Trojaner-Board
Seite 2 von 2 1 2
100 Beiträge dieses Themas auf einer Seite anzeigen

Trojaner-Board (https://www.trojaner-board.de/)
-   Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)
-   -   Trojaner TR.Weelsof.C/41 gefunden! (https://www.trojaner-board.de/120395-trojaner-tr-weelsof-c-41-gefunden.html)

cosinus 30.07.2012 20:34
Ich brauch den Quarantäneordner von OTL. Bitte folgendes machen:

1.) GANZ WICHTIG!! Virenscanner deaktivieren, der darf das Packen nicht beeinflussen!
2.) Ordner MovedFiles in C:\_OTL in eine Datei zippen
3.) Die erstellte ZIP-Datei hier hochladen => http://www.trojaner-board.de/54791-a...ner-board.html

Hinweis: Die Datei bitte wie in der Anleitung zum UpChannel angegeben auch da hochladen. Bitte NICHT die ZIP-Datei hier als Anhang in den Thread posten!

4.) Wenns erfolgreich war Bescheid sagen
5.) Erst dann wieder den Virenscanner einschalten

oopsala 30.07.2012 20:38
Alles klar, ist erledigt!

Gruß
Frank

cosinus 30.07.2012 21:27
Bitte nun (im normalen Windows-Modus) dieses Tool von Kaspersky (TDSS-Killer) ausführen und das Log posten Anleitung und Downloadlink hier => http://www.trojaner-board.de/82358-t...entfernen.html

Hinweis: Bitte den Virenscanner abstellen bevor du den TDSS-Killer ausführst, denn v.a. Avira meldet im TDSS-Tool oft einen Fehalalrm!

Das Tool so einstellen wie unten im Bild angegeben - klick auf change parameters und setze die Haken wie im folgenden Screenshot abgebildet,
Dann auf Start Scan klicken und wenn es durch ist auf den Button Report klicken um das Log anzuzeigen. Dieses bitte komplett posten.
Wenn du das Log nicht findest oder den Inhalt kopieren und in dein Posting übertragen kannst, dann schau bitte direkt auf deiner Windows-Systempartition (meistens Laufwerk C:) nach, da speichert der TDSS-Killer seine Logs.

Hinweis: Bitte nichts voreilig mit dem TDSS-Killer löschen! Falls Objekte vom TDSS-Killer bemängelt werden, alle mit der Aktion "skip" behandeln und hier nur das Log posten!

http://saved.im/mtkwmtcxexhp/setting...8_16-25-18.jpg

oopsala 30.07.2012 21:36
Hi Arne,

alles klar, hier ist das Log:

Code:
22:34:06.0561 2348        TDSS rootkit removing tool 2.7.48.0 Jul 24 2012 13:16:32
22:34:06.0613 2348        ============================================================
22:34:06.0613 2348        Current date / time: 2012/07/30 22:34:06.0613
22:34:06.0613 2348        SystemInfo:
22:34:06.0613 2348       
22:34:06.0613 2348        OS Version: 6.0.6002 ServicePack: 2.0
22:34:06.0613 2348        Product type: Workstation
22:34:06.0613 2348        ComputerName: ROLF-PC
22:34:06.0614 2348        UserName: Rolf
22:34:06.0614 2348        Windows directory: C:\Windows
22:34:06.0614 2348        System windows directory: C:\Windows
22:34:06.0614 2348        Processor architecture: Intel x86
22:34:06.0614 2348        Number of processors: 2
22:34:06.0614 2348        Page size: 0x1000
22:34:06.0614 2348        Boot type: Normal boot
22:34:06.0614 2348        ============================================================
22:34:08.0043 2348        Drive \Device\Harddisk0\DR0 - Size: 0x25433D6000 (149.05 Gb), SectorSize: 0x200, Cylinders: 0x4C01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050
22:34:08.0045 2348        ============================================================
22:34:08.0045 2348        \Device\Harddisk0\DR0:
22:34:08.0046 2348        MBR partitions:
22:34:08.0046 2348        \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x37000, BlocksNum 0x1E00000
22:34:08.0046 2348        \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x1E37000, BlocksNum 0x10BE2000
22:34:08.0046 2348        ============================================================
22:34:08.0078 2348        C: <-> \Device\Harddisk0\DR0\Partition1
22:34:08.0115 2348        D: <-> \Device\Harddisk0\DR0\Partition0
22:34:08.0115 2348        ============================================================
22:34:08.0115 2348        Initialize success
22:34:08.0115 2348        ============================================================
22:34:30.0016 4912        ============================================================
22:34:30.0016 4912        Scan started
22:34:30.0016 4912        Mode: Manual; SigCheck; TDLFS;
22:34:30.0016 4912        ============================================================
22:34:30.0747 4912        ACPI            (82b296ae1892fe3dbee00c9cf92f8ac7) C:\Windows\system32\drivers\acpi.sys
22:34:30.0864 4912        ACPI - ok
22:34:31.0024 4912        AdobeARMservice (62b7936f9036dd6ed36e6a7efa805dc0) C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
22:34:31.0036 4912        AdobeARMservice - ok
22:34:31.0198 4912        AdobeFlashPlayerUpdateSvc (6c40d5ed8951ab7b90d08af655224ee4) C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
22:34:31.0214 4912        AdobeFlashPlayerUpdateSvc - ok
22:34:31.0290 4912        adp94xx        (04f0fcac69c7c71a3ac4eb97fafc8303) C:\Windows\system32\drivers\adp94xx.sys
22:34:31.0329 4912        adp94xx - ok
22:34:31.0372 4912        adpahci        (60505e0041f7751bdbb80f88bf45c2ce) C:\Windows\system32\drivers\adpahci.sys
22:34:31.0404 4912        adpahci - ok
22:34:31.0424 4912        adpu160m        (8a42779b02aec986eab64ecfc98f8bd7) C:\Windows\system32\drivers\adpu160m.sys
22:34:31.0444 4912        adpu160m - ok
22:34:31.0472 4912        adpu320        (241c9e37f8ce45ef51c3de27515ca4e5) C:\Windows\system32\drivers\adpu320.sys
22:34:31.0500 4912        adpu320 - ok
22:34:31.0535 4912        AeLookupSvc    (9d1fda9e086ba64e3c93c9de32461bcf) C:\Windows\System32\aelupsvc.dll
22:34:31.0559 4912        AeLookupSvc - ok
22:34:31.0681 4912        AESTFilters    (827dbc22c96eecf6d36a13162fabafd3) C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_559ad4ac\aestsrv.exe
22:34:31.0730 4912        AESTFilters - ok
22:34:31.0827 4912        AFD            (3911b972b55fea0478476b2e777b29fa) C:\Windows\system32\drivers\afd.sys
22:34:31.0878 4912        AFD - ok
22:34:31.0938 4912        agp440          (13f9e33747e6b41a3ff305c37db0d360) C:\Windows\system32\drivers\agp440.sys
22:34:31.0951 4912        agp440 - ok
22:34:31.0978 4912        aic78xx        (ae1fdf7bf7bb6c6a70f67699d880592a) C:\Windows\system32\drivers\djsvs.sys
22:34:31.0992 4912        aic78xx - ok
22:34:32.0006 4912        ALG            (a1545b731579895d8cc44fc0481c1192) C:\Windows\System32\alg.exe
22:34:32.0049 4912        ALG - ok
22:34:32.0075 4912        aliide          (9eaef5fc9b8e351afa7e78a6fae91f91) C:\Windows\system32\drivers\aliide.sys
22:34:32.0087 4912        aliide - ok
22:34:32.0122 4912        amdagp          (c47344bc706e5f0b9dce369516661578) C:\Windows\system32\drivers\amdagp.sys
22:34:32.0137 4912        amdagp - ok
22:34:32.0155 4912        amdide          (9b78a39a4c173fdbc1321e0dd659b34c) C:\Windows\system32\drivers\amdide.sys
22:34:32.0170 4912        amdide - ok
22:34:32.0201 4912        AmdK7          (18f29b49ad23ecee3d2a826c725c8d48) C:\Windows\system32\drivers\amdk7.sys
22:34:32.0253 4912        AmdK7 - ok
22:34:32.0283 4912        AmdK8          (93ae7f7dd54ab986a6f1a1b37be7442d) C:\Windows\system32\drivers\amdk8.sys
22:34:32.0329 4912        AmdK8 - ok
22:34:32.0471 4912        AntiVirMailService (b9b5dfafea592bd4ca967824ebb42e3d) C:\Program Files\Avira\AntiVir Desktop\avmailc.exe
22:34:32.0490 4912        AntiVirMailService - ok
22:34:32.0573 4912        AntiVirSchedulerService (67b1d78711b4386c26241096326ee14a) C:\Program Files\Avira\AntiVir Desktop\sched.exe
22:34:32.0584 4912        AntiVirSchedulerService - ok
22:34:32.0624 4912        AntiVirService  (845c4e7ae211edad5e0b832126f56932) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
22:34:32.0636 4912        AntiVirService - ok
22:34:32.0695 4912        AntiVirWebService (30d71e0c149943a8985d02ea0944f2fe) C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE
22:34:32.0716 4912        AntiVirWebService - ok
22:34:32.0779 4912        ApfiltrService  (f45f2965c43cecfbd04b0d1674643522) C:\Windows\system32\DRIVERS\Apfiltr.sys
22:34:32.0805 4912        ApfiltrService - ok
22:34:32.0836 4912        Appinfo        (c6d704c7f0434dc791aac37cac4b6e14) C:\Windows\System32\appinfo.dll
22:34:32.0901 4912        Appinfo - ok
22:34:32.0946 4912        arc            (5d2888182fb46632511acee92fdad522) C:\Windows\system32\drivers\arc.sys
22:34:32.0961 4912        arc - ok
22:34:32.0994 4912        arcsas          (5e2a321bd7c8b3624e41fdec3e244945) C:\Windows\system32\drivers\arcsas.sys
22:34:33.0010 4912        arcsas - ok
22:34:33.0038 4912        AsyncMac        (53b202abee6455406254444303e87be1) C:\Windows\system32\DRIVERS\asyncmac.sys
22:34:33.0097 4912        AsyncMac - ok
22:34:33.0138 4912        atapi          (1f05b78ab91c9075565a9d8a4b880bc4) C:\Windows\system32\drivers\atapi.sys
22:34:33.0151 4912        atapi - ok
22:34:33.0224 4912        AudioEndpointBuilder (68e2a1a0407a66cf50da0300852424ab) C:\Windows\System32\Audiosrv.dll
22:34:33.0284 4912        AudioEndpointBuilder - ok
22:34:33.0289 4912        Audiosrv        (68e2a1a0407a66cf50da0300852424ab) C:\Windows\System32\Audiosrv.dll
22:34:33.0314 4912        Audiosrv - ok
22:34:33.0355 4912        avgntflt        (d5541f0afb767e85fc412fc609d96a74) C:\Windows\system32\DRIVERS\avgntflt.sys
22:34:33.0367 4912        avgntflt - ok
22:34:33.0386 4912        avipbb          (7d967a682d4694df7fa57d63a2db01fe) C:\Windows\system32\DRIVERS\avipbb.sys
22:34:33.0399 4912        avipbb - ok
22:34:33.0424 4912        avkmgr          (271cfd1a989209b1964e24d969552bf7) C:\Windows\system32\DRIVERS\avkmgr.sys
22:34:33.0435 4912        avkmgr - ok
22:34:33.0532 4912        BBSvc          (01a24b415926bb5f772dbe12459d97de) C:\Program Files\Microsoft\BingBar\BBSvc.EXE
22:34:33.0549 4912        BBSvc - ok
22:34:33.0589 4912        BBUpdate        (785de7abda13309d6065305542829e76) C:\Program Files\Microsoft\BingBar\SeaPort.EXE
22:34:33.0607 4912        BBUpdate - ok
22:34:33.0669 4912        BCM42RLY        (423c7b87e886ac93d22936ea82665f83) C:\Windows\system32\drivers\BCM42RLY.sys
22:34:33.0680 4912        BCM42RLY - ok
22:34:33.0819 4912        BCM43XX        (b56999be8f22ba3071e4ceafa9e82e26) C:\Windows\system32\DRIVERS\bcmwl6.sys
22:34:33.0879 4912        BCM43XX - ok
22:34:33.0918 4912        Beep            (67e506b75bd5326a3ec7b70bd014dfb6) C:\Windows\system32\drivers\Beep.sys
22:34:33.0997 4912        Beep - ok
22:34:34.0073 4912        BFE            (c789af0f724fda5852fb9a7d3a432381) C:\Windows\System32\bfe.dll
22:34:34.0149 4912        BFE - ok
22:34:34.0268 4912        BITS            (93952506c6d67330367f7e7934b6a02f) C:\Windows\System32\qmgr.dll
22:34:34.0355 4912        BITS - ok
22:34:34.0394 4912        blbdrive        (d4df28447741fd3d953526e33a617397) C:\Windows\system32\drivers\blbdrive.sys
22:34:34.0422 4912        blbdrive - ok
22:34:34.0470 4912        bowser          (35f376253f687bde63976ccb3f2108ca) C:\Windows\system32\DRIVERS\bowser.sys
22:34:34.0505 4912        bowser - ok
22:34:34.0540 4912        BrFiltLo        (9f9acc7f7ccde8a15c282d3f88b43309) C:\Windows\system32\drivers\brfiltlo.sys
22:34:34.0576 4912        BrFiltLo - ok
22:34:34.0599 4912        BrFiltUp        (56801ad62213a41f6497f96dee83755a) C:\Windows\system32\drivers\brfiltup.sys
22:34:34.0644 4912        BrFiltUp - ok
22:34:34.0678 4912        Browser        (a3629a0c4226f9e9c72faaeebc3ad33c) C:\Windows\System32\browser.dll
22:34:34.0726 4912        Browser - ok
22:34:34.0780 4912        Brserid        (b304e75cff293029eddf094246747113) C:\Windows\system32\drivers\brserid.sys
22:34:34.0946 4912        Brserid - ok
22:34:34.0968 4912        BrSerWdm        (203f0b1e73adadbbb7b7b1fabd901f6b) C:\Windows\system32\drivers\brserwdm.sys
22:34:35.0039 4912        BrSerWdm - ok
22:34:35.0064 4912        BrUsbMdm        (bd456606156ba17e60a04e18016ae54b) C:\Windows\system32\drivers\brusbmdm.sys
22:34:35.0133 4912        BrUsbMdm - ok
22:34:35.0156 4912        BrUsbSer        (af72ed54503f717a43268b3cc5faec2e) C:\Windows\system32\drivers\brusbser.sys
22:34:35.0230 4912        BrUsbSer - ok
22:34:35.0256 4912        BTHMODEM        (ad07c1ec6665b8b35741ab91200c6b68) C:\Windows\system32\drivers\bthmodem.sys
22:34:35.0325 4912        BTHMODEM - ok
22:34:35.0378 4912        cdfs            (7add03e75beb9e6dd102c3081d29840a) C:\Windows\system32\DRIVERS\cdfs.sys
22:34:35.0427 4912        cdfs - ok
22:34:35.0485 4912        cdrom          (6b4bffb9becd728097024276430db314) C:\Windows\system32\DRIVERS\cdrom.sys
22:34:35.0506 4912        cdrom - ok
22:34:35.0565 4912        CertPropSvc    (312ec3e37a0a1f2006534913e37b4423) C:\Windows\System32\certprop.dll
22:34:35.0602 4912        CertPropSvc - ok
22:34:35.0642 4912        circlass        (e5d4133f37219dbcfe102bc61072589d) C:\Windows\system32\DRIVERS\circlass.sys
22:34:35.0669 4912        circlass - ok
22:34:35.0714 4912        CLFS            (d7659d3b5b92c31e84e53c1431f35132) C:\Windows\system32\CLFS.sys
22:34:35.0738 4912        CLFS - ok
22:34:35.0817 4912        clr_optimization_v2.0.50727_32 (8ee772032e2fe80a924f3b8dd5082194) C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
22:34:35.0831 4912        clr_optimization_v2.0.50727_32 - ok
22:34:35.0919 4912        clr_optimization_v4.0.30319_32 (c5a75eb48e2344abdc162bda79e16841) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
22:34:35.0933 4912        clr_optimization_v4.0.30319_32 - ok
22:34:35.0973 4912        CmBatt          (99afc3795b58cc478fbbbcdc658fcb56) C:\Windows\system32\DRIVERS\CmBatt.sys
22:34:36.0023 4912        CmBatt - ok
22:34:36.0055 4912        cmdide          (0ca25e686a4928484e9fdabd168ab629) C:\Windows\system32\drivers\cmdide.sys
22:34:36.0069 4912        cmdide - ok
22:34:36.0089 4912        Compbatt        (6afef0b60fa25de07c0968983ee4f60a) C:\Windows\system32\DRIVERS\compbatt.sys
22:34:36.0102 4912        Compbatt - ok
22:34:36.0106 4912        COMSysApp - ok
22:34:36.0115 4912        crcdisk        (741e9dff4f42d2d8477d0fc1dc0df871) C:\Windows\system32\drivers\crcdisk.sys
22:34:36.0128 4912        crcdisk - ok
22:34:36.0149 4912        Crusoe          (1f07becdca750766a96cda811ba86410) C:\Windows\system32\drivers\crusoe.sys
22:34:36.0195 4912        Crusoe - ok
22:34:36.0403 4912        CryptSvc        (75c6a297e364014840b48eccd7525e30) C:\Windows\system32\cryptsvc.dll
22:34:36.0443 4912        CryptSvc - ok
22:34:36.0500 4912        CtClsFlt        (281b2b60b5cb449bcf0474eecf73ebec) C:\Windows\system32\DRIVERS\CtClsFlt.sys
22:34:36.0546 4912        CtClsFlt - ok
22:34:36.0638 4912        DcomLaunch      (3b5b4d53fec14f7476ca29a20cc31ac9) C:\Windows\system32\rpcss.dll
22:34:36.0715 4912        DcomLaunch - ok
22:34:36.0778 4912        DfsC            (622c41a07ca7e6dd91770f50d532cb6c) C:\Windows\system32\Drivers\dfsc.sys
22:34:36.0815 4912        DfsC - ok
22:34:37.0023 4912        DFSR            (2cc3dcfb533a1035b13dcab6160ab38b) C:\Windows\system32\DFSR.exe
22:34:37.0132 4912        DFSR - ok
22:34:37.0299 4912        Dhcp            (9028559c132146fb75eb7acf384b086a) C:\Windows\System32\dhcpcsvc.dll
22:34:37.0337 4912        Dhcp - ok
22:34:37.0444 4912        disk            (5d4aefc3386920236a548271f8f1af6a) C:\Windows\system32\drivers\disk.sys
22:34:37.0458 4912        disk - ok
22:34:37.0518 4912        Dnscache        (57d762f6f5974af0da2be88a3349baaa) C:\Windows\System32\dnsrslvr.dll
22:34:37.0552 4912        Dnscache - ok
22:34:37.0604 4912        dot3svc        (324fd74686b1ef5e7c19a8af49e748f6) C:\Windows\System32\dot3svc.dll
22:34:37.0639 4912        dot3svc - ok
22:34:37.0697 4912        Dot4            (4f59c172c094e1a1d46463a8dc061cbd) C:\Windows\system32\DRIVERS\Dot4.sys
22:34:37.0743 4912        Dot4 - ok
22:34:37.0770 4912        dot4usb        (c55004ca6b419b6695970dfe849b122f) C:\Windows\system32\DRIVERS\dot4usb.sys
22:34:37.0816 4912        dot4usb - ok
22:34:37.0873 4912        DPS            (a622e888f8aa2f6b49e9bc466f0e5def) C:\Windows\system32\dps.dll
22:34:37.0921 4912        DPS - ok
22:34:37.0980 4912        drmkaud        (97fef831ab90bee128c9af390e243f80) C:\Windows\system32\drivers\drmkaud.sys
22:34:38.0015 4912        drmkaud - ok
22:34:38.0109 4912        DXGKrnl        (c68ac676b0ef30cfbb1080adce49eb1f) C:\Windows\System32\drivers\dxgkrnl.sys
22:34:38.0148 4912        DXGKrnl - ok
22:34:38.0204 4912        e1express      (908ed85b7806e8af3af5e9b74f7809d4) C:\Windows\system32\DRIVERS\e1e6032.sys
22:34:38.0240 4912        e1express - ok
22:34:38.0279 4912        E1G60          (5425f74ac0c1dbd96a1e04f17d63f94c) C:\Windows\system32\DRIVERS\E1G60I32.sys
22:34:38.0319 4912        E1G60 - ok
22:34:38.0362 4912        EapHost        (c0b95e40d85cd807d614e264248a45b9) C:\Windows\System32\eapsvc.dll
22:34:38.0404 4912        EapHost - ok
22:34:38.0452 4912        Ecache          (7f64ea048dcfac7acf8b4d7b4e6fe371) C:\Windows\system32\drivers\ecache.sys
22:34:38.0468 4912        Ecache - ok
22:34:38.0537 4912        elxstor        (23b62471681a124889978f6295b3f4c6) C:\Windows\system32\drivers\elxstor.sys
22:34:38.0567 4912        elxstor - ok
22:34:38.0644 4912        EMDMgmt        (4e6b23dfc917ea39306b529b773950f4) C:\Windows\system32\emdmgmt.dll
22:34:38.0700 4912        EMDMgmt - ok
22:34:38.0722 4912        ErrDev          (f2a80de2d1b7116052c09cb4d4ca1416) C:\Windows\system32\drivers\errdev.sys
22:34:38.0736 4912        ErrDev - ok
22:34:38.0807 4912        EventSystem    (67058c46504bc12d821f38cf99b7b28f) C:\Windows\system32\es.dll
22:34:38.0832 4912        EventSystem - ok
22:34:38.0902 4912        exfat          (22b408651f9123527bcee54b4f6c5cae) C:\Windows\system32\drivers\exfat.sys
22:34:38.0948 4912        exfat - ok
22:34:39.0002 4912        fastfat        (1e9b9a70d332103c52995e957dc09ef8) C:\Windows\system32\drivers\fastfat.sys
22:34:39.0050 4912        fastfat - ok
22:34:39.0114 4912        fdc            (afe1e8b9782a0dd7fb46bbd88e43f89a) C:\Windows\system32\DRIVERS\fdc.sys
22:34:39.0161 4912        fdc - ok
22:34:39.0202 4912        fdPHost        (6629b5f0e98151f4afdd87567ea32ba3) C:\Windows\system32\fdPHost.dll
22:34:39.0234 4912        fdPHost - ok
22:34:39.0265 4912        FDResPub        (89ed56dce8e47af40892778a5bd31fd2) C:\Windows\system32\fdrespub.dll
22:34:39.0316 4912        FDResPub - ok
22:34:39.0357 4912        FileInfo        (a8c0139a884861e3aae9cfe73b208a9f) C:\Windows\system32\drivers\fileinfo.sys
22:34:39.0372 4912        FileInfo - ok
22:34:39.0399 4912        Filetrace      (0ae429a696aecbc5970e3cf2c62635ae) C:\Windows\system32\drivers\filetrace.sys
22:34:39.0449 4912        Filetrace - ok
22:34:39.0475 4912        flpydisk        (85b7cf99d532820495d68d747fda9ebd) C:\Windows\system32\DRIVERS\flpydisk.sys
22:34:39.0505 4912        flpydisk - ok
22:34:39.0548 4912        FltMgr          (01334f9ea68e6877c4ef05d3ea8abb05) C:\Windows\system32\drivers\fltmgr.sys
22:34:39.0580 4912        FltMgr - ok
22:34:39.0700 4912        FontCache      (8ce364388c8eca59b14b539179276d44) C:\Windows\system32\FntCache.dll
22:34:39.0769 4912        FontCache - ok
22:34:39.0865 4912        FontCache3.0.0.0 (c7fbdd1ed42f82bfa35167a5c9803ea3) C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
22:34:39.0877 4912        FontCache3.0.0.0 - ok
22:34:39.0905 4912        Fs_Rec          (b972a66758577e0bfd1de0f91aaa27b5) C:\Windows\system32\drivers\Fs_Rec.sys
22:34:39.0947 4912        Fs_Rec - ok
22:34:39.0988 4912        gagp30kx        (34582a6e6573d54a07ece5fe24a126b5) C:\Windows\system32\drivers\gagp30kx.sys
22:34:40.0002 4912        gagp30kx - ok
22:34:40.0079 4912        gpsvc          (cd5d0aeee35dfd4e986a5aa1500a6e66) C:\Windows\System32\gpsvc.dll
22:34:40.0140 4912        gpsvc - ok
22:34:40.0239 4912        gupdate        (f02a533f517eb38333cb12a9e8963773) C:\Program Files\Google\Update\GoogleUpdate.exe
22:34:40.0252 4912        gupdate - ok
22:34:40.0260 4912        gupdatem        (f02a533f517eb38333cb12a9e8963773) C:\Program Files\Google\Update\GoogleUpdate.exe
22:34:40.0273 4912        gupdatem - ok
22:34:40.0330 4912        HdAudAddService (cb04c744be0a61b1d648faed182c3b59) C:\Windows\system32\drivers\HdAudio.sys
22:34:40.0421 4912        HdAudAddService - ok
22:34:40.0522 4912        HDAudBus        (062452b7ffd68c8c042a6261fe8dff4a) C:\Windows\system32\DRIVERS\HDAudBus.sys
22:34:40.0589 4912        HDAudBus - ok
22:34:40.0640 4912        HidBth          (1338520e78d90154ed6be8f84de5fceb) C:\Windows\system32\drivers\hidbth.sys
22:34:40.0684 4912        HidBth - ok
22:34:40.0704 4912        HidIr          (d8df3722d5e961baa1292aa2f12827e2) C:\Windows\system32\DRIVERS\hidir.sys
22:34:40.0746 4912        HidIr - ok
22:34:40.0787 4912        hidserv        (84067081f3318162797385e11a8f0582) C:\Windows\system32\hidserv.dll
22:34:40.0825 4912        hidserv - ok
22:34:40.0855 4912        HidUsb          (cca4b519b17e23a00b826c55716809cc) C:\Windows\system32\DRIVERS\hidusb.sys
22:34:40.0876 4912        HidUsb - ok
22:34:40.0910 4912        hkmsvc          (d8ad255b37da92434c26e4876db7d418) C:\Windows\system32\kmsvc.dll
22:34:40.0938 4912        hkmsvc - ok
22:34:40.0967 4912        HpCISSs        (16ee7b23a009e00d835cdb79574a91a6) C:\Windows\system32\drivers\hpcisss.sys
22:34:40.0981 4912        HpCISSs - ok
22:34:41.0066 4912        HTTP            (0eeeca26c8d4bde2a4664db058a81937) C:\Windows\system32\drivers\HTTP.sys
22:34:41.0102 4912        HTTP - ok
22:34:41.0137 4912        i2omp          (c6b032d69650985468160fc9937cf5b4) C:\Windows\system32\drivers\i2omp.sys
22:34:41.0153 4912        i2omp - ok
22:34:41.0199 4912        i8042prt        (22d56c8184586b7a1f6fa60be5f5a2bd) C:\Windows\system32\DRIVERS\i8042prt.sys
22:34:41.0246 4912        i8042prt - ok
22:34:41.0299 4912        iaStorV        (54155ea1b0df185878e0fc9ec3ac3a14) C:\Windows\system32\drivers\iastorv.sys
22:34:41.0322 4912        iaStorV - ok
22:34:41.0535 4912        idsvc          (98477b08e61945f974ed9fdc4cb6bdab) C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
22:34:41.0592 4912        idsvc - ok
22:34:42.0444 4912        igfx            (aa1636107c0c05a881bfbce41142c70f) C:\Windows\system32\DRIVERS\igdkmd32.sys
22:34:42.0937 4912        igfx - ok
22:34:43.0073 4912        iirsp          (2d077bf86e843f901d8db709c95b49a5) C:\Windows\system32\drivers\iirsp.sys
22:34:43.0085 4912        iirsp - ok
22:34:43.0137 4912        IKEEXT          (9908d8a397b76cd8d31d0d383c5773c9) C:\Windows\System32\ikeext.dll
22:34:43.0192 4912        IKEEXT - ok
22:34:43.0249 4912        IntcHdmiAddService (81486f0eb4238b65c317f97de246c4ac) C:\Windows\system32\drivers\IntcHdmi.sys
22:34:43.0274 4912        IntcHdmiAddService - ok
22:34:43.0305 4912        intelide        (83aa759f3189e6370c30de5dc5590718) C:\Windows\system32\drivers\intelide.sys
22:34:43.0318 4912        intelide - ok
22:34:43.0336 4912        intelppm        (224191001e78c89dfa78924c3ea595ff) C:\Windows\system32\DRIVERS\intelppm.sys
22:34:43.0382 4912        intelppm - ok
22:34:43.0429 4912        IPBusEnum      (9ac218c6e6105477484c6fdbe7d409a4) C:\Windows\system32\ipbusenum.dll
22:34:43.0456 4912        IPBusEnum - ok
22:34:43.0499 4912        IpFilterDriver  (62c265c38769b864cb25b4bcf62df6c3) C:\Windows\system32\DRIVERS\ipfltdrv.sys
22:34:43.0549 4912        IpFilterDriver - ok
22:34:43.0603 4912        iphlpsvc        (1998bd97f950680bb55f55a7244679c2) C:\Windows\System32\iphlpsvc.dll
22:34:43.0642 4912        iphlpsvc - ok
22:34:43.0646 4912        IpInIp - ok
22:34:43.0672 4912        IPMIDRV        (b25aaf203552b7b3491139d582b39ad1) C:\Windows\system32\drivers\ipmidrv.sys
22:34:43.0721 4912        IPMIDRV - ok
22:34:43.0753 4912        IPNAT          (8793643a67b42cec66490b2a0cf92d68) C:\Windows\system32\DRIVERS\ipnat.sys
22:34:43.0784 4912        IPNAT - ok
22:34:43.0795 4912        IRENUM          (109c0dfb82c3632fbd11949b73aeeac9) C:\Windows\system32\drivers\irenum.sys
22:34:43.0841 4912        IRENUM - ok
22:34:43.0866 4912        isapnp          (6c70698a3e5c4376c6ab5c7c17fb0614) C:\Windows\system32\drivers\isapnp.sys
22:34:43.0880 4912        isapnp - ok
22:34:43.0924 4912        iScsiPrt        (232fa340531d940aac623b121a595034) C:\Windows\system32\DRIVERS\msiscsi.sys
22:34:43.0940 4912        iScsiPrt - ok
22:34:43.0957 4912        iteatapi        (bced60d16156e428f8df8cf27b0df150) C:\Windows\system32\drivers\iteatapi.sys
22:34:43.0969 4912        iteatapi - ok
22:34:44.0008 4912        itecir          (8bcd857c7932ad005d5f9c89329da2e1) C:\Windows\system32\DRIVERS\itecir.sys
22:34:44.0020 4912        itecir - ok
22:34:44.0038 4912        iteraid        (06fa654504a498c30adca8bec4e87e7e) C:\Windows\system32\drivers\iteraid.sys
22:34:44.0050 4912        iteraid - ok
22:34:44.0132 4912        k57nd60x        (faafa13932361d0a5a7ba5690ca4e377) C:\Windows\system32\DRIVERS\k57nd60x.sys
22:34:44.0162 4912        k57nd60x - ok
22:34:44.0186 4912        kbdclass        (37605e0a8cf00cbba538e753e4344c6e) C:\Windows\system32\DRIVERS\kbdclass.sys
22:34:44.0199 4912        kbdclass - ok
22:34:44.0230 4912        kbdhid          (ede59ec70e25c24581add1fbec7325f7) C:\Windows\system32\DRIVERS\kbdhid.sys
22:34:44.0272 4912        kbdhid - ok
22:34:44.0310 4912        KeyIso          (a3e186b4b935905b829219502557314e) C:\Windows\system32\lsass.exe
22:34:44.0335 4912        KeyIso - ok
22:34:44.0404 4912        KSecDD          (4a1445efa932a3baf5bdb02d7131ee20) C:\Windows\system32\Drivers\ksecdd.sys
22:34:44.0431 4912        KSecDD - ok
22:34:44.0497 4912        KtmRm          (8078f8f8f7a79e2e6b494523a828c585) C:\Windows\system32\msdtckrm.dll
22:34:44.0531 4912        KtmRm - ok
22:34:44.0584 4912        LanmanServer    (1bf5eebfd518dd7298434d8c862f825d) C:\Windows\system32\srvsvc.dll
22:34:44.0632 4912        LanmanServer - ok
22:34:44.0693 4912        LanmanWorkstation (1db69705b695b987082c8baec0c6b34f) C:\Windows\System32\wkssvc.dll
22:34:44.0748 4912        LanmanWorkstation - ok
22:34:44.0796 4912        lltdio          (d1c5883087a0c3f1344d9d55a44901f6) C:\Windows\system32\DRIVERS\lltdio.sys
22:34:44.0844 4912        lltdio - ok
22:34:44.0895 4912        lltdsvc        (2d5a428872f1442631d0959a34abff63) C:\Windows\System32\lltdsvc.dll
22:34:44.0932 4912        lltdsvc - ok
22:34:44.0949 4912        lmhosts        (35d40113e4a5b961b6ce5c5857702518) C:\Windows\System32\lmhsvc.dll
22:34:44.0994 4912        lmhosts - ok
22:34:45.0034 4912        LSI_FC          (c7e15e82879bf3235b559563d4185365) C:\Windows\system32\drivers\lsi_fc.sys
22:34:45.0053 4912        LSI_FC - ok
22:34:45.0069 4912        LSI_SAS        (ee01ebae8c9bf0fa072e0ff68718920a) C:\Windows\system32\drivers\lsi_sas.sys
22:34:45.0088 4912        LSI_SAS - ok
22:34:45.0122 4912        LSI_SCSI        (912a04696e9ca30146a62afa1463dd5c) C:\Windows\system32\drivers\lsi_scsi.sys
22:34:45.0136 4912        LSI_SCSI - ok
22:34:45.0159 4912        luafv          (8f5c7426567798e62a3b3614965d62cc) C:\Windows\system32\drivers\luafv.sys
22:34:45.0211 4912        luafv - ok
22:34:45.0233 4912        megasas        (0001ce609d66632fa17b84705f658879) C:\Windows\system32\drivers\megasas.sys
22:34:45.0247 4912        megasas - ok
22:34:45.0299 4912        MegaSR          (c252f32cd9a49dbfc25ecf26ebd51a99) C:\Windows\system32\drivers\megasr.sys
22:34:45.0338 4912        MegaSR - ok
22:34:45.0360 4912        MMCSS          (1076ffcffaae8385fd62dfcb25ac4708) C:\Windows\system32\mmcss.dll
22:34:45.0403 4912        MMCSS - ok
22:34:45.0425 4912        Modem          (e13b5ea0f51ba5b1512ec671393d09ba) C:\Windows\system32\drivers\modem.sys
22:34:45.0452 4912        Modem - ok
22:34:45.0491 4912        monitor        (0a9bb33b56e294f686abb7c1e4e2d8a8) C:\Windows\system32\DRIVERS\monitor.sys
22:34:45.0535 4912        monitor - ok
22:34:45.0574 4912        mouclass        (5bf6a1326a335c5298477754a506d263) C:\Windows\system32\DRIVERS\mouclass.sys
22:34:45.0587 4912        mouclass - ok
22:34:45.0599 4912        mouhid          (93b8d4869e12cfbe663915502900876f) C:\Windows\system32\DRIVERS\mouhid.sys
22:34:45.0625 4912        mouhid - ok
22:34:45.0647 4912        MountMgr        (bdafc88aa6b92f7842416ea6a48e1600) C:\Windows\system32\drivers\mountmgr.sys
22:34:45.0661 4912        MountMgr - ok
22:34:45.0738 4912        MozillaMaintenance (46297fa8e30a6007f14118fc2b942fbc) C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
22:34:45.0751 4912        MozillaMaintenance - ok
22:34:45.0791 4912        mpio            (511d011289755dd9f9a7579fb0b064e6) C:\Windows\system32\drivers\mpio.sys
22:34:45.0806 4912        mpio - ok
22:34:45.0826 4912        mpsdrv          (22241feba9b2defa669c8cb0a8dd7d2e) C:\Windows\system32\drivers\mpsdrv.sys
22:34:45.0862 4912        mpsdrv - ok
22:34:45.0931 4912        MpsSvc          (5de62c6e9108f14f6794060a9bdecaec) C:\Windows\system32\mpssvc.dll
22:34:45.0994 4912        MpsSvc - ok
22:34:46.0028 4912        Mraid35x        (4fbbb70d30fd20ec51f80061703b001e) C:\Windows\system32\drivers\mraid35x.sys
22:34:46.0041 4912        Mraid35x - ok
22:34:46.0063 4912        MRxDAV          (82cea0395524aacfeb58ba1448e8325c) C:\Windows\system32\drivers\mrxdav.sys
22:34:46.0102 4912        MRxDAV - ok
22:34:46.0143 4912        mrxsmb          (1e94971c4b446ab2290deb71d01cf0c2) C:\Windows\system32\DRIVERS\mrxsmb.sys
22:34:46.0180 4912        mrxsmb - ok
22:34:46.0225 4912        mrxsmb10        (4fccb34d793b116423209c0f8b7a3b03) C:\Windows\system32\DRIVERS\mrxsmb10.sys
22:34:46.0266 4912        mrxsmb10 - ok
22:34:46.0280 4912        mrxsmb20        (c3cb1b40ad4a0124d617a1199b0b9d7c) C:\Windows\system32\DRIVERS\mrxsmb20.sys
22:34:46.0294 4912        mrxsmb20 - ok
22:34:46.0352 4912        msahci          (5457dcfa7c0da43522f4d9d4049c1472) C:\Windows\system32\drivers\msahci.sys
22:34:46.0366 4912        msahci - ok
22:34:46.0393 4912        msdsm          (4468b0f385a86ecddaf8d3ca662ec0e7) C:\Windows\system32\drivers\msdsm.sys
22:34:46.0407 4912        msdsm - ok
22:34:46.0441 4912        MSDTC          (fd7520cc3a80c5fc8c48852bb24c6ded) C:\Windows\System32\msdtc.exe
22:34:46.0492 4912        MSDTC - ok
22:34:46.0529 4912        Msfs            (a9927f4a46b816c92f461acb90cf8515) C:\Windows\system32\drivers\Msfs.sys
22:34:46.0555 4912        Msfs - ok
22:34:46.0596 4912        msisadrv        (0f400e306f385c56317357d6dea56f62) C:\Windows\system32\drivers\msisadrv.sys
22:34:46.0609 4912        msisadrv - ok
22:34:46.0654 4912        MSiSCSI        (85466c0757a23d9a9aecdc0755203cb2) C:\Windows\system32\iscsiexe.dll
22:34:46.0704 4912        MSiSCSI - ok
22:34:46.0710 4912        msiserver - ok
22:34:46.0739 4912        MSKSSRV        (d8c63d34d9c9e56c059e24ec7185cc07) C:\Windows\system32\drivers\MSKSSRV.sys
22:34:46.0785 4912        MSKSSRV - ok
22:34:46.0811 4912        MSPCLOCK        (1d373c90d62ddb641d50e55b9e78d65e) C:\Windows\system32\drivers\MSPCLOCK.sys
22:34:46.0862 4912        MSPCLOCK - ok
22:34:46.0890 4912        MSPQM          (b572da05bf4e098d4bba3a4734fb505b) C:\Windows\system32\drivers\MSPQM.sys
22:34:46.0938 4912        MSPQM - ok
22:34:46.0976 4912        MsRPC          (b49456d70555de905c311bcda6ec6adb) C:\Windows\system32\drivers\MsRPC.sys
22:34:46.0992 4912        MsRPC - ok
22:34:47.0003 4912        mssmbios        (e384487cb84be41d09711c30ca79646c) C:\Windows\system32\DRIVERS\mssmbios.sys
22:34:47.0016 4912        mssmbios - ok
22:34:47.0031 4912        MSTEE          (7199c1eec1e4993caf96b8c0a26bd58a) C:\Windows\system32\drivers\MSTEE.sys
22:34:47.0083 4912        MSTEE - ok
22:34:47.0119 4912        Mup            (6a57b5733d4cb702c8ea4542e836b96c) C:\Windows\system32\Drivers\mup.sys
22:34:47.0133 4912        Mup - ok
22:34:47.0189 4912        napagent        (e4eaf0c5c1b41b5c83386cf212ca9584) C:\Windows\system32\qagentRT.dll
22:34:47.0247 4912        napagent - ok
22:34:47.0311 4912        NativeWifiP    (85c44fdff9cf7e72a40dcb7ec06a4416) C:\Windows\system32\DRIVERS\nwifi.sys
22:34:47.0339 4912        NativeWifiP - ok
22:34:47.0411 4912        NDIS            (1357274d1883f68300aeadd15d7bbb42) C:\Windows\system32\drivers\ndis.sys
22:34:47.0442 4912        NDIS - ok
22:34:47.0476 4912        NdisTapi        (0e186e90404980569fb449ba7519ae61) C:\Windows\system32\DRIVERS\ndistapi.sys
22:34:47.0514 4912        NdisTapi - ok
22:34:47.0534 4912        Ndisuio        (d6973aa34c4d5d76c0430b181c3cd389) C:\Windows\system32\DRIVERS\ndisuio.sys
22:34:47.0579 4912        Ndisuio - ok
22:34:47.0624 4912        NdisWan        (818f648618ae34f729fdb47ec68345c3) C:\Windows\system32\DRIVERS\ndiswan.sys
22:34:47.0659 4912        NdisWan - ok
22:34:47.0671 4912        NDProxy        (71dab552b41936358f3b541ae5997fb3) C:\Windows\system32\drivers\NDProxy.sys
22:34:47.0714 4912        NDProxy - ok
22:34:47.0747 4912        NetBIOS        (bcd093a5a6777cf626434568dc7dba78) C:\Windows\system32\DRIVERS\netbios.sys
22:34:47.0786 4912        NetBIOS - ok
22:34:47.0834 4912        netbt          (ecd64230a59cbd93c85f1cd1cab9f3f6) C:\Windows\system32\DRIVERS\netbt.sys
22:34:47.0883 4912        netbt - ok
22:34:47.0924 4912        Netlogon        (a3e186b4b935905b829219502557314e) C:\Windows\system32\lsass.exe
22:34:47.0940 4912        Netlogon - ok
22:34:47.0993 4912        Netman          (c8052711daecc48b982434c5116ca401) C:\Windows\System32\netman.dll
22:34:48.0060 4912        Netman - ok
22:34:48.0107 4912        netprofm        (2ef3bbe22e5a5acd1428ee387a0d0172) C:\Windows\System32\netprofm.dll
22:34:48.0166 4912        netprofm - ok
22:34:48.0276 4912        NetTcpPortSharing (d6c4e4a39a36029ac0813d476fbd0248) C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
22:34:48.0288 4912        NetTcpPortSharing - ok
22:34:48.0314 4912        nfrd960        (2e7fb731d4790a1bc6270accefacb36e) C:\Windows\system32\drivers\nfrd960.sys
22:34:48.0327 4912        nfrd960 - ok
22:34:48.0369 4912        NlaSvc          (2997b15415f9bbe05b5a4c1c85e0c6a2) C:\Windows\System32\nlasvc.dll
22:34:48.0413 4912        NlaSvc - ok
22:34:48.0447 4912        Npfs            (d36f239d7cce1931598e8fb90a0dbc26) C:\Windows\system32\drivers\Npfs.sys
22:34:48.0468 4912        Npfs - ok
22:34:48.0498 4912        nsi            (8bb86f0c7eea2bded6fe095d0b4ca9bd) C:\Windows\system32\nsisvc.dll
22:34:48.0547 4912        nsi - ok
22:34:48.0576 4912        nsiproxy        (609773e344a97410ce4ebf74a8914fcf) C:\Windows\system32\drivers\nsiproxy.sys
22:34:48.0603 4912        nsiproxy - ok
22:34:48.0715 4912        Ntfs            (6a4a98cee84cf9e99564510dda4baa47) C:\Windows\system32\drivers\Ntfs.sys
22:34:48.0766 4912        Ntfs - ok
22:34:48.0814 4912        ntrigdigi      (e875c093aec0c978a90f30c9e0dfbb72) C:\Windows\system32\drivers\ntrigdigi.sys
22:34:48.0892 4912        ntrigdigi - ok
22:34:48.0917 4912        Null            (c5dbbcda07d780bda9b685df333bb41e) C:\Windows\system32\drivers\Null.sys
22:34:48.0978 4912        Null - ok
22:34:49.0014 4912        nvraid          (2edf9e7751554b42cbb60116de727101) C:\Windows\system32\drivers\nvraid.sys
22:34:49.0034 4912        nvraid - ok
22:34:49.0057 4912        nvstor          (abed0c09758d1d97db0042dbb2688177) C:\Windows\system32\drivers\nvstor.sys
22:34:49.0071 4912        nvstor - ok
22:34:49.0098 4912        nv_agp          (18bbdf913916b71bd54575bdb6eeac0b) C:\Windows\system32\drivers\nv_agp.sys
22:34:49.0115 4912        nv_agp - ok
22:34:49.0119 4912        NwlnkFlt - ok
22:34:49.0126 4912        NwlnkFwd - ok
22:34:49.0181 4912        OA001Ufd        (2cf21d5f8f1b74bb1922135ac2b12ddb) C:\Windows\system32\DRIVERS\OA001Ufd.sys
22:34:49.0194 4912        OA001Ufd - ok
22:34:49.0232 4912        OA001Vid        (4075063d25af9da64101769854b83787) C:\Windows\system32\DRIVERS\OA001Vid.sys
22:34:49.0283 4912        OA001Vid - ok
22:34:49.0328 4912        ohci1394        (6f310e890d46e246e0e261a63d9b36b4) C:\Windows\system32\DRIVERS\ohci1394.sys
22:34:49.0366 4912        ohci1394 - ok
22:34:49.0450 4912        p2pimsvc        (0c8e8e61ad1eb0b250b846712c917506) C:\Windows\system32\p2psvc.dll
22:34:49.0523 4912        p2pimsvc - ok
22:34:49.0531 4912        p2psvc          (0c8e8e61ad1eb0b250b846712c917506) C:\Windows\system32\p2psvc.dll
22:34:49.0558 4912        p2psvc - ok
22:34:49.0598 4912        Parport        (0fa9b5055484649d63c303fe404e5f4d) C:\Windows\system32\drivers\parport.sys
22:34:49.0658 4912        Parport - ok
22:34:49.0696 4912        partmgr        (b9c2b89f08670e159f7181891e449cd9) C:\Windows\system32\drivers\partmgr.sys
22:34:49.0710 4912        partmgr - ok
22:34:49.0725 4912        Parvdm          (4f9a6a8a31413180d0fcb279ad5d8112) C:\Windows\system32\drivers\parvdm.sys
22:34:49.0770 4912        Parvdm - ok
22:34:49.0801 4912        PcaSvc          (c6276ad11f4bb49b58aa1ed88537f14a) C:\Windows\System32\pcasvc.dll
22:34:49.0848 4912        PcaSvc - ok
22:34:49.0890 4912        PCD5SRVC{3F6A8B78-EC003E00-05040104} - ok
22:34:49.0929 4912        pci            (941dc1d19e7e8620f40bbc206981efdb) C:\Windows\system32\drivers\pci.sys
22:34:49.0945 4912        pci - ok
22:34:49.0968 4912        pciide          (fc175f5ddab666d7f4d17449a547626f) C:\Windows\system32\drivers\pciide.sys
22:34:49.0981 4912        pciide - ok
22:34:50.0005 4912        pcmcia          (e6f3fb1b86aa519e7698ad05e58b04e5) C:\Windows\system32\drivers\pcmcia.sys
22:34:50.0019 4912        pcmcia - ok
22:34:50.0105 4912        PEAUTH          (6349f6ed9c623b44b52ea3c63c831a92) C:\Windows\system32\drivers\peauth.sys
22:34:50.0196 4912        PEAUTH - ok
22:34:50.0354 4912        pla            (b1689df169143f57053f795390c99db3) C:\Windows\system32\pla.dll
22:34:50.0466 4912        pla - ok
22:34:50.0602 4912        PlugPlay        (c5e7f8a996ec0a82d508fd9064a5569e) C:\Windows\system32\umpnpmgr.dll
22:34:50.0642 4912        PlugPlay - ok
22:34:50.0682 4912        Pml Driver HPZ12 (2b81b089d9364083f5046ad1307a65be) C:\Windows\system32\HPZipm12.dll
22:34:50.0739 4912        Pml Driver HPZ12 - ok
22:34:50.0835 4912        PNRPAutoReg    (0c8e8e61ad1eb0b250b846712c917506) C:\Windows\system32\p2psvc.dll
22:34:50.0881 4912        PNRPAutoReg - ok
22:34:50.0893 4912        PNRPsvc        (0c8e8e61ad1eb0b250b846712c917506) C:\Windows\system32\p2psvc.dll
22:34:50.0920 4912        PNRPsvc - ok
22:34:51.0006 4912        PolicyAgent    (d0494460421a03cd5225cca0059aa146) C:\Windows\System32\ipsecsvc.dll
22:34:51.0073 4912        PolicyAgent - ok
22:34:51.0150 4912        PptpMiniport    (ecfffaec0c1ecd8dbc77f39070ea1db1) C:\Windows\system32\DRIVERS\raspptp.sys
22:34:51.0186 4912        PptpMiniport - ok
22:34:51.0202 4912        Processor      (2027293619dd0f047c584cf2e7df4ffd) C:\Windows\system32\drivers\processr.sys
22:34:51.0230 4912        Processor - ok
22:34:51.0275 4912        ProfSvc        (0508faa222d28835310b7bfca7a77346) C:\Windows\system32\profsvc.dll
22:34:51.0318 4912        ProfSvc - ok
22:34:51.0350 4912        ProtectedStorage (a3e186b4b935905b829219502557314e) C:\Windows\system32\lsass.exe
22:34:51.0364 4912        ProtectedStorage - ok
22:34:51.0398 4912        PSched          (99514faa8df93d34b5589187db3aa0ba) C:\Windows\system32\DRIVERS\pacer.sys
22:34:51.0418 4912        PSched - ok
22:34:51.0474 4912        PSI            (d24dfd16a1e2a76034df5aa18125c35d) C:\Windows\system32\DRIVERS\psi_mf.sys
22:34:51.0484 4912        PSI - ok
22:34:51.0526 4912        PxHelp20        (03e0fe281823ba64b3782f5b38950e73) C:\Windows\system32\Drivers\PxHelp20.sys
22:34:51.0536 4912        PxHelp20 - ok
22:34:51.0653 4912        ql2300          (0a6db55afb7820c99aa1f3a1d270f4f6) C:\Windows\system32\drivers\ql2300.sys
22:34:51.0716 4912        ql2300 - ok
22:34:51.0760 4912        ql40xx          (81a7e5c076e59995d54bc1ed3a16e60b) C:\Windows\system32\drivers\ql40xx.sys
22:34:51.0773 4912        ql40xx - ok
22:34:51.0819 4912        QWAVE          (e9ecae663f47e6cb43962d18ab18890f) C:\Windows\system32\qwave.dll
22:34:51.0862 4912        QWAVE - ok
22:34:51.0891 4912        QWAVEdrv        (9f5e0e1926014d17486901c88eca2db7) C:\Windows\system32\drivers\qwavedrv.sys
22:34:51.0905 4912        QWAVEdrv - ok
22:34:52.0088 4912        R300            (e642b131fb74caf4bb8a014f31113142) C:\Windows\system32\DRIVERS\atikmdag.sys
22:34:52.0249 4912        R300 - ok
22:34:52.0393 4912        RasAcd          (147d7f9c556d259924351feb0de606c3) C:\Windows\system32\DRIVERS\rasacd.sys
22:34:52.0442 4912        RasAcd - ok
22:34:52.0498 4912        RasAuto        (f6a452eb4ceadbb51c9e0ee6b3ecef0f) C:\Windows\System32\rasauto.dll
22:34:52.0545 4912        RasAuto - ok
22:34:52.0578 4912        Rasl2tp        (a214adbaf4cb47dd2728859ef31f26b0) C:\Windows\system32\DRIVERS\rasl2tp.sys
22:34:52.0606 4912        Rasl2tp - ok
22:34:52.0653 4912        RasMan          (75d47445d70ca6f9f894b032fbc64fcf) C:\Windows\System32\rasmans.dll
22:34:52.0684 4912        RasMan - ok
22:34:52.0713 4912        RasPppoe        (509a98dd18af4375e1fc40bc175f1def) C:\Windows\system32\DRIVERS\raspppoe.sys
22:34:52.0752 4912        RasPppoe - ok
22:34:52.0796 4912        RasSstp        (2005f4a1e05fa09389ac85840f0a9e4d) C:\Windows\system32\DRIVERS\rassstp.sys
22:34:52.0811 4912        RasSstp - ok
22:34:52.0858 4912        rdbss          (b14c9d5b9add2f84f70570bbbfaa7935) C:\Windows\system32\DRIVERS\rdbss.sys
22:34:52.0908 4912        rdbss - ok
22:34:52.0933 4912        RDPCDD          (89e59be9a564262a3fb6c4f4f1cd9899) C:\Windows\system32\DRIVERS\RDPCDD.sys
22:34:52.0960 4912        RDPCDD - ok
22:34:52.0995 4912        rdpdr          (fbc0bacd9c3d7f6956853f64a66e252d) C:\Windows\system32\drivers\rdpdr.sys
22:34:53.0029 4912        rdpdr - ok
22:34:53.0034 4912        RDPENCDD        (9d91fe5286f748862ecffa05f8a0710c) C:\Windows\system32\drivers\rdpencdd.sys
22:34:53.0086 4912        RDPENCDD - ok
22:34:53.0138 4912        RDPWD          (c127ebd5afab31524662c48dfceb773a) C:\Windows\system32\drivers\RDPWD.sys
22:34:53.0173 4912        RDPWD - ok
22:34:53.0211 4912        RemoteAccess    (bcdd6b4804d06b1f7ebf29e53a57ece9) C:\Windows\System32\mprdim.dll
22:34:53.0260 4912        RemoteAccess - ok
22:34:53.0302 4912        RemoteRegistry  (9e6894ea18daff37b63e1005f83ae4ab) C:\Windows\system32\regsvc.dll
22:34:53.0325 4912        RemoteRegistry - ok
22:34:53.0385 4912        rimmptsk        (df672613fbbcd58c38bb0bc2694bcfb0) C:\Windows\system32\DRIVERS\rimmptsk.sys
22:34:53.0398 4912        rimmptsk - ok
22:34:53.0421 4912        rimsptsk        (9bfb54d3559f2ff7301271d29d383564) C:\Windows\system32\DRIVERS\rimsptsk.sys
22:34:53.0434 4912        rimsptsk - ok
22:34:53.0474 4912        rismxdp        (dcb87da83cc1010cbc9fc4dc9e395bbc) C:\Windows\system32\DRIVERS\rixdptsk.sys
22:34:53.0487 4912        rismxdp - ok
22:34:53.0519 4912        RpcLocator      (5123f83cbc4349d065534eeb6bbdc42b) C:\Windows\system32\locator.exe
22:34:53.0579 4912        RpcLocator - ok
22:34:53.0656 4912        RpcSs          (3b5b4d53fec14f7476ca29a20cc31ac9) C:\Windows\system32\rpcss.dll
22:34:53.0686 4912        RpcSs - ok
22:34:53.0717 4912        rspndr          (9c508f4074a39e8b4b31d27198146fad) C:\Windows\system32\DRIVERS\rspndr.sys
22:34:53.0765 4912        rspndr - ok
22:34:53.0800 4912        SamSs          (a3e186b4b935905b829219502557314e) C:\Windows\system32\lsass.exe
22:34:53.0815 4912        SamSs - ok
22:34:53.0838 4912        sbp2port        (3ce8f073a557e172b330109436984e30) C:\Windows\system32\drivers\sbp2port.sys
22:34:53.0852 4912        sbp2port - ok
22:34:53.0889 4912        SCardSvr        (77b7a11a0c3d78d3386398fbbea1b632) C:\Windows\System32\SCardSvr.dll
22:34:53.0936 4912        SCardSvr - ok
22:34:54.0021 4912        Schedule        (1a58069db21d05eb2ab58ee5753ebe8d) C:\Windows\system32\schedsvc.dll
22:34:54.0077 4912        Schedule - ok
22:34:54.0102 4912        SCPolicySvc    (312ec3e37a0a1f2006534913e37b4423) C:\Windows\System32\certprop.dll
22:34:54.0123 4912        SCPolicySvc - ok
22:34:54.0164 4912        sdbus          (8f36b54688c31eed4580129040c6a3d3) C:\Windows\system32\DRIVERS\sdbus.sys
22:34:54.0185 4912        sdbus - ok
22:34:54.0222 4912        SDRSVC          (716313d9f6b0529d03f726d5aaf6f191) C:\Windows\System32\SDRSVC.dll
22:34:54.0264 4912        SDRSVC - ok
22:34:54.0287 4912        secdrv          (90a3935d05b494a5a39d37e71f09a677) C:\Windows\system32\drivers\secdrv.sys
22:34:54.0334 4912        secdrv - ok
22:34:54.0363 4912        seclogon        (fd5199d4d8a521005e4b5ee7fe00fa9b) C:\Windows\system32\seclogon.dll
22:34:54.0413 4912        seclogon - ok
22:34:54.0619 4912        Secunia PSI Agent (f70a51eb03ee7046784ef62efce9528e) C:\Program Files\Secunia\PSI\PSIA.exe
22:34:54.0674 4912        Secunia PSI Agent - ok
22:34:54.0751 4912        Secunia Update Agent (ad56ceb08eeb517332355fde9e5939c8) C:\Program Files\Secunia\PSI\sua.exe
22:34:54.0775 4912        Secunia Update Agent - ok
22:34:54.0908 4912        SENS            (a9bbab5759771e523f55563d6cbe140f) C:\Windows\System32\sens.dll
22:34:54.0972 4912        SENS - ok
22:34:55.0040 4912        Serenum        (68e44e331d46f0fb38f0863a84cd1a31) C:\Windows\system32\drivers\serenum.sys
22:34:55.0085 4912        Serenum - ok
22:34:55.0117 4912        Serial          (c70d69a918b178d3c3b06339b40c2e1b) C:\Windows\system32\drivers\serial.sys
22:34:55.0194 4912        Serial - ok
22:34:55.0225 4912        sermouse        (8af3d28a879bf75db53a0ee7a4289624) C:\Windows\system32\drivers\sermouse.sys
22:34:55.0250 4912        sermouse - ok
22:34:55.0295 4912        SessionEnv      (d2193326f729b163125610dbf3e17d57) C:\Windows\system32\sessenv.dll
22:34:55.0346 4912        SessionEnv - ok
22:34:55.0384 4912        sffdisk        (3efa810bdca87f6ecc24f9832243fe86) C:\Windows\system32\drivers\sffdisk.sys
22:34:55.0428 4912        sffdisk - ok
22:34:55.0450 4912        sffp_mmc        (e95d451f7ea3e583aec75f3b3ee42dc5) C:\Windows\system32\drivers\sffp_mmc.sys
22:34:55.0496 4912        sffp_mmc - ok
22:34:55.0524 4912        sffp_sd        (3d0ea348784b7ac9ea9bd9f317980979) C:\Windows\system32\drivers\sffp_sd.sys
22:34:55.0568 4912        sffp_sd - ok
22:34:55.0593 4912        sfloppy        (46ed8e91793b2e6f848015445a0ac188) C:\Windows\system32\drivers\sfloppy.sys
22:34:55.0638 4912        sfloppy - ok
22:34:55.0702 4912        SharedAccess    (e1499bd0ff76b1b2fbbf1af339d91165) C:\Windows\System32\ipnathlp.dll
22:34:55.0754 4912        SharedAccess - ok
22:34:55.0819 4912        ShellHWDetection (c7230fbee14437716701c15be02c27b8) C:\Windows\System32\shsvcs.dll
22:34:55.0866 4912        ShellHWDetection - ok
22:34:55.0908 4912        sisagp          (1d76624a09a054f682d746b924e2dbc3) C:\Windows\system32\drivers\sisagp.sys
22:34:55.0921 4912        sisagp - ok
22:34:55.0938 4912        SiSRaid2        (43cb7aa756c7db280d01da9b676cfde2) C:\Windows\system32\drivers\sisraid2.sys
22:34:55.0952 4912        SiSRaid2 - ok
22:34:55.0966 4912        SiSRaid4        (a99c6c8b0baa970d8aa59ddc50b57f94) C:\Windows\system32\drivers\sisraid4.sys
22:34:55.0981 4912        SiSRaid4 - ok
22:34:56.0084 4912        SkypeUpdate    (ddaa5f4a6b958fc313ebd02dd925752f) C:\Program Files\Skype\Updater\Updater.exe
22:34:56.0107 4912        SkypeUpdate - ok
22:34:56.0411 4912        slsvc          (862bb4cbc05d80c5b45be430e5ef872f) C:\Windows\system32\SLsvc.exe
22:34:56.0568 4912        slsvc - ok
22:34:56.0714 4912        SLUINotify      (6edc422215cd78aa8a9cde6b30abbd35) C:\Windows\system32\SLUINotify.dll
22:34:56.0765 4912        SLUINotify - ok
22:34:56.0843 4912        Smb            (7b75299a4d201d6a6533603d6914ab04) C:\Windows\system32\DRIVERS\smb.sys
22:34:56.0885 4912        Smb - ok
22:34:56.0921 4912        SNMPTRAP        (2a146a055b4401c16ee62d18b8e2a032) C:\Windows\System32\snmptrap.exe
22:34:56.0936 4912        SNMPTRAP - ok
22:34:56.0961 4912        spldr          (7aebdeef071fe28b0eef2cdd69102bff) C:\Windows\system32\drivers\spldr.sys
22:34:56.0974 4912        spldr - ok
22:34:57.0030 4912        Spooler        (8554097e5136c3bf9f69fe578a1b35f4) C:\Windows\System32\spoolsv.exe
22:34:57.0080 4912        Spooler - ok
22:34:57.0144 4912        srv            (41987f9fc0e61adf54f581e15029ad91) C:\Windows\system32\DRIVERS\srv.sys
22:34:57.0185 4912        srv - ok
22:34:57.0219 4912        srv2            (ff33aff99564b1aa534f58868cbe41ef) C:\Windows\system32\DRIVERS\srv2.sys
22:34:57.0261 4912        srv2 - ok
22:34:57.0289 4912        srvnet          (7605c0e1d01a08f3ecd743f38b834a44) C:\Windows\system32\DRIVERS\srvnet.sys
22:34:57.0323 4912        srvnet - ok
22:34:57.0379 4912        SSDPSRV        (03d50b37234967433a5ea5ba72bc0b62) C:\Windows\System32\ssdpsrv.dll
22:34:57.0430 4912        SSDPSRV - ok
22:34:57.0470 4912        ssmdrv          (a36ee93698802cd899f98bfd553d8185) C:\Windows\system32\DRIVERS\ssmdrv.sys
22:34:57.0480 4912        ssmdrv - ok
22:34:57.0515 4912        SstpSvc        (6f1a32e7b7b30f004d9a20afadb14944) C:\Windows\system32\sstpsvc.dll
22:34:57.0532 4912        SstpSvc - ok
22:34:57.0695 4912        STacSV          (f10f876acbca088f666ae6df920b2b24) C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_559ad4ac\STacSV.exe
22:34:57.0710 4912        STacSV - ok
22:34:57.0774 4912        STHDA          (666954876b4c973eee61b1b2332b58c4) C:\Windows\system32\DRIVERS\stwrt.sys
22:34:57.0826 4912        STHDA - ok
22:34:57.0896 4912        stisvc          (5de7d67e49b88f5f07f3e53c4b92a352) C:\Windows\System32\wiaservc.dll
22:34:57.0929 4912        stisvc - ok
22:34:58.0035 4912        stllssvr        (1d0063597c3666404fcf97698abeb019) C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
22:34:58.0046 4912        stllssvr - ok
22:34:58.0081 4912        swenum          (7ba58ecf0c0a9a69d44b3dca62becf56) C:\Windows\system32\DRIVERS\swenum.sys
22:34:58.0096 4912        swenum - ok
22:34:58.0156 4912        swprv          (f21fd248040681cca1fb6c9a03aaa93d) C:\Windows\System32\swprv.dll
22:34:58.0201 4912        swprv - ok
22:34:58.0226 4912        Symc8xx        (192aa3ac01df071b541094f251deed10) C:\Windows\system32\drivers\symc8xx.sys
22:34:58.0238 4912        Symc8xx - ok
22:34:58.0285 4912        Sym_hi          (8c8eb8c76736ebaf3b13b633b2e64125) C:\Windows\system32\drivers\sym_hi.sys
22:34:58.0298 4912        Sym_hi - ok
22:34:58.0309 4912        Sym_u3          (8072af52b5fd103bbba387a1e49f62cb) C:\Windows\system32\drivers\sym_u3.sys
22:34:58.0321 4912        Sym_u3 - ok
22:34:58.0393 4912        SysMain        (9a51b04e9886aa4ee90093586b0ba88d) C:\Windows\system32\sysmain.dll
22:34:58.0452 4912        SysMain - ok
22:34:58.0507 4912        TabletInputService (2dca225eae15f42c0933e998ee0231c3) C:\Windows\System32\TabSvc.dll
22:34:58.0526 4912        TabletInputService - ok
22:34:58.0575 4912        TapiSrv        (d7673e4b38ce21ee54c59eeeb65e2483) C:\Windows\System32\tapisrv.dll
22:34:58.0603 4912        TapiSrv - ok
22:34:58.0623 4912        TBS            (cb05822cd9cc6c688168e113c603dbe7) C:\Windows\System32\tbssvc.dll
22:34:58.0676 4912        TBS - ok
22:34:58.0778 4912        Tcpip          (ee7e10bed85c312c1d5d30c435bdda9f) C:\Windows\system32\drivers\tcpip.sys
22:34:58.0811 4912        Tcpip - ok
22:34:58.0823 4912        Tcpip6          (ee7e10bed85c312c1d5d30c435bdda9f) C:\Windows\system32\DRIVERS\tcpip.sys
22:34:58.0855 4912        Tcpip6 - ok
22:34:58.0874 4912        tcpipreg        (2c2d4cff5e09c73908f9b5af49a51365) C:\Windows\system32\drivers\tcpipreg.sys
22:34:58.0889 4912        tcpipreg - ok
22:34:58.0936 4912        TDPIPE          (5dcf5e267be67a1ae926f2df77fbcc56) C:\Windows\system32\drivers\tdpipe.sys
22:34:58.0964 4912        TDPIPE - ok
22:34:58.0984 4912        TDTCP          (389c63e32b3cefed425b61ed92d3f021) C:\Windows\system32\drivers\tdtcp.sys
22:34:59.0026 4912        TDTCP - ok
22:34:59.0070 4912        tdx            (76b06eb8a01fc8624d699e7045303e54) C:\Windows\system32\DRIVERS\tdx.sys
22:34:59.0117 4912        tdx - ok
22:34:59.0591 4912        TeamViewer7    (2bbb318ea9f34fdc508cea4aab98d770) C:\Program Files\TeamViewer\Version7\TeamViewer_Service.exe
22:34:59.0828 4912        TeamViewer7 - ok
22:34:59.0997 4912        TermDD          (3cad38910468eab9a6479e2f01db43c7) C:\Windows\system32\DRIVERS\termdd.sys
22:35:00.0011 4912        TermDD - ok
22:35:00.0076 4912        TermService    (bb95da09bef6e7a131bff3ba5032090d) C:\Windows\System32\termsrv.dll
22:35:00.0119 4912        TermService - ok
22:35:00.0187 4912        Themes          (c7230fbee14437716701c15be02c27b8) C:\Windows\system32\shsvcs.dll
22:35:00.0205 4912        Themes - ok
22:35:00.0238 4912        THREADORDER    (1076ffcffaae8385fd62dfcb25ac4708) C:\Windows\system32\mmcss.dll
22:35:00.0265 4912        THREADORDER - ok
22:35:00.0305 4912        TrkWks          (ec74e77d0eb004bd3a809b5f8fb8c2ce) C:\Windows\System32\trkwks.dll
22:35:00.0333 4912        TrkWks - ok
22:35:00.0388 4912        TrustedInstaller (97d9d6a04e3ad9b6c626b9931db78dba) C:\Windows\servicing\TrustedInstaller.exe
22:35:00.0427 4912        TrustedInstaller - ok
22:35:00.0463 4912        tssecsrv        (dcf0f056a2e4f52287264f5ab29cf206) C:\Windows\system32\DRIVERS\tssecsrv.sys
22:35:00.0509 4912        tssecsrv - ok
22:35:00.0537 4912        tunmp          (caecc0120ac49e3d2f758b9169872d38) C:\Windows\system32\DRIVERS\tunmp.sys
22:35:00.0577 4912        tunmp - ok
22:35:00.0622 4912        tunnel          (300db877ac094feab0be7688c3454a9c) C:\Windows\system32\DRIVERS\tunnel.sys
22:35:00.0654 4912        tunnel - ok
22:35:00.0679 4912        uagp35          (7d33c4db2ce363c8518d2dfcf533941f) C:\Windows\system32\drivers\uagp35.sys
22:35:00.0693 4912        uagp35 - ok
22:35:00.0733 4912        udfs            (d9728af68c4c7693cb100b8441cbdec6) C:\Windows\system32\DRIVERS\udfs.sys
22:35:00.0756 4912        udfs - ok
22:35:00.0793 4912        UI0Detect      (ecef404f62863755951e09c802c94ad5) C:\Windows\system32\UI0Detect.exe
22:35:00.0845 4912        UI0Detect - ok
22:35:00.0884 4912        uliagpkx        (b0acfdc9e4af279e9116c03e014b2b27) C:\Windows\system32\drivers\uliagpkx.sys
22:35:00.0899 4912        uliagpkx - ok
22:35:00.0931 4912        uliahci        (9224bb254f591de4ca8d572a5f0d635c) C:\Windows\system32\drivers\uliahci.sys
22:35:00.0954 4912        uliahci - ok
22:35:00.0981 4912        UlSata          (8514d0e5cd0534467c5fc61be94a569f) C:\Windows\system32\drivers\ulsata.sys
22:35:00.0998 4912        UlSata - ok
22:35:01.0018 4912        ulsata2        (38c3c6e62b157a6bc46594fada45c62b) C:\Windows\system32\drivers\ulsata2.sys
22:35:01.0031 4912        ulsata2 - ok
22:35:01.0046 4912        umbus          (32cff9f809ae9aed85464492bf3e32d2) C:\Windows\system32\DRIVERS\umbus.sys
22:35:01.0093 4912        umbus - ok
22:35:01.0146 4912        upnphost        (68308183f4ae0be7bf8ecd07cb297999) C:\Windows\System32\upnphost.dll
22:35:01.0180 4912        upnphost - ok
22:35:01.0230 4912        usbccgp        (922b2ebd5118b9ab120410807131a921) C:\Windows\system32\DRIVERS\usbccgp.sys
22:35:01.0247 4912        usbccgp - ok
22:35:01.0285 4912        usbcir          (e9476e6c486e76bc4898074768fb7131) C:\Windows\system32\drivers\usbcir.sys
22:35:01.0350 4912        usbcir - ok
22:35:01.0387 4912        usbehci        (3d045eaa73414be8f877f292a84abba2) C:\Windows\system32\DRIVERS\usbehci.sys
22:35:01.0402 4912        usbehci - ok
22:35:01.0459 4912        usbhub          (1ae77a4c4e4f526ef9759c31a123f2b0) C:\Windows\system32\DRIVERS\usbhub.sys
22:35:01.0475 4912        usbhub - ok
22:35:01.0502 4912        usbohci        (38dbc7dd6cc5a72011f187425384388b) C:\Windows\system32\drivers\usbohci.sys
22:35:01.0568 4912        usbohci - ok
22:35:01.0608 4912        usbprint        (e75c4b5269091d15a2e7dc0b6d35f2f5) C:\Windows\system32\DRIVERS\usbprint.sys
22:35:01.0649 4912        usbprint - ok
22:35:01.0678 4912        USBSTOR        (be3da31c191bc222d9ad503c5224f2ad) C:\Windows\system32\DRIVERS\USBSTOR.SYS
22:35:01.0700 4912        USBSTOR - ok
22:35:01.0747 4912        usbuhci        (f69c1aad04f28415f3fbe99fbe56030b) C:\Windows\system32\DRIVERS\usbuhci.sys
22:35:01.0776 4912        usbuhci - ok
22:35:01.0807 4912        UxSms          (1509e705f3ac1d474c92454a5c2dd81f) C:\Windows\System32\uxsms.dll
22:35:01.0829 4912        UxSms - ok
22:35:01.0884 4912        vds            (cd88d1b7776dc17a119049742ec07eb4) C:\Windows\System32\vds.exe
22:35:01.0943 4912        vds - ok
22:35:01.0994 4912        vga            (87b06e1f30b749a114f74622d013f8d4) C:\Windows\system32\DRIVERS\vgapnp.sys
22:35:02.0021 4912        vga - ok
22:35:02.0036 4912        VgaSave        (2e93ac0a1d8c79d019db6c51f036636c) C:\Windows\System32\drivers\vga.sys
22:35:02.0087 4912        VgaSave - ok
22:35:02.0114 4912        viaagp          (5d7159def58a800d5781ba3a879627bc) C:\Windows\system32\drivers\viaagp.sys
22:35:02.0129 4912        viaagp - ok
22:35:02.0143 4912        ViaC7          (c4f3a691b5bad343e6249bd8c2d45dee) C:\Windows\system32\drivers\viac7.sys
22:35:02.0173 4912        ViaC7 - ok
22:35:02.0200 4912        viaide          (aadf5587a4063f52c2c3fed7887426fc) C:\Windows\system32\drivers\viaide.sys
22:35:02.0215 4912        viaide - ok
22:35:02.0235 4912        volmgr          (69503668ac66c77c6cd7af86fbdf8c43) C:\Windows\system32\drivers\volmgr.sys
22:35:02.0250 4912        volmgr - ok
22:35:02.0322 4912        volmgrx        (23e41b834759917bfd6b9a0d625d0c28) C:\Windows\system32\drivers\volmgrx.sys
22:35:02.0348 4912        volmgrx - ok
22:35:02.0406 4912        volsnap        (147281c01fcb1df9252de2a10d5e7093) C:\Windows\system32\drivers\volsnap.sys
22:35:02.0427 4912        volsnap - ok
22:35:02.0477 4912        vsmraid        (587253e09325e6bf226b299774b728a9) C:\Windows\system32\drivers\vsmraid.sys
22:35:02.0514 4912        vsmraid - ok
22:35:02.0630 4912        VSS            (db3d19f850c6eb32bdcb9bc0836acddb) C:\Windows\system32\vssvc.exe
22:35:02.0694 4912        VSS - ok
22:35:02.0759 4912        W32Time        (96ea68b9eb310a69c25ebb0282b2b9de) C:\Windows\system32\w32time.dll
22:35:02.0818 4912        W32Time - ok
22:35:02.0909 4912        WacomPen        (48dfee8f1af7c8235d4e626f0c4fe031) C:\Windows\system32\drivers\wacompen.sys
22:35:02.0979 4912        WacomPen - ok
22:35:03.0006 4912        Wanarp          (55201897378cca7af8b5efd874374a26) C:\Windows\system32\DRIVERS\wanarp.sys
22:35:03.0051 4912        Wanarp - ok
22:35:03.0055 4912        Wanarpv6        (55201897378cca7af8b5efd874374a26) C:\Windows\system32\DRIVERS\wanarp.sys
22:35:03.0083 4912        Wanarpv6 - ok
22:35:03.0148 4912        wcncsvc        (a3cd60fd826381b49f03832590e069af) C:\Windows\System32\wcncsvc.dll
22:35:03.0174 4912        wcncsvc - ok
22:35:03.0198 4912        WcsPlugInService (11bcb7afcdd7aadacb5746f544d3a9c7) C:\Windows\System32\WcsPlugInService.dll
22:35:03.0240 4912        WcsPlugInService - ok
22:35:03.0277 4912        Wd              (78fe9542363f297b18c027b2d7e7c07f) C:\Windows\system32\drivers\wd.sys
22:35:03.0291 4912        Wd - ok
22:35:03.0359 4912        Wdf01000        (b6f0a7ad6d4bd325fbcd8bac96cd8d96) C:\Windows\system32\drivers\Wdf01000.sys
22:35:03.0392 4912        Wdf01000 - ok
22:35:03.0423 4912        WdiServiceHost  (abfc76b48bb6c96e3338d8943c5d93b5) C:\Windows\system32\wdi.dll
22:35:03.0486 4912        WdiServiceHost - ok
22:35:03.0489 4912        WdiSystemHost  (abfc76b48bb6c96e3338d8943c5d93b5) C:\Windows\system32\wdi.dll
22:35:03.0519 4912        WdiSystemHost - ok
22:35:03.0571 4912        WebClient      (04c37d8107320312fbae09926103d5e2) C:\Windows\System32\webclnt.dll
22:35:03.0620 4912        WebClient - ok
22:35:03.0664 4912        Wecsvc          (ae3736e7e8892241c23e4ebbb7453b60) C:\Windows\system32\wecsvc.dll
22:35:03.0699 4912        Wecsvc - ok
22:35:03.0731 4912        wercplsupport  (670ff720071ed741206d69bd995ea453) C:\Windows\System32\wercplsupport.dll
22:35:03.0772 4912        wercplsupport - ok
22:35:03.0816 4912        WerSvc          (32b88481d3b326da6deb07b1d03481e7) C:\Windows\System32\WerSvc.dll
22:35:03.0842 4912        WerSvc - ok
22:35:03.0941 4912        WinDefend      (4575aa12561c5648483403541d0d7f2b) C:\Program Files\Windows Defender\mpsvc.dll
22:35:03.0960 4912        WinDefend - ok
22:35:03.0969 4912        WinHttpAutoProxySvc - ok
22:35:04.0038 4912        Winmgmt        (6b2a1d0e80110e3d04e6863c6e62fd8a) C:\Windows\system32\wbem\WMIsvc.dll
22:35:04.0064 4912        Winmgmt - ok
22:35:04.0203 4912        WinRM          (7cfe68bdc065e55aa5e8421607037511) C:\Windows\system32\WsmSvc.dll
22:35:04.0301 4912        WinRM - ok
22:35:04.0399 4912        Wlansvc        (c008405e4feeb069e30da1d823910234) C:\Windows\System32\wlansvc.dll
22:35:04.0472 4912        Wlansvc - ok
22:35:04.0480 4912        wltrysvc - ok
22:35:04.0538 4912        WmiAcpi        (2e7255d172df0b8283cdfb7b433b864e) C:\Windows\system32\DRIVERS\wmiacpi.sys
22:35:04.0563 4912        WmiAcpi - ok
22:35:04.0637 4912        wmiApSrv        (43be3875207dcb62a85c8c49970b66cc) C:\Windows\system32\wbem\WmiApSrv.exe
22:35:04.0659 4912        wmiApSrv - ok
22:35:04.0805 4912        WMPNetworkSvc  (3978704576a121a9204f8cc49a301a9b) C:\Program Files\Windows Media Player\wmpnetwk.exe
22:35:04.0857 4912        WMPNetworkSvc - ok
22:35:04.0929 4912        WPCSvc          (cfc5a04558f5070cee3e3a7809f3ff52) C:\Windows\System32\wpcsvc.dll
22:35:04.0946 4912        WPCSvc - ok
22:35:04.0979 4912        WPDBusEnum      (801fbdb89d472b3c467eb112a0fc9246) C:\Windows\system32\wpdbusenum.dll
22:35:05.0045 4912        WPDBusEnum - ok
22:35:05.0285 4912        WPFFontCache_v0400 (dcf3e3edf5109ee8bc02fe6e1f045795) C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe
22:35:05.0313 4912        WPFFontCache_v0400 - ok
22:35:05.0373 4912        ws2ifsl        (e3a3cb253c0ec2494d4a61f5e43a389c) C:\Windows\system32\drivers\ws2ifsl.sys
22:35:05.0434 4912        ws2ifsl - ok
22:35:05.0473 4912        wscsvc          (1ca6c40261ddc0425987980d0cd2aaab) C:\Windows\System32\wscsvc.dll
22:35:05.0492 4912        wscsvc - ok
22:35:05.0497 4912        WSearch - ok
22:35:05.0676 4912        wuauserv        (fc3ec24fce372c89423e015a2ac1a31e) C:\Windows\system32\wuaueng.dll
22:35:05.0734 4912        wuauserv - ok
22:35:05.0887 4912        WUDFRd          (ac13cb789d93412106b0fb6c7eb2bcb6) C:\Windows\system32\DRIVERS\WUDFRd.sys
22:35:05.0918 4912        WUDFRd - ok
22:35:05.0950 4912        wudfsvc        (575a4190d989f64732119e4114045a4f) C:\Windows\System32\WUDFSvc.dll
22:35:05.0999 4912        wudfsvc - ok
22:35:06.0026 4912        MBR (0x1B8)    (5c616939100b85e558da92b899a0fc36) \Device\Harddisk0\DR0
22:35:06.0685 4912        \Device\Harddisk0\DR0 - ok
22:35:06.0717 4912        Boot (0x1200)  (ca3db13c0cab65dafcb17098622eaeae) \Device\Harddisk0\DR0\Partition0
22:35:06.0719 4912        \Device\Harddisk0\DR0\Partition0 - ok
22:35:06.0738 4912        Boot (0x1200)  (647d6cf3e765c817e0765dbad8cd687e) \Device\Harddisk0\DR0\Partition1
22:35:06.0740 4912        \Device\Harddisk0\DR0\Partition1 - ok
22:35:06.0740 4912        ============================================================
22:35:06.0740 4912        Scan finished
22:35:06.0740 4912        ============================================================
22:35:06.0755 1116        Detected object count: 0
22:35:06.0755 1116        Actual detected object count: 0

cosinus 31.07.2012 08:27
Dann bitte jetzt CF ausführen:

ComboFix

Ein Leitfaden und Tutorium zur Nutzung von ComboFix
  • Schliesse alle Programme, vor allem dein Antivirenprogramm und andere Hintergrundwächter sowie deinen Internetbrowser.
  • Starte combofix.exe von deinem Desktop aus, bestätige die Warnmeldungen, führe die Updates durch (falls vorgeschlagen), installiere die Wiederherstellungskonsole (falls vorgeschlagen) und lass dein System durchsuchen.
    Vermeide es auch während Combofix läuft die Maus und Tastatur zu benutzen.
  • Im Anschluss öffnet sich automatisch eine combofix.txt, diesen Inhalt bitte kopieren ([Strg]a, [Strg]c) und in deinen Beitrag einfügen ([Strg]v). Die Datei findest du außerdem unter: C:\ComboFix.txt.
Wichtiger Hinweis:
Combofix darf ausschließlich ausgeführt werden, wenn ein Kompetenzler dies ausdrücklich empfohlen hat!

Es sollte nie auf eigene Initiative hin ausgeführt werden! Eine falsche Benutzung kann ernsthafte Computerprobleme nach sich ziehen und eine Bereinigung der Infektion noch erschweren.

Solltest du nach der Ausführung von Combofix Probleme beim Starten von Anwendungen haben und Meldungen erhalten wie

Zitat:
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
startest du Windows dann manuell neu und die Fehlermeldungen sollten nicht mehr auftauchen.

oopsala 31.07.2012 17:08
Hi Arne,

hier das Log von Combofix:

Code:
ComboFix 12-07-30.03 - Rolf 31.07.2012  9:36.1.2 - x86
Microsoft® Windows Vista™ Home Basic  6.0.6002.2.1252.49.1031.18.3032.1866 [GMT 2:00]
ausgeführt von:: c:\users\Rolf\Desktop\ComboFix.exe
AV: Avira Desktop *Disabled/Updated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
SP: Avira Desktop *Disabled/Updated* {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((  Weitere Löschungen  ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\Rolf\1a .pdf
c:\users\Rolf\2a.pdf
c:\users\Rolf\3a.pdf
c:\users\Rolf\4 .pdf
c:\users\Rolf\4a .pdf
c:\users\Rolf\5a.pdf
c:\users\Rolf\6a.pdf
c:\users\Rolf\7a.doc
.
.
(((((((((((((((((((((((  Dateien erstellt von 2012-06-28 bis 2012-07-31  ))))))))))))))))))))))))))))))
.
.
2012-07-31 07:44 . 2012-07-31 07:45        --------        d-----w-        c:\users\Rolf\AppData\Local\temp
2012-07-31 07:44 . 2012-07-31 07:44        --------        d-----w-        c:\users\Default\AppData\Local\temp
2012-07-31 05:39 . 2012-06-29 08:44        6891424        ----a-w-        c:\programdata\Microsoft\Windows Defender\Definition Updates\{AEC73AAF-6882-46BA-BAD1-893AFB022297}\mpengine.dll
2012-07-30 17:09 . 2012-07-30 17:09        --------        d-----w-        C:\_OTL
2012-07-29 18:05 . 2012-07-29 18:07        --------        d-----w-        c:\users\Rolf\AppData\Local\Microsoft Games
2012-07-29 16:50 . 2012-07-29 16:50        --------        d-----w-        c:\program files\SystemRequirementsLab
2012-07-29 16:50 . 2012-07-29 16:50        --------        d-----w-        c:\users\Rolf\SystemRequirementsLab
2012-07-29 16:49 . 2012-07-29 16:49        --------        d-----w-        c:\program files\Common Files\Java
2012-07-29 16:49 . 2012-07-29 16:49        --------        d-----w-        c:\program files\Oracle
2012-07-28 10:45 . 2012-07-28 10:45        --------        d-----w-        c:\users\Rolf\temp
2012-07-25 16:14 . 2012-07-25 16:14        --------        d-----w-        c:\users\Rolf\AppData\Roaming\Malwarebytes
2012-07-25 16:14 . 2012-07-25 16:14        --------        d-----w-        c:\programdata\Malwarebytes
2012-07-25 16:14 . 2012-07-25 16:14        --------        d-----w-        c:\program files\Malwarebytes' Anti-Malware
2012-07-25 16:14 . 2012-07-03 11:46        22344        ----a-w-        c:\windows\system32\drivers\mbam.sys
2012-07-25 16:12 . 2012-07-25 16:12        --------        d-----w-        c:\program files\CCleaner
2012-07-25 16:11 . 2012-07-25 16:13        --------        d-----w-        c:\users\Rolf\AppData\Local\Google
2012-07-25 16:11 . 2012-07-25 16:12        --------        d-----w-        c:\program files\Google
2012-07-25 09:12 . 2012-07-05 20:06        772544        ----a-w-        c:\windows\system32\npdeployJava1.dll
2012-07-13 13:09 . 2012-06-13 13:40        2047488        ----a-w-        c:\windows\system32\win32k.sys
2012-07-11 14:01 . 2012-07-11 14:01        421200        ----a-w-        c:\program files\Mozilla Firefox\msvcp100.dll
2012-07-11 14:01 . 2012-07-11 14:01        770384        ----a-w-        c:\program files\Mozilla Firefox\msvcr100.dll
2012-07-11 13:51 . 2012-06-05 16:47        708608        ----a-w-        c:\program files\Common Files\System\ado\msado15.dll
2012-07-11 13:51 . 2012-06-05 16:47        1401856        ----a-w-        c:\windows\system32\msxml6.dll
2012-07-11 13:51 . 2012-06-05 16:47        1248768        ----a-w-        c:\windows\system32\msxml3.dll
2012-07-11 13:51 . 2012-06-04 15:26        440704        ----a-w-        c:\windows\system32\drivers\ksecdd.sys
2012-07-11 13:51 . 2012-06-02 00:04        278528        ----a-w-        c:\windows\system32\schannel.dll
2012-07-11 13:51 . 2012-06-02 00:03        204288        ----a-w-        c:\windows\system32\ncrypt.dll
.
.
.
((((((((((((((((((((((((((((((((((((  Find3M Bericht  ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-07-28 06:44 . 2012-04-07 18:21        426184        ----a-w-        c:\windows\system32\FlashPlayerApp.exe
2012-07-28 06:44 . 2011-05-18 09:48        70344        ----a-w-        c:\windows\system32\FlashPlayerCPLApp.cpl
2012-07-05 20:06 . 2010-05-30 14:58        687544        ----a-w-        c:\windows\system32\deployJava1.dll
2012-06-02 22:19 . 2012-06-30 15:38        53784        ----a-w-        c:\windows\system32\wuauclt.exe
2012-06-02 22:19 . 2012-06-30 15:38        45080        ----a-w-        c:\windows\system32\wups2.dll
2012-06-02 22:19 . 2012-06-30 15:37        35864        ----a-w-        c:\windows\system32\wups.dll
2012-06-02 22:19 . 2012-06-30 15:37        577048        ----a-w-        c:\windows\system32\wuapi.dll
2012-06-02 22:19 . 2012-06-30 15:38        1933848        ----a-w-        c:\windows\system32\wuaueng.dll
2012-06-02 22:12 . 2012-06-30 15:38        2422272        ----a-w-        c:\windows\system32\wucltux.dll
2012-06-02 22:12 . 2012-06-30 15:37        88576        ----a-w-        c:\windows\system32\wudriver.dll
2012-06-02 13:19 . 2012-06-30 15:36        171904        ----a-w-        c:\windows\system32\wuwebv.dll
2012-06-02 13:12 . 2012-06-30 15:36        33792        ----a-w-        c:\windows\system32\wuapp.exe
2012-05-31 10:25 . 2009-10-15 14:13        237072        ------w-        c:\windows\system32\MpSigStub.exe
2012-05-15 15:44 . 2011-10-31 15:48        83392        ----a-w-        c:\windows\system32\drivers\avgntflt.sys
2012-05-15 15:44 . 2011-10-31 15:48        137928        ----a-w-        c:\windows\system32\drivers\avipbb.sys
2012-07-25 09:09 . 2011-06-12 07:41        136672        ----a-w-        c:\program files\mozilla firefox\components\browsercomps.dll
.
.
((((((((((((((((((((((((((((  Autostartpunkte der Registrierung  ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-21 202240]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2012-06-07 17425072]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Apoint"="c:\program files\DellTPad\Apoint.exe" [2009-06-19 249856]
"Dell Webcam Central"="c:\program files\Dell Webcam\Dell Webcam Central\WebcamDell2.exe" [2009-01-09 405639]
"Broadcom Wireless Manager UI"="c:\windows\system32\WLTRAY.exe" [2008-11-17 3810304]
"SysTrayApp"="c:\program files\IDT\WDM\sttray.exe" [2009-06-29 458844]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-01-03 843712]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2012-05-15 348624]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2012-01-17 252296]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2011-10-13 138008]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2011-10-13 171288]
"Persistence"="c:\windows\system32\igfxpers.exe" [2011-10-13 172824]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
QuickSet.lnk - c:\program files\Dell\QuickSet\quickset.exe [2008-7-31 1616976]
Secunia PSI Tray.lnk - c:\program files\Secunia\PSI\psi_tray.exe [2012-6-27 572000]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc\S-1-5-21-960939398-794792229-4207893192-1000]
"EnableNotificationsRef"=dword:00000001
.
R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [x]
S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files\Common Files\Adobe\ARM\1.0\armsvc.exe [x]
S2 AESTFilters;Andrea ST Filters Service;c:\windows\System32\DriverStore\FileRepository\stwrt.inf_559ad4ac\aestsrv.exe [x]
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalServiceNoNetwork        REG_MULTI_SZ          PLA DPS BFE mpssvc
LocalServiceAndNoImpersonation        REG_MULTI_SZ          FontCache
HPZ12        REG_MULTI_SZ          Pml Driver HPZ12 Net Driver HPZ12
.
Inhalt des "geplante Tasks" Ordners
.
2012-07-31 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-07 06:44]
.
2012-07-31 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2012-07-25 16:11]
.
2012-07-31 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2012-07-25 16:11]
.
.
------- Zusätzlicher Suchlauf -------
.
IE: Nach Microsoft E&xel exportieren - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
LSP: c:\program files\Avira\AntiVir Desktop\avsda.dll
TCP: DhcpNameServer = 192.168.1.1
FF - ProfilePath - c:\users\Rolf\AppData\Roaming\Mozilla\Firefox\Profiles\n48gf8sf.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.google.de/
FF - user.js: yahoo.homepage.dontask - true);user_pref(yahoo.ytff.general.dontshowhpoffer, true
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
HKLM-Run-dellsupportcenter - c:\program files\Dell Support Center\bin\sprtcmd.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, hxxp://www.gmer.net
Rootkit scan 2012-07-31 09:44
Windows 6.0.6002 Service Pack 2 NTFS
.
Scanne versteckte Prozesse...
.
Scanne versteckte Autostarteinträge...
.
Scanne versteckte Dateien...
.
Scan erfolgreich abgeschlossen
versteckte Dateien: 0
.
**************************************************************************
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Services\PCD5SRVC{3F6A8B78-EC003E00-05040104}]
"ImagePath"="\??\c:\progra~1\DELLSU~1\HWDiag\bin\PCD5SRVC.pkms"
.
Zeit der Fertigstellung: 2012-07-31  09:50:36
ComboFix-quarantined-files.txt  2012-07-31 07:50
.
Vor Suchlauf: 10 Verzeichnis(se), 94.313.168.896 Bytes frei
Nach Suchlauf: 13 Verzeichnis(se), 94.746.624.000 Bytes frei
.
- - End Of File - - 96350CB0A5B24EB8A8F3B0BC1327E5FC

cosinus 01.08.2012 15:33
Bitte nun Logs mit GMER und OSAM erstellen und posten.
GMER stürzt häufiger ab, wenn das Tool auch beim 2. Mal nicht will, lass es einfach weg und führ nur OSAM aus - die Online-Abfrage durch OSAM bitte überspringen.
Bei OSAM bitte darauf auch achten, dass Du das Log auch als *.log und nicht *.html oder so abspeicherst.

Hinweis: Zum Entpacken von OSAM bitte WinRAR oder 7zip verwenden! Stell auch unbedingt den Virenscanner ab, besonders der Scanner von McAfee meldet oft einen Fehalarm in OSAM!

Downloade dir bitte aswMBR.exe und speichere die Datei auf deinem Desktop.
  • Starte die aswMBR.exe - (aswMBR.exe Anleitung)
    Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten".
  • Das Tool wird dich fragen, ob Du mit der aktuellen Virendefinition von AVAST! dein System scannen willst. Beantworte diese Frage bitte mit Ja. (Sollte deine Firewall fragen, bitte den Zugriff auf das Internet zulassen )
    Der Download der Definitionen kann je nach Verbindung eine Weile dauern.
  • Klicke auf Scan.
  • Warte bitte bis Scan finished successfully im DOS-Fenster steht.
  • Drücke auf Save Log und speichere diese auf dem Desktop.
Poste mir die aswMBR.txt in deiner nächsten Antwort.

Wichtig: Drücke keinesfalls einen der Fix Buttons ohne Anweisung

Hinweis: Sollte der Scan Button ausgeblendet sein, schließe das Tool und starte es erneut. Sollte der Scan abbrechen und das Programm abstürzen, dann teile mir das mit und wähle unter AV Scan die Einstellung (none).



Noch ein Hinweis: Sollte aswMBR abstürzen und es kommt eine Meldung wie "aswMBR.exe funktioniert nicht mehr, dann mach Folgendes:
Starte aswMBR neu, wähle unten links im Drop-Down-Menü (unten links im Fenster von aswMBR) bei "AV scan" (none) aus und klick nochmal auf den Scan-Button.

oopsala 01.08.2012 18:19
Hi Arne,

hier das Log von GMER:

Code:
GMER 1.0.15.15641 - hxxp://www.gmer.net
Rootkit scan 2012-08-01 19:18:15
Windows 6.0.6002 Service Pack 2 Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0 ST9160827AS rev.3.ADB
Running: gmer.exe; Driver: C:\Users\Rolf\AppData\Local\Temp\pxldrpob.sys


---- System - GMER 1.0.15 ----

SSDT            8BEA9AE6                      ZwCreateSymbolicLinkObject
SSDT            8BEA9AEB                      ZwLoadDriver
SSDT            8BEA9AE1                      ZwOpenSection
SSDT            8BEA9AF0                      ZwSetSystemInformation
SSDT            8BEA9AAF                      ZwTerminateProcess

---- Kernel code sections - GMER 1.0.15 ----

.text          ntkrnlpa.exe!KeSetEvent + 21D  81CE28E0 4 Bytes  [E6, 9A, EA, 8B]
.text          ntkrnlpa.exe!KeSetEvent + 37D  81CE2A40 4 Bytes  [EB, 9A, EA, 8B]
.text          ntkrnlpa.exe!KeSetEvent + 3FD  81CE2AC0 4 Bytes  [E1, 9A, EA, 8B]
.text          ntkrnlpa.exe!KeSetEvent + 5DD  81CE2CA0 4 Bytes  [F0, 9A, EA, 8B]
.text          ntkrnlpa.exe!KeSetEvent + 621  81CE2CE4 4 Bytes  [AF, 9A, EA, 8B]

---- Devices - GMER 1.0.15 ----

AttachedDevice  \FileSystem\fastfat \Fat      fltmgr.sys (Microsoft Dateisystem-Filter-Manager/Microsoft Corporation)

---- EOF - GMER 1.0.15 ----
...und das Log von OSAM:

Code:
Report of OSAM: Autorun Manager v5.0.11926.0
hxxp://www.online-solutions.ru/en/
Saved at 19:22:02 on 01.08.2012

OS: Windows Vista Home Basic Edition Service Pack 2 (Build 6002), 32-bit
Default Browser: Mozilla Corporation Firefox 14.0.1

Scanner Settings
[x] Rootkits detection (hidden registry)
[x] Rootkits detection (hidden files)
[x] Retrieve files information
[x] Check Microsoft signatures

Filters
[ ] Trusted entries
[ ] Empty entries
[x] Hidden registry entries (rootkit activity)
[x] Exclusively opened files
[x] Not found files
[x] Files without detailed information
[x] Existing files
[ ] Non-startable services
[ ] Non-startable drivers
[x] Active entries
[x] Disabled entries


[Common]
-----( %SystemRoot%\Tasks )-----
"GoogleUpdateTaskMachineCore.job" - "Google Inc." - C:\Program Files\Google\Update\GoogleUpdate.exe
"GoogleUpdateTaskMachineUA.job" - "Google Inc." - C:\Program Files\Google\Update\GoogleUpdate.exe
"Adobe Flash Player Updater.job" - "Adobe Systems Incorporated" - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

[Control Panel Objects]
-----( %SystemRoot%\system32 )-----
"BCMWLCPL.CPL" - "Dell Inc." - C:\Windows\system32\BCMWLCPL.CPL
"FlashPlayerCPLApp.cpl" - "Adobe Systems Incorporated" - C:\Windows\system32\FlashPlayerCPLApp.cpl
-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Control Panel\Cpls )-----
"bcmwlcpl.cpl" - "Dell Inc." - C:\Windows\System32\bcmwlcpl.cpl

[Drivers]
-----( HKLM\SYSTEM\CurrentControlSet\Services )-----
"avgntflt" (avgntflt) - "Avira GmbH" - C:\Windows\System32\DRIVERS\avgntflt.sys
"avipbb" (avipbb) - "Avira GmbH" - C:\Windows\System32\DRIVERS\avipbb.sys
"avkmgr" (avkmgr) - "Avira GmbH" - C:\Windows\System32\DRIVERS\avkmgr.sys
"BCM42RLY" (BCM42RLY) - "Broadcom Corporation" - C:\Windows\System32\drivers\BCM42RLY.sys
"catchme" (catchme) - ? - C:\Users\Rolf\AppData\Local\Temp\catchme.sys  (File not found)
"IP in IP Tunnel Driver" (IpInIp) - ? - C:\Windows\System32\DRIVERS\ipinip.sys  (File not found)
"IPX Traffic Filter Driver" (NwlnkFlt) - ? - C:\Windows\System32\DRIVERS\nwlnkflt.sys  (File not found)
"IPX Traffic Forwarder Driver" (NwlnkFwd) - ? - C:\Windows\System32\DRIVERS\nwlnkfwd.sys  (File not found)
"PCD5SRVC{3F6A8B78-EC003E00-05040104} - PCDR Kernel Mode Service Helper Driver" (PCD5SRVC{3F6A8B78-EC003E00-05040104}) - ? - C:\PROGRA~1\DELLSU~1\HWDiag\bin\PCD5SRVC.pkms  (File not found)
"PSI" (PSI) - "Secunia" - C:\Windows\System32\DRIVERS\psi_mf.sys
"PxHelp20" (PxHelp20) - "Sonic Solutions" - C:\Windows\System32\Drivers\PxHelp20.sys
"pxldrpob" (pxldrpob) - ? - C:\Users\Rolf\AppData\Local\Temp\pxldrpob.sys  (Hidden registry entry, rootkit activity | File not found)
"ssmdrv" (ssmdrv) - "Avira GmbH" - C:\Windows\System32\DRIVERS\ssmdrv.sys

[Explorer]
-----( HKLM\Software\Classes\Folder\shellex\ColumnHandlers )-----
{F9DB5320-233E-11D1-9F84-707F02C10627} "PDF Shell Extension" - "Adobe Systems, Inc." - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\PDFShell.dll
-----( HKLM\Software\Classes\Protocols\Handler )-----
{FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} "IEProtocolHandler Class" - "Skype Technologies" - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved )-----
{911051fa-c21c-4246-b470-070cd8df6dc4} ".cab or .zip files" - ? -  (File not found | COM-object registry key not found)
{23170F69-40C1-278A-1000-000100020000} "7-Zip Shell Extension" - "Igor Pavlov" - C:\Program Files\7-Zip\7-zip.dll
{1b24a030-9b20-49bc-97ac-1be4426f9e59} "ActiveDirectory Folder" - ? -  (File not found | COM-object registry key not found)
{34449847-FD14-4fc8-A75A-7432F5181EFB} "ActiveDirectory Folder" - ? -  (File not found | COM-object registry key not found)
{0F8604A5-4ECE-4DE1-BA7D-CF10F8AA4F48} "Contacts folder" - ? -  (File not found | COM-object registry key not found)
{2C2577C2-63A7-40e3-9B7F-586602617ECB} "Explorer Query Band" - ? -  (File not found | COM-object registry key not found)
{FAC3CBF6-8697-43d0-BAB9-DCD1FCE19D75} "IE User Assist" - ? -  (File not found | COM-object registry key not found)
{00020d75-0000-0000-c000-000000000046} "lnkfile" - ? -  (File not found | COM-object registry key not found)
{993BE281-6695-4BA5-8A2A-7AACBFAAB69E} "Microsoft Office Metadata Handler" - "Microsoft Corporation" - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\msoshext.dll
{C41662BB-1FA0-4CE0-8DC5-9B7F8279FF97} "Microsoft Office Thumbnail Handler" - "Microsoft Corporation" - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\msoshext.dll
{C8494E42-ACDD-4739-B0FB-217361E4894F} "Sam Account Folder" - ? -  (File not found | COM-object registry key not found)
{E29F9716-5C08-4FCD-955A-119FDB5A522D} "Sam Account Folder" - ? -  (File not found | COM-object registry key not found)
{45AC2688-0253-4ED8-97DE-B5370FA7D48A} "Shell Extension for Malware scanning" - "Avira Operations GmbH & Co. KG" - C:\Program Files\Avira\AntiVir Desktop\shlext.dll
{da67b8ad-e81b-4c70-9b91b417b5e33527} "Windows Search Shell Service" - ? -  (File not found | COM-object registry key not found)

[Internet Explorer]
-----( HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser )-----
ITBar7Height "ITBar7Height" - ? -  (File not found | COM-object registry key not found)
<binary data> "ITBar7Layout" - ? -  (File not found | COM-object registry key not found)
-----( HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units )-----
{43E3F87D-DE7F-4087-BD4F-0DC854981158} "CTAdjust Class" - "Microsoft Corporation" - C:\Windows\Downloaded Program Files\clearadjust2.dll / hxxp://download.microsoft.com/download/7/3/8/7384c441-3721-41ee-ae15-b678888f00dd/clearadj.CAB
-----( HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar )-----
{8dcb7100-df86-4384-8842-8fa844297b3f} "Bing Bar" - "Microsoft Corporation." - C:\Program Files\Microsoft\BingBar\BingExt.dll
-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects )-----
{18DF081C-E8AD-4283-A596-FA578C2EBDC3} "Adobe PDF Link Helper" - "Adobe Systems Incorporated" - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
{d2ce3e00-f94a-4740-988e-03dc2f38c34f} "Bing Bar Helper" - "Microsoft Corporation." - C:\Program Files\Microsoft\BingBar\BingExt.dll
{DBC80044-A445-435b-BC74-9C25C1C588A9} "Java(tm) Plug-In 2 SSV Helper" - "Oracle Corporation" - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll
{761497BB-D6F0-462C-B6EB-D4DAF1D92D43} "Java(tm) Plug-In SSV Helper" - "Oracle Corporation" - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll

[Logon]
-----( %APPDATA%\Microsoft\Windows\Start Menu\Programs\Startup )-----
"desktop.ini" - ? - C:\Users\Rolf\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini
-----( %AllUsersProfile%\Microsoft\Windows\Start Menu\Programs\Startup )-----
"desktop.ini" - ? - C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini
"QuickSet.lnk" - "Dell Inc." - C:\Program Files\Dell\QuickSet\quickset.exe  (Shortcut exists | File exists)
"Secunia PSI Tray.lnk" - "Secunia" - C:\Program Files\Secunia\PSI\psi_tray.exe  (Shortcut exists | File exists)
-----( HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run )-----
"Skype" - "Skype Technologies S.A." - "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun
-----( HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server\Wds\rdpwd )-----
"StartupPrograms" - ? - rdpclip  (File not found)
-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Run )-----
"Adobe ARM" - "Adobe Systems Incorporated" - "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
"avgnt" - "Avira Operations GmbH & Co. KG" - "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
"Broadcom Wireless Manager UI" - "Dell Inc." - C:\Windows\system32\WLTRAY.exe
"Dell Webcam Central" - "Creative Technology Ltd" - "C:\Program Files\Dell Webcam\Dell Webcam Central\WebcamDell2.exe" /mode2
"SunJavaUpdateSched" - "Sun Microsystems, Inc." - "C:\Program Files\Common Files\Java\Java Update\jusched.exe"

[Network Providers]
-----( HKLM\SYSTEM\CurrentControlSet\Control\NetworkProvider\Order )-----
"Dell Wireless WLAN Card Logon Provider" - "Dell Inc." - C:\Windows\System32\BCMLogon.dll

[Services]
-----( HKLM\SYSTEM\CurrentControlSet\Services )-----
"@c:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe,-100" (WPFFontCache_v0400) - "Microsoft Corporation" - C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe
"Adobe Acrobat Update Service" (AdobeARMservice) - "Adobe Systems Incorporated" - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
"Adobe Flash Player Update Service" (AdobeFlashPlayerUpdateSvc) - "Adobe Systems Incorporated" - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
"Avira Browser Schutz" (AntiVirWebService) - "Avira Operations GmbH & Co. KG" - C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE
"Avira Echtzeit Scanner" (AntiVirService) - "Avira Operations GmbH & Co. KG" - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
"Avira Email Schutz" (AntiVirMailService) - "Avira Operations GmbH & Co. KG" - C:\Program Files\Avira\AntiVir Desktop\avmailc.exe
"Avira Planer" (AntiVirSchedulerService) - "Avira Operations GmbH & Co. KG" - C:\Program Files\Avira\AntiVir Desktop\sched.exe
"BBUpdate" (BBUpdate) - "Microsoft Corporation" - C:\Program Files\Microsoft\BingBar\SeaPort.EXE
"Bing Bar Update Service" (BBSvc) - "Microsoft Corporation." - C:\Program Files\Microsoft\BingBar\BBSvc.EXE
"Dell Wireless WLAN Tray Service" (wltrysvc) - ? - C:\Windows\System32\WLTRYSVC.EXE  (File found, but it contains no detailed information)
"Google Update Service (gupdate)" (gupdate) - "Google Inc." - C:\Program Files\Google\Update\GoogleUpdate.exe
"Google Update-Dienst (gupdatem)" (gupdatem) - "Google Inc." - C:\Program Files\Google\Update\GoogleUpdate.exe
"Microsoft .NET Framework NGEN v4.0.30319_X86" (clr_optimization_v4.0.30319_32) - "Microsoft Corporation" - C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
"Mozilla Maintenance Service" (MozillaMaintenance) - "Mozilla Foundation" - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
"Secunia PSI Agent" (Secunia PSI Agent) - "Secunia" - C:\Program Files\Secunia\PSI\PSIA.exe
"Secunia Update Agent" (Secunia Update Agent) - "Secunia" - C:\Program Files\Secunia\PSI\sua.exe
"Skype Updater" (SkypeUpdate) - "Skype Technologies" - C:\Program Files\Skype\Updater\Updater.exe
"stllssvr" (stllssvr) - "MicroVision Development, Inc." - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
"TeamViewer 7" (TeamViewer7) - "TeamViewer GmbH" - C:\Program Files\TeamViewer\Version7\TeamViewer_Service.exe

[Winsock Providers]
-----( HKLM\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries )-----
"AVSDA" - "Avira Operations GmbH & Co. KG" - C:\Program Files\Avira\AntiVir Desktop\avsda.dll

===[ Logfile end ]=========================================[ Logfile end ]===

If You have questions or want to get some help, You can visit hxxp://forum.online-solutions.ru
...und noch das von aswMBR:

Code:
aswMBR version 0.9.9.1665 Copyright(c) 2011 AVAST Software
Run date: 2012-08-01 19:23:38
-----------------------------
19:23:38.272    OS Version: Windows 6.0.6002 Service Pack 2
19:23:38.272    Number of processors: 2 586 0x170A
19:23:38.273    ComputerName: ROLF-PC  UserName: Rolf
19:23:43.185    Initialize success
19:24:33.364    AVAST engine defs: 12080100
19:24:41.296    Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0
19:24:41.300    Disk 0 Vendor: ST9160827AS 3.ADB Size: 152627MB BusType: 3
19:24:41.433    Disk 0 MBR read successfully
19:24:41.437    Disk 0 MBR scan
19:24:41.443    Disk 0 Windows VISTA default MBR code
19:24:41.492    Disk 0 Partition 1 00    DE Dell Utility Dell 8.0      109 MB offset 63
19:24:41.504    Disk 0 Partition 2 00    07    HPFS/NTFS NTFS        15360 MB offset 225280
19:24:41.558    Disk 0 Partition 3 80 (A) 07    HPFS/NTFS NTFS      137156 MB offset 31682560
19:24:41.674    Disk 0 scanning sectors +312578048
19:24:42.059    Disk 0 scanning C:\Windows\system32\drivers
19:25:32.622    Service scanning
19:25:57.903    Modules scanning
19:26:27.527    Disk 0 trace - called modules:
19:26:27.558    ntkrnlpa.exe CLASSPNP.SYS disk.sys ataport.SYS hal.dll PCIIDEX.SYS msahci.sys
19:26:27.567    1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x85866500]
19:26:27.576    3 CLASSPNP.SYS[89fab8b3] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP0T0L0-0[0x84eeb8d8]
19:26:28.200    AVAST engine scan C:\Windows
19:26:34.441    AVAST engine scan C:\Windows\system32
19:30:17.851    AVAST engine scan C:\Windows\system32\drivers
19:30:32.401    AVAST engine scan C:\Users\Rolf
19:32:08.224    AVAST engine scan C:\ProgramData
19:34:28.948    Scan finished successfully
19:42:02.628    Disk 0 MBR has been saved successfully to "C:\Users\Rolf\Desktop\MBR.dat"
19:42:02.636    The log file has been saved successfully to "C:\Users\Rolf\Desktop\aswMBR.txt"

cosinus 02.08.2012 14:28
Sieht ok aus. Wir sollten fast durch sein. Mach bitte zur Kontrolle Vollscans mit Malwarebytes und SASW und poste die Logs.
Denk dran beide Tools zu updaten vor dem Scan!!

oopsala 02.08.2012 17:17
Hi Arne,

super, hoffentlich ist jetzt wieder alles o.k.

Hier die Logs:

Code:
Malwarebytes Anti-Malware 1.62.0.1300
www.malwarebytes.org

Datenbank Version: v2012.08.02.07

Windows Vista Service Pack 2 x86 NTFS
Internet Explorer 9.0.8112.16421
Rolf :: ROLF-PC [Administrator]

02.08.2012 15:42:20
mbam-log-2012-08-02 (15-42-20).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|)
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 286188
Laufzeit: 46 Minute(n), 46 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 0
(Keine bösartigen Objekte gefunden)

(Ende)
und als letztes

Code:
SUPERAntiSpyware Scann-Protokoll
hxxp://www.superantispyware.com

Generiert 08/02/2012 bei 06:00 PM

Version der Applikation : 5.5.1012

Version der Kern-Datenbank : 8997
Version der Spur-Datenbank : 6809

Scan Art      : kompletter Scann
Totale Scann-Zeit : 01:02:11

Operating System Information
Windows Vista Home Basic 32-bit, Service Pack 2 (Build 6.00.6002)
UAC On - Administrator

Gescannte Speicherelemente  : 641
Erfasste Speicher-Bedrohungen  : 0
Gescannte Register-Elemente  : 32900
Erfasste Register-Bedrohungen  : 0
Gescannte Datei-Elemente    : 112110
Erfasste Datei-Elemente  : 0

cosinus 03.08.2012 15:39
Keine Funde! :daumenhoc

Wegen Cookies und anderer Dinge im Web: Um die Pest von vornherein zu blocken (also TrackingCookies, Werbebanner etc.) müsstest du dir mal sowas wie MVPS Hosts File anschauen => Blocking Unwanted Parasites with a Hosts File - sinnvollerweise solltest du alle 4 Wochen mal bei MVPS nachsehen, ob er eine neue Hosts Datei herausgebracht hat.

Ansonsten gibt es noch gute Cookiemanager, Erweiterungen für den Firefox zB wäre da CookieCuller http://filepony.de/download-cookie_culler/
Wenn du aber damit leben kannst, dich bei jeder Browsersession überall neu einzuloggen (zB Facebook, Ebay, GMX, oder auch Trojaner-Board) dann stell den Browser einfach so ein, dass einfach alles beim Beenden des Browser inkl. Cookies gelöscht wird.

Ich halte es so, dass ich zum "wilden Surfen" den Opera-Browser oder Chromium unter meinem Linux verwende. Mein Hauptbrowser (Firefox) speichert nur die Cookies von den Sites die ich auch will, alles andere lehne ich manuell ab (der FF fragt mich immer) - die anderen Browser nehmen alles an Cookies zwar an, aber spätestens beim nächsten Start von Opera oder Chromium sind keine Cookies mehr da.

Ist dein System nun wieder in Ordnung oder gibt's noch andere Funde oder Probleme?

oopsala 03.08.2012 21:03
Hi Arne,

vielen, vielen Dank für Deine Hilfe! :dankeschoen:

Es ging ja hier um den Rechner meines Schwiegervaters, ich selbst mache es ja wie Du: Cookies werden immer beim Verlassen gelöscht, Tracking u.ä. möglichst unterbunden. Aber jemanden mit Mitte 70 z.B. dazu zu bekommen, mehrere Browser im Wechsel zu benutzen ist etwas schwierig...Du verstehst? :rolleyes:

Das System wirkt absolut normal, soweit ich sehen kann ist alles o.k.

Also nochmal ein dickes Dankeschön, wir werden uns mit einer kleinen Spende an TB erkenntlich zeigen! :daumenhoc

Beste Grüße

Frank

cosinus 03.08.2012 21:12
Ok, sehr schön! :daumenhoc
Und danke für die Spende! :dankeschoen:

Dann wären wir durch! :abklatsch:

Die Programme, die hier zum Einsatz kamen, können alle wieder runter. Mit Hilfe von OTL kannst du auch viele Tools entfernen:

Starte bitte OTL und klicke auf Bereinigung.
Dies wird die meisten Tools entfernen, die wir zur Bereinigung benötigt haben. Sollte etwas bestehen bleiben, bitte mit Rechtsklick --> Löschen entfernen.


Malwarebytes zu behalten ist zu empfehlen. Kannst ja 1x im Monat damit einen Vollscan machen, aber immer vorher ans Update denken.


Bitte abschließend die Updates prüfen, unten mein Leitfaden dazu. Um in Zukunft die Aktualität der installierten Programme besser im Überblick zu halten, kannst du zB Secunia PSI verwenden.
Für noch mehr Sicherheit solltest Du nach der beseitigten Infektion auch möglichst alle Passwörter ändern.


Microsoftupdate

Windows XP: Besuch mit dem IE die MS-Updateseite und lass Dir alle wichtigen Updates installieren.

Windows Vista/7: Anleitung Windows-Update


PDF-Reader aktualisieren
Ein veralteter AdobeReader stellt ein großes Sicherheitsrisiko dar. Du solltest daher besser alte Versionen vom AdobeReader über Systemsteuerung => Software bzw. Programme und Funktionen deinstallieren, indem Du dort auf "Adobe Reader x.0" klickst und das Programm entfernst. (falls du AdobeReader installiert hast)

Ich empfehle einen alternativen PDF-Reader wie PDF Xchange Viewer, SumatraPDF oder Foxit PDF Reader, die sind sehr viel schlanker und flotter als der AdobeReader.

Bitte überprüf bei der Gelegenheit auch die Aktualität des Flashplayers:
Prüfen => Adobe - Flash Player
Downloadlinks => Adobe Flash Player Distribution | Adobe

Natürlich auch darauf achten, dass andere installierte Browser wie zB Firefox, Opera oder Chrome aktuell sind.


Java-Update
Veraltete Java-Installationen sind ein Sicherheitsrisiko, daher solltest Du die alten Versionen löschen (falls vorhanden, am besten mit JavaRa) und auf die neuste aktualisieren. Beende dazu alle Programme (v.a. die Browser), klick danach auf Start, Systemsteuerung, Software und deinstalliere darüber alle aufgelisteten Java-Versionen. Lad Dir danach von hier das aktuelle Java SE Runtime Environment (JRE) herunter und installiere es.


Alle Zeitangaben in WEZ +1. Es ist jetzt 23:01 Uhr.
Seite 2 von 2 1 2
100 Beiträge dieses Themas auf einer Seite anzeigen

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55