundäre Aktion......................: ignorieren
Durchsuche Masterbootsektoren.........: ein
Durchsuche Bootsektoren...............: ein
Bootsektoren..........................: C:, Q:,
Durchsuche aktive Programme...........: ein
Laufende Programme erweitert..........: ein
Durchsuche Registrierung..............: ein
Suche nach Rootkits...................: ein
Integritätsprüfung von Systemdateien..: aus
Datei Suchmodus.......................: Alle Dateien
Durchsuche Archive....................: ein
Rekursionstiefe einschränken..........: 20
Archiv Smart Extensions...............: ein
Makrovirenheuristik...................: ein
Dateiheuristik........................: erweitert

Beginn des Suchlaufs: Dienstag, 12. Juni 2012  15:50

Der Suchlauf über die Masterbootsektoren wird begonnen:
Masterbootsektor HD0
    [INFO]      Es wurde kein Virus gefunden!

Der Suchlauf über die Bootsektoren wird begonnen:
Bootsektor 'C:\'
    [INFO]      Es wurde kein Virus gefunden!
Bootsektor 'Q:\'
    [INFO]      Es wurde kein Virus gefunden!

Der Suchlauf nach versteckten Objekten wird begonnen.

Der Suchlauf über gestartete Prozesse wird begonnen:
Durchsuche Prozess 'avscan.exe' - '89' Modul(e) wurden durchsucht
Durchsuche Prozess 'avcenter.exe' - '77' Modul(e) wurden durchsucht
Durchsuche Prozess 'tvt_reg_monitor_svc.exe' - '31' Modul(e) wurden durchsucht
Durchsuche Prozess 'SUService.exe' - '65' Modul(e) wurden durchsucht
Durchsuche Prozess 'SeaPort.exe' - '46' Modul(e) wurden durchsucht
Durchsuche Prozess 'iviRegMgr.exe' - '22' Modul(e) wurden durchsucht
Durchsuche Prozess 'avgnt.exe' - '77' Modul(e) wurden durchsucht
Durchsuche Prozess 'ContentTransferWMDetector.exe' - '36' Modul(e) wurden durchsucht
Durchsuche Prozess 'iTunesHelper.exe' - '75' Modul(e) wurden durchsucht
Durchsuche Prozess 'MCPLaunch.exe' - '26' Modul(e) wurden durchsucht
Durchsuche Prozess 'rundll32.exe' - '29' Modul(e) wurden durchsucht
Durchsuche Prozess 'DevDtct2.exe' - '44' Modul(e) wurden durchsucht
Durchsuche Prozess 'activmgr.exe' - '57' Modul(e) wurden durchsucht
Durchsuche Prozess 'TpScrex.exe' - '30' Modul(e) wurden durchsucht
Durchsuche Prozess 'SEPCSuite.exe' - '151' Modul(e) wurden durchsucht
Durchsuche Prozess 'TPONSCR.exe' - '20' Modul(e) wurden durchsucht
Durchsuche Prozess 'SoftAuto.exe' - '53' Modul(e) wurden durchsucht
Durchsuche Prozess 'CTZDetec.exe' - '26' Modul(e) wurden durchsucht
Durchsuche Prozess 'IAAnotif.exe' - '39' Modul(e) wurden durchsucht
Durchsuche Prozess 'tpfnf6r.exe' - '18' Modul(e) wurden durchsucht
Durchsuche Prozess 'TPOSDSVC.exe' - '41' Modul(e) wurden durchsucht
Durchsuche Prozess 'SvcGuiHlpr.exe' - '72' Modul(e) wurden durchsucht
Durchsuche Prozess 'AcDeskBandHlpr.exe' - '77' Modul(e) wurden durchsucht
Durchsuche Prozess 'tpnumlkd.exe' - '21' Modul(e) wurden durchsucht
Durchsuche Prozess 'IAANTMon.exe' - '36' Modul(e) wurden durchsucht
Durchsuche Prozess 'AcSvc.exe' - '95' Modul(e) wurden durchsucht
Durchsuche Prozess 'SupServ.exe' - '22' Modul(e) wurden durchsucht
Durchsuche Prozess 'MICMUTE.exe' - '32' Modul(e) wurden durchsucht
Durchsuche Prozess 'IJPLMSVC.EXE' - '22' Modul(e) wurden durchsucht
Durchsuche Prozess 'CTDevSrv.exe' - '17' Modul(e) wurden durchsucht
Durchsuche Prozess 'mDNSResponder.exe' - '41' Modul(e) wurden durchsucht
Durchsuche Prozess 'AppleMobileDeviceService.exe' - '35' Modul(e) wurden durchsucht
Durchsuche Prozess 'avguard.exe' - '69' Modul(e) wurden durchsucht
Durchsuche Prozess 'AcPrfMgrSvc.exe' - '70' Modul(e) wurden durchsucht
Durchsuche Prozess 'tpnumlk.exe' - '24' Modul(e) wurden durchsucht
Durchsuche Prozess 'TPHKSVC.exe' - '33' Modul(e) wurden durchsucht
Durchsuche Prozess 'sched.exe' - '42' Modul(e) wurden durchsucht

Der Suchlauf auf Verweise zu ausführbaren Dateien (Registry) wird begonnen:
Die Registry wurde durchsucht ( '3142' Dateien ).


Der Suchlauf über die ausgewählten Dateien wird begonnen:

Beginne mit der Suche in 'C:\' <Windows7_OS>
C:\Program Files (x86)\Activ Software\Inspire\help\de\webhelp.jar
  [WARNUNG]  Einige Dateien dieses Archives sind auf mehrere Teilarchive verteilt  (multiple volume)
C:\Program Files (x86)\Activ Software\Inspire\help\de\whatsnew\webhelp.jar
  [WARNUNG]  Einige Dateien dieses Archives sind auf mehrere Teilarchive verteilt  (multiple volume)
C:\Users\Claudia\Documents\STEX Päd HA\Who is my E-pal.pptx
  [0] Archivtyp: ZIP
  --> docProps/thumbnail.jpeg
      [1] Archivtyp: ZIP
    --> word/media/image4.jpeg
        [WARNUNG]  Die Datei konnte nicht gelesen werden!
C:\Users\Claudia\Downloads\ActivInspire_main_res_v1.1_DEU.as4a
  [WARNUNG]  Die Datei ist kennwortgeschützt
C:\Users\Claudia\Downloads\avira_free_antivirus_de.exe
  [WARNUNG]  Die Datei ist kennwortgeschützt
C:\Users\Tilo\Desktop\Tilo\Sicherung Stick 11.11.11\f4\uninstall.exe
  [WARNUNG]  Die Version dieses Archives wird nicht unterstützt
C:\Users\Tilo\Desktop\Tilo\Sicherung Stick 31-03-11\Wechseldatenträger\f4\uninstall.exe
  [WARNUNG]  Die Version dieses Archives wird nicht unterstützt
C:\Users\Tilo\Desktop\Tilo\Stick Sicherung 14.02.11\f4\uninstall.exe
  [WARNUNG]  Die Version dieses Archives wird nicht unterstützt
Beginne mit der Suche in 'Q:\' <Lenovo_Recovery>


Ende des Suchlaufs: Dienstag, 12. Juni 2012  17:33
Benötigte Zeit:  1:43:22 Stunde(n)

Der Suchlauf wurde vollständig durchgeführt.

  38124 Verzeichnisse wurden überprüft
 669331 Dateien wurden geprüft
      0 Viren bzw. unerwünschte Programme wurden gefunden
      0 Dateien wurden als verdächtig eingestuft
      0 Dateien wurden gelöscht
      0 Viren bzw. unerwünschte Programme wurden repariert
      0 Dateien wurden in die Quarantäne verschoben
      0 Dateien wurden umbenannt
      0 Dateien konnten nicht durchsucht werden
 669331 Dateien ohne Befall
  8901 Archive wurden durchsucht
      8 Warnungen
      0 Hinweise
 819610 Objekte wurden beim Rootkitscan durchsucht
      0 Versteckte Objekte wurden gefunden
Jetzt bin ich etwas verwirrt. Aber vielleicht hast du ja noch eine Idee?
Danke!
Gruffalo

Chris4You 14.06.2012 07:03
Hi,

leider hört das gepostet Log wieder mittendrin auf...
Normalerweise killt Hitmann das Teil, ev. hat Avira überreste gefunden, lass uns mal nachsehen..
(Es wäre gut ComboFix zum Laufen zu bekommen.
Das ist ein Rootkit, der einen normalen, notwendigen Treiber von Windows "übernimmt", d. h. der muß gefunden und ausgetauscht werden (das macht ComboFix automatisch)...)

TDSS-Killer
Download und Anweisung unter: Wie werden Schadprogramme der Familie Rootkit.Win32.TDSS bekämpft?
Entpacke alle Dateien in einem eigenen Verzeichnis (z. B: C:\TDSS)!
Aufruf über den Explorer duch Doppelklick auf die TDSSKiller.exe.
Stelle den Killer wir folgt ein:
http://saved.im/mtkwmtcxexhp/setting...8_16-25-18.jpg
Dann den Scan starten durch (Start Scan).
Wenn der Scan fertig ist bitte "Report" anwählen (eventuelle Funde erstmal mit Skip übergehen). Es öffnet sich ein Fenster, den Text abkopieren und hier posten...

OTL
Lade Dir OTL von Oldtimer herunter (http://filepony.de/download-otl/) und speichere es auf Deinem Desktop
  • Doppelklick auf die OTL.exe
  • Vista/Win7 User: Rechtsklick auf die OTL.exe und "als Administrator ausführen" wählen
  • Oben findest Du ein Kästchen mit Output. Wähle bitte Minimal Output
  • Unter Extra Registry, wähle bitte Use SafeList
  • Klicke nun auf Run Scan links oben
  • Wenn der Scan beendet wurde werden 2 Logfiles erstellt (OTL.TXT und EXTRAS.TXT)
  • Poste die Logfiles hier in den Thread

Dr. Web ist auch ganz gut, braucht aber viiiiiieeeel Zeit...
chris

Gruffalo 15.06.2012 16:24
Hallo Chris,
danke, dass du dir so viel Zeit nimmst.
Ich habe den TDSS-Killer drüber laufen lassen und das ist das Protokoll:
Code:
17:09:04.0799 4184        TDSS rootkit removing tool 2.7.40.0 Jun 15 2012 15:13:31
17:09:05.0299 4184        ============================================================
17:09:05.0299 4184        Current date / time: 2012/06/15 17:09:05.0299
17:09:05.0299 4184        SystemInfo:
17:09:05.0299 4184       
17:09:05.0299 4184        OS Version: 6.1.7600 ServicePack: 0.0
17:09:05.0299 4184        Product type: Workstation
17:09:05.0299 4184        ComputerName: THINKPAD
17:09:05.0299 4184        UserName: admin
17:09:05.0299 4184        Windows directory: C:\Windows
17:09:05.0299 4184        System windows directory: C:\Windows
17:09:05.0300 4184        Running under WOW64
17:09:05.0300 4184        Processor architecture: Intel x64
17:09:05.0300 4184        Number of processors: 2
17:09:05.0300 4184        Page size: 0x1000
17:09:05.0300 4184        Boot type: Normal boot
17:09:05.0300 4184        ============================================================
17:09:05.0805 4184        Drive \Device\Harddisk0\DR0 - Size: 0x4A85D56000 (298.09 Gb), SectorSize: 0x200, Cylinders: 0x9801, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
17:09:05.0810 4184        ============================================================
17:09:05.0810 4184        \Device\Harddisk0\DR0:
17:09:05.0810 4184        MBR partitions:
17:09:05.0810 4184        \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x258000
17:09:05.0810 4184        \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x258800, BlocksNum 0x23E4D7F8
17:09:05.0810 4184        \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x240A6000, BlocksNum 0x1388000
17:09:05.0810 4184        ============================================================
17:09:05.0838 4184        C: <-> \Device\Harddisk0\DR0\Partition1
17:09:05.0889 4184        Q: <-> \Device\Harddisk0\DR0\Partition2
17:09:05.0889 4184        ============================================================
17:09:05.0889 4184        Initialize success
17:09:05.0889 4184        ============================================================
17:09:12.0750 5420        ============================================================
17:09:12.0750 5420        Scan started
17:09:12.0750 5420        Mode: Manual; SigCheck; TDLFS;
17:09:12.0750 5420        ============================================================
17:09:13.0580 5420        1394ohci        (1b00662092f9f9568b995902f0cc40d5) C:\Windows\system32\DRIVERS\1394ohci.sys
17:09:13.0948 5420        1394ohci - ok
17:09:14.0000 5420        5U877          (7d497701bda1267ad5f86350925d2f10) C:\Windows\system32\DRIVERS\5U877.sys
17:09:14.0083 5420        5U877 - ok
17:09:14.0128 5420        ACPI            (794ff35015209b9d44f1360c42c9776d) C:\Windows\system32\DRIVERS\ACPI.sys
17:09:14.0178 5420        ACPI - ok
17:09:14.0212 5420        AcpiPmi        (63b05a0420ce4bf0e4af6dcc7cada254) C:\Windows\system32\DRIVERS\acpipmi.sys
17:09:14.0363 5420        AcpiPmi - ok
17:09:14.0491 5420        AcPrfMgrSvc    (d2821d87e5a61fd9ef697c795b531feb) C:\Program Files (x86)\Lenovo\Access Connections\AcPrfMgrSvc.exe
17:09:14.0518 5420        AcPrfMgrSvc - ok
17:09:14.0556 5420        AcSvc          (4aa273e9400ccee2546ae00fd837dd17) C:\Program Files (x86)\Lenovo\Access Connections\AcSvc.exe
17:09:14.0570 5420        AcSvc - ok
17:09:14.0623 5420        ACTIVhidmini    (b3d08f1ccbcb60cc549f693f1444d208) C:\Windows\system32\DRIVERS\ACTIVhidmini.sys
17:09:14.0752 5420        ACTIVhidmini - ok
17:09:14.0812 5420        adp94xx        (2f6b34b83843f0c5118b63ac634f5bf4) C:\Windows\system32\DRIVERS\adp94xx.sys
17:09:14.0877 5420        adp94xx - ok
17:09:14.0959 5420        adpahci        (597f78224ee9224ea1a13d6350ced962) C:\Windows\system32\DRIVERS\adpahci.sys
17:09:15.0044 5420        adpahci - ok
17:09:15.0087 5420        adpu320        (e109549c90f62fb570b9540c4b148e54) C:\Windows\system32\DRIVERS\adpu320.sys
17:09:15.0112 5420        adpu320 - ok
17:09:15.0158 5420        AeLookupSvc    (4b78b431f225fd8624c5655cb1de7b61) C:\Windows\System32\aelupsvc.dll
17:09:15.0352 5420        AeLookupSvc - ok
17:09:15.0417 5420        AFD            (db9d6c6b2cd95a9ca414d045b627422e) C:\Windows\system32\drivers\afd.sys
17:09:15.0550 5420        AFD - ok
17:09:15.0588 5420        agp440          (608c14dba7299d8cb6ed035a68a15799) C:\Windows\system32\DRIVERS\agp440.sys
17:09:15.0616 5420        agp440 - ok
17:09:15.0648 5420        ALG            (3290d6946b5e30e70414990574883ddb) C:\Windows\System32\alg.exe
17:09:15.0725 5420        ALG - ok
17:09:15.0766 5420        aliide          (5812713a477a3ad7363c7438ca2ee038) C:\Windows\system32\DRIVERS\aliide.sys
17:09:15.0793 5420        aliide - ok
17:09:15.0801 5420        amdide          (1ff8b4431c353ce385c875f194924c0c) C:\Windows\system32\DRIVERS\amdide.sys
17:09:15.0820 5420        amdide - ok
17:09:15.0836 5420        AmdK8          (7024f087cff1833a806193ef9d22cda9) C:\Windows\system32\DRIVERS\amdk8.sys
17:09:15.0884 5420        AmdK8 - ok
17:09:15.0913 5420        AmdPPM          (1e56388b3fe0d031c44144eb8c4d6217) C:\Windows\system32\DRIVERS\amdppm.sys
17:09:15.0959 5420        AmdPPM - ok
17:09:16.0006 5420        amdsata        (ec7ebab00a4d8448bab68d1e49b4beb9) C:\Windows\system32\drivers\amdsata.sys
17:09:16.0037 5420        amdsata - ok
17:09:16.0078 5420        amdsbs          (f67f933e79241ed32ff46a4f29b5120b) C:\Windows\system32\DRIVERS\amdsbs.sys
17:09:16.0123 5420        amdsbs - ok
17:09:16.0143 5420        amdxata        (db27766102c7bf7e95140a2aa81d042e) C:\Windows\system32\drivers\amdxata.sys
17:09:16.0158 5420        amdxata - ok
17:09:16.0305 5420        AntiVirSchedulerService (466a0d95960dad3222c896d2cea99993) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
17:09:16.0334 5420        AntiVirSchedulerService - ok
17:09:16.0364 5420        AntiVirService  (a489be6bb0aa1ff406b488b60542314b) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
17:09:16.0378 5420        AntiVirService - ok
17:09:16.0417 5420        AppID          (42fd751b27fa0e9c69bb39f39e409594) C:\Windows\system32\drivers\appid.sys
17:09:16.0547 5420        AppID - ok
17:09:16.0574 5420        AppIDSvc        (0bc381a15355a3982216f7172f545de1) C:\Windows\System32\appidsvc.dll
17:09:16.0641 5420        AppIDSvc - ok
17:09:16.0697 5420        Appinfo        (d065be66822847b7f127d1f90158376e) C:\Windows\System32\appinfo.dll
17:09:16.0806 5420        Appinfo - ok
17:09:16.0862 5420        Apple Mobile Device (70d7be78061126dd0c3accdb7e129017) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
17:09:16.0885 5420        Apple Mobile Device - ok
17:09:16.0933 5420        arc            (c484f8ceb1717c540242531db7845c4e) C:\Windows\system32\DRIVERS\arc.sys
17:09:16.0955 5420        arc - ok
17:09:16.0980 5420        arcsas          (019af6924aefe7839f61c830227fe79c) C:\Windows\system32\DRIVERS\arcsas.sys
17:09:17.0002 5420        arcsas - ok
17:09:17.0038 5420        AsyncMac        (769765ce2cc62867468cea93969b2242) C:\Windows\system32\DRIVERS\asyncmac.sys
17:09:17.0125 5420        AsyncMac - ok
17:09:17.0161 5420        atapi          (02062c0b390b7729edc9e69c680a6f3c) C:\Windows\system32\DRIVERS\atapi.sys
17:09:17.0176 5420        atapi - ok
17:09:17.0234 5420        AudioEndpointBuilder (07721a77180edd4d39ccb865bf63c7fd) C:\Windows\System32\Audiosrv.dll
17:09:17.0324 5420        AudioEndpointBuilder - ok
17:09:17.0333 5420        AudioSrv        (07721a77180edd4d39ccb865bf63c7fd) C:\Windows\System32\Audiosrv.dll
17:09:17.0379 5420        AudioSrv - ok
17:09:17.0447 5420        avgntflt        (26e38b5a58c6c55fafbc563eeddb0867) C:\Windows\system32\DRIVERS\avgntflt.sys
17:09:17.0519 5420        avgntflt - ok
17:09:17.0546 5420        avipbb          (9d1f00beff84cbbf46d7f052bc7e0565) C:\Windows\system32\DRIVERS\avipbb.sys
17:09:17.0568 5420        avipbb - ok
17:09:17.0592 5420        avkmgr          (248db59fc86de44d2779f4c7fb1a567d) C:\Windows\system32\DRIVERS\avkmgr.sys
17:09:17.0610 5420        avkmgr - ok
17:09:17.0680 5420        AxInstSV        (b20b5fa5ca050e9926e4d1db81501b32) C:\Windows\System32\AxInstSV.dll
17:09:17.0826 5420        AxInstSV - ok
17:09:17.0879 5420        b06bdrv        (3e5b191307609f7514148c6832bb0842) C:\Windows\system32\DRIVERS\bxvbda.sys
17:09:17.0986 5420        b06bdrv - ok
17:09:18.0031 5420        b57nd60a        (b5ace6968304a3900eeb1ebfd9622df2) C:\Windows\system32\DRIVERS\b57nd60a.sys
17:09:18.0076 5420        b57nd60a - ok
17:09:18.0101 5420        BDESVC          (fde360167101b4e45a96f939f388aeb0) C:\Windows\System32\bdesvc.dll
17:09:18.0195 5420        BDESVC - ok
17:09:18.0227 5420        Beep            (16a47ce2decc9b099349a5f840654746) C:\Windows\system32\drivers\Beep.sys
17:09:18.0323 5420        Beep - ok
17:09:18.0397 5420        BFE            (4992c609a6315671463e30f6512bc022) C:\Windows\System32\bfe.dll
17:09:18.0504 5420        BFE - ok
17:09:18.0588 5420        BITS            (7f0c323fe3da28aa4aa1bda3f575707f) C:\Windows\System32\qmgr.dll
17:09:18.0731 5420        BITS - ok
17:09:18.0787 5420        blbdrive        (61583ee3c3a17003c4acd0475646b4d3) C:\Windows\system32\DRIVERS\blbdrive.sys
17:09:18.0837 5420        blbdrive - ok
17:09:18.0971 5420        Bonjour Service (673cf4f6bb1fbe09331b526802fbb892) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
17:09:19.0003 5420        Bonjour Service - ok
17:09:19.0051 5420        bowser          (19d20159708e152267e53b66677a4995) C:\Windows\system32\DRIVERS\bowser.sys
17:09:19.0163 5420        bowser - ok
17:09:19.0191 5420        BrFiltLo        (f09eee9edc320b5e1501f749fde686c8) C:\Windows\system32\DRIVERS\BrFiltLo.sys
17:09:19.0256 5420        BrFiltLo - ok
17:09:19.0283 5420        BrFiltUp        (b114d3098e9bdb8bea8b053685831be6) C:\Windows\system32\DRIVERS\BrFiltUp.sys
17:09:19.0330 5420        BrFiltUp - ok
17:09:19.0376 5420        BridgeMP        (5c2f352a4e961d72518261257aae204b) C:\Windows\system32\DRIVERS\bridge.sys
17:09:19.0475 5420        BridgeMP - ok
17:09:19.0525 5420        Browser        (94fbc06f294d58d02361918418f996e3) C:\Windows\System32\browser.dll
17:09:19.0616 5420        Browser - ok
17:09:19.0657 5420        Brserid        (43bea8d483bf1870f018e2d02e06a5bd) C:\Windows\System32\Drivers\Brserid.sys
17:09:19.0749 5420        Brserid - ok
17:09:19.0785 5420        BrSerWdm        (a6eca2151b08a09caceca35c07f05b42) C:\Windows\System32\Drivers\BrSerWdm.sys
17:09:19.0848 5420        BrSerWdm - ok
17:09:19.0870 5420        BrUsbMdm        (b79968002c277e869cf38bd22cd61524) C:\Windows\System32\Drivers\BrUsbMdm.sys
17:09:19.0931 5420        BrUsbMdm - ok
17:09:19.0965 5420        BrUsbSer        (a87528880231c54e75ea7a44943b38bf) C:\Windows\System32\Drivers\BrUsbSer.sys
17:09:19.0986 5420        BrUsbSer - ok
17:09:20.0039 5420        BthEnum        (cf98190a94f62e405c8cb255018b2315) C:\Windows\system32\drivers\BthEnum.sys
17:09:20.0126 5420        BthEnum - ok
17:09:20.0147 5420        BTHMODEM        (9da669f11d1f894ab4eb69bf546a42e8) C:\Windows\system32\DRIVERS\bthmodem.sys
17:09:20.0173 5420        BTHMODEM - ok
17:09:20.0198 5420        BthPan          (02dd601b708dd0667e1331fa8518e9ff) C:\Windows\system32\DRIVERS\bthpan.sys
17:09:20.0259 5420        BthPan - ok
17:09:20.0325 5420        BTHPORT        (21084ceb85280468c9aca3c805c0f8cf) C:\Windows\System32\Drivers\BTHport.sys
17:09:20.0445 5420        BTHPORT - ok
17:09:20.0478 5420        bthserv        (95f9c2976059462cbbf227f7aab10de9) C:\Windows\system32\bthserv.dll
17:09:20.0571 5420        bthserv - ok
17:09:20.0600 5420        BTHUSB          (8504842634dd144c075b6b0c982ccec4) C:\Windows\System32\Drivers\BTHUSB.sys
17:09:20.0624 5420        BTHUSB - ok
17:09:20.0679 5420        btwaudio        (6bcfdc2b5b7f66d484486d4bd4b39a6b) C:\Windows\system32\drivers\btwaudio.sys
17:09:20.0709 5420        btwaudio - ok
17:09:20.0748 5420        btwavdt        (82dc8b7c626e526681c1bebed2bc3ff9) C:\Windows\system32\DRIVERS\btwavdt.sys
17:09:20.0768 5420        btwavdt - ok
17:09:20.0909 5420        btwdins        (d65aa164acd0f6706dbcfbbcc9731584) C:\Program Files\ThinkPad\Bluetooth Software\btwdins.exe
17:09:20.0971 5420        btwdins - ok
17:09:21.0009 5420        btwl2cap        (6149301dc3f81d6f9667a3fbac410975) C:\Windows\system32\DRIVERS\btwl2cap.sys
17:09:21.0027 5420        btwl2cap - ok
17:09:21.0036 5420        btwrchid        (28e105ad3b79f440bf94780f507bf66a) C:\Windows\system32\DRIVERS\btwrchid.sys
17:09:21.0052 5420        btwrchid - ok
17:09:21.0089 5420        cdfs            (b8bd2bb284668c84865658c77574381a) C:\Windows\system32\DRIVERS\cdfs.sys
17:09:21.0152 5420        cdfs - ok
17:09:21.0215 5420        cdrom          (83d2d75e1efb81b3450c18131443f7db) C:\Windows\system32\DRIVERS\cdrom.sys
17:09:21.0263 5420        cdrom - ok
17:09:21.0310 5420        CertPropSvc    (312e2f82af11e79906898ac3e3d58a1f) C:\Windows\System32\certprop.dll
17:09:21.0380 5420        CertPropSvc - ok
17:09:21.0417 5420        circlass        (d7cd5c4e1b71fa62050515314cfb52cf) C:\Windows\system32\DRIVERS\circlass.sys
17:09:21.0459 5420        circlass - ok
17:09:21.0518 5420        CLFS            (fe1ec06f2253f691fe36217c592a0206) C:\Windows\system32\CLFS.sys
17:09:21.0547 5420        CLFS - ok
17:09:21.0624 5420        clr_optimization_v2.0.50727_32 (d88040f816fda31c3b466f0fa0918f29) C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
17:09:21.0672 5420        clr_optimization_v2.0.50727_32 - ok
17:09:21.0718 5420        clr_optimization_v2.0.50727_64 (d1ceea2b47cb998321c579651ce3e4f8) C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
17:09:21.0738 5420        clr_optimization_v2.0.50727_64 - ok
17:09:21.0793 5420        clr_optimization_v4.0.30319_32 (c5a75eb48e2344abdc162bda79e16841) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
17:09:21.0829 5420        clr_optimization_v4.0.30319_32 - ok
17:09:21.0860 5420        clr_optimization_v4.0.30319_64 (c6f9af94dcd58122a4d7e89db6bed29d) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
17:09:21.0876 5420        clr_optimization_v4.0.30319_64 - ok
17:09:21.0915 5420        CmBatt          (0840155d0bddf1190f84a663c284bd33) C:\Windows\system32\DRIVERS\CmBatt.sys
17:09:21.0956 5420        CmBatt - ok
17:09:21.0980 5420        cmdide          (e19d3f095812725d88f9001985b94edd) C:\Windows\system32\DRIVERS\cmdide.sys
17:09:21.0998 5420        cmdide - ok
17:09:22.0068 5420        CNG            (937beb186a735aca91d717044a49d17e) C:\Windows\system32\Drivers\cng.sys
17:09:22.0170 5420        CNG - ok
17:09:22.0201 5420        Compbatt        (102de219c3f61415f964c88e9085ad14) C:\Windows\system32\DRIVERS\compbatt.sys
17:09:22.0217 5420        Compbatt - ok
17:09:22.0240 5420        CompositeBus    (f26b3a86f6fa87ca360b879581ab4123) C:\Windows\system32\DRIVERS\CompositeBus.sys
17:09:22.0289 5420        CompositeBus - ok
17:09:22.0321 5420        COMSysApp - ok
17:09:22.0339 5420        crcdisk        (1c827878a998c18847245fe1f34ee597) C:\Windows\system32\DRIVERS\crcdisk.sys
17:09:22.0358 5420        crcdisk - ok
17:09:22.0418 5420        CryptSvc        (f02786b66375292e58c8777082d4396d) C:\Windows\system32\cryptsvc.dll
17:09:22.0508 5420        CryptSvc - ok
17:09:22.0612 5420        CTDevice_Srv    (a5bea0e5c297f5f3835638a87e512fba) C:\Program Files (x86)\Creative\Shared Files\CTDevSrv.exe
17:09:22.0640 5420        CTDevice_Srv ( UnsignedFile.Multi.Generic ) - warning
17:09:22.0640 5420        CTDevice_Srv - detected UnsignedFile.Multi.Generic (1)
17:09:22.0723 5420        DcomLaunch      (7266972e86890e2b30c0c322e906b027) C:\Windows\system32\rpcss.dll
17:09:22.0821 5420        DcomLaunch - ok
17:09:22.0868 5420        defragsvc      (3cec7631a84943677aa8fa8ee5b6b43d) C:\Windows\System32\defragsvc.dll
17:09:22.0935 5420        defragsvc - ok
17:09:22.0976 5420        DfsC            (9c253ce7311ca60fc11c774692a13208) C:\Windows\system32\Drivers\dfsc.sys
17:09:23.0052 5420        DfsC - ok
17:09:23.0119 5420        Dhcp            (ce3b9562d997f69b330d181a8875960f) C:\Windows\system32\dhcpcore.dll
17:09:23.0264 5420        Dhcp - ok
17:09:23.0292 5420        discache        (13096b05847ec78f0977f2c0f79e9ab3) C:\Windows\system32\drivers\discache.sys
17:09:23.0376 5420        discache - ok
17:09:23.0421 5420        Disk            (9819eee8b5ea3784ec4af3b137a5244c) C:\Windows\system32\DRIVERS\disk.sys
17:09:23.0446 5420        Disk - ok
17:09:23.0491 5420        Dnscache        (85cf424c74a1d5ec33533e1dbff9920a) C:\Windows\System32\dnsrslvr.dll
17:09:23.0557 5420        Dnscache - ok
17:09:23.0603 5420        dot3svc        (14452acdb09b70964c8c21bf80a13acb) C:\Windows\System32\dot3svc.dll
17:09:23.0698 5420        dot3svc - ok
17:09:23.0735 5420        DPS            (8c2ba6bea949ee6e68385f5692bafb94) C:\Windows\system32\dps.dll
17:09:23.0791 5420        DPS - ok
17:09:23.0837 5420        drmkaud        (9b19f34400d24df84c858a421c205754) C:\Windows\system32\drivers\drmkaud.sys
17:09:23.0892 5420        drmkaud - ok
17:09:23.0996 5420        DXGKrnl        (1633b9abf52784a1331476397a48cbef) C:\Windows\System32\drivers\dxgkrnl.sys
17:09:24.0083 5420        DXGKrnl - ok
17:09:24.0116 5420        EapHost        (e2dda8726da9cb5b2c4000c9018a9633) C:\Windows\System32\eapsvc.dll
17:09:24.0186 5420        EapHost - ok
17:09:24.0358 5420        ebdrv          (dc5d737f51be844d8c82c695eb17372f) C:\Windows\system32\DRIVERS\evbda.sys
17:09:24.0556 5420        ebdrv - ok
17:09:24.0664 5420        EFS            (156f6159457d0aa7e59b62681b56eb90) C:\Windows\System32\lsass.exe
17:09:24.0751 5420        EFS - ok
17:09:24.0819 5420        ehRecvr        (47c071994c3f649f23d9cd075ac9304a) C:\Windows\ehome\ehRecvr.exe
17:09:24.0932 5420        ehRecvr - ok
17:09:24.0958 5420        ehSched        (4705e8ef9934482c5bb488ce28afc681) C:\Windows\ehome\ehsched.exe
17:09:25.0049 5420        ehSched - ok
17:09:25.0158 5420        elxstor        (0e5da5369a0fcaea12456dd852545184) C:\Windows\system32\DRIVERS\elxstor.sys
17:09:25.0223 5420        elxstor - ok
17:09:25.0244 5420        ErrDev          (34a3c54752046e79a126e15c51db409b) C:\Windows\system32\DRIVERS\errdev.sys
17:09:25.0325 5420        ErrDev - ok
17:09:25.0377 5420        EventSystem    (4166f82be4d24938977dd1746be9b8a0) C:\Windows\system32\es.dll
17:09:25.0479 5420        EventSystem - ok
17:09:25.0644 5420        EvtEng          (bdf87981c5fea94fd259f110fb8b1a72) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
17:09:25.0705 5420        EvtEng - ok
17:09:25.0842 5420        exfat          (a510c654ec00c1e9bdd91eeb3a59823b) C:\Windows\system32\drivers\exfat.sys
17:09:25.0914 5420        exfat - ok
17:09:25.0946 5420        fastfat        (0adc83218b66a6db380c330836f3e36d) C:\Windows\system32\drivers\fastfat.sys
17:09:26.0021 5420        fastfat - ok
17:09:26.0084 5420        Fax            (d607b2f1bee3992aa6c2c92c0a2f0855) C:\Windows\system32\fxssvc.exe
17:09:26.0191 5420        Fax - ok
17:09:26.0209 5420        fdc            (d765d19cd8ef61f650c384f62fac00ab) C:\Windows\system32\DRIVERS\fdc.sys
17:09:26.0246 5420        fdc - ok
17:09:26.0267 5420        fdPHost        (0438cab2e03f4fb61455a7956026fe86) C:\Windows\system32\fdPHost.dll
17:09:26.0327 5420        fdPHost - ok
17:09:26.0352 5420        FDResPub        (802496cb59a30349f9a6dd22d6947644) C:\Windows\system32\fdrespub.dll
17:09:26.0424 5420        FDResPub - ok
17:09:26.0474 5420        FileInfo        (655661be46b5f5f3fd454e2c3095b930) C:\Windows\system32\drivers\fileinfo.sys
17:09:26.0490 5420        FileInfo - ok
17:09:26.0503 5420        Filetrace      (5f671ab5bc87eea04ec38a6cd5962a47) C:\Windows\system32\drivers\filetrace.sys
17:09:26.0570 5420        Filetrace - ok
17:09:26.0596 5420        flpydisk        (c172a0f53008eaeb8ea33fe10e177af5) C:\Windows\system32\DRIVERS\flpydisk.sys
17:09:26.0639 5420        flpydisk - ok
17:09:26.0677 5420        FltMgr          (f7866af72abbaf84b1fa5aa195378c59) C:\Windows\system32\drivers\fltmgr.sys
17:09:26.0697 5420        FltMgr - ok
17:09:26.0775 5420        FontCache      (cb5e4b9c319e3c6bb363eb7e58a4a051) C:\Windows\system32\FntCache.dll
17:09:26.0923 5420        FontCache - ok
17:09:26.0982 5420        FontCache3.0.0.0 (8d89e3131c27fdd6932189cb785e1b7a) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
17:09:27.0004 5420        FontCache3.0.0.0 - ok
17:09:27.0043 5420        FsDepends      (d43703496149971890703b4b1b723eac) C:\Windows\system32\drivers\FsDepends.sys
17:09:27.0065 5420        FsDepends - ok
17:09:27.0110 5420        Fs_Rec          (d3e3f93d67821a2db2b3d9fac2dc2064) C:\Windows\system32\drivers\Fs_Rec.sys
17:09:27.0142 5420        Fs_Rec - ok
17:09:27.0191 5420        fvevol          (ae87ba80d0ec3b57126ed2cdc15b24ed) C:\Windows\system32\DRIVERS\fvevol.sys
17:09:27.0224 5420        fvevol - ok
17:09:27.0266 5420        gagp30kx        (8c778d335c9d272cfd3298ab02abe3b6) C:\Windows\system32\DRIVERS\gagp30kx.sys
17:09:27.0286 5420        gagp30kx - ok
17:09:27.0324 5420        GEARAspiWDM    (e403aacf8c7bb11375122d2464560311) C:\Windows\system32\DRIVERS\GEARAspiWDM.sys
17:09:27.0341 5420        GEARAspiWDM - ok
17:09:27.0403 5420        gpsvc          (fe5ab4525bc2ec68b9119a6e5d40128b) C:\Windows\System32\gpsvc.dll
17:09:27.0489 5420        gpsvc - ok
17:09:27.0518 5420        hcw85cir        (f2523ef6460fc42405b12248338ab2f0) C:\Windows\system32\drivers\hcw85cir.sys
17:09:27.0599 5420        hcw85cir - ok
17:09:27.0649 5420        HdAudAddService (6410f6f415b2a5a9037224c41da8bf12) C:\Windows\system32\drivers\HdAudio.sys
17:09:27.0742 5420        HdAudAddService - ok
17:09:27.0780 5420        HDAudBus        (0a49913402747a0b67de940fb42cbdbb) C:\Windows\system32\DRIVERS\HDAudBus.sys
17:09:27.0839 5420        HDAudBus - ok
17:09:27.0865 5420        HidBatt        (78e86380454a7b10a5eb255dc44a355f) C:\Windows\system32\DRIVERS\HidBatt.sys
17:09:27.0905 5420        HidBatt - ok
17:09:27.0946 5420        HidBth          (7fd2a313f7afe5c4dab14798c48dd104) C:\Windows\system32\DRIVERS\hidbth.sys
17:09:28.0005 5420        HidBth - ok
17:09:28.0039 5420        HidIr          (0a77d29f311b88cfae3b13f9c1a73825) C:\Windows\system32\DRIVERS\hidir.sys
17:09:28.0092 5420        HidIr - ok
17:09:28.0123 5420        hidserv        (bd9eb3958f213f96b97b1d897dee006d) C:\Windows\System32\hidserv.dll
17:09:28.0200 5420        hidserv - ok
17:09:28.0238 5420        HidUsb          (b3bf6b5b50006def50b66306d99fcf6f) C:\Windows\system32\DRIVERS\hidusb.sys
17:09:28.0275 5420        HidUsb - ok
17:09:28.0313 5420        hkmsvc          (efa58ede58dd74388ffd04cb32681518) C:\Windows\system32\kmsvc.dll
17:09:28.0358 5420        hkmsvc - ok
17:09:28.0381 5420        HomeGroupListener (046b2673767ca626e2cfb7fdf735e9e8) C:\Windows\system32\ListSvc.dll
17:09:28.0474 5420        HomeGroupListener - ok
17:09:28.0507 5420        HomeGroupProvider (06a7422224d9865a5613710a089987df) C:\Windows\system32\provsvc.dll
17:09:28.0556 5420        HomeGroupProvider - ok
17:09:28.0597 5420        HpSAMD          (0886d440058f203eba0e1825e4355914) C:\Windows\system32\DRIVERS\HpSAMD.sys
17:09:28.0618 5420        HpSAMD - ok
17:09:28.0673 5420        HTTP            (cee049cac4efa7f4e1e4ad014414a5d4) C:\Windows\system32\drivers\HTTP.sys
17:09:28.0781 5420        HTTP - ok
17:09:28.0807 5420        hwpolicy        (f17766a19145f111856378df337a5d79) C:\Windows\system32\drivers\hwpolicy.sys
17:09:28.0822 5420        hwpolicy - ok
17:09:28.0880 5420        i8042prt        (fa55c73d4affa7ee23ac4be53b4592d3) C:\Windows\system32\DRIVERS\i8042prt.sys
17:09:28.0919 5420        i8042prt - ok
17:09:29.0044 5420        IAANTMON        (0e899d0db39617aa0b2f992e7e95b5eb) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe
17:09:29.0084 5420        IAANTMON - ok
17:09:29.0132 5420        iaStor          (bbb3b6df1abb0fe35802ede85cc1c011) C:\Windows\system32\DRIVERS\iaStor.sys
17:09:29.0150 5420        iaStor - ok
17:09:29.0216 5420        iaStorV        (b75e45c564e944a2657167d197ab29da) C:\Windows\system32\drivers\iaStorV.sys
17:09:29.0264 5420        iaStorV - ok
17:09:29.0300 5420        IBMPMDRV        (b8e7ca64fff8b71636dea3a845cc23e5) C:\Windows\system32\DRIVERS\ibmpmdrv.sys
17:09:29.0333 5420        IBMPMDRV - ok
17:09:29.0377 5420        IBMPMSVC        (6daedf692b52b7c238c7199419318d16) C:\Windows\system32\ibmpmsvc.exe
17:09:29.0396 5420        IBMPMSVC - ok
17:09:29.0471 5420        IDriverT        (daf66902f08796f9c694901660e5a64a) C:\Program Files (x86)\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
17:09:29.0514 5420        IDriverT ( UnsignedFile.Multi.Generic ) - warning
17:09:29.0514 5420        IDriverT - detected UnsignedFile.Multi.Generic (1)
17:09:29.0614 5420        idsvc          (2f2be70d3e02b6fa877921ab9516d43c) C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
17:09:29.0804 5420        idsvc - ok
17:09:30.0128 5420        igfx            (37a65e3d89f6bbf5719ff9585f99eb7d) C:\Windows\system32\DRIVERS\igdkmd64.sys
17:09:30.0478 5420        igfx - ok
17:09:30.0604 5420        iirsp          (5c18831c61933628f5bb0ea2675b9d21) C:\Windows\system32\DRIVERS\iirsp.sys
17:09:30.0638 5420        iirsp - ok
17:09:30.0731 5420        IJPLMSVC        (755519f49906b73c1fe9cbbf75e347ea) C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE
17:09:30.0753 5420        IJPLMSVC - ok
17:09:30.0817 5420        IKEEXT          (c5b4683680df085b57bc53e5ef34861f) C:\Windows\System32\ikeext.dll
17:09:30.0980 5420        IKEEXT - ok
17:09:31.0111 5420        IntcAzAudAddService (3111a658416dc464ba1e48e3b2169952) C:\Windows\system32\drivers\RTKVHD64.sys
17:09:31.0243 5420        IntcAzAudAddService - ok
17:09:31.0363 5420        IntcHdmiAddService (88a20fa54c73ded4e8dac764e9130ae9) C:\Windows\system32\drivers\IntcHdmi.sys
17:09:31.0440 5420        IntcHdmiAddService - ok
17:09:31.0465 5420        intelide        (f00f20e70c6ec3aa366910083a0518aa) C:\Windows\system32\DRIVERS\intelide.sys
17:09:31.0497 5420        intelide - ok
17:09:31.0527 5420        intelppm        (ada036632c664caa754079041cf1f8c1) C:\Windows\system32\DRIVERS\intelppm.sys
17:09:31.0568 5420        intelppm - ok
17:09:31.0596 5420        IPBusEnum      (098a91c54546a3b878dad6a7e90a455b) C:\Windows\system32\ipbusenum.dll
17:09:31.0666 5420        IPBusEnum - ok
17:09:31.0694 5420        IpFilterDriver  (722dd294df62483cecaae6e094b4d695) C:\Windows\system32\DRIVERS\ipfltdrv.sys
17:09:31.0739 5420        IpFilterDriver - ok
17:09:31.0790 5420        iphlpsvc        (f8e058d17363ec580e4b7232778b6cb5) C:\Windows\System32\iphlpsvc.dll
17:09:31.0872 5420        iphlpsvc - ok
17:09:31.0894 5420        IPMIDRV        (e2b4a4494db7cb9b89b55ca268c337c5) C:\Windows\system32\DRIVERS\IPMIDrv.sys
17:09:31.0943 5420        IPMIDRV - ok
17:09:31.0957 5420        IPNAT          (af9b39a7e7b6caa203b3862582e9f2d0) C:\Windows\system32\drivers\ipnat.sys
17:09:32.0008 5420        IPNAT - ok
17:09:32.0107 5420        iPod Service    (3151d878bb16307ef2cf4cda2463d15e) C:\Program Files\iPod\bin\iPodService.exe
17:09:32.0170 5420        iPod Service - ok
17:09:32.0215 5420        IRENUM          (3abf5e7213eb28966d55d58b515d5ce9) C:\Windows\system32\drivers\irenum.sys
17:09:32.0248 5420        IRENUM - ok
17:09:32.0265 5420        isapnp          (2f7b28dc3e1183e5eb418df55c204f38) C:\Windows\system32\DRIVERS\isapnp.sys
17:09:32.0296 5420        isapnp - ok
17:09:32.0326 5420        iScsiPrt        (fa4d2557de56d45b0a346f93564be6e1) C:\Windows\system32\DRIVERS\msiscsi.sys
17:09:32.0355 5420        iScsiPrt - ok
17:09:32.0457 5420        IviRegMgr      (213822072085b5bbad9af30ab577d817) C:\Program Files (x86)\Common Files\InterVideo\RegMgr\iviRegMgr.exe
17:09:32.0481 5420        IviRegMgr - ok
17:09:32.0529 5420        JMCR            (80a1de467adf200390134d63e359937a) C:\Windows\system32\DRIVERS\jmcr.sys
17:09:32.0615 5420        JMCR - ok
17:09:32.0642 5420        kbdclass        (bc02336f1cba7dcc7d1213bb588a68a5) C:\Windows\system32\DRIVERS\kbdclass.sys
17:09:32.0665 5420        kbdclass - ok
17:09:32.0683 5420        kbdhid          (6def98f8541e1b5dceb2c822a11f7323) C:\Windows\system32\DRIVERS\kbdhid.sys
17:09:32.0724 5420        kbdhid - ok
17:09:32.0774 5420        KeyIso          (156f6159457d0aa7e59b62681b56eb90) C:\Windows\system32\lsass.exe
17:09:32.0801 5420        KeyIso - ok
17:09:32.0816 5420        KSecDD          (16c1b906fc5ead84769f90b736b6bf0e) C:\Windows\system32\Drivers\ksecdd.sys
17:09:32.0836 5420        KSecDD - ok
17:09:32.0853 5420        KSecPkg        (0b711550c56444879d71c7daabda6c83) C:\Windows\system32\Drivers\ksecpkg.sys
17:09:32.0871 5420        KSecPkg - ok
17:09:32.0886 5420        ksthunk        (6869281e78cb31a43e969f06b57347c4) C:\Windows\system32\drivers\ksthunk.sys
17:09:32.0953 5420        ksthunk - ok
17:09:33.0009 5420        KtmRm          (6ab66e16aa859232f64deb66887a8c9c) C:\Windows\system32\msdtckrm.dll
17:09:33.0118 5420        KtmRm - ok
17:09:33.0169 5420        LanmanServer    (81f1d04d4d0e433099365127375fd501) C:\Windows\System32\srvsvc.dll
17:09:33.0248 5420        LanmanServer - ok
17:09:33.0281 5420        LanmanWorkstation (27026eac8818e8a6c00a1cad2f11d29a) C:\Windows\System32\wkssvc.dll
17:09:33.0398 5420        LanmanWorkstation - ok
17:09:33.0479 5420        LENOVO.MICMUTE  (d584216c7767dcfb4b812b9b60a4a4e7) C:\Program Files\LENOVO\HOTKEY\MICMUTE.exe
17:09:33.0491 5420        LENOVO.MICMUTE - ok
17:09:33.0518 5420        lenovo.smi      (5acff5823634bc2c4ebf559c3b33e18e) C:\Windows\system32\DRIVERS\smiifx64.sys
17:09:33.0536 5420        lenovo.smi - ok
17:09:33.0568 5420        lltdio          (1538831cf8ad2979a04c423779465827) C:\Windows\system32\DRIVERS\lltdio.sys
17:09:33.0635 5420        lltdio - ok
17:09:33.0696 5420        lltdsvc        (c1185803384ab3feed115f79f109427f) C:\Windows\System32\lltdsvc.dll
17:09:33.0779 5420        lltdsvc - ok
17:09:33.0798 5420        lmhosts        (f993a32249b66c9d622ea5592a8b76b8) C:\Windows\System32\lmhsvc.dll
17:09:33.0842 5420        lmhosts - ok
17:09:33.0894 5420        LSI_FC          (1a93e54eb0ece102495a51266dcdb6a6) C:\Windows\system32\DRIVERS\lsi_fc.sys
17:09:33.0916 5420        LSI_FC - ok
17:09:33.0930 5420        LSI_SAS        (1047184a9fdc8bdbff857175875ee810) C:\Windows\system32\DRIVERS\lsi_sas.sys
17:09:33.0952 5420        LSI_SAS - ok
17:09:33.0976 5420        LSI_SAS2        (30f5c0de1ee8b5bc9306c1f0e4a75f93) C:\Windows\system32\DRIVERS\lsi_sas2.sys
17:09:33.0997 5420        LSI_SAS2 - ok
17:09:34.0011 5420        LSI_SCSI        (0504eacaff0d3c8aed161c4b0d369d4a) C:\Windows\system32\DRIVERS\lsi_scsi.sys
17:09:34.0033 5420        LSI_SCSI - ok
17:09:34.0050 5420        luafv          (43d0f98e1d56ccddb0d5254cff7b356e) C:\Windows\system32\drivers\luafv.sys
17:09:34.0110 5420        luafv - ok
17:09:34.0147 5420        Mcx2Svc        (f84c8f1000bc11e3b7b23cbd3baff111) C:\Windows\system32\Mcx2Svc.dll
17:09:34.0200 5420        Mcx2Svc - ok
17:09:34.0224 5420        megasas        (a55805f747c6edb6a9080d7c633bd0f4) C:\Windows\system32\DRIVERS\megasas.sys
17:09:34.0244 5420        megasas - ok
17:09:34.0290 5420        MegaSR          (baf74ce0072480c3b6b7c13b2a94d6b3) C:\Windows\system32\DRIVERS\MegaSR.sys
17:09:34.0346 5420        MegaSR - ok
17:09:34.0495 5420        Microsoft Office Groove Audit Service (fafe367d032ed82e9332b4c741a20216) C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe
17:09:34.0527 5420        Microsoft Office Groove Audit Service - ok
17:09:34.0563 5420        MMCSS          (e40e80d0304a73e8d269f7141d77250b) C:\Windows\system32\mmcss.dll
17:09:34.0626 5420        MMCSS - ok
17:09:34.0648 5420        Modem          (800ba92f7010378b09f9ed9270f07137) C:\Windows\system32\drivers\modem.sys
17:09:34.0714 5420        Modem - ok
17:09:34.0764 5420        monitor        (b03d591dc7da45ece20b3b467e6aadaa) C:\Windows\system32\DRIVERS\monitor.sys
17:09:34.0818 5420        monitor - ok
17:09:34.0852 5420        mouclass        (7d27ea49f3c1f687d357e77a470aea99) C:\Windows\system32\DRIVERS\mouclass.sys
17:09:34.0887 5420        mouclass - ok
17:09:34.0920 5420        mouhid          (d3bf052c40b0c4166d9fd86a4288c1e6) C:\Windows\system32\DRIVERS\mouhid.sys
17:09:34.0940 5420        mouhid - ok
17:09:34.0960 5420        mountmgr        (791af66c4d0e7c90a3646066386fb571) C:\Windows\system32\drivers\mountmgr.sys
17:09:34.0977 5420        mountmgr - ok
17:09:35.0020 5420        MozillaMaintenance (96aa8ba23142cc8e2b30f3cae0c80254) C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
17:09:35.0051 5420        MozillaMaintenance - ok
17:09:35.0078 5420        mpio            (609d1d87649ecc19796f4d76d4c15cea) C:\Windows\system32\DRIVERS\mpio.sys
17:09:35.0103 5420        mpio - ok
17:09:35.0128 5420        mpsdrv          (6c38c9e45ae0ea2fa5e551f2ed5e978f) C:\Windows\system32\drivers\mpsdrv.sys
17:09:35.0174 5420        mpsdrv - ok
17:09:35.0233 5420        MpsSvc          (aecab449567d1846dad63ece49e893e3) C:\Windows\system32\mpssvc.dll
17:09:35.0335 5420        MpsSvc - ok
17:09:35.0352 5420        MRxDAV          (30524261bb51d96d6fcbac20c810183c) C:\Windows\system32\drivers\mrxdav.sys
17:09:35.0440 5420        MRxDAV - ok
17:09:35.0481 5420        mrxsmb          (040d62a9d8ad28922632137acdd984f2) C:\Windows\system32\DRIVERS\mrxsmb.sys
17:09:35.0567 5420        mrxsmb - ok
17:09:35.0620 5420        mrxsmb10        (f0067552f8f9b33d7c59403ab808a3cb) C:\Windows\system32\DRIVERS\mrxsmb10.sys
17:09:35.0655 5420        mrxsmb10 - ok
17:09:35.0673 5420        mrxsmb20        (3c142d31de9f2f193218a53fe2632051) C:\Windows\system32\DRIVERS\mrxsmb20.sys
17:09:35.0709 5420        mrxsmb20 - ok
17:09:35.0745 5420        msahci          (5c37497276e3b3a5488b23a326a754b7) C:\Windows\system32\DRIVERS\msahci.sys
17:09:35.0761 5420        msahci - ok
17:09:35.0790 5420        msdsm          (8d27b597229aed79430fb9db3bcbfbd0) C:\Windows\system32\DRIVERS\msdsm.sys
17:09:35.0813 5420        msdsm - ok
17:09:35.0843 5420        MSDTC          (de0ece52236cfa3ed2dbfc03f28253a8) C:\Windows\System32\msdtc.exe
17:09:35.0891 5420        MSDTC - ok
17:09:35.0932 5420        Msfs            (aa3fb40e17ce1388fa1bedab50ea8f96) C:\Windows\system32\drivers\Msfs.sys
17:09:35.0971 5420        Msfs - ok
17:09:36.0012 5420        mshidkmdf      (f9d215a46a8b9753f61767fa72a20326) C:\Windows\System32\drivers\mshidkmdf.sys
17:09:36.0086 5420        mshidkmdf - ok
17:09:36.0114 5420        msisadrv        (d916874bbd4f8b07bfb7fa9b3ccae29d) C:\Windows\system32\DRIVERS\msisadrv.sys
17:09:36.0129 5420        msisadrv - ok
17:09:36.0168 5420        MSiSCSI        (808e98ff49b155c522e6400953177b08) C:\Windows\system32\iscsiexe.dll
17:09:36.0232 5420        MSiSCSI - ok
17:09:36.0237 5420        msiserver - ok
17:09:36.0292 5420        MSKSSRV        (49ccf2c4fea34ffad8b1b59d49439366) C:\Windows\system32\drivers\MSKSSRV.sys
17:09:36.0364 5420        MSKSSRV - ok
17:09:36.0385 5420        MSPCLOCK        (bdd71ace35a232104ddd349ee70e1ab3) C:\Windows\system32\drivers\MSPCLOCK.sys
17:09:36.0443 5420        MSPCLOCK - ok
17:09:36.0464 5420        MSPQM          (4ed981241db27c3383d72092b618a1d0) C:\Windows\system32\drivers\MSPQM.sys
17:09:36.0521 5420        MSPQM - ok
17:09:36.0555 5420        MsRPC          (89cb141aa8616d8c6a4610fa26c60964) C:\Windows\system32\drivers\MsRPC.sys
17:09:36.0584 5420        MsRPC - ok
17:09:36.0606 5420        mssmbios        (0eed230e37515a0eaee3c2e1bc97b288) C:\Windows\system32\DRIVERS\mssmbios.sys
17:09:36.0623 5420        mssmbios - ok
17:09:36.0635 5420        MSTEE          (2e66f9ecb30b4221a318c92ac2250779) C:\Windows\system32\drivers\MSTEE.sys
17:09:36.0715 5420        MSTEE - ok
17:09:36.0735 5420        MTConfig        (7ea404308934e675bffde8edf0757bcd) C:\Windows\system32\DRIVERS\MTConfig.sys
17:09:36.0773 5420        MTConfig - ok
17:09:36.0805 5420        Mup            (f9a18612fd3526fe473c1bda678d61c8) C:\Windows\system32\Drivers\mup.sys
17:09:36.0822 5420        Mup - ok
17:09:36.0868 5420        napagent        (4987e079a4530fa737a128be54b63b12) C:\Windows\system32\qagentRT.dll
17:09:36.0953 5420        napagent - ok
17:09:37.0005 5420        NativeWifiP    (1ea3749c4114db3e3161156ffffa6b33) C:\Windows\system32\DRIVERS\nwifi.sys
17:09:37.0067 5420        NativeWifiP - ok
17:09:37.0132 5420        NDIS            (cad515dbd07d082bb317d9928ce8962c) C:\Windows\system32\drivers\ndis.sys
17:09:37.0177 5420        NDIS - ok
17:09:37.0208 5420        NdisCap        (9f9a1f53aad7da4d6fef5bb73ab811ac) C:\Windows\system32\DRIVERS\ndiscap.sys
17:09:37.0251 5420        NdisCap - ok
17:09:37.0279 5420        NdisTapi        (30639c932d9fef22b31268fe25a1b6e5) C:\Windows\system32\DRIVERS\ndistapi.sys
17:09:37.0344 5420        NdisTapi - ok
17:09:37.0367 5420        Ndisuio        (f105ba1e22bf1f2ee8f005d4305e4bec) C:\Windows\system32\DRIVERS\ndisuio.sys
17:09:37.0426 5420        Ndisuio - ok
17:09:37.0474 5420        NdisWan        (557dfab9ca1fcb036ac77564c010dad3) C:\Windows\system32\DRIVERS\ndiswan.sys
17:09:37.0521 5420        NdisWan - ok
17:09:37.0534 5420        NDProxy        (659b74fb74b86228d6338d643cd3e3cf) C:\Windows\system32\drivers\NDProxy.sys
17:09:37.0593 5420        NDProxy - ok
17:09:37.0626 5420        NetBIOS        (86743d9f5d2b1048062b14b1d84501c4) C:\Windows\system32\DRIVERS\netbios.sys
17:09:37.0684 5420        NetBIOS - ok
17:09:37.0721 5420        NetBT          (9162b273a44ab9dce5b44362731d062a) C:\Windows\system32\DRIVERS\netbt.sys
17:09:37.0792 5420        NetBT - ok
17:09:37.0826 5420        Netlogon        (156f6159457d0aa7e59b62681b56eb90) C:\Windows\system32\lsass.exe
17:09:37.0841 5420        Netlogon - ok
17:09:37.0894 5420        Netman          (847d3ae376c0817161a14a82c8922a9e) C:\Windows\System32\netman.dll
17:09:37.0974 5420        Netman - ok
17:09:38.0018 5420        netprofm        (5f28111c648f1e24f7dbc87cdeb091b8) C:\Windows\System32\netprofm.dll
17:09:38.0117 5420        netprofm - ok
17:09:38.0194 5420        NetTcpPortSharing (3e5a36127e201ddf663176b66828fafe) C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe
17:09:38.0248 5420        NetTcpPortSharing - ok
17:09:38.0547 5420        NETw5s64        (4d85a450edef10c38882182753a49aae) C:\Windows\system32\DRIVERS\NETw5s64.sys
17:09:38.0885 5420        NETw5s64 - ok
17:09:39.0261 5420        netw5v64        (64428dfdaf6e88366cb51f45a79c5f69) C:\Windows\system32\DRIVERS\netw5v64.sys
17:09:39.0562 5420        netw5v64 - ok
17:09:40.0070 5420        NETwNs64        (9aa75919d0a5f33bea0df7b9db09b755) C:\Windows\system32\DRIVERS\NETwNs64.sys
17:09:40.0371 5420        NETwNs64 - ok
17:09:40.0495 5420        nfrd960        (77889813be4d166cdab78ddba990da92) C:\Windows\system32\DRIVERS\nfrd960.sys
17:09:40.0529 5420        nfrd960 - ok
17:09:40.0578 5420        NlaSvc          (d9a0ce66046d6efa0c61baa885cba0a8) C:\Windows\System32\nlasvc.dll
17:09:40.0641 5420        NlaSvc - ok
17:09:40.0668 5420        Npfs            (1e4c4ab5c9b8dd13179bbdc75a2a01f7) C:\Windows\system32\drivers\Npfs.sys
17:09:40.0729 5420        Npfs - ok
17:09:40.0757 5420        nsi            (d54bfdf3e0c953f823b3d0bfe4732528) C:\Windows\system32\nsisvc.dll
17:09:40.0820 5420        nsi - ok
17:09:40.0854 5420        nsiproxy        (e7f5ae18af4168178a642a9247c63001) C:\Windows\system32\drivers\nsiproxy.sys
17:09:40.0913 5420        nsiproxy - ok
17:09:41.0037 5420        Ntfs            (378e0e0dfea67d98ae6ea53adbbd76bc) C:\Windows\system32\drivers\Ntfs.sys
17:09:41.0154 5420        Ntfs - ok
17:09:41.0260 5420        Null            (9899284589f75fa8724ff3d16aed75c1) C:\Windows\system32\drivers\Null.sys
17:09:41.0312 5420        Null - ok
17:09:41.0360 5420        nvraid          (a4d9c9a608a97f59307c2f2600edc6a4) C:\Windows\system32\drivers\nvraid.sys
17:09:41.0390 5420        nvraid - ok
17:09:41.0407 5420        nvstor          (6c1d5f70e7a6a3fd1c90d840edc048b9) C:\Windows\system32\drivers\nvstor.sys
17:09:41.0432 5420        nvstor - ok
17:09:41.0453 5420        nv_agp          (270d7cd42d6e3979f6dd0146650f0e05) C:\Windows\system32\DRIVERS\nv_agp.sys
17:09:41.0475 5420        nv_agp - ok
17:09:41.0629 5420        odserv          (84de1dd996b48b05ace31ad015fa108a) C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE
17:09:41.0697 5420        odserv - ok
17:09:41.0727 5420        ohci1394        (3589478e4b22ce21b41fa1bfc0b8b8a0) C:\Windows\system32\DRIVERS\ohci1394.sys
17:09:41.0767 5420        ohci1394 - ok
17:09:41.0878 5420        OMSI download service (da345de3b450e9e1691e7b9956d8ffc3) C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe
17:09:41.0917 5420        OMSI download service ( UnsignedFile.Multi.Generic ) - warning
17:09:41.0917 5420        OMSI download service - detected UnsignedFile.Multi.Generic (1)
17:09:41.0979 5420        ose            (5a432a042dae460abe7199b758e8606c) C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
17:09:42.0013 5420        ose - ok
17:09:42.0061 5420        p2pimsvc        (3eac4455472cc2c97107b5291e0dcafe) C:\Windows\system32\pnrpsvc.dll
17:09:42.0179 5420        p2pimsvc - ok
17:09:42.0223 5420        p2psvc          (927463ecb02179f88e4b9a17568c63c3) C:\Windows\system32\p2psvc.dll
17:09:42.0266 5420        p2psvc - ok
17:09:42.0303 5420        Parport        (0086431c29c35be1dbc43f52cc273887) C:\Windows\system32\DRIVERS\parport.sys
17:09:42.0326 5420        Parport - ok
17:09:42.0361 5420        partmgr        (90061b1acfe8ccaa5345750ffe08d8b8) C:\Windows\system32\drivers\partmgr.sys
17:09:42.0377 5420        partmgr - ok
17:09:42.0396 5420        PcaSvc          (3aeaa8b561e63452c655dc0584922257) C:\Windows\System32\pcasvc.dll
17:09:42.0450 5420        PcaSvc - ok
17:09:42.0587 5420        PCDSRVC{127174DC-C366ED8B-06020200}_0 (4b5f5774ff1c577b9515fdd2b5c535c5) c:\program files\pc-doctor\pcdsrvc_x64.pkms
17:09:42.0608 5420        PCDSRVC{127174DC-C366ED8B-06020200}_0 - ok
17:09:42.0649 5420        pci            (f36f6504009f2fb0dfd1b17a116ad74b) C:\Windows\system32\DRIVERS\pci.sys
17:09:42.0667 5420        pci - ok
17:09:42.0683 5420        pciide          (b5b8b5ef2e5cb34df8dcf8831e3534fa) C:\Windows\system32\DRIVERS\pciide.sys
17:09:42.0702 5420        pciide - ok
17:09:42.0725 5420        pcmcia          (b2e81d4e87ce48589f98cb8c05b01f2f) C:\Windows\system32\DRIVERS\pcmcia.sys
17:09:42.0752 5420        pcmcia - ok
17:09:42.0775 5420        pcw            (d6b9c2e1a11a3a4b26a182ffef18f603) C:\Windows\system32\drivers\pcw.sys
17:09:42.0792 5420        pcw - ok
17:09:42.0830 5420        PEAUTH          (68769c3356b3be5d1c732c97b9a80d6e) C:\Windows\system32\drivers\peauth.sys
17:09:42.0944 5420        PEAUTH - ok
17:09:43.0025 5420        PerfHost        (e495e408c93141e8fc72dc0c6046ddfa) C:\Windows\SysWow64\perfhost.exe
17:09:43.0092 5420        PerfHost - ok
17:09:43.0196 5420        pla            (557e9a86f65f0de18c9b6751dfe9d3f1) C:\Windows\system32\pla.dll
17:09:43.0322 5420        pla - ok
17:09:43.0393 5420        PlugPlay        (98b1721b8718164293b9701b98c52d77) C:\Windows\system32\umpnpmgr.dll
17:09:43.0509 5420        PlugPlay - ok
17:09:43.0543 5420        PNRPAutoReg    (7195581cec9bb7d12abe54036acc2e38) C:\Windows\system32\pnrpauto.dll
17:09:43.0590 5420        PNRPAutoReg - ok
17:09:43.0622 5420        PNRPsvc        (3eac4455472cc2c97107b5291e0dcafe) C:\Windows\system32\pnrpsvc.dll
17:09:43.0641 5420        PNRPsvc - ok
17:09:43.0690 5420        PolicyAgent    (166eb40d1f5b47e615de3d0fffe5f243) C:\Windows\System32\ipsecsvc.dll
17:09:43.0786 5420        PolicyAgent - ok
17:09:43.0827 5420        Power          (6ba9d927dded70bd1a9caded45f8b184) C:\Windows\system32\umpo.dll
17:09:43.0894 5420        Power - ok
17:09:44.0008 5420        Power Manager DBC Service (bf179cfcfdb28b9e28397835beafe332) C:\Program Files (x86)\ThinkPad\Utilities\PWMDBSVC.EXE
17:09:44.0050 5420        Power Manager DBC Service - ok
17:09:44.0129 5420        PptpMiniport    (27cc19e81ba5e3403c48302127bda717) C:\Windows\system32\DRIVERS\raspptp.sys
17:09:44.0221 5420        PptpMiniport - ok
17:09:44.0277 5420        prmvmouse      (5320e4c5253b3b5579fb3bb47b7671ac) C:\Windows\system32\DRIVERS\activmouse.sys
17:09:44.0328 5420        prmvmouse - ok
17:09:44.0358 5420        Processor      (0d922e23c041efb1c3fac2a6f943c9bf) C:\Windows\system32\DRIVERS\processr.sys
17:09:44.0410 5420        Processor - ok
17:09:44.0452 5420        ProfSvc        (97293447431311c06703368ad0f6c4be) C:\Windows\system32\profsvc.dll
17:09:44.0509 5420        ProfSvc - ok
17:09:44.0550 5420        ProtectedStorage (156f6159457d0aa7e59b62681b56eb90) C:\Windows\system32\lsass.exe
17:09:44.0582 5420        ProtectedStorage - ok
17:09:44.0622 5420        psadd          (515a7c5a0886fcc60901916785efd549) C:\Windows\system32\DRIVERS\psadd.sys
17:09:44.0651 5420        psadd - ok
17:09:44.0689 5420        Psched          (ee992183bd8eaefd9973f352e587a299) C:\Windows\system32\DRIVERS\pacer.sys
17:09:44.0757 5420        Psched - ok
17:09:44.0798 5420        PxHlpa64        (4712cc14e720ecccc0aa16949d18aaf1) C:\Windows\system32\Drivers\PxHlpa64.sys
17:09:44.0812 5420        PxHlpa64 - ok
17:09:44.0898 5420        ql2300          (a53a15a11ebfd21077463ee2c7afeef0) C:\Windows\system32\DRIVERS\ql2300.sys
17:09:45.0015 5420        ql2300 - ok
17:09:45.0134 5420        ql40xx          (4f6d12b51de1aaeff7dc58c4d75423c8) C:\Windows\system32\DRIVERS\ql40xx.sys
17:09:45.0168 5420        ql40xx - ok
17:09:45.0201 5420        QWAVE          (906191634e99aea92c4816150bda3732) C:\Windows\system32\qwave.dll
17:09:45.0233 5420        QWAVE - ok
17:09:45.0251 5420        QWAVEdrv        (76707bb36430888d9ce9d705398adb6c) C:\Windows\system32\drivers\qwavedrv.sys
17:09:45.0298 5420        QWAVEdrv - ok
17:09:45.0322 5420        RasAcd          (5a0da8ad5762fa2d91678a8a01311704) C:\Windows\system32\DRIVERS\rasacd.sys
17:09:45.0386 5420        RasAcd - ok
17:09:45.0429 5420        RasAgileVpn    (7ecff9b22276b73f43a99a15a6094e90) C:\Windows\system32\DRIVERS\AgileVpn.sys
17:09:45.0473 5420        RasAgileVpn - ok
17:09:45.0499 5420        RasAuto        (8f26510c5383b8dbe976de1cd00fc8c7) C:\Windows\System32\rasauto.dll
17:09:45.0580 5420        RasAuto - ok
17:09:45.0611 5420        Rasl2tp        (87a6e852a22991580d6d39adc4790463) C:\Windows\system32\DRIVERS\rasl2tp.sys
17:09:45.0676 5420        Rasl2tp - ok
17:09:45.0724 5420        RasMan          (47394ed3d16d053f5906efe5ab51cc83) C:\Windows\System32\rasmans.dll
17:09:45.0811 5420        RasMan - ok
17:09:45.0844 5420        RasPppoe        (855c9b1cd4756c5e9a2aa58a15f58c25) C:\Windows\system32\DRIVERS\raspppoe.sys
17:09:45.0927 5420        RasPppoe - ok
17:09:45.0976 5420        RasSstp        (e8b1e447b008d07ff47d016c2b0eeecb) C:\Windows\system32\DRIVERS\rassstp.sys
17:09:46.0043 5420        RasSstp - ok
17:09:46.0090 5420        rdbss          (3bac8142102c15d59a87757c1d41dce5) C:\Windows\system32\DRIVERS\rdbss.sys
17:09:46.0185 5420        rdbss - ok
17:09:46.0202 5420        rdpbus          (302da2a0539f2cf54d7c6cc30c1f2d8d) C:\Windows\system32\DRIVERS\rdpbus.sys
17:09:46.0226 5420        rdpbus - ok
17:09:46.0251 5420        RDPCDD          (cea6cc257fc9b7715f1c2b4849286d24) C:\Windows\system32\DRIVERS\RDPCDD.sys
17:09:46.0292 5420        RDPCDD - ok
17:09:46.0312 5420        RDPENCDD        (bb5971a4f00659529a5c44831af22365) C:\Windows\system32\drivers\rdpencdd.sys
17:09:46.0373 5420        RDPENCDD - ok
17:09:46.0395 5420        RDPREFMP        (216f3fa57533d98e1f74ded70113177a) C:\Windows\system32\drivers\rdprefmp.sys
17:09:46.0439 5420        RDPREFMP - ok
17:09:46.0485 5420        RDPWD          (447de7e3dea39d422c1504f245b668b1) C:\Windows\system32\drivers\RDPWD.sys
17:09:46.0599 5420        RDPWD - ok
17:09:46.0637 5420        rdyboost        (634b9a2181d98f15941236886164ec8b) C:\Windows\system32\drivers\rdyboost.sys
17:09:46.0665 5420        rdyboost - ok
17:09:46.0787 5420        RegSrvc        (2528d733da7f5ac8d3d32c74ee4cff16) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
17:09:46.0841 5420        RegSrvc - ok
17:09:46.0883 5420        RemoteAccess    (254fb7a22d74e5511c73a3f6d802f192) C:\Windows\System32\mprdim.dll
17:09:46.0954 5420        RemoteAccess - ok
17:09:46.0998 5420        RemoteRegistry  (e4d94f24081440b5fc5aa556c7c62702) C:\Windows\system32\regsvc.dll
17:09:47.0071 5420        RemoteRegistry - ok
17:09:47.0148 5420        RFCOMM          (3dd798846e2c28102b922c56e71b7932) C:\Windows\system32\DRIVERS\rfcomm.sys
17:09:47.0202 5420        RFCOMM - ok
17:09:47.0339 5420        Roxio UPnP Renderer 10 (14a99fd851272c73b758546ef8f0e641) C:\Program Files (x86)\Roxio\Digital Home 10\RoxioUPnPRenderer10.exe
17:09:47.0413 5420        Roxio UPnP Renderer 10 - ok
17:09:47.0447 5420        Roxio Upnp Server 10 (ba917f2f2bd5033e70823797c73cdfcb) C:\Program Files (x86)\Roxio\Digital Home 10\RoxioUpnpService10.exe
17:09:47.0475 5420        Roxio Upnp Server 10 - ok
17:09:47.0561 5420        RoxLiveShare10  (8986d20cf294d794a79fb18ff697b68b) C:\Program Files (x86)\Common Files\Roxio Shared\10.0\SharedCOM\RoxLiveShare10.exe
17:09:47.0609 5420        RoxLiveShare10 - ok
17:09:47.0681 5420        RoxMediaDB10    (d8c44229eb2495e774350529ed9be08d) C:\Program Files (x86)\Common Files\Roxio Shared\10.0\SharedCOM\RoxMediaDB10.exe
17:09:47.0789 5420        RoxMediaDB10 - ok
17:09:47.0829 5420        RoxWatch10      (53716357f4b3c99112cf0a21932c5688) C:\Program Files (x86)\Common Files\Roxio Shared\10.0\SharedCOM\RoxWatch10.exe
17:09:47.0844 5420        RoxWatch10 - ok
17:09:47.0936 5420        RpcEptMapper    (e4dc58cf7b3ea515ae917ff0d402a7bb) C:\Windows\System32\RpcEpMap.dll
17:09:48.0016 5420        RpcEptMapper - ok
17:09:48.0050 5420        RpcLocator      (d5ba242d4cf8e384db90e6a8ed850b8c) C:\Windows\system32\locator.exe
17:09:48.0087 5420        RpcLocator - ok
17:09:48.0128 5420        RpcSs          (7266972e86890e2b30c0c322e906b027) C:\Windows\system32\rpcss.dll
17:09:48.0173 5420        RpcSs - ok
17:09:48.0239 5420        rspndr          (ddc86e4f8e7456261e637e3552e804ff) C:\Windows\system32\DRIVERS\rspndr.sys
17:09:48.0321 5420        rspndr - ok
17:09:48.0370 5420        RTL8167        (b49dc435ae3695bac5623dd94b05732d) C:\Windows\system32\DRIVERS\Rt64win7.sys
17:09:48.0450 5420        RTL8167 - ok
17:09:48.0532 5420        s0016bus        (ea268bce30691c2dd24f02e617fd2eb5) C:\Windows\system32\DRIVERS\s0016bus.sys
17:09:48.0552 5420        s0016bus - ok
17:09:48.0604 5420        s0016mdfl      (f5f9deb89996d333ef976624d37e24e3) C:\Windows\system32\DRIVERS\s0016mdfl.sys
17:09:48.0620 5420        s0016mdfl - ok
17:09:48.0639 5420        s0016mdm        (c17ce2aee67480febcc36eccb54c0be8) C:\Windows\system32\DRIVERS\s0016mdm.sys
17:09:48.0662 5420        s0016mdm - ok
17:09:48.0692 5420        s0016mgmt      (cc267f04c54c5ec5b7bd658d7628469f) C:\Windows\system32\DRIVERS\s0016mgmt.sys
17:09:48.0712 5420        s0016mgmt - ok
17:09:48.0751 5420        s0016nd5        (30a35bbce09d9fe67482fd62c61911fc) C:\Windows\system32\DRIVERS\s0016nd5.sys
17:09:48.0768 5420        s0016nd5 - ok
17:09:48.0811 5420        s0016obex      (ca394dcc38579c7ad82e83ee64d798a0) C:\Windows\system32\DRIVERS\s0016obex.sys
17:09:48.0831 5420        s0016obex - ok
17:09:48.0851 5420        s0016unic      (eb267ccea84e6e8598d92f73332ac67b) C:\Windows\system32\DRIVERS\s0016unic.sys
17:09:48.0873 5420        s0016unic - ok
17:09:48.0908 5420        SamSs          (156f6159457d0aa7e59b62681b56eb90) C:\Windows\system32\lsass.exe
17:09:48.0924 5420        SamSs - ok
17:09:48.0963 5420        sbp2port        (e3bbb89983daf5622c1d50cf49f28227) C:\Windows\system32\DRIVERS\sbp2port.sys
17:09:48.0986 5420        sbp2port - ok
17:09:49.0023 5420        SCardSvr        (9b7395789e3791a3b6d000fe6f8b131e) C:\Windows\System32\SCardSvr.dll
17:09:49.0073 5420        SCardSvr - ok
17:09:49.0091 5420        scfilter        (c94da20c7e3ba1dca269bc8460d98387) C:\Windows\system32\DRIVERS\scfilter.sys
17:09:49.0155 5420        scfilter - ok
17:09:49.0245 5420        Schedule        (624d0f5ff99428bb90a5b8a4123e918e) C:\Windows\system32\schedsvc.dll
17:09:49.0433 5420        Schedule - ok
17:09:49.0472 5420        SCPolicySvc    (312e2f82af11e79906898ac3e3d58a1f) C:\Windows\System32\certprop.dll
17:09:49.0526 5420        SCPolicySvc - ok
17:09:49.0571 5420        sdbus          (2c8d162efaf73abd36d8bcbb6340cae7) C:\Windows\system32\DRIVERS\sdbus.sys
17:09:49.0652 5420        sdbus - ok
17:09:49.0683 5420        SDRSVC          (765a27c3279ce11d14cb9e4f5869fca5) C:\Windows\System32\SDRSVC.dll
17:09:49.0767 5420        SDRSVC - ok
17:09:49.0876 5420        SeaPort        (d358e077a0a05d9b12da22d137ee8464) C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
17:09:49.0902 5420        SeaPort - ok
17:09:49.0930 5420        secdrv          (3ea8a16169c26afbeb544e0e48421186) C:\Windows\system32\drivers\secdrv.sys
17:09:49.0973 5420        secdrv - ok
17:09:50.0003 5420        seclogon        (463b386ebc70f98da5dff85f7e654346) C:\Windows\system32\seclogon.dll
17:09:50.0066 5420        seclogon - ok
17:09:50.0088 5420        SENS            (c32ab8fa018ef34c0f113bd501436d21) C:\Windows\System32\sens.dll
17:09:50.0153 5420        SENS - ok
17:09:50.0185 5420        SensrSvc        (0336cffafaab87a11541f1cf1594b2b2) C:\Windows\system32\sensrsvc.dll
17:09:50.0276 5420        SensrSvc - ok
17:09:50.0300 5420        Serenum        (cb624c0035412af0debec78c41f5ca1b) C:\Windows\system32\DRIVERS\serenum.sys
17:09:50.0320 5420        Serenum - ok
17:09:50.0366 5420        Serial          (c1d8e28b2c2adfaec4ba89e9fda69bd6) C:\Windows\system32\DRIVERS\serial.sys
17:09:50.0407 5420        Serial - ok
17:09:50.0452 5420        sermouse        (1c545a7d0691cc4a027396535691c3e3) C:\Windows\system32\DRIVERS\sermouse.sys
17:09:50.0471 5420        sermouse - ok
17:09:50.0515 5420        SessionEnv      (c3bc61ce47ff6f4e88ab8a3b429a36af) C:\Windows\system32\sessenv.dll
17:09:50.0562 5420        SessionEnv - ok
17:09:50.0584 5420        sffdisk        (a554811bcd09279536440c964ae35bbf) C:\Windows\system32\DRIVERS\sffdisk.sys
17:09:50.0623 5420        sffdisk - ok
17:09:50.0656 5420        sffp_mmc        (ff414f0baefeba59bc6c04b3db0b87bf) C:\Windows\system32\DRIVERS\sffp_mmc.sys
17:09:50.0700 5420        sffp_mmc - ok
17:09:50.0721 5420        sffp_sd        (178298f767fe638c9fedcbdef58bb5e4) C:\Windows\system32\DRIVERS\sffp_sd.sys
17:09:50.0739 5420        sffp_sd - ok
17:09:50.0754 5420        sfloppy        (a9d601643a1647211a1ee2ec4e433ff4) C:\Windows\system32\DRIVERS\sfloppy.sys
17:09:50.0773 5420        sfloppy - ok
17:09:50.0823 5420        SharedAccess    (b95f6501a2f8b2e78c697fec401970ce) C:\Windows\System32\ipnathlp.dll
17:09:50.0909 5420        SharedAccess - ok
17:09:51.0026 5420        ShellHWDetection (0298ac45d0efffb2db4baa7dd186e7bf) C:\Windows\System32\shsvcs.dll
17:09:51.0110 5420        ShellHWDetection - ok
17:09:51.0171 5420        Shockprf        (5a5346931ce61ea85f8338f7a03131f7) C:\Windows\system32\DRIVERS\Apsx64.sys
17:09:51.0195 5420        Shockprf - ok
17:09:51.0240 5420        SiSRaid2        (843caf1e5fde1ffd5ff768f23a51e2e1) C:\Windows\system32\DRIVERS\SiSRaid2.sys
17:09:51.0274 5420        SiSRaid2 - ok
17:09:51.0318 5420        SiSRaid4        (6a6c106d42e9ffff8b9fcb4f754f6da4) C:\Windows\system32\DRIVERS\sisraid4.sys
17:09:51.0353 5420        SiSRaid4 - ok
17:09:51.0391 5420        Smb            (548260a7b8654e024dc30bf8a7c5baa4) C:\Windows\system32\DRIVERS\smb.sys
17:09:51.0437 5420        Smb - ok
17:09:51.0498 5420        SNMPTRAP        (6313f223e817cc09aa41811daa7f541d) C:\Windows\System32\snmptrap.exe
17:09:51.0534 5420        SNMPTRAP - ok
17:09:51.0561 5420        spldr          (b9e31e5cacdfe584f34f730a677803f9) C:\Windows\system32\drivers\spldr.sys
17:09:51.0577 5420        spldr - ok
17:09:51.0628 5420        Spooler        (f8e1fa03cb70d54a9892ac88b91d1e7b) C:\Windows\System32\spoolsv.exe
17:09:51.0727 5420        Spooler - ok
17:09:51.0943 5420        sppsvc          (913d843498553a1bc8f8dbad6358e49f) C:\Windows\system32\sppsvc.exe
17:09:52.0113 5420        sppsvc - ok
17:09:52.0207 5420        sppuinotify    (93d7d61317f3d4bc4f4e9f8a96a7de45) C:\Windows\system32\sppuinotify.dll
17:09:52.0272 5420        sppuinotify - ok
17:09:52.0342 5420        srv            (2408c0366d96bcdf63e8f1c78e4a29c5) C:\Windows\system32\DRIVERS\srv.sys
17:09:52.0422 5420        srv - ok
17:09:52.0456 5420        srv2            (76548f7b818881b47d8d1ae1be9c11f8) C:\Windows\system32\DRIVERS\srv2.sys
17:09:52.0505 5420        srv2 - ok
17:09:52.0571 5420        SrvHsfHDA      (0c4540311e11664b245a263e1154cef8) C:\Windows\system32\DRIVERS\VSTAZL6.SYS
17:09:52.0632 5420        SrvHsfHDA - ok
17:09:52.0719 5420        SrvHsfV92      (02071d207a9858fbe3a48cbfd59c4a04) C:\Windows\system32\DRIVERS\VSTDPV6.SYS
17:09:52.0820 5420        SrvHsfV92 - ok
17:09:52.0948 5420        SrvHsfWinac    (18e40c245dbfaf36fd0134a7ef2df396) C:\Windows\system32\DRIVERS\VSTCNXT6.SYS
17:09:53.0036 5420        SrvHsfWinac - ok
17:09:53.0079 5420        srvnet          (0af6e19d39c70844c5caa8fb0183c36e) C:\Windows\system32\DRIVERS\srvnet.sys
17:09:53.0121 5420        srvnet - ok
17:09:53.0173 5420        SSDPSRV        (51b52fbd583cde8aa9ba62b8b4298f33) C:\Windows\System32\ssdpsrv.dll
17:09:53.0240 5420        SSDPSRV - ok
17:09:53.0271 5420        SstpSvc        (ab7aebf58dad8daab7a6c45e6a8885cb) C:\Windows\system32\sstpsvc.dll
17:09:53.0358 5420        SstpSvc - ok
17:09:53.0389 5420        stexstor        (f3817967ed533d08327dc73bc4d5542a) C:\Windows\system32\DRIVERS\stexstor.sys
17:09:53.0410 5420        stexstor - ok
17:09:53.0464 5420        stisvc          (52d0e33b681bd0f33fdc08812fee4f7d) C:\Windows\System32\wiaservc.dll
17:09:53.0536 5420        stisvc - ok
17:09:53.0641 5420        stllssvr        (ff5eb78af7dfb68c2fb363537aaf753e) C:\Program Files (x86)\Common Files\SureThing Shared\stllssvr.exe
17:09:53.0674 5420        stllssvr - ok
17:09:53.0731 5420        SUService      (91403353d039dc6d3d81644a68422649) c:\Program Files (x86)\Lenovo\System Update\SUService.exe
17:09:53.0759 5420        SUService ( UnsignedFile.Multi.Generic ) - warning
17:09:53.0759 5420        SUService - detected UnsignedFile.Multi.Generic (1)
17:09:53.0795 5420        swenum          (d01ec09b6711a5f8e7e6564a4d0fbc90) C:\Windows\system32\DRIVERS\swenum.sys
17:09:53.0820 5420        swenum - ok
17:09:53.0872 5420        swprv          (e08e46fdd841b7184194011ca1955a0b) C:\Windows\System32\swprv.dll
17:09:53.0960 5420        swprv - ok
17:09:54.0021 5420        SynTP          (929c9fa0b18ad2ebc8340591c4bf00ff) C:\Windows\system32\DRIVERS\SynTP.sys
17:09:54.0045 5420        SynTP - ok
17:09:54.0134 5420        SysMain        (3c1284516a62078fb68f768de4f1a7be) C:\Windows\system32\sysmain.dll
17:09:54.0232 5420        SysMain - ok
17:09:54.0313 5420        TabletInputService (238935c3cf2854886dc7cbb2a0e2cc66) C:\Windows\System32\TabSvc.dll
17:09:54.0378 5420        TabletInputService - ok
17:09:54.0419 5420        TapiSrv        (884264ac597b690c5707c89723bb8e7b) C:\Windows\System32\tapisrv.dll
17:09:54.0494 5420        TapiSrv - ok
17:09:54.0511 5420        TBS            (1be03ac720f4d302ea01d40f588162f6) C:\Windows\System32\tbssvc.dll
17:09:54.0579 5420        TBS - ok
17:09:54.0739 5420        Tcpip          (624c5b3aa4c99b3184bb922d9ece3ff0) C:\Windows\system32\drivers\tcpip.sys
17:09:54.0833 5420        Tcpip - ok
17:09:54.0987 5420        TCPIP6          (624c5b3aa4c99b3184bb922d9ece3ff0) C:\Windows\system32\DRIVERS\tcpip.sys
17:09:55.0056 5420        TCPIP6 - ok
17:09:55.0157 5420        tcpipreg        (76d078af6f587b162d50210f761eb9ed) C:\Windows\system32\drivers\tcpipreg.sys
17:09:55.0210 5420        tcpipreg - ok
17:09:55.0226 5420        TDPIPE          (3371d21011695b16333a3934340c4e7c) C:\Windows\system32\drivers\tdpipe.sys
17:09:55.0289 5420        TDPIPE - ok
17:09:55.0328 5420        TDTCP          (7518f7bcfd4b308abc9192bacaf6c970) C:\Windows\system32\drivers\tdtcp.sys
17:09:55.0401 5420        TDTCP - ok
17:09:55.0421 5420        tdx            (079125c4b17b01fcaeebce0bcb290c0f) C:\Windows\system32\DRIVERS\tdx.sys
17:09:55.0491 5420        tdx - ok
17:09:55.0532 5420        TermDD          (c448651339196c0e869a355171875522) C:\Windows\system32\DRIVERS\termdd.sys
17:09:55.0568 5420        TermDD - ok
17:09:55.0625 5420        TermService    (0f05ec2887bfe197ad82a13287d2f404) C:\Windows\System32\termsrv.dll
17:09:55.0722 5420        TermService - ok
17:09:55.0747 5420        Themes          (f0344071948d1a1fa732231785a0664c) C:\Windows\system32\themeservice.dll
17:09:55.0799 5420        Themes - ok
17:09:55.0968 5420        ThinkVantage Registry Monitor Service (39ac444e07fdbd8c2e8e291a65d515d3) C:\Program Files (x86)\Common Files\Lenovo\tvt_reg_monitor_svc.exe
17:09:56.0041 5420        ThinkVantage Registry Monitor Service ( UnsignedFile.Multi.Generic ) - warning
17:09:56.0041 5420        ThinkVantage Registry Monitor Service - detected UnsignedFile.Multi.Generic (1)
17:09:56.0079 5420        THREADORDER    (e40e80d0304a73e8d269f7141d77250b) C:\Windows\system32\mmcss.dll
17:09:56.0131 5420        THREADORDER - ok
17:09:56.0182 5420        TPDIGIMN        (7e25f9ae51daac0791df1eb949a58dbe) C:\Windows\system32\DRIVERS\ApsHM64.sys
17:09:56.0201 5420        TPDIGIMN - ok
17:09:56.0220 5420        TPHDEXLGSVC    (dd96de244cb186207149bc897e67217a) C:\Windows\system32\TPHDEXLG64.exe
17:09:56.0235 5420        TPHDEXLGSVC - ok
17:09:56.0322 5420        TPHKSVC        (a2080872efb7582b43762141ae8d61b9) C:\Program Files\LENOVO\HOTKEY\TPHKSVC.exe
17:09:56.0335 5420        TPHKSVC - ok
17:09:56.0363 5420        TPM            (dbcc20c02e8a3e43b03c304a4e40a84f) C:\Windows\system32\drivers\tpm.sys
17:09:56.0392 5420        TPM - ok
17:09:56.0436 5420        TPPWRIF        (2c067e01d6bbccc88b233b868e210907) C:\Windows\system32\drivers\Tppwr64v.sys
17:09:56.0469 5420        TPPWRIF - ok
17:09:56.0503 5420        TrkWks          (7e7afd841694f6ac397e99d75cead49d) C:\Windows\System32\trkwks.dll
17:09:56.0571 5420        TrkWks - ok
17:09:56.0628 5420        TrustedInstaller (840f7fb849f5887a49ba18c13b2da920) C:\Windows\servicing\TrustedInstaller.exe
17:09:56.0670 5420        TrustedInstaller - ok
17:09:56.0708 5420        tssecsrv        (61b96c26131e37b24e93327a0bd1fb95) C:\Windows\system32\DRIVERS\tssecsrv.sys
17:09:56.0787 5420        tssecsrv - ok
17:09:56.0838 5420        tunnel          (3836171a2cdf3af8ef10856db9835a70) C:\Windows\system32\DRIVERS\tunnel.sys
17:09:56.0923 5420        tunnel - ok
17:09:57.0117 5420        TVT Backup Service (b56da1aa776c15043d10f82b32aa000d) C:\Program Files (x86)\Lenovo\Rescue and Recovery\rrservice.exe
17:09:57.0182 5420        TVT Backup Service ( UnsignedFile.Multi.Generic ) - warning
17:09:57.0182 5420        TVT Backup Service - detected UnsignedFile.Multi.Generic (1)
17:09:57.0289 5420        uagp35          (b4dd609bd7e282bfc683cec7eaaaad67) C:\Windows\system32\DRIVERS\uagp35.sys
17:09:57.0323 5420        uagp35 - ok
17:09:57.0350 5420        udfs            (d47baead86c65d4f4069d7ce0a4edceb) C:\Windows\system32\DRIVERS\udfs.sys
17:09:57.0411 5420        udfs - ok
17:09:57.0447 5420        UI0Detect      (3cbdec8d06b9968aba702eba076364a1) C:\Windows\system32\UI0Detect.exe
17:09:57.0472 5420        UI0Detect - ok
17:09:57.0484 5420        uliagpkx        (4bfe1bc28391222894cbf1e7d0e42320) C:\Windows\system32\DRIVERS\uliagpkx.sys
17:09:57.0504 5420        uliagpkx - ok
17:09:57.0565 5420        umbus          (eab6c35e62b1b0db0d1b48b671d3a117) C:\Windows\system32\DRIVERS\umbus.sys
17:09:57.0623 5420        umbus - ok
17:09:57.0679 5420        UmPass          (b2e8e8cb557b156da5493bbddcc1474d) C:\Windows\system32\DRIVERS\umpass.sys
17:09:57.0729 5420        UmPass - ok
17:09:57.0779 5420        upnphost        (d47ec6a8e81633dd18d2436b19baf6de) C:\Windows\System32\upnphost.dll
17:09:57.0839 5420        upnphost - ok
17:09:57.0890 5420        usbaudio        (77b01bc848298223a95d4ec23e1785a1) C:\Windows\system32\drivers\usbaudio.sys
17:09:57.0936 5420        usbaudio - ok
17:09:57.0981 5420        usbccgp        (537a4e03d7103c12d42dfd8ffdb5bdc9) C:\Windows\system32\DRIVERS\usbccgp.sys
17:09:58.0055 5420        usbccgp - ok
17:09:58.0091 5420        usbcir          (af0892a803fdda7492f595368e3b68e7) C:\Windows\system32\DRIVERS\usbcir.sys
17:09:58.0144 5420        usbcir - ok
17:09:58.0175 5420        usbehci        (fbb21ebe49f6d560db37ac25fbc68e66) C:\Windows\system32\DRIVERS\usbehci.sys
17:09:58.0202 5420        usbehci - ok
17:09:58.0234 5420        usbhub          (6b7a8a99c4a459e73c286a6763ea24cc) C:\Windows\system32\DRIVERS\usbhub.sys
17:09:58.0273 5420        usbhub - ok
17:09:58.0311 5420        usbohci        (8c88aa7617b4cbc2e4bed61d26b33a27) C:\Windows\system32\drivers\usbohci.sys
17:09:58.0330 5420        usbohci - ok
17:09:58.0366 5420        usbprint        (73188f58fb384e75c4063d29413cee3d) C:\Windows\system32\DRIVERS\usbprint.sys
17:09:58.0388 5420        usbprint - ok
17:09:58.0435 5420        usbscan        (aaa2513c8aed8b54b189fd0c6b1634c0) C:\Windows\system32\DRIVERS\usbscan.sys
17:09:58.0469 5420        usbscan - ok
17:09:58.0503 5420        USBSTOR        (f39983647bc1f3e6100778ddfe9dce29) C:\Windows\system32\DRIVERS\USBSTOR.SYS
17:09:58.0585 5420        USBSTOR - ok
17:09:58.0614 5420        usbuhci        (0b5b3b2df3fd1709618acfa50b8392b0) C:\Windows\system32\DRIVERS\usbuhci.sys
17:09:58.0657 5420        usbuhci - ok
17:09:58.0719 5420        usbvideo        (7cb8c573c6e4a2714402cc0a36eab4fe) C:\Windows\System32\Drivers\usbvideo.sys
17:09:58.0816 5420        usbvideo - ok
17:09:58.0847 5420        UxSms          (edbb23cbcf2cdf727d64ff9b51a6070e) C:\Windows\System32\uxsms.dll
17:09:58.0900 5420        UxSms - ok
17:09:58.0942 5420        VaultSvc        (156f6159457d0aa7e59b62681b56eb90) C:\Windows\system32\lsass.exe
17:09:58.0967 5420        VaultSvc - ok
17:09:59.0030 5420        vdrvroot        (c5c876ccfc083ff3b128f933823e87bd) C:\Windows\system32\DRIVERS\vdrvroot.sys
17:09:59.0045 5420        vdrvroot - ok
17:09:59.0089 5420        vds            (44d73e0bbc1d3c8981304ba15135c2f2) C:\Windows\System32\vds.exe
17:09:59.0163 5420        vds - ok
17:09:59.0205 5420        vga            (da4da3f5e02943c2dc8c6ed875de68dd) C:\Windows\system32\DRIVERS\vgapnp.sys
17:09:59.0228 5420        vga - ok
17:09:59.0245 5420        VgaSave        (53e92a310193cb3c03bea963de7d9cfc) C:\Windows\System32\drivers\vga.sys
17:09:59.0309 5420        VgaSave - ok
17:09:59.0337 5420        vhdmp          (c82e748660f62a242b2dfac1442f22a4) C:\Windows\system32\DRIVERS\vhdmp.sys
17:09:59.0365 5420        vhdmp - ok
17:09:59.0375 5420        viaide          (e5689d93ffe4e5d66c0178761240dd54) C:\Windows\system32\DRIVERS\viaide.sys
17:09:59.0393 5420        viaide - ok
17:09:59.0410 5420        volmgr          (2b1a3dae2b4e70dbba822b7a03fbd4a3) C:\Windows\system32\DRIVERS\volmgr.sys
17:09:59.0427 5420        volmgr - ok
17:09:59.0459 5420        volmgrx        (99b0cbb569ca79acaed8c91461d765fb) C:\Windows\system32\drivers\volmgrx.sys
17:09:59.0491 5420        volmgrx - ok
17:09:59.0519 5420        volsnap        (58f82eed8ca24b461441f9c3e4f0bf5c) C:\Windows\system32\DRIVERS\volsnap.sys
17:09:59.0541 5420        volsnap - ok
17:09:59.0567 5420        vsmraid        (5e2016ea6ebaca03c04feac5f330d997) C:\Windows\system32\DRIVERS\vsmraid.sys
17:09:59.0590 5420        vsmraid - ok
17:09:59.0751 5420        VSS            (787898bf9fb6d7bd87a36e2d95c899ba) C:\Windows\system32\vssvc.exe
17:09:59.0855 5420        VSS - ok
17:09:59.0984 5420        vwifibus        (36d4720b72b5c5d9cb2b9c29e9df67a1) C:\Windows\system32\DRIVERS\vwifibus.sys
17:10:00.0017 5420        vwifibus - ok
17:10:00.0035 5420        vwififlt        (6a3d66263414ff0d6fa754c646612f3f) C:\Windows\system32\DRIVERS\vwififlt.sys
17:10:00.0062 5420        vwififlt - ok
17:10:00.0089 5420        vwifimp        (6a638fc4bfddc4d9b186c28c91bd1a01) C:\Windows\system32\DRIVERS\vwifimp.sys
17:10:00.0113 5420        vwifimp - ok
17:10:00.0164 5420        W32Time        (1c9d80cc3849b3788048078c26486e1a) C:\Windows\system32\w32time.dll
17:10:00.0234 5420        W32Time - ok
17:10:00.0262 5420        WacomPen        (4e9440f4f152a7b944cb1663d3935a3e) C:\Windows\system32\DRIVERS\wacompen.sys
17:10:00.0283 5420        WacomPen - ok
17:10:00.0320 5420        WANARP          (47ca49400643effd3f1c9a27e1d69324) C:\Windows\system32\DRIVERS\wanarp.sys
17:10:00.0387 5420        WANARP - ok
17:10:00.0392 5420        Wanarpv6        (47ca49400643effd3f1c9a27e1d69324) C:\Windows\system32\DRIVERS\wanarp.sys
17:10:00.0431 5420        Wanarpv6 - ok
17:10:00.0532 5420        wbengine        (5ab1bb85bd8b5089cc5d64200dedae68) C:\Windows\system32\wbengine.exe
17:10:00.0706 5420        wbengine - ok
17:10:00.0798 5420        WbioSrvc        (3aa101e8edab2db4131333f4325c76a3) C:\Windows\System32\wbiosrvc.dll
17:10:00.0854 5420        WbioSrvc - ok
17:10:00.0897 5420        wcncsvc        (dd1bae8ebfc653824d29ccf8c9054d68) C:\Windows\System32\wcncsvc.dll
17:10:00.0987 5420        wcncsvc - ok
17:10:01.0002 5420        WcsPlugInService (20f7441334b18cee52027661df4a6129) C:\Windows\System32\WcsPlugInService.dll
17:10:01.0107 5420        WcsPlugInService - ok
17:10:01.0175 5420        Wd              (72889e16ff12ba0f235467d6091b17dc) C:\Windows\system32\DRIVERS\wd.sys
17:10:01.0201 5420        Wd - ok
17:10:01.0242 5420        WDC_SAM        (a3d04ebf5227886029b4532f20d026f7) C:\Windows\system32\DRIVERS\wdcsam64.sys
17:10:01.0316 5420        WDC_SAM - ok
17:10:01.0380 5420        WDDMService    (334e5ed94d3faff3c44f4d36b1fe1c90) C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe
17:10:01.0393 5420        WDDMService ( UnsignedFile.Multi.Generic ) - warning
17:10:01.0393 5420        WDDMService - detected UnsignedFile.Multi.Generic (1)
17:10:01.0438 5420        Wdf01000        (441bd2d7b4f98134c3a4f9fa570fd250) C:\Windows\system32\drivers\Wdf01000.sys
17:10:01.0500 5420        Wdf01000 - ok
17:10:01.0538 5420        WdiServiceHost  (bf1fc3f79b863c914687a737c2f3d681) C:\Windows\system32\wdi.dll
17:10:01.0587 5420        WdiServiceHost - ok
17:10:01.0591 5420        WdiSystemHost  (bf1fc3f79b863c914687a737c2f3d681) C:\Windows\system32\wdi.dll
17:10:01.0615 5420        WdiSystemHost - ok
17:10:01.0715 5420        WDSmartWareBackgroundService (138ab06adbbf300aa804d7974a5aec82) C:\Program Files (x86)\Western Digital\WD SmartWare\Front Parlor\WDSmartWareBackgroundService.exe
17:10:01.0748 5420        WDSmartWareBackgroundService ( UnsignedFile.Multi.Generic ) - warning
17:10:01.0748 5420        WDSmartWareBackgroundService - detected UnsignedFile.Multi.Generic (1)
17:10:01.0802 5420        WebClient      (733006127f235be7c35354ebee7b9a7b) C:\Windows\System32\webclnt.dll
17:10:01.0910 5420        WebClient - ok
17:10:01.0950 5420        Wecsvc          (c749025a679c5103e575e3b48e092c43) C:\Windows\system32\wecsvc.dll
17:10:02.0024 5420        Wecsvc - ok
17:10:02.0055 5420        wercplsupport  (7e591867422dc788b9e5bd337a669a08) C:\Windows\System32\wercplsupport.dll
17:10:02.0110 5420        wercplsupport - ok
17:10:02.0146 5420        WerSvc          (6d137963730144698cbd10f202e9f251) C:\Windows\System32\WerSvc.dll
17:10:02.0202 5420        WerSvc - ok
17:10:02.0276 5420        WfpLwf          (611b23304bf067451a9fdee01fbdd725) C:\Windows\system32\DRIVERS\wfplwf.sys
17:10:02.0335 5420        WfpLwf - ok
17:10:02.0350 5420        WIMMount        (05ecaec3e4529a7153b3136ceb49f0ec) C:\Windows\system32\drivers\wimmount.sys
17:10:02.0371 5420        WIMMount - ok
17:10:02.0406 5420        WinDefend - ok
17:10:02.0419 5420        WinHttpAutoProxySvc - ok
17:10:02.0473 5420        Winmgmt        (19b07e7e8915d701225da41cb3877306) C:\Windows\system32\wbem\WMIsvc.dll
17:10:02.0547 5420        Winmgmt - ok
17:10:02.0687 5420        WinRM          (41fbb751936b387f9179e7f03a74fe29) C:\Windows\system32\WsmSvc.dll
17:10:02.0843 5420        WinRM - ok
17:10:02.0990 5420        WinUsb          (817eaff5d38674edd7713b9dfb8e9791) C:\Windows\system32\DRIVERS\WinUsb.sys
17:10:03.0050 5420        WinUsb - ok
17:10:03.0136 5420        Wlansvc        (4fada86e62f18a1b2f42ba18ae24e6aa) C:\Windows\System32\wlansvc.dll
17:10:03.0255 5420        Wlansvc - ok
17:10:03.0305 5420        WmiAcpi        (f6ff8944478594d0e414d3f048f0d778) C:\Windows\system32\DRIVERS\wmiacpi.sys
17:10:03.0378 5420        WmiAcpi - ok
17:10:03.0435 5420        wmiApSrv        (38b84c94c5a8af291adfea478ae54f93) C:\Windows\system32\wbem\WmiApSrv.exe
17:10:03.0498 5420        wmiApSrv - ok
17:10:03.0583 5420        WMPNetworkSvc - ok
17:10:03.0616 5420        WPCSvc          (96c6e7100d724c69fcf9e7bf590d1dca) C:\Windows\System32\wpcsvc.dll
17:10:03.0655 5420        WPCSvc - ok
17:10:03.0680 5420        WPDBusEnum      (2e57ddf2880a7e52e76f41c7e96d327b) C:\Windows\system32\wpdbusenum.dll
17:10:03.0761 5420        WPDBusEnum - ok
17:10:03.0789 5420        ws2ifsl        (6bcc1d7d2fd2453957c5479a32364e52) C:\Windows\system32\drivers\ws2ifsl.sys
17:10:03.0847 5420        ws2ifsl - ok
17:10:03.0890 5420        wscsvc          (8f9f3969933c02da96eb0f84576db43e) C:\Windows\system32\wscsvc.dll
17:10:03.0977 5420        wscsvc - ok
17:10:03.0983 5420        WSearch - ok
17:10:04.0114 5420        wuauserv        (38340204a2d0228f1e87740fc5e554a7) C:\Windows\system32\wuaueng.dll
17:10:04.0246 5420        wuauserv - ok
17:10:04.0363 5420        WudfPf          (7cadc74271dd6461c452c271b30bd378) C:\Windows\system32\drivers\WudfPf.sys
17:10:04.0431 5420        WudfPf - ok
17:10:04.0467 5420        WUDFRd          (3b197af0fff08aa66b6b2241ca538d64) C:\Windows\system32\DRIVERS\WUDFRd.sys
17:10:04.0516 5420        WUDFRd - ok
17:10:04.0547 5420        wudfsvc        (b551d6637aa0e132c18ac6e504f7b79b) C:\Windows\System32\WUDFSvc.dll
17:10:04.0614 5420        wudfsvc - ok
17:10:04.0648 5420        WwanSvc        (9a3452b3c2a46c073166c5cf49fad1ae) C:\Windows\System32\wwansvc.dll
17:10:04.0690 5420        WwanSvc - ok
17:10:04.0746 5420        MBR (0x1B8)    (b8f75e6fc7a0ba4c7d9a865725b971a7) \Device\Harddisk0\DR0
17:10:05.0218 5420        \Device\Harddisk0\DR0 - ok
17:10:05.0255 5420        Boot (0x1200)  (ab9c2b2329c3fd8e646591176aa0801d) \Device\Harddisk0\DR0\Partition0
17:10:05.0258 5420        \Device\Harddisk0\DR0\Partition0 - ok
17:10:05.0274 5420        Boot (0x1200)  (02b4f85cc96ba73c9d6582c9edf3d0be) \Device\Harddisk0\DR0\Partition1
17:10:05.0277 5420        \Device\Harddisk0\DR0\Partition1 - ok
17:10:05.0317 5420        Boot (0x1200)  (ef58a7c235f888692ee0a1b1943e9998) \Device\Harddisk0\DR0\Partition2
17:10:05.0319 5420        \Device\Harddisk0\DR0\Partition2 - ok
17:10:05.0319 5420        ============================================================
17:10:05.0319 5420        Scan finished
17:10:05.0319 5420        ============================================================
17:10:05.0333 5424        Detected object count: 8
17:10:05.0333 5424        Actual detected object count: 8
17:10:29.0866 5424        CTDevice_Srv ( UnsignedFile.Multi.Generic ) - skipped by user
17:10:29.0866 5424        CTDevice_Srv ( UnsignedFile.Multi.Generic ) - User select action: Skip
17:10:29.0867 5424        IDriverT ( UnsignedFile.Multi.Generic ) - skipped by user
17:10:29.0868 5424        IDriverT ( UnsignedFile.Multi.Generic ) - User select action: Skip
17:10:29.0869 5424        OMSI download service ( UnsignedFile.Multi.Generic ) - skipped by user
17:10:29.0869 5424        OMSI download service ( UnsignedFile.Multi.Generic ) - User select action: Skip
17:10:29.0875 5424        SUService ( UnsignedFile.Multi.Generic ) - skipped by user
17:10:29.0875 5424        SUService ( UnsignedFile.Multi.Generic ) - User select action: Skip
17:10:29.0878 5424        ThinkVantage Registry Monitor Service ( UnsignedFile.Multi.Generic ) - skipped by user
17:10:29.0878 5424        ThinkVantage Registry Monitor Service ( UnsignedFile.Multi.Generic ) - User select action: Skip
17:10:29.0881 5424        TVT Backup Service ( UnsignedFile.Multi.Generic ) - skipped by user
17:10:29.0881 5424        TVT Backup Service ( UnsignedFile.Multi.Generic ) - User select action: Skip
17:10:29.0884 5424        WDDMService ( UnsignedFile.Multi.Generic ) - skipped by user
17:10:29.0884 5424        WDDMService ( UnsignedFile.Multi.Generic ) - User select action: Skip
17:10:29.0890 5424        WDSmartWareBackgroundService ( UnsignedFile.Multi.Generic ) - skipped by user
17:10:29.0890 5424        WDSmartWareBackgroundService ( UnsignedFile.Multi.Generic ) - User select action: Skip
17:11:29.0600 4808        ============================================================
17:11:29.0600 4808        Scan started
17:11:29.0600 4808        Mode: Manual; SigCheck; TDLFS;
17:11:29.0600 4808        ============================================================
17:11:29.0804 4808        1394ohci        (1b00662092f9f9568b995902f0cc40d5) C:\Windows\system32\DRIVERS\1394ohci.sys
17:11:29.0829 4808        1394ohci - ok
17:11:29.0873 4808        5U877          (7d497701bda1267ad5f86350925d2f10) C:\Windows\system32\DRIVERS\5U877.sys
17:11:29.0888 4808        5U877 - ok
17:11:29.0923 4808        ACPI            (794ff35015209b9d44f1360c42c9776d) C:\Windows\system32\DRIVERS\ACPI.sys
17:11:29.0942 4808        ACPI - ok
17:11:29.0966 4808        AcpiPmi        (63b05a0420ce4bf0e4af6dcc7cada254) C:\Windows\system32\DRIVERS\acpipmi.sys
17:11:29.0983 4808        AcpiPmi - ok
17:11:30.0103 4808        AcPrfMgrSvc    (d2821d87e5a61fd9ef697c795b531feb) C:\Program Files (x86)\Lenovo\Access Connections\AcPrfMgrSvc.exe
17:11:30.0126 4808        AcPrfMgrSvc - ok
17:11:30.0177 4808        AcSvc          (4aa273e9400ccee2546ae00fd837dd17) C:\Program Files (x86)\Lenovo\Access Connections\AcSvc.exe
17:11:30.0190 4808        AcSvc - ok
17:11:30.0223 4808        ACTIVhidmini    (b3d08f1ccbcb60cc549f693f1444d208) C:\Windows\system32\DRIVERS\ACTIVhidmini.sys
17:11:30.0247 4808        ACTIVhidmini - ok
17:11:30.0287 4808        adp94xx        (2f6b34b83843f0c5118b63ac634f5bf4) C:\Windows\system32\DRIVERS\adp94xx.sys
17:11:30.0308 4808        adp94xx - ok
17:11:30.0357 4808        adpahci        (597f78224ee9224ea1a13d6350ced962) C:\Windows\system32\DRIVERS\adpahci.sys
17:11:30.0375 4808        adpahci - ok
17:11:30.0402 4808        adpu320        (e109549c90f62fb570b9540c4b148e54) C:\Windows\system32\DRIVERS\adpu320.sys
17:11:30.0418 4808        adpu320 - ok
17:11:30.0450 4808        AeLookupSvc    (4b78b431f225fd8624c5655cb1de7b61) C:\Windows\System32\aelupsvc.dll
17:11:30.0488 4808        AeLookupSvc - ok
17:11:30.0543 4808        AFD            (db9d6c6b2cd95a9ca414d045b627422e) C:\Windows\system32\drivers\afd.sys
17:11:30.0563 4808        AFD - ok
17:11:30.0593 4808        agp440          (608c14dba7299d8cb6ed035a68a15799) C:\Windows\system32\DRIVERS\agp440.sys
17:11:30.0608 4808        agp440 - ok
17:11:30.0632 4808        ALG            (3290d6946b5e30e70414990574883ddb) C:\Windows\System32\alg.exe
17:11:30.0648 4808        ALG - ok
17:11:30.0662 4808        aliide          (5812713a477a3ad7363c7438ca2ee038) C:\Windows\system32\DRIVERS\aliide.sys
17:11:30.0675 4808        aliide - ok
17:11:30.0686 4808        amdide          (1ff8b4431c353ce385c875f194924c0c) C:\Windows\system32\DRIVERS\amdide.sys
17:11:30.0700 4808        amdide - ok
17:11:30.0721 4808        AmdK8          (7024f087cff1833a806193ef9d22cda9) C:\Windows\system32\DRIVERS\amdk8.sys
17:11:30.0736 4808        AmdK8 - ok
17:11:30.0753 4808        AmdPPM          (1e56388b3fe0d031c44144eb8c4d6217) C:\Windows\system32\DRIVERS\amdppm.sys
17:11:30.0768 4808        AmdPPM - ok
17:11:30.0801 4808        amdsata        (ec7ebab00a4d8448bab68d1e49b4beb9) C:\Windows\system32\drivers\amdsata.sys
17:11:30.0816 4808        amdsata - ok
17:11:30.0836 4808        amdsbs          (f67f933e79241ed32ff46a4f29b5120b) C:\Windows\system32\DRIVERS\amdsbs.sys
17:11:30.0853 4808        amdsbs - ok
17:11:30.0874 4808        amdxata        (db27766102c7bf7e95140a2aa81d042e) C:\Windows\system32\drivers\amdxata.sys
17:11:30.0887 4808        amdxata - ok
17:11:30.0992 4808        AntiVirSchedulerService (466a0d95960dad3222c896d2cea99993) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
17:11:31.0012 4808        AntiVirSchedulerService - ok
17:11:31.0029 4808        AntiVirService  (a489be6bb0aa1ff406b488b60542314b) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
17:11:31.0047 4808        AntiVirService - ok
17:11:31.0082 4808        AppID          (42fd751b27fa0e9c69bb39f39e409594) C:\Windows\system32\drivers\appid.sys
17:11:31.0101 4808        AppID - ok
17:11:31.0129 4808        AppIDSvc        (0bc381a15355a3982216f7172f545de1) C:\Windows\System32\appidsvc.dll
17:11:31.0167 4808        AppIDSvc - ok
17:11:31.0207 4808        Appinfo        (d065be66822847b7f127d1f90158376e) C:\Windows\System32\appinfo.dll
17:11:31.0233 4808        Appinfo - ok
17:11:31.0273 4808        Apple Mobile Device (70d7be78061126dd0c3accdb7e129017) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
17:11:31.0295 4808        Apple Mobile Device - ok
17:11:31.0323 4808        arc            (c484f8ceb1717c540242531db7845c4e) C:\Windows\system32\DRIVERS\arc.sys
17:11:31.0337 4808        arc - ok
17:11:31.0359 4808        arcsas          (019af6924aefe7839f61c830227fe79c) C:\Windows\system32\DRIVERS\arcsas.sys
17:11:31.0374 4808        arcsas - ok
17:11:31.0405 4808        AsyncMac        (769765ce2cc62867468cea93969b2242) C:\Windows\system32\DRIVERS\asyncmac.sys
17:11:31.0442 4808        AsyncMac - ok
17:11:31.0462 4808        atapi          (02062c0b390b7729edc9e69c680a6f3c) C:\Windows\system32\DRIVERS\atapi.sys
17:11:31.0477 4808        atapi - ok
17:11:31.0524 4808        AudioEndpointBuilder (07721a77180edd4d39ccb865bf63c7fd) C:\Windows\System32\Audiosrv.dll
17:11:31.0568 4808        AudioEndpointBuilder - ok
17:11:31.0570 4808        Scan interrupted by user!
17:11:31.0570 4808        Scan interrupted by user!
17:11:31.0570 4808        Scan interrupted by user!
17:11:31.0570 4808        ============================================================
17:11:31.0570 4808        Scan finished
17:11:31.0570 4808        ============================================================
17:11:31.0581 5604        Detected object count: 0
17:11:31.0581 5604        Actual detected object count: 0
17:11:35.0207 2312        ============================================================
17:11:35.0207 2312        Scan started
17:11:35.0207 2312        Mode: Manual; SigCheck; TDLFS;
17:11:35.0207 2312        ============================================================
17:11:35.0407 2312        1394ohci        (1b00662092f9f9568b995902f0cc40d5) C:\Windows\system32\DRIVERS\1394ohci.sys
17:11:35.0425 2312        1394ohci - ok
17:11:35.0454 2312        5U877          (7d497701bda1267ad5f86350925d2f10) C:\Windows\system32\DRIVERS\5U877.sys
17:11:35.0468 2312        5U877 - ok
17:11:35.0503 2312        ACPI            (794ff35015209b9d44f1360c42c9776d) C:\Windows\system32\DRIVERS\ACPI.sys
17:11:35.0522 2312        ACPI - ok
17:11:35.0547 2312        AcpiPmi        (63b05a0420ce4bf0e4af6dcc7cada254) C:\Windows\system32\DRIVERS\acpipmi.sys
17:11:35.0563 2312        AcpiPmi - ok
17:11:35.0682 2312        AcPrfMgrSvc    (d2821d87e5a61fd9ef697c795b531feb) C:\Program Files (x86)\Lenovo\Access Connections\AcPrfMgrSvc.exe
17:11:35.0709 2312        AcPrfMgrSvc - ok
17:11:35.0757 2312        AcSvc          (4aa273e9400ccee2546ae00fd837dd17) C:\Program Files (x86)\Lenovo\Access Connections\AcSvc.exe
17:11:35.0770 2312        AcSvc - ok
17:11:35.0803 2312        ACTIVhidmini    (b3d08f1ccbcb60cc549f693f1444d208) C:\Windows\system32\DRIVERS\ACTIVhidmini.sys
17:11:35.0817 2312        ACTIVhidmini - ok
17:11:35.0860 2312        adp94xx        (2f6b34b83843f0c5118b63ac634f5bf4) C:\Windows\system32\DRIVERS\adp94xx.sys
17:11:35.0880 2312        adp94xx - ok
17:11:35.0941 2312        adpahci        (597f78224ee9224ea1a13d6350ced962) C:\Windows\system32\DRIVERS\adpahci.sys
17:11:35.0960 2312        adpahci - ok
17:11:36.0016 2312        adpu320        (e109549c90f62fb570b9540c4b148e54) C:\Windows\system32\DRIVERS\adpu320.sys
17:11:36.0042 2312        adpu320 - ok
17:11:36.0063 2312        AeLookupSvc    (4b78b431f225fd8624c5655cb1de7b61) C:\Windows\System32\aelupsvc.dll
17:11:36.0101 2312        AeLookupSvc - ok
17:11:36.0157 2312        AFD            (db9d6c6b2cd95a9ca414d045b627422e) C:\Windows\system32\drivers\afd.sys
17:11:36.0176 2312        AFD - ok
17:11:36.0206 2312        agp440          (608c14dba7299d8cb6ed035a68a15799) C:\Windows\system32\DRIVERS\agp440.sys
17:11:36.0221 2312        agp440 - ok
17:11:36.0245 2312        ALG            (3290d6946b5e30e70414990574883ddb) C:\Windows\System32\alg.exe
17:11:36.0261 2312        ALG - ok
17:11:36.0275 2312        aliide          (5812713a477a3ad7363c7438ca2ee038) C:\Windows\system32\DRIVERS\aliide.sys
17:11:36.0288 2312        aliide - ok
17:11:36.0299 2312        amdide          (1ff8b4431c353ce385c875f194924c0c) C:\Windows\system32\DRIVERS\amdide.sys
17:11:36.0312 2312        amdide - ok
17:11:36.0334 2312        AmdK8          (7024f087cff1833a806193ef9d22cda9) C:\Windows\system32\DRIVERS\amdk8.sys
17:11:36.0349 2312        AmdK8 - ok
17:11:36.0367 2312        AmdPPM          (1e56388b3fe0d031c44144eb8c4d6217) C:\Windows\system32\DRIVERS\amdppm.sys
17:11:36.0382 2312        AmdPPM - ok
17:11:36.0414 2312        amdsata        (ec7ebab00a4d8448bab68d1e49b4beb9) C:\Windows\system32\drivers\amdsata.sys
17:11:36.0429 2312        amdsata - ok
17:11:36.0450 2312        amdsbs          (f67f933e79241ed32ff46a4f29b5120b) C:\Windows\system32\DRIVERS\amdsbs.sys
17:11:36.0468 2312        amdsbs - ok
17:11:36.0487 2312        amdxata        (db27766102c7bf7e95140a2aa81d042e) C:\Windows\system32\drivers\amdxata.sys
17:11:36.0500 2312        amdxata - ok
17:11:36.0605 2312        AntiVirSchedulerService (466a0d95960dad3222c896d2cea99993) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
17:11:36.0627 2312        AntiVirSchedulerService - ok
17:11:36.0643 2312        AntiVirService  (a489be6bb0aa1ff406b488b60542314b) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
17:11:36.0655 2312        AntiVirService - ok
17:11:36.0684 2312        AppID          (42fd751b27fa0e9c69bb39f39e409594) C:\Windows\system32\drivers\appid.sys
17:11:36.0704 2312        AppID - ok
17:11:36.0731 2312        AppIDSvc        (0bc381a15355a3982216f7172f545de1) C:\Windows\System32\appidsvc.dll
17:11:36.0769 2312        AppIDSvc - ok
17:11:36.0788 2312        Appinfo        (d065be66822847b7f127d1f90158376e) C:\Windows\System32\appinfo.dll
17:11:36.0803 2312        Appinfo - ok
17:11:36.0852 2312        Apple Mobile Device (70d7be78061126dd0c3accdb7e129017) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
17:11:36.0864 2312        Apple Mobile Device - ok
17:11:36.0892 2312        arc            (c484f8ceb1717c540242531db7845c4e) C:\Windows\system32\DRIVERS\arc.sys
17:11:36.0906 2312        arc - ok
17:11:36.0928 2312        arcsas          (019af6924aefe7839f61c830227fe79c) C:\Windows\system32\DRIVERS\arcsas.sys
17:11:36.0942 2312        arcsas - ok
17:11:36.0975 2312        AsyncMac        (769765ce2cc62867468cea93969b2242) C:\Windows\system32\DRIVERS\asyncmac.sys
17:11:37.0011 2312        AsyncMac - ok
17:11:37.0032 2312        atapi          (02062c0b390b7729edc9e69c680a6f3c) C:\Windows\system32\DRIVERS\atapi.sys
17:11:37.0045 2312        atapi - ok
17:11:37.0093 2312        AudioEndpointBuilder (07721a77180edd4d39ccb865bf63c7fd) C:\Windows\System32\Audiosrv.dll
17:11:37.0136 2312        AudioEndpointBuilder - ok
17:11:37.0147 2312        AudioSrv        (07721a77180edd4d39ccb865bf63c7fd) C:\Windows\System32\Audiosrv.dll
17:11:37.0192 2312        AudioSrv - ok
17:11:37.0218 2312        avgntflt        (26e38b5a58c6c55fafbc563eeddb0867) C:\Windows\system32\DRIVERS\avgntflt.sys
17:11:37.0232 2312        avgntflt - ok
17:11:37.0252 2312        avipbb          (9d1f00beff84cbbf46d7f052bc7e0565) C:\Windows\system32\DRIVERS\avipbb.sys
17:11:37.0265 2312        avipbb - ok
17:11:37.0276 2312        avkmgr          (248db59fc86de44d2779f4c7fb1a567d) C:\Windows\system32\DRIVERS\avkmgr.sys
17:11:37.0288 2312        avkmgr - ok
17:11:37.0308 2312        AxInstSV        (b20b5fa5ca050e9926e4d1db81501b32) C:\Windows\System32\AxInstSV.dll
17:11:37.0329 2312        AxInstSV - ok
17:11:37.0376 2312        b06bdrv        (3e5b191307609f7514148c6832bb0842) C:\Windows\system32\DRIVERS\bxvbda.sys
17:11:37.0409 2312        b06bdrv - ok
17:11:37.0448 2312        b57nd60a        (b5ace6968304a3900eeb1ebfd9622df2) C:\Windows\system32\DRIVERS\b57nd60a.sys
17:11:37.0466 2312        b57nd60a - ok
17:11:37.0499 2312        BDESVC          (fde360167101b4e45a96f939f388aeb0) C:\Windows\System32\bdesvc.dll
17:11:37.0514 2312        BDESVC - ok
17:11:37.0526 2312        Beep            (16a47ce2decc9b099349a5f840654746) C:\Windows\system32\drivers\Beep.sys
17:11:37.0566 2312        Beep - ok
17:11:37.0608 2312        BFE            (4992c609a6315671463e30f6512bc022) C:\Windows\System32\bfe.dll
17:11:37.0652 2312        BFE - ok
17:11:37.0718 2312        BITS            (7f0c323fe3da28aa4aa1bda3f575707f) C:\Windows\System32\qmgr.dll
17:11:37.0786 2312        BITS - ok
17:11:37.0855 2312        blbdrive        (61583ee3c3a17003c4acd0475646b4d3) C:\Windows\system32\DRIVERS\blbdrive.sys
17:11:37.0876 2312        blbdrive - ok
17:11:37.0984 2312        Bonjour Service (673cf4f6bb1fbe09331b526802fbb892) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
17:11:38.0004 2312        Bonjour Service - ok
17:11:38.0042 2312        bowser          (19d20159708e152267e53b66677a4995) C:\Windows\system32\DRIVERS\bowser.sys
17:11:38.0070 2312        bowser - ok
17:11:38.0093 2312        BrFiltLo        (f09eee9edc320b5e1501f749fde686c8) C:\Windows\system32\DRIVERS\BrFiltLo.sys
17:11:38.0111 2312        BrFiltLo - ok
17:11:38.0130 2312        BrFiltUp        (b114d3098e9bdb8bea8b053685831be6) C:\Windows\system32\DRIVERS\BrFiltUp.sys
17:11:38.0148 2312        BrFiltUp - ok
17:11:38.0166 2312        BridgeMP        (5c2f352a4e961d72518261257aae204b) C:\Windows\system32\DRIVERS\bridge.sys
17:11:38.0204 2312        BridgeMP - ok
17:11:38.0238 2312        Browser        (94fbc06f294d58d02361918418f996e3) C:\Windows\System32\browser.dll
17:11:38.0277 2312        Browser - ok
17:11:38.0305 2312        Brserid        (43bea8d483bf1870f018e2d02e06a5bd) C:\Windows\System32\Drivers\Brserid.sys
17:11:38.0323 2312        Brserid - ok
17:11:38.0345 2312        BrSerWdm        (a6eca2151b08a09caceca35c07f05b42) C:\Windows\System32\Drivers\BrSerWdm.sys
17:11:38.0362 2312        BrSerWdm - ok
17:11:38.0375 2312        BrUsbMdm        (b79968002c277e869cf38bd22cd61524) C:\Windows\System32\Drivers\BrUsbMdm.sys
17:11:38.0394 2312        BrUsbMdm - ok
17:11:38.0405 2312        BrUsbSer        (a87528880231c54e75ea7a44943b38bf) C:\Windows\System32\Drivers\BrUsbSer.sys
17:11:38.0421 2312        BrUsbSer - ok
17:11:38.0456 2312        BthEnum        (cf98190a94f62e405c8cb255018b2315) C:\Windows\system32\drivers\BthEnum.sys
17:11:38.0481 2312        BthEnum - ok
17:11:38.0499 2312        BTHMODEM        (9da669f11d1f894ab4eb69bf546a42e8) C:\Windows\system32\DRIVERS\bthmodem.sys
17:11:38.0516 2312        BTHMODEM - ok
17:11:38.0538 2312        BthPan          (02dd601b708dd0667e1331fa8518e9ff) C:\Windows\system32\DRIVERS\bthpan.sys
17:11:38.0556 2312        BthPan - ok
17:11:38.0621 2312        BTHPORT        (21084ceb85280468c9aca3c805c0f8cf) C:\Windows\System32\Drivers\BTHport.sys
17:11:38.0641 2312        BTHPORT - ok
17:11:38.0666 2312        bthserv        (95f9c2976059462cbbf227f7aab10de9) C:\Windows\system32\bthserv.dll
17:11:38.0705 2312        bthserv - ok
17:11:38.0742 2312        BTHUSB          (8504842634dd144c075b6b0c982ccec4) C:\Windows\System32\Drivers\BTHUSB.sys
17:11:38.0762 2312        BTHUSB - ok
17:11:38.0799 2312        btwaudio        (6bcfdc2b5b7f66d484486d4bd4b39a6b) C:\Windows\system32\drivers\btwaudio.sys
17:11:38.0811 2312        btwaudio - ok
17:11:38.0846 2312        btwavdt        (82dc8b7c626e526681c1bebed2bc3ff9) C:\Windows\system32\DRIVERS\btwavdt.sys
17:11:38.0859 2312        btwavdt - ok
17:11:38.0951 2312        btwdins        (d65aa164acd0f6706dbcfbbcc9731584) C:\Program Files\ThinkPad\Bluetooth Software\btwdins.exe
17:11:39.0006 2312        btwdins - ok
17:11:39.0031 2312        btwl2cap        (6149301dc3f81d6f9667a3fbac410975) C:\Windows\system32\DRIVERS\btwl2cap.sys
17:11:39.0040 2312        btwl2cap - ok
17:11:39.0058 2312        btwrchid        (28e105ad3b79f440bf94780f507bf66a) C:\Windows\system32\DRIVERS\btwrchid.sys
17:11:39.0068 2312        btwrchid - ok
17:11:39.0099 2312        cdfs            (b8bd2bb284668c84865658c77574381a) C:\Windows\system32\DRIVERS\cdfs.sys
17:11:39.0138 2312        cdfs - ok
17:11:39.0159 2312        cdrom          (83d2d75e1efb81b3450c18131443f7db) C:\Windows\system32\DRIVERS\cdrom.sys
17:11:39.0176 2312        cdrom - ok
17:11:39.0211 2312        CertPropSvc    (312e2f82af11e79906898ac3e3d58a1f) C:\Windows\System32\certprop.dll
17:11:39.0251 2312        CertPropSvc - ok
17:11:39.0285 2312        circlass        (d7cd5c4e1b71fa62050515314cfb52cf) C:\Windows\system32\DRIVERS\circlass.sys
17:11:39.0302 2312        circlass - ok
17:11:39.0331 2312        CLFS            (fe1ec06f2253f691fe36217c592a0206) C:\Windows\system32\CLFS.sys
17:11:39.0359 2312        CLFS - ok
17:11:39.0437 2312        clr_optimization_v2.0.50727_32 (d88040f816fda31c3b466f0fa0918f29) C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
17:11:39.0459 2312        clr_optimization_v2.0.50727_32 - ok
17:11:39.0498 2312        clr_optimization_v2.0.50727_64 (d1ceea2b47cb998321c579651ce3e4f8) C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
17:11:39.0511 2312        clr_optimization_v2.0.50727_64 - ok
17:11:39.0564 2312        clr_optimization_v4.0.30319_32 (c5a75eb48e2344abdc162bda79e16841) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
17:11:39.0586 2312        clr_optimization_v4.0.30319_32 - ok
17:11:39.0617 2312        clr_optimization_v4.0.30319_64 (c6f9af94dcd58122a4d7e89db6bed29d) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
17:11:39.0633 2312        clr_optimization_v4.0.30319_64 - ok
17:11:39.0661 2312        CmBatt          (0840155d0bddf1190f84a663c284bd33) C:\Windows\system32\DRIVERS\CmBatt.sys
17:11:39.0678 2312        CmBatt - ok
17:11:39.0694 2312        cmdide          (e19d3f095812725d88f9001985b94edd) C:\Windows\system32\DRIVERS\cmdide.sys
17:11:39.0709 2312        cmdide - ok
17:11:39.0768 2312        CNG            (937beb186a735aca91d717044a49d17e) C:\Windows\system32\Drivers\cng.sys
17:11:39.0809 2312        CNG - ok
17:11:39.0827 2312        Compbatt        (102de219c3f61415f964c88e9085ad14) C:\Windows\system32\DRIVERS\compbatt.sys
17:11:39.0842 2312        Compbatt - ok
17:11:39.0855 2312        CompositeBus    (f26b3a86f6fa87ca360b879581ab4123) C:\Windows\system32\DRIVERS\CompositeBus.sys
17:11:39.0872 2312        CompositeBus - ok
17:11:39.0879 2312        COMSysApp - ok
17:11:39.0899 2312        crcdisk        (1c827878a998c18847245fe1f34ee597) C:\Windows\system32\DRIVERS\crcdisk.sys
17:11:39.0912 2312        crcdisk - ok
17:11:39.0956 2312        CryptSvc        (f02786b66375292e58c8777082d4396d) C:\Windows\system32\cryptsvc.dll
17:11:39.0977 2312        CryptSvc - ok
17:11:40.0073 2312        CTDevice_Srv    (a5bea0e5c297f5f3835638a87e512fba) C:\Program Files (x86)\Creative\Shared Files\CTDevSrv.exe
17:11:40.0081 2312        CTDevice_Srv ( UnsignedFile.Multi.Generic ) - warning
17:11:40.0081 2312        CTDevice_Srv - detected UnsignedFile.Multi.Generic (1)
17:11:40.0136 2312        DcomLaunch      (7266972e86890e2b30c0c322e906b027) C:\Windows\system32\rpcss.dll
17:11:40.0191 2312        DcomLaunch - ok
17:11:40.0230 2312        defragsvc      (3cec7631a84943677aa8fa8ee5b6b43d) C:\Windows\System32\defragsvc.dll
17:11:40.0273 2312        defragsvc - ok
17:11:40.0304 2312        DfsC            (9c253ce7311ca60fc11c774692a13208) C:\Windows\system32\Drivers\dfsc.sys
17:11:40.0330 2312        DfsC - ok
17:11:40.0357 2312        Dhcp            (ce3b9562d997f69b330d181a8875960f) C:\Windows\system32\dhcpcore.dll
17:11:40.0379 2312        Dhcp - ok
17:11:40.0411 2312        discache        (13096b05847ec78f0977f2c0f79e9ab3) C:\Windows\system32\drivers\discache.sys
17:11:40.0450 2312        discache - ok
17:11:40.0463 2312        Disk            (9819eee8b5ea3784ec4af3b137a5244c) C:\Windows\system32\DRIVERS\disk.sys
17:11:40.0481 2312        Disk - ok
17:11:40.0523 2312        Dnscache        (85cf424c74a1d5ec33533e1dbff9920a) C:\Windows\System32\dnsrslvr.dll
17:11:40.0538 2312        Dnscache - ok
17:11:40.0581 2312        dot3svc        (14452acdb09b70964c8c21bf80a13acb) C:\Windows\System32\dot3svc.dll
17:11:40.0621 2312        dot3svc - ok
17:11:40.0645 2312        DPS            (8c2ba6bea949ee6e68385f5692bafb94) C:\Windows\system32\dps.dll
17:11:40.0686 2312        DPS - ok
17:11:40.0704 2312        drmkaud        (9b19f34400d24df84c858a421c205754) C:\Windows\system32\drivers\drmkaud.sys
17:11:40.0723 2312        drmkaud - ok
17:11:40.0802 2312        DXGKrnl        (1633b9abf52784a1331476397a48cbef) C:\Windows\System32\drivers\dxgkrnl.sys
17:11:40.0833 2312        DXGKrnl - ok
17:11:40.0850 2312        EapHost        (e2dda8726da9cb5b2c4000c9018a9633) C:\Windows\System32\eapsvc.dll
17:11:40.0889 2312        EapHost - ok
17:11:41.0065 2312        ebdrv          (dc5d737f51be844d8c82c695eb17372f) C:\Windows\system32\DRIVERS\evbda.sys
17:11:41.0121 2312        ebdrv - ok
17:11:41.0233 2312        EFS            (156f6159457d0aa7e59b62681b56eb90) C:\Windows\System32\lsass.exe
17:11:41.0249 2312        EFS - ok
17:11:41.0328 2312        ehRecvr        (47c071994c3f649f23d9cd075ac9304a) C:\Windows\ehome\ehRecvr.exe
17:11:41.0358 2312        ehRecvr - ok
17:11:41.0384 2312        ehSched        (4705e8ef9934482c5bb488ce28afc681) C:\Windows\ehome\ehsched.exe
17:11:41.0400 2312        ehSched - ok
17:11:41.0479 2312        elxstor        (0e5da5369a0fcaea12456dd852545184) C:\Windows\system32\DRIVERS\elxstor.sys
17:11:41.0500 2312        elxstor - ok
17:11:41.0517 2312        ErrDev          (34a3c54752046e79a126e15c51db409b) C:\Windows\system32\DRIVERS\errdev.sys
17:11:41.0547 2312        ErrDev - ok
17:11:41.0605 2312        EventSystem    (4166f82be4d24938977dd1746be9b8a0) C:\Windows\system32\es.dll
17:11:41.0662 2312        EventSystem - ok
17:11:41.0785 2312        EvtEng          (bdf87981c5fea94fd259f110fb8b1a72) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
17:11:41.0846 2312        EvtEng - ok
17:11:41.0962 2312        exfat          (a510c654ec00c1e9bdd91eeb3a59823b) C:\Windows\system32\drivers\exfat.sys
17:11:42.0023 2312        exfat - ok
17:11:42.0050 2312        fastfat        (0adc83218b66a6db380c330836f3e36d) C:\Windows\system32\drivers\fastfat.sys
17:11:42.0088 2312        fastfat - ok
17:11:42.0137 2312        Fax            (d607b2f1bee3992aa6c2c92c0a2f0855) C:\Windows\system32\fxssvc.exe
17:11:42.0159 2312        Fax - ok
17:11:42.0173 2312        fdc            (d765d19cd8ef61f650c384f62fac00ab) C:\Windows\system32\DRIVERS\fdc.sys
17:11:42.0188 2312        fdc - ok
17:11:42.0209 2312        fdPHost        (0438cab2e03f4fb61455a7956026fe86) C:\Windows\system32\fdPHost.dll
17:11:42.0248 2312        fdPHost - ok
17:11:42.0262 2312        FDResPub        (802496cb59a30349f9a6dd22d6947644) C:\Windows\system32\fdrespub.dll
17:11:42.0300 2312        FDResPub - ok
17:11:42.0328 2312        FileInfo        (655661be46b5f5f3fd454e2c3095b930) C:\Windows\system32\drivers\fileinfo.sys
17:11:42.0344 2312        FileInfo - ok
17:11:42.0358 2312        Filetrace      (5f671ab5bc87eea04ec38a6cd5962a47) C:\Windows\system32\drivers\filetrace.sys
17:11:42.0395 2312        Filetrace - ok
17:11:42.0417 2312        flpydisk        (c172a0f53008eaeb8ea33fe10e177af5) C:\Windows\system32\DRIVERS\flpydisk.sys
17:11:42.0433 2312        flpydisk - ok
17:11:42.0466 2312        FltMgr          (f7866af72abbaf84b1fa5aa195378c59) C:\Windows\system32\drivers\fltmgr.sys
17:11:42.0487 2312        FltMgr - ok
17:11:42.0563 2312        FontCache      (cb5e4b9c319e3c6bb363eb7e58a4a051) C:\Windows\system32\FntCache.dll
17:11:42.0590 2312        FontCache - ok
17:11:42.0660 2312        FontCache3.0.0.0 (8d89e3131c27fdd6932189cb785e1b7a) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
17:11:42.0682 2312        FontCache3.0.0.0 - ok
17:11:42.0722 2312        FsDepends      (d43703496149971890703b4b1b723eac) C:\Windows\system32\drivers\FsDepends.sys
17:11:42.0748 2312        FsDepends - ok
17:11:42.0788 2312        Fs_Rec          (d3e3f93d67821a2db2b3d9fac2dc2064) C:\Windows\system32\drivers\Fs_Rec.sys
17:11:42.0801 2312        Fs_Rec - ok
17:11:42.0835 2312        fvevol          (ae87ba80d0ec3b57126ed2cdc15b24ed) C:\Windows\system32\DRIVERS\fvevol.sys
17:11:42.0856 2312        fvevol - ok
17:11:42.0878 2312        gagp30kx        (8c778d335c9d272cfd3298ab02abe3b6) C:\Windows\system32\DRIVERS\gagp30kx.sys
17:11:42.0892 2312        gagp30kx - ok
17:11:42.0914 2312        GEARAspiWDM    (e403aacf8c7bb11375122d2464560311) C:\Windows\system32\DRIVERS\GEARAspiWDM.sys
17:11:42.0924 2312        GEARAspiWDM - ok
17:11:42.0982 2312        gpsvc          (fe5ab4525bc2ec68b9119a6e5d40128b) C:\Windows\System32\gpsvc.dll
17:11:43.0011 2312        gpsvc - ok
17:11:43.0043 2312        hcw85cir        (f2523ef6460fc42405b12248338ab2f0) C:\Windows\system32\drivers\hcw85cir.sys
17:11:43.0056 2312        hcw85cir - ok
17:11:43.0082 2312        HdAudAddService (6410f6f415b2a5a9037224c41da8bf12) C:\Windows\system32\drivers\HdAudio.sys
17:11:43.0103 2312        HdAudAddService - ok
17:11:43.0127 2312        HDAudBus        (0a49913402747a0b67de940fb42cbdbb) C:\Windows\system32\DRIVERS\HDAudBus.sys
17:11:43.0148 2312        HDAudBus - ok
17:11:43.0169 2312        HidBatt        (78e86380454a7b10a5eb255dc44a355f) C:\Windows\system32\DRIVERS\HidBatt.sys
17:11:43.0184 2312        HidBatt - ok
17:11:43.0205 2312        HidBth          (7fd2a313f7afe5c4dab14798c48dd104) C:\Windows\system32\DRIVERS\hidbth.sys
17:11:43.0222 2312        HidBth - ok
17:11:43.0244 2312        HidIr          (0a77d29f311b88cfae3b13f9c1a73825) C:\Windows\system32\DRIVERS\hidir.sys
17:11:43.0264 2312        HidIr - ok
17:11:43.0284 2312        hidserv        (bd9eb3958f213f96b97b1d897dee006d) C:\Windows\System32\hidserv.dll
17:11:43.0323 2312        hidserv - ok
17:11:43.0345 2312        HidUsb          (b3bf6b5b50006def50b66306d99fcf6f) C:\Windows\system32\DRIVERS\hidusb.sys
17:11:43.0359 2312        HidUsb - ok
17:11:43.0386 2312        hkmsvc          (efa58ede58dd74388ffd04cb32681518) C:\Windows\system32\kmsvc.dll
17:11:43.0424 2312        hkmsvc - ok
17:11:43.0454 2312        HomeGroupListener (046b2673767ca626e2cfb7fdf735e9e8) C:\Windows\system32\ListSvc.dll
17:11:43.0492 2312        HomeGroupListener - ok
17:11:43.0524 2312        HomeGroupProvider (06a7422224d9865a5613710a089987df) C:\Windows\system32\provsvc.dll
17:11:43.0541 2312        HomeGroupProvider - ok
17:11:43.0560 2312        HpSAMD          (0886d440058f203eba0e1825e4355914) C:\Windows\system32\DRIVERS\HpSAMD.sys
17:11:43.0574 2312        HpSAMD - ok
17:11:43.0625 2312        HTTP            (cee049cac4efa7f4e1e4ad014414a5d4) C:\Windows\system32\drivers\HTTP.sys
17:11:43.0671 2312        HTTP - ok
17:11:43.0692 2312        hwpolicy        (f17766a19145f111856378df337a5d79) C:\Windows\system32\drivers\hwpolicy.sys
17:11:43.0708 2312        hwpolicy - ok
17:11:43.0733 2312        i8042prt        (fa55c73d4affa7ee23ac4be53b4592d3) C:\Windows\system32\DRIVERS\i8042prt.sys
17:11:43.0748 2312        i8042prt - ok
17:11:43.0874 2312        IAANTMON        (0e899d0db39617aa0b2f992e7e95b5eb) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe
17:11:43.0901 2312        IAANTMON - ok
17:11:43.0941 2312        iaStor          (bbb3b6df1abb0fe35802ede85cc1c011) C:\Windows\system32\DRIVERS\iaStor.sys
17:11:43.0973 2312        iaStor - ok
17:11:44.0022 2312        iaStorV        (b75e45c564e944a2657167d197ab29da) C:\Windows\system32\drivers\iaStorV.sys
17:11:44.0041 2312        iaStorV - ok
17:11:44.0075 2312        IBMPMDRV        (b8e7ca64fff8b71636dea3a845cc23e5) C:\Windows\system32\DRIVERS\ibmpmdrv.sys
17:11:44.0086 2312        IBMPMDRV - ok
17:11:44.0098 2312        IBMPMSVC        (6daedf692b52b7c238c7199419318d16) C:\Windows\system32\ibmpmsvc.exe
17:11:44.0110 2312        IBMPMSVC - ok
17:11:44.0170 2312        IDriverT        (daf66902f08796f9c694901660e5a64a) C:\Program Files (x86)\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
17:11:44.0178 2312        IDriverT ( UnsignedFile.Multi.Generic ) - warning
17:11:44.0178 2312        IDriverT - detected UnsignedFile.Multi.Generic (1)
17:11:44.0288 2312        idsvc          (2f2be70d3e02b6fa877921ab9516d43c) C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
17:11:44.0326 2312        idsvc - ok
17:11:44.0641 2312        igfx            (37a65e3d89f6bbf5719ff9585f99eb7d) C:\Windows\system32\DRIVERS\igdkmd64.sys
17:11:44.0736 2312        igfx - ok
17:11:44.0851 2312        iirsp          (5c18831c61933628f5bb0ea2675b9d21) C:\Windows\system32\DRIVERS\iirsp.sys
17:11:44.0872 2312        iirsp - ok
17:11:44.0979 2312        IJPLMSVC        (755519f49906b73c1fe9cbbf75e347ea) C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE
17:11:44.0998 2312        IJPLMSVC - ok
17:11:45.0064 2312        IKEEXT          (c5b4683680df085b57bc53e5ef34861f) C:\Windows\System32\ikeext.dll
17:11:45.0111 2312        IKEEXT - ok
17:11:45.0205 2312        IntcAzAudAddService (3111a658416dc464ba1e48e3b2169952) C:\Windows\system32\drivers\RTKVHD64.sys
17:11:45.0243 2312        IntcAzAudAddService - ok
17:11:45.0357 2312        IntcHdmiAddService (88a20fa54c73ded4e8dac764e9130ae9) C:\Windows\system32\drivers\IntcHdmi.sys
17:11:45.0390 2312        IntcHdmiAddService - ok
17:11:45.0416 2312        intelide        (f00f20e70c6ec3aa366910083a0518aa) C:\Windows\system32\DRIVERS\intelide.sys
17:11:45.0436 2312        intelide - ok
17:11:45.0456 2312        intelppm        (ada036632c664caa754079041cf1f8c1) C:\Windows\system32\DRIVERS\intelppm.sys
17:11:45.0472 2312        intelppm - ok
17:11:45.0491 2312        IPBusEnum      (098a91c54546a3b878dad6a7e90a455b) C:\Windows\system32\ipbusenum.dll
17:11:45.0531 2312        IPBusEnum - ok
17:11:45.0545 2312        IpFilterDriver  (722dd294df62483cecaae6e094b4d695) C:\Windows\system32\DRIVERS\ipfltdrv.sys
17:11:45.0583 2312        IpFilterDriver - ok
17:11:45.0620 2312        iphlpsvc        (f8e058d17363ec580e4b7232778b6cb5) C:\Windows\System32\iphlpsvc.dll
17:11:45.0664 2312        iphlpsvc - ok
17:11:45.0676 2312        IPMIDRV        (e2b4a4494db7cb9b89b55ca268c337c5) C:\Windows\system32\DRIVERS\IPMIDrv.sys
17:11:45.0691 2312        IPMIDRV - ok
17:11:45.0707 2312        IPNAT          (af9b39a7e7b6caa203b3862582e9f2d0) C:\Windows\system32\drivers\ipnat.sys
17:11:45.0745 2312        IPNAT - ok
17:11:45.0832 2312        iPod Service    (3151d878bb16307ef2cf4cda2463d15e) C:\Program Files\iPod\bin\iPodService.exe
17:11:45.0875 2312        iPod Service - ok
17:11:45.0901 2312        IRENUM          (3abf5e7213eb28966d55d58b515d5ce9) C:\Windows\system32\drivers\irenum.sys
17:11:45.0925 2312        IRENUM - ok
17:11:45.0941 2312        isapnp          (2f7b28dc3e1183e5eb418df55c204f38) C:\Windows\system32\DRIVERS\isapnp.sys
17:11:45.0957 2312        isapnp - ok
17:11:45.0979 2312        iScsiPrt        (fa4d2557de56d45b0a346f93564be6e1) C:\Windows\system32\DRIVERS\msiscsi.sys
17:11:45.0995 2312        iScsiPrt - ok
17:11:46.0089 2312        IviRegMgr      (213822072085b5bbad9af30ab577d817) C:\Program Files (x86)\Common Files\InterVideo\RegMgr\iviRegMgr.exe
17:11:46.0110 2312        IviRegMgr - ok
17:11:46.0138 2312        JMCR            (80a1de467adf200390134d63e359937a) C:\Windows\system32\DRIVERS\jmcr.sys
17:11:46.0171 2312        JMCR - ok
17:11:46.0197 2312        kbdclass        (bc02336f1cba7dcc7d1213bb588a68a5) C:\Windows\system32\DRIVERS\kbdclass.sys
17:11:46.0211 2312        kbdclass - ok
17:11:46.0226 2312        kbdhid          (6def98f8541e1b5dceb2c822a11f7323) C:\Windows\system32\DRIVERS\kbdhid.sys
17:11:46.0241 2312        kbdhid - ok
17:11:46.0273 2312        KeyIso          (156f6159457d0aa7e59b62681b56eb90) C:\Windows\system32\lsass.exe
17:11:46.0288 2312        KeyIso - ok
17:11:46.0304 2312        KSecDD          (16c1b906fc5ead84769f90b736b6bf0e) C:\Windows\system32\Drivers\ksecdd.sys
17:11:46.0320 2312        KSecDD - ok
17:11:46.0342 2312        KSecPkg        (0b711550c56444879d71c7daabda6c83) C:\Windows\system32\Drivers\ksecpkg.sys
17:11:46.0359 2312        KSecPkg - ok
17:11:46.0375 2312        ksthunk        (6869281e78cb31a43e969f06b57347c4) C:\Windows\system32\drivers\ksthunk.sys
17:11:46.0411 2312        ksthunk - ok
17:11:46.0455 2312        KtmRm          (6ab66e16aa859232f64deb66887a8c9c) C:\Windows\system32\msdtckrm.dll
17:11:46.0497 2312        KtmRm - ok
17:11:46.0536 2312        LanmanServer    (81f1d04d4d0e433099365127375fd501) C:\Windows\System32\srvsvc.dll
17:11:46.0555 2312        LanmanServer - ok
17:11:46.0581 2312        LanmanWorkstation (27026eac8818e8a6c00a1cad2f11d29a) C:\Windows\System32\wkssvc.dll
17:11:46.0621 2312        LanmanWorkstation - ok
17:11:46.0693 2312        LENOVO.MICMUTE  (d584216c7767dcfb4b812b9b60a4a4e7) C:\Program Files\LENOVO\HOTKEY\MICMUTE.exe
17:11:46.0710 2312        LENOVO.MICMUTE - ok
17:11:46.0731 2312        lenovo.smi      (5acff5823634bc2c4ebf559c3b33e18e) C:\Windows\system32\DRIVERS\smiifx64.sys
17:11:46.0745 2312        lenovo.smi - ok
17:11:46.0759 2312        lltdio          (1538831cf8ad2979a04c423779465827) C:\Windows\system32\DRIVERS\lltdio.sys
17:11:46.0798 2312        lltdio - ok
17:11:46.0840 2312        lltdsvc        (c1185803384ab3feed115f79f109427f) C:\Windows\System32\lltdsvc.dll
17:11:46.0881 2312        lltdsvc - ok
17:11:46.0901 2312        lmhosts        (f993a32249b66c9d622ea5592a8b76b8) C:\Windows\System32\lmhsvc.dll
17:11:46.0939 2312        lmhosts - ok
17:11:46.0975 2312        LSI_FC          (1a93e54eb0ece102495a51266dcdb6a6) C:\Windows\system32\DRIVERS\lsi_fc.sys
17:11:46.0990 2312        LSI_FC - ok
17:11:47.0000 2312        LSI_SAS        (1047184a9fdc8bdbff857175875ee810) C:\Windows\system32\DRIVERS\lsi_sas.sys
17:11:47.0014 2312        LSI_SAS - ok
17:11:47.0025 2312        LSI_SAS2        (30f5c0de1ee8b5bc9306c1f0e4a75f93) C:\Windows\system32\DRIVERS\lsi_sas2.sys
17:11:47.0039 2312        LSI_SAS2 - ok
17:11:47.0055 2312        LSI_SCSI        (0504eacaff0d3c8aed161c4b0d369d4a) C:\Windows\system32\DRIVERS\lsi_scsi.sys
17:11:47.0070 2312        LSI_SCSI - ok
17:11:47.0087 2312        luafv          (43d0f98e1d56ccddb0d5254cff7b356e) C:\Windows\system32\drivers\luafv.sys
17:11:47.0126 2312        luafv - ok
17:11:47.0162 2312        Mcx2Svc        (f84c8f1000bc11e3b7b23cbd3baff111) C:\Windows\system32\Mcx2Svc.dll
17:11:47.0180 2312        Mcx2Svc - ok
17:11:47.0206 2312        megasas        (a55805f747c6edb6a9080d7c633bd0f4) C:\Windows\system32\DRIVERS\megasas.sys
17:11:47.0219 2312        megasas - ok
17:11:47.0244 2312        MegaSR          (baf74ce0072480c3b6b7c13b2a94d6b3) C:\Windows\system32\DRIVERS\MegaSR.sys
17:11:47.0261 2312        MegaSR - ok
17:11:47.0389 2312        Microsoft Office Groove Audit Service (fafe367d032ed82e9332b4c741a20216) C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe
17:11:47.0410 2312        Microsoft Office Groove Audit Service - ok
17:11:47.0436 2312        MMCSS          (e40e80d0304a73e8d269f7141d77250b) C:\Windows\system32\mmcss.dll
17:11:47.0476 2312        MMCSS - ok
17:11:47.0498 2312        Modem          (800ba92f7010378b09f9ed9270f07137) C:\Windows\system32\drivers\modem.sys
17:11:47.0537 2312        Modem - ok
17:11:47.0570 2312        monitor        (b03d591dc7da45ece20b3b467e6aadaa) C:\Windows\system32\DRIVERS\monitor.sys
17:11:47.0588 2312        monitor - ok
17:11:47.0603 2312        mouclass        (7d27ea49f3c1f687d357e77a470aea99) C:\Windows\system32\DRIVERS\mouclass.sys
17:11:47.0617 2312        mouclass - ok
17:11:47.0638 2312        mouhid          (d3bf052c40b0c4166d9fd86a4288c1e6) C:\Windows\system32\DRIVERS\mouhid.sys
17:11:47.0653 2312        mouhid - ok
17:11:47.0667 2312        mountmgr        (791af66c4d0e7c90a3646066386fb571) C:\Windows\system32\drivers\mountmgr.sys
17:11:47.0684 2312        mountmgr - ok
17:11:47.0716 2312        MozillaMaintenance (96aa8ba23142cc8e2b30f3cae0c80254) C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
17:11:47.0730 2312        MozillaMaintenance - ok
17:11:47.0752 2312        mpio            (609d1d87649ecc19796f4d76d4c15cea) C:\Windows\system32\DRIVERS\mpio.sys
17:11:47.0769 2312        mpio - ok
17:11:47.0791 2312        mpsdrv          (6c38c9e45ae0ea2fa5e551f2ed5e978f) C:\Windows\system32\drivers\mpsdrv.sys
17:11:47.0830 2312        mpsdrv - ok
17:11:47.0885 2312        MpsSvc          (aecab449567d1846dad63ece49e893e3) C:\Windows\system32\mpssvc.dll
17:11:47.0931 2312        MpsSvc - ok
17:11:47.0954 2312        MRxDAV          (30524261bb51d96d6fcbac20c810183c) C:\Windows\system32\drivers\mrxdav.sys
17:11:47.0974 2312        MRxDAV - ok
17:11:48.0046 2312        mrxsmb          (040d62a9d8ad28922632137acdd984f2) C:\Windows\system32\DRIVERS\mrxsmb.sys
17:11:48.0087 2312        mrxsmb - ok
17:11:48.0126 2312        mrxsmb10        (f0067552f8f9b33d7c59403ab808a3cb) C:\Windows\system32\DRIVERS\mrxsmb10.sys
17:11:48.0146 2312        mrxsmb10 - ok
17:11:48.0161 2312        mrxsmb20        (3c142d31de9f2f193218a53fe2632051) C:\Windows\system32\DRIVERS\mrxsmb20.sys
17:11:48.0178 2312        mrxsmb20 - ok
17:11:48.0199 2312        msahci          (5c37497276e3b3a5488b23a326a754b7) C:\Windows\system32\DRIVERS\msahci.sys
17:11:48.0214 2312        msahci - ok
17:11:48.0233 2312        msdsm          (8d27b597229aed79430fb9db3bcbfbd0) C:\Windows\system32\DRIVERS\msdsm.sys
17:11:48.0248 2312        msdsm - ok
17:11:48.0275 2312        MSDTC          (de0ece52236cfa3ed2dbfc03f28253a8) C:\Windows\System32\msdtc.exe
17:11:48.0294 2312        MSDTC - ok
17:11:48.0320 2312        Msfs            (aa3fb40e17ce1388fa1bedab50ea8f96) C:\Windows\system32\drivers\Msfs.sys
17:11:48.0359 2312        Msfs - ok
17:11:48.0373 2312        mshidkmdf      (f9d215a46a8b9753f61767fa72a20326) C:\Windows\System32\drivers\mshidkmdf.sys
17:11:48.0412 2312        mshidkmdf - ok
17:11:48.0425 2312        msisadrv        (d916874bbd4f8b07bfb7fa9b3ccae29d) C:\Windows\system32\DRIVERS\msisadrv.sys
17:11:48.0440 2312        msisadrv - ok
17:11:48.0467 2312        MSiSCSI        (808e98ff49b155c522e6400953177b08) C:\Windows\system32\iscsiexe.dll
17:11:48.0508 2312        MSiSCSI - ok
17:11:48.0512 2312        msiserver - ok
17:11:48.0537 2312        MSKSSRV        (49ccf2c4fea34ffad8b1b59d49439366) C:\Windows\system32\drivers\MSKSSRV.sys
17:11:48.0575 2312        MSKSSRV - ok
17:11:48.0586 2312        MSPCLOCK        (bdd71ace35a232104ddd349ee70e1ab3) C:\Windows\system32\drivers\MSPCLOCK.sys
17:11:48.0624 2312        MSPCLOCK - ok
17:11:48.0632 2312        MSPQM          (4ed981241db27c3383d72092b618a1d0) C:\Windows\system32\drivers\MSPQM.sys
17:11:48.0673 2312        MSPQM - ok
17:11:48.0713 2312        MsRPC          (89cb141aa8616d8c6a4610fa26c60964) C:\Windows\system32\drivers\MsRPC.sys
17:11:48.0741 2312        MsRPC - ok
17:11:48.0763 2312        mssmbios        (0eed230e37515a0eaee3c2e1bc97b288) C:\Windows\system32\DRIVERS\mssmbios.sys
17:11:48.0778 2312        mssmbios - ok
17:11:48.0803 2312        MSTEE          (2e66f9ecb30b4221a318c92ac2250779) C:\Windows\system32\drivers\MSTEE.sys
17:11:48.0842 2312        MSTEE - ok
17:11:48.0859 2312        MTConfig        (7ea404308934e675bffde8edf0757bcd) C:\Windows\system32\DRIVERS\MTConfig.sys
17:11:48.0875 2312        MTConfig - ok
17:11:48.0895 2312        Mup            (f9a18612fd3526fe473c1bda678d61c8) C:\Windows\system32\Drivers\mup.sys
17:11:48.0910 2312        Mup - ok
17:11:48.0957 2312        napagent        (4987e079a4530fa737a128be54b63b12) C:\Windows\system32\qagentRT.dll
17:11:49.0020 2312        napagent - ok
17:11:49.0052 2312        NativeWifiP    (1ea3749c4114db3e3161156ffffa6b33) C:\Windows\system32\DRIVERS\nwifi.sys
17:11:49.0074 2312        NativeWifiP - ok
17:11:49.0122 2312        NDIS            (cad515dbd07d082bb317d9928ce8962c) C:\Windows\system32\drivers\ndis.sys
17:11:49.0168 2312        NDIS - ok
17:11:49.0188 2312        NdisCap        (9f9a1f53aad7da4d6fef5bb73ab811ac) C:\Windows\system32\DRIVERS\ndiscap.sys
17:11:49.0225 2312        NdisCap - ok
17:11:49.0248 2312        NdisTapi        (30639c932d9fef22b31268fe25a1b6e5) C:\Windows\system32\DRIVERS\ndistapi.sys
17:11:49.0284 2312        NdisTapi - ok
17:11:49.0303 2312        Ndisuio        (f105ba1e22bf1f2ee8f005d4305e4bec) C:\Windows\system32\DRIVERS\ndisuio.sys
17:11:49.0340 2312        Ndisuio - ok
17:11:49.0354 2312        NdisWan        (557dfab9ca1fcb036ac77564c010dad3) C:\Windows\system32\DRIVERS\ndiswan.sys
17:11:49.0393 2312        NdisWan - ok
17:11:49.0404 2312        NDProxy        (659b74fb74b86228d6338d643cd3e3cf) C:\Windows\system32\drivers\NDProxy.sys
17:11:49.0442 2312        NDProxy - ok
17:11:49.0452 2312        NetBIOS        (86743d9f5d2b1048062b14b1d84501c4) C:\Windows\system32\DRIVERS\netbios.sys
17:11:49.0490 2312        NetBIOS - ok
17:11:49.0514 2312        NetBT          (9162b273a44ab9dce5b44362731d062a) C:\Windows\system32\DRIVERS\netbt.sys
17:11:49.0557 2312        NetBT - ok
17:11:49.0596 2312        Netlogon        (156f6159457d0aa7e59b62681b56eb90) C:\Windows\system32\lsass.exe
17:11:49.0611 2312        Netlogon - ok
17:11:49.0653 2312        Netman          (847d3ae376c0817161a14a82c8922a9e) C:\Windows\System32\netman.dll
17:11:49.0707 2312        Netman - ok
17:11:49.0745 2312        netprofm        (5f28111c648f1e24f7dbc87cdeb091b8) C:\Windows\System32\netprofm.dll
17:11:49.0787 2312        netprofm - ok
17:11:49.0842 2312        NetTcpPortSharing (3e5a36127e201ddf663176b66828fafe) C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe
17:11:49.0855 2312        NetTcpPortSharing - ok
17:11:50.0154 2312        NETw5s64        (4d85a450edef10c38882182753a49aae) C:\Windows\system32\DRIVERS\NETw5s64.sys
17:11:50.0252 2312        NETw5s64 - ok
17:11:50.0637 2312        netw5v64        (64428dfdaf6e88366cb51f45a79c5f69) C:\Windows\system32\DRIVERS\netw5v64.sys
17:11:50.0717 2312        netw5v64 - ok
17:11:51.0108 2312        NETwNs64        (9aa75919d0a5f33bea0df7b9db09b755) C:\Windows\system32\DRIVERS\NETwNs64.sys
17:11:51.0250 2312        NETwNs64 - ok
17:11:51.0374 2312        nfrd960        (77889813be4d166cdab78ddba990da92) C:\Windows\system32\DRIVERS\nfrd960.sys
17:11:51.0399 2312        nfrd960 - ok
17:11:51.0447 2312        NlaSvc          (d9a0ce66046d6efa0c61baa885cba0a8) C:\Windows\System32\nlasvc.dll
17:11:51.0500 2312        NlaSvc - ok
17:11:51.0515 2312        Npfs            (1e4c4ab5c9b8dd13179bbdc75a2a01f7) C:\Windows\system32\drivers\Npfs.sys
17:11:51.0556 2312        Npfs - ok
17:11:51.0570 2312        nsi            (d54bfdf3e0c953f823b3d0bfe4732528) C:\Windows\system32\nsisvc.dll
17:11:51.0608 2312        nsi - ok
17:11:51.0623 2312        nsiproxy        (e7f5ae18af4168178a642a9247c63001) C:\Windows\system32\drivers\nsiproxy.sys
17:11:51.0660 2312        nsiproxy - ok
17:11:51.0773 2312        Ntfs            (378e0e0dfea67d98ae6ea53adbbd76bc) C:\Windows\system32\drivers\Ntfs.sys
17:11:51.0841 2312        Ntfs - ok
17:11:51.0942 2312        Null            (9899284589f75fa8724ff3d16aed75c1) C:\Windows\system32\drivers\Null.sys
17:11:51.0990 2312        Null - ok
17:11:52.0029 2312        nvraid          (a4d9c9a608a97f59307c2f2600edc6a4) C:\Windows\system32\drivers\nvraid.sys
17:11:52.0046 2312        nvraid - ok
17:11:52.0066 2312        nvstor          (6c1d5f70e7a6a3fd1c90d840edc048b9) C:\Windows\system32\drivers\nvstor.sys
17:11:52.0082 2312        nvstor - ok
17:11:52.0101 2312        nv_agp          (270d7cd42d6e3979f6dd0146650f0e05) C:\Windows\system32\DRIVERS\nv_agp.sys
17:11:52.0116 2312        nv_agp - ok
17:11:52.0255 2312        odserv          (84de1dd996b48b05ace31ad015fa108a) C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE
17:11:52.0277 2312        odserv - ok
17:11:52.0310 2312        ohci1394        (3589478e4b22ce21b41fa1bfc0b8b8a0) C:\Windows\system32\DRIVERS\ohci1394.sys
17:11:52.0325 2312        ohci1394 - ok
17:11:52.0394 2312        OMSI download service (da345de3b450e9e1691e7b9956d8ffc3) C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe
17:11:52.0403 2312        OMSI download service ( UnsignedFile.Multi.Generic ) - warning
17:11:52.0404 2312        OMSI download service - detected UnsignedFile.Multi.Generic (1)
17:11:52.0440 2312        ose            (5a432a042dae460abe7199b758e8606c) C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
17:11:52.0457 2312        ose - ok
17:11:52.0500 2312        p2pimsvc        (3eac4455472cc2c97107b5291e0dcafe) C:\Windows\system32\pnrpsvc.dll
17:11:52.0533 2312        p2pimsvc - ok
17:11:52.0575 2312        p2psvc          (927463ecb02179f88e4b9a17568c63c3) C:\Windows\system32\p2psvc.dll
17:11:52.0595 2312        p2psvc - ok
17:11:52.0633 2312        Parport        (0086431c29c35be1dbc43f52cc273887) C:\Windows\system32\DRIVERS\parport.sys
17:11:52.0660 2312        Parport - ok
17:11:52.0691 2312        partmgr        (90061b1acfe8ccaa5345750ffe08d8b8) C:\Windows\system32\drivers\partmgr.sys
17:11:52.0707 2312        partmgr - ok
17:11:52.0734 2312        PcaSvc          (3aeaa8b561e63452c655dc0584922257) C:\Windows\System32\pcasvc.dll
17:11:52.0755 2312        PcaSvc - ok
17:11:52.0827 2312        PCDSRVC{127174DC-C366ED8B-06020200}_0 (4b5f5774ff1c577b9515fdd2b5c535c5) c:\program files\pc-doctor\pcdsrvc_x64.pkms
17:11:52.0839 2312        PCDSRVC{127174DC-C366ED8B-06020200}_0 - ok
17:11:52.0888 2312        pci            (f36f6504009f2fb0dfd1b17a116ad74b) C:\Windows\system32\DRIVERS\pci.sys
17:11:52.0906 2312        pci - ok
17:11:52.0924 2312        pciide          (b5b8b5ef2e5cb34df8dcf8831e3534fa) C:\Windows\system32\DRIVERS\pciide.sys
17:11:52.0939 2312        pciide - ok
17:11:52.0966 2312        pcmcia          (b2e81d4e87ce48589f98cb8c05b01f2f) C:\Windows\system32\DRIVERS\pcmcia.sys
17:11:52.0982 2312        pcmcia - ok
17:11:53.0005 2312        pcw            (d6b9c2e1a11a3a4b26a182ffef18f603) C:\Windows\system32\drivers\pcw.sys
17:11:53.0020 2312        pcw - ok
17:11:53.0065 2312        PEAUTH          (68769c3356b3be5d1c732c97b9a80d6e) C:\Windows\system32\drivers\peauth.sys
17:11:53.0109 2312        PEAUTH - ok
17:11:53.0189 2312        PerfHost        (e495e408c93141e8fc72dc0c6046ddfa) C:\Windows\SysWow64\perfhost.exe
17:11:53.0205 2312        PerfHost - ok
17:11:53.0302 2312        pla            (557e9a86f65f0de18c9b6751dfe9d3f1) C:\Windows\system32\pla.dll
17:11:53.0356 2312        pla - ok
17:11:53.0420 2312        PlugPlay        (98b1721b8718164293b9701b98c52d77) C:\Windows\system32\umpnpmgr.dll
17:11:53.0440 2312        PlugPlay - ok
17:11:53.0482 2312        PNRPAutoReg    (7195581cec9bb7d12abe54036acc2e38) C:\Windows\system32\pnrpauto.dll
17:11:53.0496 2312        PNRPAutoReg - ok
17:11:53.0524 2312        PNRPsvc        (3eac4455472cc2c97107b5291e0dcafe) C:\Windows\system32\pnrpsvc.dll
17:11:53.0542 2312        PNRPsvc - ok
17:11:53.0591 2312        PolicyAgent    (166eb40d1f5b47e615de3d0fffe5f243) C:\Windows\System32\ipsecsvc.dll
17:11:53.0634 2312        PolicyAgent - ok
17:11:53.0661 2312        Power          (6ba9d927dded70bd1a9caded45f8b184) C:\Windows\system32\umpo.dll
17:11:53.0702 2312        Power - ok
17:11:53.0797 2312        Power Manager DBC Service (bf179cfcfdb28b9e28397835beafe332) C:\Program Files (x86)\ThinkPad\Utilities\PWMDBSVC.EXE
17:11:53.0810 2312        Power Manager DBC Service - ok
17:11:53.0874 2312        PptpMiniport    (27cc19e81ba5e3403c48302127bda717) C:\Windows\system32\DRIVERS\raspptp.sys
17:11:53.0918 2312        PptpMiniport - ok
17:11:53.0957 2312        prmvmouse      (5320e4c5253b3b5579fb3bb47b7671ac) C:\Windows\system32\DRIVERS\activmouse.sys
17:11:53.0973 2312        prmvmouse - ok
17:11:53.0993 2312        Processor      (0d922e23c041efb1c3fac2a6f943c9bf) C:\Windows\system32\DRIVERS\processr.sys
17:11:54.0009 2312        Processor - ok
17:11:54.0055 2312        ProfSvc        (97293447431311c06703368ad0f6c4be) C:\Windows\system32\profsvc.dll
17:11:54.0097 2312        ProfSvc - ok
17:11:54.0141 2312        ProtectedStorage (156f6159457d0aa7e59b62681b56eb90) C:\Windows\system32\lsass.exe
17:11:54.0157 2312        ProtectedStorage - ok
17:11:54.0181 2312        psadd          (515a7c5a0886fcc60901916785efd549) C:\Windows\system32\DRIVERS\psadd.sys
17:11:54.0192 2312        psadd - ok
17:11:54.0226 2312        Psched          (ee992183bd8eaefd9973f352e587a299) C:\Windows\system32\DRIVERS\pacer.sys
17:11:54.0264 2312        Psched - ok
17:11:54.0291 2312        PxHlpa64        (4712cc14e720ecccc0aa16949d18aaf1) C:\Windows\system32\Drivers\PxHlpa64.sys
17:11:54.0304 2312        PxHlpa64 - ok
17:11:54.0391 2312        ql2300          (a53a15a11ebfd21077463ee2c7afeef0) C:\Windows\system32\DRIVERS\ql2300.sys
17:11:54.0427 2312        ql2300 - ok
17:11:54.0527 2312        ql40xx          (4f6d12b51de1aaeff7dc58c4d75423c8) C:\Windows\system32\DRIVERS\ql40xx.sys
17:11:54.0552 2312        ql40xx - ok
17:11:54.0583 2312        QWAVE          (906191634e99aea92c4816150bda3732) C:\Windows\system32\qwave.dll
17:11:54.0606 2312        QWAVE - ok
17:11:54.0623 2312        QWAVEdrv        (76707bb36430888d9ce9d705398adb6c) C:\Windows\system32\drivers\qwavedrv.sys
17:11:54.0642 2312        QWAVEdrv - ok
17:11:54.0661 2312        RasAcd          (5a0da8ad5762fa2d91678a8a01311704) C:\Windows\system32\DRIVERS\rasacd.sys
17:11:54.0698 2312        RasAcd - ok
17:11:54.0713 2312        RasAgileVpn    (7ecff9b22276b73f43a99a15a6094e90) C:\Windows\system32\DRIVERS\AgileVpn.sys
17:11:54.0750 2312        RasAgileVpn - ok
17:11:54.0771 2312        RasAuto        (8f26510c5383b8dbe976de1cd00fc8c7) C:\Windows\System32\rasauto.dll
17:11:54.0809 2312        RasAuto - ok
17:11:54.0829 2312        Rasl2tp        (87a6e852a22991580d6d39adc4790463) C:\Windows\system32\DRIVERS\rasl2tp.sys
17:11:54.0867 2312        Rasl2tp - ok
17:11:54.0899 2312        RasMan          (47394ed3d16d053f5906efe5ab51cc83) C:\Windows\System32\rasmans.dll
17:11:54.0941 2312        RasMan - ok
17:11:54.0962 2312        RasPppoe        (855c9b1cd4756c5e9a2aa58a15f58c25) C:\Windows\system32\DRIVERS\raspppoe.sys
17:11:55.0007 2312        RasPppoe - ok
17:11:55.0028 2312        RasSstp        (e8b1e447b008d07ff47d016c2b0eeecb) C:\Windows\system32\DRIVERS\rassstp.sys
17:11:55.0067 2312        RasSstp - ok
17:11:55.0088 2312        rdbss          (3bac8142102c15d59a87757c1d41dce5) C:\Windows\system32\DRIVERS\rdbss.sys
17:11:55.0131 2312        rdbss - ok
17:11:55.0145 2312        rdpbus          (302da2a0539f2cf54d7c6cc30c1f2d8d) C:\Windows\system32\DRIVERS\rdpbus.sys
17:11:55.0162 2312        rdpbus - ok
17:11:55.0183 2312        RDPCDD          (cea6cc257fc9b7715f1c2b4849286d24) C:\Windows\system32\DRIVERS\RDPCDD.sys
17:11:55.0221 2312        RDPCDD - ok
17:11:55.0234 2312        RDPENCDD        (bb5971a4f00659529a5c44831af22365) C:\Windows\system32\drivers\rdpencdd.sys
17:11:55.0271 2312        RDPENCDD - ok
17:11:55.0285 2312        RDPREFMP        (216f3fa57533d98e1f74ded70113177a) C:\Windows\system32\drivers\rdprefmp.sys
17:11:55.0323 2312        RDPREFMP - ok
17:11:55.0373 2312        RDPWD          (447de7e3dea39d422c1504f245b668b1) C:\Windows\system32\drivers\RDPWD.sys
17:11:55.0410 2312        RDPWD - ok
17:11:55.0434 2312        rdyboost        (634b9a2181d98f15941236886164ec8b) C:\Windows\system32\drivers\rdyboost.sys
17:11:55.0453 2312        rdyboost - ok
17:11:55.0564 2312        RegSrvc        (2528d733da7f5ac8d3d32c74ee4cff16) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
17:11:55.0629 2312        RegSrvc - ok
17:11:55.0661 2312        RemoteAccess    (254fb7a22d74e5511c73a3f6d802f192) C:\Windows\System32\mprdim.dll
17:11:55.0699 2312        RemoteAccess - ok
17:11:55.0731 2312        RemoteRegistry  (e4d94f24081440b5fc5aa556c7c62702) C:\Windows\system32\regsvc.dll
17:11:55.0771 2312        RemoteRegistry - ok
17:11:55.0839 2312        RFCOMM          (3dd798846e2c28102b922c56e71b7932) C:\Windows\system32\DRIVERS\rfcomm.sys
17:11:55.0857 2312        RFCOMM - ok
17:11:55.0974 2312        Roxio UPnP Renderer 10 (14a99fd851272c73b758546ef8f0e641) C:\Program Files (x86)\Roxio\Digital Home 10\RoxioUPnPRenderer10.exe
17:11:55.0995 2312        Roxio UPnP Renderer 10 - ok
17:11:56.0027 2312        Roxio Upnp Server 10 (ba917f2f2bd5033e70823797c73cdfcb) C:\Program Files (x86)\Roxio\Digital Home 10\RoxioUpnpService10.exe
17:11:56.0055 2312        Roxio Upnp Server 10 - ok
17:11:56.0127 2312        RoxLiveShare10  (8986d20cf294d794a79fb18ff697b68b) C:\Program Files (x86)\Common Files\Roxio Shared\10.0\SharedCOM\RoxLiveShare10.exe
17:11:56.0156 2312        RoxLiveShare10 - ok
17:11:56.0226 2312        RoxMediaDB10    (d8c44229eb2495e774350529ed9be08d) C:\Program Files (x86)\Common Files\Roxio Shared\10.0\SharedCOM\RoxMediaDB10.exe
17:11:56.0254 2312        RoxMediaDB10 - ok
17:11:56.0287 2312        RoxWatch10      (53716357f4b3c99112cf0a21932c5688) C:\Program Files (x86)\Common Files\Roxio Shared\10.0\SharedCOM\RoxWatch10.exe
17:11:56.0303 2312        RoxWatch10 - ok
17:11:56.0395 2312        RpcEptMapper    (e4dc58cf7b3ea515ae917ff0d402a7bb) C:\Windows\System32\RpcEpMap.dll
17:11:56.0453 2312        RpcEptMapper - ok
17:11:56.0475 2312        RpcLocator      (d5ba242d4cf8e384db90e6a8ed850b8c) C:\Windows\system32\locator.exe
17:11:56.0494 2312        RpcLocator - ok
17:11:56.0532 2312        RpcSs          (7266972e86890e2b30c0c322e906b027) C:\Windows\system32\rpcss.dll
17:11:56.0577 2312        RpcSs - ok
17:11:56.0621 2312        rspndr          (ddc86e4f8e7456261e637e3552e804ff) C:\Windows\system32\DRIVERS\rspndr.sys
17:11:56.0664 2312        rspndr - ok
17:11:56.0697 2312        RTL8167        (b49dc435ae3695bac5623dd94b05732d) C:\Windows\system32\DRIVERS\Rt64win7.sys
17:11:56.0726 2312        RTL8167 - ok
17:11:56.0772 2312        s0016bus        (ea268bce30691c2dd24f02e617fd2eb5) C:\Windows\system32\DRIVERS\s0016bus.sys
17:11:56.0784 2312        s0016bus - ok
17:11:56.0821 2312        s0016mdfl      (f5f9deb89996d333ef976624d37e24e3) C:\Windows\system32\DRIVERS\s0016mdfl.sys
17:11:56.0834 2312        s0016mdfl - ok
17:11:56.0856 2312        s0016mdm        (c17ce2aee67480febcc36eccb54c0be8) C:\Windows\system32\DRIVERS\s0016mdm.sys
17:11:56.0868 2312        s0016mdm - ok
17:11:56.0887 2312        s0016mgmt      (cc267f04c54c5ec5b7bd658d7628469f) C:\Windows\system32\DRIVERS\s0016mgmt.sys
17:11:56.0899 2312        s0016mgmt - ok
17:11:56.0936 2312        s0016nd5        (30a35bbce09d9fe67482fd62c61911fc) C:\Windows\system32\DRIVERS\s0016nd5.sys
17:11:56.0946 2312        s0016nd5 - ok
17:11:56.0973 2312        s0016obex      (ca394dcc38579c7ad82e83ee64d798a0) C:\Windows\system32\DRIVERS\s0016obex.sys
17:11:56.0985 2312        s0016obex - ok
17:11:57.0024 2312        s0016unic      (eb267ccea84e6e8598d92f73332ac67b) C:\Windows\system32\DRIVERS\s0016unic.sys
17:11:57.0038 2312        s0016unic - ok
17:11:57.0069 2312        SamSs          (156f6159457d0aa7e59b62681b56eb90) C:\Windows\system32\lsass.exe
17:11:57.0085 2312        SamSs - ok
17:11:57.0115 2312        sbp2port        (e3bbb89983daf5622c1d50cf49f28227) C:\Windows\system32\DRIVERS\sbp2port.sys
17:11:57.0130 2312        sbp2port - ok
17:11:57.0164 2312        SCardSvr        (9b7395789e3791a3b6d000fe6f8b131e) C:\Windows\System32\SCardSvr.dll
17:11:57.0206 2312        SCardSvr - ok
17:11:57.0253 2312        scfilter        (c94da20c7e3ba1dca269bc8460d98387) C:\Windows\system32\DRIVERS\scfilter.sys
17:11:57.0303 2312        scfilter - ok
17:11:57.0390 2312        Schedule        (624d0f5ff99428bb90a5b8a4123e918e) C:\Windows\system32\schedsvc.dll
17:11:57.0418 2312        Schedule - ok
17:11:57.0446 2312        SCPolicySvc    (312e2f82af11e79906898ac3e3d58a1f) C:\Windows\System32\certprop.dll
17:11:57.0485 2312        SCPolicySvc - ok
17:11:57.0536 2312        sdbus          (2c8d162efaf73abd36d8bcbb6340cae7) C:\Windows\system32\DRIVERS\sdbus.sys
17:11:57.0573 2312        sdbus - ok
17:11:57.0603 2312        SDRSVC          (765a27c3279ce11d14cb9e4f5869fca5) C:\Windows\System32\SDRSVC.dll
17:11:57.0622 2312        SDRSVC - ok
17:11:57.0732 2312        SeaPort        (d358e077a0a05d9b12da22d137ee8464) C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
17:11:57.0748 2312        SeaPort - ok
17:11:57.0772 2312        secdrv          (3ea8a16169c26afbeb544e0e48421186) C:\Windows\system32\drivers\secdrv.sys
17:11:57.0809 2312        secdrv - ok
17:11:57.0835 2312        seclogon        (463b386ebc70f98da5dff85f7e654346) C:\Windows\system32\seclogon.dll
17:11:57.0872 2312        seclogon - ok
17:11:57.0886 2312        SENS            (c32ab8fa018ef34c0f113bd501436d21) C:\Windows\System32\sens.dll
17:11:57.0925 2312        SENS - ok
17:11:57.0939 2312        SensrSvc        (0336cffafaab87a11541f1cf1594b2b2) C:\Windows\system32\sensrsvc.dll
17:11:57.0954 2312        SensrSvc - ok
17:11:57.0966 2312        Serenum        (cb624c0035412af0debec78c41f5ca1b) C:\Windows\system32\DRIVERS\serenum.sys
17:11:57.0981 2312        Serenum - ok
17:11:58.0010 2312        Serial          (c1d8e28b2c2adfaec4ba89e9fda69bd6) C:\Windows\system32\DRIVERS\serial.sys
17:11:58.0025 2312        Serial - ok
17:11:58.0041 2312        sermouse        (1c545a7d0691cc4a027396535691c3e3) C:\Windows\system32\DRIVERS\sermouse.sys
17:11:58.0056 2312        sermouse - ok
17:11:58.0094 2312        SessionEnv      (c3bc61ce47ff6f4e88ab8a3b429a36af) C:\Windows\system32\sessenv.dll
17:11:58.0132 2312        SessionEnv - ok
17:11:58.0162 2312        sffdisk        (a554811bcd09279536440c964ae35bbf) C:\Windows\system32\DRIVERS\sffdisk.sys
17:11:58.0177 2312        sffdisk - ok
17:11:58.0201 2312        sffp_mmc        (ff414f0baefeba59bc6c04b3db0b87bf) C:\Windows\system32\DRIVERS\sffp_mmc.sys
17:11:58.0216 2312        sffp_mmc - ok
17:11:58.0233 2312        sffp_sd        (178298f767fe638c9fedcbdef58bb5e4) C:\Windows\system32\DRIVERS\sffp_sd.sys
17:11:58.0250 2312        sffp_sd - ok
17:11:58.0266 2312        sfloppy        (a9d601643a1647211a1ee2ec4e433ff4) C:\Windows\system32\DRIVERS\sfloppy.sys
17:11:58.0283 2312        sfloppy - ok
17:11:58.0324 2312        SharedAccess    (b95f6501a2f8b2e78c697fec401970ce) C:\Windows\System32\ipnathlp.dll
17:11:58.0366 2312        SharedAccess - ok
17:11:58.0422 2312        ShellHWDetection (0298ac45d0efffb2db4baa7dd186e7bf) C:\Windows\System32\shsvcs.dll
17:11:58.0446 2312        ShellHWDetection - ok
17:11:58.0472 2312        Shockprf        (5a5346931ce61ea85f8338f7a03131f7) C:\Windows\system32\DRIVERS\Apsx64.sys
17:11:58.0486 2312        Shockprf - ok
17:11:58.0520 2312        SiSRaid2        (843caf1e5fde1ffd5ff768f23a51e2e1) C:\Windows\system32\DRIVERS\SiSRaid2.sys
17:11:58.0534 2312        SiSRaid2 - ok
17:11:58.0554 2312        SiSRaid4        (6a6c106d42e9ffff8b9fcb4f754f6da4) C:\Windows\system32\DRIVERS\sisraid4.sys
17:11:58.0568 2312        SiSRaid4 - ok
17:11:58.0581 2312        Smb            (548260a7b8654e024dc30bf8a7c5baa4) C:\Windows\system32\DRIVERS\smb.sys
17:11:58.0619 2312        Smb - ok
17:11:58.0646 2312        SNMPTRAP        (6313f223e817cc09aa41811daa7f541d) C:\Windows\System32\snmptrap.exe
17:11:58.0667 2312        SNMPTRAP - ok
17:11:58.0677 2312        spldr          (b9e31e5cacdfe584f34f730a677803f9) C:\Windows\system32\drivers\spldr.sys
17:11:58.0693 2312        spldr - ok
17:11:58.0743 2312        Spooler        (f8e1fa03cb70d54a9892ac88b91d1e7b) C:\Windows\System32\spoolsv.exe
17:11:58.0769 2312        Spooler - ok
17:11:58.0926 2312        sppsvc          (913d843498553a1bc8f8dbad6358e49f) C:\Windows\system32\sppsvc.exe
17:11:59.0043 2312        sppsvc - ok
17:11:59.0125 2312        sppuinotify    (93d7d61317f3d4bc4f4e9f8a96a7de45) C:\Windows\system32\sppuinotify.dll
17:11:59.0165 2312        sppuinotify - ok
17:11:59.0227 2312        srv            (2408c0366d96bcdf63e8f1c78e4a29c5) C:\Windows\system32\DRIVERS\srv.sys
17:11:59.0274 2312        srv - ok
17:11:59.0308 2312        srv2            (76548f7b818881b47d8d1ae1be9c11f8) C:\Windows\system32\DRIVERS\srv2.sys
17:11:59.0339 2312        srv2 - ok
17:11:59.0377 2312        SrvHsfHDA      (0c4540311e11664b245a263e1154cef8) C:\Windows\system32\DRIVERS\VSTAZL6.SYS
17:11:59.0396 2312        SrvHsfHDA - ok
17:11:59.0463 2312        SrvHsfV92      (02071d207a9858fbe3a48cbfd59c4a04) C:\Windows\system32\DRIVERS\VSTDPV6.SYS
17:11:59.0494 2312        SrvHsfV92 - ok
17:11:59.0611 2312        SrvHsfWinac    (18e40c245dbfaf36fd0134a7ef2df396) C:\Windows\system32\DRIVERS\VSTCNXT6.SYS
17:11:59.0641 2312        SrvHsfWinac - ok
17:11:59.0678 2312        srvnet          (0af6e19d39c70844c5caa8fb0183c36e) C:\Windows\system32\DRIVERS\srvnet.sys
17:11:59.0697 2312        srvnet - ok
17:11:59.0738 2312        SSDPSRV        (51b52fbd583cde8aa9ba62b8b4298f33) C:\Windows\System32\ssdpsrv.dll
17:11:59.0779 2312        SSDPSRV - ok
17:11:59.0804 2312        SstpSvc        (ab7aebf58dad8daab7a6c45e6a8885cb) C:\Windows\system32\sstpsvc.dll
17:11:59.0844 2312        SstpSvc - ok
17:11:59.0867 2312        stexstor        (f3817967ed533d08327dc73bc4d5542a) C:\Windows\system32\DRIVERS\stexstor.sys
17:11:59.0881 2312        stexstor - ok
17:11:59.0930 2312        stisvc          (52d0e33b681bd0f33fdc08812fee4f7d) C:\Windows\System32\wiaservc.dll
17:11:59.0956 2312        stisvc - ok
17:12:00.0053 2312        stllssvr        (ff5eb78af7dfb68c2fb363537aaf753e) C:\Program Files (x86)\Common Files\SureThing Shared\stllssvr.exe
17:12:00.0071 2312        stllssvr - ok
17:12:00.0131 2312        SUService      (91403353d039dc6d3d81644a68422649) c:\Program Files (x86)\Lenovo\System Update\SUService.exe
17:12:00.0139 2312        SUService ( UnsignedFile.Multi.Generic ) - warning
17:12:00.0139 2312        SUService - detected UnsignedFile.Multi.Generic (1)
17:12:00.0162 2312        swenum          (d01ec09b6711a5f8e7e6564a4d0fbc90) C:\Windows\system32\DRIVERS\swenum.sys
17:12:00.0178 2312        swenum - ok
17:12:00.0218 2312        swprv          (e08e46fdd841b7184194011ca1955a0b) C:\Windows\System32\swprv.dll
17:12:00.0278 2312        swprv - ok
17:12:00.0312 2312        SynTP          (929c9fa0b18ad2ebc8340591c4bf00ff) C:\Windows\system32\DRIVERS\SynTP.sys
17:12:00.0327 2312        SynTP - ok
17:12:00.0412 2312        SysMain        (3c1284516a62078fb68f768de4f1a7be) C:\Windows\system32\sysmain.dll
17:12:00.0504 2312        SysMain - ok
17:12:00.0580 2312        TabletInputService (238935c3cf2854886dc7cbb2a0e2cc66) C:\Windows\System32\TabSvc.dll
17:12:00.0615 2312        TabletInputService - ok
17:12:00.0642 2312        TapiSrv        (884264ac597b690c5707c89723bb8e7b) C:\Windows\System32\tapisrv.dll
17:12:00.0683 2312        TapiSrv - ok
17:12:00.0712 2312        TBS            (1be03ac720f4d302ea01d40f588162f6) C:\Windows\System32\tbssvc.dll
17:12:00.0751 2312        TBS - ok
17:12:00.0898 2312        Tcpip          (624c5b3aa4c99b3184bb922d9ece3ff0) C:\Windows\system32\drivers\tcpip.sys
17:12:00.0972 2312        Tcpip - ok
17:12:01.0121 2312        TCPIP6          (624c5b3aa4c99b3184bb922d9ece3ff0) C:\Windows\system32\DRIVERS\tcpip.sys
17:12:01.0164 2312        TCPIP6 - ok
17:12:01.0237 2312        tcpipreg        (76d078af6f587b162d50210f761eb9ed) C:\Windows\system32\drivers\tcpipreg.sys
17:12:01.0274 2312        tcpipreg - ok
17:12:01.0295 2312        TDPIPE          (3371d21011695b16333a3934340c4e7c) C:\Windows\system32\drivers\tdpipe.sys
17:12:01.0329 2312        TDPIPE - ok
17:12:01.0364 2312        TDTCP          (7518f7bcfd4b308abc9192bacaf6c970) C:\Windows\system32\drivers\tdtcp.sys
17:12:01.0386 2312        TDTCP - ok
17:12:01.0401 2312        tdx            (079125c4b17b01fcaeebce0bcb290c0f) C:\Windows\system32\DRIVERS\tdx.sys
17:12:01.0439 2312        tdx - ok
17:12:01.0458 2312        TermDD          (c448651339196c0e869a355171875522) C:\Windows\system32\DRIVERS\termdd.sys
17:12:01.0472 2312        TermDD - ok
17:12:01.0530 2312        TermService    (0f05ec2887bfe197ad82a13287d2f404) C:\Windows\System32\termsrv.dll
17:12:01.0575 2312        TermService - ok
17:12:01.0597 2312        Themes          (f0344071948d1a1fa732231785a0664c) C:\Windows\system32\themeservice.dll
17:12:01.0617 2312        Themes - ok
17:12:01.0770 2312        ThinkVantage Registry Monitor Service (39ac444e07fdbd8c2e8e291a65d515d3) C:\Program Files (x86)\Common Files\Lenovo\tvt_reg_monitor_svc.exe
17:12:01.0799 2312        ThinkVantage Registry Monitor Service ( UnsignedFile.Multi.Generic ) - warning
17:12:01.0799 2312        ThinkVantage Registry Monitor Service - detected UnsignedFile.Multi.Generic (1)
17:12:01.0829 2312        THREADORDER    (e40e80d0304a73e8d269f7141d77250b) C:\Windows\system32\mmcss.dll
17:12:01.0869 2312        THREADORDER - ok
17:12:01.0910 2312        TPDIGIMN        (7e25f9ae51daac0791df1eb949a58dbe) C:\Windows\system32\DRIVERS\ApsHM64.sys
17:12:01.0922 2312        TPDIGIMN - ok
17:12:01.0938 2312        TPHDEXLGSVC    (dd96de244cb186207149bc897e67217a) C:\Windows\system32\TPHDEXLG64.exe
17:12:01.0951 2312        TPHDEXLGSVC - ok
17:12:01.0996 2312        TPHKSVC        (a2080872efb7582b43762141ae8d61b9) C:\Program Files\LENOVO\HOTKEY\TPHKSVC.exe
17:12:02.0014 2312        TPHKSVC - ok
17:12:02.0047 2312        TPM            (dbcc20c02e8a3e43b03c304a4e40a84f) C:\Windows\system32\drivers\tpm.sys
17:12:02.0063 2312        TPM - ok
17:12:02.0099 2312        TPPWRIF        (2c067e01d6bbccc88b233b868e210907) C:\Windows\system32\drivers\Tppwr64v.sys
17:12:02.0112 2312        TPPWRIF - ok
17:12:02.0144 2312        TrkWks          (7e7afd841694f6ac397e99d75cead49d) C:\Windows\System32\trkwks.dll
17:12:02.0184 2312        TrkWks - ok
17:12:02.0235 2312        TrustedInstaller (840f7fb849f5887a49ba18c13b2da920) C:\Windows\servicing\TrustedInstaller.exe
17:12:02.0267 2312        TrustedInstaller - ok
17:12:02.0293 2312        tssecsrv        (61b96c26131e37b24e93327a0bd1fb95) C:\Windows\system32\DRIVERS\tssecsrv.sys
17:12:02.0332 2312        tssecsrv - ok
17:12:02.0356 2312        tunnel          (3836171a2cdf3af8ef10856db9835a70) C:\Windows\system32\DRIVERS\tunnel.sys
17:12:02.0397 2312        tunnel - ok
17:12:02.0578 2312        TVT Backup Service (b56da1aa776c15043d10f82b32aa000d) C:\Program Files (x86)\Lenovo\Rescue and Recovery\rrservice.exe
17:12:02.0635 2312        TVT Backup Service ( UnsignedFile.Multi.Generic ) - warning
17:12:02.0635 2312        TVT Backup Service - detected UnsignedFile.Multi.Generic (1)
17:12:02.0742 2312        uagp35          (b4dd609bd7e282bfc683cec7eaaaad67) C:\Windows\system32\DRIVERS\uagp35.sys
17:12:02.0769 2312        uagp35 - ok
17:12:02.0802 2312        udfs            (d47baead86c65d4f4069d7ce0a4edceb) C:\Windows\system32\DRIVERS\udfs.sys
17:12:02.0843 2312        udfs - ok
17:12:02.0879 2312        UI0Detect      (3cbdec8d06b9968aba702eba076364a1) C:\Windows\system32\UI0Detect.exe
17:12:02.0896 2312        UI0Detect - ok
17:12:02.0907 2312        uliagpkx        (4bfe1bc28391222894cbf1e7d0e42320) C:\Windows\system32\DRIVERS\uliagpkx.sys
17:12:02.0922 2312        uliagpkx - ok
17:12:02.0941 2312        umbus          (eab6c35e62b1b0db0d1b48b671d3a117) C:\Windows\system32\DRIVERS\umbus.sys
17:12:02.0956 2312        umbus - ok
17:12:02.0973 2312        UmPass          (b2e8e8cb557b156da5493bbddcc1474d) C:\Windows\system32\DRIVERS\umpass.sys
17:12:02.0989 2312        UmPass - ok
17:12:03.0026 2312        upnphost        (d47ec6a8e81633dd18d2436b19baf6de) C:\Windows\System32\upnphost.dll
17:12:03.0067 2312        upnphost - ok
17:12:03.0103 2312        usbaudio        (77b01bc848298223a95d4ec23e1785a1) C:\Windows\system32\drivers\usbaudio.sys
17:12:03.0121 2312        usbaudio - ok
17:12:03.0162 2312        usbccgp        (537a4e03d7103c12d42dfd8ffdb5bdc9) C:\Windows\system32\DRIVERS\usbccgp.sys
17:12:03.0177 2312        usbccgp - ok
17:12:03.0204 2312        usbcir          (af0892a803fdda7492f595368e3b68e7) C:\Windows\system32\DRIVERS\usbcir.sys
17:12:03.0223 2312        usbcir - ok
17:12:03.0256 2312        usbehci        (fbb21ebe49f6d560db37ac25fbc68e66) C:\Windows\system32\DRIVERS\usbehci.sys
17:12:03.0270 2312        usbehci - ok
17:12:03.0303 2312        usbhub          (6b7a8a99c4a459e73c286a6763ea24cc) C:\Windows\system32\DRIVERS\usbhub.sys
17:12:03.0321 2312        usbhub - ok
17:12:03.0359 2312        usbohci        (8c88aa7617b4cbc2e4bed61d26b33a27) C:\Windows\system32\drivers\usbohci.sys
17:12:03.0374 2312        usbohci - ok
17:12:03.0398 2312        usbprint        (73188f58fb384e75c4063d29413cee3d) C:\Windows\system32\DRIVERS\usbprint.sys
17:12:03.0416 2312        usbprint - ok
17:12:03.0439 2312        usbscan        (aaa2513c8aed8b54b189fd0c6b1634c0) C:\Windows\system32\DRIVERS\usbscan.sys
17:12:03.0456 2312        usbscan - ok
17:12:03.0495 2312        USBSTOR        (f39983647bc1f3e6100778ddfe9dce29) C:\Windows\system32\DRIVERS\USBSTOR.SYS
17:12:03.0511 2312        USBSTOR - ok
17:12:03.0542 2312        usbuhci        (0b5b3b2df3fd1709618acfa50b8392b0) C:\Windows\system32\DRIVERS\usbuhci.sys
17:12:03.0561 2312        usbuhci - ok
17:12:03.0591 2312        usbvideo        (7cb8c573c6e4a2714402cc0a36eab4fe) C:\Windows\System32\Drivers\usbvideo.sys
17:12:03.0626 2312        usbvideo - ok
17:12:03.0652 2312        UxSms          (edbb23cbcf2cdf727d64ff9b51a6070e) C:\Windows\System32\uxsms.dll
17:12:03.0697 2312        UxSms - ok
17:12:03.0748 2312        VaultSvc        (156f6159457d0aa7e59b62681b56eb90) C:\Windows\system32\lsass.exe
17:12:03.0764 2312        VaultSvc - ok
17:12:03.0781 2312        vdrvroot        (c5c876ccfc083ff3b128f933823e87bd) C:\Windows\system32\DRIVERS\vdrvroot.sys
17:12:03.0801 2312        vdrvroot - ok
17:12:03.0840 2312        vds            (44d73e0bbc1d3c8981304ba15135c2f2) C:\Windows\System32\vds.exe
17:12:03.0868 2312        vds - ok
17:12:03.0900 2312        vga            (da4da3f5e02943c2dc8c6ed875de68dd) C:\Windows\system32\DRIVERS\vgapnp.sys
17:12:03.0920 2312        vga - ok
17:12:03.0941 2312        VgaSave        (53e92a310193cb3c03bea963de7d9cfc) C:\Windows\System32\drivers\vga.sys
17:12:03.0980 2312        VgaSave - ok
17:12:04.0011 2312        vhdmp          (c82e748660f62a242b2dfac1442f22a4) C:\Windows\system32\DRIVERS\vhdmp.sys
17:12:04.0028 2312        vhdmp - ok
17:12:04.0039 2312        viaide          (e5689d93ffe4e5d66c0178761240dd54) C:\Windows\system32\DRIVERS\viaide.sys
17:12:04.0054 2312        viaide - ok
17:12:04.0073 2312        volmgr          (2b1a3dae2b4e70dbba822b7a03fbd4a3) C:\Windows\system32\DRIVERS\volmgr.sys
17:12:04.0091 2312        volmgr - ok
17:12:04.0123 2312        volmgrx        (99b0cbb569ca79acaed8c91461d765fb) C:\Windows\system32\drivers\volmgrx.sys
17:12:04.0155 2312        volmgrx - ok
17:12:04.0182 2312        volsnap        (58f82eed8ca24b461441f9c3e4f0bf5c) C:\Windows\system32\DRIVERS\volsnap.sys
17:12:04.0203 2312        volsnap - ok
17:12:04.0224 2312        vsmraid        (5e2016ea6ebaca03c04feac5f330d997) C:\Windows\system32\DRIVERS\vsmraid.sys
17:12:04.0241 2312        vsmraid - ok
17:12:04.0349 2312        VSS            (787898bf9fb6d7bd87a36e2d95c899ba) C:\Windows\system32\vssvc.exe
17:12:04.0385 2312        VSS - ok
17:12:04.0504 2312        vwifibus        (36d4720b72b5c5d9cb2b9c29e9df67a1) C:\Windows\system32\DRIVERS\vwifibus.sys
17:12:04.0535 2312        vwifibus - ok
17:12:04.0555 2312        vwififlt        (6a3d66263414ff0d6fa754c646612f3f) C:\Windows\system32\DRIVERS\vwififlt.sys
17:12:04.0574 2312        vwififlt - ok
17:12:04.0587 2312        vwifimp        (6a638fc4bfddc4d9b186c28c91bd1a01) C:\Windows\system32\DRIVERS\vwifimp.sys
17:12:04.0610 2312        vwifimp - ok
17:12:04.0663 2312        W32Time        (1c9d80cc3849b3788048078c26486e1a) C:\Windows\system32\w32time.dll
17:12:04.0727 2312        W32Time - ok
17:12:04.0749 2312        WacomPen        (4e9440f4f152a7b944cb1663d3935a3e) C:\Windows\system32\DRIVERS\wacompen.sys
17:12:04.0764 2312        WacomPen - ok
17:12:04.0785 2312        WANARP          (47ca49400643effd3f1c9a27e1d69324) C:\Windows\system32\DRIVERS\wanarp.sys
17:12:04.0824 2312        WANARP - ok
17:12:04.0828 2312        Wanarpv6        (47ca49400643effd3f1c9a27e1d69324) C:\Windows\system32\DRIVERS\wanarp.sys
17:12:04.0868 2312        Wanarpv6 - ok
17:12:04.0942 2312        wbengine        (5ab1bb85bd8b5089cc5d64200dedae68) C:\Windows\system32\wbengine.exe
17:12:04.0987 2312        wbengine - ok
17:12:05.0077 2312        WbioSrvc        (3aa101e8edab2db4131333f4325c76a3) C:\Windows\System32\wbiosrvc.dll
17:12:05.0114 2312        WbioSrvc - ok
17:12:05.0163 2312        wcncsvc        (dd1bae8ebfc653824d29ccf8c9054d68) C:\Windows\System32\wcncsvc.dll
17:12:05.0183 2312        wcncsvc - ok
17:12:05.0203 2312        WcsPlugInService (20f7441334b18cee52027661df4a6129) C:\Windows\System32\WcsPlugInService.dll
17:12:05.0220 2312        WcsPlugInService - ok
17:12:05.0277 2312        Wd              (72889e16ff12ba0f235467d6091b17dc) C:\Windows\system32\DRIVERS\wd.sys
17:12:05.0299 2312        Wd - ok
17:12:05.0333 2312        WDC_SAM        (a3d04ebf5227886029b4532f20d026f7) C:\Windows\system32\DRIVERS\wdcsam64.sys
17:12:05.0360 2312        WDC_SAM - ok
17:12:05.0427 2312        WDDMService    (334e5ed94d3faff3c44f4d36b1fe1c90) C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe
17:12:05.0438 2312        WDDMService ( UnsignedFile.Multi.Generic ) - warning
17:12:05.0438 2312        WDDMService - detected UnsignedFile.Multi.Generic (1)
17:12:05.0485 2312        Wdf01000        (441bd2d7b4f98134c3a4f9fa570fd250) C:\Windows\system32\drivers\Wdf01000.sys
17:12:05.0538 2312        Wdf01000 - ok
17:12:05.0558 2312        WdiServiceHost  (bf1fc3f79b863c914687a737c2f3d681) C:\Windows\system32\wdi.dll
17:12:05.0580 2312        WdiServiceHost - ok
17:12:05.0584 2312        WdiSystemHost  (bf1fc3f79b863c914687a737c2f3d681) C:\Windows\system32\wdi.dll
17:12:05.0607 2312        WdiSystemHost - ok
17:12:05.0695 2312        WDSmartWareBackgroundService (138ab06adbbf300aa804d7974a5aec82) C:\Program Files (x86)\Western Digital\WD SmartWare\Front Parlor\WDSmartWareBackgroundService.exe
17:12:05.0704 2312        WDSmartWareBackgroundService ( UnsignedFile.Multi.Generic ) - warning
17:12:05.0704 2312        WDSmartWareBackgroundService - detected UnsignedFile.Multi.Generic (1)
17:12:05.0752 2312        WebClient      (733006127f235be7c35354ebee7b9a7b) C:\Windows\System32\webclnt.dll
17:12:05.0795 2312        WebClient - ok
17:12:05.0820 2312        Wecsvc          (c749025a679c5103e575e3b48e092c43) C:\Windows\system32\wecsvc.dll
17:12:05.0862 2312        Wecsvc - ok
17:12:05.0881 2312        wercplsupport  (7e591867422dc788b9e5bd337a669a08) C:\Windows\System32\wercplsupport.dll
17:12:05.0922 2312        wercplsupport - ok
17:12:05.0939 2312        WerSvc          (6d137963730144698cbd10f202e9f251) C:\Windows\System32\WerSvc.dll
17:12:05.0980 2312        WerSvc - ok
17:12:06.0026 2312        WfpLwf          (611b23304bf067451a9fdee01fbdd725) C:\Windows\system32\DRIVERS\wfplwf.sys
17:12:06.0063 2312        WfpLwf - ok
17:12:06.0078 2312        WIMMount        (05ecaec3e4529a7153b3136ceb49f0ec) C:\Windows\system32\drivers\wimmount.sys
17:12:06.0092 2312        WIMMount - ok
17:12:06.0111 2312        WinDefend - ok
17:12:06.0122 2312        WinHttpAutoProxySvc - ok
17:12:06.0192 2312        Winmgmt        (19b07e7e8915d701225da41cb3877306) C:\Windows\system32\wbem\WMIsvc.dll
17:12:06.0257 2312        Winmgmt - ok
17:12:06.0372 2312        WinRM          (41fbb751936b387f9179e7f03a74fe29) C:\Windows\system32\WsmSvc.dll
17:12:06.0440 2312        WinRM - ok
17:12:06.0552 2312        WinUsb          (817eaff5d38674edd7713b9dfb8e9791) C:\Windows\system32\DRIVERS\WinUsb.sys
17:12:06.0575 2312        WinUsb - ok
17:12:06.0637 2312        Wlansvc        (4fada86e62f18a1b2f42ba18ae24e6aa) C:\Windows\System32\wlansvc.dll
17:12:06.0667 2312        Wlansvc - ok
17:12:06.0680 2312        WmiAcpi        (f6ff8944478594d0e414d3f048f0d778) C:\Windows\system32\DRIVERS\wmiacpi.sys
17:12:06.0696 2312        WmiAcpi - ok
17:12:06.0755 2312        wmiApSrv        (38b84c94c5a8af291adfea478ae54f93) C:\Windows\system32\wbem\WmiApSrv.exe
17:12:06.0780 2312        wmiApSrv - ok
17:12:06.0846 2312        WMPNetworkSvc - ok
17:12:06.0881 2312        WPCSvc          (96c6e7100d724c69fcf9e7bf590d1dca) C:\Windows\System32\wpcsvc.dll
17:12:06.0910 2312        WPCSvc - ok
17:12:06.0934 2312        WPDBusEnum      (2e57ddf2880a7e52e76f41c7e96d327b) C:\Windows\system32\wpdbusenum.dll
17:12:06.0951 2312        WPDBusEnum - ok
17:12:06.0977 2312        ws2ifsl        (6bcc1d7d2fd2453957c5479a32364e52) C:\Windows\system32\drivers\ws2ifsl.sys
17:12:07.0014 2312        ws2ifsl - ok
17:12:07.0056 2312        wscsvc          (8f9f3969933c02da96eb0f84576db43e) C:\Windows\system32\wscsvc.dll
17:12:07.0080 2312        wscsvc - ok
17:12:07.0085 2312        WSearch - ok
17:12:07.0203 2312        wuauserv        (38340204a2d0228f1e87740fc5e554a7) C:\Windows\system32\wuaueng.dll
17:12:07.0320 2312        wuauserv - ok
17:12:07.0431 2312        WudfPf          (7cadc74271dd6461c452c271b30bd378) C:\Windows\system32\drivers\WudfPf.sys
17:12:07.0491 2312        WudfPf - ok
17:12:07.0513 2312        WUDFRd          (3b197af0fff08aa66b6b2241ca538d64) C:\Windows\system32\DRIVERS\WUDFRd.sys
17:12:07.0551 2312        WUDFRd - ok
17:12:07.0581 2312        wudfsvc        (b551d6637aa0e132c18ac6e504f7b79b) C:\Windows\System32\WUDFSvc.dll
17:12:07.0621 2312        wudfsvc - ok
17:12:07.0649 2312        WwanSvc        (9a3452b3c2a46c073166c5cf49fad1ae) C:\Windows\System32\wwansvc.dll
17:12:07.0671 2312        WwanSvc - ok
17:12:07.0704 2312        MBR (0x1B8)    (b8f75e6fc7a0ba4c7d9a865725b971a7) \Device\Harddisk0\DR0
17:12:08.0154 2312        \Device\Harddisk0\DR0 - ok
17:12:08.0190 2312        Boot (0x1200)  (ab9c2b2329c3fd8e646591176aa0801d) \Device\Harddisk0\DR0\Partition0
17:12:08.0193 2312        \Device\Harddisk0\DR0\Partition0 - ok
17:12:08.0209 2312        Boot (0x1200)  (02b4f85cc96ba73c9d6582c9edf3d0be) \Device\Harddisk0\DR0\Partition1
17:12:08.0212 2312        \Device\Harddisk0\DR0\Partition1 - ok
17:12:08.0252 2312        Boot (0x1200)  (ef58a7c235f888692ee0a1b1943e9998) \Device\Harddisk0\DR0\Partition2
17:12:08.0255 2312        \Device\Harddisk0\DR0\Partition2 - ok
17:12:08.0256 2312        ============================================================
17:12:08.0256 2312        Scan finished
17:12:08.0256 2312        ============================================================
17:12:08.0272 4608        Detected object count: 8
17:12:08.0272 4608        Actual detected object count: 8
17:12:18.0817 4608        CTDevice_Srv ( UnsignedFile.Multi.Generic ) - skipped by user
17:12:18.0817 4608        CTDevice_Srv ( UnsignedFile.Multi.Generic ) - User select action: Skip
17:12:18.0820 4608        IDriverT ( UnsignedFile.Multi.Generic ) - skipped by user
17:12:18.0820 4608        IDriverT ( UnsignedFile.Multi.Generic ) - User select action: Skip
17:12:18.0821 4608        OMSI download service ( UnsignedFile.Multi.Generic ) - skipped by user
17:12:18.0821 4608        OMSI download service ( UnsignedFile.Multi.Generic ) - User select action: Skip
17:12:18.0827 4608        SUService ( UnsignedFile.Multi.Generic ) - skipped by user
17:12:18.0827 4608        SUService ( UnsignedFile.Multi.Generic ) - User select action: Skip
17:12:18.0831 4608        ThinkVantage Registry Monitor Service ( UnsignedFile.Multi.Generic ) - skipped by user
17:12:18.0831 4608        ThinkVantage Registry Monitor Service ( UnsignedFile.Multi.Generic ) - User select action: Skip
17:12:18.0836 4608        TVT Backup Service ( UnsignedFile.Multi.Generic ) - skipped by user
17:12:18.0836 4608        TVT Backup Service ( UnsignedFile.Multi.Generic ) - User select action: Skip
17:12:18.0837 4608        WDDMService ( UnsignedFile.Multi.Generic ) - skipped by user
17:12:18.0837 4608        WDDMService ( UnsignedFile.Multi.Generic ) - User select action: Skip
17:12:18.0841 4608        WDSmartWareBackgroundService ( UnsignedFile.Multi.Generic ) - skipped by user
17:12:18.0841 4608        WDSmartWareBackgroundService ( UnsignedFile.Multi.Generic ) - User select action: Skip

Von Avira bekomme ich jetzt oft die Information, dass die Autorunfunktion blockiert wurde, obwohl ich da nichts anders eingestellt habe.
Du schriebst, ich soll ComboFix im abgesicherten Modus starten - das habe ich versucht, jedoch kann ich nicht den Modus aufrufen über die F8 Taste. Es startet sofort Windows ohne auf meine Eingabe zu reagieren.
Wenn ich ComboFix im normalen Modus starte, hängt es sich immer wieder auf.
Die OTL und Extra-Dateien habe ich als Anhang gespeichert.

Danke!
Gruffalo

Chris4You 15.06.2012 21:38
Hi,

zähes Biest, Teile sind noch da!

Fix für OTL:
  • Doppelklick auf die OTL.exe, um das Programm auszuführen.
  • Vista/Win7-User bitte per Rechtsklick und "Ausführen als Administrator" starten.
  • Kopiere den Inhalt der folgenden Codebox komplett in die OTL-Box unter "Custom Scan/Fixes"
Code:

:OTL
O4 - HKLM..\Run: []  File not found
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
[2012.01.11 11:26:20 | 000,002,048 | -HS- | C] () -- C:\Users\Claudia\AppData\Local\{80639323-beb1-9b13-7dd5-31196d650826}\@

:Commands
[emptytemp]
[Reboot]
  • Den roten Run Fixes! Button anklicken.
  • Bitte alles aus dem Ergebnisfenster (Results) herauskopieren.
  • Eine Kopie eines OTL-Fix-Logs wird in einer Textdatei in folgendem Ordner gespeichert:
  • %systemroot%\_OTL

Dann doch Cureit, am Besten über Nacht laufen lassen...
Cureit
Folge der Anleitung: http://www.trojaner-board.de/59299-a...eb-cureit.html
Nach Beendigung des Scans findes Du das Log unter %USERPROFILE%\DoctorWeb\CureIt.log.
Bevor du irgendwelche Aktionen unternimmst, kopiere bitte den Inhalt des Logs und poste ihn.
Die Log Datei ist sehr groß, ca. über 5MB Text. Benutzt einfach die Suche nach "infiziert" und kopiert betreffende Teile heraus, bevor Du sie postet.

chris

Gruffalo 16.06.2012 20:35
Hi Chris,

das hat OTL als Ergebnis angezeigt.
Code:
All processes killed
========== OTL ==========
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\Locked deleted successfully.
64bit-Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\Locked deleted successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5C255C8A-E604-49b4-9D64-90988571CECB}\ not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoActiveDesktop deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoActiveDesktopChanges deleted successfully.
C:\Users\Claudia\AppData\Local\{80639323-beb1-9b13-7dd5-31196d650826}\@ moved successfully.
========== COMMANDS ==========
 
[EMPTYTEMP]
 
User: admin
->Temp folder emptied: 8761777 bytes
->Temporary Internet Files folder emptied: 94190 bytes
->FireFox cache emptied: 5694843 bytes
->Flash cache emptied: 456 bytes
 
User: All Users
 
User: AppData
 
User: Claudia
->Temp folder emptied: 393354678 bytes
->Temporary Internet Files folder emptied: 199103798 bytes
->Java cache emptied: 573173 bytes
->FireFox cache emptied: 213014403 bytes
->Flash cache emptied: 8149600 bytes
 
User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
 
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
 
User: Public
 
User: Tilo
->Temp folder emptied: 143244351 bytes
->Temporary Internet Files folder emptied: 21585483 bytes
->Java cache emptied: 4341 bytes
->FireFox cache emptied: 481848111 bytes
->Flash cache emptied: 22177 bytes
 
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 406941529 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 87499 bytes
RecycleBin emptied: 0 bytes
 
Total Files Cleaned = 1.795,00 mb
 
 
OTL by OldTimer - Version 3.2.48.0 log created on 06162012_211530

Files\Folders moved on Reboot...
File move failed. C:\Users\Claudia\AppData\Local\Temp\FXSAPIDebugLogFile.txt scheduled to be moved on reboot.
File\Folder C:\Windows\temp\TMP000000A7B0DEA89172F3EDB8 not found!

Registry entries deleted on Reboot...
Heute Nacht werde ich das andere PRogramm laufen lassen...
Danke
Gruffalo

Hallo Chris,
hier ist das Log von CureIt:
Code:
C:\ProgramData\Avira\AntiVir Desktop\INFECTED\1cd533b2.qua gepackt von XOREXE
>C:\ProgramData\Avira\AntiVir Desktop\INFECTED\1cd533b2.qua - OK
C:\ProgramData\Avira\AntiVir Desktop\INFECTED\1da4b7cc.qua gepackt von XOREXE
>C:\ProgramData\Avira\AntiVir Desktop\INFECTED\1da4b7cc.qua - OK
C:\ProgramData\Avira\AntiVir Desktop\INFECTED\4d568f74.qua gepackt von XOREXE
>C:\ProgramData\Avira\AntiVir Desktop\INFECTED\4d568f74.qua - OK
C:\ProgramData\Avira\AntiVir Desktop\INFECTED\4d668aa3.qua gepackt von XOREXE
>C:\ProgramData\Avira\AntiVir Desktop\INFECTED\4d668aa3.qua - OK
C:\ProgramData\Avira\AntiVir Desktop\INFECTED\4e4841ea.qua gepackt von XOREXE
>C:\ProgramData\Avira\AntiVir Desktop\INFECTED\4e4841ea.qua - OK
C:\ProgramData\Avira\AntiVir Desktop\INFECTED\4e8a695a.qua gepackt von XOREXE
>C:\ProgramData\Avira\AntiVir Desktop\INFECTED\4e8a695a.qua - OK
C:\ProgramData\Avira\AntiVir Desktop\INFECTED\4ec38512.qua gepackt von XOREXE
>C:\ProgramData\Avira\AntiVir Desktop\INFECTED\4ec38512.qua - OK
C:\ProgramData\Avira\AntiVir Desktop\INFECTED\4ef18339.qua gepackt von XOREXE
>C:\ProgramData\Avira\AntiVir Desktop\INFECTED\4ef18339.qua - OK
C:\ProgramData\Avira\AntiVir Desktop\INFECTED\4ffbed24.qua gepackt von XOREXE
>C:\ProgramData\Avira\AntiVir Desktop\INFECTED\4ffbed24.qua - OK
C:\ProgramData\Avira\AntiVir Desktop\INFECTED\55aaa039.qua gepackt von XOREXE
>C:\ProgramData\Avira\AntiVir Desktop\INFECTED\55aaa039.qua - OK
C:\ProgramData\Avira\AntiVir Desktop\INFECTED\55c1a0d3.qua gepackt von XOREXE
>C:\ProgramData\Avira\AntiVir Desktop\INFECTED\55c1a0d3.qua - OK
C:\ProgramData\Avira\AntiVir Desktop\INFECTED\55f1a504.qua gepackt von XOREXE
>C:\ProgramData\Avira\AntiVir Desktop\INFECTED\55f1a504.qua - OK
C:\ProgramData\Avira\AntiVir Desktop\INFECTED\55f3afb2.qua gepackt von XOREXE
>C:\ProgramData\Avira\AntiVir Desktop\INFECTED\55f3afb2.qua - OK
C:\ProgramData\Avira\AntiVir Desktop\INFECTED\561c4eae.qua gepackt von XOREXE
>C:\ProgramData\Avira\AntiVir Desktop\INFECTED\561c4eae.qua - OK
C:\ProgramData\Avira\AntiVir Desktop\INFECTED\561d46fd.qua gepackt von XOREXE
>C:\ProgramData\Avira\AntiVir Desktop\INFECTED\561d46fd.qua gepackt von XOREXE
>>C:\ProgramData\Avira\AntiVir Desktop\INFECTED\561d46fd.qua infiziert mit BackDoor.Siggen.46158 - nicht desinfizierbar - verschoben
C:\ProgramData\Avira\AntiVir Desktop\INFECTED\56314955.qua gepackt von XOREXE
>C:\ProgramData\Avira\AntiVir Desktop\INFECTED\56314955.qua - OK
C:\ProgramData\Avira\AntiVir Desktop\INFECTED\56324794.qua gepackt von XOREXE
>C:\ProgramData\Avira\AntiVir Desktop\INFECTED\56324794.qua - OK
C:\ProgramData\Avira\AntiVir Desktop\INFECTED\56336d93.qua gepackt von XOREXE
>C:\ProgramData\Avira\AntiVir Desktop\INFECTED\56336d93.qua gepackt von XOREXE
>>C:\ProgramData\Avira\AntiVir Desktop\INFECTED\56336d93.qua infiziert mit BackDoor.Maxplus.5220 - gelöscht
C:\ProgramData\Avira\AntiVir Desktop\INFECTED\564c46e1.qua gepackt von XOREXE
>C:\ProgramData\Avira\AntiVir Desktop\INFECTED\564c46e1.qua - OK
C:\ProgramData\Avira\AntiVir Desktop\INFECTED\56524d3b.qua gepackt von XOREXE
>C:\ProgramData\Avira\AntiVir Desktop\INFECTED\56524d3b.qua - OK
C:\ProgramData\Avira\AntiVir Desktop\INFECTED\5654aab5.qua gepackt von XOREXE
>C:\ProgramData\Avira\AntiVir Desktop\INFECTED\5654aab5.qua - OK
C:\ProgramData\Avira\AntiVir Desktop\INFECTED\5666ac9e.qua gepackt von XOREXE
>C:\ProgramData\Avira\AntiVir Desktop\INFECTED\5666ac9e.qua - OK
C:\ProgramData\Avira\AntiVir Desktop\INFECTED\56914630.qua gepackt von XOREXE
>C:\ProgramData\Avira\AntiVir Desktop\INFECTED\56914630.qua - OK
C:\ProgramData\Avira\AntiVir Desktop\INFECTED\56ad4259.qua gepackt von XOREXE
>C:\ProgramData\Avira\AntiVir Desktop\INFECTED\56ad4259.qua - OK
C:\ProgramData\Avira\AntiVir Desktop\INFECTED\56df6e4d.qua gepackt von XOREXE
>C:\ProgramData\Avira\AntiVir Desktop\INFECTED\56df6e4d.qua - OK
C:\ProgramData\Avira\AntiVir Desktop\INFECTED\56fca032.qua gepackt von XOREXE
>C:\ProgramData\Avira\AntiVir Desktop\INFECTED\56fca032.qua - OK
C:\ProgramData\Avira\AntiVir Desktop\INFECTED\571545f7.qua gepackt von XOREXE
>C:\ProgramData\Avira\AntiVir Desktop\INFECTED\571545f7.qua - OK
C:\ProgramData\Avira\AntiVir Desktop\INFECTED\576cc283.qua gepackt von XOREXE
>C:\ProgramData\Avira\AntiVir Desktop\INFECTED\576cc283.qua gepackt von XOREXE
>>C:\ProgramData\Avira\AntiVir Desktop\INFECTED\576cc283.qua infiziert mit BackDoor.Siggen.46158 - nicht desinfizierbar - verschoben
C:\ProgramData\Avira\AntiVir Desktop\IPM\IpmDocument.html - Archiv JS-HTML
Code:
>C:\Program Files (x86)\Avira\AntiVir Desktop\avwin.chm/images/cc_event_type_infected.png - OK
Code:
C:\SWTOOLS\APPS\CSBED\CSBE\ACTIVATION_104\_desktop.ini infiziert mit Win32.HLLW.Gavir.ini - Desinfektion vom Benutzer abgelehnt
C:\SWTOOLS\APPS\CSBED\CSBE\ACTIVATION_104\BIN\rsl.dll - OK
C:\SWTOOLS\APPS\CSBED\CSBE\ACTIVATION_104\BIN\_desktop.ini infiziert mit Win32.HLLW.Gavir.ini - Desinfektion vom Benutzer abgelehnt
C:\SWTOOLS\APPS\CSBED\CSBE\bin\banner.bmp - OK
Code:
C:\Users\Claudia\Desktop\OTL.exe infiziert mit Trojan.Siggen4.4395 - Desinfektion vom Benutzer abgelehnt
Code:
C:\ProgramData\Avira\AntiVir Desktop\INFECTED\1cd533b2.qua gepackt von XOREXE
>C:\ProgramData\Avira\AntiVir Desktop\INFECTED\1cd533b2.qua - OK
C:\ProgramData\Avira\AntiVir Desktop\INFECTED\1da4b7cc.qua gepackt von XOREXE
>C:\ProgramData\Avira\AntiVir Desktop\INFECTED\1da4b7cc.qua - OK
C:\ProgramData\Avira\AntiVir Desktop\INFECTED\4d568f74.qua gepackt von XOREXE
>C:\ProgramData\Avira\AntiVir Desktop\INFECTED\4d568f74.qua - OK
C:\ProgramData\Avira\AntiVir Desktop\INFECTED\4d668aa3.qua gepackt von XOREXE
>C:\ProgramData\Avira\AntiVir Desktop\INFECTED\4d668aa3.qua - OK
C:\ProgramData\Avira\AntiVir Desktop\INFECTED\4e4841ea.qua gepackt von XOREXE
>C:\ProgramData\Avira\AntiVir Desktop\INFECTED\4e4841ea.qua - OK
C:\ProgramData\Avira\AntiVir Desktop\INFECTED\4e8a695a.qua gepackt von XOREXE
>C:\ProgramData\Avira\AntiVir Desktop\INFECTED\4e8a695a.qua - OK
C:\ProgramData\Avira\AntiVir Desktop\INFECTED\4ec38512.qua gepackt von XOREXE
>C:\ProgramData\Avira\AntiVir Desktop\INFECTED\4ec38512.qua - OK
C:\ProgramData\Avira\AntiVir Desktop\INFECTED\4ef18339.qua gepackt von XOREXE
>C:\ProgramData\Avira\AntiVir Desktop\INFECTED\4ef18339.qua - OK
C:\ProgramData\Avira\AntiVir Desktop\INFECTED\4ffbed24.qua gepackt von XOREXE
>C:\ProgramData\Avira\AntiVir Desktop\INFECTED\4ffbed24.qua - OK
C:\ProgramData\Avira\AntiVir Desktop\INFECTED\55aaa039.qua gepackt von XOREXE
>C:\ProgramData\Avira\AntiVir Desktop\INFECTED\55aaa039.qua - OK
C:\ProgramData\Avira\AntiVir Desktop\INFECTED\55c1a0d3.qua gepackt von XOREXE
>C:\ProgramData\Avira\AntiVir Desktop\INFECTED\55c1a0d3.qua - OK
C:\ProgramData\Avira\AntiVir Desktop\INFECTED\55f1a504.qua gepackt von XOREXE
>C:\ProgramData\Avira\AntiVir Desktop\INFECTED\55f1a504.qua - OK
C:\ProgramData\Avira\AntiVir Desktop\INFECTED\55f3afb2.qua gepackt von XOREXE
>C:\ProgramData\Avira\AntiVir Desktop\INFECTED\55f3afb2.qua - OK
C:\ProgramData\Avira\AntiVir Desktop\INFECTED\561c4eae.qua gepackt von XOREXE
>C:\ProgramData\Avira\AntiVir Desktop\INFECTED\561c4eae.qua - OK
C:\ProgramData\Avira\AntiVir Desktop\INFECTED\56314955.qua gepackt von XOREXE
>C:\ProgramData\Avira\AntiVir Desktop\INFECTED\56314955.qua - OK
C:\ProgramData\Avira\AntiVir Desktop\INFECTED\56324794.qua gepackt von XOREXE
>C:\ProgramData\Avira\AntiVir Desktop\INFECTED\56324794.qua - OK
C:\ProgramData\Avira\AntiVir Desktop\INFECTED\564c46e1.qua gepackt von XOREXE
>C:\ProgramData\Avira\AntiVir Desktop\INFECTED\564c46e1.qua - OK
C:\ProgramData\Avira\AntiVir Desktop\INFECTED\56524d3b.qua gepackt von XOREXE
>C:\ProgramData\Avira\AntiVir Desktop\INFECTED\56524d3b.qua - OK
C:\ProgramData\Avira\AntiVir Desktop\INFECTED\5654aab5.qua gepackt von XOREXE
>C:\ProgramData\Avira\AntiVir Desktop\INFECTED\5654aab5.qua - OK
C:\ProgramData\Avira\AntiVir Desktop\INFECTED\5666ac9e.qua gepackt von XOREXE
>C:\ProgramData\Avira\AntiVir Desktop\INFECTED\5666ac9e.qua - OK
C:\ProgramData\Avira\AntiVir Desktop\INFECTED\56914630.qua gepackt von XOREXE
>C:\ProgramData\Avira\AntiVir Desktop\INFECTED\56914630.qua - OK
C:\ProgramData\Avira\AntiVir Desktop\INFECTED\56ad4259.qua gepackt von XOREXE
>C:\ProgramData\Avira\AntiVir Desktop\INFECTED\56ad4259.qua - OK
C:\ProgramData\Avira\AntiVir Desktop\INFECTED\56df6e4d.qua gepackt von XOREXE
>C:\ProgramData\Avira\AntiVir Desktop\INFECTED\56df6e4d.qua - OK
C:\ProgramData\Avira\AntiVir Desktop\INFECTED\56fca032.qua gepackt von XOREXE
>C:\ProgramData\Avira\AntiVir Desktop\INFECTED\56fca032.qua - OK
C:\ProgramData\Avira\AntiVir Desktop\INFECTED\571545f7.qua gepackt von XOREXE
>C:\ProgramData\Avira\AntiVir Desktop\INFECTED\571545f7.qua - OK
Code:
C:\Users\All Users\Avira\AntiVir Desktop\INFECTED\1cd533b2.qua gepackt von XOREXE
>C:\Users\All Users\Avira\AntiVir Desktop\INFECTED\1cd533b2.qua - OK
C:\Users\All Users\Avira\AntiVir Desktop\INFECTED\1da4b7cc.qua gepackt von XOREXE
>C:\Users\All Users\Avira\AntiVir Desktop\INFECTED\1da4b7cc.qua - OK
C:\Users\All Users\Avira\AntiVir Desktop\INFECTED\4d568f74.qua gepackt von XOREXE
>C:\Users\All Users\Avira\AntiVir Desktop\INFECTED\4d568f74.qua - OK
C:\Users\All Users\Avira\AntiVir Desktop\INFECTED\4d668aa3.qua gepackt von XOREXE
>C:\Users\All Users\Avira\AntiVir Desktop\INFECTED\4d668aa3.qua - OK
C:\Users\All Users\Avira\AntiVir Desktop\INFECTED\4e4841ea.qua gepackt von XOREXE
>C:\Users\All Users\Avira\AntiVir Desktop\INFECTED\4e4841ea.qua - OK
C:\Users\All Users\Avira\AntiVir Desktop\INFECTED\4e8a695a.qua gepackt von XOREXE
>C:\Users\All Users\Avira\AntiVir Desktop\INFECTED\4e8a695a.qua - OK
C:\Users\All Users\Avira\AntiVir Desktop\INFECTED\4ec38512.qua gepackt von XOREXE
>C:\Users\All Users\Avira\AntiVir Desktop\INFECTED\4ec38512.qua - OK
C:\Users\All Users\Avira\AntiVir Desktop\INFECTED\4ef18339.qua gepackt von XOREXE
>C:\Users\All Users\Avira\AntiVir Desktop\INFECTED\4ef18339.qua - OK
C:\Users\All Users\Avira\AntiVir Desktop\INFECTED\4ffbed24.qua gepackt von XOREXE
>C:\Users\All Users\Avira\AntiVir Desktop\INFECTED\4ffbed24.qua - OK
C:\Users\All Users\Avira\AntiVir Desktop\INFECTED\55aaa039.qua gepackt von XOREXE
>C:\Users\All Users\Avira\AntiVir Desktop\INFECTED\55aaa039.qua - OK
C:\Users\All Users\Avira\AntiVir Desktop\INFECTED\55c1a0d3.qua gepackt von XOREXE
>C:\Users\All Users\Avira\AntiVir Desktop\INFECTED\55c1a0d3.qua - OK
C:\Users\All Users\Avira\AntiVir Desktop\INFECTED\55f1a504.qua gepackt von XOREXE
>C:\Users\All Users\Avira\AntiVir Desktop\INFECTED\55f1a504.qua - OK
C:\Users\All Users\Avira\AntiVir Desktop\INFECTED\55f3afb2.qua gepackt von XOREXE
>C:\Users\All Users\Avira\AntiVir Desktop\INFECTED\55f3afb2.qua - OK
C:\Users\All Users\Avira\AntiVir Desktop\INFECTED\561c4eae.qua gepackt von XOREXE
>C:\Users\All Users\Avira\AntiVir Desktop\INFECTED\561c4eae.qua - OK
C:\Users\All Users\Avira\AntiVir Desktop\INFECTED\56314955.qua gepackt von XOREXE
>C:\Users\All Users\Avira\AntiVir Desktop\INFECTED\56314955.qua - OK
C:\Users\All Users\Avira\AntiVir Desktop\INFECTED\56324794.qua gepackt von XOREXE
>C:\Users\All Users\Avira\AntiVir Desktop\INFECTED\56324794.qua - OK
C:\Users\All Users\Avira\AntiVir Desktop\INFECTED\564c46e1.qua gepackt von XOREXE
>C:\Users\All Users\Avira\AntiVir Desktop\INFECTED\564c46e1.qua - OK
C:\Users\All Users\Avira\AntiVir Desktop\INFECTED\56524d3b.qua gepackt von XOREXE
>C:\Users\All Users\Avira\AntiVir Desktop\INFECTED\56524d3b.qua - OK
C:\Users\All Users\Avira\AntiVir Desktop\INFECTED\5654aab5.qua gepackt von XOREXE
>C:\Users\All Users\Avira\AntiVir Desktop\INFECTED\5654aab5.qua - OK
C:\Users\All Users\Avira\AntiVir Desktop\INFECTED\5666ac9e.qua gepackt von XOREXE
>C:\Users\All Users\Avira\AntiVir Desktop\INFECTED\5666ac9e.qua - OK
C:\Users\All Users\Avira\AntiVir Desktop\INFECTED\56914630.qua gepackt von XOREXE
>C:\Users\All Users\Avira\AntiVir Desktop\INFECTED\56914630.qua - OK
C:\Users\All Users\Avira\AntiVir Desktop\INFECTED\56ad4259.qua gepackt von XOREXE
>C:\Users\All Users\Avira\AntiVir Desktop\INFECTED\56ad4259.qua - OK
C:\Users\All Users\Avira\AntiVir Desktop\INFECTED\56df6e4d.qua gepackt von XOREXE
>C:\Users\All Users\Avira\AntiVir Desktop\INFECTED\56df6e4d.qua - OK
C:\Users\All Users\Avira\AntiVir Desktop\INFECTED\56fca032.qua gepackt von XOREXE
>C:\Users\All Users\Avira\AntiVir Desktop\INFECTED\56fca032.qua - OK
C:\Users\All Users\Avira\AntiVir Desktop\INFECTED\571545f7.qua gepackt von XOREXE
>C:\Users\All Users\Avira\AntiVir Desktop\INFECTED\571545f7.qua - OK
Gruffalo

Chris4You 18.06.2012 07:11
Hi,

Cureit hat die Quarantäne von Avira "aufgeräumt"... aber nichts neues gefunden, sollte ok sein..

chris

Gruffalo 18.06.2012 08:28
Hallo Chris,
das beruhigt mich ungemein. Vielen herzlichen Dank für deine Hilfe! Das ist wirklich super!
Gruffalo


Alle Zeitangaben in WEZ +1. Es ist jetzt 05:37 Uhr.

Copyright ©2000-2024, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129