Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)
-   -   Windows Verschlüsselungstrojaner - Logfile bereits erstellt - was nun? (https://www.trojaner-board.de/117153-windows-verschluesselungstrojaner-logfile-bereits-erstellt.html)

ninifee 01.07.2012 22:25

Ich poste das einfach mal wieder in diesem [code]..

Code:

23:16:52.0343 1840        TDSS rootkit removing tool 2.7.43.0 Jun 29 2012 17:54:22
23:16:52.0609 1840        ============================================================
23:16:52.0609 1840        Current date / time: 2012/07/01 23:16:52.0609
23:16:52.0609 1840        SystemInfo:
23:16:52.0609 1840       
23:16:52.0609 1840        OS Version: 5.1.2600 ServicePack: 3.0
23:16:52.0609 1840        Product type: Workstation
23:16:52.0609 1840        ComputerName: NAME-BQC30SBMP9
23:16:52.0609 1840        UserName: Susa
23:16:52.0609 1840        Windows directory: C:\WINDOWS
23:16:52.0609 1840        System windows directory: C:\WINDOWS
23:16:52.0609 1840        Processor architecture: Intel x86
23:16:52.0609 1840        Number of processors: 2
23:16:52.0609 1840        Page size: 0x1000
23:16:52.0609 1840        Boot type: Normal boot
23:16:52.0609 1840        ============================================================
23:16:55.0875 1840        Drive \Device\Harddisk0\DR0 - Size: 0x25433D6000 (149.05 Gb), SectorSize: 0x200, Cylinders: 0x4C01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050
23:16:55.0890 1840        ============================================================
23:16:55.0890 1840        \Device\Harddisk0\DR0:
23:16:55.0921 1840        MBR partitions:
23:16:55.0921 1840        \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x88E80A9
23:16:55.0921 1840        \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x88E80E8, BlocksNum 0x88E4227
23:16:55.0921 1840        ============================================================
23:16:55.0968 1840        C: <-> \Device\Harddisk0\DR0\Partition0
23:16:56.0062 1840        D: <-> \Device\Harddisk0\DR0\Partition1
23:16:56.0109 1840        ============================================================
23:16:56.0109 1840        Initialize success
23:16:56.0109 1840        ============================================================
23:17:19.0359 2580        ============================================================
23:17:19.0359 2580        Scan started
23:17:19.0359 2580        Mode: Manual;
23:17:19.0359 2580        ============================================================
23:17:19.0984 2580        Abiosdsk - ok
23:17:20.0000 2580        abp480n5 - ok
23:17:20.0046 2580        ACPI            (ac407f1a62c3a300b4f2b5a9f1d55b2c) C:\WINDOWS\system32\DRIVERS\ACPI.sys
23:17:20.0062 2580        ACPI - ok
23:17:20.0078 2580        ACPIEC          (9e1ca3160dafb159ca14f83b1e317f75) C:\WINDOWS\system32\DRIVERS\ACPIEC.sys
23:17:20.0093 2580        ACPIEC - ok
23:17:20.0109 2580        adpu160m - ok
23:17:20.0156 2580        aec            (8bed39e3c35d6a489438b8141717a557) C:\WINDOWS\system32\drivers\aec.sys
23:17:20.0156 2580        aec - ok
23:17:20.0218 2580        AFD            (1e44bc1e83d8fd2305f8d452db109cf9) C:\WINDOWS\System32\drivers\afd.sys
23:17:20.0234 2580        AFD - ok
23:17:20.0234 2580        Aha154x - ok
23:17:20.0265 2580        aic78u2 - ok
23:17:20.0281 2580        aic78xx - ok
23:17:20.0328 2580        Alerter        (738d80cc01d7bc7584be917b7f544394) C:\WINDOWS\system32\alrsvc.dll
23:17:20.0328 2580        Alerter - ok
23:17:20.0359 2580        ALG            (190cd73d4984f94d823f9444980513e5) C:\WINDOWS\System32\alg.exe
23:17:20.0359 2580        ALG - ok
23:17:20.0375 2580        AliIde - ok
23:17:20.0609 2580        Ambfilt        (f6af59d6eee5e1c304f7f73706ad11d8) C:\WINDOWS\system32\drivers\Ambfilt.sys
23:17:20.0671 2580        Ambfilt - ok
23:17:20.0765 2580        amsint - ok
23:17:20.0875 2580        Apple Mobile Device (3debbecf665dcdde3a95d9b902010817) C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleMobileDeviceService.exe
23:17:20.0875 2580        Apple Mobile Device - ok
23:17:20.0890 2580        AppMgmt - ok
23:17:21.0109 2580        AR5416          (e0ee769d14128014965e03b433f5f46e) C:\WINDOWS\system32\DRIVERS\athw.sys
23:17:21.0156 2580        AR5416 - ok
23:17:21.0281 2580        asc - ok
23:17:21.0296 2580        asc3350p - ok
23:17:21.0312 2580        asc3550 - ok
23:17:21.0421 2580        aspnet_state    (0e5e4957549056e2bf2c49f4f6b601ad) C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
23:17:21.0453 2580        aspnet_state - ok
23:17:21.0484 2580        AsusACPI        (12415a4b61ded200fe9932b47a35fa42) C:\WINDOWS\system32\DRIVERS\ASUSACPI.sys
23:17:21.0484 2580        AsusACPI - ok
23:17:21.0515 2580        AsyncMac        (b153affac761e7f5fcfa822b9c4e97bc) C:\WINDOWS\system32\DRIVERS\asyncmac.sys
23:17:21.0515 2580        AsyncMac - ok
23:17:21.0578 2580        atapi          (9f3a2f5aa6875c72bf062c712cfa2674) C:\WINDOWS\system32\DRIVERS\atapi.sys
23:17:21.0578 2580        atapi - ok
23:17:21.0593 2580        Atdisk - ok
23:17:21.0671 2580        Atmarpc        (9916c1225104ba14794209cfa8012159) C:\WINDOWS\system32\DRIVERS\atmarpc.sys
23:17:21.0671 2580        Atmarpc - ok
23:17:21.0718 2580        AudioSrv        (58ed0d5452df7be732193e7999c6b9a4) C:\WINDOWS\System32\audiosrv.dll
23:17:21.0734 2580        AudioSrv - ok
23:17:21.0781 2580        audstub        (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys
23:17:21.0781 2580        audstub - ok
23:17:21.0937 2580        BBSvc          (01a24b415926bb5f772dbe12459d97de) C:\Programme\Microsoft\BingBar\BBSvc.EXE
23:17:21.0953 2580        BBSvc - ok
23:17:22.0015 2580        BBUpdate        (785de7abda13309d6065305542829e76) C:\Programme\Microsoft\BingBar\SeaPort.EXE
23:17:22.0031 2580        BBUpdate - ok
23:17:22.0078 2580        Beep            (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys
23:17:22.0078 2580        Beep - ok
23:17:22.0171 2580        BITS            (d6f603772a789bb3228f310d650b8bd1) C:\WINDOWS\system32\qmgr.dll
23:17:22.0218 2580        BITS - ok
23:17:22.0250 2580        BMLoad          (70cd6d71fc48bbbd1385d7b35aeadecc) C:\WINDOWS\system32\drivers\BMLoad.sys
23:17:22.0265 2580        BMLoad - ok
23:17:22.0343 2580        Bonjour Service (db5bea73edaf19ac68b2c0fad0f92b1a) C:\Programme\Bonjour\mDNSResponder.exe
23:17:22.0359 2580        Bonjour Service - ok
23:17:22.0421 2580        Browser        (b42057f06bbb98b31876c0b3f2b54e33) C:\WINDOWS\System32\browser.dll
23:17:22.0421 2580        Browser - ok
23:17:22.0531 2580        btaudio        (4b43dfe1c1fbb305a1dc5504ef9bb34e) C:\WINDOWS\system32\drivers\btaudio.sys
23:17:22.0562 2580        btaudio - ok
23:17:22.0609 2580        BTDriver        (2f9f111d31aa3fbbe5781d829a4524e6) C:\WINDOWS\system32\DRIVERS\btport.sys
23:17:22.0609 2580        BTDriver - ok
23:17:22.0781 2580        BTKRNL          (70455baffc078b6152d1e52376296467) C:\WINDOWS\system32\DRIVERS\btkrnl.sys
23:17:22.0812 2580        BTKRNL - ok
23:17:22.0921 2580        btwdins        (e43f7709f36444681978f9dc067a976b) C:\Programme\WIDCOMM\Bluetooth Software\bin\btwdins.exe
23:17:22.0937 2580        btwdins - ok
23:17:22.0968 2580        BTWDNDIS        (485020a1e1fc5c51a800ca69c618d881) C:\WINDOWS\system32\DRIVERS\btwdndis.sys
23:17:22.0984 2580        BTWDNDIS - ok
23:17:23.0015 2580        btwhid          (949eca9c56f657c06d3166d51f3226c7) C:\WINDOWS\system32\DRIVERS\btwhid.sys
23:17:23.0015 2580        btwhid - ok
23:17:23.0031 2580        BTWUSB          (2cfc2bd8785f82a42fcad83de1fa5a36) C:\WINDOWS\system32\Drivers\btwusb.sys
23:17:23.0031 2580        BTWUSB - ok
23:17:23.0078 2580        cbidf2k        (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys
23:17:23.0078 2580        cbidf2k - ok
23:17:23.0109 2580        CCDECODE        (0be5aef125be881c4f854c554f2b025c) C:\WINDOWS\system32\DRIVERS\CCDECODE.sys
23:17:23.0109 2580        CCDECODE - ok
23:17:23.0125 2580        cd20xrnt - ok
23:17:23.0171 2580        Cdaudio        (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS\system32\drivers\Cdaudio.sys
23:17:23.0171 2580        Cdaudio - ok
23:17:23.0187 2580        Cdfs            (c885b02847f5d2fd45a24e219ed93b32) C:\WINDOWS\system32\drivers\Cdfs.sys
23:17:23.0203 2580        Cdfs - ok
23:17:23.0234 2580        Cdrom          (1f4260cc5b42272d71f79e570a27a4fe) C:\WINDOWS\system32\DRIVERS\cdrom.sys
23:17:23.0234 2580        Cdrom - ok
23:17:23.0250 2580        Changer - ok
23:17:23.0281 2580        CiSvc          (28e3040d1f1ca2008cd6b29dfebc9a5e) C:\WINDOWS\system32\cisvc.exe
23:17:23.0281 2580        CiSvc - ok
23:17:23.0296 2580        ClipSrv        (778a30ed3c134eb7e406afc407e9997d) C:\WINDOWS\system32\clipsrv.exe
23:17:23.0296 2580        ClipSrv - ok
23:17:23.0390 2580        clr_optimization_v2.0.50727_32 (d87acaed61e417bba546ced5e7e36d9c) C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
23:17:23.0437 2580        clr_optimization_v2.0.50727_32 - ok
23:17:23.0484 2580        CmBatt          (0f6c187d38d98f8df904589a5f94d411) C:\WINDOWS\system32\DRIVERS\CmBatt.sys
23:17:23.0484 2580        CmBatt - ok
23:17:23.0500 2580        CmdIde - ok
23:17:23.0515 2580        Compbatt        (6e4c9f21f0fae8940661144f41b13203) C:\WINDOWS\system32\DRIVERS\compbatt.sys
23:17:23.0531 2580        Compbatt - ok
23:17:23.0531 2580        COMSysApp - ok
23:17:23.0562 2580        Cpqarray - ok
23:17:23.0625 2580        CryptSvc        (611f824e5c703a5a899f84c5f1699e4d) C:\WINDOWS\System32\cryptsvc.dll
23:17:23.0640 2580        CryptSvc - ok
23:17:23.0640 2580        dac2w2k - ok
23:17:23.0656 2580        dac960nt - ok
23:17:23.0750 2580        DcomLaunch      (3127afbf2c1ed0ab14a1bbb7aaecb85b) C:\WINDOWS\system32\rpcss.dll
23:17:23.0765 2580        DcomLaunch - ok
23:17:23.0828 2580        Dhcp            (c29a1c9b75ba38fa37f8c44405dec360) C:\WINDOWS\System32\dhcpcsvc.dll
23:17:23.0843 2580        Dhcp - ok
23:17:23.0875 2580        Disk            (044452051f3e02e7963599fc8f4f3e25) C:\WINDOWS\system32\DRIVERS\disk.sys
23:17:23.0890 2580        Disk - ok
23:17:23.0890 2580        dmadmin - ok
23:17:24.0031 2580        dmboot          (0dcfc8395a99fecbb1ef771cec7fe4ea) C:\WINDOWS\system32\drivers\dmboot.sys
23:17:24.0062 2580        dmboot - ok
23:17:24.0093 2580        dmio            (53720ab12b48719d00e327da470a619a) C:\WINDOWS\system32\drivers\dmio.sys
23:17:24.0109 2580        dmio - ok
23:17:24.0125 2580        dmload          (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys
23:17:24.0140 2580        dmload - ok
23:17:24.0140 2580        dmserver        (25c83ffbba13b554eb6d59a9b2e2ee78) C:\WINDOWS\System32\dmserver.dll
23:17:24.0156 2580        dmserver - ok
23:17:24.0203 2580        DMusic          (8a208dfcf89792a484e76c40e5f50b45) C:\WINDOWS\system32\drivers\DMusic.sys
23:17:24.0203 2580        DMusic - ok
23:17:24.0250 2580        Dnscache        (407f3227ac618fd1ca54b335b083de07) C:\WINDOWS\System32\dnsrslvr.dll
23:17:24.0250 2580        Dnscache - ok
23:17:24.0281 2580        Dot3svc        (676e36c4ff5bcea1900f44182b9723e6) C:\WINDOWS\System32\dot3svc.dll
23:17:24.0281 2580        Dot3svc - ok
23:17:24.0296 2580        dpti2o - ok
23:17:24.0328 2580        drmkaud        (8f5fcff8e8848afac920905fbd9d33c8) C:\WINDOWS\system32\drivers\drmkaud.sys
23:17:24.0328 2580        drmkaud - ok
23:17:24.0359 2580        EapHost        (4e4f2fddab0a0736d7671134dcce91fb) C:\WINDOWS\System32\eapsvc.dll
23:17:24.0375 2580        EapHost - ok
23:17:24.0375 2580        ERSvc          (877c18558d70587aa7823a1a308ac96b) C:\WINDOWS\System32\ersvc.dll
23:17:24.0390 2580        ERSvc - ok
23:17:24.0437 2580        Eventlog        (a3edbe9053889fb24ab22492472b39dc) C:\WINDOWS\system32\services.exe
23:17:24.0453 2580        Eventlog - ok
23:17:24.0500 2580        EventSystem    (af4f6b5739d18ca7972ab53e091cbc74) C:\WINDOWS\system32\es.dll
23:17:24.0515 2580        EventSystem - ok
23:17:24.0562 2580        Fastfat        (38d332a6d56af32635675f132548343e) C:\WINDOWS\system32\drivers\Fastfat.sys
23:17:24.0562 2580        Fastfat - ok
23:17:24.0625 2580        FastUserSwitchingCompatibility (2db7d303c36ddd055215052f118e8e75) C:\WINDOWS\System32\shsvcs.dll
23:17:24.0625 2580        FastUserSwitchingCompatibility - ok
23:17:24.0671 2580        Fdc            (92cdd60b6730b9f50f6a1a0c1f8cdc81) C:\WINDOWS\system32\drivers\Fdc.sys
23:17:24.0671 2580        Fdc - ok
23:17:24.0703 2580        Fips            (b0678a548587c5f1967b0d70bacad6c1) C:\WINDOWS\system32\drivers\Fips.sys
23:17:24.0703 2580        Fips - ok
23:17:24.0734 2580        Flpydisk        (9d27e7b80bfcdf1cdd9b555862d5e7f0) C:\WINDOWS\system32\drivers\Flpydisk.sys
23:17:24.0734 2580        Flpydisk - ok
23:17:24.0781 2580        FltMgr          (b2cf4b0786f8212cb92ed2b50c6db6b0) C:\WINDOWS\system32\DRIVERS\fltMgr.sys
23:17:24.0796 2580        FltMgr - ok
23:17:24.0906 2580        FontCache3.0.0.0 (8ba7c024070f2b7fdd98ed8a4ba41789) C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
23:17:24.0906 2580        FontCache3.0.0.0 - ok
23:17:24.0953 2580        fssfltr        (e0087225b137e57239ff40f8ae82059b) C:\WINDOWS\system32\DRIVERS\fssfltr_tdi.sys
23:17:24.0953 2580        fssfltr - ok
23:17:25.0125 2580        fsssvc          (45b52394f9624237f33a8a3d73c0b221) C:\Programme\Windows Live\Family Safety\fsssvc.exe
23:17:25.0156 2580        fsssvc - ok
23:17:25.0203 2580        Fs_Rec          (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS\system32\drivers\Fs_Rec.sys
23:17:25.0203 2580        Fs_Rec - ok
23:17:25.0265 2580        Ftdisk          (8f1955ce42e1484714b542f341647778) C:\WINDOWS\system32\DRIVERS\ftdisk.sys
23:17:25.0265 2580        Ftdisk - ok
23:17:25.0296 2580        GEARAspiWDM    (8182ff89c65e4d38b2de4bb0fb18564e) C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys
23:17:25.0296 2580        GEARAspiWDM - ok
23:17:25.0343 2580        Gpc            (0a02c63c8b144bd8c86b103dee7c86a2) C:\WINDOWS\system32\DRIVERS\msgpc.sys
23:17:25.0343 2580        Gpc - ok
23:17:25.0375 2580        HDAudBus        (573c7d0a32852b48f3058cfd8026f511) C:\WINDOWS\system32\DRIVERS\HDAudBus.sys
23:17:25.0390 2580        HDAudBus - ok
23:17:25.0437 2580        helpsvc        (cb66bf85bf599befd6c6a57c2e20357f) C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll
23:17:25.0437 2580        helpsvc - ok
23:17:25.0468 2580        HidServ        (b35da85e60c0103f2e4104532da2f12b) C:\WINDOWS\System32\hidserv.dll
23:17:25.0484 2580        HidServ - ok
23:17:25.0546 2580        HidUsb          (ccf82c5ec8a7326c3066de870c06daf1) C:\WINDOWS\system32\DRIVERS\hidusb.sys
23:17:25.0546 2580        HidUsb - ok
23:17:25.0609 2580        hkmsvc          (ed29f14101523a6e0e808107405d452c) C:\WINDOWS\System32\kmsvc.dll
23:17:25.0609 2580        hkmsvc - ok
23:17:25.0625 2580        hpn - ok
23:17:25.0656 2580        HSPADataCardusbmdm (69cfe473434102d3fb12dbc7fda0d2a7) C:\WINDOWS\system32\DRIVERS\HSPADataCardusbmdm.sys
23:17:25.0671 2580        HSPADataCardusbmdm - ok
23:17:25.0703 2580        HSPADataCardusbnmea (69cfe473434102d3fb12dbc7fda0d2a7) C:\WINDOWS\system32\DRIVERS\HSPADataCardusbnmea.sys
23:17:25.0703 2580        HSPADataCardusbnmea - ok
23:17:25.0734 2580        HSPADataCardusbser (69cfe473434102d3fb12dbc7fda0d2a7) C:\WINDOWS\system32\DRIVERS\HSPADataCardusbser.sys
23:17:25.0734 2580        HSPADataCardusbser - ok
23:17:25.0812 2580        HTTP            (f80a415ef82cd06ffaf0d971528ead38) C:\WINDOWS\system32\Drivers\HTTP.sys
23:17:25.0812 2580        HTTP - ok
23:17:25.0843 2580        HTTPFilter      (9e4adb854cebcfb81a4b36718feecd16) C:\WINDOWS\System32\w3ssl.dll
23:17:25.0859 2580        HTTPFilter - ok
23:17:25.0875 2580        hwdatacard - ok
23:17:25.0921 2580        i2omgmt - ok
23:17:25.0937 2580        i2omp - ok
23:17:25.0968 2580        i8042prt        (e283b97cfbeb86c1d86baed5f7846a92) C:\WINDOWS\system32\DRIVERS\i8042prt.sys
23:17:25.0968 2580        i8042prt - ok
23:17:26.0640 2580        ialm            (0f68e2ec713f132ffb19e45415b09679) C:\WINDOWS\system32\DRIVERS\igxpmp32.sys
23:17:26.0875 2580        ialm - ok
23:17:27.0031 2580        iaStor          (8ef427c54497c5f8a7a645990e4278c7) C:\WINDOWS\system32\drivers\iaStor.sys
23:17:27.0031 2580        iaStor - ok
23:17:27.0250 2580        idsvc          (c01ac32dc5c03076cfb852cb5da5229c) C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
23:17:27.0281 2580        idsvc - ok
23:17:27.0312 2580        Imapi          (083a052659f5310dd8b6a6cb05edcf8e) C:\WINDOWS\system32\DRIVERS\imapi.sys
23:17:27.0328 2580        Imapi - ok
23:17:27.0375 2580        ImapiService    (d4b413aa210c21e46aedd2ba5b68d38e) C:\WINDOWS\system32\imapi.exe
23:17:27.0375 2580        ImapiService - ok
23:17:27.0406 2580        ini910u - ok
23:17:28.0000 2580        IntcAzAudAddService (1ae3cff80017ef89da959350724c7194) C:\WINDOWS\system32\drivers\RtkHDAud.sys
23:17:28.0156 2580        IntcAzAudAddService - ok
23:17:28.0296 2580        IntelIde - ok
23:17:28.0343 2580        intelppm        (4c7d2750158ed6e7ad642d97bffae351) C:\WINDOWS\system32\DRIVERS\intelppm.sys
23:17:28.0343 2580        intelppm - ok
23:17:28.0359 2580        Ip6Fw          (3bb22519a194418d5fec05d800a19ad0) C:\WINDOWS\system32\DRIVERS\Ip6Fw.sys
23:17:28.0375 2580        Ip6Fw - ok
23:17:28.0375 2580        IpFilterDriver  (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
23:17:28.0390 2580        IpFilterDriver - ok
23:17:28.0390 2580        IpInIp          (b87ab476dcf76e72010632b5550955f5) C:\WINDOWS\system32\DRIVERS\ipinip.sys
23:17:28.0390 2580        IpInIp - ok
23:17:28.0437 2580        IpNat          (cc748ea12c6effde940ee98098bf96bb) C:\WINDOWS\system32\DRIVERS\ipnat.sys
23:17:28.0437 2580        IpNat - ok
23:17:28.0593 2580        iPod Service    (178fe38b7740f598391eb2f51ae4ccac) C:\Programme\iPod\bin\iPodService.exe
23:17:28.0609 2580        iPod Service - ok
23:17:28.0656 2580        IPSec          (23c74d75e36e7158768dd63d92789a91) C:\WINDOWS\system32\DRIVERS\ipsec.sys
23:17:28.0656 2580        IPSec - ok
23:17:28.0687 2580        IRENUM          (c93c9ff7b04d772627a3646d89f7bf89) C:\WINDOWS\system32\DRIVERS\irenum.sys
23:17:28.0703 2580        IRENUM - ok
23:17:28.0734 2580        isapnp          (6dfb88f64135c525433e87648bda30de) C:\WINDOWS\system32\DRIVERS\isapnp.sys
23:17:28.0750 2580        isapnp - ok
23:17:28.0843 2580        JavaQuickStarterService (9ae07549a0d691a103faf8946554bdb7) C:\Programme\Java\jre6\bin\jqs.exe
23:17:28.0859 2580        JavaQuickStarterService - ok
23:17:28.0906 2580        Kbdclass        (1704d8c4c8807b889e43c649b478a452) C:\WINDOWS\system32\DRIVERS\kbdclass.sys
23:17:28.0906 2580        Kbdclass - ok
23:17:28.0968 2580        kmixer          (692bcf44383d056aed41b045a323d378) C:\WINDOWS\system32\drivers\kmixer.sys
23:17:28.0968 2580        kmixer - ok
23:17:29.0031 2580        KSecDD          (b467646c54cc746128904e1654c750c1) C:\WINDOWS\system32\drivers\KSecDD.sys
23:17:29.0046 2580        KSecDD - ok
23:17:29.0062 2580        L1c            (6c8658587e91ea25b0fd2e71781ad228) C:\WINDOWS\system32\DRIVERS\l1c51x86.sys
23:17:29.0062 2580        L1c - ok
23:17:29.0125 2580        LanmanServer    (2bbdcb79900990f0716dfcb714e72de7) C:\WINDOWS\System32\srvsvc.dll
23:17:29.0125 2580        LanmanServer - ok
23:17:29.0156 2580        lanmanworkstation (1869b14b06b44b44af70548e1ea3303f) C:\WINDOWS\System32\wkssvc.dll
23:17:29.0171 2580        lanmanworkstation - ok
23:17:29.0171 2580        lbrtfdc - ok
23:17:29.0234 2580        LmHosts        (636714b7d43c8d0c80449123fd266920) C:\WINDOWS\System32\lmhsvc.dll
23:17:29.0250 2580        LmHosts - ok
23:17:29.0281 2580        massfilter      (d5673785903639d186dc345ff86f423f) C:\WINDOWS\system32\drivers\massfilter.sys
23:17:29.0281 2580        massfilter - ok
23:17:29.0312 2580        MBAMProtector  (fb097bbc1a18f044bd17bd2fccf97865) C:\WINDOWS\system32\drivers\mbam.sys
23:17:29.0312 2580        MBAMProtector - ok
23:17:29.0421 2580        MBAMService    (ba400ed640bca1eae5c727ae17c10207) C:\Programme\Malwarebytes' Anti-Malware\mbamservice.exe
23:17:29.0437 2580        MBAMService - ok
23:17:29.0484 2580        Messenger      (b7550a7107281d170ce85524b1488c98) C:\WINDOWS\System32\msgsvc.dll
23:17:29.0500 2580        Messenger - ok
23:17:29.0546 2580        mnmdd          (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS\system32\drivers\mnmdd.sys
23:17:29.0546 2580        mnmdd - ok
23:17:29.0578 2580        mnmsrvc        (c2f1d365fd96791b037ee504868065d3) C:\WINDOWS\system32\mnmsrvc.exe
23:17:29.0578 2580        mnmsrvc - ok
23:17:29.0625 2580        Modem          (6fb74ebd4ec57a6f1781de3852cc3362) C:\WINDOWS\system32\drivers\Modem.sys
23:17:29.0625 2580        Modem - ok
23:17:29.0812 2580        Monfilt        (9fa7207d1b1adead88ae8eed9cdbbaa5) C:\WINDOWS\system32\drivers\Monfilt.sys
23:17:29.0875 2580        Monfilt - ok
23:17:29.0921 2580        Mouclass        (b24ce8005deab254c0251e15cb71d802) C:\WINDOWS\system32\DRIVERS\mouclass.sys
23:17:29.0937 2580        Mouclass - ok
23:17:29.0984 2580        mouhid          (66a6f73c74e1791464160a7065ce711a) C:\WINDOWS\system32\DRIVERS\mouhid.sys
23:17:29.0984 2580        mouhid - ok
23:17:30.0031 2580        MountMgr        (a80b9a0bad1b73637dbcbba7df72d3fd) C:\WINDOWS\system32\drivers\MountMgr.sys
23:17:30.0031 2580        MountMgr - ok
23:17:30.0125 2580        MozillaMaintenance (96aa8ba23142cc8e2b30f3cae0c80254) C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe
23:17:30.0140 2580        MozillaMaintenance - ok
23:17:30.0140 2580        mraid35x - ok
23:17:30.0187 2580        MRxDAV          (11d42bb6206f33fbb3ba0288d3ef81bd) C:\WINDOWS\system32\DRIVERS\mrxdav.sys
23:17:30.0203 2580        MRxDAV - ok
23:17:30.0281 2580        MRxSmb          (7d304a5eb4344ebeeab53a2fe3ffb9f0) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
23:17:30.0296 2580        MRxSmb - ok
23:17:30.0328 2580        MSDTC          (35a031af38c55f92d28aa03ee9f12cc9) C:\WINDOWS\system32\msdtc.exe
23:17:30.0343 2580        MSDTC - ok
23:17:30.0375 2580        Msfs            (c941ea2454ba8350021d774daf0f1027) C:\WINDOWS\system32\drivers\Msfs.sys
23:17:30.0375 2580        Msfs - ok
23:17:30.0421 2580        MsgPlusService  (3f3d6e8bd31b3c017d0ab24cd5ec0d05) C:\Programme\Yuna Software\Messenger Plus! for Skype\MsgPlusForSkypeService.exe
23:17:30.0421 2580        MsgPlusService - ok
23:17:30.0437 2580        MSIServer - ok
23:17:30.0468 2580        MSKSSRV        (d1575e71568f4d9e14ca56b7b0453bf1) C:\WINDOWS\system32\drivers\MSKSSRV.sys
23:17:30.0468 2580        MSKSSRV - ok
23:17:30.0500 2580        MSPCLOCK        (325bb26842fc7ccc1fcce2c457317f3e) C:\WINDOWS\system32\drivers\MSPCLOCK.sys
23:17:30.0500 2580        MSPCLOCK - ok
23:17:30.0531 2580        MSPQM          (bad59648ba099da4a17680b39730cb3d) C:\WINDOWS\system32\drivers\MSPQM.sys
23:17:30.0531 2580        MSPQM - ok
23:17:30.0578 2580        mssmbios        (af5f4f3f14a8ea2c26de30f7a1e17136) C:\WINDOWS\system32\DRIVERS\mssmbios.sys
23:17:30.0578 2580        mssmbios - ok
23:17:30.0593 2580        MSTEE          (e53736a9e30c45fa9e7b5eac55056d1d) C:\WINDOWS\system32\drivers\MSTEE.sys
23:17:30.0593 2580        MSTEE - ok
23:17:30.0640 2580        Mup            (de6a75f5c270e756c5508d94b6cf68f5) C:\WINDOWS\system32\drivers\Mup.sys
23:17:30.0640 2580        Mup - ok
23:17:30.0656 2580        NABTSFEC        (5b50f1b2a2ed47d560577b221da734db) C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys
23:17:30.0671 2580        NABTSFEC - ok
23:17:30.0750 2580        napagent        (46bb15ae2ac7d025d6d2567b876817bd) C:\WINDOWS\System32\qagentrt.dll
23:17:30.0765 2580        napagent - ok
23:17:30.0812 2580        NDIS            (1df7f42665c94b825322fae71721130d) C:\WINDOWS\system32\drivers\NDIS.sys
23:17:30.0828 2580        NDIS - ok
23:17:30.0859 2580        NdisIP          (7ff1f1fd8609c149aa432f95a8163d97) C:\WINDOWS\system32\DRIVERS\NdisIP.sys
23:17:30.0859 2580        NdisIP - ok
23:17:30.0906 2580        NdisTapi        (0109c4f3850dfbab279542515386ae22) C:\WINDOWS\system32\DRIVERS\ndistapi.sys
23:17:30.0906 2580        NdisTapi - ok
23:17:30.0953 2580        Ndisuio        (f927a4434c5028758a842943ef1a3849) C:\WINDOWS\system32\DRIVERS\ndisuio.sys
23:17:30.0953 2580        Ndisuio - ok
23:17:30.0968 2580        NdisWan        (edc1531a49c80614b2cfda43ca8659ab) C:\WINDOWS\system32\DRIVERS\ndiswan.sys
23:17:30.0984 2580        NdisWan - ok
23:17:31.0031 2580        NDProxy        (9282bd12dfb069d3889eb3fcc1000a9b) C:\WINDOWS\system32\drivers\NDProxy.sys
23:17:31.0031 2580        NDProxy - ok
23:17:31.0046 2580        NetBIOS        (5d81cf9a2f1a3a756b66cf684911cdf0) C:\WINDOWS\system32\DRIVERS\netbios.sys
23:17:31.0062 2580        NetBIOS - ok
23:17:31.0109 2580        NetBT          (74b2b2f5bea5e9a3dc021d685551bd3d) C:\WINDOWS\system32\DRIVERS\netbt.sys
23:17:31.0125 2580        NetBT - ok
23:17:31.0156 2580        NetDDE          (8ace4251bffd09ce75679fe940e996cc) C:\WINDOWS\system32\netdde.exe
23:17:31.0171 2580        NetDDE - ok
23:17:31.0187 2580        NetDDEdsdm      (8ace4251bffd09ce75679fe940e996cc) C:\WINDOWS\system32\netdde.exe
23:17:31.0187 2580        NetDDEdsdm - ok
23:17:31.0218 2580        Netlogon        (afb8261b56cba0d86aeb6df682af9785) C:\WINDOWS\system32\lsass.exe
23:17:31.0234 2580        Netlogon - ok
23:17:31.0296 2580        Netman          (e6d88f1f6745bf00b57e7855a2ab696c) C:\WINDOWS\System32\netman.dll
23:17:31.0312 2580        Netman - ok
23:17:31.0437 2580        NetTcpPortSharing (d34612c5d02d026535b3095d620626ae) C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
23:17:31.0437 2580        NetTcpPortSharing - ok
23:17:31.0515 2580        Nla            (f1b67b6b0751ae0e6e964b02821206a3) C:\WINDOWS\System32\mswsock.dll
23:17:31.0515 2580        Nla - ok
23:17:31.0562 2580        Npfs            (3182d64ae053d6fb034f44b6def8034a) C:\WINDOWS\system32\drivers\Npfs.sys
23:17:31.0562 2580        Npfs - ok
23:17:31.0656 2580        Ntfs            (78a08dd6a8d65e697c18e1db01c5cdca) C:\WINDOWS\system32\drivers\Ntfs.sys
23:17:31.0687 2580        Ntfs - ok
23:17:31.0687 2580        NtLmSsp        (afb8261b56cba0d86aeb6df682af9785) C:\WINDOWS\system32\lsass.exe
23:17:31.0703 2580        NtLmSsp - ok
23:17:31.0765 2580        NtmsSvc        (56af4064996fa5bac9c449b1514b4770) C:\WINDOWS\system32\ntmssvc.dll
23:17:31.0781 2580        NtmsSvc - ok
23:17:31.0812 2580        Null            (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys
23:17:31.0812 2580        Null - ok
23:17:31.0859 2580        NwlnkFlt        (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
23:17:31.0859 2580        NwlnkFlt - ok
23:17:31.0875 2580        NwlnkFwd        (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
23:17:31.0875 2580        NwlnkFwd - ok
23:17:32.0078 2580        odserv          (785f487a64950f3cb8e9f16253ba3b7b) C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE12\ODSERV.EXE
23:17:32.0093 2580        odserv - ok
23:17:32.0156 2580        ose            (5a432a042dae460abe7199b758e8606c) C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE
23:17:32.0171 2580        ose - ok
23:17:32.0218 2580        Parport        (f84785660305b9b903fb3bca8ba29837) C:\WINDOWS\system32\drivers\Parport.sys
23:17:32.0218 2580        Parport - ok
23:17:32.0250 2580        PartMgr        (beb3ba25197665d82ec7065b724171c6) C:\WINDOWS\system32\drivers\PartMgr.sys
23:17:32.0250 2580        PartMgr - ok
23:17:32.0296 2580        ParVdm          (c2bf987829099a3eaa2ca6a0a90ecb4f) C:\WINDOWS\system32\drivers\ParVdm.sys
23:17:32.0296 2580        ParVdm - ok
23:17:32.0328 2580        PCI            (387e8dedc343aa2d1efbc30580273acd) C:\WINDOWS\system32\DRIVERS\pci.sys
23:17:32.0328 2580        PCI - ok
23:17:32.0359 2580        PCIDump - ok
23:17:32.0375 2580        PCIIde          (59ba86d9a61cbcf4df8e598c331f5b82) C:\WINDOWS\system32\DRIVERS\pciide.sys
23:17:32.0375 2580        PCIIde - ok
23:17:32.0421 2580        Pcmcia          (a2a966b77d61847d61a3051df87c8c97) C:\WINDOWS\system32\drivers\Pcmcia.sys
23:17:32.0421 2580        Pcmcia - ok
23:17:32.0437 2580        PDCOMP - ok
23:17:32.0453 2580        PDFRAME - ok
23:17:32.0468 2580        PDRELI - ok
23:17:32.0484 2580        PDRFRAME - ok
23:17:32.0500 2580        perc2 - ok
23:17:32.0515 2580        perc2hib - ok
23:17:32.0593 2580        PlugPlay        (a3edbe9053889fb24ab22492472b39dc) C:\WINDOWS\system32\services.exe
23:17:32.0609 2580        PlugPlay - ok
23:17:32.0625 2580        PolicyAgent    (afb8261b56cba0d86aeb6df682af9785) C:\WINDOWS\system32\lsass.exe
23:17:32.0625 2580        PolicyAgent - ok
23:17:32.0656 2580        PptpMiniport    (efeec01b1d3cf84f16ddd24d9d9d8f99) C:\WINDOWS\system32\DRIVERS\raspptp.sys
23:17:32.0671 2580        PptpMiniport - ok
23:17:32.0671 2580        ProtectedStorage (afb8261b56cba0d86aeb6df682af9785) C:\WINDOWS\system32\lsass.exe
23:17:32.0671 2580        ProtectedStorage - ok
23:17:32.0687 2580        PSched          (09298ec810b07e5d582cb3a3f9255424) C:\WINDOWS\system32\DRIVERS\psched.sys
23:17:32.0703 2580        PSched - ok
23:17:32.0718 2580        Ptilink        (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys
23:17:32.0718 2580        Ptilink - ok
23:17:32.0734 2580        ql1080 - ok
23:17:32.0750 2580        Ql10wnt - ok
23:17:32.0750 2580        ql12160 - ok
23:17:32.0765 2580        ql1240 - ok
23:17:32.0781 2580        ql1280 - ok
23:17:32.0812 2580        RasAcd          (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERS\rasacd.sys
23:17:32.0828 2580        RasAcd - ok
23:17:32.0859 2580        RasAuto        (f5ba6caccdb66c8f048e867563203246) C:\WINDOWS\System32\rasauto.dll
23:17:32.0859 2580        RasAuto - ok
23:17:32.0890 2580        Rasl2tp        (11b4a627bc9614b885c4969bfa5ff8a6) C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
23:17:32.0890 2580        Rasl2tp - ok
23:17:32.0921 2580        RasMan          (f9a7b66ea345726edb5862a46b1eccd5) C:\WINDOWS\System32\rasmans.dll
23:17:32.0937 2580        RasMan - ok
23:17:32.0968 2580        RasPppoe        (5bc962f2654137c9909c3d4603587dee) C:\WINDOWS\system32\DRIVERS\raspppoe.sys
23:17:32.0968 2580        RasPppoe - ok
23:17:32.0984 2580        Raspti          (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERS\raspti.sys
23:17:32.0984 2580        Raspti - ok
23:17:33.0031 2580        Rdbss          (7ad224ad1a1437fe28d89cf22b17780a) C:\WINDOWS\system32\DRIVERS\rdbss.sys
23:17:33.0031 2580        Rdbss - ok
23:17:33.0078 2580        RDPCDD          (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
23:17:33.0078 2580        RDPCDD - ok
23:17:33.0140 2580        RDPWD          (6589db6e5969f8eee594cf71171c5028) C:\WINDOWS\system32\drivers\RDPWD.sys
23:17:33.0140 2580        RDPWD - ok
23:17:33.0187 2580        RDSessMgr      (263af18af0f3db99f574c95f284ccec9) C:\WINDOWS\system32\sessmgr.exe
23:17:33.0203 2580        RDSessMgr - ok
23:17:33.0250 2580        redbook        (ed761d453856f795a7fe056e42c36365) C:\WINDOWS\system32\DRIVERS\redbook.sys
23:17:33.0250 2580        redbook - ok
23:17:33.0296 2580        RemoteAccess    (0e97ec96d6942ceec2d188cc2eb69a01) C:\WINDOWS\System32\mprdim.dll
23:17:33.0296 2580        RemoteAccess - ok
23:17:33.0328 2580        RpcLocator      (2a02e21867497df20b8fc95631395169) C:\WINDOWS\system32\locator.exe
23:17:33.0328 2580        RpcLocator - ok
23:17:33.0437 2580        RpcSs          (3127afbf2c1ed0ab14a1bbb7aaecb85b) C:\WINDOWS\system32\rpcss.dll
23:17:33.0453 2580        RpcSs - ok
23:17:33.0484 2580        RSVP            (4bdd71b4b521521499dfd14735c4f398) C:\WINDOWS\system32\rsvp.exe
23:17:33.0500 2580        RSVP - ok
23:17:33.0515 2580        SamSs          (afb8261b56cba0d86aeb6df682af9785) C:\WINDOWS\system32\lsass.exe
23:17:33.0531 2580        SamSs - ok
23:17:33.0562 2580        SCardSvr        (dcec079fad95d36c8dd5cb6d779dfe32) C:\WINDOWS\System32\SCardSvr.exe
23:17:33.0578 2580        SCardSvr - ok
23:17:33.0640 2580        Schedule        (a050194a44d7fa8d7186ed2f4e8367ae) C:\WINDOWS\system32\schedsvc.dll
23:17:33.0656 2580        Schedule - ok
23:17:33.0687 2580        Secdrv          (90a3935d05b494a5a39d37e71f09a677) C:\WINDOWS\system32\DRIVERS\secdrv.sys
23:17:33.0687 2580        Secdrv - ok
23:17:33.0734 2580        seclogon        (bee4cfd1d48c23b44cf4b974b0b79b2b) C:\WINDOWS\System32\seclogon.dll
23:17:33.0734 2580        seclogon - ok
23:17:33.0765 2580        SENS            (2aac9b6ed9eddffb721d6452e34d67e3) C:\WINDOWS\system32\sens.dll
23:17:33.0781 2580        SENS - ok
23:17:33.0812 2580        Serial          (cf24eb4f0412c82bcd1f4f35a025e31d) C:\WINDOWS\system32\drivers\Serial.sys
23:17:33.0812 2580        Serial - ok
23:17:33.0843 2580        Sfloppy        (8e6b8c671615d126fdc553d1e2de5562) C:\WINDOWS\system32\drivers\Sfloppy.sys
23:17:33.0843 2580        Sfloppy - ok
23:17:33.0921 2580        SharedAccess    (cad058d5f8b889a87ca3eb3cf624dcef) C:\WINDOWS\System32\ipnathlp.dll
23:17:33.0937 2580        SharedAccess - ok
23:17:33.0984 2580        ShellHWDetection (2db7d303c36ddd055215052f118e8e75) C:\WINDOWS\System32\shsvcs.dll
23:17:33.0984 2580        ShellHWDetection - ok
23:17:34.0000 2580        Simbad - ok
23:17:34.0031 2580        SLIP            (866d538ebe33709a5c9f5c62b73b7d14) C:\WINDOWS\system32\DRIVERS\SLIP.sys
23:17:34.0046 2580        SLIP - ok
23:17:34.0046 2580        Sparrow - ok
23:17:34.0093 2580        splitter        (ab8b92451ecb048a4d1de7c3ffcb4a9f) C:\WINDOWS\system32\drivers\splitter.sys
23:17:34.0093 2580        splitter - ok
23:17:34.0140 2580        Spooler        (60784f891563fb1b767f70117fc2428f) C:\WINDOWS\system32\spoolsv.exe
23:17:34.0140 2580        Spooler - ok
23:17:34.0203 2580        sr              (50fa898f8c032796d3b1b9951bb5a90f) C:\WINDOWS\system32\DRIVERS\sr.sys
23:17:34.0203 2580        sr - ok
23:17:34.0234 2580        srservice      (fe77a85495065f3ad59c5c65b6c54182) C:\WINDOWS\system32\srsvc.dll
23:17:34.0250 2580        srservice - ok
23:17:34.0296 2580        Srv            (47ddfc2f003f7f9f0592c6874962a2e7) C:\WINDOWS\system32\DRIVERS\srv.sys
23:17:34.0312 2580        Srv - ok
23:17:34.0343 2580        SSDPSRV        (4df5b05dfaec29e13e1ed6f6ee12c500) C:\WINDOWS\System32\ssdpsrv.dll
23:17:34.0359 2580        SSDPSRV - ok
23:17:34.0437 2580        stisvc          (bc2c5985611c5356b24aeb370953ded9) C:\WINDOWS\system32\wiaservc.dll
23:17:34.0453 2580        stisvc - ok
23:17:34.0484 2580        streamip        (77813007ba6265c4b6098187e6ed79d2) C:\WINDOWS\system32\DRIVERS\StreamIP.sys
23:17:34.0500 2580        streamip - ok
23:17:34.0531 2580        swenum          (3941d127aef12e93addf6fe6ee027e0f) C:\WINDOWS\system32\DRIVERS\swenum.sys
23:17:34.0531 2580        swenum - ok
23:17:34.0578 2580        swmidi          (8ce882bcc6cf8a62f2b2323d95cb3d01) C:\WINDOWS\system32\drivers\swmidi.sys
23:17:34.0593 2580        swmidi - ok
23:17:34.0593 2580        SwPrv - ok
23:17:34.0609 2580        symc810 - ok
23:17:34.0625 2580        symc8xx - ok
23:17:34.0640 2580        sym_hi - ok
23:17:34.0656 2580        sym_u3 - ok
23:17:34.0718 2580        SynTP          (8e25a1dbb8527b2074af9b682f818768) C:\WINDOWS\system32\DRIVERS\SynTP.sys
23:17:34.0734 2580        SynTP - ok
23:17:34.0750 2580        sysaudio        (8b83f3ed0f1688b4958f77cd6d2bf290) C:\WINDOWS\system32\drivers\sysaudio.sys
23:17:34.0750 2580        sysaudio - ok
23:17:34.0796 2580        SysmonLog      (2903fffa2523926d6219428040dce6b9) C:\WINDOWS\system32\smlogsvc.exe
23:17:34.0796 2580        SysmonLog - ok
23:17:34.0859 2580        TapiSrv        (05903cac4b98908d55ea5774775b382e) C:\WINDOWS\System32\tapisrv.dll
23:17:34.0859 2580        TapiSrv - ok
23:17:34.0937 2580        Tcpip          (9aefa14bd6b182d61e3119fa5f436d3d) C:\WINDOWS\system32\DRIVERS\tcpip.sys
23:17:34.0937 2580        Tcpip - ok
23:17:34.0984 2580        tcpipBM        (74905ebcbb8cbdb1f3c0b1778bbcb4bc) C:\WINDOWS\system32\drivers\tcpipBM.sys
23:17:34.0984 2580        tcpipBM - ok
23:17:35.0015 2580        TDPIPE          (6471a66807f5e104e4885f5b67349397) C:\WINDOWS\system32\drivers\TDPIPE.sys
23:17:35.0015 2580        TDPIPE - ok
23:17:35.0031 2580        TDTCP          (c56b6d0402371cf3700eb322ef3aaf61) C:\WINDOWS\system32\drivers\TDTCP.sys
23:17:35.0031 2580        TDTCP - ok
23:17:35.0062 2580        TermDD          (88155247177638048422893737429d9e) C:\WINDOWS\system32\DRIVERS\termdd.sys
23:17:35.0062 2580        TermDD - ok
23:17:35.0109 2580        TermService    (b7de02c863d8f5a005a7bf375375a6a4) C:\WINDOWS\System32\termsrv.dll
23:17:35.0125 2580        TermService - ok
23:17:35.0187 2580        Themes          (2db7d303c36ddd055215052f118e8e75) C:\WINDOWS\System32\shsvcs.dll
23:17:35.0187 2580        Themes - ok
23:17:35.0203 2580        TosIde - ok
23:17:35.0250 2580        TrkWks          (626504572b175867f30f3215c04b3e2f) C:\WINDOWS\system32\trkwks.dll
23:17:35.0265 2580        TrkWks - ok
23:17:35.0312 2580        Udfs            (5787b80c2e3c5e2f56c2a233d91fa2c9) C:\WINDOWS\system32\drivers\Udfs.sys
23:17:35.0312 2580        Udfs - ok
23:17:35.0312 2580        ultra - ok
23:17:35.0406 2580        Update          (402ddc88356b1bac0ee3dd1580c76a31) C:\WINDOWS\system32\DRIVERS\update.sys
23:17:35.0406 2580        Update - ok
23:17:35.0453 2580        upnphost        (1dfd8975d8c89214b98d9387c1125b49) C:\WINDOWS\System32\upnphost.dll
23:17:35.0468 2580        upnphost - ok
23:17:35.0484 2580        UPS            (9b11e6118958e63e1fef129466e2bda7) C:\WINDOWS\System32\ups.exe
23:17:35.0500 2580        UPS - ok
23:17:35.0515 2580        USBAAPL        (83cafcb53201bbac04d822f32438e244) C:\WINDOWS\system32\Drivers\usbaapl.sys
23:17:35.0515 2580        USBAAPL - ok
23:17:35.0562 2580        usbccgp        (173f317ce0db8e21322e71b7e60a27e8) C:\WINDOWS\system32\DRIVERS\usbccgp.sys
23:17:35.0562 2580        usbccgp - ok
23:17:35.0625 2580        usbehci        (65dcf09d0e37d4c6b11b5b0b76d470a7) C:\WINDOWS\system32\DRIVERS\usbehci.sys
23:17:35.0625 2580        usbehci - ok
23:17:35.0671 2580        usbhub          (1ab3cdde553b6e064d2e754efe20285c) C:\WINDOWS\system32\DRIVERS\usbhub.sys
23:17:35.0671 2580        usbhub - ok
23:17:35.0703 2580        usbscan        (a0b8cf9deb1184fbdd20784a58fa75d4) C:\WINDOWS\system32\DRIVERS\usbscan.sys
23:17:35.0718 2580        usbscan - ok
23:17:35.0734 2580        usbstor        (a32426d9b14a089eaa1d922e0c5801a9) C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
23:17:35.0750 2580        usbstor - ok
23:17:35.0781 2580        usbuhci        (26496f9dee2d787fc3e61ad54821ffe6) C:\WINDOWS\system32\DRIVERS\usbuhci.sys
23:17:35.0781 2580        usbuhci - ok
23:17:35.0828 2580        usbvideo        (63bbfca7f390f4c49ed4b96bfb1633e0) C:\WINDOWS\system32\Drivers\usbvideo.sys
23:17:35.0828 2580        usbvideo - ok
23:17:35.0859 2580        uvclf          (c019889035cdc1a06f2febc93cbb6897) C:\WINDOWS\system32\DRIVERS\uvclf.sys
23:17:35.0859 2580        uvclf - ok
23:17:35.0921 2580        VgaSave        (0d3a8fafceacd8b7625cd549757a7df1) C:\WINDOWS\System32\drivers\vga.sys
23:17:35.0921 2580        VgaSave - ok
23:17:35.0937 2580        ViaIde - ok
23:17:35.0984 2580        VolSnap        (a5a712f4e880874a477af790b5186e1d) C:\WINDOWS\system32\drivers\VolSnap.sys
23:17:35.0984 2580        VolSnap - ok
23:17:36.0062 2580        VSS            (68f106273be29e7b7ef8266977268e78) C:\WINDOWS\System32\vssvc.exe
23:17:36.0078 2580        VSS - ok
23:17:36.0140 2580        W32Time        (7b353059e665f8b7ad2bbeaef597cf45) C:\WINDOWS\system32\w32time.dll
23:17:36.0140 2580        W32Time - ok
23:17:36.0171 2580        Wanarp          (e20b95baedb550f32dd489265c1da1f6) C:\WINDOWS\system32\DRIVERS\wanarp.sys
23:17:36.0171 2580        Wanarp - ok
23:17:36.0250 2580        Wdf01000        (bbcfeab7e871cddac2d397ee7fa91fdc) C:\WINDOWS\system32\Drivers\wdf01000.sys
23:17:36.0265 2580        Wdf01000 - ok
23:17:36.0281 2580        WDICA - ok
23:17:36.0328 2580        wdmaud          (6768acf64b18196494413695f0c3a00f) C:\WINDOWS\system32\drivers\wdmaud.sys
23:17:36.0343 2580        wdmaud - ok
23:17:36.0390 2580        WebClient      (81727c9873e3905a2ffc1ebd07265002) C:\WINDOWS\System32\webclnt.dll
23:17:36.0390 2580        WebClient - ok
23:17:36.0500 2580        winmgmt        (6f3f3973d97714cc5f906a19fe883729) C:\WINDOWS\system32\wbem\WMIsvc.dll
23:17:36.0500 2580        winmgmt - ok
23:17:36.0562 2580        WmdmPmSN        (c51b4a5c05a5475708e3c81c7765b71d) C:\WINDOWS\system32\MsPMSNSv.dll
23:17:36.0562 2580        WmdmPmSN - ok
23:17:36.0609 2580        WmiApSrv        (93908111ba57a6e60ec2fa2de202105c) C:\WINDOWS\system32\wbem\wmiapsrv.exe
23:17:36.0609 2580        WmiApSrv - ok
23:17:36.0765 2580        WMPNetworkSvc  (bf05650bb7df5e9ebdd25974e22403bb) C:\Programme\Windows Media Player\WMPNetwk.exe
23:17:36.0796 2580        WMPNetworkSvc - ok
23:17:36.0843 2580        WpdUsb          (cf4def1bf66f06964dc0d91844239104) C:\WINDOWS\system32\DRIVERS\wpdusb.sys
23:17:36.0843 2580        WpdUsb - ok
23:17:36.0890 2580        wscsvc          (300b3e84faf1a5c1f791c159ba28035d) C:\WINDOWS\system32\wscsvc.dll
23:17:36.0906 2580        wscsvc - ok
23:17:36.0921 2580        WSTCODEC        (c98b39829c2bbd34e454150633c62c78) C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS
23:17:36.0937 2580        WSTCODEC - ok
23:17:36.0953 2580        wuauserv        (7b4fe05202aa6bf9f4dfd0e6a0d8a085) C:\WINDOWS\system32\wuauserv.dll
23:17:36.0968 2580        wuauserv - ok
23:17:37.0015 2580        WudfPf          (f15feafffbb3644ccc80c5da584e6311) C:\WINDOWS\system32\DRIVERS\WudfPf.sys
23:17:37.0015 2580        WudfPf - ok
23:17:37.0031 2580        WudfRd          (28b524262bce6de1f7ef9f510ba3985b) C:\WINDOWS\system32\DRIVERS\wudfrd.sys
23:17:37.0031 2580        WudfRd - ok
23:17:37.0062 2580        WudfSvc        (05231c04253c5bc30b26cbaae680ed89) C:\WINDOWS\System32\WUDFSvc.dll
23:17:37.0078 2580        WudfSvc - ok
23:17:37.0156 2580        WZCSVC          (c4f109c005f6725162d2d12ca751e4a7) C:\WINDOWS\System32\wzcsvc.dll
23:17:37.0171 2580        WZCSVC - ok
23:17:37.0234 2580        xmlprov        (0ada34871a2e1cd2caafed1237a47750) C:\WINDOWS\System32\xmlprov.dll
23:17:37.0234 2580        xmlprov - ok
23:17:37.0296 2580        MBR (0x1B8)    (8f558eb6672622401da993e1e865c861) \Device\Harddisk0\DR0
23:17:38.0156 2580        \Device\Harddisk0\DR0 - ok
23:17:38.0156 2580        Boot (0x1200)  (26c64c34138ffaf46ce22b59d69bc2e4) \Device\Harddisk0\DR0\Partition0
23:17:38.0156 2580        \Device\Harddisk0\DR0\Partition0 - ok
23:17:38.0187 2580        Boot (0x1200)  (e60ca0fe09b255faa51152c9b4ee1437) \Device\Harddisk0\DR0\Partition1
23:17:38.0187 2580        \Device\Harddisk0\DR0\Partition1 - ok
23:17:38.0187 2580        ============================================================
23:17:38.0187 2580        Scan finished
23:17:38.0187 2580        ============================================================
23:17:38.0218 3800        Detected object count: 0
23:17:38.0218 3800        Actual detected object count: 0
23:18:25.0000 3508        ============================================================
23:18:25.0000 3508        Scan started
23:18:25.0000 3508        Mode: Manual; SigCheck; TDLFS;
23:18:25.0000 3508        ============================================================
23:18:25.0171 3508        Abiosdsk - ok
23:18:25.0187 3508        abp480n5 - ok
23:18:25.0234 3508        ACPI            (ac407f1a62c3a300b4f2b5a9f1d55b2c) C:\WINDOWS\system32\DRIVERS\ACPI.sys
23:18:27.0093 3508        ACPI - ok
23:18:27.0140 3508        ACPIEC          (9e1ca3160dafb159ca14f83b1e317f75) C:\WINDOWS\system32\DRIVERS\ACPIEC.sys
23:18:27.0421 3508        ACPIEC - ok
23:18:27.0421 3508        adpu160m - ok
23:18:27.0531 3508        aec            (8bed39e3c35d6a489438b8141717a557) C:\WINDOWS\system32\drivers\aec.sys
23:18:27.0781 3508        aec - ok
23:18:27.0828 3508        AFD            (1e44bc1e83d8fd2305f8d452db109cf9) C:\WINDOWS\System32\drivers\afd.sys
23:18:27.0875 3508        AFD - ok
23:18:27.0890 3508        Aha154x - ok
23:18:27.0890 3508        aic78u2 - ok
23:18:27.0906 3508        aic78xx - ok
23:18:27.0968 3508        Alerter        (738d80cc01d7bc7584be917b7f544394) C:\WINDOWS\system32\alrsvc.dll
23:18:28.0187 3508        Alerter - ok
23:18:28.0218 3508        ALG            (190cd73d4984f94d823f9444980513e5) C:\WINDOWS\System32\alg.exe
23:18:28.0343 3508        ALG - ok
23:18:28.0343 3508        AliIde - ok
23:18:28.0562 3508        Ambfilt        (f6af59d6eee5e1c304f7f73706ad11d8) C:\WINDOWS\system32\drivers\Ambfilt.sys
23:18:28.0734 3508        Ambfilt - ok
23:18:28.0843 3508        amsint - ok
23:18:28.0953 3508        Apple Mobile Device (3debbecf665dcdde3a95d9b902010817) C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleMobileDeviceService.exe
23:18:28.0984 3508        Apple Mobile Device - ok
23:18:28.0984 3508        AppMgmt - ok
23:18:29.0187 3508        AR5416          (e0ee769d14128014965e03b433f5f46e) C:\WINDOWS\system32\DRIVERS\athw.sys
23:18:29.0312 3508        AR5416 - ok
23:18:29.0468 3508        asc - ok
23:18:29.0484 3508        asc3350p - ok
23:18:29.0500 3508        asc3550 - ok
23:18:29.0625 3508        aspnet_state    (0e5e4957549056e2bf2c49f4f6b601ad) C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
23:18:29.0656 3508        aspnet_state - ok
23:18:29.0703 3508        AsusACPI        (12415a4b61ded200fe9932b47a35fa42) C:\WINDOWS\system32\DRIVERS\ASUSACPI.sys
23:18:29.0781 3508        AsusACPI - ok
23:18:29.0859 3508        AsyncMac        (b153affac761e7f5fcfa822b9c4e97bc) C:\WINDOWS\system32\DRIVERS\asyncmac.sys
23:18:30.0171 3508        AsyncMac - ok
23:18:30.0218 3508        atapi          (9f3a2f5aa6875c72bf062c712cfa2674) C:\WINDOWS\system32\DRIVERS\atapi.sys
23:18:30.0453 3508        atapi - ok
23:18:30.0468 3508        Atdisk - ok
23:18:30.0531 3508        Atmarpc        (9916c1225104ba14794209cfa8012159) C:\WINDOWS\system32\DRIVERS\atmarpc.sys
23:18:30.0750 3508        Atmarpc - ok
23:18:30.0828 3508        AudioSrv        (58ed0d5452df7be732193e7999c6b9a4) C:\WINDOWS\System32\audiosrv.dll
23:18:31.0078 3508        AudioSrv - ok
23:18:31.0125 3508        audstub        (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys
23:18:31.0343 3508        audstub - ok
23:18:31.0484 3508        BBSvc          (01a24b415926bb5f772dbe12459d97de) C:\Programme\Microsoft\BingBar\BBSvc.EXE
23:18:31.0515 3508        BBSvc - ok
23:18:31.0593 3508        BBUpdate        (785de7abda13309d6065305542829e76) C:\Programme\Microsoft\BingBar\SeaPort.EXE
23:18:31.0640 3508        BBUpdate - ok
23:18:31.0671 3508        Beep            (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys
23:18:31.0906 3508        Beep - ok
23:18:32.0000 3508        BITS            (d6f603772a789bb3228f310d650b8bd1) C:\WINDOWS\system32\qmgr.dll
23:18:32.0281 3508        BITS - ok
23:18:32.0343 3508        BMLoad          (70cd6d71fc48bbbd1385d7b35aeadecc) C:\WINDOWS\system32\drivers\BMLoad.sys
23:18:32.0468 3508        BMLoad ( UnsignedFile.Multi.Generic ) - warning
23:18:32.0468 3508        BMLoad - detected UnsignedFile.Multi.Generic (1)
23:18:32.0562 3508        Bonjour Service (db5bea73edaf19ac68b2c0fad0f92b1a) C:\Programme\Bonjour\mDNSResponder.exe
23:18:32.0593 3508        Bonjour Service - ok
23:18:32.0656 3508        Browser        (b42057f06bbb98b31876c0b3f2b54e33) C:\WINDOWS\System32\browser.dll
23:18:32.0890 3508        Browser - ok
23:18:33.0000 3508        btaudio        (4b43dfe1c1fbb305a1dc5504ef9bb34e) C:\WINDOWS\system32\drivers\btaudio.sys
23:18:33.0062 3508        btaudio - ok
23:18:33.0109 3508        BTDriver        (2f9f111d31aa3fbbe5781d829a4524e6) C:\WINDOWS\system32\DRIVERS\btport.sys
23:18:33.0140 3508        BTDriver - ok
23:18:33.0250 3508        BTKRNL          (70455baffc078b6152d1e52376296467) C:\WINDOWS\system32\DRIVERS\btkrnl.sys
23:18:33.0343 3508        BTKRNL - ok
23:18:33.0453 3508        btwdins        (e43f7709f36444681978f9dc067a976b) C:\Programme\WIDCOMM\Bluetooth Software\bin\btwdins.exe
23:18:33.0500 3508        btwdins - ok
23:18:33.0546 3508        BTWDNDIS        (485020a1e1fc5c51a800ca69c618d881) C:\WINDOWS\system32\DRIVERS\btwdndis.sys
23:18:33.0578 3508        BTWDNDIS - ok
23:18:33.0593 3508        btwhid          (949eca9c56f657c06d3166d51f3226c7) C:\WINDOWS\system32\DRIVERS\btwhid.sys
23:18:33.0625 3508        btwhid - ok
23:18:33.0640 3508        BTWUSB          (2cfc2bd8785f82a42fcad83de1fa5a36) C:\WINDOWS\system32\Drivers\btwusb.sys
23:18:33.0671 3508        BTWUSB - ok
23:18:33.0718 3508        cbidf2k        (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys
23:18:33.0968 3508        cbidf2k - ok
23:18:34.0000 3508        CCDECODE        (0be5aef125be881c4f854c554f2b025c) C:\WINDOWS\system32\DRIVERS\CCDECODE.sys
23:18:34.0250 3508        CCDECODE - ok
23:18:34.0265 3508        cd20xrnt - ok
23:18:34.0328 3508        Cdaudio        (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS\system32\drivers\Cdaudio.sys
23:18:34.0562 3508        Cdaudio - ok
23:18:34.0578 3508        Cdfs            (c885b02847f5d2fd45a24e219ed93b32) C:\WINDOWS\system32\drivers\Cdfs.sys
23:18:34.0812 3508        Cdfs - ok
23:18:34.0843 3508        Cdrom          (1f4260cc5b42272d71f79e570a27a4fe) C:\WINDOWS\system32\DRIVERS\cdrom.sys
23:18:35.0046 3508        Cdrom - ok
23:18:35.0062 3508        Changer - ok
23:18:35.0109 3508        CiSvc          (28e3040d1f1ca2008cd6b29dfebc9a5e) C:\WINDOWS\system32\cisvc.exe
23:18:35.0343 3508        CiSvc - ok
23:18:35.0375 3508        ClipSrv        (778a30ed3c134eb7e406afc407e9997d) C:\WINDOWS\system32\clipsrv.exe
23:18:35.0593 3508        ClipSrv - ok
23:18:35.0703 3508        clr_optimization_v2.0.50727_32 (d87acaed61e417bba546ced5e7e36d9c) C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
23:18:35.0734 3508        clr_optimization_v2.0.50727_32 - ok
23:18:35.0765 3508        CmBatt          (0f6c187d38d98f8df904589a5f94d411) C:\WINDOWS\system32\DRIVERS\CmBatt.sys
23:18:36.0015 3508        CmBatt - ok
23:18:36.0015 3508        CmdIde - ok
23:18:36.0046 3508        Compbatt        (6e4c9f21f0fae8940661144f41b13203) C:\WINDOWS\system32\DRIVERS\compbatt.sys
23:18:36.0281 3508        Compbatt - ok
23:18:36.0296 3508        COMSysApp - ok
23:18:36.0312 3508        Cpqarray - ok
23:18:36.0359 3508        CryptSvc        (611f824e5c703a5a899f84c5f1699e4d) C:\WINDOWS\System32\cryptsvc.dll
23:18:36.0578 3508        CryptSvc - ok
23:18:36.0593 3508        dac2w2k - ok
23:18:36.0609 3508        dac960nt - ok
23:18:36.0687 3508        DcomLaunch      (3127afbf2c1ed0ab14a1bbb7aaecb85b) C:\WINDOWS\system32\rpcss.dll
23:18:36.0796 3508        DcomLaunch - ok
23:18:36.0843 3508        Dhcp            (c29a1c9b75ba38fa37f8c44405dec360) C:\WINDOWS\System32\dhcpcsvc.dll
23:18:37.0078 3508        Dhcp - ok
23:18:37.0125 3508        Disk            (044452051f3e02e7963599fc8f4f3e25) C:\WINDOWS\system32\DRIVERS\disk.sys
23:18:37.0406 3508        Disk - ok
23:18:37.0421 3508        dmadmin - ok
23:18:37.0593 3508        dmboot          (0dcfc8395a99fecbb1ef771cec7fe4ea) C:\WINDOWS\system32\drivers\dmboot.sys
23:18:37.0859 3508        dmboot - ok
23:18:37.0906 3508        dmio            (53720ab12b48719d00e327da470a619a) C:\WINDOWS\system32\drivers\dmio.sys
23:18:38.0187 3508        dmio - ok
23:18:38.0218 3508        dmload          (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys
23:18:38.0453 3508        dmload - ok
23:18:38.0500 3508        dmserver        (25c83ffbba13b554eb6d59a9b2e2ee78) C:\WINDOWS\System32\dmserver.dll
23:18:38.0734 3508        dmserver - ok
23:18:38.0812 3508        DMusic          (8a208dfcf89792a484e76c40e5f50b45) C:\WINDOWS\system32\drivers\DMusic.sys
23:18:39.0031 3508        DMusic - ok
23:18:39.0109 3508        Dnscache        (407f3227ac618fd1ca54b335b083de07) C:\WINDOWS\System32\dnsrslvr.dll
23:18:39.0203 3508        Dnscache - ok
23:18:39.0250 3508        Dot3svc        (676e36c4ff5bcea1900f44182b9723e6) C:\WINDOWS\System32\dot3svc.dll
23:18:39.0500 3508        Dot3svc - ok
23:18:39.0515 3508        dpti2o - ok
23:18:39.0562 3508        drmkaud        (8f5fcff8e8848afac920905fbd9d33c8) C:\WINDOWS\system32\drivers\drmkaud.sys
23:18:39.0828 3508        drmkaud - ok
23:18:39.0843 3508        EapHost        (4e4f2fddab0a0736d7671134dcce91fb) C:\WINDOWS\System32\eapsvc.dll
23:18:40.0093 3508        EapHost - ok
23:18:40.0125 3508        ERSvc          (877c18558d70587aa7823a1a308ac96b) C:\WINDOWS\System32\ersvc.dll
23:18:40.0359 3508        ERSvc - ok
23:18:40.0406 3508        Eventlog        (a3edbe9053889fb24ab22492472b39dc) C:\WINDOWS\system32\services.exe
23:18:40.0437 3508        Eventlog - ok
23:18:40.0484 3508        EventSystem    (af4f6b5739d18ca7972ab53e091cbc74) C:\WINDOWS\system32\es.dll
23:18:40.0578 3508        EventSystem - ok
23:18:40.0609 3508        Fastfat        (38d332a6d56af32635675f132548343e) C:\WINDOWS\system32\drivers\Fastfat.sys
23:18:40.0843 3508        Fastfat - ok
23:18:40.0921 3508        FastUserSwitchingCompatibility (2db7d303c36ddd055215052f118e8e75) C:\WINDOWS\System32\shsvcs.dll
23:18:40.0968 3508        FastUserSwitchingCompatibility - ok
23:18:41.0015 3508        Fdc            (92cdd60b6730b9f50f6a1a0c1f8cdc81) C:\WINDOWS\system32\drivers\Fdc.sys
23:18:41.0265 3508        Fdc - ok
23:18:41.0296 3508        Fips            (b0678a548587c5f1967b0d70bacad6c1) C:\WINDOWS\system32\drivers\Fips.sys
23:18:41.0531 3508        Fips - ok
23:18:41.0593 3508        Flpydisk        (9d27e7b80bfcdf1cdd9b555862d5e7f0) C:\WINDOWS\system32\drivers\Flpydisk.sys
23:18:41.0812 3508        Flpydisk - ok
23:18:41.0875 3508        FltMgr          (b2cf4b0786f8212cb92ed2b50c6db6b0) C:\WINDOWS\system32\DRIVERS\fltMgr.sys
23:18:42.0109 3508        FltMgr - ok
23:18:42.0218 3508        FontCache3.0.0.0 (8ba7c024070f2b7fdd98ed8a4ba41789) C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
23:18:42.0234 3508        FontCache3.0.0.0 - ok
23:18:42.0296 3508        fssfltr        (e0087225b137e57239ff40f8ae82059b) C:\WINDOWS\system32\DRIVERS\fssfltr_tdi.sys
23:18:42.0312 3508        fssfltr - ok
23:18:42.0468 3508        fsssvc          (45b52394f9624237f33a8a3d73c0b221) C:\Programme\Windows Live\Family Safety\fsssvc.exe
23:18:42.0531 3508        fsssvc - ok
23:18:42.0578 3508        Fs_Rec          (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS\system32\drivers\Fs_Rec.sys
23:18:42.0812 3508        Fs_Rec - ok
23:18:42.0906 3508        Ftdisk          (8f1955ce42e1484714b542f341647778) C:\WINDOWS\system32\DRIVERS\ftdisk.sys
23:18:43.0140 3508        Ftdisk - ok
23:18:43.0187 3508        GEARAspiWDM    (8182ff89c65e4d38b2de4bb0fb18564e) C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys
23:18:43.0218 3508        GEARAspiWDM - ok
23:18:43.0250 3508        Gpc            (0a02c63c8b144bd8c86b103dee7c86a2) C:\WINDOWS\system32\DRIVERS\msgpc.sys
23:18:43.0484 3508        Gpc - ok
23:18:43.0531 3508        HDAudBus        (573c7d0a32852b48f3058cfd8026f511) C:\WINDOWS\system32\DRIVERS\HDAudBus.sys
23:18:43.0734 3508        HDAudBus - ok
23:18:43.0843 3508        helpsvc        (cb66bf85bf599befd6c6a57c2e20357f) C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll
23:18:44.0078 3508        helpsvc - ok
23:18:44.0109 3508        HidServ        (b35da85e60c0103f2e4104532da2f12b) C:\WINDOWS\System32\hidserv.dll
23:18:44.0343 3508        HidServ - ok
23:18:44.0390 3508        HidUsb          (ccf82c5ec8a7326c3066de870c06daf1) C:\WINDOWS\system32\DRIVERS\hidusb.sys
23:18:44.0609 3508        HidUsb - ok
23:18:44.0703 3508        hkmsvc          (ed29f14101523a6e0e808107405d452c) C:\WINDOWS\System32\kmsvc.dll
23:18:44.0921 3508        hkmsvc - ok
23:18:44.0937 3508        hpn - ok
23:18:45.0000 3508        HSPADataCardusbmdm (69cfe473434102d3fb12dbc7fda0d2a7) C:\WINDOWS\system32\DRIVERS\HSPADataCardusbmdm.sys
23:18:45.0093 3508        HSPADataCardusbmdm - ok
23:18:45.0125 3508        HSPADataCardusbnmea (69cfe473434102d3fb12dbc7fda0d2a7) C:\WINDOWS\system32\DRIVERS\HSPADataCardusbnmea.sys
23:18:45.0156 3508        HSPADataCardusbnmea - ok
23:18:45.0187 3508        HSPADataCardusbser (69cfe473434102d3fb12dbc7fda0d2a7) C:\WINDOWS\system32\DRIVERS\HSPADataCardusbser.sys
23:18:45.0203 3508        HSPADataCardusbser - ok
23:18:45.0265 3508        HTTP            (f80a415ef82cd06ffaf0d971528ead38) C:\WINDOWS\system32\Drivers\HTTP.sys
23:18:45.0343 3508        HTTP - ok
23:18:45.0375 3508        HTTPFilter      (9e4adb854cebcfb81a4b36718feecd16) C:\WINDOWS\System32\w3ssl.dll
23:18:45.0625 3508        HTTPFilter - ok
23:18:45.0640 3508        hwdatacard - ok
23:18:45.0671 3508        i2omgmt - ok
23:18:45.0687 3508        i2omp - ok
23:18:45.0750 3508        i8042prt        (e283b97cfbeb86c1d86baed5f7846a92) C:\WINDOWS\system32\DRIVERS\i8042prt.sys
23:18:45.0984 3508        i8042prt - ok
23:18:46.0671 3508        ialm            (0f68e2ec713f132ffb19e45415b09679) C:\WINDOWS\system32\DRIVERS\igxpmp32.sys
23:18:47.0015 3508        ialm - ok
23:18:47.0171 3508        iaStor          (8ef427c54497c5f8a7a645990e4278c7) C:\WINDOWS\system32\drivers\iaStor.sys
23:18:47.0203 3508        iaStor - ok
23:18:47.0453 3508        idsvc          (c01ac32dc5c03076cfb852cb5da5229c) C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
23:18:47.0562 3508        idsvc - ok
23:18:47.0609 3508        Imapi          (083a052659f5310dd8b6a6cb05edcf8e) C:\WINDOWS\system32\DRIVERS\imapi.sys
23:18:47.0906 3508        Imapi - ok
23:18:47.0937 3508        ImapiService    (d4b413aa210c21e46aedd2ba5b68d38e) C:\WINDOWS\system32\imapi.exe
23:18:48.0187 3508        ImapiService - ok
23:18:48.0203 3508        ini910u - ok
23:18:48.0781 3508        IntcAzAudAddService (1ae3cff80017ef89da959350724c7194) C:\WINDOWS\system32\drivers\RtkHDAud.sys
23:18:49.0093 3508        IntcAzAudAddService - ok
23:18:49.0218 3508        IntelIde - ok
23:18:49.0265 3508        intelppm        (4c7d2750158ed6e7ad642d97bffae351) C:\WINDOWS\system32\DRIVERS\intelppm.sys
23:18:49.0531 3508        intelppm - ok
23:18:49.0562 3508        Ip6Fw          (3bb22519a194418d5fec05d800a19ad0) C:\WINDOWS\system32\DRIVERS\Ip6Fw.sys
23:18:49.0828 3508        Ip6Fw - ok
23:18:49.0843 3508        IpFilterDriver  (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
23:18:50.0078 3508        IpFilterDriver - ok
23:18:50.0093 3508        IpInIp          (b87ab476dcf76e72010632b5550955f5) C:\WINDOWS\system32\DRIVERS\ipinip.sys
23:18:50.0328 3508        IpInIp - ok
23:18:50.0375 3508        IpNat          (cc748ea12c6effde940ee98098bf96bb) C:\WINDOWS\system32\DRIVERS\ipnat.sys
23:18:50.0593 3508        IpNat - ok
23:18:50.0812 3508        iPod Service    (178fe38b7740f598391eb2f51ae4ccac) C:\Programme\iPod\bin\iPodService.exe
23:18:50.0859 3508        iPod Service - ok
23:18:50.0921 3508        IPSec          (23c74d75e36e7158768dd63d92789a91) C:\WINDOWS\system32\DRIVERS\ipsec.sys
23:18:51.0156 3508        IPSec - ok
23:18:51.0203 3508        IRENUM          (c93c9ff7b04d772627a3646d89f7bf89) C:\WINDOWS\system32\DRIVERS\irenum.sys
23:18:51.0328 3508        IRENUM - ok
23:18:51.0390 3508        isapnp          (6dfb88f64135c525433e87648bda30de) C:\WINDOWS\system32\DRIVERS\isapnp.sys
23:18:51.0625 3508        isapnp - ok
23:18:51.0734 3508        JavaQuickStarterService (9ae07549a0d691a103faf8946554bdb7) C:\Programme\Java\jre6\bin\jqs.exe
23:18:51.0796 3508        JavaQuickStarterService - ok
23:18:51.0828 3508        Kbdclass        (1704d8c4c8807b889e43c649b478a452) C:\WINDOWS\system32\DRIVERS\kbdclass.sys
23:18:52.0062 3508        Kbdclass - ok
23:18:52.0140 3508        kmixer          (692bcf44383d056aed41b045a323d378) C:\WINDOWS\system32\drivers\kmixer.sys
23:18:52.0421 3508        kmixer - ok
23:18:52.0500 3508        KSecDD          (b467646c54cc746128904e1654c750c1) C:\WINDOWS\system32\drivers\KSecDD.sys
23:18:52.0609 3508        KSecDD - ok
23:18:52.0656 3508        L1c            (6c8658587e91ea25b0fd2e71781ad228) C:\WINDOWS\system32\DRIVERS\l1c51x86.sys
23:18:52.0703 3508        L1c - ok
23:18:52.0765 3508        LanmanServer    (2bbdcb79900990f0716dfcb714e72de7) C:\WINDOWS\System32\srvsvc.dll
23:18:52.0828 3508        LanmanServer - ok
23:18:52.0875 3508        lanmanworkstation (1869b14b06b44b44af70548e1ea3303f) C:\WINDOWS\System32\wkssvc.dll
23:18:52.0921 3508        lanmanworkstation - ok
23:18:52.0937 3508        lbrtfdc - ok
23:18:53.0000 3508        LmHosts        (636714b7d43c8d0c80449123fd266920) C:\WINDOWS\System32\lmhsvc.dll
23:18:53.0296 3508        LmHosts - ok
23:18:53.0328 3508        massfilter      (d5673785903639d186dc345ff86f423f) C:\WINDOWS\system32\drivers\massfilter.sys
23:18:53.0390 3508        massfilter - ok
23:18:53.0421 3508        MBAMProtector  (fb097bbc1a18f044bd17bd2fccf97865) C:\WINDOWS\system32\drivers\mbam.sys
23:18:53.0453 3508        MBAMProtector - ok
23:18:53.0562 3508        MBAMService    (ba400ed640bca1eae5c727ae17c10207) C:\Programme\Malwarebytes' Anti-Malware\mbamservice.exe
23:18:53.0609 3508        MBAMService - ok
23:18:53.0671 3508        Messenger      (b7550a7107281d170ce85524b1488c98) C:\WINDOWS\System32\msgsvc.dll
23:18:53.0906 3508        Messenger - ok
23:18:53.0953 3508        mnmdd          (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS\system32\drivers\mnmdd.sys
23:18:54.0187 3508        mnmdd - ok
23:18:54.0234 3508        mnmsrvc        (c2f1d365fd96791b037ee504868065d3) C:\WINDOWS\system32\mnmsrvc.exe
23:18:54.0453 3508        mnmsrvc - ok
23:18:54.0500 3508        Modem          (6fb74ebd4ec57a6f1781de3852cc3362) C:\WINDOWS\system32\drivers\Modem.sys
23:18:54.0718 3508        Modem - ok
23:18:54.0921 3508        Monfilt        (9fa7207d1b1adead88ae8eed9cdbbaa5) C:\WINDOWS\system32\drivers\Monfilt.sys
23:18:55.0046 3508        Monfilt - ok
23:18:55.0093 3508        Mouclass        (b24ce8005deab254c0251e15cb71d802) C:\WINDOWS\system32\DRIVERS\mouclass.sys
23:18:55.0343 3508        Mouclass - ok
23:18:55.0390 3508        mouhid          (66a6f73c74e1791464160a7065ce711a) C:\WINDOWS\system32\DRIVERS\mouhid.sys
23:18:55.0656 3508        mouhid - ok
23:18:55.0703 3508        MountMgr        (a80b9a0bad1b73637dbcbba7df72d3fd) C:\WINDOWS\system32\drivers\MountMgr.sys
23:18:55.0921 3508        MountMgr - ok
23:18:56.0046 3508        MozillaMaintenance (96aa8ba23142cc8e2b30f3cae0c80254) C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe
23:18:56.0078 3508        MozillaMaintenance - ok
23:18:56.0078 3508        mraid35x - ok
23:18:56.0125 3508        MRxDAV          (11d42bb6206f33fbb3ba0288d3ef81bd) C:\WINDOWS\system32\DRIVERS\mrxdav.sys
23:18:56.0359 3508        MRxDAV - ok
23:18:56.0437 3508        MRxSmb          (7d304a5eb4344ebeeab53a2fe3ffb9f0) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
23:18:56.0515 3508        MRxSmb - ok
23:18:56.0546 3508        MSDTC          (35a031af38c55f92d28aa03ee9f12cc9) C:\WINDOWS\system32\msdtc.exe
23:18:56.0781 3508        MSDTC - ok
23:18:56.0875 3508        Msfs            (c941ea2454ba8350021d774daf0f1027) C:\WINDOWS\system32\drivers\Msfs.sys
23:18:57.0093 3508        Msfs - ok
23:18:57.0218 3508        MsgPlusService  (3f3d6e8bd31b3c017d0ab24cd5ec0d05) C:\Programme\Yuna Software\Messenger Plus! for Skype\MsgPlusForSkypeService.exe
23:18:57.0250 3508        MsgPlusService - ok
23:18:57.0250 3508        MSIServer - ok
23:18:57.0281 3508        MSKSSRV        (d1575e71568f4d9e14ca56b7b0453bf1) C:\WINDOWS\system32\drivers\MSKSSRV.sys
23:18:57.0515 3508        MSKSSRV - ok
23:18:57.0578 3508        MSPCLOCK        (325bb26842fc7ccc1fcce2c457317f3e) C:\WINDOWS\system32\drivers\MSPCLOCK.sys
23:18:57.0812 3508        MSPCLOCK - ok
23:18:57.0843 3508        MSPQM          (bad59648ba099da4a17680b39730cb3d) C:\WINDOWS\system32\drivers\MSPQM.sys
23:18:58.0062 3508        MSPQM - ok
23:18:58.0125 3508        mssmbios        (af5f4f3f14a8ea2c26de30f7a1e17136) C:\WINDOWS\system32\DRIVERS\mssmbios.sys
23:18:58.0343 3508        mssmbios - ok
23:18:58.0343 3508        MSTEE          (e53736a9e30c45fa9e7b5eac55056d1d) C:\WINDOWS\system32\drivers\MSTEE.sys
23:18:58.0562 3508        MSTEE - ok
23:18:58.0625 3508        Mup            (de6a75f5c270e756c5508d94b6cf68f5) C:\WINDOWS\system32\drivers\Mup.sys
23:18:58.0656 3508        Mup - ok
23:18:58.0703 3508        NABTSFEC        (5b50f1b2a2ed47d560577b221da734db) C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys
23:18:58.0937 3508        NABTSFEC - ok
23:18:59.0015 3508        napagent        (46bb15ae2ac7d025d6d2567b876817bd) C:\WINDOWS\System32\qagentrt.dll
23:18:59.0265 3508        napagent - ok
23:18:59.0328 3508        NDIS            (1df7f42665c94b825322fae71721130d) C:\WINDOWS\system32\drivers\NDIS.sys
23:18:59.0578 3508        NDIS - ok
23:18:59.0578 3508        NdisIP          (7ff1f1fd8609c149aa432f95a8163d97) C:\WINDOWS\system32\DRIVERS\NdisIP.sys
23:18:59.0796 3508        NdisIP - ok
23:18:59.0843 3508        NdisTapi        (0109c4f3850dfbab279542515386ae22) C:\WINDOWS\system32\DRIVERS\ndistapi.sys
23:18:59.0890 3508        NdisTapi - ok
23:18:59.0937 3508        Ndisuio        (f927a4434c5028758a842943ef1a3849) C:\WINDOWS\system32\DRIVERS\ndisuio.sys
23:19:00.0156 3508        Ndisuio - ok
23:19:00.0171 3508        NdisWan        (edc1531a49c80614b2cfda43ca8659ab) C:\WINDOWS\system32\DRIVERS\ndiswan.sys
23:19:00.0390 3508        NdisWan - ok
23:19:00.0500 3508        NDProxy        (9282bd12dfb069d3889eb3fcc1000a9b) C:\WINDOWS\system32\drivers\NDProxy.sys
23:19:00.0531 3508        NDProxy - ok
23:19:00.0562 3508        NetBIOS        (5d81cf9a2f1a3a756b66cf684911cdf0) C:\WINDOWS\system32\DRIVERS\netbios.sys
23:19:00.0765 3508        NetBIOS - ok
23:19:00.0828 3508        NetBT          (74b2b2f5bea5e9a3dc021d685551bd3d) C:\WINDOWS\system32\DRIVERS\netbt.sys
23:19:01.0031 3508        NetBT - ok
23:19:01.0093 3508        NetDDE          (8ace4251bffd09ce75679fe940e996cc) C:\WINDOWS\system32\netdde.exe
23:19:01.0296 3508        NetDDE - ok
23:19:01.0312 3508        NetDDEdsdm      (8ace4251bffd09ce75679fe940e996cc) C:\WINDOWS\system32\netdde.exe
23:19:01.0531 3508        NetDDEdsdm - ok
23:19:01.0578 3508        Netlogon        (afb8261b56cba0d86aeb6df682af9785) C:\WINDOWS\system32\lsass.exe
23:19:01.0796 3508        Netlogon - ok
23:19:01.0906 3508        Netman          (e6d88f1f6745bf00b57e7855a2ab696c) C:\WINDOWS\System32\netman.dll
23:19:02.0125 3508        Netman - ok
23:19:02.0281 3508        NetTcpPortSharing (d34612c5d02d026535b3095d620626ae) C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
23:19:02.0312 3508        NetTcpPortSharing - ok
23:19:02.0375 3508        Nla            (f1b67b6b0751ae0e6e964b02821206a3) C:\WINDOWS\System32\mswsock.dll
23:19:02.0421 3508        Nla - ok
23:19:02.0468 3508        Npfs            (3182d64ae053d6fb034f44b6def8034a) C:\WINDOWS\system32\drivers\Npfs.sys
23:19:02.0718 3508        Npfs - ok
23:19:02.0781 3508        Ntfs            (78a08dd6a8d65e697c18e1db01c5cdca) C:\WINDOWS\system32\drivers\Ntfs.sys
23:19:03.0015 3508        Ntfs - ok
23:19:03.0031 3508        NtLmSsp        (afb8261b56cba0d86aeb6df682af9785) C:\WINDOWS\system32\lsass.exe
23:19:03.0234 3508        NtLmSsp - ok
23:19:03.0312 3508        NtmsSvc        (56af4064996fa5bac9c449b1514b4770) C:\WINDOWS\system32\ntmssvc.dll
23:19:03.0531 3508        NtmsSvc - ok
23:19:03.0578 3508        Null            (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys
23:19:03.0781 3508        Null - ok
23:19:03.0859 3508        NwlnkFlt        (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
23:19:04.0062 3508        NwlnkFlt - ok
23:19:04.0078 3508        NwlnkFwd        (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
23:19:04.0296 3508        NwlnkFwd - ok
23:19:04.0468 3508        odserv          (785f487a64950f3cb8e9f16253ba3b7b) C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE12\ODSERV.EXE
23:19:04.0515 3508        odserv - ok
23:19:04.0562 3508        ose            (5a432a042dae460abe7199b758e8606c) C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE
23:19:04.0578 3508        ose - ok
23:19:04.0625 3508        Parport        (f84785660305b9b903fb3bca8ba29837) C:\WINDOWS\system32\drivers\Parport.sys
23:19:04.0843 3508        Parport - ok
23:19:04.0890 3508        PartMgr        (beb3ba25197665d82ec7065b724171c6) C:\WINDOWS\system32\drivers\PartMgr.sys
23:19:05.0156 3508        PartMgr - ok
23:19:05.0203 3508        ParVdm          (c2bf987829099a3eaa2ca6a0a90ecb4f) C:\WINDOWS\system32\drivers\ParVdm.sys
23:19:05.0437 3508        ParVdm - ok
23:19:05.0468 3508        PCI            (387e8dedc343aa2d1efbc30580273acd) C:\WINDOWS\system32\DRIVERS\pci.sys
23:19:05.0687 3508        PCI - ok
23:19:05.0703 3508        PCIDump - ok
23:19:05.0718 3508        PCIIde          (59ba86d9a61cbcf4df8e598c331f5b82) C:\WINDOWS\system32\DRIVERS\pciide.sys
23:19:05.0921 3508        PCIIde - ok
23:19:05.0953 3508        Pcmcia          (a2a966b77d61847d61a3051df87c8c97) C:\WINDOWS\system32\drivers\Pcmcia.sys
23:19:06.0187 3508        Pcmcia - ok
23:19:06.0187 3508        PDCOMP - ok
23:19:06.0203 3508        PDFRAME - ok
23:19:06.0218 3508        PDRELI - ok
23:19:06.0234 3508        PDRFRAME - ok
23:19:06.0250 3508        perc2 - ok
23:19:06.0250 3508        perc2hib - ok
23:19:06.0343 3508        PlugPlay        (a3edbe9053889fb24ab22492472b39dc) C:\WINDOWS\system32\services.exe
23:19:06.0375 3508        PlugPlay - ok
23:19:06.0406 3508        PolicyAgent    (afb8261b56cba0d86aeb6df682af9785) C:\WINDOWS\system32\lsass.exe
23:19:06.0609 3508        PolicyAgent - ok
23:19:06.0687 3508        PptpMiniport    (efeec01b1d3cf84f16ddd24d9d9d8f99) C:\WINDOWS\system32\DRIVERS\raspptp.sys
23:19:06.0906 3508        PptpMiniport - ok
23:19:06.0906 3508        ProtectedStorage (afb8261b56cba0d86aeb6df682af9785) C:\WINDOWS\system32\lsass.exe
23:19:07.0125 3508        ProtectedStorage - ok
23:19:07.0140 3508        PSched          (09298ec810b07e5d582cb3a3f9255424) C:\WINDOWS\system32\DRIVERS\psched.sys
23:19:07.0343 3508        PSched - ok
23:19:07.0359 3508        Ptilink        (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys
23:19:07.0578 3508        Ptilink - ok
23:19:07.0593 3508        ql1080 - ok
23:19:07.0609 3508        Ql10wnt - ok
23:19:07.0625 3508        ql12160 - ok
23:19:07.0625 3508        ql1240 - ok
23:19:07.0640 3508        ql1280 - ok
23:19:07.0687 3508        RasAcd          (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERS\rasacd.sys
23:19:07.0890 3508        RasAcd - ok
23:19:07.0968 3508        RasAuto        (f5ba6caccdb66c8f048e867563203246) C:\WINDOWS\System32\rasauto.dll
23:19:08.0171 3508        RasAuto - ok
23:19:08.0250 3508        Rasl2tp        (11b4a627bc9614b885c4969bfa5ff8a6) C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
23:19:08.0453 3508        Rasl2tp - ok
23:19:08.0593 3508        RasMan          (f9a7b66ea345726edb5862a46b1eccd5) C:\WINDOWS\System32\rasmans.dll
23:19:08.0796 3508        RasMan - ok
23:19:08.0859 3508        RasPppoe        (5bc962f2654137c9909c3d4603587dee) C:\WINDOWS\system32\DRIVERS\raspppoe.sys
23:19:09.0093 3508        RasPppoe - ok
23:19:09.0109 3508        Raspti          (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERS\raspti.sys
23:19:09.0312 3508        Raspti - ok
23:19:09.0359 3508        Rdbss          (7ad224ad1a1437fe28d89cf22b17780a) C:\WINDOWS\system32\DRIVERS\rdbss.sys
23:19:09.0578 3508        Rdbss - ok
23:19:09.0671 3508        RDPCDD          (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
23:19:09.0890 3508        RDPCDD - ok
23:19:09.0984 3508        RDPWD          (6589db6e5969f8eee594cf71171c5028) C:\WINDOWS\system32\drivers\RDPWD.sys
23:19:10.0046 3508        RDPWD - ok
23:19:10.0093 3508        RDSessMgr      (263af18af0f3db99f574c95f284ccec9) C:\WINDOWS\system32\sessmgr.exe
23:19:10.0328 3508        RDSessMgr - ok
23:19:10.0375 3508        redbook        (ed761d453856f795a7fe056e42c36365) C:\WINDOWS\system32\DRIVERS\redbook.sys
23:19:10.0625 3508        redbook - ok
23:19:10.0671 3508        RemoteAccess    (0e97ec96d6942ceec2d188cc2eb69a01) C:\WINDOWS\System32\mprdim.dll
23:19:10.0875 3508        RemoteAccess - ok
23:19:10.0984 3508        RpcLocator      (2a02e21867497df20b8fc95631395169) C:\WINDOWS\system32\locator.exe
23:19:11.0187 3508        RpcLocator - ok
23:19:11.0312 3508        RpcSs          (3127afbf2c1ed0ab14a1bbb7aaecb85b) C:\WINDOWS\system32\rpcss.dll
23:19:11.0375 3508        RpcSs - ok
23:19:11.0421 3508        RSVP            (4bdd71b4b521521499dfd14735c4f398) C:\WINDOWS\system32\rsvp.exe
23:19:11.0625 3508        RSVP - ok
23:19:11.0671 3508        SamSs          (afb8261b56cba0d86aeb6df682af9785) C:\WINDOWS\system32\lsass.exe
23:19:11.0890 3508        SamSs - ok
23:19:11.0968 3508        SCardSvr        (dcec079fad95d36c8dd5cb6d779dfe32) C:\WINDOWS\System32\SCardSvr.exe
23:19:12.0187 3508        SCardSvr - ok
23:19:12.0281 3508        Schedule        (a050194a44d7fa8d7186ed2f4e8367ae) C:\WINDOWS\system32\schedsvc.dll
23:19:12.0500 3508        Schedule - ok
23:19:12.0562 3508        Secdrv          (90a3935d05b494a5a39d37e71f09a677) C:\WINDOWS\system32\DRIVERS\secdrv.sys
23:19:12.0640 3508        Secdrv - ok
23:19:12.0687 3508        seclogon        (bee4cfd1d48c23b44cf4b974b0b79b2b) C:\WINDOWS\System32\seclogon.dll
23:19:12.0890 3508        seclogon - ok
23:19:12.0953 3508        SENS            (2aac9b6ed9eddffb721d6452e34d67e3) C:\WINDOWS\system32\sens.dll
23:19:13.0171 3508        SENS - ok
23:19:13.0250 3508        Serial          (cf24eb4f0412c82bcd1f4f35a025e31d) C:\WINDOWS\system32\drivers\Serial.sys
23:19:13.0453 3508        Serial - ok
23:19:13.0546 3508        Sfloppy        (8e6b8c671615d126fdc553d1e2de5562) C:\WINDOWS\system32\drivers\Sfloppy.sys
23:19:13.0750 3508        Sfloppy - ok
23:19:13.0890 3508        SharedAccess    (cad058d5f8b889a87ca3eb3cf624dcef) C:\WINDOWS\System32\ipnathlp.dll
23:19:14.0109 3508        SharedAccess - ok
23:19:14.0187 3508        ShellHWDetection (2db7d303c36ddd055215052f118e8e75) C:\WINDOWS\System32\shsvcs.dll
23:19:14.0203 3508        ShellHWDetection - ok
23:19:14.0218 3508        Simbad - ok
23:19:14.0250 3508        SLIP            (866d538ebe33709a5c9f5c62b73b7d14) C:\WINDOWS\system32\DRIVERS\SLIP.sys
23:19:14.0468 3508        SLIP - ok
23:19:14.0484 3508        Sparrow - ok
23:19:14.0562 3508        splitter        (ab8b92451ecb048a4d1de7c3ffcb4a9f) C:\WINDOWS\system32\drivers\splitter.sys
23:19:14.0765 3508        splitter - ok
23:19:14.0875 3508        Spooler        (60784f891563fb1b767f70117fc2428f) C:\WINDOWS\system32\spoolsv.exe
23:19:14.0921 3508        Spooler - ok
23:19:14.0968 3508        sr              (50fa898f8c032796d3b1b9951bb5a90f) C:\WINDOWS\system32\DRIVERS\sr.sys
23:19:15.0093 3508        sr - ok
23:19:15.0125 3508        srservice      (fe77a85495065f3ad59c5c65b6c54182) C:\WINDOWS\system32\srsvc.dll
23:19:15.0218 3508        srservice - ok
23:19:15.0265 3508        Srv            (47ddfc2f003f7f9f0592c6874962a2e7) C:\WINDOWS\system32\DRIVERS\srv.sys
23:19:15.0343 3508        Srv - ok
23:19:15.0390 3508        SSDPSRV        (4df5b05dfaec29e13e1ed6f6ee12c500) C:\WINDOWS\System32\ssdpsrv.dll
23:19:15.0515 3508        SSDPSRV - ok
23:19:15.0593 3508        stisvc          (bc2c5985611c5356b24aeb370953ded9) C:\WINDOWS\system32\wiaservc.dll
23:19:15.0843 3508        stisvc - ok
23:19:15.0890 3508        streamip        (77813007ba6265c4b6098187e6ed79d2) C:\WINDOWS\system32\DRIVERS\StreamIP.sys
23:19:16.0093 3508        streamip - ok
23:19:16.0156 3508        swenum          (3941d127aef12e93addf6fe6ee027e0f) C:\WINDOWS\system32\DRIVERS\swenum.sys
23:19:16.0375 3508        swenum - ok
23:19:16.0421 3508        swmidi          (8ce882bcc6cf8a62f2b2323d95cb3d01) C:\WINDOWS\system32\drivers\swmidi.sys
23:19:16.0640 3508        swmidi - ok
23:19:16.0640 3508        SwPrv - ok
23:19:16.0656 3508        symc810 - ok
23:19:16.0671 3508        symc8xx - ok
23:19:16.0687 3508        sym_hi - ok
23:19:16.0703 3508        sym_u3 - ok
23:19:16.0765 3508        SynTP          (8e25a1dbb8527b2074af9b682f818768) C:\WINDOWS\system32\DRIVERS\SynTP.sys
23:19:16.0796 3508        SynTP - ok
23:19:16.0812 3508        sysaudio        (8b83f3ed0f1688b4958f77cd6d2bf290) C:\WINDOWS\system32\drivers\sysaudio.sys
23:19:17.0031 3508        sysaudio - ok
23:19:17.0093 3508        SysmonLog      (2903fffa2523926d6219428040dce6b9) C:\WINDOWS\system32\smlogsvc.exe
23:19:17.0296 3508        SysmonLog - ok
23:19:17.0359 3508        TapiSrv        (05903cac4b98908d55ea5774775b382e) C:\WINDOWS\System32\tapisrv.dll
23:19:17.0593 3508        TapiSrv - ok
23:19:17.0703 3508        Tcpip          (9aefa14bd6b182d61e3119fa5f436d3d) C:\WINDOWS\system32\DRIVERS\tcpip.sys
23:19:17.0765 3508        Tcpip - ok
23:19:17.0796 3508        tcpipBM        (74905ebcbb8cbdb1f3c0b1778bbcb4bc) C:\WINDOWS\system32\drivers\tcpipBM.sys
23:19:17.0828 3508        tcpipBM ( UnsignedFile.Multi.Generic ) - warning
23:19:17.0828 3508        tcpipBM - detected UnsignedFile.Multi.Generic (1)
23:19:17.0859 3508        TDPIPE          (6471a66807f5e104e4885f5b67349397) C:\WINDOWS\system32\drivers\TDPIPE.sys
23:19:18.0078 3508        TDPIPE - ok
23:19:18.0078 3508        TDTCP          (c56b6d0402371cf3700eb322ef3aaf61) C:\WINDOWS\system32\drivers\TDTCP.sys
23:19:18.0296 3508        TDTCP - ok
23:19:18.0312 3508        TermDD          (88155247177638048422893737429d9e) C:\WINDOWS\system32\DRIVERS\termdd.sys
23:19:18.0531 3508        TermDD - ok
23:19:18.0593 3508        TermService    (b7de02c863d8f5a005a7bf375375a6a4) C:\WINDOWS\System32\termsrv.dll
23:19:18.0796 3508        TermService - ok
23:19:18.0875 3508        Themes          (2db7d303c36ddd055215052f118e8e75) C:\WINDOWS\System32\shsvcs.dll
23:19:18.0890 3508        Themes - ok
23:19:18.0906 3508        TosIde - ok
23:19:18.0968 3508        TrkWks          (626504572b175867f30f3215c04b3e2f) C:\WINDOWS\system32\trkwks.dll
23:19:19.0187 3508        TrkWks - ok
23:19:19.0265 3508        Udfs            (5787b80c2e3c5e2f56c2a233d91fa2c9) C:\WINDOWS\system32\drivers\Udfs.sys
23:19:19.0468 3508        Udfs - ok
23:19:19.0484 3508        ultra - ok
23:19:19.0593 3508        Update          (402ddc88356b1bac0ee3dd1580c76a31) C:\WINDOWS\system32\DRIVERS\update.sys
23:19:19.0812 3508        Update - ok
23:19:19.0859 3508        upnphost        (1dfd8975d8c89214b98d9387c1125b49) C:\WINDOWS\System32\upnphost.dll
23:19:19.0968 3508        upnphost - ok
23:19:20.0000 3508        UPS            (9b11e6118958e63e1fef129466e2bda7) C:\WINDOWS\System32\ups.exe
23:19:20.0203 3508        UPS - ok
23:19:20.0250 3508        USBAAPL        (83cafcb53201bbac04d822f32438e244) C:\WINDOWS\system32\Drivers\usbaapl.sys
23:19:20.0328 3508        USBAAPL - ok
23:19:20.0375 3508        usbccgp        (173f317ce0db8e21322e71b7e60a27e8) C:\WINDOWS\system32\DRIVERS\usbccgp.sys
23:19:20.0593 3508        usbccgp - ok
23:19:20.0656 3508        usbehci        (65dcf09d0e37d4c6b11b5b0b76d470a7) C:\WINDOWS\system32\DRIVERS\usbehci.sys
23:19:20.0875 3508        usbehci - ok
23:19:20.0937 3508        usbhub          (1ab3cdde553b6e064d2e754efe20285c) C:\WINDOWS\system32\DRIVERS\usbhub.sys
23:19:21.0140 3508        usbhub - ok
23:19:21.0187 3508        usbscan        (a0b8cf9deb1184fbdd20784a58fa75d4) C:\WINDOWS\system32\DRIVERS\usbscan.sys
23:19:21.0406 3508        usbscan - ok
23:19:21.0421 3508        usbstor        (a32426d9b14a089eaa1d922e0c5801a9) C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
23:19:21.0656 3508        usbstor - ok
23:19:21.0687 3508        usbuhci        (26496f9dee2d787fc3e61ad54821ffe6) C:\WINDOWS\system32\DRIVERS\usbuhci.sys
23:19:21.0890 3508        usbuhci - ok
23:19:21.0968 3508        usbvideo        (63bbfca7f390f4c49ed4b96bfb1633e0) C:\WINDOWS\system32\Drivers\usbvideo.sys
23:19:22.0187 3508        usbvideo - ok
23:19:22.0234 3508        uvclf          (c019889035cdc1a06f2febc93cbb6897) C:\WINDOWS\system32\DRIVERS\uvclf.sys
23:19:22.0281 3508        uvclf - ok
23:19:22.0343 3508        VgaSave        (0d3a8fafceacd8b7625cd549757a7df1) C:\WINDOWS\System32\drivers\vga.sys
23:19:22.0562 3508        VgaSave - ok
23:19:22.0562 3508        ViaIde - ok
23:19:22.0671 3508        VolSnap        (a5a712f4e880874a477af790b5186e1d) C:\WINDOWS\system32\drivers\VolSnap.sys
23:19:22.0875 3508        VolSnap - ok
23:19:22.0984 3508        VSS            (68f106273be29e7b7ef8266977268e78) C:\WINDOWS\System32\vssvc.exe
23:19:23.0078 3508        VSS - ok
23:19:23.0140 3508        W32Time        (7b353059e665f8b7ad2bbeaef597cf45) C:\WINDOWS\system32\w32time.dll
23:19:23.0406 3508        W32Time - ok
23:19:23.0453 3508        Wanarp          (e20b95baedb550f32dd489265c1da1f6) C:\WINDOWS\system32\DRIVERS\wanarp.sys
23:19:23.0671 3508        Wanarp - ok
23:19:23.0796 3508        Wdf01000        (bbcfeab7e871cddac2d397ee7fa91fdc) C:\WINDOWS\system32\Drivers\wdf01000.sys
23:19:23.0843 3508        Wdf01000 - ok
23:19:23.0843 3508        WDICA - ok
23:19:23.0906 3508        wdmaud          (6768acf64b18196494413695f0c3a00f) C:\WINDOWS\system32\drivers\wdmaud.sys
23:19:24.0125 3508        wdmaud - ok
23:19:24.0187 3508        WebClient      (81727c9873e3905a2ffc1ebd07265002) C:\WINDOWS\System32\webclnt.dll
23:19:24.0406 3508        WebClient - ok
23:19:24.0515 3508        winmgmt        (6f3f3973d97714cc5f906a19fe883729) C:\WINDOWS\system32\wbem\WMIsvc.dll
23:19:24.0718 3508        winmgmt - ok
23:19:24.0781 3508        WmdmPmSN        (c51b4a5c05a5475708e3c81c7765b71d) C:\WINDOWS\system32\MsPMSNSv.dll
23:19:24.0828 3508        WmdmPmSN - ok
23:19:24.0859 3508        WmiApSrv        (93908111ba57a6e60ec2fa2de202105c) C:\WINDOWS\system32\wbem\wmiapsrv.exe
23:19:25.0078 3508        WmiApSrv - ok
23:19:25.0296 3508        WMPNetworkSvc  (bf05650bb7df5e9ebdd25974e22403bb) C:\Programme\Windows Media Player\WMPNetwk.exe
23:19:25.0359 3508        WMPNetworkSvc - ok
23:19:25.0406 3508        WpdUsb          (cf4def1bf66f06964dc0d91844239104) C:\WINDOWS\system32\DRIVERS\wpdusb.sys
23:19:25.0437 3508        WpdUsb - ok
23:19:25.0500 3508        wscsvc          (300b3e84faf1a5c1f791c159ba28035d) C:\WINDOWS\system32\wscsvc.dll
23:19:25.0750 3508        wscsvc - ok
23:19:25.0796 3508        WSTCODEC        (c98b39829c2bbd34e454150633c62c78) C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS
23:19:25.0984 3508        WSTCODEC - ok
23:19:26.0046 3508        wuauserv        (7b4fe05202aa6bf9f4dfd0e6a0d8a085) C:\WINDOWS\system32\wuauserv.dll
23:19:26.0265 3508        wuauserv - ok
23:19:26.0343 3508        WudfPf          (f15feafffbb3644ccc80c5da584e6311) C:\WINDOWS\system32\DRIVERS\WudfPf.sys
23:19:26.0437 3508        WudfPf - ok
23:19:26.0468 3508        WudfRd          (28b524262bce6de1f7ef9f510ba3985b) C:\WINDOWS\system32\DRIVERS\wudfrd.sys
23:19:26.0484 3508        WudfRd - ok
23:19:26.0515 3508        WudfSvc        (05231c04253c5bc30b26cbaae680ed89) C:\WINDOWS\System32\WUDFSvc.dll
23:19:26.0546 3508        WudfSvc - ok
23:19:26.0640 3508        WZCSVC          (c4f109c005f6725162d2d12ca751e4a7) C:\WINDOWS\System32\wzcsvc.dll
23:19:26.0906 3508        WZCSVC - ok
23:19:26.0968 3508        xmlprov        (0ada34871a2e1cd2caafed1237a47750) C:\WINDOWS\System32\xmlprov.dll
23:19:27.0234 3508        xmlprov - ok
23:19:27.0281 3508        MBR (0x1B8)    (8f558eb6672622401da993e1e865c861) \Device\Harddisk0\DR0
23:19:28.0343 3508        \Device\Harddisk0\DR0 - ok
23:19:28.0343 3508        Boot (0x1200)  (26c64c34138ffaf46ce22b59d69bc2e4) \Device\Harddisk0\DR0\Partition0
23:19:28.0343 3508        \Device\Harddisk0\DR0\Partition0 - ok
23:19:28.0390 3508        Boot (0x1200)  (e60ca0fe09b255faa51152c9b4ee1437) \Device\Harddisk0\DR0\Partition1
23:19:28.0390 3508        \Device\Harddisk0\DR0\Partition1 - ok
23:19:28.0390 3508        ============================================================
23:19:28.0390 3508        Scan finished
23:19:28.0390 3508        ============================================================
23:19:28.0531 1368        Detected object count: 2
23:19:28.0531 1368        Actual detected object count: 2

Ich hoffe das sollte so sein?

cosinus 02.07.2012 12:40

Log ist unvollständig, die untere Zusammenfassung fehlt

ninifee 03.07.2012 21:18

Code:

23:16:52.0343 1840        TDSS rootkit removing tool 2.7.43.0 Jun 29 2012 17:54:22
23:16:52.0609 1840        ============================================================
23:16:52.0609 1840        Current date / time: 2012/07/01 23:16:52.0609
23:16:52.0609 1840        SystemInfo:
23:16:52.0609 1840       
23:16:52.0609 1840        OS Version: 5.1.2600 ServicePack: 3.0
23:16:52.0609 1840        Product type: Workstation
23:16:52.0609 1840        ComputerName: NAME-BQC30SBMP9
23:16:52.0609 1840        UserName: Susa
23:16:52.0609 1840        Windows directory: C:\WINDOWS
23:16:52.0609 1840        System windows directory: C:\WINDOWS
23:16:52.0609 1840        Processor architecture: Intel x86
23:16:52.0609 1840        Number of processors: 2
23:16:52.0609 1840        Page size: 0x1000
23:16:52.0609 1840        Boot type: Normal boot
23:16:52.0609 1840        ============================================================
23:16:55.0875 1840        Drive \Device\Harddisk0\DR0 - Size: 0x25433D6000 (149.05 Gb), SectorSize: 0x200, Cylinders: 0x4C01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050
23:16:55.0890 1840        ============================================================
23:16:55.0890 1840        \Device\Harddisk0\DR0:
23:16:55.0921 1840        MBR partitions:
23:16:55.0921 1840        \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x88E80A9
23:16:55.0921 1840        \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x88E80E8, BlocksNum 0x88E4227
23:16:55.0921 1840        ============================================================
23:16:55.0968 1840        C: <-> \Device\Harddisk0\DR0\Partition0
23:16:56.0062 1840        D: <-> \Device\Harddisk0\DR0\Partition1
23:16:56.0109 1840        ============================================================
23:16:56.0109 1840        Initialize success
23:16:56.0109 1840        ============================================================
23:17:19.0359 2580        ============================================================
23:17:19.0359 2580        Scan started
23:17:19.0359 2580        Mode: Manual;
23:17:19.0359 2580        ============================================================
23:17:19.0984 2580        Abiosdsk - ok
23:17:20.0000 2580        abp480n5 - ok
23:17:20.0046 2580        ACPI            (ac407f1a62c3a300b4f2b5a9f1d55b2c) C:\WINDOWS\system32\DRIVERS\ACPI.sys
23:17:20.0062 2580        ACPI - ok
23:17:20.0078 2580        ACPIEC          (9e1ca3160dafb159ca14f83b1e317f75) C:\WINDOWS\system32\DRIVERS\ACPIEC.sys
23:17:20.0093 2580        ACPIEC - ok
23:17:20.0109 2580        adpu160m - ok
23:17:20.0156 2580        aec            (8bed39e3c35d6a489438b8141717a557) C:\WINDOWS\system32\drivers\aec.sys
23:17:20.0156 2580        aec - ok
23:17:20.0218 2580        AFD            (1e44bc1e83d8fd2305f8d452db109cf9) C:\WINDOWS\System32\drivers\afd.sys
23:17:20.0234 2580        AFD - ok
23:17:20.0234 2580        Aha154x - ok
23:17:20.0265 2580        aic78u2 - ok
23:17:20.0281 2580        aic78xx - ok
23:17:20.0328 2580        Alerter        (738d80cc01d7bc7584be917b7f544394) C:\WINDOWS\system32\alrsvc.dll
23:17:20.0328 2580        Alerter - ok
23:17:20.0359 2580        ALG            (190cd73d4984f94d823f9444980513e5) C:\WINDOWS\System32\alg.exe
23:17:20.0359 2580        ALG - ok
23:17:20.0375 2580        AliIde - ok
23:17:20.0609 2580        Ambfilt        (f6af59d6eee5e1c304f7f73706ad11d8) C:\WINDOWS\system32\drivers\Ambfilt.sys
23:17:20.0671 2580        Ambfilt - ok
23:17:20.0765 2580        amsint - ok
23:17:20.0875 2580        Apple Mobile Device (3debbecf665dcdde3a95d9b902010817) C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleMobileDeviceService.exe
23:17:20.0875 2580        Apple Mobile Device - ok
23:17:20.0890 2580        AppMgmt - ok
23:17:21.0109 2580        AR5416          (e0ee769d14128014965e03b433f5f46e) C:\WINDOWS\system32\DRIVERS\athw.sys
23:17:21.0156 2580        AR5416 - ok
23:17:21.0281 2580        asc - ok
23:17:21.0296 2580        asc3350p - ok
23:17:21.0312 2580        asc3550 - ok
23:17:21.0421 2580        aspnet_state    (0e5e4957549056e2bf2c49f4f6b601ad) C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
23:17:21.0453 2580        aspnet_state - ok
23:17:21.0484 2580        AsusACPI        (12415a4b61ded200fe9932b47a35fa42) C:\WINDOWS\system32\DRIVERS\ASUSACPI.sys
23:17:21.0484 2580        AsusACPI - ok
23:17:21.0515 2580        AsyncMac        (b153affac761e7f5fcfa822b9c4e97bc) C:\WINDOWS\system32\DRIVERS\asyncmac.sys
23:17:21.0515 2580        AsyncMac - ok
23:17:21.0578 2580        atapi          (9f3a2f5aa6875c72bf062c712cfa2674) C:\WINDOWS\system32\DRIVERS\atapi.sys
23:17:21.0578 2580        atapi - ok
23:17:21.0593 2580        Atdisk - ok
23:17:21.0671 2580        Atmarpc        (9916c1225104ba14794209cfa8012159) C:\WINDOWS\system32\DRIVERS\atmarpc.sys
23:17:21.0671 2580        Atmarpc - ok
23:17:21.0718 2580        AudioSrv        (58ed0d5452df7be732193e7999c6b9a4) C:\WINDOWS\System32\audiosrv.dll
23:17:21.0734 2580        AudioSrv - ok
23:17:21.0781 2580        audstub        (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys
23:17:21.0781 2580        audstub - ok
23:17:21.0937 2580        BBSvc          (01a24b415926bb5f772dbe12459d97de) C:\Programme\Microsoft\BingBar\BBSvc.EXE
23:17:21.0953 2580        BBSvc - ok
23:17:22.0015 2580        BBUpdate        (785de7abda13309d6065305542829e76) C:\Programme\Microsoft\BingBar\SeaPort.EXE
23:17:22.0031 2580        BBUpdate - ok
23:17:22.0078 2580        Beep            (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys
23:17:22.0078 2580        Beep - ok
23:17:22.0171 2580        BITS            (d6f603772a789bb3228f310d650b8bd1) C:\WINDOWS\system32\qmgr.dll
23:17:22.0218 2580        BITS - ok
23:17:22.0250 2580        BMLoad          (70cd6d71fc48bbbd1385d7b35aeadecc) C:\WINDOWS\system32\drivers\BMLoad.sys
23:17:22.0265 2580        BMLoad - ok
23:17:22.0343 2580        Bonjour Service (db5bea73edaf19ac68b2c0fad0f92b1a) C:\Programme\Bonjour\mDNSResponder.exe
23:17:22.0359 2580        Bonjour Service - ok
23:17:22.0421 2580        Browser        (b42057f06bbb98b31876c0b3f2b54e33) C:\WINDOWS\System32\browser.dll
23:17:22.0421 2580        Browser - ok
23:17:22.0531 2580        btaudio        (4b43dfe1c1fbb305a1dc5504ef9bb34e) C:\WINDOWS\system32\drivers\btaudio.sys
23:17:22.0562 2580        btaudio - ok
23:17:22.0609 2580        BTDriver        (2f9f111d31aa3fbbe5781d829a4524e6) C:\WINDOWS\system32\DRIVERS\btport.sys
23:17:22.0609 2580        BTDriver - ok
23:17:22.0781 2580        BTKRNL          (70455baffc078b6152d1e52376296467) C:\WINDOWS\system32\DRIVERS\btkrnl.sys
23:17:22.0812 2580        BTKRNL - ok
23:17:22.0921 2580        btwdins        (e43f7709f36444681978f9dc067a976b) C:\Programme\WIDCOMM\Bluetooth Software\bin\btwdins.exe
23:17:22.0937 2580        btwdins - ok
23:17:22.0968 2580        BTWDNDIS        (485020a1e1fc5c51a800ca69c618d881) C:\WINDOWS\system32\DRIVERS\btwdndis.sys
23:17:22.0984 2580        BTWDNDIS - ok
23:17:23.0015 2580        btwhid          (949eca9c56f657c06d3166d51f3226c7) C:\WINDOWS\system32\DRIVERS\btwhid.sys
23:17:23.0015 2580        btwhid - ok
23:17:23.0031 2580        BTWUSB          (2cfc2bd8785f82a42fcad83de1fa5a36) C:\WINDOWS\system32\Drivers\btwusb.sys
23:17:23.0031 2580        BTWUSB - ok
23:17:23.0078 2580        cbidf2k        (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys
23:17:23.0078 2580        cbidf2k - ok
23:17:23.0109 2580        CCDECODE        (0be5aef125be881c4f854c554f2b025c) C:\WINDOWS\system32\DRIVERS\CCDECODE.sys
23:17:23.0109 2580        CCDECODE - ok
23:17:23.0125 2580        cd20xrnt - ok
23:17:23.0171 2580        Cdaudio        (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS\system32\drivers\Cdaudio.sys
23:17:23.0171 2580        Cdaudio - ok
23:17:23.0187 2580        Cdfs            (c885b02847f5d2fd45a24e219ed93b32) C:\WINDOWS\system32\drivers\Cdfs.sys
23:17:23.0203 2580        Cdfs - ok
23:17:23.0234 2580        Cdrom          (1f4260cc5b42272d71f79e570a27a4fe) C:\WINDOWS\system32\DRIVERS\cdrom.sys
23:17:23.0234 2580        Cdrom - ok
23:17:23.0250 2580        Changer - ok
23:17:23.0281 2580        CiSvc          (28e3040d1f1ca2008cd6b29dfebc9a5e) C:\WINDOWS\system32\cisvc.exe
23:17:23.0281 2580        CiSvc - ok
23:17:23.0296 2580        ClipSrv        (778a30ed3c134eb7e406afc407e9997d) C:\WINDOWS\system32\clipsrv.exe
23:17:23.0296 2580        ClipSrv - ok
23:17:23.0390 2580        clr_optimization_v2.0.50727_32 (d87acaed61e417bba546ced5e7e36d9c) C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
23:17:23.0437 2580        clr_optimization_v2.0.50727_32 - ok
23:17:23.0484 2580        CmBatt          (0f6c187d38d98f8df904589a5f94d411) C:\WINDOWS\system32\DRIVERS\CmBatt.sys
23:17:23.0484 2580        CmBatt - ok
23:17:23.0500 2580        CmdIde - ok
23:17:23.0515 2580        Compbatt        (6e4c9f21f0fae8940661144f41b13203) C:\WINDOWS\system32\DRIVERS\compbatt.sys
23:17:23.0531 2580        Compbatt - ok
23:17:23.0531 2580        COMSysApp - ok
23:17:23.0562 2580        Cpqarray - ok
23:17:23.0625 2580        CryptSvc        (611f824e5c703a5a899f84c5f1699e4d) C:\WINDOWS\System32\cryptsvc.dll
23:17:23.0640 2580        CryptSvc - ok
23:17:23.0640 2580        dac2w2k - ok
23:17:23.0656 2580        dac960nt - ok
23:17:23.0750 2580        DcomLaunch      (3127afbf2c1ed0ab14a1bbb7aaecb85b) C:\WINDOWS\system32\rpcss.dll
23:17:23.0765 2580        DcomLaunch - ok
23:17:23.0828 2580        Dhcp            (c29a1c9b75ba38fa37f8c44405dec360) C:\WINDOWS\System32\dhcpcsvc.dll
23:17:23.0843 2580        Dhcp - ok
23:17:23.0875 2580        Disk            (044452051f3e02e7963599fc8f4f3e25) C:\WINDOWS\system32\DRIVERS\disk.sys
23:17:23.0890 2580        Disk - ok
23:17:23.0890 2580        dmadmin - ok
23:17:24.0031 2580        dmboot          (0dcfc8395a99fecbb1ef771cec7fe4ea) C:\WINDOWS\system32\drivers\dmboot.sys
23:17:24.0062 2580        dmboot - ok
23:17:24.0093 2580        dmio            (53720ab12b48719d00e327da470a619a) C:\WINDOWS\system32\drivers\dmio.sys
23:17:24.0109 2580        dmio - ok
23:17:24.0125 2580        dmload          (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys
23:17:24.0140 2580        dmload - ok
23:17:24.0140 2580        dmserver        (25c83ffbba13b554eb6d59a9b2e2ee78) C:\WINDOWS\System32\dmserver.dll
23:17:24.0156 2580        dmserver - ok
23:17:24.0203 2580        DMusic          (8a208dfcf89792a484e76c40e5f50b45) C:\WINDOWS\system32\drivers\DMusic.sys
23:17:24.0203 2580        DMusic - ok
23:17:24.0250 2580        Dnscache        (407f3227ac618fd1ca54b335b083de07) C:\WINDOWS\System32\dnsrslvr.dll
23:17:24.0250 2580        Dnscache - ok
23:17:24.0281 2580        Dot3svc        (676e36c4ff5bcea1900f44182b9723e6) C:\WINDOWS\System32\dot3svc.dll
23:17:24.0281 2580        Dot3svc - ok
23:17:24.0296 2580        dpti2o - ok
23:17:24.0328 2580        drmkaud        (8f5fcff8e8848afac920905fbd9d33c8) C:\WINDOWS\system32\drivers\drmkaud.sys
23:17:24.0328 2580        drmkaud - ok
23:17:24.0359 2580        EapHost        (4e4f2fddab0a0736d7671134dcce91fb) C:\WINDOWS\System32\eapsvc.dll
23:17:24.0375 2580        EapHost - ok
23:17:24.0375 2580        ERSvc          (877c18558d70587aa7823a1a308ac96b) C:\WINDOWS\System32\ersvc.dll
23:17:24.0390 2580        ERSvc - ok
23:17:24.0437 2580        Eventlog        (a3edbe9053889fb24ab22492472b39dc) C:\WINDOWS\system32\services.exe
23:17:24.0453 2580        Eventlog - ok
23:17:24.0500 2580        EventSystem    (af4f6b5739d18ca7972ab53e091cbc74) C:\WINDOWS\system32\es.dll
23:17:24.0515 2580        EventSystem - ok
23:17:24.0562 2580        Fastfat        (38d332a6d56af32635675f132548343e) C:\WINDOWS\system32\drivers\Fastfat.sys
23:17:24.0562 2580        Fastfat - ok
23:17:24.0625 2580        FastUserSwitchingCompatibility (2db7d303c36ddd055215052f118e8e75) C:\WINDOWS\System32\shsvcs.dll
23:17:24.0625 2580        FastUserSwitchingCompatibility - ok
23:17:24.0671 2580        Fdc            (92cdd60b6730b9f50f6a1a0c1f8cdc81) C:\WINDOWS\system32\drivers\Fdc.sys
23:17:24.0671 2580        Fdc - ok
23:17:24.0703 2580        Fips            (b0678a548587c5f1967b0d70bacad6c1) C:\WINDOWS\system32\drivers\Fips.sys
23:17:24.0703 2580        Fips - ok
23:17:24.0734 2580        Flpydisk        (9d27e7b80bfcdf1cdd9b555862d5e7f0) C:\WINDOWS\system32\drivers\Flpydisk.sys
23:17:24.0734 2580        Flpydisk - ok
23:17:24.0781 2580        FltMgr          (b2cf4b0786f8212cb92ed2b50c6db6b0) C:\WINDOWS\system32\DRIVERS\fltMgr.sys
23:17:24.0796 2580        FltMgr - ok
23:17:24.0906 2580        FontCache3.0.0.0 (8ba7c024070f2b7fdd98ed8a4ba41789) C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
23:17:24.0906 2580        FontCache3.0.0.0 - ok
23:17:24.0953 2580        fssfltr        (e0087225b137e57239ff40f8ae82059b) C:\WINDOWS\system32\DRIVERS\fssfltr_tdi.sys
23:17:24.0953 2580        fssfltr - ok
23:17:25.0125 2580        fsssvc          (45b52394f9624237f33a8a3d73c0b221) C:\Programme\Windows Live\Family Safety\fsssvc.exe
23:17:25.0156 2580        fsssvc - ok
23:17:25.0203 2580        Fs_Rec          (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS\system32\drivers\Fs_Rec.sys
23:17:25.0203 2580        Fs_Rec - ok
23:17:25.0265 2580        Ftdisk          (8f1955ce42e1484714b542f341647778) C:\WINDOWS\system32\DRIVERS\ftdisk.sys
23:17:25.0265 2580        Ftdisk - ok
23:17:25.0296 2580        GEARAspiWDM    (8182ff89c65e4d38b2de4bb0fb18564e) C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys
23:17:25.0296 2580        GEARAspiWDM - ok
23:17:25.0343 2580        Gpc            (0a02c63c8b144bd8c86b103dee7c86a2) C:\WINDOWS\system32\DRIVERS\msgpc.sys
23:17:25.0343 2580        Gpc - ok
23:17:25.0375 2580        HDAudBus        (573c7d0a32852b48f3058cfd8026f511) C:\WINDOWS\system32\DRIVERS\HDAudBus.sys
23:17:25.0390 2580        HDAudBus - ok
23:17:25.0437 2580        helpsvc        (cb66bf85bf599befd6c6a57c2e20357f) C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll
23:17:25.0437 2580        helpsvc - ok
23:17:25.0468 2580        HidServ        (b35da85e60c0103f2e4104532da2f12b) C:\WINDOWS\System32\hidserv.dll
23:17:25.0484 2580        HidServ - ok
23:17:25.0546 2580        HidUsb          (ccf82c5ec8a7326c3066de870c06daf1) C:\WINDOWS\system32\DRIVERS\hidusb.sys
23:17:25.0546 2580        HidUsb - ok
23:17:25.0609 2580        hkmsvc          (ed29f14101523a6e0e808107405d452c) C:\WINDOWS\System32\kmsvc.dll
23:17:25.0609 2580        hkmsvc - ok
23:17:25.0625 2580        hpn - ok
23:17:25.0656 2580        HSPADataCardusbmdm (69cfe473434102d3fb12dbc7fda0d2a7) C:\WINDOWS\system32\DRIVERS\HSPADataCardusbmdm.sys
23:17:25.0671 2580        HSPADataCardusbmdm - ok
23:17:25.0703 2580        HSPADataCardusbnmea (69cfe473434102d3fb12dbc7fda0d2a7) C:\WINDOWS\system32\DRIVERS\HSPADataCardusbnmea.sys
23:17:25.0703 2580        HSPADataCardusbnmea - ok
23:17:25.0734 2580        HSPADataCardusbser (69cfe473434102d3fb12dbc7fda0d2a7) C:\WINDOWS\system32\DRIVERS\HSPADataCardusbser.sys
23:17:25.0734 2580        HSPADataCardusbser - ok
23:17:25.0812 2580        HTTP            (f80a415ef82cd06ffaf0d971528ead38) C:\WINDOWS\system32\Drivers\HTTP.sys
23:17:25.0812 2580        HTTP - ok
23:17:25.0843 2580        HTTPFilter      (9e4adb854cebcfb81a4b36718feecd16) C:\WINDOWS\System32\w3ssl.dll
23:17:25.0859 2580        HTTPFilter - ok
23:17:25.0875 2580        hwdatacard - ok
23:17:25.0921 2580        i2omgmt - ok
23:17:25.0937 2580        i2omp - ok
23:17:25.0968 2580        i8042prt        (e283b97cfbeb86c1d86baed5f7846a92) C:\WINDOWS\system32\DRIVERS\i8042prt.sys
23:17:25.0968 2580        i8042prt - ok
23:17:26.0640 2580        ialm            (0f68e2ec713f132ffb19e45415b09679) C:\WINDOWS\system32\DRIVERS\igxpmp32.sys
23:17:26.0875 2580        ialm - ok
23:17:27.0031 2580        iaStor          (8ef427c54497c5f8a7a645990e4278c7) C:\WINDOWS\system32\drivers\iaStor.sys
23:17:27.0031 2580        iaStor - ok
23:17:27.0250 2580        idsvc          (c01ac32dc5c03076cfb852cb5da5229c) C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
23:17:27.0281 2580        idsvc - ok
23:17:27.0312 2580        Imapi          (083a052659f5310dd8b6a6cb05edcf8e) C:\WINDOWS\system32\DRIVERS\imapi.sys
23:17:27.0328 2580        Imapi - ok
23:17:27.0375 2580        ImapiService    (d4b413aa210c21e46aedd2ba5b68d38e) C:\WINDOWS\system32\imapi.exe
23:17:27.0375 2580        ImapiService - ok
23:17:27.0406 2580        ini910u - ok
23:17:28.0000 2580        IntcAzAudAddService (1ae3cff80017ef89da959350724c7194) C:\WINDOWS\system32\drivers\RtkHDAud.sys
23:17:28.0156 2580        IntcAzAudAddService - ok
23:17:28.0296 2580        IntelIde - ok
23:17:28.0343 2580        intelppm        (4c7d2750158ed6e7ad642d97bffae351) C:\WINDOWS\system32\DRIVERS\intelppm.sys
23:17:28.0343 2580        intelppm - ok
23:17:28.0359 2580        Ip6Fw          (3bb22519a194418d5fec05d800a19ad0) C:\WINDOWS\system32\DRIVERS\Ip6Fw.sys
23:17:28.0375 2580        Ip6Fw - ok
23:17:28.0375 2580        IpFilterDriver  (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
23:17:28.0390 2580        IpFilterDriver - ok
23:17:28.0390 2580        IpInIp          (b87ab476dcf76e72010632b5550955f5) C:\WINDOWS\system32\DRIVERS\ipinip.sys
23:17:28.0390 2580        IpInIp - ok
23:17:28.0437 2580        IpNat          (cc748ea12c6effde940ee98098bf96bb) C:\WINDOWS\system32\DRIVERS\ipnat.sys
23:17:28.0437 2580        IpNat - ok
23:17:28.0593 2580        iPod Service    (178fe38b7740f598391eb2f51ae4ccac) C:\Programme\iPod\bin\iPodService.exe
23:17:28.0609 2580        iPod Service - ok
23:17:28.0656 2580        IPSec          (23c74d75e36e7158768dd63d92789a91) C:\WINDOWS\system32\DRIVERS\ipsec.sys
23:17:28.0656 2580        IPSec - ok
23:17:28.0687 2580        IRENUM          (c93c9ff7b04d772627a3646d89f7bf89) C:\WINDOWS\system32\DRIVERS\irenum.sys
23:17:28.0703 2580        IRENUM - ok
23:17:28.0734 2580        isapnp          (6dfb88f64135c525433e87648bda30de) C:\WINDOWS\system32\DRIVERS\isapnp.sys
23:17:28.0750 2580        isapnp - ok
23:17:28.0843 2580        JavaQuickStarterService (9ae07549a0d691a103faf8946554bdb7) C:\Programme\Java\jre6\bin\jqs.exe
23:17:28.0859 2580        JavaQuickStarterService - ok
23:17:28.0906 2580        Kbdclass        (1704d8c4c8807b889e43c649b478a452) C:\WINDOWS\system32\DRIVERS\kbdclass.sys
23:17:28.0906 2580        Kbdclass - ok
23:17:28.0968 2580        kmixer          (692bcf44383d056aed41b045a323d378) C:\WINDOWS\system32\drivers\kmixer.sys
23:17:28.0968 2580        kmixer - ok
23:17:29.0031 2580        KSecDD          (b467646c54cc746128904e1654c750c1) C:\WINDOWS\system32\drivers\KSecDD.sys
23:17:29.0046 2580        KSecDD - ok
23:17:29.0062 2580        L1c            (6c8658587e91ea25b0fd2e71781ad228) C:\WINDOWS\system32\DRIVERS\l1c51x86.sys
23:17:29.0062 2580        L1c - ok
23:17:29.0125 2580        LanmanServer    (2bbdcb79900990f0716dfcb714e72de7) C:\WINDOWS\System32\srvsvc.dll
23:17:29.0125 2580        LanmanServer - ok
23:17:29.0156 2580        lanmanworkstation (1869b14b06b44b44af70548e1ea3303f) C:\WINDOWS\System32\wkssvc.dll
23:17:29.0171 2580        lanmanworkstation - ok
23:17:29.0171 2580        lbrtfdc - ok
23:17:29.0234 2580        LmHosts        (636714b7d43c8d0c80449123fd266920) C:\WINDOWS\System32\lmhsvc.dll
23:17:29.0250 2580        LmHosts - ok
23:17:29.0281 2580        massfilter      (d5673785903639d186dc345ff86f423f) C:\WINDOWS\system32\drivers\massfilter.sys
23:17:29.0281 2580        massfilter - ok
23:17:29.0312 2580        MBAMProtector  (fb097bbc1a18f044bd17bd2fccf97865) C:\WINDOWS\system32\drivers\mbam.sys
23:17:29.0312 2580        MBAMProtector - ok
23:17:29.0421 2580        MBAMService    (ba400ed640bca1eae5c727ae17c10207) C:\Programme\Malwarebytes' Anti-Malware\mbamservice.exe
23:17:29.0437 2580        MBAMService - ok
23:17:29.0484 2580        Messenger      (b7550a7107281d170ce85524b1488c98) C:\WINDOWS\System32\msgsvc.dll
23:17:29.0500 2580        Messenger - ok
23:17:29.0546 2580        mnmdd          (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS\system32\drivers\mnmdd.sys
23:17:29.0546 2580        mnmdd - ok
23:17:29.0578 2580        mnmsrvc        (c2f1d365fd96791b037ee504868065d3) C:\WINDOWS\system32\mnmsrvc.exe
23:17:29.0578 2580        mnmsrvc - ok
23:17:29.0625 2580        Modem          (6fb74ebd4ec57a6f1781de3852cc3362) C:\WINDOWS\system32\drivers\Modem.sys
23:17:29.0625 2580        Modem - ok
23:17:29.0812 2580        Monfilt        (9fa7207d1b1adead88ae8eed9cdbbaa5) C:\WINDOWS\system32\drivers\Monfilt.sys
23:17:29.0875 2580        Monfilt - ok
23:17:29.0921 2580        Mouclass        (b24ce8005deab254c0251e15cb71d802) C:\WINDOWS\system32\DRIVERS\mouclass.sys
23:17:29.0937 2580        Mouclass - ok
23:17:29.0984 2580        mouhid          (66a6f73c74e1791464160a7065ce711a) C:\WINDOWS\system32\DRIVERS\mouhid.sys
23:17:29.0984 2580        mouhid - ok
23:17:30.0031 2580        MountMgr        (a80b9a0bad1b73637dbcbba7df72d3fd) C:\WINDOWS\system32\drivers\MountMgr.sys
23:17:30.0031 2580        MountMgr - ok
23:17:30.0125 2580        MozillaMaintenance (96aa8ba23142cc8e2b30f3cae0c80254) C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe
23:17:30.0140 2580        MozillaMaintenance - ok
23:17:30.0140 2580        mraid35x - ok
23:17:30.0187 2580        MRxDAV          (11d42bb6206f33fbb3ba0288d3ef81bd) C:\WINDOWS\system32\DRIVERS\mrxdav.sys
23:17:30.0203 2580        MRxDAV - ok
23:17:30.0281 2580        MRxSmb          (7d304a5eb4344ebeeab53a2fe3ffb9f0) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
23:17:30.0296 2580        MRxSmb - ok
23:17:30.0328 2580        MSDTC          (35a031af38c55f92d28aa03ee9f12cc9) C:\WINDOWS\system32\msdtc.exe
23:17:30.0343 2580        MSDTC - ok
23:17:30.0375 2580        Msfs            (c941ea2454ba8350021d774daf0f1027) C:\WINDOWS\system32\drivers\Msfs.sys
23:17:30.0375 2580        Msfs - ok
23:17:30.0421 2580        MsgPlusService  (3f3d6e8bd31b3c017d0ab24cd5ec0d05) C:\Programme\Yuna Software\Messenger Plus! for Skype\MsgPlusForSkypeService.exe
23:17:30.0421 2580        MsgPlusService - ok
23:17:30.0437 2580        MSIServer - ok
23:17:30.0468 2580        MSKSSRV        (d1575e71568f4d9e14ca56b7b0453bf1) C:\WINDOWS\system32\drivers\MSKSSRV.sys
23:17:30.0468 2580        MSKSSRV - ok
23:17:30.0500 2580        MSPCLOCK        (325bb26842fc7ccc1fcce2c457317f3e) C:\WINDOWS\system32\drivers\MSPCLOCK.sys
23:17:30.0500 2580        MSPCLOCK - ok
23:17:30.0531 2580        MSPQM          (bad59648ba099da4a17680b39730cb3d) C:\WINDOWS\system32\drivers\MSPQM.sys
23:17:30.0531 2580        MSPQM - ok
23:17:30.0578 2580        mssmbios        (af5f4f3f14a8ea2c26de30f7a1e17136) C:\WINDOWS\system32\DRIVERS\mssmbios.sys
23:17:30.0578 2580        mssmbios - ok
23:17:30.0593 2580        MSTEE          (e53736a9e30c45fa9e7b5eac55056d1d) C:\WINDOWS\system32\drivers\MSTEE.sys
23:17:30.0593 2580        MSTEE - ok
23:17:30.0640 2580        Mup            (de6a75f5c270e756c5508d94b6cf68f5) C:\WINDOWS\system32\drivers\Mup.sys
23:17:30.0640 2580        Mup - ok
23:17:30.0656 2580        NABTSFEC        (5b50f1b2a2ed47d560577b221da734db) C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys
23:17:30.0671 2580        NABTSFEC - ok
23:17:30.0750 2580        napagent        (46bb15ae2ac7d025d6d2567b876817bd) C:\WINDOWS\System32\qagentrt.dll
23:17:30.0765 2580        napagent - ok
23:17:30.0812 2580        NDIS            (1df7f42665c94b825322fae71721130d) C:\WINDOWS\system32\drivers\NDIS.sys
23:17:30.0828 2580        NDIS - ok
23:17:30.0859 2580        NdisIP          (7ff1f1fd8609c149aa432f95a8163d97) C:\WINDOWS\system32\DRIVERS\NdisIP.sys
23:17:30.0859 2580        NdisIP - ok
23:17:30.0906 2580        NdisTapi        (0109c4f3850dfbab279542515386ae22) C:\WINDOWS\system32\DRIVERS\ndistapi.sys
23:17:30.0906 2580        NdisTapi - ok
23:17:30.0953 2580        Ndisuio        (f927a4434c5028758a842943ef1a3849) C:\WINDOWS\system32\DRIVERS\ndisuio.sys
23:17:30.0953 2580        Ndisuio - ok
23:17:30.0968 2580        NdisWan        (edc1531a49c80614b2cfda43ca8659ab) C:\WINDOWS\system32\DRIVERS\ndiswan.sys
23:17:30.0984 2580        NdisWan - ok
23:17:31.0031 2580        NDProxy        (9282bd12dfb069d3889eb3fcc1000a9b) C:\WINDOWS\system32\drivers\NDProxy.sys
23:17:31.0031 2580        NDProxy - ok
23:17:31.0046 2580        NetBIOS        (5d81cf9a2f1a3a756b66cf684911cdf0) C:\WINDOWS\system32\DRIVERS\netbios.sys
23:17:31.0062 2580        NetBIOS - ok
23:17:31.0109 2580        NetBT          (74b2b2f5bea5e9a3dc021d685551bd3d) C:\WINDOWS\system32\DRIVERS\netbt.sys
23:17:31.0125 2580        NetBT - ok
23:17:31.0156 2580        NetDDE          (8ace4251bffd09ce75679fe940e996cc) C:\WINDOWS\system32\netdde.exe
23:17:31.0171 2580        NetDDE - ok
23:17:31.0187 2580        NetDDEdsdm      (8ace4251bffd09ce75679fe940e996cc) C:\WINDOWS\system32\netdde.exe
23:17:31.0187 2580        NetDDEdsdm - ok
23:17:31.0218 2580        Netlogon        (afb8261b56cba0d86aeb6df682af9785) C:\WINDOWS\system32\lsass.exe
23:17:31.0234 2580        Netlogon - ok
23:17:31.0296 2580        Netman          (e6d88f1f6745bf00b57e7855a2ab696c) C:\WINDOWS\System32\netman.dll
23:17:31.0312 2580        Netman - ok
23:17:31.0437 2580        NetTcpPortSharing (d34612c5d02d026535b3095d620626ae) C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
23:17:31.0437 2580        NetTcpPortSharing - ok
23:17:31.0515 2580        Nla            (f1b67b6b0751ae0e6e964b02821206a3) C:\WINDOWS\System32\mswsock.dll
23:17:31.0515 2580        Nla - ok
23:17:31.0562 2580        Npfs            (3182d64ae053d6fb034f44b6def8034a) C:\WINDOWS\system32\drivers\Npfs.sys
23:17:31.0562 2580        Npfs - ok
23:17:31.0656 2580        Ntfs            (78a08dd6a8d65e697c18e1db01c5cdca) C:\WINDOWS\system32\drivers\Ntfs.sys
23:17:31.0687 2580        Ntfs - ok
23:17:31.0687 2580        NtLmSsp        (afb8261b56cba0d86aeb6df682af9785) C:\WINDOWS\system32\lsass.exe
23:17:31.0703 2580        NtLmSsp - ok
23:17:31.0765 2580        NtmsSvc        (56af4064996fa5bac9c449b1514b4770) C:\WINDOWS\system32\ntmssvc.dll
23:17:31.0781 2580        NtmsSvc - ok
23:17:31.0812 2580        Null            (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys
23:17:31.0812 2580        Null - ok
23:17:31.0859 2580        NwlnkFlt        (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
23:17:31.0859 2580        NwlnkFlt - ok
23:17:31.0875 2580        NwlnkFwd        (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
23:17:31.0875 2580        NwlnkFwd - ok
23:17:32.0078 2580        odserv          (785f487a64950f3cb8e9f16253ba3b7b) C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE12\ODSERV.EXE
23:17:32.0093 2580        odserv - ok
23:17:32.0156 2580        ose            (5a432a042dae460abe7199b758e8606c) C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE
23:17:32.0171 2580        ose - ok
23:17:32.0218 2580        Parport        (f84785660305b9b903fb3bca8ba29837) C:\WINDOWS\system32\drivers\Parport.sys
23:17:32.0218 2580        Parport - ok
23:17:32.0250 2580        PartMgr        (beb3ba25197665d82ec7065b724171c6) C:\WINDOWS\system32\drivers\PartMgr.sys
23:17:32.0250 2580        PartMgr - ok
23:17:32.0296 2580        ParVdm          (c2bf987829099a3eaa2ca6a0a90ecb4f) C:\WINDOWS\system32\drivers\ParVdm.sys
23:17:32.0296 2580        ParVdm - ok
23:17:32.0328 2580        PCI            (387e8dedc343aa2d1efbc30580273acd) C:\WINDOWS\system32\DRIVERS\pci.sys
23:17:32.0328 2580        PCI - ok
23:17:32.0359 2580        PCIDump - ok
23:17:32.0375 2580        PCIIde          (59ba86d9a61cbcf4df8e598c331f5b82) C:\WINDOWS\system32\DRIVERS\pciide.sys
23:17:32.0375 2580        PCIIde - ok
23:17:32.0421 2580        Pcmcia          (a2a966b77d61847d61a3051df87c8c97) C:\WINDOWS\system32\drivers\Pcmcia.sys
23:17:32.0421 2580        Pcmcia - ok
23:17:32.0437 2580        PDCOMP - ok
23:17:32.0453 2580        PDFRAME - ok
23:17:32.0468 2580        PDRELI - ok
23:17:32.0484 2580        PDRFRAME - ok
23:17:32.0500 2580        perc2 - ok
23:17:32.0515 2580        perc2hib - ok
23:17:32.0593 2580        PlugPlay        (a3edbe9053889fb24ab22492472b39dc) C:\WINDOWS\system32\services.exe
23:17:32.0609 2580        PlugPlay - ok
23:17:32.0625 2580        PolicyAgent    (afb8261b56cba0d86aeb6df682af9785) C:\WINDOWS\system32\lsass.exe
23:17:32.0625 2580        PolicyAgent - ok
23:17:32.0656 2580        PptpMiniport    (efeec01b1d3cf84f16ddd24d9d9d8f99) C:\WINDOWS\system32\DRIVERS\raspptp.sys
23:17:32.0671 2580        PptpMiniport - ok
23:17:32.0671 2580        ProtectedStorage (afb8261b56cba0d86aeb6df682af9785) C:\WINDOWS\system32\lsass.exe
23:17:32.0671 2580        ProtectedStorage - ok
23:17:32.0687 2580        PSched          (09298ec810b07e5d582cb3a3f9255424) C:\WINDOWS\system32\DRIVERS\psched.sys
23:17:32.0703 2580        PSched - ok
23:17:32.0718 2580        Ptilink        (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys
23:17:32.0718 2580        Ptilink - ok
23:17:32.0734 2580        ql1080 - ok
23:17:32.0750 2580        Ql10wnt - ok
23:17:32.0750 2580        ql12160 - ok
23:17:32.0765 2580        ql1240 - ok
23:17:32.0781 2580        ql1280 - ok
23:17:32.0812 2580        RasAcd          (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERS\rasacd.sys
23:17:32.0828 2580        RasAcd - ok
23:17:32.0859 2580        RasAuto        (f5ba6caccdb66c8f048e867563203246) C:\WINDOWS\System32\rasauto.dll
23:17:32.0859 2580        RasAuto - ok
23:17:32.0890 2580        Rasl2tp        (11b4a627bc9614b885c4969bfa5ff8a6) C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
23:17:32.0890 2580        Rasl2tp - ok
23:17:32.0921 2580        RasMan          (f9a7b66ea345726edb5862a46b1eccd5) C:\WINDOWS\System32\rasmans.dll
23:17:32.0937 2580        RasMan - ok
23:17:32.0968 2580        RasPppoe        (5bc962f2654137c9909c3d4603587dee) C:\WINDOWS\system32\DRIVERS\raspppoe.sys
23:17:32.0968 2580        RasPppoe - ok
23:17:32.0984 2580        Raspti          (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERS\raspti.sys
23:17:32.0984 2580        Raspti - ok
23:17:33.0031 2580        Rdbss          (7ad224ad1a1437fe28d89cf22b17780a) C:\WINDOWS\system32\DRIVERS\rdbss.sys
23:17:33.0031 2580        Rdbss - ok
23:17:33.0078 2580        RDPCDD          (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
23:17:33.0078 2580        RDPCDD - ok
23:17:33.0140 2580        RDPWD          (6589db6e5969f8eee594cf71171c5028) C:\WINDOWS\system32\drivers\RDPWD.sys
23:17:33.0140 2580        RDPWD - ok
23:17:33.0187 2580        RDSessMgr      (263af18af0f3db99f574c95f284ccec9) C:\WINDOWS\system32\sessmgr.exe
23:17:33.0203 2580        RDSessMgr - ok
23:17:33.0250 2580        redbook        (ed761d453856f795a7fe056e42c36365) C:\WINDOWS\system32\DRIVERS\redbook.sys
23:17:33.0250 2580        redbook - ok
23:17:33.0296 2580        RemoteAccess    (0e97ec96d6942ceec2d188cc2eb69a01) C:\WINDOWS\System32\mprdim.dll
23:17:33.0296 2580        RemoteAccess - ok
23:17:33.0328 2580        RpcLocator      (2a02e21867497df20b8fc95631395169) C:\WINDOWS\system32\locator.exe
23:17:33.0328 2580        RpcLocator - ok
23:17:33.0437 2580        RpcSs          (3127afbf2c1ed0ab14a1bbb7aaecb85b) C:\WINDOWS\system32\rpcss.dll
23:17:33.0453 2580        RpcSs - ok
23:17:33.0484 2580        RSVP            (4bdd71b4b521521499dfd14735c4f398) C:\WINDOWS\system32\rsvp.exe
23:17:33.0500 2580        RSVP - ok
23:17:33.0515 2580        SamSs          (afb8261b56cba0d86aeb6df682af9785) C:\WINDOWS\system32\lsass.exe
23:17:33.0531 2580        SamSs - ok
23:17:33.0562 2580        SCardSvr        (dcec079fad95d36c8dd5cb6d779dfe32) C:\WINDOWS\System32\SCardSvr.exe
23:17:33.0578 2580        SCardSvr - ok
23:17:33.0640 2580        Schedule        (a050194a44d7fa8d7186ed2f4e8367ae) C:\WINDOWS\system32\schedsvc.dll
23:17:33.0656 2580        Schedule - ok
23:17:33.0687 2580        Secdrv          (90a3935d05b494a5a39d37e71f09a677) C:\WINDOWS\system32\DRIVERS\secdrv.sys
23:17:33.0687 2580        Secdrv - ok
23:17:33.0734 2580        seclogon        (bee4cfd1d48c23b44cf4b974b0b79b2b) C:\WINDOWS\System32\seclogon.dll
23:17:33.0734 2580        seclogon - ok
23:17:33.0765 2580        SENS            (2aac9b6ed9eddffb721d6452e34d67e3) C:\WINDOWS\system32\sens.dll
23:17:33.0781 2580        SENS - ok
23:17:33.0812 2580        Serial          (cf24eb4f0412c82bcd1f4f35a025e31d) C:\WINDOWS\system32\drivers\Serial.sys
23:17:33.0812 2580        Serial - ok
23:17:33.0843 2580        Sfloppy        (8e6b8c671615d126fdc553d1e2de5562) C:\WINDOWS\system32\drivers\Sfloppy.sys
23:17:33.0843 2580        Sfloppy - ok
23:17:33.0921 2580        SharedAccess    (cad058d5f8b889a87ca3eb3cf624dcef) C:\WINDOWS\System32\ipnathlp.dll
23:17:33.0937 2580        SharedAccess - ok
23:17:33.0984 2580        ShellHWDetection (2db7d303c36ddd055215052f118e8e75) C:\WINDOWS\System32\shsvcs.dll
23:17:33.0984 2580        ShellHWDetection - ok
23:17:34.0000 2580        Simbad - ok
23:17:34.0031 2580        SLIP            (866d538ebe33709a5c9f5c62b73b7d14) C:\WINDOWS\system32\DRIVERS\SLIP.sys
23:17:34.0046 2580        SLIP - ok
23:17:34.0046 2580        Sparrow - ok
23:17:34.0093 2580        splitter        (ab8b92451ecb048a4d1de7c3ffcb4a9f) C:\WINDOWS\system32\drivers\splitter.sys
23:17:34.0093 2580        splitter - ok
23:17:34.0140 2580        Spooler        (60784f891563fb1b767f70117fc2428f) C:\WINDOWS\system32\spoolsv.exe
23:17:34.0140 2580        Spooler - ok
23:17:34.0203 2580        sr              (50fa898f8c032796d3b1b9951bb5a90f) C:\WINDOWS\system32\DRIVERS\sr.sys
23:17:34.0203 2580        sr - ok
23:17:34.0234 2580        srservice      (fe77a85495065f3ad59c5c65b6c54182) C:\WINDOWS\system32\srsvc.dll
23:17:34.0250 2580        srservice - ok
23:17:34.0296 2580        Srv            (47ddfc2f003f7f9f0592c6874962a2e7) C:\WINDOWS\system32\DRIVERS\srv.sys
23:17:34.0312 2580        Srv - ok
23:17:34.0343 2580        SSDPSRV        (4df5b05dfaec29e13e1ed6f6ee12c500) C:\WINDOWS\System32\ssdpsrv.dll
23:17:34.0359 2580        SSDPSRV - ok
23:17:34.0437 2580        stisvc          (bc2c5985611c5356b24aeb370953ded9) C:\WINDOWS\system32\wiaservc.dll
23:17:34.0453 2580        stisvc - ok
23:17:34.0484 2580        streamip        (77813007ba6265c4b6098187e6ed79d2) C:\WINDOWS\system32\DRIVERS\StreamIP.sys
23:17:34.0500 2580        streamip - ok
23:17:34.0531 2580        swenum          (3941d127aef12e93addf6fe6ee027e0f) C:\WINDOWS\system32\DRIVERS\swenum.sys
23:17:34.0531 2580        swenum - ok
23:17:34.0578 2580        swmidi          (8ce882bcc6cf8a62f2b2323d95cb3d01) C:\WINDOWS\system32\drivers\swmidi.sys
23:17:34.0593 2580        swmidi - ok
23:17:34.0593 2580        SwPrv - ok
23:17:34.0609 2580        symc810 - ok
23:17:34.0625 2580        symc8xx - ok
23:17:34.0640 2580        sym_hi - ok
23:17:34.0656 2580        sym_u3 - ok
23:17:34.0718 2580        SynTP          (8e25a1dbb8527b2074af9b682f818768) C:\WINDOWS\system32\DRIVERS\SynTP.sys
23:17:34.0734 2580        SynTP - ok
23:17:34.0750 2580        sysaudio        (8b83f3ed0f1688b4958f77cd6d2bf290) C:\WINDOWS\system32\drivers\sysaudio.sys
23:17:34.0750 2580        sysaudio - ok
23:17:34.0796 2580        SysmonLog      (2903fffa2523926d6219428040dce6b9) C:\WINDOWS\system32\smlogsvc.exe
23:17:34.0796 2580        SysmonLog - ok
23:17:34.0859 2580        TapiSrv        (05903cac4b98908d55ea5774775b382e) C:\WINDOWS\System32\tapisrv.dll
23:17:34.0859 2580        TapiSrv - ok
23:17:34.0937 2580        Tcpip          (9aefa14bd6b182d61e3119fa5f436d3d) C:\WINDOWS\system32\DRIVERS\tcpip.sys
23:17:34.0937 2580        Tcpip - ok
23:17:34.0984 2580        tcpipBM        (74905ebcbb8cbdb1f3c0b1778bbcb4bc) C:\WINDOWS\system32\drivers\tcpipBM.sys
23:17:34.0984 2580        tcpipBM - ok
23:17:35.0015 2580        TDPIPE          (6471a66807f5e104e4885f5b67349397) C:\WINDOWS\system32\drivers\TDPIPE.sys
23:17:35.0015 2580        TDPIPE - ok
23:17:35.0031 2580        TDTCP          (c56b6d0402371cf3700eb322ef3aaf61) C:\WINDOWS\system32\drivers\TDTCP.sys
23:17:35.0031 2580        TDTCP - ok
23:17:35.0062 2580        TermDD          (88155247177638048422893737429d9e) C:\WINDOWS\system32\DRIVERS\termdd.sys
23:17:35.0062 2580        TermDD - ok
23:17:35.0109 2580        TermService    (b7de02c863d8f5a005a7bf375375a6a4) C:\WINDOWS\System32\termsrv.dll
23:17:35.0125 2580        TermService - ok
23:17:35.0187 2580        Themes          (2db7d303c36ddd055215052f118e8e75) C:\WINDOWS\System32\shsvcs.dll
23:17:35.0187 2580        Themes - ok
23:17:35.0203 2580        TosIde - ok
23:17:35.0250 2580        TrkWks          (626504572b175867f30f3215c04b3e2f) C:\WINDOWS\system32\trkwks.dll
23:17:35.0265 2580        TrkWks - ok
23:17:35.0312 2580        Udfs            (5787b80c2e3c5e2f56c2a233d91fa2c9) C:\WINDOWS\system32\drivers\Udfs.sys
23:17:35.0312 2580        Udfs - ok
23:17:35.0312 2580        ultra - ok
23:17:35.0406 2580        Update          (402ddc88356b1bac0ee3dd1580c76a31) C:\WINDOWS\system32\DRIVERS\update.sys
23:17:35.0406 2580        Update - ok
23:17:35.0453 2580        upnphost        (1dfd8975d8c89214b98d9387c1125b49) C:\WINDOWS\System32\upnphost.dll
23:17:35.0468 2580        upnphost - ok
23:17:35.0484 2580        UPS            (9b11e6118958e63e1fef129466e2bda7) C:\WINDOWS\System32\ups.exe
23:17:35.0500 2580        UPS - ok
23:17:35.0515 2580        USBAAPL        (83cafcb53201bbac04d822f32438e244) C:\WINDOWS\system32\Drivers\usbaapl.sys
23:17:35.0515 2580        USBAAPL - ok
23:17:35.0562 2580        usbccgp        (173f317ce0db8e21322e71b7e60a27e8) C:\WINDOWS\system32\DRIVERS\usbccgp.sys
23:17:35.0562 2580        usbccgp - ok
23:17:35.0625 2580        usbehci        (65dcf09d0e37d4c6b11b5b0b76d470a7) C:\WINDOWS\system32\DRIVERS\usbehci.sys
23:17:35.0625 2580        usbehci - ok
23:17:35.0671 2580        usbhub          (1ab3cdde553b6e064d2e754efe20285c) C:\WINDOWS\system32\DRIVERS\usbhub.sys
23:17:35.0671 2580        usbhub - ok
23:17:35.0703 2580        usbscan        (a0b8cf9deb1184fbdd20784a58fa75d4) C:\WINDOWS\system32\DRIVERS\usbscan.sys
23:17:35.0718 2580        usbscan - ok
23:17:35.0734 2580        usbstor        (a32426d9b14a089eaa1d922e0c5801a9) C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
23:17:35.0750 2580        usbstor - ok
23:17:35.0781 2580        usbuhci        (26496f9dee2d787fc3e61ad54821ffe6) C:\WINDOWS\system32\DRIVERS\usbuhci.sys
23:17:35.0781 2580        usbuhci - ok
23:17:35.0828 2580        usbvideo        (63bbfca7f390f4c49ed4b96bfb1633e0) C:\WINDOWS\system32\Drivers\usbvideo.sys
23:17:35.0828 2580        usbvideo - ok
23:17:35.0859 2580        uvclf          (c019889035cdc1a06f2febc93cbb6897) C:\WINDOWS\system32\DRIVERS\uvclf.sys
23:17:35.0859 2580        uvclf - ok
23:17:35.0921 2580        VgaSave        (0d3a8fafceacd8b7625cd549757a7df1) C:\WINDOWS\System32\drivers\vga.sys
23:17:35.0921 2580        VgaSave - ok
23:17:35.0937 2580        ViaIde - ok
23:17:35.0984 2580        VolSnap        (a5a712f4e880874a477af790b5186e1d) C:\WINDOWS\system32\drivers\VolSnap.sys
23:17:35.0984 2580        VolSnap - ok
23:17:36.0062 2580        VSS            (68f106273be29e7b7ef8266977268e78) C:\WINDOWS\System32\vssvc.exe
23:17:36.0078 2580        VSS - ok
23:17:36.0140 2580        W32Time        (7b353059e665f8b7ad2bbeaef597cf45) C:\WINDOWS\system32\w32time.dll
23:17:36.0140 2580        W32Time - ok
23:17:36.0171 2580        Wanarp          (e20b95baedb550f32dd489265c1da1f6) C:\WINDOWS\system32\DRIVERS\wanarp.sys
23:17:36.0171 2580        Wanarp - ok
23:17:36.0250 2580        Wdf01000        (bbcfeab7e871cddac2d397ee7fa91fdc) C:\WINDOWS\system32\Drivers\wdf01000.sys
23:17:36.0265 2580        Wdf01000 - ok
23:17:36.0281 2580        WDICA - ok
23:17:36.0328 2580        wdmaud          (6768acf64b18196494413695f0c3a00f) C:\WINDOWS\system32\drivers\wdmaud.sys
23:17:36.0343 2580        wdmaud - ok
23:17:36.0390 2580        WebClient      (81727c9873e3905a2ffc1ebd07265002) C:\WINDOWS\System32\webclnt.dll
23:17:36.0390 2580        WebClient - ok
23:17:36.0500 2580        winmgmt        (6f3f3973d97714cc5f906a19fe883729) C:\WINDOWS\system32\wbem\WMIsvc.dll
23:17:36.0500 2580        winmgmt - ok
23:17:36.0562 2580        WmdmPmSN        (c51b4a5c05a5475708e3c81c7765b71d) C:\WINDOWS\system32\MsPMSNSv.dll
23:17:36.0562 2580        WmdmPmSN - ok
23:17:36.0609 2580        WmiApSrv        (93908111ba57a6e60ec2fa2de202105c) C:\WINDOWS\system32\wbem\wmiapsrv.exe
23:17:36.0609 2580        WmiApSrv - ok
23:17:36.0765 2580        WMPNetworkSvc  (bf05650bb7df5e9ebdd25974e22403bb) C:\Programme\Windows Media Player\WMPNetwk.exe
23:17:36.0796 2580        WMPNetworkSvc - ok
23:17:36.0843 2580        WpdUsb          (cf4def1bf66f06964dc0d91844239104) C:\WINDOWS\system32\DRIVERS\wpdusb.sys
23:17:36.0843 2580        WpdUsb - ok
23:17:36.0890 2580        wscsvc          (300b3e84faf1a5c1f791c159ba28035d) C:\WINDOWS\system32\wscsvc.dll
23:17:36.0906 2580        wscsvc - ok
23:17:36.0921 2580        WSTCODEC        (c98b39829c2bbd34e454150633c62c78) C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS
23:17:36.0937 2580        WSTCODEC - ok
23:17:36.0953 2580        wuauserv        (7b4fe05202aa6bf9f4dfd0e6a0d8a085) C:\WINDOWS\system32\wuauserv.dll
23:17:36.0968 2580        wuauserv - ok
23:17:37.0015 2580        WudfPf          (f15feafffbb3644ccc80c5da584e6311) C:\WINDOWS\system32\DRIVERS\WudfPf.sys
23:17:37.0015 2580        WudfPf - ok
23:17:37.0031 2580        WudfRd          (28b524262bce6de1f7ef9f510ba3985b) C:\WINDOWS\system32\DRIVERS\wudfrd.sys
23:17:37.0031 2580        WudfRd - ok
23:17:37.0062 2580        WudfSvc        (05231c04253c5bc30b26cbaae680ed89) C:\WINDOWS\System32\WUDFSvc.dll
23:17:37.0078 2580        WudfSvc - ok
23:17:37.0156 2580        WZCSVC          (c4f109c005f6725162d2d12ca751e4a7) C:\WINDOWS\System32\wzcsvc.dll
23:17:37.0171 2580        WZCSVC - ok
23:17:37.0234 2580        xmlprov        (0ada34871a2e1cd2caafed1237a47750) C:\WINDOWS\System32\xmlprov.dll
23:17:37.0234 2580        xmlprov - ok
23:17:37.0296 2580        MBR (0x1B8)    (8f558eb6672622401da993e1e865c861) \Device\Harddisk0\DR0
23:17:38.0156 2580        \Device\Harddisk0\DR0 - ok
23:17:38.0156 2580        Boot (0x1200)  (26c64c34138ffaf46ce22b59d69bc2e4) \Device\Harddisk0\DR0\Partition0
23:17:38.0156 2580        \Device\Harddisk0\DR0\Partition0 - ok
23:17:38.0187 2580        Boot (0x1200)  (e60ca0fe09b255faa51152c9b4ee1437) \Device\Harddisk0\DR0\Partition1
23:17:38.0187 2580        \Device\Harddisk0\DR0\Partition1 - ok
23:17:38.0187 2580        ============================================================
23:17:38.0187 2580        Scan finished
23:17:38.0187 2580        ============================================================
23:17:38.0218 3800        Detected object count: 0
23:17:38.0218 3800        Actual detected object count: 0
23:18:25.0000 3508        ============================================================
23:18:25.0000 3508        Scan started
23:18:25.0000 3508        Mode: Manual; SigCheck; TDLFS;
23:18:25.0000 3508        ============================================================
23:18:25.0171 3508        Abiosdsk - ok
23:18:25.0187 3508        abp480n5 - ok
23:18:25.0234 3508        ACPI            (ac407f1a62c3a300b4f2b5a9f1d55b2c) C:\WINDOWS\system32\DRIVERS\ACPI.sys
23:18:27.0093 3508        ACPI - ok
23:18:27.0140 3508        ACPIEC          (9e1ca3160dafb159ca14f83b1e317f75) C:\WINDOWS\system32\DRIVERS\ACPIEC.sys
23:18:27.0421 3508        ACPIEC - ok
23:18:27.0421 3508        adpu160m - ok
23:18:27.0531 3508        aec            (8bed39e3c35d6a489438b8141717a557) C:\WINDOWS\system32\drivers\aec.sys
23:18:27.0781 3508        aec - ok
23:18:27.0828 3508        AFD            (1e44bc1e83d8fd2305f8d452db109cf9) C:\WINDOWS\System32\drivers\afd.sys
23:18:27.0875 3508        AFD - ok
23:18:27.0890 3508        Aha154x - ok
23:18:27.0890 3508        aic78u2 - ok
23:18:27.0906 3508        aic78xx - ok
23:18:27.0968 3508        Alerter        (738d80cc01d7bc7584be917b7f544394) C:\WINDOWS\system32\alrsvc.dll
23:18:28.0187 3508        Alerter - ok
23:18:28.0218 3508        ALG            (190cd73d4984f94d823f9444980513e5) C:\WINDOWS\System32\alg.exe
23:18:28.0343 3508        ALG - ok
23:18:28.0343 3508        AliIde - ok
23:18:28.0562 3508        Ambfilt        (f6af59d6eee5e1c304f7f73706ad11d8) C:\WINDOWS\system32\drivers\Ambfilt.sys
23:18:28.0734 3508        Ambfilt - ok
23:18:28.0843 3508        amsint - ok
23:18:28.0953 3508        Apple Mobile Device (3debbecf665dcdde3a95d9b902010817) C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleMobileDeviceService.exe
23:18:28.0984 3508        Apple Mobile Device - ok
23:18:28.0984 3508        AppMgmt - ok
23:18:29.0187 3508        AR5416          (e0ee769d14128014965e03b433f5f46e) C:\WINDOWS\system32\DRIVERS\athw.sys
23:18:29.0312 3508        AR5416 - ok
23:18:29.0468 3508        asc - ok
23:18:29.0484 3508        asc3350p - ok
23:18:29.0500 3508        asc3550 - ok
23:18:29.0625 3508        aspnet_state    (0e5e4957549056e2bf2c49f4f6b601ad) C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
23:18:29.0656 3508        aspnet_state - ok
23:18:29.0703 3508        AsusACPI        (12415a4b61ded200fe9932b47a35fa42) C:\WINDOWS\system32\DRIVERS\ASUSACPI.sys
23:18:29.0781 3508        AsusACPI - ok
23:18:29.0859 3508        AsyncMac        (b153affac761e7f5fcfa822b9c4e97bc) C:\WINDOWS\system32\DRIVERS\asyncmac.sys
23:18:30.0171 3508        AsyncMac - ok
23:18:30.0218 3508        atapi          (9f3a2f5aa6875c72bf062c712cfa2674) C:\WINDOWS\system32\DRIVERS\atapi.sys
23:18:30.0453 3508        atapi - ok
23:18:30.0468 3508        Atdisk - ok
23:18:30.0531 3508        Atmarpc        (9916c1225104ba14794209cfa8012159) C:\WINDOWS\system32\DRIVERS\atmarpc.sys
23:18:30.0750 3508        Atmarpc - ok
23:18:30.0828 3508        AudioSrv        (58ed0d5452df7be732193e7999c6b9a4) C:\WINDOWS\System32\audiosrv.dll
23:18:31.0078 3508        AudioSrv - ok
23:18:31.0125 3508        audstub        (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys
23:18:31.0343 3508        audstub - ok
23:18:31.0484 3508        BBSvc          (01a24b415926bb5f772dbe12459d97de) C:\Programme\Microsoft\BingBar\BBSvc.EXE
23:18:31.0515 3508        BBSvc - ok
23:18:31.0593 3508        BBUpdate        (785de7abda13309d6065305542829e76) C:\Programme\Microsoft\BingBar\SeaPort.EXE
23:18:31.0640 3508        BBUpdate - ok
23:18:31.0671 3508        Beep            (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys
23:18:31.0906 3508        Beep - ok
23:18:32.0000 3508        BITS            (d6f603772a789bb3228f310d650b8bd1) C:\WINDOWS\system32\qmgr.dll
23:18:32.0281 3508        BITS - ok
23:18:32.0343 3508        BMLoad          (70cd6d71fc48bbbd1385d7b35aeadecc) C:\WINDOWS\system32\drivers\BMLoad.sys
23:18:32.0468 3508        BMLoad ( UnsignedFile.Multi.Generic ) - warning
23:18:32.0468 3508        BMLoad - detected UnsignedFile.Multi.Generic (1)
23:18:32.0562 3508        Bonjour Service (db5bea73edaf19ac68b2c0fad0f92b1a) C:\Programme\Bonjour\mDNSResponder.exe
23:18:32.0593 3508        Bonjour Service - ok
23:18:32.0656 3508        Browser        (b42057f06bbb98b31876c0b3f2b54e33) C:\WINDOWS\System32\browser.dll
23:18:32.0890 3508        Browser - ok
23:18:33.0000 3508        btaudio        (4b43dfe1c1fbb305a1dc5504ef9bb34e) C:\WINDOWS\system32\drivers\btaudio.sys
23:18:33.0062 3508        btaudio - ok
23:18:33.0109 3508        BTDriver        (2f9f111d31aa3fbbe5781d829a4524e6) C:\WINDOWS\system32\DRIVERS\btport.sys
23:18:33.0140 3508        BTDriver - ok
23:18:33.0250 3508        BTKRNL          (70455baffc078b6152d1e52376296467) C:\WINDOWS\system32\DRIVERS\btkrnl.sys
23:18:33.0343 3508        BTKRNL - ok
23:18:33.0453 3508        btwdins        (e43f7709f36444681978f9dc067a976b) C:\Programme\WIDCOMM\Bluetooth Software\bin\btwdins.exe
23:18:33.0500 3508        btwdins - ok
23:18:33.0546 3508        BTWDNDIS        (485020a1e1fc5c51a800ca69c618d881) C:\WINDOWS\system32\DRIVERS\btwdndis.sys
23:18:33.0578 3508        BTWDNDIS - ok
23:18:33.0593 3508        btwhid          (949eca9c56f657c06d3166d51f3226c7) C:\WINDOWS\system32\DRIVERS\btwhid.sys
23:18:33.0625 3508        btwhid - ok
23:18:33.0640 3508        BTWUSB          (2cfc2bd8785f82a42fcad83de1fa5a36) C:\WINDOWS\system32\Drivers\btwusb.sys
23:18:33.0671 3508        BTWUSB - ok
23:18:33.0718 3508        cbidf2k        (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys
23:18:33.0968 3508        cbidf2k - ok
23:18:34.0000 3508        CCDECODE        (0be5aef125be881c4f854c554f2b025c) C:\WINDOWS\system32\DRIVERS\CCDECODE.sys
23:18:34.0250 3508        CCDECODE - ok
23:18:34.0265 3508        cd20xrnt - ok
23:18:34.0328 3508        Cdaudio        (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS\system32\drivers\Cdaudio.sys
23:18:34.0562 3508        Cdaudio - ok
23:18:34.0578 3508        Cdfs            (c885b02847f5d2fd45a24e219ed93b32) C:\WINDOWS\system32\drivers\Cdfs.sys
23:18:34.0812 3508        Cdfs - ok
23:18:34.0843 3508        Cdrom          (1f4260cc5b42272d71f79e570a27a4fe) C:\WINDOWS\system32\DRIVERS\cdrom.sys
23:18:35.0046 3508        Cdrom - ok
23:18:35.0062 3508        Changer - ok
23:18:35.0109 3508        CiSvc          (28e3040d1f1ca2008cd6b29dfebc9a5e) C:\WINDOWS\system32\cisvc.exe
23:18:35.0343 3508        CiSvc - ok
23:18:35.0375 3508        ClipSrv        (778a30ed3c134eb7e406afc407e9997d) C:\WINDOWS\system32\clipsrv.exe
23:18:35.0593 3508        ClipSrv - ok
23:18:35.0703 3508        clr_optimization_v2.0.50727_32 (d87acaed61e417bba546ced5e7e36d9c) C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
23:18:35.0734 3508        clr_optimization_v2.0.50727_32 - ok
23:18:35.0765 3508        CmBatt          (0f6c187d38d98f8df904589a5f94d411) C:\WINDOWS\system32\DRIVERS\CmBatt.sys
23:18:36.0015 3508        CmBatt - ok
23:18:36.0015 3508        CmdIde - ok
23:18:36.0046 3508        Compbatt        (6e4c9f21f0fae8940661144f41b13203) C:\WINDOWS\system32\DRIVERS\compbatt.sys
23:18:36.0281 3508        Compbatt - ok
23:18:36.0296 3508        COMSysApp - ok
23:18:36.0312 3508        Cpqarray - ok
23:18:36.0359 3508        CryptSvc        (611f824e5c703a5a899f84c5f1699e4d) C:\WINDOWS\System32\cryptsvc.dll
23:18:36.0578 3508        CryptSvc - ok
23:18:36.0593 3508        dac2w2k - ok
23:18:36.0609 3508        dac960nt - ok
23:18:36.0687 3508        DcomLaunch      (3127afbf2c1ed0ab14a1bbb7aaecb85b) C:\WINDOWS\system32\rpcss.dll
23:18:36.0796 3508        DcomLaunch - ok
23:18:36.0843 3508        Dhcp            (c29a1c9b75ba38fa37f8c44405dec360) C:\WINDOWS\System32\dhcpcsvc.dll
23:18:37.0078 3508        Dhcp - ok
23:18:37.0125 3508        Disk            (044452051f3e02e7963599fc8f4f3e25) C:\WINDOWS\system32\DRIVERS\disk.sys
23:18:37.0406 3508        Disk - ok
23:18:37.0421 3508        dmadmin - ok
23:18:37.0593 3508        dmboot          (0dcfc8395a99fecbb1ef771cec7fe4ea) C:\WINDOWS\system32\drivers\dmboot.sys
23:18:37.0859 3508        dmboot - ok
23:18:37.0906 3508        dmio            (53720ab12b48719d00e327da470a619a) C:\WINDOWS\system32\drivers\dmio.sys
23:18:38.0187 3508        dmio - ok
23:18:38.0218 3508        dmload          (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys
23:18:38.0453 3508        dmload - ok
23:18:38.0500 3508        dmserver        (25c83ffbba13b554eb6d59a9b2e2ee78) C:\WINDOWS\System32\dmserver.dll
23:18:38.0734 3508        dmserver - ok
23:18:38.0812 3508        DMusic          (8a208dfcf89792a484e76c40e5f50b45) C:\WINDOWS\system32\drivers\DMusic.sys
23:18:39.0031 3508        DMusic - ok
23:18:39.0109 3508        Dnscache        (407f3227ac618fd1ca54b335b083de07) C:\WINDOWS\System32\dnsrslvr.dll
23:18:39.0203 3508        Dnscache - ok
23:18:39.0250 3508        Dot3svc        (676e36c4ff5bcea1900f44182b9723e6) C:\WINDOWS\System32\dot3svc.dll
23:18:39.0500 3508        Dot3svc - ok
23:18:39.0515 3508        dpti2o - ok
23:18:39.0562 3508        drmkaud        (8f5fcff8e8848afac920905fbd9d33c8) C:\WINDOWS\system32\drivers\drmkaud.sys
23:18:39.0828 3508        drmkaud - ok
23:18:39.0843 3508        EapHost        (4e4f2fddab0a0736d7671134dcce91fb) C:\WINDOWS\System32\eapsvc.dll
23:18:40.0093 3508        EapHost - ok
23:18:40.0125 3508        ERSvc          (877c18558d70587aa7823a1a308ac96b) C:\WINDOWS\System32\ersvc.dll
23:18:40.0359 3508        ERSvc - ok
23:18:40.0406 3508        Eventlog        (a3edbe9053889fb24ab22492472b39dc) C:\WINDOWS\system32\services.exe
23:18:40.0437 3508        Eventlog - ok
23:18:40.0484 3508        EventSystem    (af4f6b5739d18ca7972ab53e091cbc74) C:\WINDOWS\system32\es.dll
23:18:40.0578 3508        EventSystem - ok
23:18:40.0609 3508        Fastfat        (38d332a6d56af32635675f132548343e) C:\WINDOWS\system32\drivers\Fastfat.sys
23:18:40.0843 3508        Fastfat - ok
23:18:40.0921 3508        FastUserSwitchingCompatibility (2db7d303c36ddd055215052f118e8e75) C:\WINDOWS\System32\shsvcs.dll
23:18:40.0968 3508        FastUserSwitchingCompatibility - ok
23:18:41.0015 3508        Fdc            (92cdd60b6730b9f50f6a1a0c1f8cdc81) C:\WINDOWS\system32\drivers\Fdc.sys
23:18:41.0265 3508        Fdc - ok
23:18:41.0296 3508        Fips            (b0678a548587c5f1967b0d70bacad6c1) C:\WINDOWS\system32\drivers\Fips.sys
23:18:41.0531 3508        Fips - ok
23:18:41.0593 3508        Flpydisk        (9d27e7b80bfcdf1cdd9b555862d5e7f0) C:\WINDOWS\system32\drivers\Flpydisk.sys
23:18:41.0812 3508        Flpydisk - ok
23:18:41.0875 3508        FltMgr          (b2cf4b0786f8212cb92ed2b50c6db6b0) C:\WINDOWS\system32\DRIVERS\fltMgr.sys
23:18:42.0109 3508        FltMgr - ok
23:18:42.0218 3508        FontCache3.0.0.0 (8ba7c024070f2b7fdd98ed8a4ba41789) C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
23:18:42.0234 3508        FontCache3.0.0.0 - ok
23:18:42.0296 3508        fssfltr        (e0087225b137e57239ff40f8ae82059b) C:\WINDOWS\system32\DRIVERS\fssfltr_tdi.sys
23:18:42.0312 3508        fssfltr - ok
23:18:42.0468 3508        fsssvc          (45b52394f9624237f33a8a3d73c0b221) C:\Programme\Windows Live\Family Safety\fsssvc.exe
23:18:42.0531 3508        fsssvc - ok
23:18:42.0578 3508        Fs_Rec          (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS\system32\drivers\Fs_Rec.sys
23:18:42.0812 3508        Fs_Rec - ok
23:18:42.0906 3508        Ftdisk          (8f1955ce42e1484714b542f341647778) C:\WINDOWS\system32\DRIVERS\ftdisk.sys
23:18:43.0140 3508        Ftdisk - ok
23:18:43.0187 3508        GEARAspiWDM    (8182ff89c65e4d38b2de4bb0fb18564e) C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys
23:18:43.0218 3508        GEARAspiWDM - ok
23:18:43.0250 3508        Gpc            (0a02c63c8b144bd8c86b103dee7c86a2) C:\WINDOWS\system32\DRIVERS\msgpc.sys
23:18:43.0484 3508        Gpc - ok
23:18:43.0531 3508        HDAudBus        (573c7d0a32852b48f3058cfd8026f511) C:\WINDOWS\system32\DRIVERS\HDAudBus.sys
23:18:43.0734 3508        HDAudBus - ok
23:18:43.0843 3508        helpsvc        (cb66bf85bf599befd6c6a57c2e20357f) C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll
23:18:44.0078 3508        helpsvc - ok
23:18:44.0109 3508        HidServ        (b35da85e60c0103f2e4104532da2f12b) C:\WINDOWS\System32\hidserv.dll
23:18:44.0343 3508        HidServ - ok
23:18:44.0390 3508        HidUsb          (ccf82c5ec8a7326c3066de870c06daf1) C:\WINDOWS\system32\DRIVERS\hidusb.sys
23:18:44.0609 3508        HidUsb - ok
23:18:44.0703 3508        hkmsvc          (ed29f14101523a6e0e808107405d452c) C:\WINDOWS\System32\kmsvc.dll
23:18:44.0921 3508        hkmsvc - ok
23:18:44.0937 3508        hpn - ok
23:18:45.0000 3508        HSPADataCardusbmdm (69cfe473434102d3fb12dbc7fda0d2a7) C:\WINDOWS\system32\DRIVERS\HSPADataCardusbmdm.sys
23:18:45.0093 3508        HSPADataCardusbmdm - ok
23:18:45.0125 3508        HSPADataCardusbnmea (69cfe473434102d3fb12dbc7fda0d2a7) C:\WINDOWS\system32\DRIVERS\HSPADataCardusbnmea.sys
23:18:45.0156 3508        HSPADataCardusbnmea - ok
23:18:45.0187 3508        HSPADataCardusbser (69cfe473434102d3fb12dbc7fda0d2a7) C:\WINDOWS\system32\DRIVERS\HSPADataCardusbser.sys
23:18:45.0203 3508        HSPADataCardusbser - ok
23:18:45.0265 3508        HTTP            (f80a415ef82cd06ffaf0d971528ead38) C:\WINDOWS\system32\Drivers\HTTP.sys
23:18:45.0343 3508        HTTP - ok
23:18:45.0375 3508        HTTPFilter      (9e4adb854cebcfb81a4b36718feecd16) C:\WINDOWS\System32\w3ssl.dll
23:18:45.0625 3508        HTTPFilter - ok
23:18:45.0640 3508        hwdatacard - ok
23:18:45.0671 3508        i2omgmt - ok
23:18:45.0687 3508        i2omp - ok
23:18:45.0750 3508        i8042prt        (e283b97cfbeb86c1d86baed5f7846a92) C:\WINDOWS\system32\DRIVERS\i8042prt.sys
23:18:45.0984 3508        i8042prt - ok
23:18:46.0671 3508        ialm            (0f68e2ec713f132ffb19e45415b09679) C:\WINDOWS\system32\DRIVERS\igxpmp32.sys
23:18:47.0015 3508        ialm - ok
23:18:47.0171 3508        iaStor          (8ef427c54497c5f8a7a645990e4278c7) C:\WINDOWS\system32\drivers\iaStor.sys
23:18:47.0203 3508        iaStor - ok
23:18:47.0453 3508        idsvc          (c01ac32dc5c03076cfb852cb5da5229c) C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
23:18:47.0562 3508        idsvc - ok
23:18:47.0609 3508        Imapi          (083a052659f5310dd8b6a6cb05edcf8e) C:\WINDOWS\system32\DRIVERS\imapi.sys
23:18:47.0906 3508        Imapi - ok
23:18:47.0937 3508        ImapiService    (d4b413aa210c21e46aedd2ba5b68d38e) C:\WINDOWS\system32\imapi.exe
23:18:48.0187 3508        ImapiService - ok
23:18:48.0203 3508        ini910u - ok
23:18:48.0781 3508        IntcAzAudAddService (1ae3cff80017ef89da959350724c7194) C:\WINDOWS\system32\drivers\RtkHDAud.sys
23:18:49.0093 3508        IntcAzAudAddService - ok
23:18:49.0218 3508        IntelIde - ok
23:18:49.0265 3508        intelppm        (4c7d2750158ed6e7ad642d97bffae351) C:\WINDOWS\system32\DRIVERS\intelppm.sys
23:18:49.0531 3508        intelppm - ok
23:18:49.0562 3508        Ip6Fw          (3bb22519a194418d5fec05d800a19ad0) C:\WINDOWS\system32\DRIVERS\Ip6Fw.sys
23:18:49.0828 3508        Ip6Fw - ok
23:18:49.0843 3508        IpFilterDriver  (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
23:18:50.0078 3508        IpFilterDriver - ok
23:18:50.0093 3508        IpInIp          (b87ab476dcf76e72010632b5550955f5) C:\WINDOWS\system32\DRIVERS\ipinip.sys
23:18:50.0328 3508        IpInIp - ok
23:18:50.0375 3508        IpNat          (cc748ea12c6effde940ee98098bf96bb) C:\WINDOWS\system32\DRIVERS\ipnat.sys
23:18:50.0593 3508        IpNat - ok
23:18:50.0812 3508        iPod Service    (178fe38b7740f598391eb2f51ae4ccac) C:\Programme\iPod\bin\iPodService.exe
23:18:50.0859 3508        iPod Service - ok
23:18:50.0921 3508        IPSec          (23c74d75e36e7158768dd63d92789a91) C:\WINDOWS\system32\DRIVERS\ipsec.sys
23:18:51.0156 3508        IPSec - ok
23:18:51.0203 3508        IRENUM          (c93c9ff7b04d772627a3646d89f7bf89) C:\WINDOWS\system32\DRIVERS\irenum.sys
23:18:51.0328 3508        IRENUM - ok
23:18:51.0390 3508        isapnp          (6dfb88f64135c525433e87648bda30de) C:\WINDOWS\system32\DRIVERS\isapnp.sys
23:18:51.0625 3508        isapnp - ok
23:18:51.0734 3508        JavaQuickStarterService (9ae07549a0d691a103faf8946554bdb7) C:\Programme\Java\jre6\bin\jqs.exe
23:18:51.0796 3508        JavaQuickStarterService - ok
23:18:51.0828 3508        Kbdclass        (1704d8c4c8807b889e43c649b478a452) C:\WINDOWS\system32\DRIVERS\kbdclass.sys
23:18:52.0062 3508        Kbdclass - ok
23:18:52.0140 3508        kmixer          (692bcf44383d056aed41b045a323d378) C:\WINDOWS\system32\drivers\kmixer.sys
23:18:52.0421 3508        kmixer - ok
23:18:52.0500 3508        KSecDD          (b467646c54cc746128904e1654c750c1) C:\WINDOWS\system32\drivers\KSecDD.sys
23:18:52.0609 3508        KSecDD - ok
23:18:52.0656 3508        L1c            (6c8658587e91ea25b0fd2e71781ad228) C:\WINDOWS\system32\DRIVERS\l1c51x86.sys
23:18:52.0703 3508        L1c - ok
23:18:52.0765 3508        LanmanServer    (2bbdcb79900990f0716dfcb714e72de7) C:\WINDOWS\System32\srvsvc.dll
23:18:52.0828 3508        LanmanServer - ok
23:18:52.0875 3508        lanmanworkstation (1869b14b06b44b44af70548e1ea3303f) C:\WINDOWS\System32\wkssvc.dll
23:18:52.0921 3508        lanmanworkstation - ok
23:18:52.0937 3508        lbrtfdc - ok
23:18:53.0000 3508        LmHosts        (636714b7d43c8d0c80449123fd266920) C:\WINDOWS\System32\lmhsvc.dll
23:18:53.0296 3508        LmHosts - ok
23:18:53.0328 3508        massfilter      (d5673785903639d186dc345ff86f423f) C:\WINDOWS\system32\drivers\massfilter.sys
23:18:53.0390 3508        massfilter - ok
23:18:53.0421 3508        MBAMProtector  (fb097bbc1a18f044bd17bd2fccf97865) C:\WINDOWS\system32\drivers\mbam.sys
23:18:53.0453 3508        MBAMProtector - ok
23:18:53.0562 3508        MBAMService    (ba400ed640bca1eae5c727ae17c10207) C:\Programme\Malwarebytes' Anti-Malware\mbamservice.exe
23:18:53.0609 3508        MBAMService - ok
23:18:53.0671 3508        Messenger      (b7550a7107281d170ce85524b1488c98) C:\WINDOWS\System32\msgsvc.dll
23:18:53.0906 3508        Messenger - ok
23:18:53.0953 3508        mnmdd          (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS\system32\drivers\mnmdd.sys
23:18:54.0187 3508        mnmdd - ok
23:18:54.0234 3508        mnmsrvc        (c2f1d365fd96791b037ee504868065d3) C:\WINDOWS\system32\mnmsrvc.exe
23:18:54.0453 3508        mnmsrvc - ok
23:18:54.0500 3508        Modem          (6fb74ebd4ec57a6f1781de3852cc3362) C:\WINDOWS\system32\drivers\Modem.sys
23:18:54.0718 3508        Modem - ok
23:18:54.0921 3508        Monfilt        (9fa7207d1b1adead88ae8eed9cdbbaa5) C:\WINDOWS\system32\drivers\Monfilt.sys
23:18:55.0046 3508        Monfilt - ok
23:18:55.0093 3508        Mouclass        (b24ce8005deab254c0251e15cb71d802) C:\WINDOWS\system32\DRIVERS\mouclass.sys
23:18:55.0343 3508        Mouclass - ok
23:18:55.0390 3508        mouhid          (66a6f73c74e1791464160a7065ce711a) C:\WINDOWS\system32\DRIVERS\mouhid.sys
23:18:55.0656 3508        mouhid - ok
23:18:55.0703 3508        MountMgr        (a80b9a0bad1b73637dbcbba7df72d3fd) C:\WINDOWS\system32\drivers\MountMgr.sys
23:18:55.0921 3508        MountMgr - ok
23:18:56.0046 3508        MozillaMaintenance (96aa8ba23142cc8e2b30f3cae0c80254) C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe
23:18:56.0078 3508        MozillaMaintenance - ok
23:18:56.0078 3508        mraid35x - ok
23:18:56.0125 3508        MRxDAV          (11d42bb6206f33fbb3ba0288d3ef81bd) C:\WINDOWS\system32\DRIVERS\mrxdav.sys
23:18:56.0359 3508        MRxDAV - ok
23:18:56.0437 3508        MRxSmb          (7d304a5eb4344ebeeab53a2fe3ffb9f0) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
23:18:56.0515 3508        MRxSmb - ok
23:18:56.0546 3508        MSDTC          (35a031af38c55f92d28aa03ee9f12cc9) C:\WINDOWS\system32\msdtc.exe
23:18:56.0781 3508        MSDTC - ok
23:18:56.0875 3508        Msfs            (c941ea2454ba8350021d774daf0f1027) C:\WINDOWS\system32\drivers\Msfs.sys
23:18:57.0093 3508        Msfs - ok
23:18:57.0218 3508        MsgPlusService  (3f3d6e8bd31b3c017d0ab24cd5ec0d05) C:\Programme\Yuna Software\Messenger Plus! for Skype\MsgPlusForSkypeService.exe
23:18:57.0250 3508        MsgPlusService - ok
23:18:57.0250 3508        MSIServer - ok
23:18:57.0281 3508        MSKSSRV        (d1575e71568f4d9e14ca56b7b0453bf1) C:\WINDOWS\system32\drivers\MSKSSRV.sys
23:18:57.0515 3508        MSKSSRV - ok
23:18:57.0578 3508        MSPCLOCK        (325bb26842fc7ccc1fcce2c457317f3e) C:\WINDOWS\system32\drivers\MSPCLOCK.sys
23:18:57.0812 3508        MSPCLOCK - ok
23:18:57.0843 3508        MSPQM          (bad59648ba099da4a17680b39730cb3d) C:\WINDOWS\system32\drivers\MSPQM.sys
23:18:58.0062 3508        MSPQM - ok
23:18:58.0125 3508        mssmbios        (af5f4f3f14a8ea2c26de30f7a1e17136) C:\WINDOWS\system32\DRIVERS\mssmbios.sys
23:18:58.0343 3508        mssmbios - ok
23:18:58.0343 3508        MSTEE          (e53736a9e30c45fa9e7b5eac55056d1d) C:\WINDOWS\system32\drivers\MSTEE.sys
23:18:58.0562 3508        MSTEE - ok
23:18:58.0625 3508        Mup            (de6a75f5c270e756c5508d94b6cf68f5) C:\WINDOWS\system32\drivers\Mup.sys
23:18:58.0656 3508        Mup - ok
23:18:58.0703 3508        NABTSFEC        (5b50f1b2a2ed47d560577b221da734db) C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys
23:18:58.0937 3508        NABTSFEC - ok
23:18:59.0015 3508        napagent        (46bb15ae2ac7d025d6d2567b876817bd) C:\WINDOWS\System32\qagentrt.dll
23:18:59.0265 3508        napagent - ok
23:18:59.0328 3508        NDIS            (1df7f42665c94b825322fae71721130d) C:\WINDOWS\system32\drivers\NDIS.sys
23:18:59.0578 3508        NDIS - ok
23:18:59.0578 3508        NdisIP          (7ff1f1fd8609c149aa432f95a8163d97) C:\WINDOWS\system32\DRIVERS\NdisIP.sys
23:18:59.0796 3508        NdisIP - ok
23:18:59.0843 3508        NdisTapi        (0109c4f3850dfbab279542515386ae22) C:\WINDOWS\system32\DRIVERS\ndistapi.sys
23:18:59.0890 3508        NdisTapi - ok
23:18:59.0937 3508        Ndisuio        (f927a4434c5028758a842943ef1a3849) C:\WINDOWS\system32\DRIVERS\ndisuio.sys
23:19:00.0156 3508        Ndisuio - ok
23:19:00.0171 3508        NdisWan        (edc1531a49c80614b2cfda43ca8659ab) C:\WINDOWS\system32\DRIVERS\ndiswan.sys
23:19:00.0390 3508        NdisWan - ok
23:19:00.0500 3508        NDProxy        (9282bd12dfb069d3889eb3fcc1000a9b) C:\WINDOWS\system32\drivers\NDProxy.sys
23:19:00.0531 3508        NDProxy - ok
23:19:00.0562 3508        NetBIOS        (5d81cf9a2f1a3a756b66cf684911cdf0) C:\WINDOWS\system32\DRIVERS\netbios.sys
23:19:00.0765 3508        NetBIOS - ok
23:19:00.0828 3508        NetBT          (74b2b2f5bea5e9a3dc021d685551bd3d) C:\WINDOWS\system32\DRIVERS\netbt.sys
23:19:01.0031 3508        NetBT - ok
23:19:01.0093 3508        NetDDE          (8ace4251bffd09ce75679fe940e996cc) C:\WINDOWS\system32\netdde.exe
23:19:01.0296 3508        NetDDE - ok
23:19:01.0312 3508        NetDDEdsdm      (8ace4251bffd09ce75679fe940e996cc) C:\WINDOWS\system32\netdde.exe
23:19:01.0531 3508        NetDDEdsdm - ok
23:19:01.0578 3508        Netlogon        (afb8261b56cba0d86aeb6df682af9785) C:\WINDOWS\system32\lsass.exe
23:19:01.0796 3508        Netlogon - ok
23:19:01.0906 3508        Netman          (e6d88f1f6745bf00b57e7855a2ab696c) C:\WINDOWS\System32\netman.dll
23:19:02.0125 3508        Netman - ok
23:19:02.0281 3508        NetTcpPortSharing (d34612c5d02d026535b3095d620626ae) C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
23:19:02.0312 3508        NetTcpPortSharing - ok
23:19:02.0375 3508        Nla            (f1b67b6b0751ae0e6e964b02821206a3) C:\WINDOWS\System32\mswsock.dll
23:19:02.0421 3508        Nla - ok
23:19:02.0468 3508        Npfs            (3182d64ae053d6fb034f44b6def8034a) C:\WINDOWS\system32\drivers\Npfs.sys
23:19:02.0718 3508        Npfs - ok
23:19:02.0781 3508        Ntfs            (78a08dd6a8d65e697c18e1db01c5cdca) C:\WINDOWS\system32\drivers\Ntfs.sys
23:19:03.0015 3508        Ntfs - ok
23:19:03.0031 3508        NtLmSsp        (afb8261b56cba0d86aeb6df682af9785) C:\WINDOWS\system32\lsass.exe
23:19:03.0234 3508        NtLmSsp - ok
23:19:03.0312 3508        NtmsSvc        (56af4064996fa5bac9c449b1514b4770) C:\WINDOWS\system32\ntmssvc.dll
23:19:03.0531 3508        NtmsSvc - ok
23:19:03.0578 3508        Null            (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys
23:19:03.0781 3508        Null - ok
23:19:03.0859 3508        NwlnkFlt        (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
23:19:04.0062 3508        NwlnkFlt - ok
23:19:04.0078 3508        NwlnkFwd        (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
23:19:04.0296 3508        NwlnkFwd - ok
23:19:04.0468 3508        odserv          (785f487a64950f3cb8e9f16253ba3b7b) C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE12\ODSERV.EXE
23:19:04.0515 3508        odserv - ok
23:19:04.0562 3508        ose            (5a432a042dae460abe7199b758e8606c) C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE
23:19:04.0578 3508        ose - ok
23:19:04.0625 3508        Parport        (f84785660305b9b903fb3bca8ba29837) C:\WINDOWS\system32\drivers\Parport.sys
23:19:04.0843 3508        Parport - ok
23:19:04.0890 3508        PartMgr        (beb3ba25197665d82ec7065b724171c6) C:\WINDOWS\system32\drivers\PartMgr.sys
23:19:05.0156 3508        PartMgr - ok
23:19:05.0203 3508        ParVdm          (c2bf987829099a3eaa2ca6a0a90ecb4f) C:\WINDOWS\system32\drivers\ParVdm.sys
23:19:05.0437 3508        ParVdm - ok
23:19:05.0468 3508        PCI            (387e8dedc343aa2d1efbc30580273acd) C:\WINDOWS\system32\DRIVERS\pci.sys
23:19:05.0687 3508        PCI - ok
23:19:05.0703 3508        PCIDump - ok
23:19:05.0718 3508        PCIIde          (59ba86d9a61cbcf4df8e598c331f5b82) C:\WINDOWS\system32\DRIVERS\pciide.sys
23:19:05.0921 3508        PCIIde - ok
23:19:05.0953 3508        Pcmcia          (a2a966b77d61847d61a3051df87c8c97) C:\WINDOWS\system32\drivers\Pcmcia.sys
23:19:06.0187 3508        Pcmcia - ok
23:19:06.0187 3508        PDCOMP - ok
23:19:06.0203 3508        PDFRAME - ok
23:19:06.0218 3508        PDRELI - ok
23:19:06.0234 3508        PDRFRAME - ok
23:19:06.0250 3508        perc2 - ok
23:19:06.0250 3508        perc2hib - ok
23:19:06.0343 3508        PlugPlay        (a3edbe9053889fb24ab22492472b39dc) C:\WINDOWS\system32\services.exe
23:19:06.0375 3508        PlugPlay - ok
23:19:06.0406 3508        PolicyAgent    (afb8261b56cba0d86aeb6df682af9785) C:\WINDOWS\system32\lsass.exe
23:19:06.0609 3508        PolicyAgent - ok
23:19:06.0687 3508        PptpMiniport    (efeec01b1d3cf84f16ddd24d9d9d8f99) C:\WINDOWS\system32\DRIVERS\raspptp.sys
23:19:06.0906 3508        PptpMiniport - ok
23:19:06.0906 3508        ProtectedStorage (afb8261b56cba0d86aeb6df682af9785) C:\WINDOWS\system32\lsass.exe
23:19:07.0125 3508        ProtectedStorage - ok
23:19:07.0140 3508        PSched          (09298ec810b07e5d582cb3a3f9255424) C:\WINDOWS\system32\DRIVERS\psched.sys
23:19:07.0343 3508        PSched - ok
23:19:07.0359 3508        Ptilink        (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys
23:19:07.0578 3508        Ptilink - ok
23:19:07.0593 3508        ql1080 - ok
23:19:07.0609 3508        Ql10wnt - ok
23:19:07.0625 3508        ql12160 - ok
23:19:07.0625 3508        ql1240 - ok
23:19:07.0640 3508        ql1280 - ok
23:19:07.0687 3508        RasAcd          (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERS\rasacd.sys
23:19:07.0890 3508        RasAcd - ok
23:19:07.0968 3508        RasAuto        (f5ba6caccdb66c8f048e867563203246) C:\WINDOWS\System32\rasauto.dll
23:19:08.0171 3508        RasAuto - ok
23:19:08.0250 3508        Rasl2tp        (11b4a627bc9614b885c4969bfa5ff8a6) C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
23:19:08.0453 3508        Rasl2tp - ok
23:19:08.0593 3508        RasMan          (f9a7b66ea345726edb5862a46b1eccd5) C:\WINDOWS\System32\rasmans.dll
23:19:08.0796 3508        RasMan - ok
23:19:08.0859 3508        RasPppoe        (5bc962f2654137c9909c3d4603587dee) C:\WINDOWS\system32\DRIVERS\raspppoe.sys
23:19:09.0093 3508        RasPppoe - ok
23:19:09.0109 3508        Raspti          (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERS\raspti.sys
23:19:09.0312 3508        Raspti - ok
23:19:09.0359 3508        Rdbss          (7ad224ad1a1437fe28d89cf22b17780a) C:\WINDOWS\system32\DRIVERS\rdbss.sys
23:19:09.0578 3508        Rdbss - ok
23:19:09.0671 3508        RDPCDD          (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
23:19:09.0890 3508        RDPCDD - ok
23:19:09.0984 3508        RDPWD          (6589db6e5969f8eee594cf71171c5028) C:\WINDOWS\system32\drivers\RDPWD.sys
23:19:10.0046 3508        RDPWD - ok
23:19:10.0093 3508        RDSessMgr      (263af18af0f3db99f574c95f284ccec9) C:\WINDOWS\system32\sessmgr.exe
23:19:10.0328 3508        RDSessMgr - ok
23:19:10.0375 3508        redbook        (ed761d453856f795a7fe056e42c36365) C:\WINDOWS\system32\DRIVERS\redbook.sys
23:19:10.0625 3508        redbook - ok
23:19:10.0671 3508        RemoteAccess    (0e97ec96d6942ceec2d188cc2eb69a01) C:\WINDOWS\System32\mprdim.dll
23:19:10.0875 3508        RemoteAccess - ok
23:19:10.0984 3508        RpcLocator      (2a02e21867497df20b8fc95631395169) C:\WINDOWS\system32\locator.exe
23:19:11.0187 3508        RpcLocator - ok
23:19:11.0312 3508        RpcSs          (3127afbf2c1ed0ab14a1bbb7aaecb85b) C:\WINDOWS\system32\rpcss.dll
23:19:11.0375 3508        RpcSs - ok
23:19:11.0421 3508        RSVP            (4bdd71b4b521521499dfd14735c4f398) C:\WINDOWS\system32\rsvp.exe
23:19:11.0625 3508        RSVP - ok
23:19:11.0671 3508        SamSs          (afb8261b56cba0d86aeb6df682af9785) C:\WINDOWS\system32\lsass.exe
23:19:11.0890 3508        SamSs - ok
23:19:11.0968 3508        SCardSvr        (dcec079fad95d36c8dd5cb6d779dfe32) C:\WINDOWS\System32\SCardSvr.exe
23:19:12.0187 3508        SCardSvr - ok
23:19:12.0281 3508        Schedule        (a050194a44d7fa8d7186ed2f4e8367ae) C:\WINDOWS\system32\schedsvc.dll
23:19:12.0500 3508        Schedule - ok
23:19:12.0562 3508        Secdrv          (90a3935d05b494a5a39d37e71f09a677) C:\WINDOWS\system32\DRIVERS\secdrv.sys
23:19:12.0640 3508        Secdrv - ok
23:19:12.0687 3508        seclogon        (bee4cfd1d48c23b44cf4b974b0b79b2b) C:\WINDOWS\System32\seclogon.dll
23:19:12.0890 3508        seclogon - ok
23:19:12.0953 3508        SENS            (2aac9b6ed9eddffb721d6452e34d67e3) C:\WINDOWS\system32\sens.dll
23:19:13.0171 3508        SENS - ok
23:19:13.0250 3508        Serial          (cf24eb4f0412c82bcd1f4f35a025e31d) C:\WINDOWS\system32\drivers\Serial.sys
23:19:13.0453 3508        Serial - ok
23:19:13.0546 3508        Sfloppy        (8e6b8c671615d126fdc553d1e2de5562) C:\WINDOWS\system32\drivers\Sfloppy.sys
23:19:13.0750 3508        Sfloppy - ok
23:19:13.0890 3508        SharedAccess    (cad058d5f8b889a87ca3eb3cf624dcef) C:\WINDOWS\System32\ipnathlp.dll
23:19:14.0109 3508        SharedAccess - ok
23:19:14.0187 3508        ShellHWDetection (2db7d303c36ddd055215052f118e8e75) C:\WINDOWS\System32\shsvcs.dll
23:19:14.0203 3508        ShellHWDetection - ok
23:19:14.0218 3508        Simbad - ok
23:19:14.0250 3508        SLIP            (866d538ebe33709a5c9f5c62b73b7d14) C:\WINDOWS\system32\DRIVERS\SLIP.sys
23:19:14.0468 3508        SLIP - ok
23:19:14.0484 3508        Sparrow - ok
23:19:14.0562 3508        splitter        (ab8b92451ecb048a4d1de7c3ffcb4a9f) C:\WINDOWS\system32\drivers\splitter.sys
23:19:14.0765 3508        splitter - ok
23:19:14.0875 3508        Spooler        (60784f891563fb1b767f70117fc2428f) C:\WINDOWS\system32\spoolsv.exe
23:19:14.0921 3508        Spooler - ok
23:19:14.0968 3508        sr              (50fa898f8c032796d3b1b9951bb5a90f) C:\WINDOWS\system32\DRIVERS\sr.sys
23:19:15.0093 3508        sr - ok
23:19:15.0125 3508        srservice      (fe77a85495065f3ad59c5c65b6c54182) C:\WINDOWS\system32\srsvc.dll
23:19:15.0218 3508        srservice - ok
23:19:15.0265 3508        Srv            (47ddfc2f003f7f9f0592c6874962a2e7) C:\WINDOWS\system32\DRIVERS\srv.sys
23:19:15.0343 3508        Srv - ok
23:19:15.0390 3508        SSDPSRV        (4df5b05dfaec29e13e1ed6f6ee12c500) C:\WINDOWS\System32\ssdpsrv.dll
23:19:15.0515 3508        SSDPSRV - ok
23:19:15.0593 3508        stisvc          (bc2c5985611c5356b24aeb370953ded9) C:\WINDOWS\system32\wiaservc.dll
23:19:15.0843 3508        stisvc - ok
23:19:15.0890 3508        streamip        (77813007ba6265c4b6098187e6ed79d2) C:\WINDOWS\system32\DRIVERS\StreamIP.sys
23:19:16.0093 3508        streamip - ok
23:19:16.0156 3508        swenum          (3941d127aef12e93addf6fe6ee027e0f) C:\WINDOWS\system32\DRIVERS\swenum.sys
23:19:16.0375 3508        swenum - ok
23:19:16.0421 3508        swmidi          (8ce882bcc6cf8a62f2b2323d95cb3d01) C:\WINDOWS\system32\drivers\swmidi.sys
23:19:16.0640 3508        swmidi - ok
23:19:16.0640 3508        SwPrv - ok
23:19:16.0656 3508        symc810 - ok
23:19:16.0671 3508        symc8xx - ok
23:19:16.0687 3508        sym_hi - ok
23:19:16.0703 3508        sym_u3 - ok
23:19:16.0765 3508        SynTP          (8e25a1dbb8527b2074af9b682f818768) C:\WINDOWS\system32\DRIVERS\SynTP.sys
23:19:16.0796 3508        SynTP - ok
23:19:16.0812 3508        sysaudio        (8b83f3ed0f1688b4958f77cd6d2bf290) C:\WINDOWS\system32\drivers\sysaudio.sys
23:19:17.0031 3508        sysaudio - ok
23:19:17.0093 3508        SysmonLog      (2903fffa2523926d6219428040dce6b9) C:\WINDOWS\system32\smlogsvc.exe
23:19:17.0296 3508        SysmonLog - ok
23:19:17.0359 3508        TapiSrv        (05903cac4b98908d55ea5774775b382e) C:\WINDOWS\System32\tapisrv.dll
23:19:17.0593 3508        TapiSrv - ok
23:19:17.0703 3508        Tcpip          (9aefa14bd6b182d61e3119fa5f436d3d) C:\WINDOWS\system32\DRIVERS\tcpip.sys
23:19:17.0765 3508        Tcpip - ok
23:19:17.0796 3508        tcpipBM        (74905ebcbb8cbdb1f3c0b1778bbcb4bc) C:\WINDOWS\system32\drivers\tcpipBM.sys
23:19:17.0828 3508        tcpipBM ( UnsignedFile.Multi.Generic ) - warning
23:19:17.0828 3508        tcpipBM - detected UnsignedFile.Multi.Generic (1)
23:19:17.0859 3508        TDPIPE          (6471a66807f5e104e4885f5b67349397) C:\WINDOWS\system32\drivers\TDPIPE.sys
23:19:18.0078 3508        TDPIPE - ok
23:19:18.0078 3508        TDTCP          (c56b6d0402371cf3700eb322ef3aaf61) C:\WINDOWS\system32\drivers\TDTCP.sys
23:19:18.0296 3508        TDTCP - ok
23:19:18.0312 3508        TermDD          (88155247177638048422893737429d9e) C:\WINDOWS\system32\DRIVERS\termdd.sys
23:19:18.0531 3508        TermDD - ok
23:19:18.0593 3508        TermService    (b7de02c863d8f5a005a7bf375375a6a4) C:\WINDOWS\System32\termsrv.dll
23:19:18.0796 3508        TermService - ok
23:19:18.0875 3508        Themes          (2db7d303c36ddd055215052f118e8e75) C:\WINDOWS\System32\shsvcs.dll
23:19:18.0890 3508        Themes - ok
23:19:18.0906 3508        TosIde - ok
23:19:18.0968 3508        TrkWks          (626504572b175867f30f3215c04b3e2f) C:\WINDOWS\system32\trkwks.dll
23:19:19.0187 3508        TrkWks - ok
23:19:19.0265 3508        Udfs            (5787b80c2e3c5e2f56c2a233d91fa2c9) C:\WINDOWS\system32\drivers\Udfs.sys
23:19:19.0468 3508        Udfs - ok
23:19:19.0484 3508        ultra - ok
23:19:19.0593 3508        Update          (402ddc88356b1bac0ee3dd1580c76a31) C:\WINDOWS\system32\DRIVERS\update.sys
23:19:19.0812 3508        Update - ok
23:19:19.0859 3508        upnphost        (1dfd8975d8c89214b98d9387c1125b49) C:\WINDOWS\System32\upnphost.dll
23:19:19.0968 3508        upnphost - ok
23:19:20.0000 3508        UPS            (9b11e6118958e63e1fef129466e2bda7) C:\WINDOWS\System32\ups.exe
23:19:20.0203 3508        UPS - ok
23:19:20.0250 3508        USBAAPL        (83cafcb53201bbac04d822f32438e244) C:\WINDOWS\system32\Drivers\usbaapl.sys
23:19:20.0328 3508        USBAAPL - ok
23:19:20.0375 3508        usbccgp        (173f317ce0db8e21322e71b7e60a27e8) C:\WINDOWS\system32\DRIVERS\usbccgp.sys
23:19:20.0593 3508        usbccgp - ok
23:19:20.0656 3508        usbehci        (65dcf09d0e37d4c6b11b5b0b76d470a7) C:\WINDOWS\system32\DRIVERS\usbehci.sys
23:19:20.0875 3508        usbehci - ok
23:19:20.0937 3508        usbhub          (1ab3cdde553b6e064d2e754efe20285c) C:\WINDOWS\system32\DRIVERS\usbhub.sys
23:19:21.0140 3508        usbhub - ok
23:19:21.0187 3508        usbscan        (a0b8cf9deb1184fbdd20784a58fa75d4) C:\WINDOWS\system32\DRIVERS\usbscan.sys
23:19:21.0406 3508        usbscan - ok
23:19:21.0421 3508        usbstor        (a32426d9b14a089eaa1d922e0c5801a9) C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
23:19:21.0656 3508        usbstor - ok
23:19:21.0687 3508        usbuhci        (26496f9dee2d787fc3e61ad54821ffe6) C:\WINDOWS\system32\DRIVERS\usbuhci.sys
23:19:21.0890 3508        usbuhci - ok
23:19:21.0968 3508        usbvideo        (63bbfca7f390f4c49ed4b96bfb1633e0) C:\WINDOWS\system32\Drivers\usbvideo.sys
23:19:22.0187 3508        usbvideo - ok
23:19:22.0234 3508        uvclf          (c019889035cdc1a06f2febc93cbb6897) C:\WINDOWS\system32\DRIVERS\uvclf.sys
23:19:22.0281 3508        uvclf - ok
23:19:22.0343 3508        VgaSave        (0d3a8fafceacd8b7625cd549757a7df1) C:\WINDOWS\System32\drivers\vga.sys
23:19:22.0562 3508        VgaSave - ok
23:19:22.0562 3508        ViaIde - ok
23:19:22.0671 3508        VolSnap        (a5a712f4e880874a477af790b5186e1d) C:\WINDOWS\system32\drivers\VolSnap.sys
23:19:22.0875 3508        VolSnap - ok
23:19:22.0984 3508        VSS            (68f106273be29e7b7ef8266977268e78) C:\WINDOWS\System32\vssvc.exe
23:19:23.0078 3508        VSS - ok
23:19:23.0140 3508        W32Time        (7b353059e665f8b7ad2bbeaef597cf45) C:\WINDOWS\system32\w32time.dll
23:19:23.0406 3508        W32Time - ok
23:19:23.0453 3508        Wanarp          (e20b95baedb550f32dd489265c1da1f6) C:\WINDOWS\system32\DRIVERS\wanarp.sys
23:19:23.0671 3508        Wanarp - ok
23:19:23.0796 3508        Wdf01000        (bbcfeab7e871cddac2d397ee7fa91fdc) C:\WINDOWS\system32\Drivers\wdf01000.sys
23:19:23.0843 3508        Wdf01000 - ok
23:19:23.0843 3508        WDICA - ok
23:19:23.0906 3508        wdmaud          (6768acf64b18196494413695f0c3a00f) C:\WINDOWS\system32\drivers\wdmaud.sys
23:19:24.0125 3508        wdmaud - ok
23:19:24.0187 3508        WebClient      (81727c9873e3905a2ffc1ebd07265002) C:\WINDOWS\System32\webclnt.dll
23:19:24.0406 3508        WebClient - ok
23:19:24.0515 3508        winmgmt        (6f3f3973d97714cc5f906a19fe883729) C:\WINDOWS\system32\wbem\WMIsvc.dll
23:19:24.0718 3508        winmgmt - ok
23:19:24.0781 3508        WmdmPmSN        (c51b4a5c05a5475708e3c81c7765b71d) C:\WINDOWS\system32\MsPMSNSv.dll
23:19:24.0828 3508        WmdmPmSN - ok
23:19:24.0859 3508        WmiApSrv        (93908111ba57a6e60ec2fa2de202105c) C:\WINDOWS\system32\wbem\wmiapsrv.exe
23:19:25.0078 3508        WmiApSrv - ok
23:19:25.0296 3508        WMPNetworkSvc  (bf05650bb7df5e9ebdd25974e22403bb) C:\Programme\Windows Media Player\WMPNetwk.exe
23:19:25.0359 3508        WMPNetworkSvc - ok
23:19:25.0406 3508        WpdUsb          (cf4def1bf66f06964dc0d91844239104) C:\WINDOWS\system32\DRIVERS\wpdusb.sys
23:19:25.0437 3508        WpdUsb - ok
23:19:25.0500 3508        wscsvc          (300b3e84faf1a5c1f791c159ba28035d) C:\WINDOWS\system32\wscsvc.dll
23:19:25.0750 3508        wscsvc - ok
23:19:25.0796 3508        WSTCODEC        (c98b39829c2bbd34e454150633c62c78) C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS
23:19:25.0984 3508        WSTCODEC - ok
23:19:26.0046 3508        wuauserv        (7b4fe05202aa6bf9f4dfd0e6a0d8a085) C:\WINDOWS\system32\wuauserv.dll
23:19:26.0265 3508        wuauserv - ok
23:19:26.0343 3508        WudfPf          (f15feafffbb3644ccc80c5da584e6311) C:\WINDOWS\system32\DRIVERS\WudfPf.sys
23:19:26.0437 3508        WudfPf - ok
23:19:26.0468 3508        WudfRd          (28b524262bce6de1f7ef9f510ba3985b) C:\WINDOWS\system32\DRIVERS\wudfrd.sys
23:19:26.0484 3508        WudfRd - ok
23:19:26.0515 3508        WudfSvc        (05231c04253c5bc30b26cbaae680ed89) C:\WINDOWS\System32\WUDFSvc.dll
23:19:26.0546 3508        WudfSvc - ok
23:19:26.0640 3508        WZCSVC          (c4f109c005f6725162d2d12ca751e4a7) C:\WINDOWS\System32\wzcsvc.dll
23:19:26.0906 3508        WZCSVC - ok
23:19:26.0968 3508        xmlprov        (0ada34871a2e1cd2caafed1237a47750) C:\WINDOWS\System32\xmlprov.dll
23:19:27.0234 3508        xmlprov - ok
23:19:27.0281 3508        MBR (0x1B8)    (8f558eb6672622401da993e1e865c861) \Device\Harddisk0\DR0
23:19:28.0343 3508        \Device\Harddisk0\DR0 - ok
23:19:28.0343 3508        Boot (0x1200)  (26c64c34138ffaf46ce22b59d69bc2e4) \Device\Harddisk0\DR0\Partition0
23:19:28.0343 3508        \Device\Harddisk0\DR0\Partition0 - ok
23:19:28.0390 3508        Boot (0x1200)  (e60ca0fe09b255faa51152c9b4ee1437) \Device\Harddisk0\DR0\Partition1
23:19:28.0390 3508        \Device\Harddisk0\DR0\Partition1 - ok
23:19:28.0390 3508        ============================================================
23:19:28.0390 3508        Scan finished
23:19:28.0390 3508        ============================================================
23:19:28.0531 1368        Detected object count: 2
23:19:28.0531 1368        Actual detected object count: 2
23:21:28.0515 1368        BMLoad ( UnsignedFile.Multi.Generic ) - skipped by user
23:21:28.0515 1368        BMLoad ( UnsignedFile.Multi.Generic ) - User select action: Skip
23:21:28.0515 1368        tcpipBM ( UnsignedFile.Multi.Generic ) - skipped by user
23:21:28.0515 1368        tcpipBM ( UnsignedFile.Multi.Generic ) - User select action: Skip
01:07:20.0109 3336        Deinitialize success

Tut mir Leid wegen all den Schwierigkeiten, hab es jetzt nochmal kopiert. ;)

cosinus 04.07.2012 16:43

Dann bitte jetzt CF ausführen:

ComboFix

Ein Leitfaden und Tutorium zur Nutzung von ComboFix
  • Schliesse alle Programme, vor allem dein Antivirenprogramm und andere Hintergrundwächter sowie deinen Internetbrowser.
  • Starte combofix.exe von deinem Desktop aus, bestätige die Warnmeldungen, führe die Updates durch (falls vorgeschlagen), installiere die Wiederherstellungskonsole (falls vorgeschlagen) und lass dein System durchsuchen.
    Vermeide es auch während Combofix läuft die Maus und Tastatur zu benutzen.
  • Im Anschluss öffnet sich automatisch eine combofix.txt, diesen Inhalt bitte kopieren ([Strg]a, [Strg]c) und in deinen Beitrag einfügen ([Strg]v). Die Datei findest du außerdem unter: C:\ComboFix.txt.
Wichtiger Hinweis:
Combofix darf ausschließlich ausgeführt werden, wenn ein Kompetenzler dies ausdrücklich empfohlen hat!

Es sollte nie auf eigene Initiative hin ausgeführt werden! Eine falsche Benutzung kann ernsthafte Computerprobleme nach sich ziehen und eine Bereinigung der Infektion noch erschweren.

Solltest du nach der Ausführung von Combofix Probleme beim Starten von Anwendungen haben und Meldungen erhalten wie

Zitat:

Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
startest du Windows dann manuell neu und die Fehlermeldungen sollten nicht mehr auftauchen.

ninifee 04.07.2012 21:11

Comboxfix-Logfile:

Code:

ComboFix 12-07-04.04 - Susa 04.07.2012  21:45:08.1.2 - x86
Microsoft Windows XP Home Edition  5.1.2600.3.1252.49.1031.18.1015.487 [GMT 2:00]
ausgeführt von:: c:\dokumente und einstellungen\Susa\Desktop\ComboFix.exe
 * Neuer Wiederherstellungspunkt wurde erstellt
.
.
(((((((((((((((((((((((  Dateien erstellt von 2012-06-04 bis 2012-07-04  ))))))))))))))))))))))))))))))
.
.
2012-07-04 18:18 . 2012-07-04 18:18        18912        ----a-w-        c:\programme\Mozilla Firefox\AccessibleMarshal.dll
2012-07-04 18:18 . 2012-07-04 18:18        2106216        ----a-w-        c:\programme\Mozilla Firefox\D3DCompiler_43.dll
2012-06-19 20:19 . 2008-04-14 12:00        26624        ----a-w-        c:\dokumente und einstellungen\LocalService\Anwendungsdaten\Microsoft\UPnP Device Host\upnphost\udhisapi.dll
2012-06-19 20:08 . 2012-06-19 20:08        --------        d-----w-        c:\programme\ESET
2012-06-19 04:41 . 2012-05-11 14:40        521728        -c----w-        c:\windows\system32\dllcache\jsdbgui.dll
2012-06-19 04:17 . 2012-06-18 18:44        --------        d-----w-        C:\_OTL
2012-06-18 20:41 . 2012-06-18 20:41        --------        d-----w-        c:\dokumente und einstellungen\Susa\Anwendungsdaten\Malwarebytes
2012-06-18 20:41 . 2012-06-18 20:41        --------        d-----w-        c:\dokumente und einstellungen\All Users\Anwendungsdaten\Malwarebytes
2012-06-18 20:41 . 2012-06-18 20:41        --------        d-----w-        c:\programme\Malwarebytes' Anti-Malware
2012-06-18 20:41 . 2012-04-04 13:56        22344        ----a-w-        c:\windows\system32\drivers\mbam.sys
2012-06-18 18:38 . 2012-06-18 18:38        --------        d-----w-        c:\dokumente und einstellungen\All Users\Anwendungsdaten\WinZip
2012-06-13 23:42 . 2012-06-13 23:42        --------        d-----r-        c:\dokumente und einstellungen\LocalService\Eigene Dateien
2012-06-11 19:35 . 2012-06-11 19:35        --------        d-----w-        c:\programme\Lame For Audacity
2012-06-08 12:19 . 2012-06-11 19:36        --------        d-----w-        c:\dokumente und einstellungen\Susa\Anwendungsdaten\Audacity
2012-06-08 12:17 . 2012-06-08 12:17        --------        d-----w-        c:\programme\Audacity
2012-06-08 11:51 . 2012-06-08 11:58        --------        d-----w-        c:\programme\mp3DirectCut
.
.
.
((((((((((((((((((((((((((((((((((((  Find3M Bericht  ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-06-02 13:19 . 2009-06-23 16:23        18456        ----a-w-        c:\windows\system32\wuaueng.dll.mui
2012-06-02 13:19 . 2009-06-23 16:23        15896        ----a-w-        c:\windows\system32\wuapi.dll.mui
2012-06-02 13:19 . 2009-05-12 20:49        329240        ----a-w-        c:\windows\system32\wucltui.dll
2012-06-02 13:19 . 2009-05-12 20:49        210968        ----a-w-        c:\windows\system32\wuweb.dll
2012-06-02 13:19 . 2009-05-12 20:49        219160        ----a-w-        c:\windows\system32\wuaucpl.cpl
2012-06-02 13:19 . 2009-06-23 16:23        45080        ----a-w-        c:\windows\system32\wups2.dll
2012-06-02 13:19 . 2009-06-23 16:23        15896        ----a-w-        c:\windows\system32\wuaucpl.cpl.mui
2012-06-02 13:19 . 2009-05-12 20:49        53784        ----a-w-        c:\windows\system32\wuauclt.exe
2012-06-02 13:19 . 2009-05-12 20:49        35864        ----a-w-        c:\windows\system32\wups.dll
2012-06-02 13:19 . 2009-05-12 20:38        97304        ----a-w-        c:\windows\system32\cdm.dll
2012-06-02 13:19 . 2009-06-23 16:23        23576        ----a-w-        c:\windows\system32\wucltui.dll.mui
2012-06-02 13:19 . 2009-05-12 20:49        577048        ----a-w-        c:\windows\system32\wuapi.dll
2012-06-02 13:19 . 2009-05-12 20:49        1933848        ----a-w-        c:\windows\system32\wuaueng.dll
2012-06-02 13:18 . 2010-12-26 14:15        275696        ----a-w-        c:\windows\system32\mucltui.dll
2012-06-02 13:18 . 2010-12-26 14:15        214256        ----a-w-        c:\windows\system32\muweb.dll
2012-06-02 13:18 . 2010-12-26 14:15        18160        ----a-w-        c:\windows\system32\mucltui.dll.mui
2012-05-31 13:22 . 2009-05-12 20:38        604160        ----a-w-        c:\windows\system32\crypt32.dll
2012-05-16 15:07 . 2009-05-12 20:38        916992        ----a-w-        c:\windows\system32\wininet.dll
2012-05-15 13:56 . 2009-05-12 20:38        1863296        ----a-w-        c:\windows\system32\win32k.sys
2012-05-11 14:40 . 2009-05-12 20:38        43520        ----a-w-        c:\windows\system32\licmgr10.dll
2012-05-11 14:40 . 2009-05-12 20:38        1469440        ----a-w-        c:\windows\system32\inetcpl.cpl
2012-05-11 11:38 . 2009-05-12 20:38        385024        ----a-w-        c:\windows\system32\html.iec
2012-05-05 03:14 . 2008-04-14 07:30        2029056        ----a-w-        c:\windows\system32\ntkrnlpa.exe
2012-05-05 03:14 . 2008-04-14 07:29        2150912        ----a-w-        c:\windows\system32\ntoskrnl.exe
2012-05-02 13:46 . 2009-05-12 20:48        139656        ----a-w-        c:\windows\system32\drivers\rdpwd.sys
2012-07-04 18:17 . 2012-07-04 18:17        85472        ----a-w-        c:\programme\mozilla firefox\components\browsercomps.dll
.
.
((((((((((((((((((((((((((((  Autostartpunkte der Registrierung  ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{31ad400d-1b06-4e33-a59a-90c2c140cba0}]
2009-11-07 00:07        297808        ----a-w-        c:\windows\system32\mscoree.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\OverlayIconExtension1]
@="{fe25455d-b4c2-4e32-97d2-92632ec1c224}"
[HKEY_CLASSES_ROOT\CLSID\{fe25455d-b4c2-4e32-97d2-92632ec1c224}]
2009-11-07 00:07        297808        ----a-w-        c:\windows\system32\mscoree.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\OverlayIconExtension2]
@="{1fae2d88-a78e-4f03-909f-be818a3c1ce6}"
[HKEY_CLASSES_ROOT\CLSID\{1fae2d88-a78e-4f03-909f-be818a3c1ce6}]
2009-11-07 00:07        297808        ----a-w-        c:\windows\system32\mscoree.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Eee Docking"="c:\programme\ASUS\Eee Docking\Eee Docking.exe" [2009-07-27 397312]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2007-12-19 135168]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2007-12-19 159744]
"Persistence"="c:\windows\system32\igfxpers.exe" [2007-12-19 131072]
"AsusACPIServer"="c:\programme\EeePC\ACPI\AsAcpiSvr.exe" [2009-04-16 630784]
"AsusEPCMonitor"="c:\programme\EeePC\ACPI\AsEPCMon.exe" [2009-03-13 98304]
"AsusTray"="c:\programme\EeePC\ACPI\AsTray.exe" [2009-04-16 118784]
"ASUS Screen Saver Protector"="c:\windows\AsScrPro.exe" [2009-10-06 3054136]
"SynTPEnh"="c:\programme\Synaptics\SynTP\SynTPEnh.exe" [2009-04-09 1512744]
"SynAsusAcpi"="c:\programme\Synaptics\SynTP\SynAsusAcpi.exe" [2009-04-09 79144]
"LiveUpdate"="c:\programme\Asus\LiveUpdate\LiveUpdate.exe" [2009-06-25 712704]
"QuickTime Task"="c:\programme\QuickTime\QTTask.exe" [2010-11-29 421888]
"RTHDCPL"="RTHDCPL.EXE" [2009-03-27 17567744]
"SunJavaUpdateSched"="c:\programme\Gemeinsame Dateien\Java\Java Update\jusched.exe" [2010-05-14 248552]
"APSDaemon"="c:\programme\Gemeinsame Dateien\Apple\Apple Application Support\APSDaemon.exe" [2011-11-01 59240]
"iTunesHelper"="c:\programme\iTunes\iTunesHelper.exe" [2011-12-08 421736]
"PlusService"="c:\programme\Yuna Software\Messenger Plus!\PlusService.exe" [2012-02-27 801792]
"MessengerPlusForSkypeService"="c:\programme\Yuna Software\Messenger Plus! for Skype\MsgPlusForSkypeService.exe" [2012-01-22 124832]
"Malwarebytes' Anti-Malware"="c:\programme\Malwarebytes' Anti-Malware\mbamgui.exe" [2012-04-04 462408]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
.
c:\dokumente und einstellungen\Susa\Startmenü\Programme\Autostart\
OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk - c:\programme\Microsoft Office\Office12\ONENOTEM.EXE [2009-2-26 97680]
OpenOffice.org 3.3.lnk - c:\programme\OpenOffice.org 3\program\quickstart.exe [2010-12-13 1198592]
.
c:\dokumente und einstellungen\All Users\Startmenü\Programme\Autostart\
 SuperHybridEngine.lnk - c:\programme\ASUS\EeePC\Super Hybrid Engine\SuperHybridEngine.exe [2009-6-23 376832]
BTTray.lnk - c:\programme\WIDCOMM\Bluetooth Software\BTTray.exe [2008-9-2 604776]
MCtlSvc.lnk - c:\programme\congstar\Internet-Manager\Bin\mcserver.exe [2012-2-19 60688]
WinZip Quick Pick.lnk - c:\programme\WinZip\WZQKPICK32.EXE [2012-4-27 603536]
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Programme\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Programme\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Programme\\Windows Live\\Sync\\WindowsLiveSync.exe"=
"c:\\Programme\\Skype\\Phone\\Skype.exe"=
"c:\\Programme\\Gemeinsame Dateien\\Apple\\Apple Application Support\\WebKit2WebProcess.exe"=
"c:\\Programme\\Bonjour\\mDNSResponder.exe"=
"c:\\Programme\\iTunes\\iTunes.exe"=
.
R0 BMLoad;Bytemobile Boot Time Load Driver;c:\windows\system32\drivers\BMLoad.sys [19.02.2012 15:02 13184]
R2 BBUpdate;BBUpdate;c:\programme\Microsoft\BingBar\SeaPort.EXE [13.10.2011 18:21 249648]
R2 MBAMService;MBAMService;c:\programme\Malwarebytes' Anti-Malware\mbamservice.exe [18.06.2012 22:41 654408]
R2 MsgPlusService;Messenger Plus! Service;c:\programme\Yuna Software\Messenger Plus! for Skype\MsgPlusForSkypeService.exe [27.05.2012 22:24 124832]
R3 L1c;NDIS Miniport Driver for Atheros AR8131/AR8132 PCI-E Ethernet Controller;c:\windows\system32\drivers\l1c51x86.sys [01.06.2009 09:26 38912]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [18.06.2012 22:41 22344]
R3 uvclf;uvclf;c:\windows\system32\drivers\uvclf.sys [01.06.2009 09:26 39040]
S2 BBSvc;Bing Bar Update Service;c:\programme\Microsoft\BingBar\BBSvc.EXE [21.10.2011 16:23 196176]
S3 Ambfilt;Ambfilt;c:\windows\system32\drivers\Ambfilt.sys [23.06.2009 18:21 1684736]
S3 HSPADataCardusbmdm;HSPADataCard Proprietary USB Driver;c:\windows\system32\drivers\HSPADataCardusbmdm.sys [19.02.2012 15:02 106880]
S3 HSPADataCardusbnmea;HSPADataCard NMEA Port;c:\windows\system32\drivers\HSPADataCardusbnmea.sys [19.02.2012 15:02 106880]
S3 HSPADataCardusbser;HSPADataCard Diagnostic Port;c:\windows\system32\drivers\HSPADataCardusbser.sys [19.02.2012 15:02 106880]
S3 massfilter;Mass Storage Filter Driver;c:\windows\system32\drivers\massfilter.sys [19.02.2012 15:02 10240]
S3 MozillaMaintenance;Mozilla Maintenance Service;c:\programme\Mozilla Maintenance Service\maintenanceservice.exe [04.05.2012 18:41 113120]
.
Inhalt des "geplante Tasks" Ordners
.
2011-12-27 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\programme\Apple Software Update\SoftwareUpdate.exe [2011-06-01 16:57]
.
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = hxxp://feed-msgplus.linkury.com/?publisher=MessengerPlus&dpid=MessengerPlus&co=DE&userid=5478c092-88bb-467a-b0cf-623070b41ac8&sp=hp&searchtype=hp
uInternet Settings,ProxyOverride = *.local
uSearchAssistant = hxxp://feed-msgplus.linkury.com/?publisher=MessengerPlus&dpid=MessengerPlus&co=DE&userid=5478c092-88bb-467a-b0cf-623070b41ac8&sp=addr&q={searchTerms}
IE: Free YouTube Download - c:\dokumente und einstellungen\Susa\Anwendungsdaten\DVDVideoSoftIEHelpers\freeyoutubedownload.htm
IE: Free YouTube to MP3 Converter - c:\dokumente und einstellungen\Susa\Anwendungsdaten\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm
IE: Nach Microsoft E&xel exportieren - c:\progra~1\MICROS~4\Office12\EXCEL.EXE/3000
IE: Senden an &Bluetooth-Gerät... - c:\programme\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Senden an Bluetooth - c:\programme\WIDCOMM\Bluetooth Software\btsendto_ie.htm
TCP: DhcpNameServer = 192.168.2.1
FF - ProfilePath - c:\dokumente und einstellungen\Susa\Anwendungsdaten\Mozilla\Firefox\Profiles\76yjo56x.default\
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
MSConfigStartUp-Adobe Reader Speed Launcher - c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe
MSConfigStartUp-MsnMsgr - c:\program files\Windows Live\Messenger\MsnMsgr.Exe
AddRemove-toolplugin - c:\dokume~1\Susa\LOKALE~1\Temp\WZSE0.TMP\setup.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, hxxp://www.gmer.net
Rootkit scan 2012-07-04 22:08
Windows 5.1.2600 Service Pack 3 NTFS
.
Scanne versteckte Prozesse...
.
Scanne versteckte Autostarteinträge...
.
Scanne versteckte Dateien...
.
Scan erfolgreich abgeschlossen
versteckte Dateien: 0
.
**************************************************************************
.
Zeit der Fertigstellung: 2012-07-04  22:12:02
ComboFix-quarantined-files.txt  2012-07-04 20:11
.
Vor Suchlauf: 7 Verzeichnis(se), 45.755.240.448 Bytes frei
Nach Suchlauf: 9 Verzeichnis(se), 47.060.766.720 Bytes frei
.
WindowsXP-KB310994-SP2-Home-BootDisk-DEU.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Home Edition" /noexecute=optin /fastdetect
.
- - End Of File - - ED85CE37AA535523A9B39FEC58EC215D


cosinus 05.07.2012 10:17

Bitte nun Logs mit GMER und OSAM erstellen und posten.
GMER stürzt häufiger ab, wenn das Tool auch beim 2. Mal nicht will, lass es einfach weg und führ nur OSAM aus - die Online-Abfrage durch OSAM bitte überspringen.
Bei OSAM bitte darauf auch achten, dass Du das Log auch als *.log und nicht *.html oder so abspeicherst.

Hinweis: Zum Entpacken von OSAM bitte WinRAR oder 7zip verwenden! Stell auch unbedingt den Virenscanner ab, besonders der Scanner von McAfee meldet oft einen Fehalarm in OSAM!

Downloade dir bitte aswMBR.exe und speichere die Datei auf deinem Desktop.
  • Starte die aswMBR.exe - (aswMBR.exe Anleitung)
    Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten".
  • Das Tool wird dich fragen, ob Du mit der aktuellen Virendefinition von AVAST! dein System scannen willst. Beantworte diese Frage bitte mit Ja. (Sollte deine Firewall fragen, bitte den Zugriff auf das Internet zulassen )
    Der Download der Definitionen kann je nach Verbindung eine Weile dauern.
  • Klicke auf Scan.
  • Warte bitte bis Scan finished successfully im DOS-Fenster steht.
  • Drücke auf Save Log und speichere diese auf dem Desktop.
Poste mir die aswMBR.txt in deiner nächsten Antwort.

Wichtig: Drücke keinesfalls einen der Fix Buttons ohne Anweisung

Hinweis: Sollte der Scan Button ausgeblendet sein, schließe das Tool und starte es erneut. Sollte der Scan abbrechen und das Programm abstürzen, dann teile mir das mit und wähle unter AV Scan die Einstellung (none).



Noch ein Hinweis: Sollte aswMBR abstürzen und es kommt eine Meldung wie "aswMBR.exe funktioniert nicht mehr, dann mach Folgendes:
Starte aswMBR neu, wähle unten links im Drop-Down-Menü (unten links im Fenster von aswMBR) bei "AV scan" (none) aus und klick nochmal auf den Scan-Button.

ninifee 06.07.2012 09:27

Hab' versucht GMER auszuführen:
Es scannt eine ganze Ewigkeit und ich bin mir jetzt nicht sicher, ob der PC zwischendurch vllt. in den Standby-Modus gegangen ist, denn als Logfile kam etwas raus, was nicht nach Logfile aussieht.

Soll ich es nochmal durchrennen lassen oder weglassen?

OSAM-Logfile kommt jetzt:
Code:

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html lang="en">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<title>Report of OSAM: Autorun Manager v5.0.11926.0</title>
<style type="text/css">
body
{
    margin                    : 10px 10px 10px 20px;
    color                    : #000000;
    background-color          : #fffbf0;
    font                      : 10pt Tahoma, Verdana, Arial, Helvetica, sans-serif;
    scrollbar-3dlight-color  : #fffbf0;
    scrollbar-arrow-color    : #000000;
    scrollbar-darkshadow-color: #000000;
    scrollbar-face-color      : #fffbf0;
    scrollbar-highlight-color : #000000;
    scrollbar-shadow-color    : #fffbf0;
    scrollbar-track-color    : #fffbf0;
}
a:link
{
    color: #e15616;
}
a:visited
{
    color: #e15616;
}
a:hover
{
    color: #e4743f;
}
a:active
{
    color: #e4743f;
}
.header1
{
    font-size  : 115%;
    font-weight: bold;
    margin-left: 0px;
}
table
{
    border-collapse: collapse;
    border        : 1px solid #000000;
    cellpadding    : 0;
    cellspacing    : 0;
    width          : 90%;
}
td,th
{
    font-size    : 12px;
    color        : #000000;
    background    : #fffbf0;
    border        : 1px solid #000000;
    text-align    : left;
    vertical-align: top;
    padding      : 2px 4px 2px 4px;
}
.cap
{
    font-weight: bold;
    font-size  : 10pt;
    padding    : 2px 4px 2px 4px;
    border    : 1px solid #000000;
}
.group
{
    font-weight: bold;
    font-size  : 10pt;
    padding    : 2px 4px 2px 4px;
    text-align : center;
}
.reg
{
    font-weight: bold;
    font-size  : 10pt;
    border    : 0px none;
    padding    : 2px 4px 2px 4px;
}
.notfound
{
    background-color: #B3DDFF;
}
.blocked
{
    background-color: #FF96EB;
}
.nodetails
{
    background-color: #FFFF75;
}
.trusted
{
    background-color: #C8FFC8;
}
.rootkit
{
    background-color: #FF8696;
}
td.rs { text-align: center; vertical-align: center; font-family: courier; }
td.rs.rm { background: #F90424; title: "Malware"; }
td.rs.ri { background: #F90424; title: "Infected"; color: #21F411; }
td.rs.rw { background: #F90424; title: "Unwanted"; }
td.rs.rs { background: #F90424; title: "Suspicious"; }
td.rs.rt { background: #21F411; title: "Trusted"; }
td.rs.rc { background: #21F411; title: "Checked"; }
td.rs.ry { background: #21F411; title: "Up-to-You"; }
td.rs.rr { background: #F6EB13; title: "Riskware"; }
td.rs.ru { background: #D4D0C8; title: "Unknown"; }
td.rs.rn { background: #FFFFFF; title: "Not checked"; }
</style>
</head>
<body>
<p><span class="header1">Report of OSAM: Autorun Manager v5.0.11926.0</span><br>
<a href="hxxp://www.online-solutions.ru/en/" target="_blank">hxxp://www.online-solutions.ru/en/</a><br>
Saved at 10:22:23 on 06.07.2012</p>
<b>OS</b>: Windows XP Home Edition Service Pack 3 (Build 2600)<br>
<b>Default Browser</b>: Mozilla Corporation Firefox 13.0.1<br>
<br><b>Scanner Settings</b><br>
<input type="checkbox" disabled checked>Rootkits detection (hidden registry)<br>
<input type="checkbox" disabled checked>Rootkits detection (hidden files)<br>
<input type="checkbox" disabled checked>Retrieve files information<br>
<input type="checkbox" disabled checked>Check Microsoft signatures<br>
<br><b>Filters</b><br>
<input type="checkbox" disabled>Trusted entries<br>
<input type="checkbox" disabled>Empty entries<br>
<input type="checkbox" disabled checked>Hidden registry entries (rootkit activity)<br>
<input type="checkbox" disabled checked>Exclusively opened files<br>
<input type="checkbox" disabled checked>Not found files<br>
<input type="checkbox" disabled checked>Files without detailed information<br>
<input type="checkbox" disabled checked>Existing files<br>
<input type="checkbox" disabled>Non-startable services<br>
<input type="checkbox" disabled>Non-startable drivers<br>
<input type="checkbox" disabled checked>Active entries<br>
<input type="checkbox" disabled checked>Disabled entries<br>
<br>
<table border="1" cellpadding="0" cellspacing="0">
<tr>
<th class="cap" width="20">&nbsp;</th>
<th class="cap">Risk</th>
<th class="cap">Name</th>
<th class="cap">Publisher</th>
<th class="cap">Full Path</th>
<th class="cap">Status</th>
</tr>
<tr>
<td class="group" colspan="6">Common</td>
</tr>
<tr>
<td class="reg" colspan="6">%SystemRoot%\Tasks</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs ry">||||&nbsp;&nbsp;</td>
<td>"AppleSoftwareUpdate.job"</td>
<td>"Apple Inc."</td>
<td>C:\Programme\Apple Software Update\SoftwareUpdate.exe</td>
<td>File exists</td>
</tr>
<tr>
<td class="group" colspan="6">Control Panel Objects</td>
</tr>
<tr>
<td class="reg" colspan="6">%SystemRoot%\system32</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rt">||||||</td>
<td>"btcpl.cpl"</td>
<td>"Broadcom Corporation."</td>
<td>C:\WINDOWS\system32\btcpl.cpl</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rt">||||||</td>
<td>"FlashPlayerCPLApp.cpl"</td>
<td>"Adobe Systems Incorporated"</td>
<td>C:\WINDOWS\system32\FlashPlayerCPLApp.cpl</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rt">||||||</td>
<td>"infocardcpl.cpl"</td>
<td>"Microsoft Corporation"</td>
<td>C:\WINDOWS\system32\infocardcpl.cpl</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rt">||||||</td>
<td>"javacpl.cpl"</td>
<td>"Sun Microsystems, Inc."</td>
<td>C:\WINDOWS\system32\javacpl.cpl</td>
<td>File exists</td>
</tr>
<tr>
<td class="reg" colspan="6">HKLM\Software\Microsoft\Windows\CurrentVersion\Control Panel\Cpls</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rt">||||||</td>
<td>"QuickTime"</td>
<td>"Apple Inc."</td>
<td>C:\Programme\QuickTime\QTSystem\QuickTime.cpl</td>
<td>File exists</td>
</tr>
<tr>
<td class="group" colspan="6">Drivers</td>
</tr>
<tr>
<td class="reg" colspan="6">HKLM\SYSTEM\CurrentControlSet\Services</td>
</tr>
<tr>
<td class="rootkit"><input type="checkbox" disabled checked></td>
<td class="rs rn">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</td>
<td class="rootkit">"agacyfod" (agacyfod)</td>
<td class="rootkit"></td>
<td class="rootkit">C:\DOKUME~1\Susa\LOKALE~1\Temp\agacyfod.sys</td>
<td class="rootkit">Hidden registry entry, rootkit activity | File not found</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rt">||||||</td>
<td>"Bytemobile Boot Time Load Driver" (BMLoad)</td>
<td>"Bytemobile, Inc."</td>
<td>C:\WINDOWS\System32\drivers\BMLoad.sys</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rt">||||||</td>
<td>"Bytemobile Kernel Network Provider" (tcpipBM)</td>
<td>"Bytemobile, Inc."</td>
<td>C:\WINDOWS\system32\drivers\tcpipBM.sys</td>
<td>File exists</td>
</tr>
<tr>
<td class="notfound"><input type="checkbox" disabled checked></td>
<td class="rs rn">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</td>
<td class="notfound">"catchme" (catchme)</td>
<td class="notfound"></td>
<td class="notfound">C:\DOKUME~1\Susa\LOKALE~1\Temp\catchme.sys</td>
<td class="notfound">File not found</td>
</tr>
<tr>
<td class="notfound"><input type="checkbox" disabled checked></td>
<td class="rs rn">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</td>
<td class="notfound">"Changer" (Changer)</td>
<td class="notfound"></td>
<td class="notfound">C:\WINDOWS\system32\drivers\Changer.sys</td>
<td class="notfound">File not found</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rt">||||||</td>
<td>"FssFltr" (fssfltr)</td>
<td>"Microsoft Corporation"</td>
<td>C:\WINDOWS\System32\DRIVERS\fssfltr_tdi.sys</td>
<td>File exists</td>
</tr>
<tr>
<td class="notfound"><input type="checkbox" disabled checked></td>
<td class="rs rn">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</td>
<td class="notfound">"Huawei DataCard USB Modem and USB Serial" (hwdatacard)</td>
<td class="notfound"></td>
<td class="notfound">C:\WINDOWS\System32\DRIVERS\ewusbmdm.sys</td>
<td class="notfound">File not found</td>
</tr>
<tr>
<td class="notfound"><input type="checkbox" disabled checked></td>
<td class="rs rn">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</td>
<td class="notfound">"i2omgmt" (i2omgmt)</td>
<td class="notfound"></td>
<td class="notfound">C:\WINDOWS\system32\drivers\i2omgmt.sys</td>
<td class="notfound">File not found</td>
</tr>
<tr>
<td class="notfound"><input type="checkbox" disabled checked></td>
<td class="rs rn">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</td>
<td class="notfound">"lbrtfdc" (lbrtfdc)</td>
<td class="notfound"></td>
<td class="notfound">C:\WINDOWS\system32\drivers\lbrtfdc.sys</td>
<td class="notfound">File not found</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs ru">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</td>
<td>"MBAMProtector" (MBAMProtector)</td>
<td>"Malwarebytes Corporation"</td>
<td>C:\WINDOWS\system32\drivers\mbam.sys</td>
<td>File exists</td>
</tr>
<tr>
<td class="notfound"><input type="checkbox" disabled checked></td>
<td class="rs rn">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</td>
<td class="notfound">"PCIDump" (PCIDump)</td>
<td class="notfound"></td>
<td class="notfound">C:\WINDOWS\system32\drivers\PCIDump.sys</td>
<td class="notfound">File not found</td>
</tr>
<tr>
<td class="notfound"><input type="checkbox" disabled checked></td>
<td class="rs rn">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</td>
<td class="notfound">"PDCOMP" (PDCOMP)</td>
<td class="notfound"></td>
<td class="notfound">C:\WINDOWS\system32\drivers\PDCOMP.sys</td>
<td class="notfound">File not found</td>
</tr>
<tr>
<td class="notfound"><input type="checkbox" disabled checked></td>
<td class="rs rn">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</td>
<td class="notfound">"PDFRAME" (PDFRAME)</td>
<td class="notfound"></td>
<td class="notfound">C:\WINDOWS\system32\drivers\PDFRAME.sys</td>
<td class="notfound">File not found</td>
</tr>
<tr>
<td class="notfound"><input type="checkbox" disabled checked></td>
<td class="rs rn">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</td>
<td class="notfound">"PDRELI" (PDRELI)</td>
<td class="notfound"></td>
<td class="notfound">C:\WINDOWS\system32\drivers\PDRELI.sys</td>
<td class="notfound">File not found</td>
</tr>
<tr>
<td class="notfound"><input type="checkbox" disabled checked></td>
<td class="rs rn">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</td>
<td class="notfound">"PDRFRAME" (PDRFRAME)</td>
<td class="notfound"></td>
<td class="notfound">C:\WINDOWS\system32\drivers\PDRFRAME.sys</td>
<td class="notfound">File not found</td>
</tr>
<tr>
<td class="notfound"><input type="checkbox" disabled checked></td>
<td class="rs rn">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</td>
<td class="notfound">"WDICA" (WDICA)</td>
<td class="notfound"></td>
<td class="notfound">C:\WINDOWS\system32\drivers\WDICA.sys</td>
<td class="notfound">File not found</td>
</tr>
<tr>
<td class="group" colspan="6">Explorer</td>
</tr>
<tr>
<td class="reg" colspan="6">HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rt">||||||</td>
<td>{89B4C1CD-B018-4511-B0A1-5476DBF70820} "StubPath"</td>
<td>"Microsoft Corporation"</td>
<td>C:\WINDOWS\system32\Rundll32.exe C:\WINDOWS\system32\mscories.dll,Install</td>
<td>File exists</td>
</tr>
<tr>
<td class="reg" colspan="6">HKLM\Software\Classes\Folder\shellex\ColumnHandlers</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rt">||||||</td>
<td>{F9DB5320-233E-11D1-9F84-707F02C10627} "PDF Shell Extension"</td>
<td>"Adobe Systems, Inc."</td>
<td>C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\PDFShell.dll</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rt">||||||</td>
<td>{C52AF81D-F7A0-4AAB-8E87-F80A60CCD396} "{C52AF81D-F7A0-4AAB-8E87-F80A60CCD396}"</td>
<td></td>
<td>C:\Programme\OpenOffice.org 3\Basis\program\shlxthdl\shlxthdl.dll</td>
<td>File exists</td>
</tr>
<tr>
<td class="reg" colspan="6">HKLM\Software\Classes\Protocols\Filter</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rt">||||||</td>
<td>{1E66F26B-79EE-11D2-8710-00C04F79ED0D} "Cor MIME Filter, CorFltr, CorFltr 1"</td>
<td>"Microsoft Corporation"</td>
<td>C:\WINDOWS\system32\mscoree.dll</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rt">||||||</td>
<td>{1E66F26B-79EE-11D2-8710-00C04F79ED0D} "Cor MIME Filter, CorFltr, CorFltr 1"</td>
<td>"Microsoft Corporation"</td>
<td>C:\WINDOWS\system32\mscoree.dll</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rt">||||||</td>
<td>{1E66F26B-79EE-11D2-8710-00C04F79ED0D} "Cor MIME Filter, CorFltr, CorFltr 1"</td>
<td>"Microsoft Corporation"</td>
<td>C:\WINDOWS\system32\mscoree.dll</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rt">||||||</td>
<td>{807563E5-5146-11D5-A672-00B0D022E945} "Microsoft Office InfoPath XML Mime Filter"</td>
<td>"Microsoft Corporation"</td>
<td>C:\PROGRA~1\GEMEIN~1\MICROS~1\OFFICE12\MSOXMLMF.DLL</td>
<td>File exists</td>
</tr>
<tr>
<td class="reg" colspan="6">HKLM\Software\Classes\Protocols\Handler</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rt">||||||</td>
<td>{314111c7-a502-11d2-bbca-00c04f8ec294} "HxProtocol Class"</td>
<td>"Microsoft Corporation"</td>
<td>C:\Programme\Gemeinsame Dateien\Microsoft Shared\Help\hxds.dll</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rt">||||||</td>
<td>{FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} "IEProtocolHandler Class"</td>
<td>"Skype Technologies"</td>
<td>C:\PROGRA~1\GEMEIN~1\Skype\SKYPE4~1.DLL</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs ry">||||&nbsp;&nbsp;</td>
<td>{828030A1-22C1-4009-854F-8E305202313F} "livecall"</td>
<td>"Microsoft Corporation"</td>
<td>C:\PROGRA~1\WINDOW~4\MESSEN~1\MSGRAP~1.DLL</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rt">||||||</td>
<td>{0A9007C0-4076-11D3-8789-0000F8105754} "Microsoft Infotech Storage Protocol for IE 4.0"</td>
<td>"Microsoft Corporation"</td>
<td>C:\Programme\Gemeinsame Dateien\Microsoft Shared\Information Retrieval\msitss.dll</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs ry">||||&nbsp;&nbsp;</td>
<td>{828030A1-22C1-4009-854F-8E305202313F} "msnim"</td>
<td>"Microsoft Corporation"</td>
<td>C:\PROGRA~1\WINDOW~4\MESSEN~1\MSGRAP~1.DLL</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rt">||||||</td>
<td>{03C514A3-1EFB-4856-9F99-10D7BE1653C0} "Windows Live Mail HTML Asynchronous Pluggable Protocol Handler"</td>
<td>"Microsoft Corporation"</td>
<td>C:\Programme\Windows Live\Mail\mailcomm.dll</td>
<td>File exists</td>
</tr>
<tr>
<td class="reg" colspan="6">HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rt">||||||</td>
<td>{0563DB41-F538-4B37-A92D-4659049B7766} "CLSID_WLMCMimeFilter"</td>
<td>"Microsoft Corporation"</td>
<td>C:\Programme\Windows Live\Mail\mailcomm.dll</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rt">||||||</td>
<td>{d6044399-0b9e-4084-a9ac-c4b7c7800fcf} "Eee Storage"</td>
<td>"Microsoft Corporation"</td>
<td>C:\WINDOWS\system32\mscoree.dll</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs ru">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</td>
<td>{B9E1D2CB-CCFF-4AA6-9579-D7A4754030EF} "iTunes"</td>
<td>"Apple Inc."</td>
<td>C:\Programme\iTunes\iTunesMiniPlayer.dll</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rt">||||||</td>
<td>{42042206-2D85-11D3-8CFF-005004838597} "Microsoft Office HTML Icon Handler"</td>
<td>"Microsoft Corporation"</td>
<td>C:\Programme\Microsoft Office\Office12\msohevi.dll</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rt">||||||</td>
<td>{993BE281-6695-4BA5-8A2A-7AACBFAAB69E} "Microsoft Office Metadata Handler"</td>
<td>"Microsoft Corporation"</td>
<td>C:\PROGRA~1\GEMEIN~1\MICROS~1\OFFICE12\msoshext.dll</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rt">||||||</td>
<td>{5858A72C-C2B4-4dd7-B2BF-B76DB1BD9F6C} "Microsoft Office OneNote Namespace Extension for Windows Desktop Search"</td>
<td>"Microsoft Corporation"</td>
<td>C:\PROGRA~1\MICROS~4\Office12\ONFILTER.DLL</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rt">||||||</td>
<td>{C41662BB-1FA0-4CE0-8DC5-9B7F8279FF97} "Microsoft Office Thumbnail Handler"</td>
<td>"Microsoft Corporation"</td>
<td>C:\PROGRA~1\GEMEIN~1\MICROS~1\OFFICE12\msoshext.dll</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rt">||||||</td>
<td>{C52AF81D-F7A0-4AAB-8E87-F80A60CCD396} "OpenOffice.org Column Handler"</td>
<td></td>
<td>C:\Programme\OpenOffice.org 3\Basis\program\shlxthdl\shlxthdl.dll</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rt">||||||</td>
<td>{087B3AE3-E237-4467-B8DB-5A38AB959AC9} "OpenOffice.org Infotip Handler"</td>
<td></td>
<td>C:\Programme\OpenOffice.org 3\Basis\program\shlxthdl\shlxthdl.dll</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rt">||||||</td>
<td>{63542C48-9552-494A-84F7-73AA6A7C99C1} "OpenOffice.org Property Sheet Handler"</td>
<td></td>
<td>C:\Programme\OpenOffice.org 3\Basis\program\shlxthdl\shlxthdl.dll</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rt">||||||</td>
<td>{3B092F0C-7696-40E3-A80F-68D74DA84210} "OpenOffice.org Thumbnail Viewer"</td>
<td></td>
<td>C:\Programme\OpenOffice.org 3\Basis\program\shlxthdl\shlxthdl.dll</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rt">||||||</td>
<td>{E37E2028-CE1A-4f42-AF05-6CEABC4E5D75} "Shell Icon Handler for Application References"</td>
<td>"Microsoft Corporation"</td>
<td>C:\WINDOWS\system32\dfshim.dll</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rt">||||||</td>
<td>{e82a2d71-5b2f-43a0-97b8-81be15854de8} "ShellLink for Application References"</td>
<td>"Microsoft Corporation"</td>
<td>C:\WINDOWS\system32\dfshim.dll</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rt">||||||</td>
<td>{BDEADF00-C265-11D0-BCED-00A0C90AB50F} "Web Folders"</td>
<td>"Microsoft Corporation"</td>
<td>C:\Programme\Gemeinsame Dateien\Microsoft Shared\Web Folders\MSONSEXT.DLL</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rt">||||||</td>
<td>{2BE99FD4-A181-4996-BFA9-58C5FFD11F6C} "Windows Live Photo Gallery Autoplay Drop Target"</td>
<td>"Microsoft Corporation"</td>
<td>C:\Programme\Windows Live\Photo Gallery\WLXPhotoGallery.exe</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rt">||||||</td>
<td>{00F30F64-AC33-42F5-8FD1-5DC2D3FDE06C} "Windows Live Photo Gallery Editor Drop Target"</td>
<td>"Microsoft Corporation"</td>
<td>C:\Programme\Windows Live\Photo Gallery\WLXPhotoGallery.exe</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rt">||||||</td>
<td>{00F3712A-CA79-45B4-9E4D-D7891E7F8B9D} "Windows Live Photo Gallery Editor Shim"</td>
<td>"Microsoft Corporation"</td>
<td>C:\Programme\Windows Live\Photo Gallery\PhotoViewerShim.dll</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rt">||||||</td>
<td>{00F30F90-3E96-453B-AFCD-D71989ECC2C7} "Windows Live Photo Gallery Viewer Autoplay Shim"</td>
<td>"Microsoft Corporation"</td>
<td>C:\Programme\Windows Live\Photo Gallery\PhotoViewerShim.dll</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rt">||||||</td>
<td>{00F33137-EE26-412F-8D71-F84E4C2C6625} "Windows Live Photo Gallery Viewer Autoplay Shim"</td>
<td>"Microsoft Corporation"</td>
<td>C:\Programme\Windows Live\Photo Gallery\PhotoViewerShim.dll</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rt">||||||</td>
<td>{00F374B7-B390-4884-B372-2FC349F2172B} "Windows Live Photo Gallery Viewer Drop Target"</td>
<td>"Microsoft Corporation"</td>
<td>C:\Programme\Windows Live\Photo Gallery\WLXPhotoGallery.exe</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rt">||||||</td>
<td>{00F346CB-35A4-465B-8B8F-65A29DBAB1F6} "Windows Live Photo Gallery Viewer Shim"</td>
<td>"Microsoft Corporation"</td>
<td>C:\Programme\Windows Live\Photo Gallery\PhotoViewerShim.dll</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs ru">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</td>
<td>{E0D79304-84BE-11CE-9641-444553540000} "WinZip"</td>
<td>"WinZip Computing, S.L."</td>
<td>C:\Programme\WinZip\wzshlstb.dll</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs ru">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</td>
<td>{E0D79305-84BE-11CE-9641-444553540000} "WinZip"</td>
<td>"WinZip Computing, S.L."</td>
<td>C:\Programme\WinZip\wzshlstb.dll</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs ru">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</td>
<td>{E0D79306-84BE-11CE-9641-444553540000} "WinZip"</td>
<td>"WinZip Computing, S.L."</td>
<td>C:\Programme\WinZip\wzshlstb.dll</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs ru">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</td>
<td>{E0D79307-84BE-11CE-9641-444553540000} "WinZip"</td>
<td>"WinZip Computing, S.L."</td>
<td>C:\Programme\WinZip\wzshlstb.dll</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rt">||||||</td>
<td>{b1b96b20-da1d-4a3c-92c1-7229b32f2325} "XPClient.FileSystemBrowser.BackupContextMenuExtension.BackupContextMenuExtension"</td>
<td>"Microsoft Corporation"</td>
<td>C:\WINDOWS\system32\mscoree.dll</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rt">||||||</td>
<td>{fe25455d-b4c2-4e32-97d2-92632ec1c224} "XPClient.FileSystemBrowser.OverlayIconExtension1"</td>
<td>"Microsoft Corporation"</td>
<td>C:\WINDOWS\system32\mscoree.dll</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rt">||||||</td>
<td>{1fae2d88-a78e-4f03-909f-be818a3c1ce6} "XPClient.FileSystemBrowser.OverlayIconExtension2"</td>
<td>"Microsoft Corporation"</td>
<td>C:\WINDOWS\system32\mscoree.dll</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rt">||||||</td>
<td>{06A2568A-CED6-4187-BB20-400B8C02BE5A} "{06A2568A-CED6-4187-BB20-400B8C02BE5A}"</td>
<td>"Microsoft Corporation"</td>
<td>C:\Programme\Windows Live\Photo Gallery\WLXPhotoAcquireWizard.exe</td>
<td>File exists</td>
</tr>
<tr>
<td class="group" colspan="6">Internet Explorer</td>
</tr>
<tr>
<td class="reg" colspan="6">HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser</td>
</tr>
<tr>
<td class="notfound"><input type="checkbox" disabled checked></td>
<td class="rs rn">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</td>
<td class="notfound">ITBar7Height "ITBar7Height"</td>
<td class="notfound"></td>
<td class="notfound"></td>
<td class="notfound">File not found | COM-object registry key not found</td>
</tr>
<tr>
<td class="notfound"><input type="checkbox" disabled checked></td>
<td class="rs rn">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</td>
<td class="notfound"><binary data> "ITBar7Layout"</td>
<td class="notfound"></td>
<td class="notfound"></td>
<td class="notfound">File not found | COM-object registry key not found</td>
</tr>
<tr>
<td class="reg" colspan="6">HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs ry">||||&nbsp;&nbsp;</td>
<td>{8AD9C840-044E-11D1-B3E9-00805F499D93} "Java Plug-in 1.6.0_22"<br>hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab</td>
<td>"Sun Microsystems, Inc."</td>
<td>C:\Programme\Java\jre6\bin\npjpi160_22.dll</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs ry">||||&nbsp;&nbsp;</td>
<td>{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} "Java Plug-in 1.6.0_22"<br>hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab</td>
<td>"Sun Microsystems, Inc."</td>
<td>C:\Programme\Java\jre6\bin\npjpi160_22.dll</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs ry">||||&nbsp;&nbsp;</td>
<td>{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} "Java Plug-in 1.6.0_22"<br>hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab</td>
<td>"Sun Microsystems, Inc."</td>
<td>C:\Programme\Java\jre6\bin\npjpi160_22.dll</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs ry">||||&nbsp;&nbsp;</td>
<td>{C3F79A2B-B9B4-4A66-B012-3EE46475B072} "MessengerStatsClient Class"<br>hxxp://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab</td>
<td>"Microsoft Corporation"</td>
<td>C:\WINDOWS\Downloaded Program Files\MessengerStatsPAClient.dll</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs ry">||||&nbsp;&nbsp;</td>
<td>{5D6F45B3-9043-443D-A792-115447494D24} "UnoCtrl Class"<br>hxxp://messenger.zone.msn.com/MessengerGamesContent/GameContent/de/uno1/GAME_UNO1.cab</td>
<td>"Microsoft"</td>
<td>C:\WINDOWS\Downloaded Program Files\GAME_UNO1.dll</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rc">||&nbsp;&nbsp;&nbsp;&nbsp;</td>
<td>{C345E174-3E87-4F41-A01C-B066A90A49B4} "WRC Class"<br>hxxp://trial.trymicrosoftoffice.com/trialoaa/buymsoffice_assets/framework//microsoft/wrc32.ocx</td>
<td>"Microsoft Corporation"</td>
<td>C:\WINDOWS\Downloaded Program Files\wrc32.ocx</td>
<td>File exists</td>
</tr>
<tr>
<td class="reg" colspan="6">HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rt">||||||</td>
<td>"@btrez.dll,-4015"</td>
<td></td>
<td>C:\Programme\WIDCOMM\Bluetooth Software\btsendto_ie.htm</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs ry">||||&nbsp;&nbsp;</td>
<td>{48E73304-E1D6-4330-914C-F5F514E3486C} "An OneNote senden"</td>
<td>"Microsoft Corporation"</td>
<td>C:\PROGRA~1\MICROS~4\Office12\ONBttnIE.dll</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs ry">||||&nbsp;&nbsp;</td>
<td>{5F7B1267-94A9-47F5-98DB-E99415F33AEC} "In Blog veröffentlichen"</td>
<td>"Microsoft Corporation"</td>
<td>C:\Programme\Windows Live\Writer\WriterBrowserExtension.dll</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rc">||&nbsp;&nbsp;&nbsp;&nbsp;</td>
<td>{FF059E31-CC5A-4E2E-BF3B-96E929D65503} "Research"</td>
<td>"Microsoft Corporation"</td>
<td>C:\PROGRA~1\MICROS~4\Office12\REFIEBAR.DLL</td>
<td>File exists</td>
</tr>
<tr>
<td class="reg" colspan="6">HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs ry">||||&nbsp;&nbsp;</td>
<td>{8dcb7100-df86-4384-8842-8fa844297b3f} "Bing Bar"</td>
<td>"Microsoft Corporation."</td>
<td>C:\Programme\Microsoft\BingBar\BingExt.dll</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rt">||||||</td>
<td>{ae07101b-46d4-4a98-af68-0333ea26e113} "Messenger Plus! Community Smartbar"</td>
<td>"Microsoft Corporation"</td>
<td>C:\WINDOWS\system32\mscoree.dll</td>
<td>File exists</td>
</tr>
<tr>
<td class="reg" colspan="6">HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rt">||||||</td>
<td>{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} "Adobe PDF Reader"</td>
<td>"Adobe Systems Incorporated"</td>
<td>C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelper.dll</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs ry">||||&nbsp;&nbsp;</td>
<td>{d2ce3e00-f94a-4740-988e-03dc2f38c34f} "Bing Bar Helper"</td>
<td>"Microsoft Corporation."</td>
<td>C:\Programme\Microsoft\BingBar\BingExt.dll</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs ry">||||&nbsp;&nbsp;</td>
<td>{DBC80044-A445-435b-BC74-9C25C1C588A9} "Java(tm) Plug-In 2 SSV Helper"</td>
<td>"Sun Microsystems, Inc."</td>
<td>C:\Programme\Java\jre6\bin\jp2ssv.dll</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs ry">||||&nbsp;&nbsp;</td>
<td>{E7E6F031-17CE-4C07-BC86-EABFE594F69C} "JQSIEStartDetectorImpl Class"</td>
<td>"Sun Microsystems, Inc."</td>
<td>C:\Programme\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rt">||||||</td>
<td>{31ad400d-1b06-4e33-a59a-90c2c140cba0} "Messenger Plus! Community SmartbarEngine"</td>
<td>"Microsoft Corporation"</td>
<td>C:\WINDOWS\system32\mscoree.dll</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rt">||||||</td>
<td>{9030D464-4C02-4ABF-8ECC-5164760863C6} "Windows Live Anmelde-Hilfsprogramm"</td>
<td>"Microsoft Corporation"</td>
<td>C:\Programme\Gemeinsame Dateien\Microsoft Shared\Windows Live\WindowsLiveLogin.dll</td>
<td>File exists</td>
</tr>
<tr>
<td class="notfound"><input type="checkbox" disabled checked></td>
<td class="rs rn">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</td>
<td class="notfound">{5C255C8A-E604-49b4-9D64-90988571CECB} "{5C255C8A-E604-49b4-9D64-90988571CECB}"</td>
<td class="notfound"></td>
<td class="notfound"></td>
<td class="notfound">File not found | COM-object registry key not found</td>
</tr>
<tr>
<td class="group" colspan="6">Logon</td>
</tr>
<tr>
<td class="reg" colspan="6">%AllUsersProfile%\Startmenü\Programme\Autostart</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs ry">||||&nbsp;&nbsp;</td>
<td>" SuperHybridEngine.lnk"</td>
<td>"ASUSTeK Computer Inc."</td>
<td>C:\Programme\ASUS\EeePC\Super Hybrid Engine\SuperHybridEngine.exe</td>
<td>Shortcut exists | File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rt">||||||</td>
<td>"desktop.ini"</td>
<td></td>
<td>C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\desktop.ini</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs ru">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</td>
<td>"MCtlSvc.lnk"</td>
<td>"ZTE"</td>
<td>C:\Programme\congstar\Internet-Manager\Bin\mcserver.exe</td>
<td>Shortcut exists | File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs ry">||||&nbsp;&nbsp;</td>
<td>"BTTray.lnk"</td>
<td>"Broadcom Corporation."</td>
<td>C:\Programme\WIDCOMM\Bluetooth Software\BTTray.exe</td>
<td>Shortcut exists | File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs ru">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</td>
<td>"WinZip Quick Pick.lnk"</td>
<td>"WinZip Computing, S.L."</td>
<td>C:\Programme\WinZip\WZQKPICK32.EXE</td>
<td>Shortcut exists | File exists</td>
</tr>
<tr>
<td class="reg" colspan="6">%UserProfile%\Startmenü\Programme\Autostart</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs ry">||||&nbsp;&nbsp;</td>
<td>"OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk"</td>
<td>"Microsoft Corporation"</td>
<td>C:\Programme\Microsoft Office\Office12\ONENOTEM.EXE</td>
<td>Shortcut exists | File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rt">||||||</td>
<td>"desktop.ini"</td>
<td></td>
<td>C:\Dokumente und Einstellungen\Susa\Startmenü\Programme\Autostart\desktop.ini</td>
<td>File exists</td>
</tr>
<tr>
<td class="nodetails"><input type="checkbox" disabled checked></td>
<td class="rs ry">||||&nbsp;&nbsp;</td>
<td class="nodetails">"OpenOffice.org 3.3.lnk"</td>
<td class="nodetails"></td>
<td class="nodetails">C:\Programme\OpenOffice.org 3\program\quickstart.exe</td>
<td class="nodetails">Shortcut exists | File found, but it contains no detailed information | File exists</td>
</tr>
<tr>
<td class="reg" colspan="6">HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs ry">||||&nbsp;&nbsp;</td>
<td>"Eee Docking"</td>
<td></td>
<td>C:\Programme\ASUS\Eee Docking\Eee Docking.exe</td>
<td>File exists</td>
</tr>
<tr>
<td class="reg" colspan="6">HKLM\Software\Microsoft\Windows\CurrentVersion\Run</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs ry">||||&nbsp;&nbsp;</td>
<td>"APSDaemon"</td>
<td>"Apple Inc."</td>
<td>"C:\Programme\Gemeinsame Dateien\Apple\Apple Application Support\APSDaemon.exe"</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs ry">||||&nbsp;&nbsp;</td>
<td>"ASUS Screen Saver Protector"</td>
<td>"ASUS"</td>
<td>C:\WINDOWS\AsScrPro.exe</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rt">||||||</td>
<td>"AsusACPIServer"</td>
<td>"ASUSTeK Computer Inc."</td>
<td>C:\Programme\EeePC\ACPI\AsAcpiSvr.exe</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs ry">||||&nbsp;&nbsp;</td>
<td>"AsusEPCMonitor"</td>
<td>"ASUSTeK Computer Inc."</td>
<td>C:\Programme\EeePC\ACPI\AsEPCMon.exe</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs ry">||||&nbsp;&nbsp;</td>
<td>"AsusTray"</td>
<td>"ASUSTeK Computer Inc."</td>
<td>C:\Programme\EeePC\ACPI\AsTray.exe</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs ru">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</td>
<td>"iTunesHelper"</td>
<td>"Apple Inc."</td>
<td>"C:\Programme\iTunes\iTunesHelper.exe"</td>
<td>File exists</td>
</tr>
<tr>
<td class="nodetails"><input type="checkbox" disabled checked></td>
<td class="rs rc">||&nbsp;&nbsp;&nbsp;&nbsp;</td>
<td class="nodetails">"LiveUpdate"</td>
<td class="nodetails"></td>
<td class="nodetails">C:\Programme\Asus\LiveUpdate\LiveUpdate.exe auto</td>
<td class="nodetails">File found, but it contains no detailed information</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs ru">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</td>
<td>"Malwarebytes' Anti-Malware"</td>
<td>"Malwarebytes Corporation"</td>
<td>"C:\Programme\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs ru">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</td>
<td>"MessengerPlusForSkypeService"</td>
<td>"Yuna Software"</td>
<td>"C:\Programme\Yuna Software\Messenger Plus! for Skype\MsgPlusForSkypeService.exe"</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs ru">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</td>
<td>"PlusService"</td>
<td>"Yuna Software"</td>
<td>C:\Programme\Yuna Software\Messenger Plus!\PlusService.exe</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs ry">||||&nbsp;&nbsp;</td>
<td>"QuickTime Task"</td>
<td>"Apple Inc."</td>
<td>"C:\Programme\QuickTime\QTTask.exe" -atboottime</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs ry">||||&nbsp;&nbsp;</td>
<td>"SunJavaUpdateSched"</td>
<td>"Sun Microsystems, Inc."</td>
<td>"C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe"</td>
<td>File exists</td>
</tr>
<tr>
<td class="group" colspan="6">Print Monitors</td>
</tr>
<tr>
<td class="reg" colspan="6">HKLM\SYSTEM\CurrentControlSet\Control\Print\Monitors</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rt">||||||</td>
<td>"Bluetooth-Druckeranschluss"</td>
<td>"Broadcom Corporation."</td>
<td>C:\WINDOWS\system32\bthcrp.dll</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rt">||||||</td>
<td>"Send To Microsoft OneNote Monitor"</td>
<td>"Microsoft Corporation"</td>
<td>C:\WINDOWS\system32\msonpmon.dll</td>
<td>File exists</td>
</tr>
<tr>
<td class="group" colspan="6">Services</td>
</tr>
<tr>
<td class="reg" colspan="6">HKLM\SYSTEM\CurrentControlSet\Services</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rt">||||||</td>
<td>".NET Runtime Optimization Service v2.0.50727_X86" (clr_optimization_v2.0.50727_32)</td>
<td>"Microsoft Corporation"</td>
<td>C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe</td>
<td>File exists</td>
</tr>
<tr>
<td class="notfound"><input type="checkbox" disabled checked></td>
<td class="rs rn">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</td>
<td class="notfound">"Anwendungsverwaltung" (AppMgmt)</td>
<td class="notfound"></td>
<td class="notfound">C:\WINDOWS\System32\appmgmts.dll</td>
<td class="notfound">File not found</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rt">||||||</td>
<td>"Apple Mobile Device" (Apple Mobile Device)</td>
<td>"Apple Inc."</td>
<td>C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleMobileDeviceService.exe</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rt">||||||</td>
<td>"ASP.NET-Zustandsdienst" (aspnet_state)</td>
<td>"Microsoft Corporation"</td>
<td>C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rt">||||||</td>
<td>"BBUpdate" (BBUpdate)</td>
<td>"Microsoft Corporation"</td>
<td>C:\Programme\Microsoft\BingBar\SeaPort.EXE</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs ry">||||&nbsp;&nbsp;</td>
<td>"Bing Bar Update Service" (BBSvc)</td>
<td>"Microsoft Corporation."</td>
<td>C:\Programme\Microsoft\BingBar\BBSvc.EXE</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rt">||||||</td>
<td>"Bluetooth Service" (btwdins)</td>
<td>"Broadcom Corporation."</td>
<td>C:\Programme\WIDCOMM\Bluetooth Software\bin\btwdins.exe</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rt">||||||</td>
<td>"Dienst "Bonjour"" (Bonjour Service)</td>
<td>"Apple Inc."</td>
<td>C:\Programme\Bonjour\mDNSResponder.exe</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rt">||||||</td>
<td>"iPod-Dienst" (iPod Service)</td>
<td>"Apple Inc."</td>
<td>C:\Programme\iPod\bin\iPodService.exe</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rt">||||||</td>
<td>"Java Quick Starter" (JavaQuickStarterService)</td>
<td>"Sun Microsystems, Inc."</td>
<td>C:\Programme\Java\jre6\bin\jqs.exe</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs ru">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</td>
<td>"MBAMService" (MBAMService)</td>
<td>"Malwarebytes Corporation"</td>
<td>C:\Programme\Malwarebytes' Anti-Malware\mbamservice.exe</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs ru">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</td>
<td>"Messenger Plus! Service" (MsgPlusService)</td>
<td>"Yuna Software"</td>
<td>C:\Programme\Yuna Software\Messenger Plus! for Skype\MsgPlusForSkypeService.exe</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rt">||||||</td>
<td>"Microsoft Office Diagnostics Service" (odserv)</td>
<td>"Microsoft Corporation"</td>
<td>C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE12\ODSERV.EXE</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs ru">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</td>
<td>"Mozilla Maintenance Service" (MozillaMaintenance)</td>
<td>"Mozilla Foundation"</td>
<td>C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rt">||||||</td>
<td>"Office Source Engine" (ose)</td>
<td>"Microsoft Corporation"</td>
<td>C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rt">||||||</td>
<td>"Windows CardSpace" (idsvc)</td>
<td>"Microsoft Corporation"</td>
<td>C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rt">||||||</td>
<td>"Windows Live Family Safety-Dienst" (fsssvc)</td>
<td>"Microsoft Corporation"</td>
<td>C:\Programme\Windows Live\Family Safety\fsssvc.exe</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rt">||||||</td>
<td>"Windows Presentation Foundation Font Cache 3.0.0.0" (FontCache3.0.0.0)</td>
<td>"Microsoft Corporation"</td>
<td>C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe</td>
<td>File exists</td>
</tr>
<tr>
<td class="group" colspan="6">Winlogon</td>
</tr>
<tr>
<td class="reg" colspan="6">HKCU\Control Panel\IOProcs</td>
</tr>
<tr>
<td class="notfound"><input type="checkbox" disabled checked></td>
<td class="rs rn">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</td>
<td class="notfound">"MVB"</td>
<td class="notfound"></td>
<td class="notfound">mvfs32.dll</td>
<td class="notfound">File not found</td>
</tr>
<tr>
<td class="reg" colspan="6">HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions</td>
</tr>
<tr>
<td class="notfound"><input type="checkbox" disabled checked></td>
<td class="rs rn">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</td>
<td class="notfound">{c6dc5466-785a-11d2-84d0-00c04fb169f7} "Softwareinstallation"</td>
<td class="notfound"></td>
<td class="notfound">appmgmts.dll</td>
<td class="notfound">File not found</td>
</tr>
<tr>
<td class="reg" colspan="6">HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs ry">||||&nbsp;&nbsp;</td>
<td>"WgaLogon"</td>
<td>"Microsoft Corporation"</td>
<td>C:\WINDOWS\system32\WgaLogon.dll</td>
<td>File exists</td>
</tr>
<tr>
<td class="group" colspan="6">Winsock Providers</td>
</tr>
<tr>
<td class="reg" colspan="6">HKLM\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rt">||||||</td>
<td>"mdnsNSP"</td>
<td>"Apple Inc."</td>
<td>C:\Programme\Bonjour\mdnsNSP.dll</td>
<td>File exists</td>
</tr>
</table>
<p>If You have questions or want to get some help, You can visit <a href="hxxp://forum.online-solutions.ru" target="_blank">hxxp://forum.online-solutions.ru</a></p>
</body></html>

aswMBR kommt gleich hinterher.

aswMBR-Logfile:

Code:

aswMBR version 0.9.9.1665 Copyright(c) 2011 AVAST Software
Run date: 2012-07-06 10:24:39
-----------------------------
10:24:39.515    OS Version: Windows 5.1.2600 Service Pack 3
10:24:39.515    Number of processors: 2 586 0x1C02
10:24:39.531    ComputerName: NAME-BQC30SBMP9  UserName: Susa
10:24:40.203    Initialize success
10:29:09.687    AVAST engine defs: 12070501
10:30:22.046    Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-0
10:30:22.046    Disk 0 Vendor: Hitachi_ FB2O Size: 152627MB BusType: 3
10:30:22.140    Disk 0 MBR read successfully
10:30:22.140    Disk 0 MBR scan
10:30:22.187    Disk 0 Windows XP default MBR code
10:30:22.203    Disk 0 Partition 1 80 (A) 07    HPFS/NTFS NTFS        70096 MB offset 63
10:30:22.234    Disk 0 Partition 2 00    07    HPFS/NTFS NTFS        70088 MB offset 143556840
10:30:22.296    Disk 0 Partition 3 00    1C Hidd FAT32 LBA MSDOS5.0    12393 MB offset 287097615
10:30:22.343    Disk 0 Partition 4 00    EF      EFI FAT    A1397      47 MB offset 312480315
10:30:22.406    Disk 0 scanning sectors +312576705
10:30:22.593    Disk 0 scanning C:\WINDOWS\system32\drivers
10:31:00.046    Service scanning
10:31:28.406    Modules scanning
10:32:11.546    Disk 0 trace - called modules:
10:32:11.593    ntkrnlpa.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll iaStor.sys
10:32:11.593    1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x8657dab8]
10:32:11.609    3 CLASSPNP.SYS[f75c8fd7] -> nt!IofCallDriver -> \Device\00000067[0x8657e880]
10:32:11.609    5 ACPI.sys[f745e620] -> nt!IofCallDriver -> \Device\Ide\IAAStorageDevice-0[0x86553028]
10:32:12.078    AVAST engine scan C:\WINDOWS
10:33:09.484    AVAST engine scan C:\WINDOWS\system32
10:40:33.875    AVAST engine scan C:\WINDOWS\system32\drivers
10:41:17.046    AVAST engine scan C:\Dokumente und Einstellungen\Susa
11:11:07.546    AVAST engine scan C:\Dokumente und Einstellungen\All Users
11:13:04.031    Scan finished successfully
11:16:39.015    Disk 0 MBR has been saved successfully to "C:\Dokumente und Einstellungen\Susa\Desktop\MBR.dat"
11:16:39.031    The log file has been saved successfully to "C:\Dokumente und Einstellungen\Susa\Desktop\aswMBR.txt"


cosinus 06.07.2012 10:52

Bitte die Anleitungen richtig lesen!
Das OSAM Log solltest du in einem bestimmten Format abspeichern!

ninifee 07.07.2012 22:07

Ich habe die Anleitung richtig gelesen,
hab es von html in log umbenannt, wusste nicht, dass man es direkt so abspeichern musste, entschuldigung.

Nochmal:

Code:

Report of OSAM: Autorun Manager v5.0.11926.0
hxxp://www.online-solutions.ru/en/
Saved at 23:05:41 on 07.07.2012

OS: Windows XP Home Edition Service Pack 3 (Build 2600)
Default Browser: Mozilla Corporation Firefox 13.0.1

Scanner Settings
[x] Rootkits detection (hidden registry)
[x] Rootkits detection (hidden files)
[x] Retrieve files information
[x] Check Microsoft signatures

Filters
[ ] Trusted entries
[ ] Empty entries
[x] Hidden registry entries (rootkit activity)
[x] Exclusively opened files
[x] Not found files
[x] Files without detailed information
[x] Existing files
[ ] Non-startable services
[ ] Non-startable drivers
[x] Active entries
[x] Disabled entries


[Common]
-----( %SystemRoot%\Tasks )-----
"AppleSoftwareUpdate.job" - "Apple Inc." - C:\Programme\Apple Software Update\SoftwareUpdate.exe

[Control Panel Objects]
-----( %SystemRoot%\system32 )-----
"btcpl.cpl" - "Broadcom Corporation." - C:\WINDOWS\system32\btcpl.cpl
"FlashPlayerCPLApp.cpl" - "Adobe Systems Incorporated" - C:\WINDOWS\system32\FlashPlayerCPLApp.cpl
"infocardcpl.cpl" - "Microsoft Corporation" - C:\WINDOWS\system32\infocardcpl.cpl
"javacpl.cpl" - "Sun Microsystems, Inc." - C:\WINDOWS\system32\javacpl.cpl
-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Control Panel\Cpls )-----
"QuickTime" - "Apple Inc." - C:\Programme\QuickTime\QTSystem\QuickTime.cpl

[Drivers]
-----( HKLM\SYSTEM\CurrentControlSet\Services )-----
"Bytemobile Boot Time Load Driver" (BMLoad) - "Bytemobile, Inc." - C:\WINDOWS\System32\drivers\BMLoad.sys
"Bytemobile Kernel Network Provider" (tcpipBM) - "Bytemobile, Inc." - C:\WINDOWS\system32\drivers\tcpipBM.sys
"catchme" (catchme) - ? - C:\DOKUME~1\Susa\LOKALE~1\Temp\catchme.sys  (File not found)
"Changer" (Changer) - ? - C:\WINDOWS\system32\drivers\Changer.sys  (File not found)
"FssFltr" (fssfltr) - "Microsoft Corporation" - C:\WINDOWS\System32\DRIVERS\fssfltr_tdi.sys
"Huawei DataCard USB Modem and USB Serial" (hwdatacard) - ? - C:\WINDOWS\System32\DRIVERS\ewusbmdm.sys  (File not found)
"i2omgmt" (i2omgmt) - ? - C:\WINDOWS\system32\drivers\i2omgmt.sys  (File not found)
"lbrtfdc" (lbrtfdc) - ? - C:\WINDOWS\system32\drivers\lbrtfdc.sys  (File not found)
"MBAMProtector" (MBAMProtector) - "Malwarebytes Corporation" - C:\WINDOWS\system32\drivers\mbam.sys
"PCIDump" (PCIDump) - ? - C:\WINDOWS\system32\drivers\PCIDump.sys  (File not found)
"PDCOMP" (PDCOMP) - ? - C:\WINDOWS\system32\drivers\PDCOMP.sys  (File not found)
"PDFRAME" (PDFRAME) - ? - C:\WINDOWS\system32\drivers\PDFRAME.sys  (File not found)
"PDRELI" (PDRELI) - ? - C:\WINDOWS\system32\drivers\PDRELI.sys  (File not found)
"PDRFRAME" (PDRFRAME) - ? - C:\WINDOWS\system32\drivers\PDRFRAME.sys  (File not found)
"WDICA" (WDICA) - ? - C:\WINDOWS\system32\drivers\WDICA.sys  (File not found)

[Explorer]
-----( HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components )-----
{89B4C1CD-B018-4511-B0A1-5476DBF70820} "StubPath" - "Microsoft Corporation" - C:\WINDOWS\system32\Rundll32.exe C:\WINDOWS\system32\mscories.dll,Install
-----( HKLM\Software\Classes\Folder\shellex\ColumnHandlers )-----
{F9DB5320-233E-11D1-9F84-707F02C10627} "PDF Shell Extension" - "Adobe Systems, Inc." - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\PDFShell.dll
{C52AF81D-F7A0-4AAB-8E87-F80A60CCD396} "{C52AF81D-F7A0-4AAB-8E87-F80A60CCD396}" - ? - C:\Programme\OpenOffice.org 3\Basis\program\shlxthdl\shlxthdl.dll
-----( HKLM\Software\Classes\Protocols\Filter )-----
{1E66F26B-79EE-11D2-8710-00C04F79ED0D} "Cor MIME Filter, CorFltr, CorFltr 1" - "Microsoft Corporation" - C:\WINDOWS\system32\mscoree.dll
{1E66F26B-79EE-11D2-8710-00C04F79ED0D} "Cor MIME Filter, CorFltr, CorFltr 1" - "Microsoft Corporation" - C:\WINDOWS\system32\mscoree.dll
{1E66F26B-79EE-11D2-8710-00C04F79ED0D} "Cor MIME Filter, CorFltr, CorFltr 1" - "Microsoft Corporation" - C:\WINDOWS\system32\mscoree.dll
{807563E5-5146-11D5-A672-00B0D022E945} "Microsoft Office InfoPath XML Mime Filter" - "Microsoft Corporation" - C:\PROGRA~1\GEMEIN~1\MICROS~1\OFFICE12\MSOXMLMF.DLL
-----( HKLM\Software\Classes\Protocols\Handler )-----
{314111c7-a502-11d2-bbca-00c04f8ec294} "HxProtocol Class" - "Microsoft Corporation" - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Help\hxds.dll
{FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} "IEProtocolHandler Class" - "Skype Technologies" - C:\PROGRA~1\GEMEIN~1\Skype\SKYPE4~1.DLL
{828030A1-22C1-4009-854F-8E305202313F} "livecall" - "Microsoft Corporation" - C:\PROGRA~1\WINDOW~4\MESSEN~1\MSGRAP~1.DLL
{0A9007C0-4076-11D3-8789-0000F8105754} "Microsoft Infotech Storage Protocol for IE 4.0" - "Microsoft Corporation" - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Information Retrieval\msitss.dll
{828030A1-22C1-4009-854F-8E305202313F} "msnim" - "Microsoft Corporation" - C:\PROGRA~1\WINDOW~4\MESSEN~1\MSGRAP~1.DLL
{03C514A3-1EFB-4856-9F99-10D7BE1653C0} "Windows Live Mail HTML Asynchronous Pluggable Protocol Handler" - "Microsoft Corporation" - C:\Programme\Windows Live\Mail\mailcomm.dll
-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved )-----
{0563DB41-F538-4B37-A92D-4659049B7766} "CLSID_WLMCMimeFilter" - "Microsoft Corporation" - C:\Programme\Windows Live\Mail\mailcomm.dll
{d6044399-0b9e-4084-a9ac-c4b7c7800fcf} "Eee Storage" - "Microsoft Corporation" - C:\WINDOWS\system32\mscoree.dll
{B9E1D2CB-CCFF-4AA6-9579-D7A4754030EF} "iTunes" - "Apple Inc." - C:\Programme\iTunes\iTunesMiniPlayer.dll
{42042206-2D85-11D3-8CFF-005004838597} "Microsoft Office HTML Icon Handler" - "Microsoft Corporation" - C:\Programme\Microsoft Office\Office12\msohevi.dll
{993BE281-6695-4BA5-8A2A-7AACBFAAB69E} "Microsoft Office Metadata Handler" - "Microsoft Corporation" - C:\PROGRA~1\GEMEIN~1\MICROS~1\OFFICE12\msoshext.dll
{5858A72C-C2B4-4dd7-B2BF-B76DB1BD9F6C} "Microsoft Office OneNote Namespace Extension for Windows Desktop Search" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~4\Office12\ONFILTER.DLL
{C41662BB-1FA0-4CE0-8DC5-9B7F8279FF97} "Microsoft Office Thumbnail Handler" - "Microsoft Corporation" - C:\PROGRA~1\GEMEIN~1\MICROS~1\OFFICE12\msoshext.dll
{C52AF81D-F7A0-4AAB-8E87-F80A60CCD396} "OpenOffice.org Column Handler" - ? - C:\Programme\OpenOffice.org 3\Basis\program\shlxthdl\shlxthdl.dll
{087B3AE3-E237-4467-B8DB-5A38AB959AC9} "OpenOffice.org Infotip Handler" - ? - C:\Programme\OpenOffice.org 3\Basis\program\shlxthdl\shlxthdl.dll
{63542C48-9552-494A-84F7-73AA6A7C99C1} "OpenOffice.org Property Sheet Handler" - ? - C:\Programme\OpenOffice.org 3\Basis\program\shlxthdl\shlxthdl.dll
{3B092F0C-7696-40E3-A80F-68D74DA84210} "OpenOffice.org Thumbnail Viewer" - ? - C:\Programme\OpenOffice.org 3\Basis\program\shlxthdl\shlxthdl.dll
{E37E2028-CE1A-4f42-AF05-6CEABC4E5D75} "Shell Icon Handler for Application References" - "Microsoft Corporation" - C:\WINDOWS\system32\dfshim.dll
{e82a2d71-5b2f-43a0-97b8-81be15854de8} "ShellLink for Application References" - "Microsoft Corporation" - C:\WINDOWS\system32\dfshim.dll
{BDEADF00-C265-11D0-BCED-00A0C90AB50F} "Web Folders" - "Microsoft Corporation" - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Web Folders\MSONSEXT.DLL
{2BE99FD4-A181-4996-BFA9-58C5FFD11F6C} "Windows Live Photo Gallery Autoplay Drop Target" - "Microsoft Corporation" - C:\Programme\Windows Live\Photo Gallery\WLXPhotoGallery.exe
{00F30F64-AC33-42F5-8FD1-5DC2D3FDE06C} "Windows Live Photo Gallery Editor Drop Target" - "Microsoft Corporation" - C:\Programme\Windows Live\Photo Gallery\WLXPhotoGallery.exe
{00F3712A-CA79-45B4-9E4D-D7891E7F8B9D} "Windows Live Photo Gallery Editor Shim" - "Microsoft Corporation" - C:\Programme\Windows Live\Photo Gallery\PhotoViewerShim.dll
{00F30F90-3E96-453B-AFCD-D71989ECC2C7} "Windows Live Photo Gallery Viewer Autoplay Shim" - "Microsoft Corporation" - C:\Programme\Windows Live\Photo Gallery\PhotoViewerShim.dll
{00F33137-EE26-412F-8D71-F84E4C2C6625} "Windows Live Photo Gallery Viewer Autoplay Shim" - "Microsoft Corporation" - C:\Programme\Windows Live\Photo Gallery\PhotoViewerShim.dll
{00F374B7-B390-4884-B372-2FC349F2172B} "Windows Live Photo Gallery Viewer Drop Target" - "Microsoft Corporation" - C:\Programme\Windows Live\Photo Gallery\WLXPhotoGallery.exe
{00F346CB-35A4-465B-8B8F-65A29DBAB1F6} "Windows Live Photo Gallery Viewer Shim" - "Microsoft Corporation" - C:\Programme\Windows Live\Photo Gallery\PhotoViewerShim.dll
{E0D79304-84BE-11CE-9641-444553540000} "WinZip" - "WinZip Computing, S.L." - C:\Programme\WinZip\wzshlstb.dll
{E0D79305-84BE-11CE-9641-444553540000} "WinZip" - "WinZip Computing, S.L." - C:\Programme\WinZip\wzshlstb.dll
{E0D79306-84BE-11CE-9641-444553540000} "WinZip" - "WinZip Computing, S.L." - C:\Programme\WinZip\wzshlstb.dll
{E0D79307-84BE-11CE-9641-444553540000} "WinZip" - "WinZip Computing, S.L." - C:\Programme\WinZip\wzshlstb.dll
{b1b96b20-da1d-4a3c-92c1-7229b32f2325} "XPClient.FileSystemBrowser.BackupContextMenuExtension.BackupContextMenuExtension" - "Microsoft Corporation" - C:\WINDOWS\system32\mscoree.dll
{fe25455d-b4c2-4e32-97d2-92632ec1c224} "XPClient.FileSystemBrowser.OverlayIconExtension1" - "Microsoft Corporation" - C:\WINDOWS\system32\mscoree.dll
{1fae2d88-a78e-4f03-909f-be818a3c1ce6} "XPClient.FileSystemBrowser.OverlayIconExtension2" - "Microsoft Corporation" - C:\WINDOWS\system32\mscoree.dll
{06A2568A-CED6-4187-BB20-400B8C02BE5A} "{06A2568A-CED6-4187-BB20-400B8C02BE5A}" - "Microsoft Corporation" - C:\Programme\Windows Live\Photo Gallery\WLXPhotoAcquireWizard.exe

[Internet Explorer]
-----( HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser )-----
ITBar7Height "ITBar7Height" - ? -  (File not found | COM-object registry key not found)
<binary data> "ITBar7Layout" - ? -  (File not found | COM-object registry key not found)
-----( HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units )-----
{8AD9C840-044E-11D1-B3E9-00805F499D93} "Java Plug-in 1.6.0_22" - "Sun Microsystems, Inc." - C:\Programme\Java\jre6\bin\npjpi160_22.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab
{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} "Java Plug-in 1.6.0_22" - "Sun Microsystems, Inc." - C:\Programme\Java\jre6\bin\npjpi160_22.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab
{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} "Java Plug-in 1.6.0_22" - "Sun Microsystems, Inc." - C:\Programme\Java\jre6\bin\npjpi160_22.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab
{C3F79A2B-B9B4-4A66-B012-3EE46475B072} "MessengerStatsClient Class" - "Microsoft Corporation" - C:\WINDOWS\Downloaded Program Files\MessengerStatsPAClient.dll / hxxp://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
{5D6F45B3-9043-443D-A792-115447494D24} "UnoCtrl Class" - "Microsoft" - C:\WINDOWS\Downloaded Program Files\GAME_UNO1.dll / hxxp://messenger.zone.msn.com/MessengerGamesContent/GameContent/de/uno1/GAME_UNO1.cab
{C345E174-3E87-4F41-A01C-B066A90A49B4} "WRC Class" - "Microsoft Corporation" - C:\WINDOWS\Downloaded Program Files\wrc32.ocx / hxxp://trial.trymicrosoftoffice.com/trialoaa/buymsoffice_assets/framework//microsoft/wrc32.ocx
-----( HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions )-----
"@btrez.dll,-4015" - ? - C:\Programme\WIDCOMM\Bluetooth Software\btsendto_ie.htm
{48E73304-E1D6-4330-914C-F5F514E3486C} "An OneNote senden" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~4\Office12\ONBttnIE.dll
{5F7B1267-94A9-47F5-98DB-E99415F33AEC} "In Blog veröffentlichen" - "Microsoft Corporation" - C:\Programme\Windows Live\Writer\WriterBrowserExtension.dll
{FF059E31-CC5A-4E2E-BF3B-96E929D65503} "Research" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~4\Office12\REFIEBAR.DLL
-----( HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar )-----
{8dcb7100-df86-4384-8842-8fa844297b3f} "Bing Bar" - "Microsoft Corporation." - C:\Programme\Microsoft\BingBar\BingExt.dll
{ae07101b-46d4-4a98-af68-0333ea26e113} "Messenger Plus! Community Smartbar" - "Microsoft Corporation" - C:\WINDOWS\system32\mscoree.dll
-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects )-----
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} "Adobe PDF Reader" - "Adobe Systems Incorporated" - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
{d2ce3e00-f94a-4740-988e-03dc2f38c34f} "Bing Bar Helper" - "Microsoft Corporation." - C:\Programme\Microsoft\BingBar\BingExt.dll
{DBC80044-A445-435b-BC74-9C25C1C588A9} "Java(tm) Plug-In 2 SSV Helper" - "Sun Microsystems, Inc." - C:\Programme\Java\jre6\bin\jp2ssv.dll
{E7E6F031-17CE-4C07-BC86-EABFE594F69C} "JQSIEStartDetectorImpl Class" - "Sun Microsystems, Inc." - C:\Programme\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
{31ad400d-1b06-4e33-a59a-90c2c140cba0} "Messenger Plus! Community SmartbarEngine" - "Microsoft Corporation" - C:\WINDOWS\system32\mscoree.dll
{9030D464-4C02-4ABF-8ECC-5164760863C6} "Windows Live Anmelde-Hilfsprogramm" - "Microsoft Corporation" - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
{5C255C8A-E604-49b4-9D64-90988571CECB} "{5C255C8A-E604-49b4-9D64-90988571CECB}" - ? -  (File not found | COM-object registry key not found)

[Logon]
-----( %AllUsersProfile%\Startmenü\Programme\Autostart )-----
" SuperHybridEngine.lnk" - "ASUSTeK Computer Inc." - C:\Programme\ASUS\EeePC\Super Hybrid Engine\SuperHybridEngine.exe  (Shortcut exists | File exists)
"desktop.ini" - ? - C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\desktop.ini
"MCtlSvc.lnk" - "ZTE" - C:\Programme\congstar\Internet-Manager\Bin\mcserver.exe  (Shortcut exists | File exists)
"BTTray.lnk" - "Broadcom Corporation." - C:\Programme\WIDCOMM\Bluetooth Software\BTTray.exe  (Shortcut exists | File exists)
"WinZip Quick Pick.lnk" - "WinZip Computing, S.L." - C:\Programme\WinZip\WZQKPICK32.EXE  (Shortcut exists | File exists)
-----( %UserProfile%\Startmenü\Programme\Autostart )-----
"OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk" - "Microsoft Corporation" - C:\Programme\Microsoft Office\Office12\ONENOTEM.EXE  (Shortcut exists | File exists)
"desktop.ini" - ? - C:\Dokumente und Einstellungen\Susa\Startmenü\Programme\Autostart\desktop.ini
"OpenOffice.org 3.3.lnk" - ? - C:\Programme\OpenOffice.org 3\program\quickstart.exe  (Shortcut exists | File found, but it contains no detailed information | File exists)
-----( HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run )-----
"Eee Docking" - ? - C:\Programme\ASUS\Eee Docking\Eee Docking.exe
-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Run )-----
"APSDaemon" - "Apple Inc." - "C:\Programme\Gemeinsame Dateien\Apple\Apple Application Support\APSDaemon.exe"
"ASUS Screen Saver Protector" - "ASUS" - C:\WINDOWS\AsScrPro.exe
"AsusACPIServer" - "ASUSTeK Computer Inc." - C:\Programme\EeePC\ACPI\AsAcpiSvr.exe
"AsusEPCMonitor" - "ASUSTeK Computer Inc." - C:\Programme\EeePC\ACPI\AsEPCMon.exe
"AsusTray" - "ASUSTeK Computer Inc." - C:\Programme\EeePC\ACPI\AsTray.exe
"iTunesHelper" - "Apple Inc." - "C:\Programme\iTunes\iTunesHelper.exe"
"LiveUpdate" - ? - C:\Programme\Asus\LiveUpdate\LiveUpdate.exe auto  (File found, but it contains no detailed information)
"Malwarebytes' Anti-Malware" - "Malwarebytes Corporation" - "C:\Programme\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
"MessengerPlusForSkypeService" - "Yuna Software" - "C:\Programme\Yuna Software\Messenger Plus! for Skype\MsgPlusForSkypeService.exe"
"PlusService" - "Yuna Software" - C:\Programme\Yuna Software\Messenger Plus!\PlusService.exe
"QuickTime Task" - "Apple Inc." - "C:\Programme\QuickTime\QTTask.exe" -atboottime
"SunJavaUpdateSched" - "Sun Microsystems, Inc." - "C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe"

[Print Monitors]
-----( HKLM\SYSTEM\CurrentControlSet\Control\Print\Monitors )-----
"Bluetooth-Druckeranschluss" - "Broadcom Corporation." - C:\WINDOWS\system32\bthcrp.dll
"Send To Microsoft OneNote Monitor" - "Microsoft Corporation" - C:\WINDOWS\system32\msonpmon.dll

[Services]
-----( HKLM\SYSTEM\CurrentControlSet\Services )-----
".NET Runtime Optimization Service v2.0.50727_X86" (clr_optimization_v2.0.50727_32) - "Microsoft Corporation" - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
"Anwendungsverwaltung" (AppMgmt) - ? - C:\WINDOWS\System32\appmgmts.dll  (File not found)
"Apple Mobile Device" (Apple Mobile Device) - "Apple Inc." - C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleMobileDeviceService.exe
"ASP.NET-Zustandsdienst" (aspnet_state) - "Microsoft Corporation" - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
"BBUpdate" (BBUpdate) - "Microsoft Corporation" - C:\Programme\Microsoft\BingBar\SeaPort.EXE
"Bing Bar Update Service" (BBSvc) - "Microsoft Corporation." - C:\Programme\Microsoft\BingBar\BBSvc.EXE
"Bluetooth Service" (btwdins) - "Broadcom Corporation." - C:\Programme\WIDCOMM\Bluetooth Software\bin\btwdins.exe
"Dienst "Bonjour"" (Bonjour Service) - "Apple Inc." - C:\Programme\Bonjour\mDNSResponder.exe
"iPod-Dienst" (iPod Service) - "Apple Inc." - C:\Programme\iPod\bin\iPodService.exe
"Java Quick Starter" (JavaQuickStarterService) - "Sun Microsystems, Inc." - C:\Programme\Java\jre6\bin\jqs.exe
"MBAMService" (MBAMService) - "Malwarebytes Corporation" - C:\Programme\Malwarebytes' Anti-Malware\mbamservice.exe
"Messenger Plus! Service" (MsgPlusService) - "Yuna Software" - C:\Programme\Yuna Software\Messenger Plus! for Skype\MsgPlusForSkypeService.exe
"Microsoft Office Diagnostics Service" (odserv) - "Microsoft Corporation" - C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE12\ODSERV.EXE
"Mozilla Maintenance Service" (MozillaMaintenance) - "Mozilla Foundation" - C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe
"Office Source Engine" (ose) - "Microsoft Corporation" - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE
"Windows CardSpace" (idsvc) - "Microsoft Corporation" - C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
"Windows Live Family Safety-Dienst" (fsssvc) - "Microsoft Corporation" - C:\Programme\Windows Live\Family Safety\fsssvc.exe
"Windows Presentation Foundation Font Cache 3.0.0.0" (FontCache3.0.0.0) - "Microsoft Corporation" - C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe

[Winlogon]
-----( HKCU\Control Panel\IOProcs )-----
"MVB" - ? - mvfs32.dll  (File not found)
-----( HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions )-----
{c6dc5466-785a-11d2-84d0-00c04fb169f7} "Softwareinstallation" - ? - appmgmts.dll  (File not found)
-----( HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify )-----
"WgaLogon" - "Microsoft Corporation" - C:\WINDOWS\system32\WgaLogon.dll

[Winsock Providers]
-----( HKLM\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries )-----
"mdnsNSP" - "Apple Inc." - C:\Programme\Bonjour\mdnsNSP.dll

===[ Logfile end ]=========================================[ Logfile end ]===

If You have questions or want to get some help, You can visit hxxp://forum.online-solutions.ru


cosinus 09.07.2012 11:21

Sieht ok aus. Wir sollten fast durch sein. Mach bitte zur Kontrolle Vollscans mit Malwarebytes und SASW und poste die Logs.
Denk dran beide Tools zu updaten vor dem Scan!!

ninifee 11.07.2012 10:05

Soooo erstmal das MBAM-Log:

Code:

Malwarebytes Anti-Malware 1.61.0.1400
www.malwarebytes.org

Datenbank Version: v2012.07.10.13

Windows XP Service Pack 3 x86 NTFS
Internet Explorer 8.0.6001.18702
Susa :: NAME-BQC30SBMP9 [Administrator]

Schutz: Aktiviert

10.07.2012 22:49:36
mbam-log-2012-07-10 (22-49-36).txt

Art des Suchlaufs: Vollständiger Suchlauf
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 289404
Laufzeit: 59 Minute(n), 54 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 0
(Keine bösartigen Objekte gefunden)

(Ende)

Und SuperAntiSpyware:

Code:

SUPERAntiSpyware Scan Log
hxxp://www.superantispyware.com

Generated 07/11/2012 at 02:22 AM

Application Version : 5.5.1006

Core Rules Database Version : 8878
Trace Rules Database Version: 6690

Scan type      : Complete Scan
Total Scan Time : 02:09:45

Operating System Information
Windows XP Home Edition 32-bit, Service Pack 3 (Build 5.01.2600)
Administrator

Memory items scanned      : 589
Memory threats detected  : 0
Registry items scanned    : 34143
Registry threats detected : 0
File items scanned        : 81610
File threats detected    : 426

Adware.Tracking Cookie
        C:\Dokumente und Einstellungen\Susa\Cookies\susa@apmebf[1].txt [ /apmebf ]
        C:\Dokumente und Einstellungen\Susa\Cookies\susa@atdmt[2].txt [ /atdmt ]
        C:\Dokumente und Einstellungen\Susa\Cookies\susa@content.yieldmanager[1].txt [ /content.yieldmanager ]
        C:\Dokumente und Einstellungen\Susa\Cookies\susa@media6degrees[2].txt [ /media6degrees ]
        C:\Dokumente und Einstellungen\Susa\Cookies\susa@microsoftwllivemkt.112.2o7[1].txt [ /microsoftwllivemkt.112.2o7 ]
        C:\Dokumente und Einstellungen\Susa\Cookies\susa@msnportal.112.2o7[1].txt [ /msnportal.112.2o7 ]
        C:\Dokumente und Einstellungen\Susa\Cookies\susa@revsci[2].txt [ /revsci ]
        C:\Dokumente und Einstellungen\Susa\Cookies\susa@statse.webtrendslive[2].txt [ /statse.webtrendslive ]
        C:\Dokumente und Einstellungen\Susa\Cookies\susa@tribalfusion[2].txt [ /tribalfusion ]
        C:\Dokumente und Einstellungen\Susa\Cookies\susa@vdwp.solution.weborama[2].txt [ /vdwp.solution.weborama ]
        C:\Dokumente und Einstellungen\Susa\Cookies\susa@weborama[1].txt [ /weborama ]
        C:\Dokumente und Einstellungen\Susa\Cookies\susa@www.active-tracking[1].txt [ /www.active-tracking ]
        C:\Dokumente und Einstellungen\Susa\Cookies\ZSVQWGBE.txt [ /atdmt.com ]
        C:\Dokumente und Einstellungen\Susa\Cookies\EMN5BLIY.txt [ /microsoftwllivemkt.112.2o7.net ]
        C:\Dokumente und Einstellungen\Susa\Cookies\4FTUYODB.txt [ /tradedoubler.com ]
        C:\Dokumente und Einstellungen\Susa\Cookies\2NUA1FD9.txt [ /serving-sys.com ]
        C:\Dokumente und Einstellungen\Susa\Cookies\E4X7E3YE.txt [ /ad.ad-srv.net ]
        C:\Dokumente und Einstellungen\Susa\Cookies\ATD5JRFZ.txt [ /smartadserver.com ]
        C:\Dokumente und Einstellungen\Susa\Cookies\LG4XKYZE.txt [ /ad2.adfarm1.adition.com ]
        C:\Dokumente und Einstellungen\Susa\Cookies\FG2275WE.txt [ /track.adform.net ]
        C:\Dokumente und Einstellungen\Susa\Cookies\DAWVQ9TD.txt [ /zanox-affiliate.de ]
        C:\Dokumente und Einstellungen\Susa\Cookies\U6HTCO0S.txt [ /tracking.quisma.com ]
        C:\Dokumente und Einstellungen\Susa\Cookies\6V3T0A9W.txt [ /atdmt.combing.com ]
        C:\Dokumente und Einstellungen\Susa\Cookies\25URPB75.txt [ /invitemedia.com ]
        C:\Dokumente und Einstellungen\Susa\Cookies\3KIO45V3.txt [ /mediaplex.com ]
        C:\Dokumente und Einstellungen\Susa\Cookies\2CX1NX3R.txt [ /ad.zanox.com ]
        C:\Dokumente und Einstellungen\Susa\Cookies\EMEV62S2.txt [ /questionmarket.com ]
        C:\Dokumente und Einstellungen\Susa\Cookies\SOYD28ZV.txt [ /imrworldwide.com ]
        C:\Dokumente und Einstellungen\Susa\Cookies\W88LLU7S.txt [ /apmebf.com ]
        C:\Dokumente und Einstellungen\Susa\Cookies\X22FLTYV.txt [ /www.zanox-affiliate.de ]
        C:\Dokumente und Einstellungen\Susa\Cookies\Y6A1OUI3.txt [ /ad.yieldmanager.com ]
        C:\Dokumente und Einstellungen\Susa\Cookies\JSMMTXH0.txt [ /adform.net ]
        C:\Dokumente und Einstellungen\Susa\Cookies\QT4ZH71O.txt [ /revsci.net ]
        C:\Dokumente und Einstellungen\Susa\Cookies\4K7BFA9N.txt [ /casalemedia.com ]
        C:\Dokumente und Einstellungen\Susa\Cookies\TVEO3U1C.txt [ /bs.serving-sys.com ]
        C:\Dokumente und Einstellungen\Susa\Cookies\M2ASY79H.txt [ /ad.360yield.com ]
        C:\Dokumente und Einstellungen\Susa\Cookies\FH521WLA.txt [ /ad.dyntracker.de ]
        C:\Dokumente und Einstellungen\Susa\Cookies\FI2RNJK9.txt [ /ad3.adfarm1.adition.com ]
        C:\Dokumente und Einstellungen\Susa\Cookies\R1NU0AMH.txt [ /doubleclick.net ]
        C:\Dokumente und Einstellungen\Susa\Cookies\4ZYACLQB.txt [ /zanox.com ]
        C:\Dokumente und Einstellungen\Susa\Cookies\SPK9R3OM.txt [ /c.atdmt.com ]
        C:\Dokumente und Einstellungen\Susa\Cookies\0B3JHZAN.txt [ /adfarm1.adition.com ]
        C:\Dokumente und Einstellungen\Susa\Cookies\Q754QOE1.txt [ /ad4.adfarm1.adition.com ]
        C:\Dokumente und Einstellungen\Susa\Cookies\ENBMB8WV.txt [ /im.banner.t-online.de ]
        C:\Dokumente und Einstellungen\Susa\Cookies\VWSC266A.txt [ /2o7.net ]
        counter.cam-content.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\W4BTXHUP ]
        delivery.ibanner.de [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\W4BTXHUP ]
        ds.serving-sys.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\W4BTXHUP ]
        hottraffic.nl [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\W4BTXHUP ]
        ia.media-imdb.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\W4BTXHUP ]
        macromedia.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\W4BTXHUP ]
        media.filb.de [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\W4BTXHUP ]
        media.kyte.tv [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\W4BTXHUP ]
        media.mtvnservices.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\W4BTXHUP ]
        msnbcmedia.msn.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\W4BTXHUP ]
        s0.2mdn.net [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\W4BTXHUP ]
        secure-us.imrworldwide.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\W4BTXHUP ]
        stat.easydate.biz [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\W4BTXHUP ]
        track.shop2market.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\W4BTXHUP ]
        track.webgains.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\W4BTXHUP ]
        www.click-six.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\W4BTXHUP ]
        www.naiadsystems.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\W4BTXHUP ]
        .apmebf.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .mediaplex.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .atdmt.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .atdmt.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .atdmt.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .imrworldwide.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .imrworldwide.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .a.revenuemax.de [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .adviva.net [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        eas.apm.emediate.eu [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .eyewonder.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .serving-sys.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .collective-media.net [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .traffictrack.de [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .2o7.net [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .zedo.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .invitemedia.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .adtech.de [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .xiti.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .adbrite.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .adbrite.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .adxpose.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .2o7.net [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .smartadserver.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        eas4.emediate.eu [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .2o7.net [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .tacoda.at.atwola.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .tacoda.at.atwola.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .at.atwola.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .ad.adnet.de [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .guj.122.2o7.net [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        track.effiliation.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .2o7.net [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .im.banner.t-online.de [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .mediaplex.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .2o7.net [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .2o7.net [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .mediaplex.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .doubleclick.net [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .ru4.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .apmebf.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .2o7.net [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .adbrite.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .interclick.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .interclick.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .clickfuse.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        de.sitestat.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .ad.yieldmanager.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        accounts.youtube.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .ru4.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .overture.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .eyewonder.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .casalemedia.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        tracking.quisma.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .2o7.net [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        ads.adxvalue.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        ads.adxvalue.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        ads.adxvalue.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        ads.adxvalue.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .ru4.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .hightraffic.hugoboss.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .amazon-adsystem.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .amazon-adsystem.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        ad.adserver01.de [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        tracking.quisma.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .adxvalue.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .harrenmedianetwork.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .adxvalue.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .adxvalue.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .adxvalue.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .adxvalue.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        tracking.sim-technik.de [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .eyewonder.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        accounts.google.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .overture.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        e2.emediate.se [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .server.cpmstar.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        7.rotator.wigetmedia.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .blogads.de [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .tracking.quisma.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .tracking.3gnet.de [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .traffictrack.de [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .traffictrack.de [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .tto2.traffictrack.de [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .legolas-media.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .2o7.net [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .clicksor.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .clicksor.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .histats.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        tracking.publicidees.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .gostats.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .histats.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        de.sitestat.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        adserver.doccheck.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .beiersdorf.122.2o7.net [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .e-2dj6aekyclcpwlp.stats.esomniture.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .liveperson.net [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .ero-advertising.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .ad-emea.doubleclick.net [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .ad-emea.doubleclick.net [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        adserv.chirurgie-portal.de [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        www4.addfreestats.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .tripod.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .tripod.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .ero-advertising.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .serving-sys.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .adnetwork.net [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        ads2.bartime.de [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .sexy-cocktails.de [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        testdata.coremetrics.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        tracking.quisma.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .getclicky.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .static.getclicky.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        in.getclicky.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .adtech.de [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        f.blogads.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .lfstmedia.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .lfstmedia.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .aim4media.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        adserver.yopi.de [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .2o7.net [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .2o7.net [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .advertising.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .cpvadverts.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .cpvadverts.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .tracking.3gnet.de [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .ero-advertising.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .sexkontakt.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .sexkontakt.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .ero-advertising.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .geschenk-finden.de [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .geschenk-finden.de [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .www.geschenk-finden.de [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .www.geschenk-finden.de [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .2o7.net [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        wstat.wibiya.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        eas.apm.emediate.eu [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .xm.xtendmedia.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        ads.saymedia.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        ads.saymedia.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .adserver.adtechus.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .tripod.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .tripod.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .serving-sys.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        ad.adserver01.de [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .ero-advertising.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .clickbank.net [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        s08.flagcounter.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .specificclick.net [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .advertising.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .advertising.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .overture.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .ero-advertising.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        7.rotator.wigetmedia.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .ero-advertising.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        go.dynamic-tracking.de [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .businessenhanced.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .businessenhanced.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .tradedoubler.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .clicksor.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .clicksor.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .zedo.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        counters.gigya.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .2o7.net [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        api.zanox.ws [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        fl01.ct2.comclick.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        fl01.ct2.comclick.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .casalemedia.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .casalemedia.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .casalemedia.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .casalemedia.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .statcounter.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .ero-advertising.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .ero-advertising.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .ero-advertising.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        ad.adition.net [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        ad.adition.net [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .legolas-media.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .legolas-media.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        tracking.publicidees.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        tracking.publicidees.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .apmebf.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        www.zanox-affiliate.de [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .at.atwola.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .unister-adservices.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        de.sitestat.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        de.sitestat.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .tjx.112.2o7.net [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        teufel-media.de [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        www.active-tracking.de [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        www.active-tracking.de [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        www.active-tracking.de [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        server.adformdsp.net [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .adformdsp.net [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .yieldmanager.net [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .adtech.de [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        eas4.emediate.eu [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        api.zanox.ws [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .ad.adnet.de [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .invitemedia.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .adtech.de [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .doubleclick.net [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .tradedoubler.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .tradedoubler.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        studivz.adfarm1.adition.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        studivz.adfarm1.adition.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        eas.apm.emediate.eu [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        eas.apm.emediate.eu [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        ad.zanox.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        adx.chip.de [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        de.sitestat.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .banners.victor.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .fastclick.net [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        tracking.porsche.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        www.etracker.de [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .advertising.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .adbrite.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        eas.apm.emediate.eu [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .adinterax.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .adinterax.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .atdmt.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .h.atdmt.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .h.atdmt.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .atdmt.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .atdmt.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .h.atdmt.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .h.atdmt.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .doubleclick.net [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        adfarm1.adition.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        ad1.adfarm1.adition.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        media.gan-online.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .adtech.de [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .ad.adnet.de [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .ad.adnet.de [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .lfstmedia.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .lucidmedia.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .kontera.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .media6degrees.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .media6degrees.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .media6degrees.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .media6degrees.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .quartermedia.de [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .traffictrack.de [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .invitemedia.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .invitemedia.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .invitemedia.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .invitemedia.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .invitemedia.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .invitemedia.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .invitemedia.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        www.googleadservices.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .blogads.de [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .bs.serving-sys.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .bs.serving-sys.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .statcounter.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .tradedoubler.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .nextag.de [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .nextag.de [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        adserver.5schritte.net [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .tracking.quisma.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        ad.dyntracker.de [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        www.zanox-affiliate.de [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .tracking.quisma.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        server.adform.net [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        server.adform.net [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .tracking.quisma.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .tradedoubler.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        statse.webtrendslive.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        accounts.google.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        accounts.google.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .accounts.google.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .accounts.google.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .tribalfusion.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .im.banner.t-online.de [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .adviva.net [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .tradedoubler.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .tradedoubler.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        ww251.smartadserver.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .invitemedia.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .im.banner.t-online.de [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        track.effiliation.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        track.effiliation.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        track.effiliation.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        track.effiliation.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        track.effiliation.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .doubleclick.net [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .mediaplex.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        track.adform.net [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        track.adform.net [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .adform.net [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .questionmarket.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .questionmarket.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        www.googleadservices.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        www.googleadservices.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        www.googleadservices.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .smartadserver.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .smartadserver.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .smartadserver.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .smartadserver.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .smartadserver.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .tracking.quisma.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .unitymedia.de [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .unitymedia.de [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .tracking.quisma.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .zanox-affiliate.de [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .urbia.wwe-media.de [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        ad3.adfarm1.adition.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        www.etracker.de [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .zanox.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        ad.zanox.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        ad4.adfarm1.adition.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        ad2.adfarm1.adition.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        www.etracker.de [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        www.googleadservices.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        www.etracker.de [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .serving-sys.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .serving-sys.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]
        .serving-sys.com [ C:\DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\76YJO56X.DEFAULT\COOKIES.SQLITE ]

Trojan.Agent/Gen-Malef
        C:\_OTL\MOVEDFILES\06192012_001720\C_DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\LNZBBBS\UXATLUUL.EXE

Mal eine Frage, wieso schlägt er bei den ganzen Cookies überhaupt Alarm? :O

cosinus 11.07.2012 12:07

Code:

Trojan.Agent/Gen-Malef
        C:\_OTL\MOVEDFILES\06192012_001720\C_DOKUMENTE UND EINSTELLUNGEN\SUSA\ANWENDUNGSDATEN\LNZBBBS\UXATLUUL.EXE

Ist harmlos, da in der Quarantäne von OTL

Sieht ok aus, da wurden nur Cookies gefunden.
Cookies sind keine Schädlinge direkt, aber es besteht die Gefahr der missbräuchlichen Verwendung (eindeutige Wiedererkennung zB für gezielte Werbung o.ä. => HTTP-Cookie )


Wegen Cookies und anderer Dinge im Web: Um die Pest von vornherein zu blocken (also TrackingCookies, Werbebanner etc.) müsstest du dir mal sowas wie MVPS Hosts File anschauen => Blocking Unwanted Parasites with a Hosts File - sinnvollerweise solltest du alle 4 Wochen mal bei MVPS nachsehen, ob er eine neue Hosts Datei herausgebracht hat.

Ansonsten gibt es noch gute Cookiemanager, Erweiterungen für den Firefox zB wäre da CookieCuller http://filepony.de/download-cookie_culler/
Wenn du aber damit leben kannst, dich bei jeder Browsersession überall neu einzuloggen (zB Facebook, Ebay, GMX, oder auch Trojaner-Board) dann stell den Browser einfach so ein, dass einfach alles beim Beenden des Browser inkl. Cookies gelöscht wird.

Ich halte es so, dass ich zum "wilden Surfen" den Opera-Browser oder Chromium unter meinem Linux verwende. Mein Hauptbrowser (Firefox) speichert nur die Cookies von den Sites die ich auch will, alles andere lehne ich manuell ab (der FF fragt mich immer) - die anderen Browser nehmen alles an Cookies zwar an, aber spätestens beim nächsten Start von Opera oder Chromium sind keine Cookies mehr da.

Ist dein System nun wieder in Ordnung oder gibt's noch andere Funde oder Probleme?

ninifee 11.07.2012 14:33

Ok danke für die Tips, ich denke ich werd' mir mal den Cookie Culler zulegen <:

Ansonsten hab' ich keine Probleme mehr mit dem PC!
Nur dass eben all meine Daten weg sind, aber das war ja von vornerein klar. :/

ABER:
Ich wollte mich nochmal ganz ganz ganz herzlich bedanken bei Dir,
danke dass Du dir die Zeit für mich genommen und alles so verständlich erklärt hast! Ich finde es echt super, dass ihr hier im Forum sowas macht, ganz großes Lob an Dich, vielen lieben Dank! :dankeschoen:

cosinus 11.07.2012 14:49

Zitat:

Ansonsten hab' ich keine Probleme mehr mit dem PC!
Nur dass eben all meine Daten weg sind, aber das war ja von vornerein klar. :/
In Zukunft willst du sicher mal an ein besseres Backupkonzept denken. Hier ein Denkanstoß => http://www.trojaner-board.de/115678-...r-backups.html


Dann wären wir durch! :abklatsch:

Die Programme, die hier zum Einsatz kamen, können alle wieder runter. Mit Hilfe von OTL kannst du auch viele Tools entfernen:

Starte bitte OTL und klicke auf Bereinigung.
Dies wird die meisten Tools entfernen, die wir zur Bereinigung benötigt haben. Sollte etwas bestehen bleiben, bitte mit Rechtsklick --> Löschen entfernen.


Malwarebytes zu behalten ist zu empfehlen. Kannst ja 1x im Monat damit einen Vollscan machen, aber immer vorher ans Update denken.


Bitte abschließend die Updates prüfen, unten mein Leitfaden dazu. Um in Zukunft die Aktualität der installierten Programme besser im Überblick zu halten, kannst du zB Secunia PSI verwenden.
Für noch mehr Sicherheit solltest Du nach der beseitigten Infektion auch möglichst alle Passwörter ändern.


Microsoftupdate

Windows XP: Besuch mit dem IE die MS-Updateseite und lass Dir alle wichtigen Updates installieren.

Windows Vista/7: Anleitung Windows-Update


PDF-Reader aktualisieren
Ein veralteter AdobeReader stellt ein großes Sicherheitsrisiko dar. Du solltest daher besser alte Versionen vom AdobeReader über Systemsteuerung => Software bzw. Programme und Funktionen deinstallieren, indem Du dort auf "Adobe Reader x.0" klickst und das Programm entfernst. (falls du AdobeReader installiert hast)

Ich empfehle einen alternativen PDF-Reader wie PDF Xchange Viewer, SumatraPDF oder Foxit PDF Reader, die sind sehr viel schlanker und flotter als der AdobeReader.

Bitte überprüf bei der Gelegenheit auch die Aktualität des Flashplayers:
Prüfen => Adobe - Flash Player
Downloadlinks => Adobe Flash Player Distribution | Adobe

Natürlich auch darauf achten, dass andere installierte Browser wie zB Firefox, Opera oder Chrome aktuell sind.


Java-Update
Veraltete Java-Installationen sind ein Sicherheitsrisiko, daher solltest Du die alten Versionen löschen (falls vorhanden, am besten mit JavaRa) und auf die neuste aktualisieren. Beende dazu alle Programme (v.a. die Browser), klick danach auf Start, Systemsteuerung, Software und deinstalliere darüber alle aufgelisteten Java-Versionen. Lad Dir danach von hier das aktuelle Java SE Runtime Environment (JRE) herunter und installiere es.

ninifee 16.07.2012 19:48

Sooo habe jetzt all meine Programme und damit den PC auf Vordermann gebracht, nochmal gaaaaanz lieben Dank für all Deine Hilfe!
Ohne Dich wäre ich total verzweifelt, dankeschön! :)


Alle Zeitangaben in WEZ +1. Es ist jetzt 16:54 Uhr.

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131