Trojaner-Board - Winlogon.exe, CHKDSK, Thunderbird weg, Malwarebytes deaktiviert, Virus?

Trojaner-Board (https://www.trojaner-board.de/)

- Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)

- - Winlogon.exe, CHKDSK, Thunderbird weg, Malwarebytes deaktiviert, Virus? (https://www.trojaner-board.de/123240-winlogon-exe-chkdsk-thunderbird-weg-malwarebytes-deaktiviert-virus.html)

SteGri

01.09.2012 12:06

Winlogon.exe, CHKDSK, Thunderbird weg, Malwarebytes deaktiviert, Virus?

Hallo zusammen!

Heute Morgen schalte ich meinen Computer an und es kommen beim Hochfahren unzählige Warnhinweise, dass mit winlogon.exe was nicht stimmt (genauer: "Windows\Fonts") und dass ich chkdsk laufen lassen soll. Hab ich via "Ausführen" gemacht, es passiert aber nichts. Das Dos-Fenster blitzt nur kurz auf und dann tut sich nichts. Via Start/Programme/Zubehör/Ausführen wird mir "Als Administrator ausführen" per Rechts-Klick gar nicht angeboten.

Gleichzeitig führt die Verknüpfung zu meinem Thunderbird-Emailprogramm auf dem Desktop plötzlich ins Leere und der Thunderbird-Ordner unter C:\Users\BENUTZERNAME\AppData\Roaming lässt sich nicht mehr öffnen und zeigt unter "Eigenschaften" eine Größe von 0 Bytes an (war bis gestern ca. 5 GB und funktionierte einwandfrei). hxxp://i.imgur.com/mdVre.jpg

Malwarebytes kann ich auch nicht ausführen, nicht einmal als Administrator, siehe hxxp://i.imgur.com/ccXT2.jpg
Ich habe versucht, das Programm neu zu installieren, auch dabei gab es eine Fehlermeldung, siehe hxxp://i.imgur.com/MQkkO.jpg aber nach "Ignorieren" konnte ich Malwarebytes wenigstens starten. Ist Malwarebytes jetzt fehlerhaft installiert? Der Quickscan als Administrator hat keine "infizierten Objekte" gemeldet. Beim vollständigen Suchlauf wurde dann lediglich ein infiziertes Objekt gefunden, siehe unten. hxxp://i.imgur.com/Nb8KJ.jpg Seither habe ich neu gestartet.

AntiVir hat nicht von selbst ausgeschlagen, aber ein System-Check hat 36 Warnungen hervorgebracht, siehe unten.

Der verbliebene Speicherplatz auf C:\ hat sich im Vergleich zu vielleicht ner Woche nicht wirklich verändert, wenn ich mich richtig erinnere.

Klingt nach nem Virus? Und sind meine Emails alle verloren oder ist der Thunderbird nur irgendwohin "versteckt" worden? Ich habe zum Glück einen Backup, wenn auch leider nur von Mitte Juli.

Danke an alle.
Gruß, SteGri

AntiVir

Der Suchlauf über die ausgewählten Dateien wird begonnen:

Beginne mit der Suche in 'C:\'
C:\$Recycle.Bin\S-1-5-21-2208915766-2941739076-3352613170-1001\$RH5B1DB.exe
[WARNUNG] Die Datei konnte nicht geöffnet werden!
C:\dell\drivers\R230731\WinWDF\x86\SynCOM.dll
[WARNUNG] Die Datei konnte nicht geöffnet werden!
C:\dell\drivers\R230731\WinWDF\x86\SynCtrl.dll
[WARNUNG] Die Datei konnte nicht geöffnet werden!
C:\dell\drivers\R230731\WinWDF\x86\SynMood.exe
[WARNUNG] Die Datei konnte nicht geöffnet werden!
C:\dell\drivers\R230731\WinWDF\x86\SynTP.sys
[WARNUNG] Die Datei konnte nicht geöffnet werden!
C:\dell\drivers\R230731\WinWDF\x86\SynTPAPI.dll
[WARNUNG] Die Datei konnte nicht geöffnet werden!
C:\dell\drivers\R230731\WinWDF\x86\SynTPCOM.dll
[WARNUNG] Die Datei konnte nicht geöffnet werden!
C:\dell\drivers\R230731\WinWDF\x86\SynTPCpl.dll
[WARNUNG] Die Datei konnte nicht geöffnet werden!
C:\dell\drivers\R230731\WinWDF\x86\SynTPEnh.exe
[WARNUNG] Die Datei konnte nicht geöffnet werden!
C:\dell\drivers\R230731\WinWDF\x86\SynTPRes.dll
[WARNUNG] Die Datei konnte nicht geöffnet werden!
C:\dell\drivers\R230731\WinWDF\x86\SynZMetr.exe
[WARNUNG] Die Datei konnte nicht geöffnet werden!
C:\Program Files\Windows Media Player\setup_wm.exe
[WARNUNG] Die Datei konnte nicht geöffnet werden!
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.dll
[WARNUNG] Die Datei konnte nicht geöffnet werden!
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe
[WARNUNG] Die Datei konnte nicht geöffnet werden!
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamcore.dll
[WARNUNG] Die Datei konnte nicht geöffnet werden!
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
[WARNUNG] Die Datei konnte nicht geöffnet werden!
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamnet.dll
[WARNUNG] Die Datei konnte nicht geöffnet werden!
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbampt.exe
[WARNUNG] Die Datei konnte nicht geöffnet werden!
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
[WARNUNG] Die Datei konnte nicht geöffnet werden!
C:\Program Files (x86)\Malwarebytes' Anti-Malware\unins000.exe
[WARNUNG] Die Datei konnte nicht geöffnet werden!
C:\Program Files (x86)\Windows Media Player\setup_wm.exe
[WARNUNG] Die Datei konnte nicht geöffnet werden!
C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\mbam-setup.exe
[WARNUNG] Die Datei konnte nicht geöffnet werden!
C:\Users\Office-PC\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\RLMJ3LLW\install_flashplayer11x32ax_gtba_chra_dy_aih[1].exe
[WARNUNG] Die Datei ist kennwortgeschützt
C:\Users\Office-PC\AppData\Local\Temp\install_flashplayer11x32ax_gtba_chra_dy_aih.exe
[WARNUNG] Die Datei ist kennwortgeschützt
C:\Users\Office-PC\AppData\Local\Temp\AIH.286d535efec6250007fd8cdf0a71e4819ac3d110\downloader.bundle
[WARNUNG] Die Datei ist kennwortgeschützt
C:\Users\Office-PC\AppData\Local\Temp\AIH.286d535efec6250007fd8cdf0a71e4819ac3d110\launcher.bundle
[WARNUNG] Die Datei ist kennwortgeschützt
C:\Windows\assembly\GAC_MSIL\Microsoft.PowerShell.GPowerShell\1.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.GPowerShell.dll
[WARNUNG] Die Datei konnte nicht geöffnet werden!
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Data.OracleC#\35930a8bda01bcaa3f992622bc63e17a\System.Data.OracleClient.ni.dll
[WARNUNG] Die Datei konnte nicht geöffnet werden!
C:\Windows\System32\finger.exe
[WARNUNG] Die Datei konnte nicht geöffnet werden!
C:\Windows\System32\MRINFO.EXE
[WARNUNG] Die Datei konnte nicht geöffnet werden!
C:\Windows\System32\NETSTAT.EXE
[WARNUNG] Die Datei konnte nicht geöffnet werden!
C:\Windows\System32\ROUTE.EXE
[WARNUNG] Die Datei konnte nicht geöffnet werden!
C:\Windows\System32\UIRibbon.dll
[WARNUNG] Die Datei konnte nicht geöffnet werden!
C:\Windows\System32\drivers\mbam.sys
[WARNUNG] Die Datei konnte nicht geöffnet werden!
C:\Windows\SysWOW64\ARP.EXE
[WARNUNG] Die Datei konnte nicht geöffnet werden!
C:\Windows\SysWOW64\HOSTNAME.EXE
[WARNUNG] Die Datei konnte nicht geöffnet werden!

Ende des Suchlaufs: Samstag, 1. September 2012 12:48
Benötigte Zeit: 59:43 Minute(n)

Der Suchlauf wurde vollständig durchgeführt.

12812 Verzeichnisse wurden überprüft
251266 Dateien wurden geprüft
0 Viren bzw. unerwünschte Programme wurden gefunden
0 Dateien wurden als verdächtig eingestuft
0 Dateien wurden gelöscht
0 Viren bzw. unerwünschte Programme wurden repariert
0 Dateien wurden in die Quarantäne verschoben
0 Dateien wurden umbenannt
32 Dateien konnten nicht durchsucht werden
251234 Dateien ohne Befall
3582 Archive wurden durchsucht
36 Warnungen
0 Hinweise

Malwarebytes'

Malwarebytes Anti-Malware 1.62.0.1300
www.malwarebytes.org

Datenbank Version: v2012.09.01.02

Windows Vista Service Pack 2 x64 NTFS
Internet Explorer 9.0.8112.16421
Office-PC :: NAME [Administrator]

01.09.2012 12:29:13
mbam-log-2012-09-01 (12-29-13).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|)
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 251280
Laufzeit: 29 Minute(n), 6 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 1
C:\Users\Office-PC\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\UBSI5EGM\PDFCreator_Stub_5874[1].exe (PUP.Adware.Agent) -> Erfolgreich gelöscht und in Quarantäne gestellt.

(Ende)

Die winlogon.exe/CHKDSK Fehlermeldungen bleiben nach Neustarts. Thunderbird bleibt verschwunden. Alle Thunderbird-Ordner (ob in "Programme" oder "Benutzer") haben 0 Bytes. Sonst ist mir eigentlich nichts aufgefallen.

Die winlogon.exe/CHKDSK Fehlermeldungen bleiben nach Neustarts. Thunderbird bleibt verschwunden. Alle Thunderbird-Ordner (ob in "Programme" oder "Benutzer") haben 0 Bytes. Sonst ist mir eigentlich nichts aufgefallen.

cosinus

01.09.2012 14:16

Malwarebytes erstellt bei jedem Scanvorgang genau ein Log. Hast du in der Vergangenheit schonmal mit Malwarebytes gescannt?
Wenn ja dann stehen auch alle Logs zu jedem Scanvorgang im Reiter Logdateien. Bitte alle posten, die dort sichtbar sind.

Führ bitte auch ESET aus, danach sehen wir weiter.

Hinweis: ESET zeigt durchaus öfter ein paar Fehlalarme. Deswegen soll auch von ESET immer nur erst das Log gepostet und nichts entfernt werden.

ESET Online Scanner
Bitte während der Online-Scans evtl. vorhandene externe Festplatten einschalten! Bitte während der Scans alle Hintergrundwächter (Anti-Virus-Programm, Firewall, Skriptblocking und ähnliches) abstellen und nicht vergessen, alles hinterher wieder einzuschalten.

Anmerkung für Vista und Win7 User: Bitte den Browser unbedingt so öffnen: per Rechtsklick => als Administrator ausführen
Dein Anti-Virus-Programm während des Scans deaktivieren.

Im als Administrator geöffneten Browser diesen Link aufrufen => ESET Online Scanner
- Firefox-User:
  Bitte esetsmartinstaller_enu.exe downloaden.Das Firefox-Addon auf dem Desktop speichern und dann installieren.
- IE-User:
  müssen das Installieren eines ActiveX Elements erlauben.
Setze den einen Haken bei Yes, i accept the Terms of Use.
Drücke den http://img707.imageshack.us/img707/687/starteg.jpg Button.
Warte bis die Komponenten herunter geladen wurden.
Setze einen Haken bei "Scan archives".
Gehe sicher das bei Remove Found Threats kein Hacken gesetzt ist.
http://img707.imageshack.us/img707/687/starteg.jpg drücken.
Die Signaturen werden herunter geladen.Der Scan beginnt automatisch.

Wenn der Scan beendet wurde

Klicke Finish.
Browser schließen.

Drücke bitte die http://larusso.trojaner-board.de/Images/windows.jpg + R Taste und kopiere folgenden Text in das Ausführen Fenster.

Code:

"%PROGRAMFILES%\Eset\Eset Online Scanner\log.txt"

Hinweis: Falls du ein 64-Bit-Windows einsetzt, lautet der Pfad so:

Code:

"%PROGRAMFILES(X86)%\Eset\Eset Online Scanner\log.txt"

Poste nun den Inhalt der log.txt.

Bitte alles nach Möglichkeit hier in CODE-Tags posten.

Wird so gemacht:

[code] hier steht das Log [/code]

Und das ganze sieht dann so aus:

Code:

hier steht das Log

SteGri

01.09.2012 17:57

Hallo, danke für die Rückmeldung! Ich habe das ESET vor knapp drei Stunden gestartet. Nach zwei Stunden war der Virus Scan bei 52% und ich hatte den Eindruck es tut sich nichts mehr. Dann hab ich auf Stop gedrückt und das Ganze von vorne laufen lassen. Nach einer weiteren Stunde ist er jetzt (nach Neustart) bei 33% und die "Files scanned" Zahl steigt weiterhin. Soll ich das Ganze einfach mal in Ruhe fünf Stunden laufen lassen, oder ist das nicht normal? Ich hab eigentlich nicht so viel Krempel auf meiner Festplatte...
Danke, SteGri

Irgendwie wärs mir ja lieber gewesen, das Ding hätte was gefunden als Erklärung, warum mein Thunderbird verschwunden ist und winlogon.exe plötzlich Probleme macht...
Was mach ich den jetzt?

Code:

ESETSmartInstaller@High as CAB hook log:

OnlineScanner64.ocx - registred OK

OnlineScanner.ocx - registred OK

esets_scanner_update returned -1 esets_gle=53251

esets_scanner_update returned -1 esets_gle=53251

# version=7

# iexplore.exe=9.00.8112.16421 (WIN7_IE9_RTM.110308-0330)

# OnlineScanner.ocx=1.0.0.6583

# api_version=3.0.2

# EOSSerial=

# end=finished

# remove_checked=false

# archives_checked=true

# unwanted_checked=true

# unsafe_checked=false

# antistealth_checked=true

# utc_time=2012-09-01 09:17:43

# local_time=2012-09-01 11:17:43 (+0100, Mitteleuropäische Sommerzeit)

# country="Germany"

# lang=1033

# osver=6.0.6002 NT Service Pack 2

# compatibility_mode=1792 16777215 100 0 3799320 3799320 0 0

# compatibility_mode=5892 16776573 100 56 0 184038996 0 0

# compatibility_mode=8192 67108863 100 0 8558 8558 0 0

# scanned=255575

# found=0

# cleaned=0

# scan_time=19172

Irgendwie wärs mir ja lieber gewesen, das Ding hätte was gefunden als Erklärung, warum mein Thunderbird verschwunden ist und winlogon.exe plötzlich Probleme macht...
Was mach' ich denn jetzt?

CHKDSK kann ich ja auch nicht ausführen...

"Office-PC" ist das Administrator-Konto:
(Ist der Rechtschreibfehler schon Grund zur Besorgnis?)

http://s8.postimage.org/q1fu7ngit/cmd.jpg

OK, habe cmd.exe in der Suche rechtsgeklickt, um echter Administrator-Administrator zu sein. Das ist die ganze Zeit von "beschädigt" und "verwaist" die Rede und dass chkdsk im gesicherten Modus nicht ausgeführt werden kann.

Ich habe mal das OTL laufen lassen:

OTL Logfile:

Code:

OTL logfile created on: 02.09.2012 11:26:04 - Run 1

OTL by OldTimer - Version 3.2.59.1     Folder = C:\Users\NAME\Desktop

64bit-Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation

Internet Explorer (Version = 9.0.8112.16421)

Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy

 

4,00 Gb Total Physical Memory | 2,56 Gb Available Physical Memory | 64,19% Memory free

8,16 Gb Paging File | 6,62 Gb Available in Paging File | 81,07% Paging File free

Paging file location(s): ?:\pagefile.sys [binary data]

 

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)

Drive C: | 78,12 Gb Total Space | 28,45 Gb Free Space | 36,42% Space Free | Partition Type: NTFS

Drive D: | 219,93 Gb Total Space | 129,31 Gb Free Space | 58,80% Space Free | Partition Type: NTFS

 

Computer Name: NAME | User Name: Office-PC | Logged in as Administrator.

Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans

Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

 
 ========== Processes (SafeList) ==========

 

PRC - [2012.09.02 11:25:36 | 000,598,528 | ---- | M] (OldTimer Tools) -- C:\Users\NAME\Desktop\OTL.exe

PRC - [2012.08.08 23:50:53 | 000,348,664 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe

PRC - [2012.07.27 22:51:26 | 000,063,960 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

PRC - [2012.05.02 01:42:28 | 000,086,224 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe

PRC - [2012.05.02 00:34:34 | 000,110,032 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe

 

 
 ========== Modules (No Company Name) ==========

 

 
 ========== Services (SafeList) ==========

 

SRV:64bit: - [2011.12.06 05:11:56 | 000,235,520 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)

SRV:64bit: - [2009.03.18 11:08:00 | 000,382,464 | ---- | M] (Marvell) [Auto | Running] -- C:\Windows\SysNative\ykx64mpcoinst.dll -- (yksvc)

SRV:64bit: - [2009.03.06 12:51:04 | 000,268,288 | ---- | M] (IDT, Inc.) [Auto | Running] -- C:\Windows\SysNative\DriverStore\FileRepository\stwrt64.inf_15f4e438\STacSV64.exe -- (STacSV)

SRV:64bit: - [2009.03.02 14:42:58 | 000,089,600 | ---- | M] (Andrea Electronics Corporation) [Auto | Running] -- C:\Windows\SysNative\DriverStore\FileRepository\stwrt64.inf_15f4e438\AESTSr64.exe -- (AESTFilters)

SRV - [2012.08.31 12:13:30 | 000,114,144 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)

SRV - [2012.07.27 22:51:26 | 000,063,960 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)

SRV - [2012.05.02 01:42:28 | 000,086,224 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)

SRV - [2012.05.02 00:34:34 | 000,110,032 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)

SRV - [2010.03.18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)

SRV - [2009.05.21 21:35:32 | 000,923,136 | ---- | M] (Hewlett-Packard Co.) [Auto | Running] -- C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL -- (HPSLPSVC)

SRV - [2009.03.30 06:42:14 | 000,066,368 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)

 

 
 ========== Driver Services (SafeList) ==========

 

DRV:64bit: - [2012.05.02 15:24:12 | 000,027,760 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\SysNative\DRIVERS\avkmgr.sys -- (avkmgr)

DRV:64bit: - [2012.04.27 10:20:04 | 000,132,832 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\SysNative\DRIVERS\avipbb.sys -- (avipbb)

DRV:64bit: - [2012.04.25 00:32:27 | 000,098,848 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\Windows\SysNative\DRIVERS\avgntflt.sys -- (avgntflt)

DRV:64bit: - [2012.02.29 15:52:46 | 000,016,384 | ---- | M] (Microsoft Corporation) [Recognizer | System | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)

DRV:64bit: - [2011.12.06 05:45:40 | 010,720,256 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\atikmdag.sys -- (amdkmdag)

DRV:64bit: - [2011.12.06 04:12:14 | 000,327,168 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\atikmpag.sys -- (amdkmdap)

DRV:64bit: - [2009.06.25 19:26:10 | 000,273,456 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\SynTP.sys -- (SynTP)

DRV:64bit: - [2009.03.18 11:08:00 | 000,406,016 | ---- | M] (Marvell) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\yk60x64.sys -- (yukonx64)

DRV:64bit: - [2009.03.09 17:00:00 | 000,311,456 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\OA013Vid.sys -- (OA013Vid)

DRV:64bit: - [2009.03.06 12:51:04 | 000,477,696 | ---- | M] (IDT, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\stwrt64.sys -- (STHDA)

DRV:64bit: - [2009.03.06 07:33:58 | 000,159,840 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\OA013Ufd.sys -- (OA013Ufd)

DRV:64bit: - [2008.11.17 08:29:14 | 001,526,776 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\bcmwl664.sys -- (BCM43XX)

 
 ========== Standard Registry (SafeList) ==========

 

 
 ========== Internet Explorer ==========

 

IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}

IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm

IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}

IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC

 

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1

IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}

IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC

IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

 
 ========== FireFox ==========

 

FF - prefs.js..browser.search.update: false

FF - prefs.js..browser.startup.homepage: "hxxp://www.google.de/webhp?hl=de&tab=ww"

 

 

FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_4_402_265.dll File not found

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_4_402_265.dll ()

FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\SysWOW64\Adobe\Director\np32dsw_1165635.dll (Adobe Systems, Inc.)

FF - HKLM\Software\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf: C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)

FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.2: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

 

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\smartwebprinting@hp.com: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2012.08.18 18:32:11 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 15.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012.08.31 12:13:31 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 15.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2012.08.20 14:29:35 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 14.0\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 14.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins

FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\smartwebprinting@hp.com: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2012.08.18 18:32:11 | 000,000,000 | ---D | M]

 

[2012.07.19 18:32:05 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Office-PC\AppData\Roaming\mozilla\Extensions

[2012.07.19 23:43:54 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Office-PC\AppData\Roaming\mozilla\Firefox\Profiles\p8o9pvz3.default\extensions

[2012.07.19 23:43:47 | 000,000,000 | ---D | M] (Flagfox) -- C:\Users\Office-PC\AppData\Roaming\mozilla\Firefox\Profiles\p8o9pvz3.default\extensions\{1018e4d6-728f-4b20-ad56-37578a4de76b}

[2012.07.19 23:43:50 | 000,000,000 | ---D | M] (FoxyTunes) -- C:\Users\Office-PC\AppData\Roaming\mozilla\Firefox\Profiles\p8o9pvz3.default\extensions\{463F6CA5-EE3C-4be1-B7E6-7FEE11953374}

[2012.07.19 23:43:55 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Users\Office-PC\AppData\Roaming\mozilla\Firefox\Profiles\p8o9pvz3.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}

[2012.07.19 23:43:47 | 000,000,000 | ---D | M] (ProxTube - Unblock YouTube) -- C:\Users\Office-PC\AppData\Roaming\mozilla\Firefox\Profiles\p8o9pvz3.default\extensions\ich@maltegoetz.de

[2012.07.19 18:31:17 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions

[2012.07.19 18:54:34 | 000,000,000 | ---D | M] (Flagfox) -- C:\USERS\NAME\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\P8O9PVZ3.DEFAULT\EXTENSIONS\{1018E4D6-728F-4B20-AD56-37578A4DE76B}

[2011.07.31 08:55:18 | 000,009,253 | ---- | M] () (No name found) -- C:\USERS\NAME\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\P8O9PVZ3.DEFAULT\EXTENSIONS\{2E17E2B2-B8D4-4A67-8D7B-FAFA6CC9D1D0}.XPI

[2012.07.19 18:54:35 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\USERS\NAME\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\P8O9PVZ3.DEFAULT\EXTENSIONS\{B9DB16A4-6EDC-47EC-A1F4-B86292ED211D}

[2011.10.08 09:22:44 | 000,456,652 | ---- | M] () (No name found) -- C:\USERS\NAME\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\P8O9PVZ3.DEFAULT\EXTENSIONS\{C07D1A49-9894-49FF-A594-38960EDE8FB9}.XPI

[2011.05.23 00:39:52 | 000,111,171 | ---- | M] () (No name found) -- C:\USERS\NAME\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\P8O9PVZ3.DEFAULT\EXTENSIONS\{C151D79E-E61B-4A90-A887-5A46D38FBA99}.XPI

[2012.03.05 17:28:38 | 000,634,964 | ---- | M] () (No name found) -- C:\USERS\NAME\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\P8O9PVZ3.DEFAULT\EXTENSIONS\{D10D0BF8-F5B5-C8B4-A8B2-2B9879E08C5D}.XPI

[2012.03.05 17:28:38 | 000,434,392 | ---- | M] () (No name found) -- C:\USERS\NAME\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\P8O9PVZ3.DEFAULT\EXTENSIONS\{D4DD63FA-01E4-46A7-B6B1-EDAB7D6AD389}.XPI

[2012.06.21 08:47:32 | 000,045,066 | ---- | M] () (No name found) -- C:\USERS\NAME\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\P8O9PVZ3.DEFAULT\EXTENSIONS\{EF522540-89F5-46B9-B6FE-1829E2B572C6}.XPI

[2012.06.21 08:47:22 | 000,208,985 | ---- | M] () (No name found) -- C:\USERS\NAME\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\P8O9PVZ3.DEFAULT\EXTENSIONS\EXIF_VIEWER@MOZILLA.DOSLASH.ORG.XPI

[2012.07.19 18:54:34 | 000,000,000 | ---D | M] (ProxTube - Unblock YouTube) -- C:\USERS\NAME\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\P8O9PVZ3.DEFAULT\EXTENSIONS\ICH@MALTEGOETZ.DE

[2012.06.21 08:47:22 | 000,159,870 | ---- | M] () (No name found) -- C:\USERS\NAME\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\P8O9PVZ3.DEFAULT\EXTENSIONS\STATUS4EVAR@CALIGONSTUDIOS.COM.XPI

[2012.08.31 12:13:30 | 000,266,720 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll

[2012.07.14 02:45:08 | 000,001,392 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom-de.xml

[2012.08.31 12:13:27 | 000,002,465 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml

[2012.07.14 02:45:08 | 000,001,153 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-de.xml

[2012.07.14 02:45:08 | 000,006,805 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\leo_ende_de.xml

[2012.07.14 02:45:08 | 000,001,178 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-de.xml

[2012.07.14 02:45:07 | 000,001,105 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml

 

O1 HOSTS File: ([2006.09.18 23:37:24 | 000,000,761 | ---- | M]) - C:\Windows\SysNative\drivers\etc\Hosts

O1 - Hosts: 127.0.0.1       localhost

O1 - Hosts: ::1             localhost

O4:64bit: - HKLM..\Run: [Skytel] C:\Programme\Realtek\Audio\HDA\SkyTel.exe (Realtek Semiconductor Corp.)

O4:64bit: - HKLM..\Run: [SysTrayApp] C:\Programme\IDT\WDM\sttray64.exe (IDT, Inc.)

O4:64bit: - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)

O4 - HKLM..\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)

O4 - HKLM..\Run: [avgnt] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)

O4 - HKCU..\RunOnce: [FlashPlayerUpdate] C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_11_3_300_265_ActiveX.exe (Adobe Systems Incorporated)

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1

O1364bit: - gopher Prefix: missing

O13 - gopher Prefix: missing

O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} hxxp://download.eset.com/special/eos/OnlineScanner.cab (OnlineScanner Control)

O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1

O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{D9FC19CB-C4D5-461B-8014-BB3676C5BCBE}: DhcpNameServer = 192.168.2.1

O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{F2D70B3E-F96F-498E-B943-16A117771B0A}: DhcpNameServer = 192.168.2.1

O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)

O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)

O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)

O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)

O24 - Desktop WallPaper: C:\Windows\Web\Wallpaper\img24.jpg

O24 - Desktop BackupWallPaper: C:\Windows\Web\Wallpaper\img24.jpg

O32 - HKLM CDRom: AutoRun - 1

O34 - HKLM BootExecute: (autocheck autochk *)

O35:64bit: - HKLM\..comfile [open] -- "%1" %*

O35:64bit: - HKLM\..exefile [open] -- "%1" %*

O35 - HKLM\..comfile [open] -- "%1" %*

O35 - HKLM\..exefile [open] -- "%1" %*

O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*

O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*

O37 - HKLM\...com [@ = comfile] -- "%1" %*

O37 - HKLM\...exe [@ = exefile] -- "%1" %*

O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)

O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

 
 ========== Files/Folders - Created Within 30 Days ==========

 

[2012.09.01 15:35:32 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ESET

[2012.09.01 13:26:01 | 000,000,000 | ---D | C] -- C:\Users\Office-PC\AppData\Roaming\vlc

[2012.09.01 12:18:47 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware (2)

[2012.08.21 15:24:03 | 000,000,000 | ---D | C] -- C:\Users\Office-PC\AppData\Roaming\pdfforge

[2012.08.21 15:24:00 | 000,137,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSMAPI32.OCX

[2012.08.21 15:23:59 | 001,071,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSCOMCTL.OCX

[2012.08.21 15:23:59 | 000,662,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSCOMCT2.OCX

[2012.08.21 15:23:59 | 000,095,744 | ---- | C] (pdfforge GbR) -- C:\Windows\SysNative\pdfcmon.dll

[2012.08.21 15:23:57 | 000,158,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSCMCDE.DLL

[2012.08.21 15:23:57 | 000,125,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\VB6DE.DLL

[2012.08.21 15:23:57 | 000,064,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSCC2DE.DLL

[2012.08.21 15:23:57 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSMPIDE.DLL

[2012.08.21 15:23:57 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\PDFCreator

[2012.08.20 14:29:10 | 000,000,000 | -HSD | C] -- C:\Config.Msi

[2012.08.20 03:01:00 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MSXML 4.0

[2012.08.18 19:19:11 | 000,000,000 | ---D | C] -- C:\ProgramData\WEBREG

[2012.08.18 19:17:08 | 000,000,000 | ---D | C] -- C:\Users\Office-PC\AppData\Roaming\HP

[2012.08.18 19:17:08 | 000,000,000 | ---D | C] -- C:\Users\Office-PC\AppData\Local\HP

[2012.08.18 18:30:01 | 000,000,000 | ---D | C] -- C:\ProgramData\HP Product Assistant

[2012.08.18 18:26:22 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP

[2012.08.18 18:25:16 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\HP

[2012.08.18 18:25:12 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Hewlett-Packard

[2012.08.18 18:24:52 | 000,000,000 | ---D | C] -- C:\Windows\hpoj4500g510n-z

[2012.08.18 18:22:32 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\HP

[2012.08.18 18:15:13 | 000,642,360 | ---- | C] (Hewlett-Packard) -- C:\Windows\SysNative\hpzids40.dll

[2012.08.18 18:15:09 | 000,136,704 | ---- | C] (Hewlett-Packard Company) -- C:\Windows\SysNative\hpf3l092.dll

[2012.08.18 18:13:40 | 000,902,656 | ---- | C] (Hewlett-Packard) -- C:\Windows\SysNative\hpwwiax9.dll

[2012.08.18 18:13:40 | 000,742,912 | ---- | C] (Hewlett-Packard Co.) -- C:\Windows\SysNative\hpwtscl5.dll

[2012.08.18 18:13:40 | 000,551,424 | ---- | C] (Hewlett-Packard) -- C:\Windows\SysNative\hppldcoi.dll

[2012.08.18 18:13:40 | 000,503,296 | ---- | C] (Hewlett-Packard Co.) -- C:\Windows\SysNative\hpwvst01.dll

[2012.08.18 18:13:14 | 000,000,000 | ---D | C] -- C:\ProgramData\HP

[2012.08.16 03:04:39 | 000,096,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll

[2012.08.16 03:04:38 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll

[2012.08.16 03:04:36 | 000,237,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\url.dll

[2012.08.16 03:04:36 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\url.dll

[2012.08.16 03:04:34 | 000,248,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll

[2012.08.16 03:04:34 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll

[2012.08.16 03:04:34 | 000,173,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieUnatt.exe

[2012.08.16 03:04:33 | 001,494,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl

[2012.08.16 03:04:33 | 001,427,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl

[2012.08.16 03:04:33 | 000,142,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe

[2012.08.16 03:04:32 | 002,312,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll

[2012.08.16 03:04:30 | 000,816,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll

[2012.08.16 03:04:30 | 000,717,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll

[2012.08.15 18:04:41 | 000,788,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\localspl.dll

[2012.08.15 18:04:40 | 000,623,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\localspl.dll

[2012.08.15 18:04:37 | 000,648,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netapi32.dll

[2012.08.10 09:52:58 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira

 
 ========== Files - Modified Within 30 Days ==========

 

[2012.09.02 11:27:31 | 001,653,338 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI

[2012.09.02 11:27:31 | 000,706,834 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat

[2012.09.02 11:27:31 | 000,661,788 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat

[2012.09.02 11:27:31 | 000,159,690 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat

[2012.09.02 11:27:31 | 000,130,674 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat

[2012.09.02 11:20:03 | 000,003,712 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0

[2012.09.02 11:20:03 | 000,003,712 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0

[2012.09.02 11:19:56 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat

[2012.09.01 12:19:51 | 000,000,976 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

[2012.08.26 11:38:58 | 000,696,520 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe

[2012.08.26 11:38:58 | 000,073,416 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl

[2012.08.19 10:01:17 | 000,255,776 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT

[2012.08.18 19:21:09 | 000,000,000 | ---- | M] () -- C:\Windows\hpqEmlSz.INI

[2012.08.18 19:16:55 | 000,241,119 | ---- | M] () -- C:\Windows\hpwins28.dat

[2012.08.18 18:27:41 | 000,002,002 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk

 
 ========== Files Created - No Company Name ==========

 

[2012.09.01 12:19:51 | 000,000,976 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

[2012.08.18 19:21:09 | 000,000,000 | ---- | C] () -- C:\Windows\hpqEmlSz.INI

[2012.08.18 18:30:43 | 000,000,891 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\I.R.I.S. OCR-Registrierung.lnk

[2012.08.18 18:27:41 | 000,002,002 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk

[2012.08.18 18:17:13 | 000,241,119 | ---- | C] () -- C:\Windows\hpwins28.dat

[2012.07.20 01:23:55 | 000,117,248 | ---- | C] () -- C:\Windows\SysWow64\EhStorAuthn.dll

[2012.07.20 01:22:57 | 000,107,612 | ---- | C] () -- C:\Windows\SysWow64\StructuredQuerySchema.bin

[2012.07.20 01:22:00 | 000,368,640 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll

[2012.07.19 23:44:05 | 000,007,680 | ---- | C] () -- C:\Users\Office-PC\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

[2012.07.19 22:09:30 | 001,633,344 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI

[2012.07.19 21:14:07 | 000,018,904 | ---- | C] () -- C:\Windows\SysWow64\StructuredQuerySchemaTrivial.bin

[2012.07.19 19:17:27 | 000,019,968 | ---- | C] () -- C:\Windows\SysWow64\ARP.EXE

[2012.07.19 19:17:27 | 000,008,704 | ---- | C] () -- C:\Windows\SysWow64\HOSTNAME.EXE

[2012.07.19 18:16:37 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin

[2012.07.19 16:58:11 | 000,000,732 | ---- | C] () -- C:\Users\Office-PC\AppData\Local\d3d9caps64.dat

[2011.12.05 22:04:00 | 000,059,904 | ---- | C] () -- C:\Windows\SysWow64\OpenVideo.dll

[2011.12.05 22:03:52 | 000,054,784 | ---- | C] () -- C:\Windows\SysWow64\OVDecode.dll

[2011.09.13 01:06:16 | 000,003,917 | ---- | C] () -- C:\Windows\SysWow64\atipblag.dat
 

< End of report >

--- --- ---

[/code]

OTL EXTRAS Logfile:

Code:

OTL Extras logfile created on: 02.09.2012 11:26:04 - Run 1

OTL by OldTimer - Version 3.2.59.1     Folder = C:\Users\NAME\Desktop

64bit-Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation

Internet Explorer (Version = 9.0.8112.16421)

Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy

 

4,00 Gb Total Physical Memory | 2,56 Gb Available Physical Memory | 64,19% Memory free

8,16 Gb Paging File | 6,62 Gb Available in Paging File | 81,07% Paging File free

Paging file location(s): ?:\pagefile.sys [binary data]

 

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)

Drive C: | 78,12 Gb Total Space | 28,45 Gb Free Space | 36,42% Space Free | Partition Type: NTFS

Drive D: | 219,93 Gb Total Space | 129,31 Gb Free Space | 58,80% Space Free | Partition Type: NTFS

 

Computer Name: NAME | User Name: Office-PC | Logged in as Administrator.

Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans

Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

 
 ========== Extra Registry (SafeList) ==========

 

 
 ========== File Associations ==========

 
 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]

.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]

.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)

 

[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]

.html [@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)

 
 ========== Shell Spawning ==========

 
 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]

batfile [open] -- "%1" %*

cmdfile [open] -- "%1" %*

comfile [open] -- "%1" %*

exefile [open] -- "%1" %*

helpfile [open] -- Reg Error: Key error.

htmlfile [edit] -- Reg Error: Key error.

htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"

inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)

InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)

InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)

piffile [open] -- "%1" %*

regfile [merge] -- Reg Error: Key error.

scrfile [config] -- "%1"

scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l

scrfile [open] -- "%1" /S

txtfile [edit] -- Reg Error: Key error.

Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1

Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()

Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)

Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()

Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)

Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)

Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]

batfile [open] -- "%1" %*

cmdfile [open] -- "%1" %*

comfile [open] -- "%1" %*

cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)

exefile [open] -- "%1" %*

helpfile [open] -- Reg Error: Key error.

htmlfile [edit] -- Reg Error: Key error.

htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"

inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)

piffile [open] -- "%1" %*

regfile [merge] -- Reg Error: Key error.

scrfile [config] -- "%1"

scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l

scrfile [open] -- "%1" /S

txtfile [edit] -- Reg Error: Key error.

Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1

Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()

Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)

Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()

Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)

Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)

Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

 
 ========== Security Center Settings ==========

 
 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

"cval" = 1

 
 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

 
 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

"AntiVirusOverride" = 0

"AntiSpywareOverride" = 0

"FirewallOverride" = 0

"VistaSp1" = 9F 9E 16 8C DC 5B C8 01  [binary data]

"VistaSp2" = 3C D1 D1 D6 68 67 CD 01  [binary data]

 
 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

"oobe_av" = 1

 
 ========== Firewall Settings ==========

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

"EnableFirewall" = 1

"DisableNotifications" = 0

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]

"EnableFirewall" = 1

"DisableNotifications" = 0

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]

"EnableFirewall" = 1

"DisableNotifications" = 0

 
 ========== Authorized Applications List ==========

 

 
 ========== Vista Active Open Ports Exception List ==========

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]

"{0AC5F33E-7313-46AA-B497-0C086F5B50D5}" = rport=445 | protocol=6 | dir=out | app=system | 

"{134013AF-C3C0-4DF8-91EA-35BF917EB4A5}" = lport=139 | protocol=6 | dir=in | app=system | 

"{3E154840-7BD7-419E-BAFC-337D8391B4A8}" = rport=138 | protocol=17 | dir=out | app=system | 

"{4665FA82-F3B5-44B8-A8D8-4E290188A783}" = rport=139 | protocol=6 | dir=out | app=system | 

"{5179F783-FDCD-4CFC-842D-8578A89FBF9B}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 | 

"{53299A55-9984-4F9F-8EE2-43AB6A57E863}" = lport=138 | protocol=17 | dir=in | app=system | 

"{60A1C472-CB57-4D1F-8C08-5836CAA51E00}" = lport=808 | protocol=6 | dir=in | svc=nettcpactivator | app=c:\windows\microsoft.net\framework64\v4.0.30319\smsvchost.exe | 

"{74A76AE6-22E4-4269-81EC-234BE0EACAAB}" = lport=137 | protocol=17 | dir=in | app=system | 

"{AEC90E70-DF14-483D-B3CF-FC7D0235D527}" = rport=137 | protocol=17 | dir=out | app=system | 

"{B0036124-4FCA-4819-8301-4F5269CA2499}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe | 

"{CFA4AC50-C147-41E3-852C-595B402391E6}" = lport=445 | protocol=6 | dir=in | app=system | 

 
 ========== Vista Active Application Exception List ==========

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]

"{063AFEB5-8107-47FC-A5FC-317CFDD98F61}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqusgh.exe | 

"{12DE57D9-333B-4C2F-BE1A-A2600C9034A4}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hposid01.exe | 

"{1C895038-D33D-493C-A640-87C12B83C655}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpofxm08.exe | 

"{26B36055-B04B-4932-97E1-200890664827}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 | 

"{306C60FE-1314-4767-BA22-322B8EB6F7DF}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpiscnapp.exe | 

"{370899EC-2940-41C1-88F2-F4EBB85E206C}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hposfx08.exe | 

"{45C420A0-AD61-412D-B1B8-E090E8DD173E}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqtra08.exe | 

"{52B47930-E75B-42DD-AA3A-33420407F364}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 | 

"{69910973-E14E-4D21-AC2B-2091C6A97B02}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqgplgtupl.exe | 

"{73F4FFC7-8057-44AB-965D-FF34A5543D5F}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqfxt08.exe | 

"{7D8ED491-7225-4E4F-801A-55705F56240D}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqkygrp.exe | 

"{8584FF35-7152-4956-95B6-751795244822}" = dir=in | app=c:\program files (x86)\common files\apple\apple application support\webkit2webprocess.exe | 

"{8B12A310-9D05-4843-AA83-C0B0051D4FF1}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqste08.exe | 

"{92D5D0EB-76F3-495A-BE28-65C8EDA4A6EC}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqusgm.exe | 

"{A5608E7C-E5CE-47F4-9A5C-4E8FB82ED519}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpoews01.exe | 

"{B7BDBE64-EE9D-49CD-BC7A-8D6DEE20ED4F}" = dir=in | app=c:\program files (x86)\hp\hp software update\hpwucli.exe | 

"{B8C82B77-DC11-4805-A825-22CA0E1067A5}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpofxs08.exe | 

"{BD1F1DC5-C43F-4BFC-A226-ABBADC60ACE0}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqgpc01.exe | 

"{C1CC6AEC-18FD-4C6F-A713-09979622614D}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 | 

"{C2ED3477-6185-47EB-8ED8-C7CD7F4DCE77}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpfccopy.exe | 

"{DD0E6D38-FDBD-40BC-9115-7278F3EEB1FB}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 | 

"{E9C125B0-1729-499D-854E-5A414F9053E8}" = dir=in | app=c:\program files (x86)\hp\digital imaging\smart web printing\smartwebprintexe.exe | 

"{FE355C85-77FD-4DFF-8073-5FF44962FA4A}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpzwiz01.exe | 

"TCP Query User{8136C421-618A-4412-BD6C-829E8B4AED2B}C:\program files (x86)\mozilla firefox\plugin-container.exe" = protocol=6 | dir=in | app=c:\program files (x86)\mozilla firefox\plugin-container.exe | 

"UDP Query User{1CEEE0D9-6628-482F-90BF-F27E5393B243}C:\program files (x86)\mozilla firefox\plugin-container.exe" = protocol=17 | dir=in | app=c:\program files (x86)\mozilla firefox\plugin-container.exe | 

 
 ========== HKEY_LOCAL_MACHINE Uninstall List ==========

 

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

"{052FDD78-A6EA-3187-8386-C82F4CA3A929}" = Microsoft .NET Framework 3.5 Language Pack SP1 - deu

"{0D98B285-0777-B3B7-7A3D-9C85422203B9}" = ccc-utility64

"{503F672D-6C84-448A-8F8F-4BC35AC83441}" = AMD APP SDK Runtime

"{55D55008-E5F6-47D6-B16F-B2A40D4D145F}" = 64 Bit HP CIO Components Installer

"{6E5159B4-A519-41EF-80EF-AD58371515DF}" = Eraser 6.0.10.2620

"{7E0E61CC-1C99-429D-BEA7-C4DD5B898D2A}" = HP Officejet 4500 G510n-z

"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17

"{8924F1FE-8AC5-C2AE-59EF-C5D65B226933}" = AMD Catalyst Install Manager

"{8E34682C-8118-31F1-BC4C-98CD9675E1C2}" = Microsoft .NET Framework 4 Extended

"{A4DDB2AB-ECCD-4C3A-8633-77D5A1A0E542}" = Network64

"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1

"{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}" = Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319

"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile

"Creative OA013" = Integrated Webcam Driver (1.00.04.0310)  

"HP Document Manager" = HP Document Manager 2.0

"HP Imaging Device Functions" = HP Imaging Device Functions 13.0

"HP Smart Web Printing" = HP Smart Web Printing 4.5

"HP Solution Center & Imaging Support Tools" = HP Solution Center 13.0

"HPExtendedCapabilities" = HP Customer Participation Program 13.0

"HPOCR" = OCR Software by I.R.I.S. 13.0

"Microsoft .NET Framework 3.5 Language Pack SP1 - deu" = Microsoft .NET Framework 3.5 Language Pack SP1 - DEU

"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1

"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile

"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended

"Shop for HP Supplies" = Shop for HP Supplies

"SynTPDeinstKey" = Dell Touchpad

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

"{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}" = PDFCreator

"{06870F63-4D1C-171F-9552-368D3890D92F}" = CCC Help French

"{0E64B098-8018-4256-BA23-C316A43AD9B0}" = QuickTime

"{0F367CA3-3B2F-43F9-A44A-25A8EE69E45D}" = Scan

"{14CE04AF-0EBC-B865-382F-1FB466CAC301}" = CCC Help English

"{175F0111-2968-4935-8F70-33108C6A4DE3}" = MarketResearch

"{1DBC5882-96E2-3A01-A32C-9B6F6EF6CF25}" = CCC Help Korean

"{1F36B20F-7408-EC75-2825-E9FE81B0339D}" = CCC Help Norwegian

"{21A2F5EE-1DC5-488A-BE7E-E526F8C61488}" = DeviceDiscovery

"{2EEA7AA4-C203-4b90-A34F-19FB7EF1C81C}" = BufferChm

"{30DAAF05-3679-C10C-953C-BB422FCDF557}" = CCC Help Swedish

"{3A4D5E2D-988D-4ee9-8E7F-3AC200A2B8F5}" = 4500G510nz_Software_Min

"{428536FB-25A0-8531-75EF-D7A7C340B0A4}" = Catalyst Control Center

"{43CDF946-F5D9-4292-B006-BA0D92013021}" = WebReg

"{440B915A-0C85-45DB-92AE-75AE14704A64}" = Fax

"{4A70EF07-7F88-4434-BB61-D1DE8AE93DD4}" = SolutionCenter

"{4BA6B7C9-65AE-BE8B-687A-6F1A2D7F9705}" = CCC Help Czech

"{4C552FD3-2CCD-4E00-AC64-0681DBB3F8B5}" = OpenOffice.org 3.4

"{4C8E1E1B-175F-AF47-8B21-E12C7C8B5D40}" = CCC Help Thai

"{4EAF46A2-DB90-6B67-F640-5CC876A2B5C4}" = CCC Help Greek

"{5B05FF91-F20C-4832-A8DE-E1912639C17C}" = 4500G510nz

"{5D5B8455-50E0-F94A-4C82-0F9303BB4C0E}" = CCC Help Danish

"{612C34C7-5E90-47D8-9B5C-0F717DD82726}" = swMSM

"{63FF21C9-A810-464F-B60A-3111747B1A6D}" = GPBaseService2

"{68A10D12-0D0F-4212-BDE6-D87FAD32A8FA}" = SmartWebPrinting

"{690879A5-18EF-447B-98D6-B699D51008AB}" = 4500_G510nz_Help

"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin

"{6B2FFB21-AC88-45C3-9A7D-4BB3E744EC91}" = HPSSupply

"{6BBA26E9-AB03-4FE7-831A-3535584CA002}" = Toolbox

"{7059BDA7-E1DB-442C-B7A1-6144596720A4}" = HP Update

"{7765BB73-D985-42C9-C7EE-AB434D59429F}" = CCC Help Chinese Traditional

"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update

"{7ADFB885-8E98-6AAE-8687-D6EFB5127F6B}" = Catalyst Control Center Graphics Previews Common

"{7F7C616E-6971-77D9-7D59-82DC35DF81AC}" = CCC Help Russian

"{92A51949-EE4C-466D-AAF0-99E74A49A63F}" = DocMgr

"{9B362566-EC1B-4700-BB9C-EC661BDE2175}" = DocProc

"{9FA5B08F-9162-BCCB-AFAC-28DF1751BEC3}" = Catalyst Control Center Localization All

"{AC76BA86-7AD7-1031-7B44-AA1000000001}" = Adobe Reader X (10.1.4) - Deutsch

"{AE8705FB-E13C-40A9-8A2D-68D6733FBFC2}" = Status

"{AF859F36-5F97-F6EC-A617-62771A8B4FDC}" = CCC Help Finnish

"{BB095F3E-0A7D-7DD4-B2A8-47CB12E416B0}" = CCC Help Japanese

"{BC71B06F-BFAE-6A73-091C-F18ACF00A04C}" = CCC Help Italian

"{BD7204BA-DD64-499E-9B55-6A282CDF4FA4}" = Destinations

"{BDCBA80C-A3BD-9DA5-E43F-EBBBE779C032}" = CCC Help Hungarian

"{C43326F5-F135-4551-8270-7F7ABA0462E1}" = HPProductAssistant

"{CEEA6219-8792-3E40-D361-4FB5F0FBBB0F}" = CCC Help Portuguese

"{CF053286-7F4C-CAFB-616B-58EC562BB28E}" = CCC Help Chinese Standard

"{D07BB56A-7DB4-4564-A1F9-EBCE75FBE3C6}" = Catalyst Control Center InstallProxy

"{D3689EED-3943-9E90-1D65-D2246EB58AD1}" = CCC Help Turkish

"{DBA5EE42-A143-A658-9F86-C611BFDBEFCA}" = CCC Help Dutch

"{DC0A5F99-FD66-433F-9D3A-05DCBA64BE42}" = TrayApp

"{DF6A13C0-77DF-41FE-BD05-6D5201EB0CE7}_is1" = Auslogics Disk Defrag

"{E19490CD-5380-4F37-B0A7-624D635605DC}" = Catalyst Control Center - Branding

"{EAF0F475-CFE2-9F4D-F26A-875FF09AD40E}" = CCC Help Spanish

"{EB879750-CCBD-4013-BFD5-0294D4DA5BD0}" = Apple Application Support

"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219

"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver

"{F1F1CCD6-34FE-81C6-CE0C-F22695E6409F}" = CCC Help German

"{F71A71E1-285C-95CE-A8F7-231E3827138E}" = CCC Help Polish

"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX

"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin

"Adobe Shockwave Player" = Adobe Shockwave Player 11.6

"Avidemux 2.5" = Avidemux 2.5 (32-bit)

"Avira AntiVir Desktop" = Avira Free Antivirus

"ESET Online Scanner" = ESET Online Scanner v3

"Foxit Reader_is1" = Foxit Reader

"HDD-Booster_is1" = HDD-Booster v1.2

"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware Version 1.62.0.1300

"Mozilla Firefox 15.0 (x86 de)" = Mozilla Firefox 15.0 (x86 de)

"Mozilla Thunderbird 14.0 (x86 de)" = Mozilla Thunderbird 14.0 (x86 de)

"MozillaMaintenanceService" = Mozilla Maintenance Service

"VLC media player" = VLC media player 2.0.2

 
 ========== Last 20 Event Log Errors ==========

 

[ Application Events ]

Error - 01.09.2012 18:02:53 | Computer Name = NAME | Source = VSS | ID = 12293

Description = 

 

Error - 01.09.2012 18:02:53 | Computer Name = NAME | Source = System Restore | ID = 8193

Description = 

 

Error - 01.09.2012 18:02:53 | Computer Name = NAME | Source = System Restore | ID = 8210

Description = 

 

Error - 01.09.2012 19:46:48 | Computer Name = NAME | Source = EventSystem | ID = 4609

Description = 

 

Error - 01.09.2012 19:59:49 | Computer Name = NAME | Source = Microsoft-Windows-CAPI2 | ID = 131328

Description = 

 

Error - 01.09.2012 20:00:08 | Computer Name = NAME | Source = VSS | ID = 12293

Description = 

 

Error - 01.09.2012 20:01:48 | Computer Name = NAME | Source = Microsoft-Windows-CAPI2 | ID = 131328

Description = 

 

Error - 02.09.2012 05:21:35 | Computer Name = NAME | Source = WinMgmt | ID = 10

Description = 

 

Error - 02.09.2012 05:21:38 | Computer Name = NAME | Source = Microsoft-Windows-CAPI2 | ID = 131328

Description = 

 

Error - 02.09.2012 05:25:50 | Computer Name = NAME | Source = Microsoft-Windows-CAPI2 | ID = 131328

Description = 

 

[ System Events ]

Error - 22.07.2012 07:00:59 | Computer Name = NAME | Source = Microsoft-Windows-Servicing | ID = 4385

Description = 

 

Error - 22.07.2012 07:00:59 | Computer Name = NAME | Source = Microsoft-Windows-Servicing | ID = 4385

Description = 

 

Error - 22.07.2012 07:00:59 | Computer Name = NAME | Source = Microsoft-Windows-Servicing | ID = 4375

Description = 

 

Error - 22.07.2012 07:00:59 | Computer Name = NAME | Source = Microsoft-Windows-Servicing | ID = 4375

Description = 

 

Error - 22.07.2012 07:00:59 | Computer Name = NAME| Source = Microsoft-Windows-Servicing | ID = 4385

Description = 

 

Error - 22.07.2012 07:00:59 | Computer Name = NAME | Source = Microsoft-Windows-Servicing | ID = 4375

Description = 

 

Error - 22.07.2012 07:00:59 | Computer Name = NAME | Source = Microsoft-Windows-Servicing | ID = 4385

Description = 

 

Error - 22.07.2012 07:00:59 | Computer Name = NAME | Source = Microsoft-Windows-Servicing | ID = 4375

Description = 

 

Error - 22.07.2012 07:00:59 | Computer Name = NAME | Source = Microsoft-Windows-Servicing | ID = 4385

Description = 

 

Error - 22.07.2012 07:00:59 | Computer Name = NAME | Source = Microsoft-Windows-Servicing | ID = 4385

Description = 

 

 

< End of report >

--- --- ---
[/code]

:dummguck:

Ich hab noch mal geschaut: es ist als ob jemand systematisch alle Thunderbird-Dateien gelöscht hätte. Da wo die Hauptordner liegen ("C:\Users\USERNAME\AppData\Roaming\Thunderbird" und "C:\Programme(x86)\Mozilla Thunderbird") liegen offenbar leere Ordner, auf die nicht zugegriffen werden kann und deren Änderungsdatum mit Mitte Juli angegeben ist, als ich das Betriebssystem neu aufgespielt hatte. Den Thunderbird habe ich bis gestern benutzt, das Änderungsdatum müsste also 1.9.2012 lauten.

http://s11.postimage.org/6hipxdjmr/md_Vre.jpg

http://s17.postimage.org/kqferfahb/Unbenannt.jpg

cosinus

03.09.2012 14:45

Die Benutzerkontensteuerung ist schon seit Vista da! Das ist nichts neues, dass man für Sachen wie chkdsk die Eingabeaufforderung per Rechtsklick als Administrator ausführen muss und erst dann die Prüfung machen kann!

Und einfach nur chkdsk fürht man nicht aus! Ohne die Option /f werden keine Fehler behoben!

chkdsk der Systempartition unter Windows Vista

1. Klick mit rechts auf einen freien Bereich auf dem Desktop und sag "Neu, Verknüpfung erstellen"
2. Tipp als Ziel cmd.exe ein und bestätige mit OK, eine neue Verknüpfung zur Konsole auf dem Desktop müsste sich nun befinden
3. Falls dem so ist, diese neue Verknüpfung rechtsklicken => Als Administrator ausführen => Sicherheitsabfrage von Vista Benutzerkontensteuerung ggf. bestätigen => schwarze Eingabeaufforderung öffnet sich
4. Tipp dort ein: chkdsk c: /f /r /v und bestätige mit enter.
5. Die folgende Abfrage mit j bestätigen und enter drücken.
6. Windows neu starten, es sollte ein Hinweis auf eine geplante Datenträgerüberprüfung erscheinen - die Zeit verstreichen lassen, keine Taste drücken!!
7. Abwarten bis der Vorgang abgeschlossen ist. Bei großen Partitionen kann es u.U. recht lange dauern. Windows bootet automatisch neu.

SteGri

03.09.2012 23:04

Vielen Dank für die Rückmeldung!
Ich hatte eigentlich Angst, dass mein Thread so weit nach hinten rutscht, dass sich keiner mehr dafür interessiert.

Ich habe mich im Administrator-Konto angemeldet und die Schritte 1) bis 6) EXAKT wie beschrieben ausgeführt.
C: ist auch das Laufwerk, auf dem das Betriebssystem und die Programme aufgespielt sind.

http://s15.postimage.org/eupdosd5n/CMD_Unbenannt.jpg

Nach dem Neustart kam sofort die folgende Antwort und ca. fünf Sekunden später ist der Computer im alten, beschädigten Zustand hochgefahren:

http://s15.postimage.org/e3wnj0asb/20120903_235428.jpg

"Volume kann für direkten Zugriff nicht geöffner werden."

Ich hab das Ganze dreimal durchgespielt, immer mit dem gleichen Ergebnis. Hab ich was falsch gemacht?

Danke,
SteGri

PS: Ich habe festgestellt, dass in OpenOffice Writer plötzlich DejaVu Serif als Standardschrift eingestellt ist. War bislang immer Times New Roman. Hat das was mit der Sache zu tun? Mein Online-Banking habe ich sicherheitshalber bislang nicht betrieben... Ich hätte nur gerne meinen Thunderbird-Ordner von 5GB wieder zurück, dann würde ich den Computer auch liebend gerne platt machen, falls Virus/Trojaner-Alarm besteht!

cosinus

04.09.2012 13:39

Mit einem sauberen 2. Rechner eine OTLPE-CD erstellen und den möglicherweise infizierten bzw. defekten Rechner dann von dieser CD booten:
Unter OTLPE kannst du auch über die EIngabeaufforderung die Systempartition prüfen. Da ist kein Neustart notwendig, denn die Systempartition C ist kein Systemlaufwerk für die Live-CD

Falls Du kein Brennprogramm installiert hast, lade dir bitte ISOBurner herunter. Das Programm wird Dir erlauben, OTLPE auf eine CD zu brennen und sie bootfähig zu machen. Du brauchst das Tool nur zu installieren, der Rest läuft automatisch => Wie brenne ich eine ISO Datei auf CD/DVD.

Lade OTLPENet.exe von OldTimer herunter und speichere sie auf Deinem Desktop. Anmerkung: Die Datei ist ca. 120 MB groß und es wird bei langsamer Internet-Verbindung ein wenig dauern, bis Du sie runtergeladen hast.
Wenn der Download fertig ist, mache einen Doppelklick auf die Datei und beantworte die Frage "Do you want to burn the CD?" mit Yes.
Lege eine leere CD in Deinen Brenner.
ImgBurn (oder Dein Brennprogramm) wird das Archiv extrahieren und OTLPE Network auf die CD brennen.
Wenn der Brenn-Vorgang abgeschlossen ist, wirst Du eine Dialogbox sehen => "Operation successfully completed".
Du kannst nun die Fenster des Brennprogramms schließen.

Nun boote von der OTLPE CD. Hinweis: Wie boote ich von CD

Dein System sollte nach einigen Minuten den REATOGO-X-PE Desktop anzeigen.
Mache einen Doppelklick auf das OTLPE Icon.
Hinweis: Damit OTLPE auch das richtige installierte Windows scant, musst du den Windows-Ordner des auf der Platte installierten Windows auswählen, einfach nur C: auswählen gibt einen Fehler!
Wenn Du gefragt wirst "Do you wish to load the remote registry", dann wähle Yes.
Wenn Du gefragt wirst "Do you wish to load remote user profile(s) for scanning", dann wähle Yes.
Vergewissere Dich, dass die Box "Automatically Load All Remaining Users" gewählt ist und drücke OK.
OTLpe sollte nun starten.
Drücke Run Scan, um den Scan zu starten.
Wenn der Scan fertig ist, werden die Dateien C:\OTL.Txt und C:\Extras.Txt erstellt
Kopiere diese Datei auf Deinen USB-Stick, wenn Du keine Internetverbindung auf diesem System hast.
Bitte poste den Inhalt von C:\OTL.Txt und Extras.Txt.

SteGri

04.09.2012 19:07

:dankeschoen:

Darf ich kurz fragen: Wenn ich das alles mache wie beschrieben, gibts dann überhaupt eine Chance, den Thunderbird zu retten, oder muss ich danach das System sowieso neu aufspielen, weil eh' alles verloren ist? Ich hab nämlich leider keine anderen Rechner hier rumstehen, das heißt ich müsste erst jedanden anhauen, der das mit dem OTLPENET für mich macht, wenn ich den "infizierten" Computer dafür nicht benutzen soll... :heulen:

Danke,
SteGri

cosinus

04.09.2012 19:53

Ich bin kein Hellseher! :glaskugel:

Man muss es versuchen und dann weitersehen!

SteGri

08.09.2012 00:08

Hallo, guten Abend.

So, hallo.
Ich habe alles gemacht wie beschrieben: OTLP auf anderem Rechner heruntergeladen und auf bootfähige CD gebrannt, mit dieser CD meinen Rechner gestartet und das Programm laufen lassen.
Allerdings hat mich das Programm nicht gefragt: "Do you wish to load the remote registry?" wies in der Anleitung steht...?

Hier sind die Inhalte der beiden .txt-Dateien:

OTL

OTL Logfile:

Code:

OTL logfile created on: 02.09.2012 11:26:04 - Run 1

OTL by OldTimer - Version 3.2.59.1     Folder = C:\Users\NAME\Desktop

64bit-Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation

Internet Explorer (Version = 9.0.8112.16421)

Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy

 

4,00 Gb Total Physical Memory | 2,56 Gb Available Physical Memory | 64,19% Memory free

8,16 Gb Paging File | 6,62 Gb Available in Paging File | 81,07% Paging File free

Paging file location(s): ?:\pagefile.sys [binary data]

 

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)

Drive C: | 78,12 Gb Total Space | 28,45 Gb Free Space | 36,42% Space Free | Partition Type: NTFS

Drive D: | 219,93 Gb Total Space | 129,31 Gb Free Space | 58,80% Space Free | Partition Type: NTFS

 

Computer Name: NAME | User Name: Office-PC | Logged in as Administrator.

Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans

Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

 
 ========== Processes (SafeList) ==========

 

PRC - [2012.09.02 11:25:36 | 000,598,528 | ---- | M] (OldTimer Tools) -- C:\Users\NAME\Desktop\OTL.exe

PRC - [2012.08.08 23:50:53 | 000,348,664 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe

PRC - [2012.07.27 22:51:26 | 000,063,960 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

PRC - [2012.05.02 01:42:28 | 000,086,224 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe

PRC - [2012.05.02 00:34:34 | 000,110,032 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe

 

 
 ========== Modules (No Company Name) ==========

 

 
 ========== Services (SafeList) ==========

 

SRV:64bit: - [2011.12.06 05:11:56 | 000,235,520 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)

SRV:64bit: - [2009.03.18 11:08:00 | 000,382,464 | ---- | M] (Marvell) [Auto | Running] -- C:\Windows\SysNative\ykx64mpcoinst.dll -- (yksvc)

SRV:64bit: - [2009.03.06 12:51:04 | 000,268,288 | ---- | M] (IDT, Inc.) [Auto | Running] -- C:\Windows\SysNative\DriverStore\FileRepository\stwrt64.inf_15f4e438\STacSV64.exe -- (STacSV)

SRV:64bit: - [2009.03.02 14:42:58 | 000,089,600 | ---- | M] (Andrea Electronics Corporation) [Auto | Running] -- C:\Windows\SysNative\DriverStore\FileRepository\stwrt64.inf_15f4e438\AESTSr64.exe -- (AESTFilters)

SRV - [2012.08.31 12:13:30 | 000,114,144 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)

SRV - [2012.07.27 22:51:26 | 000,063,960 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)

SRV - [2012.05.02 01:42:28 | 000,086,224 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)

SRV - [2012.05.02 00:34:34 | 000,110,032 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)

SRV - [2010.03.18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)

SRV - [2009.05.21 21:35:32 | 000,923,136 | ---- | M] (Hewlett-Packard Co.) [Auto | Running] -- C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL -- (HPSLPSVC)

SRV - [2009.03.30 06:42:14 | 000,066,368 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)

 

 
 ========== Driver Services (SafeList) ==========

 

DRV:64bit: - [2012.05.02 15:24:12 | 000,027,760 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\SysNative\DRIVERS\avkmgr.sys -- (avkmgr)

DRV:64bit: - [2012.04.27 10:20:04 | 000,132,832 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\SysNative\DRIVERS\avipbb.sys -- (avipbb)

DRV:64bit: - [2012.04.25 00:32:27 | 000,098,848 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\Windows\SysNative\DRIVERS\avgntflt.sys -- (avgntflt)

DRV:64bit: - [2012.02.29 15:52:46 | 000,016,384 | ---- | M] (Microsoft Corporation) [Recognizer | System | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)

DRV:64bit: - [2011.12.06 05:45:40 | 010,720,256 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\atikmdag.sys -- (amdkmdag)

DRV:64bit: - [2011.12.06 04:12:14 | 000,327,168 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\atikmpag.sys -- (amdkmdap)

DRV:64bit: - [2009.06.25 19:26:10 | 000,273,456 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\SynTP.sys -- (SynTP)

DRV:64bit: - [2009.03.18 11:08:00 | 000,406,016 | ---- | M] (Marvell) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\yk60x64.sys -- (yukonx64)

DRV:64bit: - [2009.03.09 17:00:00 | 000,311,456 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\OA013Vid.sys -- (OA013Vid)

DRV:64bit: - [2009.03.06 12:51:04 | 000,477,696 | ---- | M] (IDT, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\stwrt64.sys -- (STHDA)

DRV:64bit: - [2009.03.06 07:33:58 | 000,159,840 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\OA013Ufd.sys -- (OA013Ufd)

DRV:64bit: - [2008.11.17 08:29:14 | 001,526,776 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\bcmwl664.sys -- (BCM43XX)

 
 ========== Standard Registry (SafeList) ==========

 

 
 ========== Internet Explorer ==========

 

IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}

IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm

IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}

IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC

 

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1

IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}

IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC

IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

 
 ========== FireFox ==========

 

FF - prefs.js..browser.search.update: false

FF - prefs.js..browser.startup.homepage: "hxxp://www.google.de/webhp?hl=de&tab=ww"

 

 

FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_4_402_265.dll File not found

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_4_402_265.dll ()

FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\SysWOW64\Adobe\Director\np32dsw_1165635.dll (Adobe Systems, Inc.)

FF - HKLM\Software\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf: C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)

FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.2: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

 

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\smartwebprinting@hp.com: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2012.08.18 18:32:11 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 15.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012.08.31 12:13:31 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 15.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2012.08.20 14:29:35 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 14.0\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 14.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins

FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\smartwebprinting@hp.com: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2012.08.18 18:32:11 | 000,000,000 | ---D | M]

 

[2012.07.19 18:32:05 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Office-PC\AppData\Roaming\mozilla\Extensions

[2012.07.19 23:43:54 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Office-PC\AppData\Roaming\mozilla\Firefox\Profiles\p8o9pvz3.default\extensions

[2012.07.19 23:43:47 | 000,000,000 | ---D | M] (Flagfox) -- C:\Users\Office-PC\AppData\Roaming\mozilla\Firefox\Profiles\p8o9pvz3.default\extensions\{1018e4d6-728f-4b20-ad56-37578a4de76b}

[2012.07.19 23:43:50 | 000,000,000 | ---D | M] (FoxyTunes) -- C:\Users\Office-PC\AppData\Roaming\mozilla\Firefox\Profiles\p8o9pvz3.default\extensions\{463F6CA5-EE3C-4be1-B7E6-7FEE11953374}

[2012.07.19 23:43:55 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Users\Office-PC\AppData\Roaming\mozilla\Firefox\Profiles\p8o9pvz3.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}

[2012.07.19 23:43:47 | 000,000,000 | ---D | M] (ProxTube - Unblock YouTube) -- C:\Users\Office-PC\AppData\Roaming\mozilla\Firefox\Profiles\p8o9pvz3.default\extensions\ich@maltegoetz.de

[2012.07.19 18:31:17 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions

[2012.07.19 18:54:34 | 000,000,000 | ---D | M] (Flagfox) -- C:\USERS\NAME\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\P8O9PVZ3.DEFAULT\EXTENSIONS\{1018E4D6-728F-4B20-AD56-37578A4DE76B}

[2011.07.31 08:55:18 | 000,009,253 | ---- | M] () (No name found) -- C:\USERS\NAME\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\P8O9PVZ3.DEFAULT\EXTENSIONS\{2E17E2B2-B8D4-4A67-8D7B-FAFA6CC9D1D0}.XPI

[2012.07.19 18:54:35 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\USERS\NAME\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\P8O9PVZ3.DEFAULT\EXTENSIONS\{B9DB16A4-6EDC-47EC-A1F4-B86292ED211D}

[2011.10.08 09:22:44 | 000,456,652 | ---- | M] () (No name found) -- C:\USERS\NAME\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\P8O9PVZ3.DEFAULT\EXTENSIONS\{C07D1A49-9894-49FF-A594-38960EDE8FB9}.XPI

[2011.05.23 00:39:52 | 000,111,171 | ---- | M] () (No name found) -- C:\USERS\NAME\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\P8O9PVZ3.DEFAULT\EXTENSIONS\{C151D79E-E61B-4A90-A887-5A46D38FBA99}.XPI

[2012.03.05 17:28:38 | 000,634,964 | ---- | M] () (No name found) -- C:\USERS\NAME\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\P8O9PVZ3.DEFAULT\EXTENSIONS\{D10D0BF8-F5B5-C8B4-A8B2-2B9879E08C5D}.XPI

[2012.03.05 17:28:38 | 000,434,392 | ---- | M] () (No name found) -- C:\USERS\NAME\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\P8O9PVZ3.DEFAULT\EXTENSIONS\{D4DD63FA-01E4-46A7-B6B1-EDAB7D6AD389}.XPI

[2012.06.21 08:47:32 | 000,045,066 | ---- | M] () (No name found) -- C:\USERS\NAME\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\P8O9PVZ3.DEFAULT\EXTENSIONS\{EF522540-89F5-46B9-B6FE-1829E2B572C6}.XPI

[2012.06.21 08:47:22 | 000,208,985 | ---- | M] () (No name found) -- C:\USERS\NAME\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\P8O9PVZ3.DEFAULT\EXTENSIONS\EXIF_VIEWER@MOZILLA.DOSLASH.ORG.XPI

[2012.07.19 18:54:34 | 000,000,000 | ---D | M] (ProxTube - Unblock YouTube) -- C:\USERS\NAME\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\P8O9PVZ3.DEFAULT\EXTENSIONS\ICH@MALTEGOETZ.DE

[2012.06.21 08:47:22 | 000,159,870 | ---- | M] () (No name found) -- C:\USERS\NAME\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\P8O9PVZ3.DEFAULT\EXTENSIONS\STATUS4EVAR@CALIGONSTUDIOS.COM.XPI

[2012.08.31 12:13:30 | 000,266,720 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll

[2012.07.14 02:45:08 | 000,001,392 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom-de.xml

[2012.08.31 12:13:27 | 000,002,465 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml

[2012.07.14 02:45:08 | 000,001,153 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-de.xml

[2012.07.14 02:45:08 | 000,006,805 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\leo_ende_de.xml

[2012.07.14 02:45:08 | 000,001,178 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-de.xml

[2012.07.14 02:45:07 | 000,001,105 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml

 

O1 HOSTS File: ([2006.09.18 23:37:24 | 000,000,761 | ---- | M]) - C:\Windows\SysNative\drivers\etc\Hosts

O1 - Hosts: 127.0.0.1       localhost

O1 - Hosts: ::1             localhost

O4:64bit: - HKLM..\Run: [Skytel] C:\Programme\Realtek\Audio\HDA\SkyTel.exe (Realtek Semiconductor Corp.)

O4:64bit: - HKLM..\Run: [SysTrayApp] C:\Programme\IDT\WDM\sttray64.exe (IDT, Inc.)

O4:64bit: - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)

O4 - HKLM..\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)

O4 - HKLM..\Run: [avgnt] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)

O4 - HKCU..\RunOnce: [FlashPlayerUpdate] C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_11_3_300_265_ActiveX.exe (Adobe Systems Incorporated)

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1

O1364bit: - gopher Prefix: missing

O13 - gopher Prefix: missing

O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} hxxp://download.eset.com/special/eos/OnlineScanner.cab (OnlineScanner Control)

O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1

O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{D9FC19CB-C4D5-461B-8014-BB3676C5BCBE}: DhcpNameServer = 192.168.2.1

O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{F2D70B3E-F96F-498E-B943-16A117771B0A}: DhcpNameServer = 192.168.2.1

O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)

O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)

O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)

O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)

O24 - Desktop WallPaper: C:\Windows\Web\Wallpaper\img24.jpg

O24 - Desktop BackupWallPaper: C:\Windows\Web\Wallpaper\img24.jpg

O32 - HKLM CDRom: AutoRun - 1

O34 - HKLM BootExecute: (autocheck autochk *)

O35:64bit: - HKLM\..comfile [open] -- "%1" %*

O35:64bit: - HKLM\..exefile [open] -- "%1" %*

O35 - HKLM\..comfile [open] -- "%1" %*

O35 - HKLM\..exefile [open] -- "%1" %*

O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*

O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*

O37 - HKLM\...com [@ = comfile] -- "%1" %*

O37 - HKLM\...exe [@ = exefile] -- "%1" %*

O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)

O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

 
 ========== Files/Folders - Created Within 30 Days ==========

 

[2012.09.01 15:35:32 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ESET

[2012.09.01 13:26:01 | 000,000,000 | ---D | C] -- C:\Users\Office-PC\AppData\Roaming\vlc

[2012.09.01 12:18:47 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware (2)

[2012.08.21 15:24:03 | 000,000,000 | ---D | C] -- C:\Users\Office-PC\AppData\Roaming\pdfforge

[2012.08.21 15:24:00 | 000,137,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSMAPI32.OCX

[2012.08.21 15:23:59 | 001,071,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSCOMCTL.OCX

[2012.08.21 15:23:59 | 000,662,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSCOMCT2.OCX

[2012.08.21 15:23:59 | 000,095,744 | ---- | C] (pdfforge GbR) -- C:\Windows\SysNative\pdfcmon.dll

[2012.08.21 15:23:57 | 000,158,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSCMCDE.DLL

[2012.08.21 15:23:57 | 000,125,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\VB6DE.DLL

[2012.08.21 15:23:57 | 000,064,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSCC2DE.DLL

[2012.08.21 15:23:57 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSMPIDE.DLL

[2012.08.21 15:23:57 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\PDFCreator

[2012.08.20 14:29:10 | 000,000,000 | -HSD | C] -- C:\Config.Msi

[2012.08.20 03:01:00 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MSXML 4.0

[2012.08.18 19:19:11 | 000,000,000 | ---D | C] -- C:\ProgramData\WEBREG

[2012.08.18 19:17:08 | 000,000,000 | ---D | C] -- C:\Users\Office-PC\AppData\Roaming\HP

[2012.08.18 19:17:08 | 000,000,000 | ---D | C] -- C:\Users\Office-PC\AppData\Local\HP

[2012.08.18 18:30:01 | 000,000,000 | ---D | C] -- C:\ProgramData\HP Product Assistant

[2012.08.18 18:26:22 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP

[2012.08.18 18:25:16 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\HP

[2012.08.18 18:25:12 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Hewlett-Packard

[2012.08.18 18:24:52 | 000,000,000 | ---D | C] -- C:\Windows\hpoj4500g510n-z

[2012.08.18 18:22:32 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\HP

[2012.08.18 18:15:13 | 000,642,360 | ---- | C] (Hewlett-Packard) -- C:\Windows\SysNative\hpzids40.dll

[2012.08.18 18:15:09 | 000,136,704 | ---- | C] (Hewlett-Packard Company) -- C:\Windows\SysNative\hpf3l092.dll

[2012.08.18 18:13:40 | 000,902,656 | ---- | C] (Hewlett-Packard) -- C:\Windows\SysNative\hpwwiax9.dll

[2012.08.18 18:13:40 | 000,742,912 | ---- | C] (Hewlett-Packard Co.) -- C:\Windows\SysNative\hpwtscl5.dll

[2012.08.18 18:13:40 | 000,551,424 | ---- | C] (Hewlett-Packard) -- C:\Windows\SysNative\hppldcoi.dll

[2012.08.18 18:13:40 | 000,503,296 | ---- | C] (Hewlett-Packard Co.) -- C:\Windows\SysNative\hpwvst01.dll

[2012.08.18 18:13:14 | 000,000,000 | ---D | C] -- C:\ProgramData\HP

[2012.08.16 03:04:39 | 000,096,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll

[2012.08.16 03:04:38 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll

[2012.08.16 03:04:36 | 000,237,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\url.dll

[2012.08.16 03:04:36 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\url.dll

[2012.08.16 03:04:34 | 000,248,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll

[2012.08.16 03:04:34 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll

[2012.08.16 03:04:34 | 000,173,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieUnatt.exe

[2012.08.16 03:04:33 | 001,494,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl

[2012.08.16 03:04:33 | 001,427,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl

[2012.08.16 03:04:33 | 000,142,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe

[2012.08.16 03:04:32 | 002,312,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll

[2012.08.16 03:04:30 | 000,816,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll

[2012.08.16 03:04:30 | 000,717,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll

[2012.08.15 18:04:41 | 000,788,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\localspl.dll

[2012.08.15 18:04:40 | 000,623,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\localspl.dll

[2012.08.15 18:04:37 | 000,648,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netapi32.dll

[2012.08.10 09:52:58 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira

 
 ========== Files - Modified Within 30 Days ==========

 

[2012.09.02 11:27:31 | 001,653,338 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI

[2012.09.02 11:27:31 | 000,706,834 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat

[2012.09.02 11:27:31 | 000,661,788 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat

[2012.09.02 11:27:31 | 000,159,690 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat

[2012.09.02 11:27:31 | 000,130,674 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat

[2012.09.02 11:20:03 | 000,003,712 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0

[2012.09.02 11:20:03 | 000,003,712 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0

[2012.09.02 11:19:56 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat

[2012.09.01 12:19:51 | 000,000,976 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

[2012.08.26 11:38:58 | 000,696,520 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe

[2012.08.26 11:38:58 | 000,073,416 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl

[2012.08.19 10:01:17 | 000,255,776 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT

[2012.08.18 19:21:09 | 000,000,000 | ---- | M] () -- C:\Windows\hpqEmlSz.INI

[2012.08.18 19:16:55 | 000,241,119 | ---- | M] () -- C:\Windows\hpwins28.dat

[2012.08.18 18:27:41 | 000,002,002 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk

 
 ========== Files Created - No Company Name ==========

 

[2012.09.01 12:19:51 | 000,000,976 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

[2012.08.18 19:21:09 | 000,000,000 | ---- | C] () -- C:\Windows\hpqEmlSz.INI

[2012.08.18 18:30:43 | 000,000,891 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\I.R.I.S. OCR-Registrierung.lnk

[2012.08.18 18:27:41 | 000,002,002 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk

[2012.08.18 18:17:13 | 000,241,119 | ---- | C] () -- C:\Windows\hpwins28.dat

[2012.07.20 01:23:55 | 000,117,248 | ---- | C] () -- C:\Windows\SysWow64\EhStorAuthn.dll

[2012.07.20 01:22:57 | 000,107,612 | ---- | C] () -- C:\Windows\SysWow64\StructuredQuerySchema.bin

[2012.07.20 01:22:00 | 000,368,640 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll

[2012.07.19 23:44:05 | 000,007,680 | ---- | C] () -- C:\Users\Office-PC\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

[2012.07.19 22:09:30 | 001,633,344 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI

[2012.07.19 21:14:07 | 000,018,904 | ---- | C] () -- C:\Windows\SysWow64\StructuredQuerySchemaTrivial.bin

[2012.07.19 19:17:27 | 000,019,968 | ---- | C] () -- C:\Windows\SysWow64\ARP.EXE

[2012.07.19 19:17:27 | 000,008,704 | ---- | C] () -- C:\Windows\SysWow64\HOSTNAME.EXE

[2012.07.19 18:16:37 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin

[2012.07.19 16:58:11 | 000,000,732 | ---- | C] () -- C:\Users\Office-PC\AppData\Local\d3d9caps64.dat

[2011.12.05 22:04:00 | 000,059,904 | ---- | C] () -- C:\Windows\SysWow64\OpenVideo.dll

[2011.12.05 22:03:52 | 000,054,784 | ---- | C] () -- C:\Windows\SysWow64\OVDecode.dll

[2011.09.13 01:06:16 | 000,003,917 | ---- | C] () -- C:\Windows\SysWow64\atipblag.dat
 

< End of report >

--- --- ---
[/code]

Extras

OTL Logfile:

Code:

OTL Extras logfile created on: 02.09.2012 11:26:04 - Run 1

OTL by OldTimer - Version 3.2.59.1     Folder = C:\Users\NAME\Desktop

64bit-Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation

Internet Explorer (Version = 9.0.8112.16421)

Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy

 

4,00 Gb Total Physical Memory | 2,56 Gb Available Physical Memory | 64,19% Memory free

8,16 Gb Paging File | 6,62 Gb Available in Paging File | 81,07% Paging File free

Paging file location(s): ?:\pagefile.sys [binary data]

 

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)

Drive C: | 78,12 Gb Total Space | 28,45 Gb Free Space | 36,42% Space Free | Partition Type: NTFS

Drive D: | 219,93 Gb Total Space | 129,31 Gb Free Space | 58,80% Space Free | Partition Type: NTFS

 

Computer Name: NAME | User Name: Office-PC | Logged in as Administrator.

Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans

Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

 
 ========== Extra Registry (SafeList) ==========

 

 
 ========== File Associations ==========

 
 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]

.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]

.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)

 

[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]

.html [@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)

 
 ========== Shell Spawning ==========

 
 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]

batfile [open] -- "%1" %*

cmdfile [open] -- "%1" %*

comfile [open] -- "%1" %*

exefile [open] -- "%1" %*

helpfile [open] -- Reg Error: Key error.

htmlfile [edit] -- Reg Error: Key error.

htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"

inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)

InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)

InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)

piffile [open] -- "%1" %*

regfile [merge] -- Reg Error: Key error.

scrfile [config] -- "%1"

scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l

scrfile [open] -- "%1" /S

txtfile [edit] -- Reg Error: Key error.

Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1

Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()

Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)

Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()

Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)

Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)

Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]

batfile [open] -- "%1" %*

cmdfile [open] -- "%1" %*

comfile [open] -- "%1" %*

cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)

exefile [open] -- "%1" %*

helpfile [open] -- Reg Error: Key error.

htmlfile [edit] -- Reg Error: Key error.

htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"

inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)

piffile [open] -- "%1" %*

regfile [merge] -- Reg Error: Key error.

scrfile [config] -- "%1"

scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l

scrfile [open] -- "%1" /S

txtfile [edit] -- Reg Error: Key error.

Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1

Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()

Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)

Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()

Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)

Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)

Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

 
 ========== Security Center Settings ==========

 
 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

"cval" = 1

 
 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

 
 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

"AntiVirusOverride" = 0

"AntiSpywareOverride" = 0

"FirewallOverride" = 0

"VistaSp1" = 9F 9E 16 8C DC 5B C8 01  [binary data]

"VistaSp2" = 3C D1 D1 D6 68 67 CD 01  [binary data]

 
 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

"oobe_av" = 1

 
 ========== Firewall Settings ==========

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

"EnableFirewall" = 1

"DisableNotifications" = 0

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]

"EnableFirewall" = 1

"DisableNotifications" = 0

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]

"EnableFirewall" = 1

"DisableNotifications" = 0

 
 ========== Authorized Applications List ==========

 

 
 ========== Vista Active Open Ports Exception List ==========

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]

"{0AC5F33E-7313-46AA-B497-0C086F5B50D5}" = rport=445 | protocol=6 | dir=out | app=system | 

"{134013AF-C3C0-4DF8-91EA-35BF917EB4A5}" = lport=139 | protocol=6 | dir=in | app=system | 

"{3E154840-7BD7-419E-BAFC-337D8391B4A8}" = rport=138 | protocol=17 | dir=out | app=system | 

"{4665FA82-F3B5-44B8-A8D8-4E290188A783}" = rport=139 | protocol=6 | dir=out | app=system | 

"{5179F783-FDCD-4CFC-842D-8578A89FBF9B}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 | 

"{53299A55-9984-4F9F-8EE2-43AB6A57E863}" = lport=138 | protocol=17 | dir=in | app=system | 

"{60A1C472-CB57-4D1F-8C08-5836CAA51E00}" = lport=808 | protocol=6 | dir=in | svc=nettcpactivator | app=c:\windows\microsoft.net\framework64\v4.0.30319\smsvchost.exe | 

"{74A76AE6-22E4-4269-81EC-234BE0EACAAB}" = lport=137 | protocol=17 | dir=in | app=system | 

"{AEC90E70-DF14-483D-B3CF-FC7D0235D527}" = rport=137 | protocol=17 | dir=out | app=system | 

"{B0036124-4FCA-4819-8301-4F5269CA2499}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe | 

"{CFA4AC50-C147-41E3-852C-595B402391E6}" = lport=445 | protocol=6 | dir=in | app=system | 

 
 ========== Vista Active Application Exception List ==========

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]

"{063AFEB5-8107-47FC-A5FC-317CFDD98F61}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqusgh.exe | 

"{12DE57D9-333B-4C2F-BE1A-A2600C9034A4}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hposid01.exe | 

"{1C895038-D33D-493C-A640-87C12B83C655}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpofxm08.exe | 

"{26B36055-B04B-4932-97E1-200890664827}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 | 

"{306C60FE-1314-4767-BA22-322B8EB6F7DF}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpiscnapp.exe | 

"{370899EC-2940-41C1-88F2-F4EBB85E206C}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hposfx08.exe | 

"{45C420A0-AD61-412D-B1B8-E090E8DD173E}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqtra08.exe | 

"{52B47930-E75B-42DD-AA3A-33420407F364}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 | 

"{69910973-E14E-4D21-AC2B-2091C6A97B02}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqgplgtupl.exe | 

"{73F4FFC7-8057-44AB-965D-FF34A5543D5F}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqfxt08.exe | 

"{7D8ED491-7225-4E4F-801A-55705F56240D}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqkygrp.exe | 

"{8584FF35-7152-4956-95B6-751795244822}" = dir=in | app=c:\program files (x86)\common files\apple\apple application support\webkit2webprocess.exe | 

"{8B12A310-9D05-4843-AA83-C0B0051D4FF1}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqste08.exe | 

"{92D5D0EB-76F3-495A-BE28-65C8EDA4A6EC}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqusgm.exe | 

"{A5608E7C-E5CE-47F4-9A5C-4E8FB82ED519}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpoews01.exe | 

"{B7BDBE64-EE9D-49CD-BC7A-8D6DEE20ED4F}" = dir=in | app=c:\program files (x86)\hp\hp software update\hpwucli.exe | 

"{B8C82B77-DC11-4805-A825-22CA0E1067A5}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpofxs08.exe | 

"{BD1F1DC5-C43F-4BFC-A226-ABBADC60ACE0}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqgpc01.exe | 

"{C1CC6AEC-18FD-4C6F-A713-09979622614D}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 | 

"{C2ED3477-6185-47EB-8ED8-C7CD7F4DCE77}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpfccopy.exe | 

"{DD0E6D38-FDBD-40BC-9115-7278F3EEB1FB}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 | 

"{E9C125B0-1729-499D-854E-5A414F9053E8}" = dir=in | app=c:\program files (x86)\hp\digital imaging\smart web printing\smartwebprintexe.exe | 

"{FE355C85-77FD-4DFF-8073-5FF44962FA4A}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpzwiz01.exe | 

"TCP Query User{8136C421-618A-4412-BD6C-829E8B4AED2B}C:\program files (x86)\mozilla firefox\plugin-container.exe" = protocol=6 | dir=in | app=c:\program files (x86)\mozilla firefox\plugin-container.exe | 

"UDP Query User{1CEEE0D9-6628-482F-90BF-F27E5393B243}C:\program files (x86)\mozilla firefox\plugin-container.exe" = protocol=17 | dir=in | app=c:\program files (x86)\mozilla firefox\plugin-container.exe | 

 
 ========== HKEY_LOCAL_MACHINE Uninstall List ==========

 

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

"{052FDD78-A6EA-3187-8386-C82F4CA3A929}" = Microsoft .NET Framework 3.5 Language Pack SP1 - deu

"{0D98B285-0777-B3B7-7A3D-9C85422203B9}" = ccc-utility64

"{503F672D-6C84-448A-8F8F-4BC35AC83441}" = AMD APP SDK Runtime

"{55D55008-E5F6-47D6-B16F-B2A40D4D145F}" = 64 Bit HP CIO Components Installer

"{6E5159B4-A519-41EF-80EF-AD58371515DF}" = Eraser 6.0.10.2620

"{7E0E61CC-1C99-429D-BEA7-C4DD5B898D2A}" = HP Officejet 4500 G510n-z

"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17

"{8924F1FE-8AC5-C2AE-59EF-C5D65B226933}" = AMD Catalyst Install Manager

"{8E34682C-8118-31F1-BC4C-98CD9675E1C2}" = Microsoft .NET Framework 4 Extended

"{A4DDB2AB-ECCD-4C3A-8633-77D5A1A0E542}" = Network64

"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1

"{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}" = Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319

"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile

"Creative OA013" = Integrated Webcam Driver (1.00.04.0310)  

"HP Document Manager" = HP Document Manager 2.0

"HP Imaging Device Functions" = HP Imaging Device Functions 13.0

"HP Smart Web Printing" = HP Smart Web Printing 4.5

"HP Solution Center & Imaging Support Tools" = HP Solution Center 13.0

"HPExtendedCapabilities" = HP Customer Participation Program 13.0

"HPOCR" = OCR Software by I.R.I.S. 13.0

"Microsoft .NET Framework 3.5 Language Pack SP1 - deu" = Microsoft .NET Framework 3.5 Language Pack SP1 - DEU

"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1

"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile

"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended

"Shop for HP Supplies" = Shop for HP Supplies

"SynTPDeinstKey" = Dell Touchpad

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

"{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}" = PDFCreator

"{06870F63-4D1C-171F-9552-368D3890D92F}" = CCC Help French

"{0E64B098-8018-4256-BA23-C316A43AD9B0}" = QuickTime

"{0F367CA3-3B2F-43F9-A44A-25A8EE69E45D}" = Scan

"{14CE04AF-0EBC-B865-382F-1FB466CAC301}" = CCC Help English

"{175F0111-2968-4935-8F70-33108C6A4DE3}" = MarketResearch

"{1DBC5882-96E2-3A01-A32C-9B6F6EF6CF25}" = CCC Help Korean

"{1F36B20F-7408-EC75-2825-E9FE81B0339D}" = CCC Help Norwegian

"{21A2F5EE-1DC5-488A-BE7E-E526F8C61488}" = DeviceDiscovery

"{2EEA7AA4-C203-4b90-A34F-19FB7EF1C81C}" = BufferChm

"{30DAAF05-3679-C10C-953C-BB422FCDF557}" = CCC Help Swedish

"{3A4D5E2D-988D-4ee9-8E7F-3AC200A2B8F5}" = 4500G510nz_Software_Min

"{428536FB-25A0-8531-75EF-D7A7C340B0A4}" = Catalyst Control Center

"{43CDF946-F5D9-4292-B006-BA0D92013021}" = WebReg

"{440B915A-0C85-45DB-92AE-75AE14704A64}" = Fax

"{4A70EF07-7F88-4434-BB61-D1DE8AE93DD4}" = SolutionCenter

"{4BA6B7C9-65AE-BE8B-687A-6F1A2D7F9705}" = CCC Help Czech

"{4C552FD3-2CCD-4E00-AC64-0681DBB3F8B5}" = OpenOffice.org 3.4

"{4C8E1E1B-175F-AF47-8B21-E12C7C8B5D40}" = CCC Help Thai

"{4EAF46A2-DB90-6B67-F640-5CC876A2B5C4}" = CCC Help Greek

"{5B05FF91-F20C-4832-A8DE-E1912639C17C}" = 4500G510nz

"{5D5B8455-50E0-F94A-4C82-0F9303BB4C0E}" = CCC Help Danish

"{612C34C7-5E90-47D8-9B5C-0F717DD82726}" = swMSM

"{63FF21C9-A810-464F-B60A-3111747B1A6D}" = GPBaseService2

"{68A10D12-0D0F-4212-BDE6-D87FAD32A8FA}" = SmartWebPrinting

"{690879A5-18EF-447B-98D6-B699D51008AB}" = 4500_G510nz_Help

"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin

"{6B2FFB21-AC88-45C3-9A7D-4BB3E744EC91}" = HPSSupply

"{6BBA26E9-AB03-4FE7-831A-3535584CA002}" = Toolbox

"{7059BDA7-E1DB-442C-B7A1-6144596720A4}" = HP Update

"{7765BB73-D985-42C9-C7EE-AB434D59429F}" = CCC Help Chinese Traditional

"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update

"{7ADFB885-8E98-6AAE-8687-D6EFB5127F6B}" = Catalyst Control Center Graphics Previews Common

"{7F7C616E-6971-77D9-7D59-82DC35DF81AC}" = CCC Help Russian

"{92A51949-EE4C-466D-AAF0-99E74A49A63F}" = DocMgr

"{9B362566-EC1B-4700-BB9C-EC661BDE2175}" = DocProc

"{9FA5B08F-9162-BCCB-AFAC-28DF1751BEC3}" = Catalyst Control Center Localization All

"{AC76BA86-7AD7-1031-7B44-AA1000000001}" = Adobe Reader X (10.1.4) - Deutsch

"{AE8705FB-E13C-40A9-8A2D-68D6733FBFC2}" = Status

"{AF859F36-5F97-F6EC-A617-62771A8B4FDC}" = CCC Help Finnish

"{BB095F3E-0A7D-7DD4-B2A8-47CB12E416B0}" = CCC Help Japanese

"{BC71B06F-BFAE-6A73-091C-F18ACF00A04C}" = CCC Help Italian

"{BD7204BA-DD64-499E-9B55-6A282CDF4FA4}" = Destinations

"{BDCBA80C-A3BD-9DA5-E43F-EBBBE779C032}" = CCC Help Hungarian

"{C43326F5-F135-4551-8270-7F7ABA0462E1}" = HPProductAssistant

"{CEEA6219-8792-3E40-D361-4FB5F0FBBB0F}" = CCC Help Portuguese

"{CF053286-7F4C-CAFB-616B-58EC562BB28E}" = CCC Help Chinese Standard

"{D07BB56A-7DB4-4564-A1F9-EBCE75FBE3C6}" = Catalyst Control Center InstallProxy

"{D3689EED-3943-9E90-1D65-D2246EB58AD1}" = CCC Help Turkish

"{DBA5EE42-A143-A658-9F86-C611BFDBEFCA}" = CCC Help Dutch

"{DC0A5F99-FD66-433F-9D3A-05DCBA64BE42}" = TrayApp

"{DF6A13C0-77DF-41FE-BD05-6D5201EB0CE7}_is1" = Auslogics Disk Defrag

"{E19490CD-5380-4F37-B0A7-624D635605DC}" = Catalyst Control Center - Branding

"{EAF0F475-CFE2-9F4D-F26A-875FF09AD40E}" = CCC Help Spanish

"{EB879750-CCBD-4013-BFD5-0294D4DA5BD0}" = Apple Application Support

"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219

"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver

"{F1F1CCD6-34FE-81C6-CE0C-F22695E6409F}" = CCC Help German

"{F71A71E1-285C-95CE-A8F7-231E3827138E}" = CCC Help Polish

"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX

"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin

"Adobe Shockwave Player" = Adobe Shockwave Player 11.6

"Avidemux 2.5" = Avidemux 2.5 (32-bit)

"Avira AntiVir Desktop" = Avira Free Antivirus

"ESET Online Scanner" = ESET Online Scanner v3

"Foxit Reader_is1" = Foxit Reader

"HDD-Booster_is1" = HDD-Booster v1.2

"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware Version 1.62.0.1300

"Mozilla Firefox 15.0 (x86 de)" = Mozilla Firefox 15.0 (x86 de)

"Mozilla Thunderbird 14.0 (x86 de)" = Mozilla Thunderbird 14.0 (x86 de)

"MozillaMaintenanceService" = Mozilla Maintenance Service

"VLC media player" = VLC media player 2.0.2

 
 ========== Last 20 Event Log Errors ==========

 

[ Application Events ]

Error - 01.09.2012 18:02:53 | Computer Name = NAME | Source = VSS | ID = 12293

Description = 

 

Error - 01.09.2012 18:02:53 | Computer Name = NAME | Source = System Restore | ID = 8193

Description = 

 

Error - 01.09.2012 18:02:53 | Computer Name = NAME | Source = System Restore | ID = 8210

Description = 

 

Error - 01.09.2012 19:46:48 | Computer Name = NAME | Source = EventSystem | ID = 4609

Description = 

 

Error - 01.09.2012 19:59:49 | Computer Name = NAME | Source = Microsoft-Windows-CAPI2 | ID = 131328

Description = 

 

Error - 01.09.2012 20:00:08 | Computer Name = NAME | Source = VSS | ID = 12293

Description = 

 

Error - 01.09.2012 20:01:48 | Computer Name = NAME | Source = Microsoft-Windows-CAPI2 | ID = 131328

Description = 

 

Error - 02.09.2012 05:21:35 | Computer Name = NAME | Source = WinMgmt | ID = 10

Description = 

 

Error - 02.09.2012 05:21:38 | Computer Name = NAME | Source = Microsoft-Windows-CAPI2 | ID = 131328

Description = 

 

Error - 02.09.2012 05:25:50 | Computer Name = NAME | Source = Microsoft-Windows-CAPI2 | ID = 131328

Description = 

 

[ System Events ]

Error - 22.07.2012 07:00:59 | Computer Name = NAME | Source = Microsoft-Windows-Servicing | ID = 4385

Description = 

 

Error - 22.07.2012 07:00:59 | Computer Name = NAME | Source = Microsoft-Windows-Servicing | ID = 4385

Description = 

 

Error - 22.07.2012 07:00:59 | Computer Name = NAME | Source = Microsoft-Windows-Servicing | ID = 4375

Description = 

 

Error - 22.07.2012 07:00:59 | Computer Name = NAME | Source = Microsoft-Windows-Servicing | ID = 4375

Description = 

 

Error - 22.07.2012 07:00:59 | Computer Name = NAME | Source = Microsoft-Windows-Servicing | ID = 4385

Description = 

 

Error - 22.07.2012 07:00:59 | Computer Name = NAME | Source = Microsoft-Windows-Servicing | ID = 4375

Description = 

 

Error - 22.07.2012 07:00:59 | Computer Name = NAME | Source = Microsoft-Windows-Servicing | ID = 4385

Description = 

 

Error - 22.07.2012 07:00:59 | Computer Name = NAME | Source = Microsoft-Windows-Servicing | ID = 4375

Description = 

 

Error - 22.07.2012 07:00:59 | Computer Name = NAME | Source = Microsoft-Windows-Servicing | ID = 4385

Description = 

 

Error - 22.07.2012 07:00:59 | Computer Name = NAME | Source = Microsoft-Windows-Servicing | ID = 4385

Description = 

 

 

< End of report >

--- --- ---
[/code]

In dem Programm habe ich nichts verstellt:

http://s7.postimage.org/ijo64m7qj/untitled.jpg

Wenn man da rauslesen könnte, dass ich dies und das machen muss, und am Ende taucht der Thunderbird-Ordner wieder auf, wäre ich glücklich. :singsing:

cosinus

10.09.2012 14:37

Das sind die falschen Logs - alte Logs siehe oben
Du solltest die Logs die von OTLPE erstellt wurden posten

SteGri

10.09.2012 17:24

Achje, sorry! Das kommt daher, dass ich das alles in einem Ordner gespeichert habe. Für den letzten Durchlauf habe ich keine "Extra" Datei, kann das sein? Muss ichs nochmal machen? Ich hatte so Schwierigkeiten, ins BIOS reinzukommen, obwohl ich beim Hochfahren immer sofort und unzählige Male F12 wie ein Irrer gedrückt habe. Nach ca. 80 Versuchen (neu starten und wieder warten) konnte ich dann endlich von CD booten. Ich kriege bald die Krise....

OTL Logfile:

Code:

OTL logfile created on: 9/8/2012 12:54:37 PM - Run 

OTLPE by OldTimer - Version 3.1.48.0     Folder = X:\Programs\OTLPE

64bit-Windows Vista (TM) Home Premium Service Pack 2 (Version = 6.0.6002) - Type = System

Internet Explorer (Version = 9.0.8112.16421)

Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy

 

3.00 Gb Total Physical Memory | 3.00 Gb Available Physical Memory | 91.00% Memory free

3.00 Gb Paging File | 3.00 Gb Available in Paging File | 98.00% Paging File free

Paging file location(s): ?:\pagefile.sys [binary data]

 

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)

Drive C: | 78.12 Gb Total Space | 27.90 Gb Free Space | 35.72% Space Free | Partition Type: NTFS

Drive E: | 219.93 Gb Total Space | 129.31 Gb Free Space | 58.80% Space Free | Partition Type: NTFS

Drive F: | 7.53 Gb Total Space | 1.34 Gb Free Space | 17.74% Space Free | Partition Type: FAT32

Drive X: | 436.59 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS

 

Computer Name: REATOGO | User Name: SYSTEM

Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans

Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

Using ControlSet: ControlSet001

 
 ========== Win32 Services (SafeList) ==========

 

SRV:64bit: - [2011/12/05 23:11:56 | 000,235,520 | ---- | M] (AMD) [Auto] -- C:\Windows\System32\atiesrxx.exe -- (AMD External Events Utility)

SRV:64bit: - [2009/03/18 05:08:00 | 000,382,464 | ---- | M] (Marvell) [Auto] -- C:\Windows\System32\ykx64mpcoinst.dll -- (yksvc)

SRV:64bit: - [2009/03/06 06:51:04 | 000,268,288 | ---- | M] (IDT, Inc.) [Auto] -- C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_15f4e438\stacsv64.exe -- (STacSV)

SRV:64bit: - [2009/03/02 08:42:58 | 000,089,600 | ---- | M] (Andrea Electronics Corporation) [Auto] -- C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_15f4e438\AESTSr64.exe -- (AESTFilters)

SRV:64bit: - [2008/01/20 22:47:32 | 000,383,544 | ---- | M] (Microsoft Corporation) [Auto] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)

SRV - [2012/08/31 06:13:30 | 000,114,144 | ---- | M] (Mozilla Foundation) [On_Demand] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)

SRV - [2012/07/27 16:51:26 | 000,063,960 | ---- | M] (Adobe Systems Incorporated) [Auto] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)

SRV - [2012/05/01 19:42:28 | 000,086,224 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto] -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)

SRV - [2012/05/01 18:34:34 | 000,110,032 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto] -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)

SRV - [2010/03/18 07:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)

SRV - [2009/05/21 15:35:32 | 000,923,136 | ---- | M] (Hewlett-Packard Co.) [Auto] -- C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL -- (HPSLPSVC)

SRV - [2009/03/30 00:42:14 | 000,066,368 | ---- | M] (Microsoft Corporation) [Disabled] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)

 

 
 ========== Driver Services (SafeList) ==========

 

DRV:64bit: - [2012/05/02 09:24:12 | 000,027,760 | ---- | M] (Avira GmbH) [Kernel | System] -- C:\Windows\System32\drivers\avkmgr.sys -- (avkmgr)

DRV:64bit: - [2012/04/27 04:20:04 | 000,132,832 | ---- | M] (Avira GmbH) [Kernel | System] -- C:\Windows\System32\drivers\avipbb.sys -- (avipbb)

DRV:64bit: - [2012/04/24 18:32:27 | 000,098,848 | ---- | M] (Avira GmbH) [File_System | Auto] -- C:\Windows\System32\drivers\avgntflt.sys -- (avgntflt)

DRV:64bit: - [2011/12/05 23:45:40 | 010,720,256 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand] -- C:\Windows\System32\drivers\atikmdag.sys -- (amdkmdag)

DRV:64bit: - [2011/12/05 22:12:14 | 000,327,168 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand] -- C:\Windows\System32\drivers\atikmpag.sys -- (amdkmdap)

DRV:64bit: - [2009/09/30 20:51:42 | 000,046,592 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\Windows\System32\drivers\WpdUsb.sys -- (WpdUsb)

DRV:64bit: - [2009/03/18 05:08:00 | 000,406,016 | ---- | M] (Marvell) [Kernel | On_Demand] -- C:\Windows\System32\drivers\yk60x64.sys -- (yukonx64)

DRV:64bit: - [2009/03/09 11:00:00 | 000,311,456 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand] -- C:\Windows\System32\drivers\OA013Vid.sys -- (OA013Vid)

DRV:64bit: - [2009/03/06 06:51:04 | 000,477,696 | ---- | M] (IDT, Inc.) [Kernel | On_Demand] -- C:\Windows\System32\drivers\stwrt64.sys -- (STHDA)

DRV:64bit: - [2009/03/06 01:33:58 | 000,159,840 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand] -- C:\Windows\System32\drivers\OA013Ufd.sys -- (OA013Ufd)

DRV:64bit: - [2008/11/17 02:29:14 | 001,526,776 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand] -- C:\Windows\System32\drivers\BCMWL664.SYS -- (BCM43XX)

DRV:64bit: - [2006/09/18 17:36:24 | 000,000,308 | ---- | M] () [File_System | On_Demand] -- C:\Windows\System32\wbem\ntfs.mof -- (Ntfs)

 
 ========== Standard Registry (SafeList) ==========

 

 
 ========== Internet Explorer ==========

 

 

 

IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

 

IE - HKU\NAME_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/

IE - HKU\NAME_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp

IE - HKU\NAME_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de

IE - HKU\NAME_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 60 E8 91 30 57 6A CD 01  [binary data]

IE - HKU\NAME_ON_C\Software\Microsoft\Internet Explorer\Main,StartPageCache = 1

IE - HKU\NAME_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

 

 

 

IE - HKU\Office-PC_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/

IE - HKU\Office-PC_ON_C\Software\Microsoft\Internet Explorer\Main,StartPageCache = 1

IE - HKU\Office-PC_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

 

 
 ========== FireFox ==========

 

FF - prefs.js..browser.search.update: false

FF - prefs.js..browser.startup.homepage: "hxxp://www.google.de/webhp?hl=de&tab=ww"

 

 

FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\System32\Macromed\Flash\NPSWF64_11_4_402_265.dll ()

FF - HKLM\Software\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_4_402_265.dll ()

FF - HKLM\Software\Wow6432Node\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\SysWOW64\Adobe\Director\np32dsw_1165635.dll (Adobe Systems, Inc.)

FF - HKLM\Software\Wow6432Node\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf: C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)

FF - HKLM\Software\Wow6432Node\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)

FF - HKLM\Software\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.0.2: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF - HKLM\Software\Wow6432Node\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

 

FF - HKEY_LOCAL_MACHINE\software\wow6432node\mozilla\Firefox\Extensions\\smartwebprinting@hp.com: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2012/08/18 12:32:11 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\wow6432node\mozilla\Mozilla Firefox 15.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012/08/31 06:13:31 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\wow6432node\mozilla\Mozilla Firefox 15.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2012/08/20 08:29:35 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\wow6432node\mozilla\Mozilla Thunderbird 14.0\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components

FF - HKEY_LOCAL_MACHINE\software\wow6432node\mozilla\Mozilla Thunderbird 14.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins

FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 15.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012/08/31 06:13:31 | 000,000,000 | ---D | M]

FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 15.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2012/08/20 08:29:35 | 000,000,000 | ---D | M]

 

[2012/07/19 12:50:01 | 000,000,000 | ---D | M] (No name found) -- C:\Users\NAME\AppData\Roaming\Mozilla\Extensions

[2012/08/31 06:15:20 | 000,000,000 | ---D | M] (No name found) -- C:\Users\NAME\AppData\Roaming\Mozilla\Firefox\Profiles\p8o9pvz3.default\extensions

[2012/07/19 12:54:34 | 000,000,000 | ---D | M] (Flagfox) -- C:\Users\NAME\AppData\Roaming\Mozilla\Firefox\Profiles\p8o9pvz3.default\extensions\{1018e4d6-728f-4b20-ad56-37578a4de76b}

[2012/07/19 12:54:34 | 000,000,000 | ---D | M] (FoxyTunes) -- C:\Users\NAME\AppData\Roaming\Mozilla\Firefox\Profiles\p8o9pvz3.default\extensions\{463F6CA5-EE3C-4be1-B7E6-7FEE11953374}

[2012/07/19 12:54:35 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Users\NAME\AppData\Roaming\Mozilla\Firefox\Profiles\p8o9pvz3.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}

[2012/07/19 12:54:34 | 000,000,000 | ---D | M] (ProxTube - Unblock YouTube) -- C:\Users\NAME\AppData\Roaming\Mozilla\Firefox\Profiles\p8o9pvz3.default\extensions\ich@maltegoetz.de

[2012/07/19 12:31:17 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\extensions

File not found (No name found) -- 

() (No name found) -- C:\USERS\NAME\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\P8O9PVZ3.DEFAULT\EXTENSIONS\{2E17E2B2-B8D4-4A67-8D7B-FAFA6CC9D1D0}.XPI

() (No name found) -- C:\USERS\NAME\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\P8O9PVZ3.DEFAULT\EXTENSIONS\{C07D1A49-9894-49FF-A594-38960EDE8FB9}.XPI

() (No name found) -- C:\USERS\NAME\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\P8O9PVZ3.DEFAULT\EXTENSIONS\{C151D79E-E61B-4A90-A887-5A46D38FBA99}.XPI

() (No name found) -- C:\USERS\NAME\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\P8O9PVZ3.DEFAULT\EXTENSIONS\{D10D0BF8-F5B5-C8B4-A8B2-2B9879E08C5D}.XPI

() (No name found) -- C:\USERS\NAME\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\P8O9PVZ3.DEFAULT\EXTENSIONS\{D4DD63FA-01E4-46A7-B6B1-EDAB7D6AD389}.XPI

() (No name found) -- C:\USERS\NAME\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\P8O9PVZ3.DEFAULT\EXTENSIONS\{EF522540-89F5-46B9-B6FE-1829E2B572C6}.XPI

() (No name found) -- C:\USERS\NAME\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\P8O9PVZ3.DEFAULT\EXTENSIONS\EXIF_VIEWER@MOZILLA.DOSLASH.ORG.XPI

() (No name found) -- C:\USERS\NAME\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\P8O9PVZ3.DEFAULT\EXTENSIONS\STATUS4EVAR@CALIGONSTUDIOS.COM.XPI

[2012/08/31 06:13:30 | 000,266,720 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll

[2012/07/13 20:45:08 | 000,001,392 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom-de.xml

[2012/08/31 06:13:27 | 000,002,465 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml

[2012/07/13 20:45:08 | 000,001,153 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-de.xml

[2012/07/13 20:45:08 | 000,006,805 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\leo_ende_de.xml

[2012/07/13 20:45:08 | 000,001,178 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-de.xml

[2012/07/13 20:45:07 | 000,001,105 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml

 

O1 HOSTS File: ([2006/09/18 17:37:24 | 000,000,761 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts

O1 - Hosts: 127.0.0.1       localhost

O1 - Hosts: ::1             localhost

O4:64bit: - HKLM..\Run: [Skytel] C:\Program Files\Realtek\Audio\HDA\SkyTel.exe (Realtek Semiconductor Corp.)

O4:64bit: - HKLM..\Run: [SysTrayApp] C:\Program Files\IDT\WDM\sttray64.exe (IDT, Inc.)

O4:64bit: - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)

O4 - HKLM..\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)

O4 - HKLM..\Run: [avgnt] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)

O4 - HKU\LocalService_ON_C..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)

O4 - HKU\LocalService_ON_C..\Run: [WindowsWelcomeCenter] C:\Windows\SysWow64\oobefldr.dll (Microsoft Corporation)

O4 - HKU\NetworkService_ON_C..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)

O4 - HKU\NetworkService_ON_C..\Run: [WindowsWelcomeCenter] C:\Windows\SysWow64\oobefldr.dll (Microsoft Corporation)

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1

O13:64bit: - gopher Prefix: missing

O13 - gopher Prefix: missing

O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} hxxp://download.eset.com/special/eos/OnlineScanner.cab (OnlineScanner Control)

O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1

O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)

O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)

O24 - Desktop WallPaper: C:\Windows\Web\Wallpaper\img24.jpg

O24 - Desktop BackupWallPaper: C:\Windows\Web\Wallpaper\img24.jpg

O32 - HKLM CDRom: AutoRun - 1

O32 - AutoRun File - [2008/12/16 10:18:26 | 000,000,126 | ---- | M] () - F:\Autorun.inf -- [ FAT32 ]

O32 - AutoRun File - [2006/03/24 07:06:41 | 000,000,053 | R--- | M] () - X:\AUTORUN.INF -- [ CDFS ]

O33 - MountPoints2\{9a56d2f2-d1b0-11e1-b1a2-806e6f6e6963}\Shell - "" = AutoRun

O33 - MountPoints2\{9a56d2f2-d1b0-11e1-b1a2-806e6f6e6963}\Shell\AutoRun\command - "" = E:\reatogoMenu.exe

O34 - HKLM BootExecute: (autocheck autochk /r \??\C:) -  File not found

O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
 64bit: O35 - HKLM\..comfile [open] -- "%1" %* File not found
 64bit: O35 - HKLM\..exefile [open] -- "%1" %* File not found

O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*

O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*

O37 - HKLM\...com [@ = comfile] -- "%1" %*

O37 - HKLM\...exe [@ = exefile] -- "%1" %*

 
 ========== Files/Folders - Created Within 30 Days ==========

 

[2012/09/07 19:28:07 | 000,000,000 | ---D | C] -- C:\Users\Office-PC\AppData\Roaming\Canneverbe Limited

[2012/09/07 19:22:21 | 000,000,000 | ---D | C] -- C:\Users\NAME\AppData\Roaming\Canneverbe Limited

[2012/09/07 19:22:21 | 000,000,000 | ---D | C] -- C:\ProgramData\Canneverbe Limited

[2012/09/07 19:22:02 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\CDBurnerXP

[2012/09/01 09:35:32 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ESET

[2012/09/01 07:26:01 | 000,000,000 | ---D | C] -- C:\Users\Office-PC\AppData\Roaming\vlc

[2012/09/01 06:18:47 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware (2)

[2012/08/21 09:24:03 | 000,000,000 | ---D | C] -- C:\Users\Office-PC\AppData\Roaming\pdfforge

[2012/08/21 09:24:00 | 000,137,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSMAPI32.OCX

[2012/08/21 09:23:59 | 001,071,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSCOMCTL.OCX

[2012/08/21 09:23:59 | 000,662,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSCOMCT2.OCX

[2012/08/21 09:23:59 | 000,095,744 | ---- | C] (pdfforge GbR) -- C:\Windows\System32\pdfcmon.dll

[2012/08/21 09:23:57 | 000,158,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSCMCDE.DLL

[2012/08/21 09:23:57 | 000,125,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\VB6DE.DLL

[2012/08/21 09:23:57 | 000,064,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSCC2DE.DLL

[2012/08/21 09:23:57 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSMPIDE.DLL

[2012/08/21 09:23:57 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\PDFCreator

[2012/08/20 08:29:10 | 000,000,000 | -HSD | C] -- C:\Config.Msi

[2012/08/19 21:01:00 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MSXML 4.0

[2012/08/18 13:19:54 | 000,000,000 | ---D | C] -- C:\Users\NAME\AppData\Roaming\HP

[2012/08/18 13:19:11 | 000,000,000 | ---D | C] -- C:\ProgramData\WEBREG

[2012/08/18 13:17:08 | 000,000,000 | ---D | C] -- C:\Users\Office-PC\AppData\Roaming\HP

[2012/08/18 13:17:08 | 000,000,000 | ---D | C] -- C:\Users\Office-PC\AppData\Local\HP

[2012/08/18 12:30:01 | 000,000,000 | ---D | C] -- C:\ProgramData\HP Product Assistant

[2012/08/18 12:26:22 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP

[2012/08/18 12:25:16 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\HP

[2012/08/18 12:25:12 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Hewlett-Packard

[2012/08/18 12:24:52 | 000,000,000 | ---D | C] -- C:\Windows\hpoj4500g510n-z

[2012/08/18 12:22:32 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\HP

[2012/08/18 12:15:13 | 000,642,360 | ---- | C] (Hewlett-Packard) -- C:\Windows\System32\hpzids40.dll

[2012/08/18 12:15:09 | 000,136,704 | ---- | C] (Hewlett-Packard Company) -- C:\Windows\System32\hpf3l092.dll

[2012/08/18 12:13:40 | 000,902,656 | ---- | C] (Hewlett-Packard) -- C:\Windows\System32\hpwwiax9.dll

[2012/08/18 12:13:40 | 000,742,912 | ---- | C] (Hewlett-Packard Co.) -- C:\Windows\System32\hpwtscl5.dll

[2012/08/18 12:13:40 | 000,551,424 | ---- | C] (Hewlett-Packard) -- C:\Windows\System32\hppldcoi.dll

[2012/08/18 12:13:40 | 000,503,296 | ---- | C] (Hewlett-Packard Co.) -- C:\Windows\System32\hpwvst01.dll

[2012/08/18 12:13:14 | 000,000,000 | ---D | C] -- C:\ProgramData\HP

[2012/08/15 21:04:39 | 000,096,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtmled.dll

[2012/08/15 21:04:38 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll

[2012/08/15 21:04:36 | 000,237,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\url.dll

[2012/08/15 21:04:36 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\url.dll

[2012/08/15 21:04:34 | 000,248,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll

[2012/08/15 21:04:34 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll

[2012/08/15 21:04:34 | 000,173,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe

[2012/08/15 21:04:33 | 001,494,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl

[2012/08/15 21:04:33 | 001,427,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl

[2012/08/15 21:04:33 | 000,142,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe

[2012/08/15 21:04:32 | 002,312,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll

[2012/08/15 21:04:30 | 001,800,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript9.dll

[2012/08/15 21:04:30 | 000,816,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript.dll

[2012/08/15 21:04:30 | 000,717,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll

[2012/08/15 12:04:41 | 000,788,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\localspl.dll

[2012/08/15 12:04:40 | 000,623,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\localspl.dll

[2012/08/15 12:04:37 | 000,648,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netapi32.dll

[2012/08/10 03:52:58 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira

 
 ========== Files - Modified Within 30 Days ==========

 

[2012/09/08 05:41:07 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat

[2012/09/08 05:40:51 | 000,003,712 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0

[2012/09/08 05:40:51 | 000,003,712 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0

[2012/09/08 05:20:20 | 000,706,834 | ---- | M] () -- C:\Windows\System32\perfh007.dat

[2012/09/08 05:20:20 | 000,661,788 | ---- | M] () -- C:\Windows\System32\perfh009.dat

[2012/09/08 05:20:20 | 000,159,690 | ---- | M] () -- C:\Windows\System32\perfc007.dat

[2012/09/08 05:20:20 | 000,130,674 | ---- | M] () -- C:\Windows\System32\perfc009.dat

[2012/09/07 19:22:04 | 000,001,812 | ---- | M] () -- C:\Users\Office-PC\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\CDBurnerXP.lnk

[2012/09/07 19:22:04 | 000,001,788 | ---- | M] () -- C:\Users\Public\Desktop\CDBurnerXP.lnk

[2012/09/07 19:22:04 | 000,001,738 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CDBurnerXP.lnk

[2012/09/04 14:41:37 | 000,122,368 | ---- | M] () -- C:\Users\NAME\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

[2012/09/03 11:24:42 | 000,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_User_WpdMtpDr_01_07_00.Wdf

[2012/09/01 06:19:51 | 000,001,000 | ---- | M] () -- C:\Users\Office-PC\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Malwarebytes Anti-Malware.lnk

[2012/09/01 06:19:51 | 000,000,976 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

[2012/09/01 06:19:51 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware

[2012/09/01 05:50:09 | 000,000,005 | ---- | M] () -- C:\Users\NAME\AppData\Roaming\mbam.context.scan

[2012/09/01 05:43:10 | 000,000,870 | ---- | M] () -- C:\Users\NAME\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\PDFCreator.lnk

[2012/08/26 05:38:58 | 000,696,520 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe

[2012/08/26 05:38:58 | 000,073,416 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl

[2012/08/25 11:36:16 | 000,000,732 | ---- | M] () -- C:\Users\NAME\AppData\Local\d3d9caps64.dat

[2012/08/21 09:24:05 | 000,000,839 | ---- | M] () -- C:\Users\Office-PC\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\PDFArchitect.lnk

[2012/08/21 09:24:04 | 000,000,894 | ---- | M] () -- C:\Users\Office-PC\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\PDFCreator.lnk

[2012/08/20 08:29:36 | 000,002,425 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk

[2012/08/19 04:01:17 | 000,255,776 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT

[2012/08/18 13:26:03 | 000,001,254 | ---- | M] () -- C:\Users\NAME\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\HP Solution Center.lnk

[2012/08/18 13:21:09 | 000,000,000 | ---- | M] () -- C:\Windows\hpqEmlSz.INI

[2012/08/18 13:16:55 | 000,241,119 | ---- | M] () -- C:\Windows\hpwins28.dat

[2012/08/18 13:16:20 | 000,000,000 | R--D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup

[2012/08/18 12:33:14 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP

[2012/08/18 12:30:43 | 000,000,891 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\I.R.I.S. OCR-Registrierung.lnk

[2012/08/18 12:27:41 | 000,002,002 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk

[2012/08/16 02:27:17 | 000,001,614 | ---- | M] () -- C:\Users\NAME\Desktop\Eraser.lnk

[2012/08/10 03:52:58 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira

 
 ========== Files Created - No Company Name ==========

 

[2012/09/07 19:22:04 | 000,001,738 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CDBurnerXP.lnk

[2012/09/03 11:24:42 | 000,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_User_WpdMtpDr_01_07_00.Wdf

[2012/09/01 06:19:51 | 000,000,976 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

[2012/09/01 05:49:43 | 000,000,005 | ---- | C] () -- C:\Users\NAME\AppData\Roaming\mbam.context.scan

[2012/09/01 05:43:10 | 000,000,870 | ---- | C] () -- C:\Users\NAME\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\PDFCreator.lnk

[2012/08/21 09:24:05 | 000,000,839 | ---- | C] () -- C:\Users\Office-PC\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\PDFArchitect.lnk

[2012/08/21 09:24:04 | 000,000,894 | ---- | C] () -- C:\Users\Office-PC\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\PDFCreator.lnk

[2012/08/18 13:26:03 | 000,001,254 | ---- | C] () -- C:\Users\NAME\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\HP Solution Center.lnk

[2012/08/18 13:21:09 | 000,000,000 | ---- | C] () -- C:\Windows\hpqEmlSz.INI

[2012/08/18 12:30:43 | 000,000,891 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\I.R.I.S. OCR-Registrierung.lnk

[2012/08/18 12:27:41 | 000,002,002 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk

[2012/08/18 12:17:13 | 000,241,119 | ---- | C] () -- C:\Windows\hpwins28.dat

[2012/07/20 08:58:23 | 000,000,732 | ---- | C] () -- C:\Users\NAME\AppData\Local\d3d9caps64.dat

[2012/07/20 08:54:45 | 000,000,680 | ---- | C] () -- C:\Users\NAME\AppData\Local\d3d9caps.dat

[2012/07/19 19:23:55 | 000,117,248 | ---- | C] () -- C:\Windows\SysWow64\EhStorAuthn.dll

[2012/07/19 19:22:57 | 000,107,612 | ---- | C] () -- C:\Windows\SysWow64\StructuredQuerySchema.bin

[2012/07/19 19:22:00 | 000,368,640 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll

[2012/07/19 18:11:06 | 000,122,368 | ---- | C] () -- C:\Users\NAME\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

[2012/07/19 17:44:05 | 000,007,680 | ---- | C] () -- C:\Users\Office-PC\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

[2012/07/19 16:09:30 | 001,633,344 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI

[2012/07/19 15:14:07 | 000,018,904 | ---- | C] () -- C:\Windows\SysWow64\StructuredQuerySchemaTrivial.bin

[2012/07/19 13:17:27 | 000,019,968 | ---- | C] () -- C:\Windows\SysWow64\ARP.EXE

[2012/07/19 13:17:27 | 000,008,704 | ---- | C] () -- C:\Windows\SysWow64\HOSTNAME.EXE

[2012/07/19 12:16:37 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin

[2012/07/19 10:58:11 | 000,000,732 | ---- | C] () -- C:\Users\Office-PC\AppData\Local\d3d9caps64.dat

[2011/12/05 16:04:00 | 000,059,904 | ---- | C] () -- C:\Windows\SysWow64\OpenVideo.dll

[2011/12/05 16:03:52 | 000,054,784 | ---- | C] () -- C:\Windows\SysWow64\OVDecode.dll

[2011/09/12 19:06:16 | 000,003,917 | ---- | C] () -- C:\Windows\SysWow64\atipblag.dat

[2009/08/18 03:18:40 | 000,000,418 | ---- | C] () -- C:\Windows\hpwmdl28.dat

[2008/01/20 22:50:05 | 000,060,124 | ---- | C] () -- C:\Windows\SysWow64\tcpmon.ini

[2006/11/02 11:37:05 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat

[2006/11/02 11:02:31 | 000,197,632 | ---- | C] () -- C:\Windows\SysWow64\ir32_32.dll

[2006/11/02 08:37:14 | 000,215,943 | ---- | C] () -- C:\Windows\SysWow64\dssec.dat

[2006/11/02 08:24:17 | 000,000,741 | ---- | C] () -- C:\Windows\SysWow64\NOISE.DAT

[2006/11/02 08:18:17 | 000,673,088 | ---- | C] () -- C:\Windows\SysWow64\mlang.dat

[2006/11/02 05:47:54 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin

 
 ========== LOP Check ==========

 

[2012/07/22 09:57:37 | 000,000,000 | ---D | M] -- C:\Users\NAME\AppData\Roaming\ASCOMP Software

[2012/09/07 19:22:21 | 000,000,000 | ---D | M] -- C:\Users\NAME\AppData\Roaming\Canneverbe Limited

[2012/08/08 17:25:09 | 000,000,000 | ---D | M] -- C:\Users\NAME\AppData\Roaming\Foxit Software

[2012/07/22 18:29:37 | 000,000,000 | ---D | M] -- C:\Users\NAME\AppData\Roaming\OpenOffice.org

[2012/07/19 13:38:20 | 000,000,000 | ---D | M] -- C:\Users\NAME\AppData\Roaming\Thunderbird

[2012/07/19 19:23:57 | 000,000,000 | ---D | M] -- C:\Users\Office-PC\AppData\Roaming\Auslogics

[2012/07/31 15:41:40 | 000,000,000 | ---D | M] -- C:\Users\Office-PC\AppData\Roaming\avidemux

[2012/09/07 19:28:07 | 000,000,000 | ---D | M] -- C:\Users\Office-PC\AppData\Roaming\Canneverbe Limited

[2012/08/21 09:24:03 | 000,000,000 | ---D | M] -- C:\Users\Office-PC\AppData\Roaming\pdfforge

[2012/07/19 10:56:10 | 000,000,000 | -HSD | M] -- C:\ProgramData\Anwendungsdaten

[2006/11/02 11:42:17 | 000,000,000 | -HSD | M] -- C:\ProgramData\Application Data

[2012/09/07 19:22:21 | 000,000,000 | ---D | M] -- C:\ProgramData\Canneverbe Limited

[2006/11/02 11:42:17 | 000,000,000 | -HSD | M] -- C:\ProgramData\Desktop

[2006/11/02 11:42:17 | 000,000,000 | -HSD | M] -- C:\ProgramData\Documents

[2012/07/19 10:56:10 | 000,000,000 | -HSD | M] -- C:\ProgramData\Dokumente

[2012/07/19 10:56:10 | 000,000,000 | -HSD | M] -- C:\ProgramData\Favoriten

[2006/11/02 11:42:17 | 000,000,000 | -HSD | M] -- C:\ProgramData\Favorites

[2006/11/02 11:42:17 | 000,000,000 | -HSD | M] -- C:\ProgramData\Start Menu

[2012/07/19 10:56:10 | 000,000,000 | -HSD | M] -- C:\ProgramData\Startmenü

[2006/11/02 11:42:17 | 000,000,000 | -HSD | M] -- C:\ProgramData\Templates

[2012/07/19 10:56:10 | 000,000,000 | -HSD | M] -- C:\ProgramData\Vorlagen

[2012/09/08 05:40:56 | 000,024,400 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT

 
 ========== Purity Check ==========

 

 

< End of report >

--- --- ---

cosinus

10.09.2012 20:38

Ist auch recht unauffällig
Ich befürchte hier, dass deine Platte im Sterben liegen könnte
Besorg dir mal das Disgnosetool vom Plattenhersteller. Welche Platte du hast siehst du am Anfang der Hardware- bzw. Laufwerkerkennung noch bevor Windows gebootet bzw. im BIOS. Auch im Windows-Gerätemanager sieht man welche Platte da drin ist.

Dann lädst du dir mal die UBCD, brennst das Image UBCD auf CD und bootest davon. Wähle dann über die HDD Tools das Diagnosetool von deinem Plattenhersteller aus und mach einen Check.

SteGri

10.09.2012 23:01

Ohje, das hört sich schlimm an. Dann ist wohl nicht nur alles verloren, sondern auch noch der ganze Computer im Arsch. Ich hab gerade einfach mal zehn Minuten geheult. :heulen:

ST9320325AS ATA - klingt das nach Festplatte?
Damit bin ich via Google auf "Seagate" gestoßen und "SeaTools":
hxxp://www.seagate.com/de/de/support/downloads/seatools/

Soll ich das für Windows oder DOS runterladen?
Erst SeaTools machen und dann UBCD?

Ich bin total dankbar für die Hilfe, nur für mich ist das alles total kompliziert und schwierig, deshalb brauche ich immer so lange (und mache die Hälfte dann auch noch falsch...).

Was ist nochmal der Grund, warum ich nicht mal das CHKDSK ausführen kann? Gerade weil die Festplatte hinüber sein könnte?

cosinus

11.09.2012 13:44

Welche Seatools du nimmst ist eigentlich egal
Die für Windows sind etwas komfortabler zu bedienen

Zitat:

Erst SeaTools machen und dann UBCD?

Bitte richtig lesen! Auf der UBCD sind die Seatools drauf!

SteGri

18.11.2012 18:36

Hallo, ich war leider lange krank und konnte mich daher nicht um das Notebook kümmern.

Ich habe mal den SeaTools für Windows Test direkt über SeaTool gemacht, sieht mit "Kurzer Festplatten-Test", "S.M.A.R.T." und "Einfacher Kurz-Test" folgendermaßen aus:

http://s7.postimage.org/vp2hainuj/Seagate.png

Jetzt werde ich mir das Image von der Ultimate Boot CD machen, davon booten und SeaTools darüber laufen lassen. Muss ich eine bestimmte Test-Art ausführen oder "Reparatur" anklicken?

http://s7.postimage.org/9r60gq8u3/image.png

Vielen Dank!

PS: Beim Windows-Update kommt mittlerweile auch eine Fehlermeldung. Und wenn ich die Anweisung befolge, sagt DOS, dass ich das nicht ändern kann, weil das Verzeichnis beschädigt ist:

http://s17.postimage.org/aphn6v5q7/Update.jpg

cosinus

18.11.2012 23:04

Ich hoffe du hast dich gut erholt
Nach so langer Zeit müssen wir schon wieder fast von vorn anfangen

1. aswMBR

Downloade dir bitte aswMBR.exe und speichere die Datei auf deinem Desktop.

Hinweis: Bitte den Virenscanner abstellen bevor du aswMBR ausführst, denn v.a. Avira meldet darin oft einen Fehlalarm!

Starte die aswMBR.exe Vista und Win7 User aswMBR per Rechtsklick "als Administrator ausführen"
Das Tool wird dich fragen, ob Du mit der aktuellen Virendefinition von AVAST! dein System scannen willst. Beantworte diese Frage bitte mit Ja. (Sollte deine Firewall fragen, bitte den Zugriff auf das Internet zulassen) Der Download der Definitionen kann je nach Verbindung eine Weile dauern.
Klicke auf Scan.
Warte bitte bis Scan finished successfully im DOS Fenster steht.
Drücke auf Save Log und speichere diese auf dem Desktop.

Poste mir die aswMBR.txt in deiner nächsten Antwort. Wichtig: Drücke keinesfalls einen der Fix Buttons ohne Anweisung Hinweis: Sollte der Scan Button ausgeblendet sein, schließe das Tool und starte es erneut. Sollte es erneut nicht klappen teile mir das bitte mit.

Noch ein Hinweis: Sollte aswMBR abstürzen und es kommt eine Meldung wie "aswMBR.exe funktioniert nicht mehr, dann mach Folgendes:
Starte aswMBR neu, wähle unten links im Drop-Down-Menü (unten links im Fenster von aswMBR) bei "AV scan" (none) aus und klick nochmal auf den Scan-Button.

2. TDSS-Killer

Download TDSS-Killer auf Desktop siehe => http://www.trojaner-board.de/82358-t...entfernen.html

Hinweis: Bitte den Virenscanner abstellen bevor du den TDSS-Killer ausführst, denn v.a. Avira meldet im TDSS-Tool oft einen Fehalalrm!

Das Tool so einstellen wie unten im Bild angegeben - klick auf change parameters und setze die Haken wie im folgenden Screenshot abgebildet,
Dann auf Start Scan klicken und wenn es durch ist auf den Button Report klicken um das Log anzuzeigen. Dieses bitte komplett posten.

Wenn du das Log nicht findest oder den Inhalt kopieren und in dein Posting übertragen kannst, dann schau bitte direkt auf deiner Windows-Systempartition ( meistens Laufwerk C: ) nach, da speichert der TDSS-Killer seine Logs.

Hinweis: Bitte nichts voreilig mit dem TDSS-Killer löschen! Falls Objekte vom TDSS-Killer bemängelt werden, alle mit der Aktion "skip" behandeln und hier nur das Log posten!

http://saved.im/mtg4nzy0ywy5/settings_2012-09-04.png

SteGri

19.11.2012 10:42

OK, hier ist mal das aswMBR. Während des Durchlaufs kamen unten im System Tray von Windows ein paar Fehlermeldungen, dass bestimmte gescannte Dateien beschädigt seien. Was kann man denn aus dem aswMBR Log rauslesen?

http://s13.postimage.org/tecysgx13/aswmbr.jpg

Ich mache jetzt mal das mit dem TDSS Killer.

Code:

 aswMBR version 0.9.9.1707 Copyright(c) 2011 AVAST Software

Run date: 2012-11-19 01:17:53

-----------------------------

01:17:53.355    OS Version: Windows x64 6.0.6002 Service Pack 2

01:17:53.355    Number of processors: 2 586 0x170A

01:17:53.355    ComputerName: NAME  UserName: 

01:17:55.258    Initialize success

01:18:08.596    AVAST engine defs: 12111801

01:18:10.640    Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0

01:18:10.640    Disk 0 Vendor: ST9320325AS 0003DEM1 Size: 305245MB BusType: 3

01:18:10.671    Disk 0 MBR read successfully

01:18:10.671    Disk 0 MBR scan

01:18:10.686    Disk 0 Windows VISTA default MBR code

01:18:10.702    Disk 0 Partition 1 00     DE Dell Utility Dell 8.0       39 MB offset 63

01:18:10.718    Disk 0 Partition 2 80 (A) 07    HPFS/NTFS NTFS        80000 MB offset 81920

01:18:10.749    Disk 0 Partition 3 00     07    HPFS/NTFS NTFS       225204 MB offset 163921920

01:18:10.827    Disk 0 scanning C:\Windows\system32\drivers

01:18:31.325    Service scanning

01:18:56.394    Modules scanning

01:18:56.394    Disk 0 trace - called modules:

01:18:56.426    ntoskrnl.exe CLASSPNP.SYS disk.sys ataport.SYS PCIIDEX.SYS hal.dll msahci.sys 

01:18:56.940    1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa8004afd790]

01:18:56.940    3 CLASSPNP.SYS[fffffa6000dd1c33] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP0T0L0-0[0xfffffa80045ae060]

01:18:59.031    AVAST engine scan C:\Windows

01:19:02.385    AVAST engine scan C:\Windows\system32

01:23:36.087    AVAST engine scan C:\Windows\system32\drivers

01:23:51.765    AVAST engine scan C:\Users\Office-PC

01:29:00.620    AVAST engine scan C:\ProgramData

01:31:30.895    Scan finished successfully

01:32:00.114    Disk 0 MBR has been saved successfully to "C:\Users\NAME\Desktop\MBR.dat"

01:32:00.114    The log file has been saved successfully to "C:\Users\NAME\Desktop\aswMBR.txt"

cosinus

19.11.2012 10:53

Das Log ist unauffällig. Die Meldung von Windows macht so keinen Sinn oder ich verstehe sie falsch. Vllt wollte aswMBR die Datei mbam.sys scannen und Windows meint da ist ein Dateisystemfehler :balla:

Mach erstmal mit dem TDSS-Killer weiter

SteGri

19.11.2012 11:00

Ogottogott...

http://s7.postimage.org/e6kpnkju3/Kap.jpg

Soll ich "copy all to quarantine" drücken? Bislang habe ich nichts gemacht.

http://s17.postimage.org/igtb8do5b/Kaper.jpg

Code:

  10:45:21.0427 3592  TDSS rootkit removing tool 2.8.15.0 Oct 31 2012 21:47:35

10:45:21.0737 3592  ============================================================

10:45:21.0737 3592  Current date / time: 2012/11/19 10:45:21.0737

10:45:21.0737 3592  SystemInfo:

10:45:21.0737 3592  

10:45:21.0737 3592  OS Version: 6.0.6002 ServicePack: 2.0

10:45:21.0737 3592  Product type: Workstation

10:45:21.0737 3592  ComputerName: NAME

10:45:21.0737 3592  UserName: Office-PC

10:45:21.0737 3592  Windows directory: C:\Windows

10:45:21.0737 3592  System windows directory: C:\Windows

10:45:21.0737 3592  Running under WOW64

10:45:21.0737 3592  Processor architecture: Intel x64

10:45:21.0737 3592  Number of processors: 2

10:45:21.0737 3592  Page size: 0x1000

10:45:21.0737 3592  Boot type: Normal boot

10:45:21.0737 3592  ============================================================

10:45:25.0247 3592  Drive \Device\Harddisk0\DR0 - Size: 0x4A85D56000 (298.09 Gb), SectorSize: 0x200, Cylinders: 0x9801, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040

10:45:25.0257 3592  ============================================================

10:45:25.0257 3592  \Device\Harddisk0\DR0:

10:45:25.0257 3592  MBR partitions:

10:45:25.0257 3592  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x14000, BlocksNum 0x9C40000

10:45:25.0257 3592  \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x9C54000, BlocksNum 0x1B7DA000

10:45:25.0257 3592  ============================================================

10:45:25.0297 3592  C: <-> \Device\Harddisk0\DR0\Partition1

10:45:25.0397 3592  D: <-> \Device\Harddisk0\DR0\Partition2

10:45:25.0397 3592  ============================================================

10:45:25.0397 3592  Initialize success

10:45:25.0397 3592  ============================================================

10:45:58.0791 3020  ============================================================

10:45:58.0791 3020  Scan started

10:45:58.0791 3020  Mode: Manual; SigCheck; TDLFS; 

10:45:58.0791 3020  ============================================================

10:45:59.0493 3020  ================ Scan system memory ========================

10:45:59.0493 3020  System memory - ok

10:45:59.0508 3020  ================ Scan services =============================

10:46:00.0148 3020  [ 1965AAFFAB07E3FB03C77F81BEBA3547 ] ACPI            C:\Windows\system32\drivers\acpi.sys

10:46:00.0351 3020  ACPI - ok

10:46:00.0491 3020  [ D19C4EE2AC7C47B8F5F84FFF1A789D8A ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

10:46:00.0507 3020  AdobeARMservice - ok

10:46:00.0569 3020  [ F14215E37CF124104575073F782111D2 ] adp94xx         C:\Windows\system32\drivers\adp94xx.sys

10:46:00.0631 3020  adp94xx - ok

10:46:00.0663 3020  [ 7D05A75E3066861A6610F7EE04FF085C ] adpahci         C:\Windows\system32\drivers\adpahci.sys

10:46:00.0709 3020  adpahci - ok

10:46:00.0725 3020  [ 820A201FE08A0C345B3BEDBC30E1A77C ] adpu160m        C:\Windows\system32\drivers\adpu160m.sys

10:46:00.0756 3020  adpu160m - ok

10:46:00.0772 3020  [ 9B4AB6854559DC168FBB4C24FC52E794 ] adpu320         C:\Windows\system32\drivers\adpu320.sys

10:46:00.0803 3020  adpu320 - ok

10:46:00.0850 3020  [ 0F421175574BFE0BF2F4D8E910A253BB ] AeLookupSvc     C:\Windows\System32\aelupsvc.dll

10:46:01.0396 3020  AeLookupSvc ( UnsignedFile.Multi.Generic ) - warning

10:46:01.0396 3020  AeLookupSvc - detected UnsignedFile.Multi.Generic (1)

10:46:01.0599 3020  [ A6FB9DB8F1A86861D955FD6975977AE0 ] AESTFilters     C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_15f4e438\AESTSr64.exe

10:46:01.0989 3020  AESTFilters ( UnsignedFile.Multi.Generic ) - warning

10:46:01.0989 3020  AESTFilters - detected UnsignedFile.Multi.Generic (1)

10:46:02.0051 3020  [ C4F6CE6087760AD70960C9EB130E7943 ] AFD             C:\Windows\system32\drivers\afd.sys

10:46:02.0441 3020  AFD ( UnsignedFile.Multi.Generic ) - warning

10:46:02.0441 3020  AFD - detected UnsignedFile.Multi.Generic (1)

10:46:02.0472 3020  [ F6F6793B7F17B550ECFDBD3B229173F7 ] agp440          C:\Windows\system32\drivers\agp440.sys

10:46:02.0503 3020  agp440 - ok

10:46:02.0550 3020  [ 222CB641B4B8A1D1126F8033F9FD6A00 ] aic78xx         C:\Windows\system32\drivers\djsvs.sys

10:46:02.0581 3020  aic78xx - ok

10:46:02.0597 3020  [ 5922F4F59B7868F3D74BBBBEB7B825A3 ] ALG             C:\Windows\System32\alg.exe

10:46:02.0971 3020  ALG ( UnsignedFile.Multi.Generic ) - warning

10:46:02.0971 3020  ALG - detected UnsignedFile.Multi.Generic (1)

10:46:03.0018 3020  [ 157D0898D4B73F075CE9FA26B482DF98 ] aliide          C:\Windows\system32\drivers\aliide.sys

10:46:03.0034 3020  aliide - ok

10:46:03.0065 3020  [ B5E2434FC851698C1F119CF1C3935A50 ] AMD External Events Utility C:\Windows\system32\atiesrxx.exe

10:46:03.0580 3020  AMD External Events Utility ( UnsignedFile.Multi.Generic ) - warning

10:46:03.0595 3020  AMD External Events Utility - detected UnsignedFile.Multi.Generic (1)

10:46:03.0611 3020  [ 970FA5059E61E30D25307B99903E991E ] amdide          C:\Windows\system32\drivers\amdide.sys

10:46:03.0642 3020  amdide - ok

10:46:03.0673 3020  [ CDC3632A3A5EA4DBB83E46076A3165A1 ] AmdK8           C:\Windows\system32\drivers\amdk8.sys

10:46:04.0063 3020  AmdK8 ( UnsignedFile.Multi.Generic ) - warning

10:46:04.0063 3020  AmdK8 - detected UnsignedFile.Multi.Generic (1)

10:46:05.0249 3020  [ 9E3B4946F7E1BCA0B763E19D81EDBF2C ] amdkmdag        C:\Windows\system32\DRIVERS\atikmdag.sys

10:46:06.0123 3020  amdkmdag ( UnsignedFile.Multi.Generic ) - warning

10:46:06.0123 3020  amdkmdag - detected UnsignedFile.Multi.Generic (1)

10:46:06.0154 3020  [ B9E1C7B7F1865F99B16FF2E1BB94EDB6 ] amdkmdap        C:\Windows\system32\DRIVERS\atikmpag.sys

10:46:06.0606 3020  amdkmdap ( UnsignedFile.Multi.Generic ) - warning

10:46:06.0606 3020  amdkmdap - detected UnsignedFile.Multi.Generic (1)

10:46:06.0762 3020  [ 466A0D95960DAD3222C896D2CEA99993 ] AntiVirSchedulerService C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe

10:46:06.0793 3020  AntiVirSchedulerService - ok

10:46:06.0840 3020  [ A489BE6BB0AA1FF406B488B60542314B ] AntiVirService  C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe

10:46:06.0856 3020  AntiVirService - ok

10:46:06.0903 3020  [ 9C37B3FD5615477CB9A0CD116CF43F5C ] Appinfo         C:\Windows\System32\appinfo.dll

10:46:07.0308 3020  Appinfo ( UnsignedFile.Multi.Generic ) - warning

10:46:07.0308 3020  Appinfo - detected UnsignedFile.Multi.Generic (1)

10:46:07.0324 3020  [ BA8417D4765F3988FF921F30F630E303 ] arc             C:\Windows\system32\drivers\arc.sys

10:46:07.0339 3020  arc - ok

10:46:07.0371 3020  [ 9D41C435619733B34CC16A511E644B11 ] arcsas          C:\Windows\system32\drivers\arcsas.sys

10:46:07.0402 3020  arcsas - ok

10:46:07.0761 3020  [ 9217D874131AE6FF8F642F124F00A555 ] aspnet_state    C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe

10:46:07.0792 3020  aspnet_state - ok

10:46:07.0839 3020  [ 22D13FF3DAFEC2A80634752B1EAA2DE6 ] AsyncMac        C:\Windows\system32\DRIVERS\asyncmac.sys

10:46:08.0244 3020  AsyncMac ( UnsignedFile.Multi.Generic ) - warning

10:46:08.0244 3020  AsyncMac - detected UnsignedFile.Multi.Generic (1)

10:46:08.0275 3020  [ E68D9B3A3905619732F7FE039466A623 ] atapi           C:\Windows\system32\drivers\atapi.sys

10:46:08.0291 3020  atapi - ok

10:46:08.0353 3020  [ 79318C744693EC983D20E9337A2F8196 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll

10:46:08.0806 3020  AudioEndpointBuilder ( UnsignedFile.Multi.Generic ) - warning

10:46:08.0806 3020  AudioEndpointBuilder - detected UnsignedFile.Multi.Generic (1)

10:46:08.0821 3020  [ 79318C744693EC983D20E9337A2F8196 ] AudioSrv        C:\Windows\System32\Audiosrv.dll

10:46:09.0274 3020  AudioSrv ( UnsignedFile.Multi.Generic ) - warning

10:46:09.0274 3020  AudioSrv - detected UnsignedFile.Multi.Generic (1)

10:46:09.0321 3020  [ 26E38B5A58C6C55FAFBC563EEDDB0867 ] avgntflt        C:\Windows\system32\DRIVERS\avgntflt.sys

10:46:09.0367 3020  avgntflt - ok

10:46:09.0383 3020  [ 9D1F00BEFF84CBBF46D7F052BC7E0565 ] avipbb          C:\Windows\system32\DRIVERS\avipbb.sys

10:46:09.0399 3020  avipbb - ok

10:46:09.0414 3020  [ 248DB59FC86DE44D2779F4C7FB1A567D ] avkmgr          C:\Windows\system32\DRIVERS\avkmgr.sys

10:46:09.0430 3020  avkmgr - ok

10:46:09.0523 3020  [ D32F962B71FEE6BDAAEE630BB2C17280 ] BCM43XX         C:\Windows\system32\DRIVERS\bcmwl664.sys

10:46:09.0617 3020  BCM43XX - ok

10:46:09.0726 3020  [ FFB96C2589FFA60473EAD78B39FBDE29 ] BFE             C:\Windows\System32\bfe.dll

10:46:10.0069 3020  BFE ( UnsignedFile.Multi.Generic ) - warning

10:46:10.0069 3020  BFE - detected UnsignedFile.Multi.Generic (1)

10:46:10.0132 3020  [ 6D316F4859634071CC25C4FD4589AD2C ] BITS            C:\Windows\System32\qmgr.dll

10:46:10.0584 3020  BITS ( UnsignedFile.Multi.Generic ) - warning 10:46:10.0584 3020  BITS - detected UnsignedFile.Multi.Generic (1)

10:46:10.0631 3020  [ 79FEEB40056683F8F61398D81DDA65D2 ] blbdrive        C:\Windows\system32\drivers\blbdrive.sys

10:46:10.0990 3020  blbdrive ( UnsignedFile.Multi.Generic ) - warning

10:46:10.0990 3020  blbdrive - detected UnsignedFile.Multi.Generic (1)

10:46:11.0021 3020  [ 2348447A80920B2493A9B582A23E81E1 ] bowser          C:\Windows\system32\DRIVERS\bowser.sys

10:46:11.0442 3020  bowser ( UnsignedFile.Multi.Generic ) - warning

10:46:11.0442 3020  bowser - detected UnsignedFile.Multi.Generic (1)

10:46:11.0473 3020  [ F09EEE9EDC320B5E1501F749FDE686C8 ] BrFiltLo        C:\Windows\system32\drivers\brfiltlo.sys

10:46:11.0832 3020  BrFiltLo ( UnsignedFile.Multi.Generic ) - warning

10:46:11.0832 3020  BrFiltLo - detected UnsignedFile.Multi.Generic (1)

10:46:11.0832 3020  [ B114D3098E9BDB8BEA8B053685831BE6 ] BrFiltUp        C:\Windows\system32\drivers\brfiltup.sys

10:46:12.0222 3020  BrFiltUp ( UnsignedFile.Multi.Generic ) - warning

10:46:12.0222 3020  BrFiltUp - detected UnsignedFile.Multi.Generic (1)

10:46:12.0253 3020  [ A1B39DE453433B115B4EA69EE0343816 ] Browser         C:\Windows\System32\browser.dll

10:46:12.0643 3020  Browser ( UnsignedFile.Multi.Generic ) - warning

10:46:12.0643 3020  Browser - detected UnsignedFile.Multi.Generic (1)

10:46:12.0690 3020  [ F0F0BA4D815BE446AA6A4583CA3BCA9B ] Brserid         C:\Windows\system32\drivers\brserid.sys

10:46:13.0065 3020  Brserid ( UnsignedFile.Multi.Generic ) - warning

10:46:13.0065 3020  Brserid - detected UnsignedFile.Multi.Generic (1)

10:46:13.0096 3020  [ A6ECA2151B08A09CACECA35C07F05B42 ] BrSerWdm        C:\Windows\system32\drivers\brserwdm.sys

10:46:13.0455 3020  BrSerWdm ( UnsignedFile.Multi.Generic ) - warning

10:46:13.0455 3020  BrSerWdm - detected UnsignedFile.Multi.Generic (1)

10:46:13.0501 3020  [ B79968002C277E869CF38BD22CD61524 ] BrUsbMdm        C:\Windows\system32\drivers\brusbmdm.sys

10:46:13.0860 3020  BrUsbMdm ( UnsignedFile.Multi.Generic ) - warning

10:46:13.0860 3020  BrUsbMdm - detected UnsignedFile.Multi.Generic (1)

10:46:13.0860 3020  [ A87528880231C54E75EA7A44943B38BF ] BrUsbSer        C:\Windows\system32\drivers\brusbser.sys

10:46:14.0219 3020  BrUsbSer ( UnsignedFile.Multi.Generic ) - warning

10:46:14.0219 3020  BrUsbSer - detected UnsignedFile.Multi.Generic (1)

10:46:14.0235 3020  [ E0777B34E05F8A82A21856EFC900C29F ] BTHMODEM        C:\Windows\system32\drivers\bthmodem.sys

10:46:14.0562 3020  BTHMODEM ( UnsignedFile.Multi.Generic ) - warning

10:46:14.0562 3020  BTHMODEM - detected UnsignedFile.Multi.Generic (1)

10:46:14.0593 3020  [ B4D787DB8D30793A4D4DF9FEED18F136 ] cdfs            C:\Windows\system32\DRIVERS\cdfs.sys

10:46:14.0937 3020  cdfs ( UnsignedFile.Multi.Generic ) - warning

10:46:14.0937 3020  cdfs - detected UnsignedFile.Multi.Generic (1)

10:46:14.0983 3020  [ C025AA69BE3D0D25C7A2E746EF6F94FC ] cdrom           C:\Windows\system32\DRIVERS\cdrom.sys

10:46:15.0295 3020  cdrom ( UnsignedFile.Multi.Generic ) - warning

10:46:15.0295 3020  cdrom - detected UnsignedFile.Multi.Generic (1)

10:46:15.0358 3020  [ 5A268127633C7EE2A7FB87F39D748D56 ] CertPropSvc     C:\Windows\System32\certprop.dll

10:46:15.0888 3020  CertPropSvc ( UnsignedFile.Multi.Generic ) - warning

10:46:15.0888 3020  CertPropSvc - detected UnsignedFile.Multi.Generic (1)

10:46:15.0935 3020  [ 02EA568D498BBDD4BA55BF3FCE34D456 ] circlass        C:\Windows\system32\drivers\circlass.sys

10:46:16.0419 3020  circlass ( UnsignedFile.Multi.Generic ) - warning

10:46:16.0419 3020  circlass - detected UnsignedFile.Multi.Generic (1)

10:46:16.0512 3020  [ 3DCA9A18B204939CFB24BEA53E31EB48 ] CLFS            C:\Windows\system32\CLFS.sys

10:46:16.0653 3020  CLFS - ok

10:46:16.0731 3020  [ 8EE772032E2FE80A924F3B8DD5082194 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe

10:46:16.0746 3020  clr_optimization_v2.0.50727_32 - ok

10:46:16.0840 3020  [ CE07A466201096F021CD09D631B21540 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe

10:46:16.0855 3020  clr_optimization_v2.0.50727_64 - ok

10:46:16.0965 3020  [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe

10:46:16.0980 3020  clr_optimization_v4.0.30319_32 - ok

10:46:17.0043 3020  [ C6F9AF94DCD58122A4D7E89DB6BED29D ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe

10:46:17.0058 3020  clr_optimization_v4.0.30319_64 - ok

10:46:17.0121 3020  [ B52D9A14CE4101577900A364BA86F3DF ] CmBatt          C:\Windows\system32\DRIVERS\CmBatt.sys

10:46:17.0651 3020  CmBatt ( UnsignedFile.Multi.Generic ) - warning

10:46:17.0651 3020  CmBatt - detected UnsignedFile.Multi.Generic (1)

10:46:17.0698 3020  [ E5D5499A1C50A54B5161296B6AFE6192 ] cmdide          C:\Windows\system32\drivers\cmdide.sys

10:46:17.0713 3020  cmdide - ok

10:46:17.0745 3020  [ 7FB8AD01DB0EABE60C8A861531A8F431 ] Compbatt        C:\Windows\system32\DRIVERS\compbatt.sys

10:46:17.0760 3020  Compbatt - ok

10:46:17.0776 3020  COMSysApp - ok

10:46:17.0791 3020  [ A8585B6412253803CE8EFCBD6D6DC15C ] crcdisk         C:\Windows\system32\drivers\crcdisk.sys

10:46:17.0807 3020  crcdisk - ok

10:46:17.0901 3020  [ 62740B9D2A137E8CED41A9E4239A7A31 ] CryptSvc        C:\Windows\system32\cryptsvc.dll

10:46:18.0369 3020  CryptSvc ( UnsignedFile.Multi.Generic ) - warning

10:46:18.0369 3020  CryptSvc - detected UnsignedFile.Multi.Generic (1)

10:46:18.0431 3020  [ CF8B9A3A5E7DC57724A89D0C3E8CF9EF ] DcomLaunch      C:\Windows\system32\rpcss.dll

10:46:18.0883 3020  DcomLaunch ( UnsignedFile.Multi.Generic ) - warning

10:46:18.0883 3020  DcomLaunch - detected UnsignedFile.Multi.Generic (1)

10:46:18.0946 3020  [ 8B722BA35205C71E7951CDC4CDBADE19 ] DfsC            C:\Windows\system32\Drivers\dfsc.sys

10:46:19.0367 3020  DfsC ( UnsignedFile.Multi.Generic ) - warning

10:46:19.0367 3020  DfsC - detected UnsignedFile.Multi.Generic (1)

10:46:19.0710 3020  [ C647F468F7DE343DF8C143655C5557D4 ] DFSR            C:\Windows\system32\DFSR.exe

10:46:20.0256 3020  DFSR ( UnsignedFile.Multi.Generic ) - warning

10:46:20.0256 3020  DFSR - detected UnsignedFile.Multi.Generic (1)

10:46:20.0303 3020  [ 105373D52E71D2D1355AD3ACD18259C3 ] dg_ssudbus      C:\Windows\system32\DRIVERS\ssudbus.sys

10:46:20.0319 3020  dg_ssudbus - ok

10:46:20.0412 3020  [ 3ED0321127CE70ACDAABBF77E157C2A7 ] Dhcp            C:\Windows\System32\dhcpcsvc.dll

10:46:20.0724 3020  Dhcp ( UnsignedFile.Multi.Generic ) - warning

10:46:20.0724 3020  Dhcp - detected UnsignedFile.Multi.Generic (1)

10:46:20.0755 3020  [ B0107E40ECDB5FA692EBF832F295D905 ] disk            C:\Windows\system32\drivers\disk.sys

10:46:20.0771 3020  disk - ok

10:46:20.0833 3020  [ 06230F1B721494A6DF8D47FD395BB1B0 ] Dnscache        C:\Windows\System32\dnsrslvr.dll

10:46:21.0145 3020  Dnscache ( UnsignedFile.Multi.Generic ) - warning

10:46:21.0145 3020  Dnscache - detected UnsignedFile.Multi.Generic (1)

10:46:21.0208 3020  [ 1A7156DD1E850E9914E5E991E3225B94 ] dot3svc         C:\Windows\System32\dot3svc.dll

10:46:21.0645 3020  dot3svc ( UnsignedFile.Multi.Generic ) - warning

10:46:21.0645 3020  dot3svc - detected UnsignedFile.Multi.Generic (1)

10:46:21.0691 3020  [ 74C02B1717740C3B8039539E23E4B53F ] Dot4            C:\Windows\system32\DRIVERS\Dot4.sys

10:46:22.0097 3020  Dot4 ( UnsignedFile.Multi.Generic ) - warning

10:46:22.0097 3020  Dot4 - detected UnsignedFile.Multi.Generic (1)

10:46:22.0159 3020  [ 08321D1860235BF42CF2854234337AEA ] Dot4Print       C:\Windows\system32\DRIVERS\Dot4Prt.sys

10:46:22.0581 3020  Dot4Print ( UnsignedFile.Multi.Generic ) - warning

10:46:22.0581 3020  Dot4Print - detected UnsignedFile.Multi.Generic (1)

10:46:22.0612 3020  [ 4ADCCF0124F2B6911D3786A5D0E779E5 ] dot4usb         C:\Windows\system32\DRIVERS\dot4usb.sys

10:46:22.0939 3020  dot4usb ( UnsignedFile.Multi.Generic ) - warning

10:46:22.0939 3020  dot4usb - detected UnsignedFile.Multi.Generic (1)

10:46:22.0986 3020  [ 1583B39790DB3EAEC7EDB0CB0140C708 ] DPS             C:\Windows\system32\dps.dll

10:46:23.0314 3020  DPS ( UnsignedFile.Multi.Generic ) - warning

10:46:23.0314 3020  DPS - detected UnsignedFile.Multi.Generic (1)

10:46:23.0345 3020  [ F1A78A98CFC2EE02144C6BEC945447E6 ] drmkaud         C:\Windows\system32\drivers\drmkaud.sys

10:46:23.0829 3020  drmkaud ( UnsignedFile.Multi.Generic ) - warning

10:46:23.0829 3020  drmkaud - detected UnsignedFile.Multi.Generic (1)

10:46:23.0891 3020  [ B8E554E502D5123BC111F99D6A2181B4 ] DXGKrnl         C:\Windows\System32\drivers\dxgkrnl.sys

10:46:23.0953 3020  DXGKrnl - ok

10:46:24.0047 3020  [ 264CEE7B031A9D6C827F3D0CB031F2FE ] E1G60           C:\Windows\system32\DRIVERS\E1G6032E.sys

10:46:24.0562 3020  E1G60 ( UnsignedFile.Multi.Generic ) - warning

10:46:24.0562 3020  E1G60 - detected UnsignedFile.Multi.Generic (1)

10:46:24.0624 3020  [ C2303883FD9BE49DC36A6400643002EA ] EapHost         C:\Windows\System32\eapsvc.dll

10:46:25.0030 3020  EapHost ( UnsignedFile.Multi.Generic ) - warning

10:46:25.0030 3020  EapHost - detected UnsignedFile.Multi.Generic (1)

10:46:25.0061 3020  [ 5F94962BE5A62DB6E447FF6470C4F48A ] Ecache          C:\Windows\system32\drivers\ecache.sys

10:46:25.0092 3020  Ecache - ok

10:46:25.0201 3020  [ 14CE384D2E27B64C256BDA4DC39C312D ] ehRecvr         C:\Windows\ehome\ehRecvr.exe

10:46:25.0669 3020  ehRecvr ( UnsignedFile.Multi.Generic ) - warning

10:46:25.0669 3020  ehRecvr - detected UnsignedFile.Multi.Generic (1)

10:46:25.0747 3020  [ B93159C1313D66FDFBBE876F5189CD52 ] ehSched         C:\Windows\ehome\ehsched.exe

10:46:26.0169 3020  ehSched ( UnsignedFile.Multi.Generic ) - warning

10:46:26.0169 3020  ehSched - detected UnsignedFile.Multi.Generic (1)

10:46:26.0262 3020  [ F5EE2527D74449868E3C3227A59BCD28 ] ehstart         C:\Windows\ehome\ehstart.dll

10:46:26.0683 3020  ehstart ( UnsignedFile.Multi.Generic ) - warning

10:46:26.0683 3020  ehstart - detected UnsignedFile.Multi.Generic (1)

10:46:26.0730 3020  [ C4636D6E10469404AB5308D9FD45ED07 ] elxstor         C:\Windows\system32\drivers\elxstor.sys

10:46:26.0777 3020  elxstor - ok

10:46:26.0824 3020  [ A9B18B63A4FD6BAAB83326706D857FAB ] EMDMgmt         C:\Windows\system32\emdmgmt.dll

10:46:27.0697 3020  EMDMgmt ( UnsignedFile.Multi.Generic ) - warning

10:46:27.0697 3020  EMDMgmt - detected UnsignedFile.Multi.Generic (1)

10:46:27.0729 3020  [ BC3A58E938BB277E46BF4B3003B01ABD ] ErrDev          C:\Windows\system32\drivers\errdev.sys

10:46:28.0228 3020  ErrDev ( UnsignedFile.Multi.Generic ) - warning

10:46:28.0228 3020  ErrDev - detected UnsignedFile.Multi.Generic (1)

10:46:28.0275 3020  [ E12F22B73F153DECE721CD45EC05B4AF ] EventSystem     C:\Windows\system32\es.dll

10:46:28.0633 3020  EventSystem ( UnsignedFile.Multi.Generic ) - warning

10:46:28.0633 3020  EventSystem - detected UnsignedFile.Multi.Generic (1)

10:46:28.0696 3020  [ 486844F47B6636044A42454614ED4523 ] exfat           C:\Windows\system32\drivers\exfat.sys

10:46:29.0179 3020  exfat ( UnsignedFile.Multi.Generic ) - warning

10:46:29.0179 3020  exfat - detected UnsignedFile.Multi.Generic (1)

10:46:29.0257 3020  [ 1A4BEE34277784619DDAF0422C0C6E23 ] fastfat         C:\Windows\system32\drivers\fastfat.sys

10:46:29.0663 3020  fastfat ( UnsignedFile.Multi.Generic ) - warning

10:46:29.0663 3020  fastfat - detected UnsignedFile.Multi.Generic (1)

10:46:29.0710 3020  [ 81B79B6DF71FA1D2C6D688D830616E39 ] fdc             C:\Windows\system32\DRIVERS\fdc.sys

10:46:30.0131 3020  fdc ( UnsignedFile.Multi.Generic ) - warning

10:46:30.0131 3020  fdc - detected UnsignedFile.Multi.Generic (1)

10:46:30.0162 3020  [ BB9267ACACD8B7533DD936C34A0CBA5E ] fdPHost         C:\Windows\system32\fdPHost.dll

10:46:30.0615 3020  fdPHost ( UnsignedFile.Multi.Generic ) - warning

10:46:30.0615 3020  fdPHost - detected UnsignedFile.Multi.Generic (1)

10:46:30.0661 3020  [ 300C80931EABBE1DB7591C516EFE8D0F ] FDResPub        C:\Windows\system32\fdrespub.dll

10:46:31.0036 3020  FDResPub ( UnsignedFile.Multi.Generic ) - warning

10:46:31.0036 3020  FDResPub - detected UnsignedFile.Multi.Generic (1)

10:46:31.0067 3020  [ 457B7D1D533E4BD62A99AED9C7BB4C59 ] FileInfo        C:\Windows\system32\drivers\fileinfo.sys

10:46:31.0098 3020  FileInfo - ok

10:46:31.0145 3020  [ D421327FD6EFCCAF884A54C58E1B0D7F ] Filetrace       C:\Windows\system32\drivers\filetrace.sys

10:46:31.0597 3020  Filetrace ( UnsignedFile.Multi.Generic ) - warning

10:46:31.0597 3020  Filetrace - detected UnsignedFile.Multi.Generic (1)

10:46:31.0613 3020  [ 230923EA2B80F79B0F88D90F87B87EBD ] flpydisk        C:\Windows\system32\DRIVERS\flpydisk.sys

10:46:32.0019 3020  flpydisk ( UnsignedFile.Multi.Generic ) - warning

10:46:32.0019 3020  flpydisk - detected UnsignedFile.Multi.Generic (1)

10:46:32.0050 3020  [ E3041BC26D6930D61F42AEDB79C91720 ] FltMgr          C:\Windows\system32\drivers\fltmgr.sys

10:46:32.0081 3020  FltMgr - ok

10:46:32.0175 3020  [ BE1C5BD1CA7ED015BC6FA1AE67E592C8 ] FontCache       C:\Windows\system32\FntCache.dll

10:46:32.0861 3020  FontCache ( UnsignedFile.Multi.Generic ) - warning

10:46:32.0861 3020  FontCache - detected UnsignedFile.Multi.Generic (1)

10:46:32.0955 3020  [ BC5B0BE5AF3510B0FD8C140EE42C6D3E ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe

10:46:32.0970 3020  FontCache3.0.0.0 - ok

10:46:33.0017 3020  [ 5779B86CD8B32519FBECB136394D946A ] Fs_Rec          C:\Windows\system32\drivers\Fs_Rec.sys

10:46:33.0391 3020  Fs_Rec ( UnsignedFile.Multi.Generic ) - warning

10:46:33.0391 3020  Fs_Rec - detected UnsignedFile.Multi.Generic (1)

10:46:33.0485 3020  [ C8E416668D3DC2BE3D4FE4C79224997F ] gagp30kx        C:\Windows\system32\drivers\gagp30kx.sys

10:46:33.0501 3020  gagp30kx - ok

10:46:33.0579 3020  [ A0E1B575BA8F504968CD40C0FAEB2384 ] gpsvc           C:\Windows\System32\gpsvc.dll

10:46:34.0031 3020  gpsvc ( UnsignedFile.Multi.Generic ) - warning

10:46:34.0031 3020  gpsvc - detected UnsignedFile.Multi.Generic (1)

10:46:34.0078 3020  [ 68E732382B32417FF61FD663259B4B09 ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys

10:46:34.0483 3020  HdAudAddService ( UnsignedFile.Multi.Generic ) - warning

10:46:34.0483 3020  HdAudAddService - detected UnsignedFile.Multi.Generic (1)

10:46:34.0717 3020  [ F942C5820205F2FB453243EDFEC82A3D ] HDAudBus        C:\Windows\system32\DRIVERS\HDAudBus.sys

10:46:35.0279 3020  HDAudBus ( UnsignedFile.Multi.Generic ) - warning

10:46:35.0279 3020  HDAudBus - detected UnsignedFile.Multi.Generic (1)

10:46:35.0326 3020  [ B4881C84A180E75B8C25DC1D726C375F ] HidBth          C:\Windows\system32\drivers\hidbth.sys

10:46:35.0685 3020  HidBth ( UnsignedFile.Multi.Generic ) - warning

10:46:35.0685 3020  HidBth - detected UnsignedFile.Multi.Generic (1)

10:46:35.0700 3020  [ 4E77A77E2C986E8F88F996BB3E1AD829 ] HidIr           C:\Windows\system32\drivers\hidir.sys

10:46:36.0075 3020  HidIr ( UnsignedFile.Multi.Generic ) - warning

10:46:36.0075 3020  HidIr - detected UnsignedFile.Multi.Generic (1)

10:46:36.0106 3020  [ 59361D38A297755D46A540E450202B2A ] hidserv         C:\Windows\system32\hidserv.dll

10:46:36.0589 3020  hidserv ( UnsignedFile.Multi.Generic ) - warning

10:46:36.0589 3020  hidserv - detected UnsignedFile.Multi.Generic (1)

10:46:36.0605 3020  [ 443BDD2D30BB4F00795C797E2CF99EDF ] HidUsb          C:\Windows\system32\DRIVERS\hidusb.sys

10:46:36.0995 3020  HidUsb ( UnsignedFile.Multi.Generic ) - warning

10:46:36.0995 3020  HidUsb - detected UnsignedFile.Multi.Generic (1)

10:46:37.0026 3020  [ B12F367EA39C0795FD57E31242CE1A5A ] hkmsvc          C:\Windows\system32\kmsvc.dll

10:46:37.0432 3020  hkmsvc ( UnsignedFile.Multi.Generic ) - warning

10:46:37.0432 3020  hkmsvc - detected UnsignedFile.Multi.Generic (1)

10:46:37.0479 3020  [ D7109A1E6BD2DFDBCBA72A6BC626A13B ] HpCISSs         C:\Windows\system32\drivers\hpcisss.sys

10:46:37.0510 3020  HpCISSs - ok

10:46:37.0619 3020  [ 0A3C6AA4A9FC38C20BA4EAC2C3351C05 ] hpqcxs08        C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcxs08.dll

10:46:38.0087 3020  hpqcxs08 ( UnsignedFile.Multi.Generic ) - warning

10:46:38.0087 3020  hpqcxs08 - detected UnsignedFile.Multi.Generic (1)

10:46:38.0165 3020  [ F3F72A2A86C22610BCA5439FA789DD52 ] hpqddsvc        C:\Program Files (x86)\HP\Digital Imaging\bin\hpqddsvc.dll

10:46:38.0539 3020  hpqddsvc ( UnsignedFile.Multi.Generic ) - warning

10:46:38.0539 3020  hpqddsvc - detected UnsignedFile.Multi.Generic (1)

10:46:38.0586 3020  [ D972F48D0CE396759B788693CD665926 ] HPSLPSVC        C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL

10:46:39.0054 3020  HPSLPSVC ( UnsignedFile.Multi.Generic ) - warning

10:46:39.0054 3020  HPSLPSVC - detected UnsignedFile.Multi.Generic (1)

10:46:39.0101 3020  [ 098F1E4E5C9CB5B0063A959063631610 ] HTTP            C:\Windows\system32\drivers\HTTP.sys

10:46:39.0491 3020  HTTP ( UnsignedFile.Multi.Generic ) - warning

10:46:39.0491 3020  HTTP - detected UnsignedFile.Multi.Generic (1)

10:46:39.0522 3020  [ DA94C854CEA5FAC549D4E1F6E88349E8 ] i2omp           C:\Windows\system32\drivers\i2omp.sys

10:46:39.0553 3020  i2omp - ok

10:46:39.0585 3020  [ CBB597659A2713CE0C9CC20C88C7591F ] i8042prt        C:\Windows\system32\DRIVERS\i8042prt.sys

10:46:39.0928 3020  i8042prt ( UnsignedFile.Multi.Generic ) - warning

10:46:39.0928 3020  i8042prt - detected UnsignedFile.Multi.Generic (1)

10:46:39.0975 3020  [ 3E3BF3627D886736D0B4E90054F929F6 ] iaStorV         C:\Windows\system32\drivers\iastorv.sys

10:46:40.0006 3020  iaStorV - ok

10:46:40.0068 3020  [ 749F5F8CEDCA70F2A512945325FC489D ] idsvc           C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe

10:46:40.0162 3020  idsvc - ok

10:46:40.0224 3020  [ 8C3951AD2FE886EF76C7B5027C3125D3 ] iirsp           C:\Windows\system32\drivers\iirsp.sys

10:46:40.0255 3020  iirsp - ok

10:46:40.0333 3020  [ 0C9EA6E654E7B0471741E343A6C671AF ] IKEEXT          C:\Windows\System32\ikeext.dll

10:46:40.0786 3020  IKEEXT ( UnsignedFile.Multi.Generic ) - warning

10:46:40.0786 3020  IKEEXT - detected UnsignedFile.Multi.Generic (1)

10:46:41.0332 3020  [ C2F868881D48A568B525255F084EF063 ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHD64.sys

10:46:41.0722 3020  IntcAzAudAddService - ok

10:46:41.0784 3020  [ DF797A12176F11B2D301C5B234BB200E ] intelide        C:\Windows\system32\drivers\intelide.sys

10:46:41.0800 3020  intelide - ok

10:46:41.0815 3020  [ BFD84AF32FA1BAD6231C4585CB469630 ] intelppm        C:\Windows\system32\DRIVERS\intelppm.sys

10:46:42.0143 3020  intelppm ( UnsignedFile.Multi.Generic ) - warning

10:46:42.0143 3020  intelppm - detected UnsignedFile.Multi.Generic (1)

10:46:42.0205 3020  [ 5624BC1BC5EEB49C0AB76A8114F05EA3 ] IPBusEnum       C:\Windows\system32\ipbusenum.dll

10:46:42.0580 3020  IPBusEnum ( UnsignedFile.Multi.Generic ) - warning

10:46:42.0580 3020  IPBusEnum - detected UnsignedFile.Multi.Generic (1)

10:46:42.0627 3020  [ D8AABC341311E4780D6FCE8C73C0AD81 ] IpFilterDriver  C:\Windows\system32\DRIVERS\ipfltdrv.sys

10:46:43.0219 3020  IpFilterDriver ( UnsignedFile.Multi.Generic ) - warning

10:46:43.0219 3020  IpFilterDriver - detected UnsignedFile.Multi.Generic (1)

10:46:43.0313 3020  [ BF0DBFA9792C5C14FA00F61C75116C1B ] iphlpsvc        C:\Windows\System32\iphlpsvc.dll

10:46:43.0843 3020  iphlpsvc ( UnsignedFile.Multi.Generic ) - warning

10:46:43.0843 3020  iphlpsvc - detected UnsignedFile.Multi.Generic (1)

10:46:43.0859 3020  IpInIp - ok

10:46:43.0875 3020  [ 9C2EE2E6E5A7203BFAE15C299475EC67 ] IPMIDRV         C:\Windows\system32\drivers\ipmidrv.sys

10:46:44.0187 3020  IPMIDRV ( UnsignedFile.Multi.Generic ) - warning

10:46:44.0187 3020  IPMIDRV - detected UnsignedFile.Multi.Generic (1)

10:46:44.0233 3020  [ B7E6212F581EA5F6AB0C3A6CEEEB89BE ] IPNAT           C:\Windows\system32\DRIVERS\ipnat.sys

10:46:44.0545 3020  IPNAT ( UnsignedFile.Multi.Generic ) - warning

10:46:44.0545 3020  IPNAT - detected UnsignedFile.Multi.Generic (1)

10:46:44.0545 3020  [ 8C42CA155343A2F11D29FECA67FAA88D ] IRENUM          C:\Windows\system32\drivers\irenum.sys

10:46:44.0842 3020  IRENUM ( UnsignedFile.Multi.Generic ) - warning

10:46:44.0842 3020  IRENUM - detected UnsignedFile.Multi.Generic (1)

10:46:44.0873 3020  [ 0672BFCEDC6FC468A2B0500D81437F4F ] isapnp          C:\Windows\system32\drivers\isapnp.sys

10:46:44.0889 3020  isapnp - ok

10:46:44.0935 3020  [ E4FDF99599F27EC25D2CF6D754243520 ] iScsiPrt        C:\Windows\system32\DRIVERS\msiscsi.sys

10:46:44.0951 3020  iScsiPrt - ok

10:46:44.0998 3020  [ 63C766CDC609FF8206CB447A65ABBA4A ] iteatapi        C:\Windows\system32\drivers\iteatapi.sys

10:46:45.0013 3020  iteatapi - ok

10:46:45.0060 3020  [ 1281FE73B17664631D12F643CBEA3F59 ] iteraid         C:\Windows\system32\drivers\iteraid.sys

10:46:45.0076 3020  iteraid - ok

10:46:45.0123 3020  [ 423696F3BA6472DD17699209B933BC26 ] kbdclass        C:\Windows\system32\DRIVERS\kbdclass.sys

10:46:45.0138 3020  kbdclass - ok

10:46:45.0185 3020  [ BF8783A5066CFECF45095459E8010FA7 ] kbdhid          C:\Windows\system32\DRIVERS\kbdhid.sys

10:46:45.0575 3020  kbdhid ( UnsignedFile.Multi.Generic ) - warning

10:46:45.0575 3020  kbdhid - detected UnsignedFile.Multi.Generic (1)

10:46:45.0622 3020  [ 260BF9C43EE12C6898A9F5AAB0FB0E5D ] KeyIso          C:\Windows\system32\lsass.exe

10:46:45.0965 3020  KeyIso ( UnsignedFile.Multi.Generic ) - warning

10:46:45.0965 3020  KeyIso - detected UnsignedFile.Multi.Generic (1)

10:46:46.0012 3020  [ 88956AD9FA510848AD176777A6C6C1F5 ] KSecDD          C:\Windows\system32\Drivers\ksecdd.sys

10:46:46.0059 3020  KSecDD - ok

10:46:46.0105 3020  [ 1D419CF43DB29396ECD7113D129D94EB ] ksthunk         C:\Windows\system32\drivers\ksthunk.sys

10:46:46.0605 3020  ksthunk ( UnsignedFile.Multi.Generic ) - warning

10:46:46.0605 3020  ksthunk - detected UnsignedFile.Multi.Generic (1)

10:46:46.0651 3020  [ 1FAF6926F3416D3DA05C5B265491BDAE ] KtmRm           C:\Windows\system32\msdtckrm.dll

10:46:47.0041 3020  KtmRm ( UnsignedFile.Multi.Generic ) - warning

10:46:47.0041 3020  KtmRm - detected UnsignedFile.Multi.Generic (1)

10:46:47.0073 3020  [ 50C7A3CB427E9BB5ED0708A669956AB5 ] LanmanServer    C:\Windows\system32\srvsvc.dll

10:46:47.0385 3020  LanmanServer ( UnsignedFile.Multi.Generic ) - warning

10:46:47.0385 3020  LanmanServer - detected UnsignedFile.Multi.Generic (1)

10:46:47.0431 3020  [ CAF86FC1388BE1E470F1A7B43E348ADB ] LanmanWorkstation C:\Windows\System32\wkssvc.dll

10:46:47.0775 3020  LanmanWorkstation ( UnsignedFile.Multi.Generic ) - warning

10:46:47.0775 3020  LanmanWorkstation - detected UnsignedFile.Multi.Generic (1)

10:46:47.0806 3020  [ 96ECE2659B6654C10A0C310AE3A6D02C ] lltdio          C:\Windows\system32\DRIVERS\lltdio.sys

10:46:48.0102 3020  lltdio ( UnsignedFile.Multi.Generic ) - warning

10:46:48.0102 3020  lltdio - detected UnsignedFile.Multi.Generic (1)

10:46:48.0165 3020  [ 961CCBD0B1CCB5675D64976FAE37D092 ] lltdsvc         C:\Windows\System32\lltdsvc.dll

10:46:48.0508 3020  lltdsvc ( UnsignedFile.Multi.Generic ) - warning

10:46:48.0508 3020  lltdsvc - detected UnsignedFile.Multi.Generic (1)

10:46:48.0523 3020  [ A47F8080CACC23C91FE823AD19AA5612 ] lmhosts         C:\Windows\System32\lmhsvc.dll

10:46:49.0007 3020  lmhosts ( UnsignedFile.Multi.Generic ) - warning

10:46:49.0007 3020  lmhosts - detected UnsignedFile.Multi.Generic (1)

10:46:49.0038 3020  [ ACBE1AF32D3123E330A07BFBC5EC4A9B ] LSI_FC          C:\Windows\system32\drivers\lsi_fc.sys

10:46:49.0069 3020  LSI_FC - ok

10:46:49.0101 3020  [ 799FFB2FC4729FA46D2157C0065B3525 ] LSI_SAS         C:\Windows\system32\drivers\lsi_sas.sys

10:46:49.0132 3020  LSI_SAS - ok

10:46:49.0147 3020  [ F445FF1DAAD8A226366BFAF42551226B ] LSI_SCSI        C:\Windows\system32\drivers\lsi_scsi.sys

10:46:49.0179 3020  LSI_SCSI - ok

10:46:49.0210 3020  [ 52F87B9CC8932C2A7375C3B2A9BE5E3E ] luafv           C:\Windows\system32\drivers\luafv.sys

10:46:49.0537 3020  luafv ( UnsignedFile.Multi.Generic ) - warning

10:46:49.0537 3020  luafv - detected UnsignedFile.Multi.Generic (1)

10:46:49.0569 3020  [ 76A58DF02BD4EA29F189B82D0BEF17F8 ] Mcx2Svc         C:\Windows\system32\Mcx2Svc.dll

10:46:49.0990 3020  Mcx2Svc ( UnsignedFile.Multi.Generic ) - warning

10:46:49.0990 3020  Mcx2Svc - detected UnsignedFile.Multi.Generic (1)

10:46:50.0037 3020  [ 5C5CD6AACED32FB26C3FB34B3DCF972F ] megasas         C:\Windows\system32\drivers\megasas.sys

10:46:50.0052 3020  megasas - ok

10:46:50.0099 3020  [ 859BC2436B076C77C159ED694ACFE8F8 ] MegaSR          C:\Windows\system32\drivers\megasr.sys

10:46:50.0130 3020  MegaSR - ok

10:46:50.0161 3020  [ 3CBE4995E80E13CCFBC42E5DCF3AC81A ] MMCSS           C:\Windows\system32\mmcss.dll

10:46:50.0520 3020  MMCSS ( UnsignedFile.Multi.Generic ) - warning

10:46:50.0520 3020  MMCSS - detected UnsignedFile.Multi.Generic (1)

10:46:50.0551 3020  [ 59848D5CC74606F0EE7557983BB73C2E ] Modem           C:\Windows\system32\drivers\modem.sys

10:46:50.0910 3020  Modem ( UnsignedFile.Multi.Generic ) - warning

10:46:50.0910 3020  Modem - detected UnsignedFile.Multi.Generic (1)

10:46:50.0957 3020  [ C247CC2A57E0A0C8C6DCCF7807B3E9E5 ] monitor         C:\Windows\system32\DRIVERS\monitor.sys

10:46:51.0316 3020  monitor ( UnsignedFile.Multi.Generic ) - warning

10:46:51.0316 3020  monitor - detected UnsignedFile.Multi.Generic (1)

10:46:51.0347 3020  [ 9367304E5E412B120CF5F4EA14E4E4F1 ] mouclass        C:\Windows\system32\DRIVERS\mouclass.sys

10:46:51.0378 3020  mouclass - ok

10:46:51.0409 3020  [ C2C2BD5C5CE5AAF786DDD74B75D2AC69 ] mouhid          C:\Windows\system32\DRIVERS\mouhid.sys

10:46:51.0799 3020  mouhid ( UnsignedFile.Multi.Generic ) - warning

10:46:51.0799 3020  mouhid - detected UnsignedFile.Multi.Generic (1)

10:46:51.0831 3020  [ 11BC9B1E8801B01F7F6ADB9EAD30019B ] MountMgr        C:\Windows\system32\drivers\mountmgr.sys

10:46:51.0846 3020  MountMgr - ok

10:46:51.0924 3020  [ E8D79312373F254DC13F3965BDB3D521 ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe

10:46:51.0955 3020  MozillaMaintenance - ok

10:46:51.0987 3020  [ F8276EB8698142884498A528DFEA8478 ] mpio            C:\Windows\system32\drivers\mpio.sys

10:46:52.0002 3020  mpio - ok

10:46:52.0065 3020  [ C92B9ABDB65A5991E00C28F13491DBA2 ] mpsdrv          C:\Windows\system32\drivers\mpsdrv.sys

10:46:52.0361 3020  mpsdrv ( UnsignedFile.Multi.Generic ) - warning

10:46:52.0361 3020  mpsdrv - detected UnsignedFile.Multi.Generic (1)

10:46:52.0423 3020  [ 897E3BAF68BA406A61682AE39C83900C ] MpsSvc          C:\Windows\system32\mpssvc.dll

10:46:52.0798 3020  MpsSvc ( UnsignedFile.Multi.Generic ) - warning

10:46:52.0798 3020  MpsSvc - detected UnsignedFile.Multi.Generic (1)

10:46:52.0829 3020  [ 3C200630A89EF2C0864D515B7A75802E ] Mraid35x        C:\Windows\system32\drivers\mraid35x.sys

10:46:52.0860 3020  Mraid35x - ok

10:46:52.0891 3020  [ 7C1DE4AA96DC0C071611F9E7DE02A68D ] MRxDAV          C:\Windows\system32\drivers\mrxdav.sys

10:46:53.0235 3020  MRxDAV ( UnsignedFile.Multi.Generic ) - warning

10:46:53.0235 3020  MRxDAV - detected UnsignedFile.Multi.Generic (1)

10:46:53.0281 3020  [ 1485811B320FF8C7EDAD1CAEBB1C6C2B ] mrxsmb          C:\Windows\system32\DRIVERS\mrxsmb.sys

10:46:53.0593 3020  mrxsmb ( UnsignedFile.Multi.Generic ) - warning

10:46:53.0593 3020  mrxsmb - detected UnsignedFile.Multi.Generic (1)

10:46:53.0640 3020  [ 3B929A60C833FC615FD97FBA82BC7632 ] mrxsmb10        C:\Windows\system32\DRIVERS\mrxsmb10.sys

10:46:53.0983 3020  mrxsmb10 ( UnsignedFile.Multi.Generic ) - warning

10:46:53.0983 3020  mrxsmb10 - detected UnsignedFile.Multi.Generic (1)

10:46:54.0015 3020  [ C64AB3E1F53B4F5B5BB6D796B2D7BEC3 ] mrxsmb20        C:\Windows\system32\DRIVERS\mrxsmb20.sys

10:46:54.0373 3020  mrxsmb20 ( UnsignedFile.Multi.Generic ) - warning

10:46:54.0373 3020  mrxsmb20 - detected UnsignedFile.Multi.Generic (1)

10:46:54.0405 3020  [ AA459F2AB3AB603C357FF117CAE3D818 ] msahci          C:\Windows\system32\drivers\msahci.sys

10:46:54.0436 3020  msahci - ok

10:46:54.0467 3020  [ 264BBB4AAF312A485F0E44B65A6B7202 ] msdsm           C:\Windows\system32\drivers\msdsm.sys

10:46:54.0483 3020  msdsm - ok

10:46:54.0529 3020  [ 7EC02CE772F068ED0BEAFA3DA341A9BC ] MSDTC           C:\Windows\System32\msdtc.exe

10:46:54.0888 3020  MSDTC ( UnsignedFile.Multi.Generic ) - warning

10:46:54.0888 3020  MSDTC - detected UnsignedFile.Multi.Generic (1)

10:46:54.0935 3020  [ 704F59BFC4512D2BB0146AEC31B10A7C ] Msfs            C:\Windows\system32\drivers\Msfs.sys

10:46:55.0294 3020  Msfs ( UnsignedFile.Multi.Generic ) - warning

10:46:55.0294 3020  Msfs - detected UnsignedFile.Multi.Generic (1)

10:46:55.0325 3020  [ 00EBC952961664780D43DCA157E79B27 ] msisadrv        C:\Windows\system32\drivers\msisadrv.sys

10:46:55.0341 3020  msisadrv - ok

10:46:55.0372 3020  [ 366B0C1F4478B519C181E37D43DCDA32 ] MSiSCSI         C:\Windows\system32\iscsiexe.dll

10:46:55.0731 3020  MSiSCSI ( UnsignedFile.Multi.Generic ) - warning

10:46:55.0731 3020  MSiSCSI - detected UnsignedFile.Multi.Generic (1)

10:46:55.0731 3020  msiserver - ok

10:46:55.0777 3020  [ 0EA73E498F53B96D83DBFCA074AD4CF8 ] MSKSSRV         C:\Windows\system32\drivers\MSKSSRV.sys

10:46:56.0058 3020  MSKSSRV ( UnsignedFile.Multi.Generic ) - warning

10:46:56.0058 3020  MSKSSRV - detected UnsignedFile.Multi.Generic (1)

10:46:56.0089 3020  [ 52E59B7E992A58E740AA63F57EDBAE8B ] MSPCLOCK        C:\Windows\system32\drivers\MSPCLOCK.sys

10:46:56.0401 3020  MSPCLOCK ( UnsignedFile.Multi.Generic ) - warning

10:46:56.0401 3020  MSPCLOCK - detected UnsignedFile.Multi.Generic (1)

10:46:56.0417 3020  [ 49084A75BAE043AE02D5B44D02991BB2 ] MSPQM           C:\Windows\system32\drivers\MSPQM.sys

10:46:56.0760 3020  MSPQM ( UnsignedFile.Multi.Generic ) - warning

10:46:56.0760 3020  MSPQM - detected UnsignedFile.Multi.Generic (1)

10:46:56.0791 3020  [ DC6CCF440CDEDE4293DB41C37A5060A5 ] MsRPC           C:\Windows\system32\drivers\MsRPC.sys

10:46:56.0823 3020  MsRPC - ok

10:46:56.0869 3020  [ 855796E59DF77EA93AF46F20155BF55B ] mssmbios        C:\Windows\system32\DRIVERS\mssmbios.sys

10:46:56.0885 3020  mssmbios - ok

10:46:56.0901 3020  [ 86D632D75D05D5B7C7C043FA3564AE86 ] MSTEE           C:\Windows\system32\drivers\MSTEE.sys

10:46:57.0228 3020  MSTEE ( UnsignedFile.Multi.Generic ) - warning

10:46:57.0228 3020  MSTEE - detected UnsignedFile.Multi.Generic (1)

10:46:57.0259 3020  [ 0CC49F78D8ACA0877D885F149084E543 ] Mup             C:\Windows\system32\Drivers\mup.sys

10:46:57.0291 3020  Mup - ok

10:46:57.0353 3020  [ A5B10C845E7538C60C0F5D87A57CB3F5 ] napagent        C:\Windows\system32\qagentRT.dll

10:46:57.0665 3020  napagent ( UnsignedFile.Multi.Generic ) - warning

10:46:57.0665 3020  napagent - detected UnsignedFile.Multi.Generic (1)

10:46:57.0727 3020  [ 2007B826C4ACD94AE32232B41F0842B9 ] NativeWifiP     C:\Windows\system32\DRIVERS\nwifi.sys

10:46:58.0102 3020  NativeWifiP ( UnsignedFile.Multi.Generic ) - warning

10:46:58.0102 3020  NativeWifiP - detected UnsignedFile.Multi.Generic (1)

10:46:58.0321 3020  [ 65950E07329FCEE8E6516B17C8D0ABB6 ] NDIS            C:\Windows\system32\drivers\ndis.sys

10:46:58.0387 3020  NDIS - ok

10:46:58.0433 3020  [ 64DF698A425478E321981431AC171334 ] NdisTapi        C:\Windows\system32\DRIVERS\ndistapi.sys

10:46:58.0792 3020  NdisTapi ( UnsignedFile.Multi.Generic ) - warning

10:46:58.0792 3020  NdisTapi - detected UnsignedFile.Multi.Generic (1)

10:46:58.0830 3020  [ 8BAA43196D7B5BB972C9A6B2BBF61A19 ] Ndisuio         C:\Windows\system32\DRIVERS\ndisuio.sys

10:46:59.0217 3020  Ndisuio ( UnsignedFile.Multi.Generic ) - warning

10:46:59.0217 3020  Ndisuio - detected UnsignedFile.Multi.Generic (1)

10:46:59.0264 3020  [ F8158771905260982CE724076419EF19 ] NdisWan         C:\Windows\system32\DRIVERS\ndiswan.sys

10:46:59.0779 3020  NdisWan ( UnsignedFile.Multi.Generic ) - warning

10:46:59.0779 3020  NdisWan - detected UnsignedFile.Multi.Generic (1)

10:46:59.0810 3020  [ 9CB77ED7CB72850253E973A2D6AFDF49 ] NDProxy         C:\Windows\system32\drivers\NDProxy.sys

10:47:00.0403 3020  NDProxy ( UnsignedFile.Multi.Generic ) - warning

10:47:00.0403 3020  NDProxy - detected UnsignedFile.Multi.Generic (1)

10:47:00.0434 3020  [ D5AC41AE382738483FAFFBD7E373D49A ] Net Driver HPZ12 C:\Windows\system32\HPZinw12.dll

10:47:00.0933 3020  Net Driver HPZ12 ( UnsignedFile.Multi.Generic ) - warning

10:47:00.0933 3020  Net Driver HPZ12 - detected UnsignedFile.Multi.Generic (1)

10:47:00.0964 3020  [ A499294F5029A7862ADC115BDA7371CE ] NetBIOS         C:\Windows\system32\DRIVERS\netbios.sys

10:47:01.0651 3020  NetBIOS ( UnsignedFile.Multi.Generic ) - warning

10:47:01.0651 3020  NetBIOS - detected UnsignedFile.Multi.Generic (1)

10:47:01.0713 3020  [ FC2C792EBDDC8E28DF939D6A92C83D61 ] netbt           C:\Windows\system32\DRIVERS\netbt.sys

10:47:02.0197 3020  netbt ( UnsignedFile.Multi.Generic ) - warning

10:47:02.0197 3020  netbt - detected UnsignedFile.Multi.Generic (1)

10:47:02.0212 3020  [ 260BF9C43EE12C6898A9F5AAB0FB0E5D ] Netlogon        C:\Windows\system32\lsass.exe

10:47:02.0618 3020  Netlogon ( UnsignedFile.Multi.Generic ) - warning

10:47:02.0618 3020  Netlogon - detected UnsignedFile.Multi.Generic (1)

10:47:02.0696 3020  [ 9B63B29DEFC0F3115A559D2597BF5D75 ] Netman          C:\Windows\System32\netman.dll

10:47:03.0507 3020  Netman ( UnsignedFile.Multi.Generic ) - warning

10:47:03.0507 3020  Netman - detected UnsignedFile.Multi.Generic (1)

10:47:03.0554 3020  [ D22CD77D4F0D63D1169BB35911BFF12D ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

10:47:03.0585 3020  NetMsmqActivator - ok

10:47:03.0601 3020  [ D22CD77D4F0D63D1169BB35911BFF12D ] NetPipeActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

10:47:03.0616 3020  NetPipeActivator - ok

10:47:03.0694 3020  [ 7846D0136CC2B264926A73047BA7688A ] netprofm        C:\Windows\System32\netprofm.dll

10:47:04.0209 3020  netprofm ( UnsignedFile.Multi.Generic ) - warning

10:47:04.0209 3020  netprofm - detected UnsignedFile.Multi.Generic (1)

10:47:04.0240 3020  [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

10:47:04.0256 3020  NetTcpActivator - ok

10:47:04.0303 3020  [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

10:47:04.0318 3020  NetTcpPortSharing - ok

10:47:04.0349 3020  [ 4AC08BD6AF2DF42E0C3196D826C8AEA7 ] nfrd960         C:\Windows\system32\drivers\nfrd960.sys

10:47:04.0381 3020  nfrd960 - ok

10:47:04.0568 3020  [ F145BF4C4668E7E312069F81EF847CFC ] NlaSvc          C:\Windows\System32\nlasvc.dll

10:47:05.0379 3020  NlaSvc ( UnsignedFile.Multi.Generic ) - warning

10:47:05.0379 3020  NlaSvc - detected UnsignedFile.Multi.Generic (1)

10:47:05.0426 3020  [ B298874F8E0EA93F06EC40AA8D146478 ] Npfs            C:\Windows\system32\drivers\Npfs.sys

10:47:05.0800 3020  Npfs ( UnsignedFile.Multi.Generic ) - warning

10:47:05.0800 3020  Npfs - detected UnsignedFile.Multi.Generic (1)

10:47:05.0831 3020  [ ACB62BAA1C319B17752553DF3026EEEB ] nsi             C:\Windows\system32\nsisvc.dll

10:47:06.0206 3020  nsi ( UnsignedFile.Multi.Generic ) - warning

10:47:06.0206 3020  nsi - detected UnsignedFile.Multi.Generic (1)

10:47:06.0237 3020  [ 1523AF19EE8B030BA682F7A53537EAEB ] nsiproxy        C:\Windows\system32\drivers\nsiproxy.sys

10:47:06.0643 3020  nsiproxy ( UnsignedFile.Multi.Generic ) - warning

10:47:06.0643 3020  nsiproxy - detected UnsignedFile.Multi.Generic (1)

10:47:06.0752 3020  [ BAC869DFB98E499BA4D9BB1FB43270E1 ] Ntfs            C:\Windows\system32\drivers\Ntfs.sys

10:47:06.0908 3020  Ntfs - ok

10:47:06.0955 3020  [ DD5D684975352B85B52E3FD5347C20CB ] Null            C:\Windows\system32\drivers\Null.sys

10:47:07.0298 3020  Null ( UnsignedFile.Multi.Generic ) - warning

10:47:07.0298 3020  Null - detected UnsignedFile.Multi.Generic (1)

10:47:07.0329 3020  [ 2C040B7ADA5B06F6FACADAC8514AA034 ] nvraid          C:\Windows\system32\drivers\nvraid.sys

10:47:07.0345 3020  nvraid - ok

10:47:07.0376 3020  [ F7EA0FE82842D05EDA3EFDD376DBFDBA ] nvstor          C:\Windows\system32\drivers\nvstor.sys

10:47:07.0407 3020  nvstor - ok

10:47:07.0438 3020  [ 19067CA93075EF4823E3938A686F532F ] nv_agp          C:\Windows\system32\drivers\nv_agp.sys

10:47:07.0469 3020  nv_agp - ok

10:47:07.0469 3020  NwlnkFlt - ok

10:47:07.0485 3020  NwlnkFwd - ok

10:47:07.0532 3020  [ 404B0121AE1A75D9A63B6934EB07C258 ] OA013Ufd        C:\Windows\system32\DRIVERS\OA013Ufd.sys

10:47:07.0875 3020  OA013Ufd ( UnsignedFile.Multi.Generic ) - warning

10:47:07.0875 3020  OA013Ufd - detected UnsignedFile.Multi.Generic (1)

10:47:07.0906 3020  [ 650BCC8FF8ED939F3F79D1E8A1CF0595 ] OA013Vid        C:\Windows\system32\DRIVERS\OA013Vid.sys

10:47:08.0296 3020  OA013Vid ( UnsignedFile.Multi.Generic ) - warning

10:47:08.0296 3020  OA013Vid - detected UnsignedFile.Multi.Generic (1)

10:47:08.0359 3020  [ 7B58953E2F263421FDBB09A192712A85 ] ohci1394        C:\Windows\system32\drivers\ohci1394.sys

10:47:08.0780 3020  ohci1394 ( UnsignedFile.Multi.Generic ) - warning

10:47:08.0780 3020  ohci1394 - detected UnsignedFile.Multi.Generic (1)

10:47:08.0920 3020  [ 9AE31D2E1D15C10D91318E0EC149CEAC ] p2pimsvc        C:\Windows\system32\p2psvc.dll

10:47:09.0481 3020  p2pimsvc ( UnsignedFile.Multi.Generic ) - warning

10:47:09.0481 3020  p2pimsvc - detected UnsignedFile.Multi.Generic (1)

10:47:09.0529 3020  [ 9AE31D2E1D15C10D91318E0EC149CEAC ] p2psvc          C:\Windows\system32\p2psvc.dll

10:47:10.0182 3020  p2psvc ( UnsignedFile.Multi.Generic ) - warning

10:47:10.0182 3020  p2psvc - detected UnsignedFile.Multi.Generic (1)

10:47:10.0237 3020  [ AECD57F94C887F58919F307C35498EA0 ] Parport         C:\Windows\system32\drivers\parport.sys

10:47:10.0682 3020  Parport ( UnsignedFile.Multi.Generic ) - warning

10:47:10.0682 3020  Parport - detected UnsignedFile.Multi.Generic (1)

10:47:10.0713 3020  [ B43751085E2ABE389DA466BC62A4B987 ] partmgr         C:\Windows\system32\drivers\partmgr.sys

10:47:10.0744 3020  partmgr - ok

10:47:10.0776 3020  [ 9AB157B374192FF276C1628FBDBA2B0E ] PcaSvc          C:\Windows\System32\pcasvc.dll

10:47:11.0166 3020  PcaSvc ( UnsignedFile.Multi.Generic ) - warning

10:47:11.0166 3020  PcaSvc - detected UnsignedFile.Multi.Generic (1)

10:47:11.0212 3020  [ 47AB1E0FC9D0E12BB53BA246E3A0906D ] pci             C:\Windows\system32\drivers\pci.sys

10:47:11.0228 3020  pci - ok

10:47:11.0259 3020  [ 8D618C829034479985A9ED56106CC732 ] pciide          C:\Windows\system32\drivers\pciide.sys

10:47:11.0275 3020  pciide - ok

10:47:11.0322 3020  [ 037661F3D7C507C9993B7010CEEE6288 ] pcmcia          C:\Windows\system32\drivers\pcmcia.sys

10:47:11.0353 3020  pcmcia - ok

10:47:11.0462 3020  [ 58865916F53592A61549B04941BFD80D ] PEAUTH          C:\Windows\system32\drivers\peauth.sys

10:47:11.0992 3020  PEAUTH ( UnsignedFile.Multi.Generic ) - warning

10:47:11.0992 3020  PEAUTH - detected UnsignedFile.Multi.Generic (1)

10:47:12.0102 3020  [ 0ED8727EA0172860F47258456C06CAEA ] PerfHost        C:\Windows\SysWow64\perfhost.exe

10:47:12.0492 3020  PerfHost ( UnsignedFile.Multi.Generic ) - warning

10:47:12.0492 3020  PerfHost - detected UnsignedFile.Multi.Generic (1)

10:47:12.0585 3020  [ E9E68C1A0F25CF4A7AC966EEA74EE89E ] pla             C:\Windows\system32\pla.dll

10:47:12.0991 3020  pla ( UnsignedFile.Multi.Generic ) - warning

10:47:12.0991 3020  pla - detected UnsignedFile.Multi.Generic (1)

10:47:13.0038 3020  [ FE6B0F59215C9FD9F9D26539C58C8B82 ] PlugPlay        C:\Windows\system32\umpnpmgr.dll

10:47:13.0350 3020  PlugPlay ( UnsignedFile.Multi.Generic ) - warning

10:47:13.0350 3020  PlugPlay - detected UnsignedFile.Multi.Generic (1)

10:47:13.0396 3020  [ 37F6046CDC630442D7DC087501FF6FC6 ] Pml Driver HPZ12 C:\Windows\system32\HPZipm12.dll

10:47:13.0724 3020  Pml Driver HPZ12 ( UnsignedFile.Multi.Generic ) - warning

10:47:13.0724 3020  Pml Driver HPZ12 - detected UnsignedFile.Multi.Generic (1)

10:47:13.0771 3020  [ 9AE31D2E1D15C10D91318E0EC149CEAC ] PNRPAutoReg     C:\Windows\system32\p2psvc.dll

10:47:14.0145 3020  PNRPAutoReg ( UnsignedFile.Multi.Generic ) - warning

10:47:14.0145 3020  PNRPAutoReg - detected UnsignedFile.Multi.Generic (1)

10:47:14.0176 3020  [ 9AE31D2E1D15C10D91318E0EC149CEAC ] PNRPsvc         C:\Windows\system32\p2psvc.dll

10:47:14.0551 3020  PNRPsvc ( UnsignedFile.Multi.Generic ) - warning

10:47:14.0551 3020  PNRPsvc - detected UnsignedFile.Multi.Generic (1)

10:47:14.0582 3020  [ 89A5560671C2D8B4A4B51F3E1AA069D8 ] PolicyAgent     C:\Windows\System32\ipsecsvc.dll

10:47:15.0050 3020  PolicyAgent ( UnsignedFile.Multi.Generic ) - warning

10:47:15.0050 3020  PolicyAgent - detected UnsignedFile.Multi.Generic (1)

10:47:15.0081 3020  [ 23386E9952025F5F21C368971E2E7301 ] PptpMiniport    C:\Windows\system32\DRIVERS\raspptp.sys

10:47:15.0424 3020  PptpMiniport ( UnsignedFile.Multi.Generic ) - warning

10:47:15.0424 3020  PptpMiniport - detected UnsignedFile.Multi.Generic (1)

10:47:15.0440 3020  [ 5080E59ECEE0BC923F14018803AA7A01 ] Processor       C:\Windows\system32\drivers\processr.sys

10:47:15.0768 3020  Processor ( UnsignedFile.Multi.Generic ) - warning

10:47:15.0768 3020  Processor - detected UnsignedFile.Multi.Generic (1)

10:47:15.0799 3020  [ E058CE4FC2449D8BFA14739C83B7FF2A ] ProfSvc         C:\Windows\system32\profsvc.dll

10:47:16.0142 3020  ProfSvc ( UnsignedFile.Multi.Generic ) - warning

10:47:16.0142 3020  ProfSvc - detected UnsignedFile.Multi.Generic (1)

10:47:16.0173 3020  [ 260BF9C43EE12C6898A9F5AAB0FB0E5D ] ProtectedStorage C:\Windows\system32\lsass.exe

10:47:16.0610 3020  ProtectedStorage ( UnsignedFile.Multi.Generic ) - warning

10:47:16.0610 3020  ProtectedStorage - detected UnsignedFile.Multi.Generic (1)

10:47:16.0641 3020  [ C5AB7F0809392D0DA027F4A2A81BFA31 ] PSched          C:\Windows\system32\DRIVERS\pacer.sys

10:47:17.0016 3020  PSched ( UnsignedFile.Multi.Generic ) - warning

10:47:17.0016 3020  PSched - detected UnsignedFile.Multi.Generic (1)

10:47:17.0062 3020  [ 0B83F4E681062F3839BE2EC1D98FD94A ] ql2300          C:\Windows\system32\drivers\ql2300.sys

10:47:17.0156 3020  ql2300 - ok

10:47:17.0203 3020  [ E1C80F8D4D1E39EF9595809C1369BF2A ] ql40xx          C:\Windows\system32\drivers\ql40xx.sys

10:47:17.0234 3020  ql40xx - ok

10:47:17.0281 3020  [ 90574842C3DA781E279061A3EFF91F07 ] QWAVE           C:\Windows\system32\qwave.dll

10:47:17.0608 3020  QWAVE ( UnsignedFile.Multi.Generic ) - warning

10:47:17.0608 3020  QWAVE - detected UnsignedFile.Multi.Generic (1)

10:47:17.0640 3020  [ E8D76EDAB77EC9C634C27B8EAC33ADC5 ] QWAVEdrv        C:\Windows\system32\drivers\qwavedrv.sys

10:47:17.0998 3020  QWAVEdrv ( UnsignedFile.Multi.Generic ) - warning

10:47:17.0998 3020  QWAVEdrv - detected UnsignedFile.Multi.Generic (1)

10:47:18.0014 3020  [ 1013B3B663A56D3DDD784F581C1BD005 ] RasAcd          C:\Windows\system32\DRIVERS\rasacd.sys

10:47:18.0357 3020  RasAcd ( UnsignedFile.Multi.Generic ) - warning

10:47:18.0357 3020  RasAcd - detected UnsignedFile.Multi.Generic (1)

10:47:18.0388 3020  [ B2AE18F847D07F0044404DDF7CB04497 ] RasAuto         C:\Windows\System32\rasauto.dll

10:47:18.0685 3020  RasAuto ( UnsignedFile.Multi.Generic ) - warning

10:47:18.0685 3020  RasAuto - detected UnsignedFile.Multi.Generic (1)

10:47:18.0732 3020  [ AC7BC4D42A7E558718DFDEC599BBFC2C ] Rasl2tp         C:\Windows\system32\DRIVERS\rasl2tp.sys

10:47:19.0044 3020  Rasl2tp ( UnsignedFile.Multi.Generic ) - warning

10:47:19.0044 3020  Rasl2tp - detected UnsignedFile.Multi.Generic (1)

10:47:19.0059 3020  [ 3AD83E4046C43BE510DE681588ACB8AF ] RasMan          C:\Windows\System32\rasmans.dll

10:47:19.0402 3020  RasMan ( UnsignedFile.Multi.Generic ) - warning

10:47:19.0402 3020  RasMan - detected UnsignedFile.Multi.Generic (1)

10:47:19.0434 3020  [ 4517FBF8B42524AFE4EDE1DE102AAE3E ] RasPppoe        C:\Windows\system32\DRIVERS\raspppoe.sys

10:47:19.0777 3020  RasPppoe ( UnsignedFile.Multi.Generic ) - warning

10:47:19.0777 3020  RasPppoe - detected UnsignedFile.Multi.Generic (1)

10:47:19.0839 3020  [ C6A593B51F34C33E5474539544072527 ] RasSstp         C:\Windows\system32\DRIVERS\rassstp.sys

10:47:20.0167 3020  RasSstp ( UnsignedFile.Multi.Generic ) - warning

10:47:20.0167 3020  RasSstp - detected UnsignedFile.Multi.Generic (1)

10:47:20.0198 3020  [ 322DB5C6B55E8D8EE8D6F358B2AAABB1 ] rdbss           C:\Windows\system32\DRIVERS\rdbss.sys

10:47:20.0557 3020  rdbss ( UnsignedFile.Multi.Generic ) - warning

10:47:20.0557 3020  rdbss - detected UnsignedFile.Multi.Generic (1)

10:47:20.0572 3020  [ 603900CC05F6BE65CCBF373800AF3716 ] RDPCDD          C:\Windows\system32\DRIVERS\RDPCDD.sys

10:47:20.0978 3020  RDPCDD ( UnsignedFile.Multi.Generic ) - warning

10:47:20.0978 3020  RDPCDD - detected UnsignedFile.Multi.Generic (1)

10:47:21.0009 3020  [ C045D1FB111C28DF0D1BE8D4BDA22C06 ] rdpdr           C:\Windows\system32\drivers\rdpdr.sys

10:47:21.0477 3020  rdpdr ( UnsignedFile.Multi.Generic ) - warning

10:47:21.0477 3020  rdpdr - detected UnsignedFile.Multi.Generic (1)

10:47:21.0493 3020  [ CAB9421DAF3D97B33D0D055858E2C3AB ] RDPENCDD        C:\Windows\system32\drivers\rdpencdd.sys

10:47:21.0898 3020  RDPENCDD ( UnsignedFile.Multi.Generic ) - warning

10:47:21.0898 3020  RDPENCDD - detected UnsignedFile.Multi.Generic (1)

10:47:21.0961 3020  [ AE4BD9E1C33D351D8E607FC81F15160C ] RDPWD           C:\Windows\system32\drivers\RDPWD.sys

10:47:22.0304 3020  RDPWD ( UnsignedFile.Multi.Generic ) - warning

10:47:22.0304 3020  RDPWD - detected UnsignedFile.Multi.Generic (1)

10:47:22.0351 3020  [ C612B9557DA73F70D41F8A6FBC8E5344 ] RemoteAccess    C:\Windows\System32\mprdim.dll

10:47:22.0710 3020  RemoteAccess ( UnsignedFile.Multi.Generic ) - warning

10:47:22.0710 3020  RemoteAccess - detected UnsignedFile.Multi.Generic (1)

10:47:22.0756 3020  [ 44B9D8EC2F3EF3A0EFB00857AF70D861 ] RemoteRegistry  C:\Windows\system32\regsvc.dll

10:47:23.0115 3020  RemoteRegistry ( UnsignedFile.Multi.Generic ) - warning

10:47:23.0115 3020  RemoteRegistry - detected UnsignedFile.Multi.Generic (1)

10:47:23.0162 3020  [ F46C457840D4B7A4DAAFEE739CE04102 ] RpcLocator      C:\Windows\system32\locator.exe

10:47:23.0521 3020  RpcLocator ( UnsignedFile.Multi.Generic ) - warning

10:47:23.0521 3020  RpcLocator - detected UnsignedFile.Multi.Generic (1)

10:47:23.0568 3020  [ CF8B9A3A5E7DC57724A89D0C3E8CF9EF ] RpcSs           C:\Windows\system32\rpcss.dll

10:47:23.0926 3020  RpcSs ( UnsignedFile.Multi.Generic ) - warning

10:47:23.0926 3020  RpcSs - detected UnsignedFile.Multi.Generic (1)

10:47:23.0973 3020  [ 22A9CB08B1A6707C1550C6BF099AAE73 ] rspndr          C:\Windows\system32\DRIVERS\rspndr.sys

10:47:24.0316 3020  rspndr ( UnsignedFile.Multi.Generic ) - warning

10:47:24.0316 3020  rspndr - detected UnsignedFile.Multi.Generic (1)

10:47:24.0348 3020  [ 260BF9C43EE12C6898A9F5AAB0FB0E5D ] SamSs           C:\Windows\system32\lsass.exe

10:47:24.0706 3020  SamSs ( UnsignedFile.Multi.Generic ) - warning

10:47:24.0706 3020  SamSs - detected UnsignedFile.Multi.Generic (1)

10:47:24.0738 3020  [ CD9C693589C60AD59BBBCFB0E524E01B ] sbp2port        C:\Windows\system32\drivers\sbp2port.sys

10:47:24.0769 3020  sbp2port - ok

10:47:24.0831 3020  [ FD1CDCF108D5EF3366F00D18B70FB89B ] SCardSvr        C:\Windows\System32\SCardSvr.dll

10:47:25.0206 3020  SCardSvr ( UnsignedFile.Multi.Generic ) - warning

10:47:25.0206 3020  SCardSvr - detected UnsignedFile.Multi.Generic (1)

10:47:25.0284 3020  [ 0F838C811AD295D2A4489B9993096C63 ] Schedule        C:\Windows\system32\schedsvc.dll

10:47:25.0736 3020  Schedule ( UnsignedFile.Multi.Generic ) - warning

10:47:25.0736 3020  Schedule - detected UnsignedFile.Multi.Generic (1)

10:47:25.0767 3020  [ 5A268127633C7EE2A7FB87F39D748D56 ] SCPolicySvc     C:\Windows\System32\certprop.dll

10:47:26.0095 3020  SCPolicySvc ( UnsignedFile.Multi.Generic ) - warning

10:47:26.0095 3020  SCPolicySvc - detected UnsignedFile.Multi.Generic (1)

10:47:26.0126 3020  [ 4FF71B076A7760FE75EA5AE2D0EE0018 ] SDRSVC          C:\Windows\System32\SDRSVC.dll

10:47:26.0547 3020  SDRSVC ( UnsignedFile.Multi.Generic ) - warning

10:47:26.0547 3020  SDRSVC - detected UnsignedFile.Multi.Generic (1)

10:47:26.0578 3020  [ 3EA8A16169C26AFBEB544E0E48421186 ] secdrv          C:\Windows\system32\drivers\secdrv.sys

10:47:26.0937 3020  secdrv ( UnsignedFile.Multi.Generic ) - warning

10:47:26.0937 3020  secdrv - detected UnsignedFile.Multi.Generic (1)

10:47:26.0968 3020  [ 5ACDCBC67FCF894A1815B9F96D704490 ] seclogon        C:\Windows\system32\seclogon.dll

10:47:27.0312 3020  seclogon ( UnsignedFile.Multi.Generic ) - warning

10:47:27.0312 3020  seclogon - detected UnsignedFile.Multi.Generic (1)

10:47:27.0343 3020  [ 90973A64B96CD647FF81C79443618EED ] SENS            C:\Windows\System32\sens.dll

10:47:27.0702 3020  SENS ( UnsignedFile.Multi.Generic ) - warning

10:47:27.0702 3020  SENS - detected UnsignedFile.Multi.Generic (1)

10:47:27.0733 3020  [ F71BFE7AC6C52273B7C82CBF1BB2A222 ] Serenum         C:\Windows\system32\drivers\serenum.sys

10:47:28.0107 3020  Serenum ( UnsignedFile.Multi.Generic ) - warning

10:47:28.0107 3020  Serenum - detected UnsignedFile.Multi.Generic (1)

10:47:28.0138 3020  [ E62FAC91EE288DB29A9696A9D279929C ] Serial          C:\Windows\system32\drivers\serial.sys

10:47:28.0544 3020  Serial ( UnsignedFile.Multi.Generic ) - warning

10:47:28.0544 3020  Serial - detected UnsignedFile.Multi.Generic (1)

10:47:28.0591 3020  [ A842F04833684BCEEA7336211BE478DF ] sermouse        C:\Windows\system32\drivers\sermouse.sys

10:47:28.0981 3020  sermouse ( UnsignedFile.Multi.Generic ) - warning

10:47:28.0981 3020  sermouse - detected UnsignedFile.Multi.Generic (1)

10:47:29.0012 3020  [ A8E4A4407A09F35DCCC3771AF590B0C4 ] SessionEnv      C:\Windows\system32\sessenv.dll

10:47:29.0433 3020  SessionEnv ( UnsignedFile.Multi.Generic ) - warning

10:47:29.0433 3020  SessionEnv - detected UnsignedFile.Multi.Generic (1)

10:47:29.0480 3020  [ 14D4B4465193A87C127933978E8C4106 ] sffdisk         C:\Windows\system32\drivers\sffdisk.sys

10:47:29.0870 3020  sffdisk ( UnsignedFile.Multi.Generic ) - warning

10:47:29.0870 3020  sffdisk - detected UnsignedFile.Multi.Generic (1)

10:47:29.0901 3020  [ 7073AEE3F82F3D598E3825962AA98AB2 ] sffp_mmc        C:\Windows\system32\drivers\sffp_mmc.sys

10:47:30.0276 3020  sffp_mmc ( UnsignedFile.Multi.Generic ) - warning

10:47:30.0276 3020  sffp_mmc - detected UnsignedFile.Multi.Generic (1)

10:47:30.0291 3020  [ 35E59EBE4A01A0532ED67975161C7B82 ] sffp_sd         C:\Windows\system32\drivers\sffp_sd.sys

10:47:30.0790 3020  sffp_sd ( UnsignedFile.Multi.Generic ) - warning

10:47:30.0790 3020  sffp_sd - detected UnsignedFile.Multi.Generic (1)

10:47:30.0806 3020  [ 6B7838C94135768BD455CBDC23E39E5F ] sfloppy         C:\Windows\system32\drivers\sfloppy.sys

10:47:31.0227 3020  sfloppy ( UnsignedFile.Multi.Generic ) - warning

10:47:31.0227 3020  sfloppy - detected UnsignedFile.Multi.Generic (1)

10:47:31.0274 3020  [ 4C5AEE179DA7E1EE9A9CCB9DA289AF34 ] SharedAccess    C:\Windows\System32\ipnathlp.dll

10:47:31.0945 3020  SharedAccess ( UnsignedFile.Multi.Generic ) - warning

10:47:31.0945 3020  SharedAccess - detected UnsignedFile.Multi.Generic (1)

10:47:31.0976 3020  [ 56793271ECDEDD350C5ADD305603E963 ] ShellHWDetection C:\Windows\System32\shsvcs.dll

10:47:32.0600 3020  ShellHWDetection ( UnsignedFile.Multi.Generic ) - warning

10:47:32.0600 3020  ShellHWDetection - detected UnsignedFile.Multi.Generic (1)

10:47:32.0647 3020  [ 7A5DE502AEB719D4594C6471060A78B3 ] SiSRaid2        C:\Windows\system32\drivers\sisraid2.sys

10:47:32.0662 3020  SiSRaid2 - ok

10:47:32.0740 3020  [ 3A2F769FAB9582BC720E11EA1DFB184D ] SiSRaid4        C:\Windows\system32\drivers\sisraid4.sys

10:47:32.0756 3020  SiSRaid4 - ok

10:47:32.0865 3020  [ A9A27A8E257B45A604FDAD4F26FE7241 ] slsvc           C:\Windows\system32\SLsvc.exe

10:47:33.0536 3020  slsvc ( UnsignedFile.Multi.Generic ) - warning

10:47:33.0536 3020  slsvc - detected UnsignedFile.Multi.Generic (1)

10:47:33.0583 3020  [ FD74B4B7C2088E390A30C85A896FC3AF ] SLUINotify      C:\Windows\system32\SLUINotify.dll

10:47:33.0957 3020  SLUINotify ( UnsignedFile.Multi.Generic ) - warning

10:47:33.0957 3020  SLUINotify - detected UnsignedFile.Multi.Generic (1)

10:47:33.0988 3020  [ 290B6F6A0EC4FCDFC90F5CB6D7020473 ] Smb             C:\Windows\system32\DRIVERS\smb.sys

10:47:34.0363 3020  Smb ( UnsignedFile.Multi.Generic ) - warning

10:47:34.0363 3020  Smb - detected UnsignedFile.Multi.Generic (1)

10:47:34.0441 3020  [ F8F47F38909823B1AF28D60B96340CFF ] SNMPTRAP        C:\Windows\System32\snmptrap.exe

10:47:34.0768 3020  SNMPTRAP ( UnsignedFile.Multi.Generic ) - warning

10:47:34.0768 3020  SNMPTRAP - detected UnsignedFile.Multi.Generic (1)

10:47:34.0831 3020  [ 386C3C63F00A7040C7EC5E384217E89D ] spldr           C:\Windows\system32\drivers\spldr.sys

10:47:34.0862 3020  spldr - ok

10:47:34.0909 3020  [ F66FF751E7EFC816D266977939EF5DC3 ] Spooler         C:\Windows\System32\spoolsv.exe

10:47:35.0252 3020  Spooler ( UnsignedFile.Multi.Generic ) - warning

10:47:35.0252 3020  Spooler - detected UnsignedFile.Multi.Generic (1)

10:47:35.0314 3020  [ 880A57FCCB571EBD063D4DD50E93E46D ] srv             C:\Windows\system32\DRIVERS\srv.sys

10:47:35.0969 3020  srv ( UnsignedFile.Multi.Generic ) - warning

10:47:35.0969 3020  srv - detected UnsignedFile.Multi.Generic (1)

10:47:35.0989 3020  [ A1AD14A6D7A37891FFFECA35EBBB0730 ] srv2            C:\Windows\system32\DRIVERS\srv2.sys

10:47:36.0343 3020  srv2 ( UnsignedFile.Multi.Generic ) - warning

10:47:36.0343 3020  srv2 - detected UnsignedFile.Multi.Generic (1)

10:47:36.0355 3020  [ 4BED62F4FA4D8300973F1151F4C4D8A7 ] srvnet          C:\Windows\system32\DRIVERS\srvnet.sys

10:47:36.0830 3020  srvnet ( UnsignedFile.Multi.Generic ) - warning

10:47:36.0830 3020  srvnet - detected UnsignedFile.Multi.Generic (1)

10:47:36.0861 3020  [ 192C74646EC5725AEF3F80D19FF75F6A ] SSDPSRV         C:\Windows\System32\ssdpsrv.dll

10:47:37.0204 3020  SSDPSRV ( UnsignedFile.Multi.Generic ) - warning

10:47:37.0204 3020  SSDPSRV - detected UnsignedFile.Multi.Generic (1)

10:47:37.0266 3020  [ 2EE3FA0308E6185BA64A9A7F2E74332B ] SstpSvc         C:\Windows\system32\sstpsvc.dll

10:47:37.0625 3020  SstpSvc ( UnsignedFile.Multi.Generic ) - warning

10:47:37.0625 3020  SstpSvc - detected UnsignedFile.Multi.Generic (1)

10:47:37.0703 3020  [ 74425FFA11C133D045E1C3BE2EAD481D ] ssudmdm         C:\Windows\system32\DRIVERS\ssudmdm.sys

10:47:37.0719 3020  ssudmdm - ok

10:47:37.0875 3020  [ C5DF63AE2693C9B6B01B4A2E6C1C64AC ] STacSV          C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_15f4e438\STacSV64.exe

10:47:38.0280 3020  STacSV ( UnsignedFile.Multi.Generic ) - warning

10:47:38.0280 3020  STacSV - detected UnsignedFile.Multi.Generic (1)

10:47:38.0358 3020  [ BA16447226ABFD342E130D2F24F73D32 ] STHDA           C:\Windows\system32\DRIVERS\stwrt64.sys

10:47:38.0764 3020  STHDA ( UnsignedFile.Multi.Generic ) - warning

10:47:38.0764 3020  STHDA - detected UnsignedFile.Multi.Generic (1)

10:47:38.0826 3020  [ 15825C1FBFB8779992CB65087F316AF5 ] stisvc          C:\Windows\System32\wiaservc.dll

10:47:39.0232 3020  stisvc ( UnsignedFile.Multi.Generic ) - warning

10:47:39.0232 3020  stisvc - detected UnsignedFile.Multi.Generic (1)

10:47:39.0248 3020  [ 8A851CA908B8B974F89C50D2E18D4F0C ] swenum          C:\Windows\system32\DRIVERS\swenum.sys

10:47:39.0279 3020  swenum - ok

10:47:39.0310 3020  [ 6DE37F4DE19D4EFD9C48C43ADDBC949A ] swprv           C:\Windows\System32\swprv.dll

10:47:39.0747 3020  swprv ( UnsignedFile.Multi.Generic ) - warning

10:47:39.0747 3020  swprv - detected UnsignedFile.Multi.Generic (1)

10:47:39.0778 3020  [ 2F26A2C6FC96B29BEFF5D8ED74E6625B ] Symc8xx         C:\Windows\system32\drivers\symc8xx.sys

10:47:39.0794 3020  Symc8xx - ok

10:47:39.0825 3020  [ A909667976D3BCCD1DF813FED517D837 ] Sym_hi          C:\Windows\system32\drivers\sym_hi.sys

10:47:39.0840 3020  Sym_hi - ok

10:47:39.0872 3020  [ 36887B56EC2D98B9C362F6AE4DE5B7B0 ] Sym_u3          C:\Windows\system32\drivers\sym_u3.sys

10:47:39.0903 3020  Sym_u3 - ok

10:47:39.0950 3020  [ 3178B56219E0E4FB5F95299E49B83B44 ] SynTP           C:\Windows\system32\DRIVERS\SynTP.sys

10:47:39.0981 3020  SynTP - ok

10:47:40.0043 3020  [ 92D7A8B0F87B036F17D25885937897A6 ] SysMain         C:\Windows\system32\sysmain.dll

10:47:40.0496 3020  SysMain ( UnsignedFile.Multi.Generic ) - warning

10:47:40.0496 3020  SysMain - detected UnsignedFile.Multi.Generic (1)

10:47:40.0511 3020  [ 005CE42567F9113A3BCCB3B20073B029 ] TabletInputService C:\Windows\System32\TabSvc.dll

10:47:40.0901 3020  TabletInputService ( UnsignedFile.Multi.Generic ) - warning

10:47:40.0917 3020  TabletInputService - detected UnsignedFile.Multi.Generic (1)

10:47:40.0948 3020  [ CC2562B4D55E0B6A4758C65407F63B79 ] TapiSrv         C:\Windows\System32\tapisrv.dll

10:47:42.0929 3020  TapiSrv ( UnsignedFile.Multi.Generic ) - warning

10:47:42.0929 3020  TapiSrv - detected UnsignedFile.Multi.Generic (1)

10:47:42.0960 3020  [ CDBE8D7C1E201B911CDC346D06617FB5 ] TBS             C:\Windows\System32\tbssvc.dll

10:47:43.0397 3020  TBS ( UnsignedFile.Multi.Generic ) - warning

10:47:43.0397 3020  TBS - detected UnsignedFile.Multi.Generic (1)

10:47:43.0522 3020  [ 46D448E9117464E4D3BBF36D7E3FA48E ] Tcpip           C:\Windows\system32\drivers\tcpip.sys

10:47:43.0694 3020  Tcpip - ok

10:47:43.0787 3020  [ 46D448E9117464E4D3BBF36D7E3FA48E ] Tcpip6          C:\Windows\system32\DRIVERS\tcpip.sys

10:47:43.0865 3020  Tcpip6 - ok

10:47:43.0912 3020  [ C7E72A4071EE0200E3C075DACFB2B334 ] tcpipreg        C:\Windows\system32\drivers\tcpipreg.sys

10:47:44.0505 3020  tcpipreg ( UnsignedFile.Multi.Generic ) - warning

10:47:44.0505 3020  tcpipreg - detected UnsignedFile.Multi.Generic (1)

10:47:44.0536 3020  [ 1D8BF4AAA5FB7A2761475781DC1195BC ] TDPIPE          C:\Windows\system32\drivers\tdpipe.sys

10:47:45.0051 3020  TDPIPE ( UnsignedFile.Multi.Generic ) - warning

10:47:45.0051 3020  TDPIPE - detected UnsignedFile.Multi.Generic (1)

10:47:45.0066 3020  [ 7F7E00CDF609DF657F4CDA02DD1C9BB1 ] TDTCP           C:\Windows\system32\drivers\tdtcp.sys

10:47:45.0566 3020  TDTCP ( UnsignedFile.Multi.Generic ) - warning

10:47:45.0566 3020  TDTCP - detected UnsignedFile.Multi.Generic (1)

10:47:45.0597 3020  [ 458919C8C42E398DC4802178D5FFEE27 ] tdx             C:\Windows\system32\DRIVERS\tdx.sys

10:47:45.0924 3020  tdx ( UnsignedFile.Multi.Generic ) - warning

10:47:45.0924 3020  tdx - detected UnsignedFile.Multi.Generic (1)

10:47:45.0956 3020  [ 8C19678D22649EC002EF2282EAE92F98 ] TermDD          C:\Windows\system32\DRIVERS\termdd.sys

10:47:45.0987 3020  TermDD - ok

10:47:46.0034 3020  [ 5CDD30BC217082DAC71A9878D9BFD566 ] TermService     C:\Windows\System32\termsrv.dll

10:47:46.0377 3020  TermService ( UnsignedFile.Multi.Generic ) - warning

10:47:46.0377 3020  TermService - detected UnsignedFile.Multi.Generic (1)

10:47:46.0424 3020  [ 56793271ECDEDD350C5ADD305603E963 ] Themes          C:\Windows\system32\shsvcs.dll

10:47:46.0892 3020  Themes ( UnsignedFile.Multi.Generic ) - warning

10:47:46.0892 3020  Themes - detected UnsignedFile.Multi.Generic (1)

10:47:46.0970 3020  [ 3CBE4995E80E13CCFBC42E5DCF3AC81A ] THREADORDER     C:\Windows\system32\mmcss.dll

10:47:47.0469 3020  THREADORDER ( UnsignedFile.Multi.Generic ) - warning

10:47:47.0469 3020  THREADORDER - detected UnsignedFile.Multi.Generic (1)

10:47:47.0594 3020  [ F4689F05AF472A651A7B1B7B02D200E7 ] TrkWks          C:\Windows\System32\trkwks.dll

10:47:48.0077 3020  TrkWks ( UnsignedFile.Multi.Generic ) - warning

10:47:48.0077 3020  TrkWks - detected UnsignedFile.Multi.Generic (1)

10:47:48.0140 3020  [ 66328B08EF5A9305D8EDE36B93930369 ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe

10:47:48.0530 3020  TrustedInstaller ( UnsignedFile.Multi.Generic ) - warning

10:47:48.0530 3020  TrustedInstaller - detected UnsignedFile.Multi.Generic (1)

10:47:48.0545 3020  [ 9E5409CD17C8BEF193AAD498F3BC2CB8 ] tssecsrv        C:\Windows\system32\DRIVERS\tssecsrv.sys

10:47:48.0966 3020  tssecsrv ( UnsignedFile.Multi.Generic ) - warning

10:47:48.0966 3020  tssecsrv - detected UnsignedFile.Multi.Generic (1)

10:47:48.0998 3020  [ 89EC74A9E602D16A75A4170511029B3C ] tunmp           C:\Windows\system32\DRIVERS\tunmp.sys

10:47:49.0575 3020  tunmp ( UnsignedFile.Multi.Generic ) - warning

10:47:49.0575 3020  tunmp - detected UnsignedFile.Multi.Generic (1)

10:47:49.0622 3020  [ 30A9B3F45AD081BFFC3BCAA9C812B609 ] tunnel          C:\Windows\system32\DRIVERS\tunnel.sys

10:47:50.0074 3020  tunnel ( UnsignedFile.Multi.Generic ) - warning

10:47:50.0074 3020  tunnel - detected UnsignedFile.Multi.Generic (1)

10:47:50.0136 3020  [ FEC266EF401966311744BD0F359F7F56 ] uagp35          C:\Windows\system32\drivers\uagp35.sys

10:47:50.0168 3020  uagp35 - ok

10:47:50.0261 3020  [ FAF2640A2A76ED03D449E443194C4C34 ] udfs            C:\Windows\system32\DRIVERS\udfs.sys

10:47:50.0760 3020  udfs ( UnsignedFile.Multi.Generic ) - warning

10:47:50.0760 3020  udfs - detected UnsignedFile.Multi.Generic (1)

10:47:50.0854 3020  [ 060507C4113391394478F6953A79EEDC ] UI0Detect       C:\Windows\system32\UI0Detect.exe

10:47:51.0260 3020  UI0Detect ( UnsignedFile.Multi.Generic ) - warning

10:47:51.0260 3020  UI0Detect - detected UnsignedFile.Multi.Generic (1)

10:47:51.0306 3020  [ 4EC9447AC3AB462647F60E547208CA00 ] uliagpkx        C:\Windows\system32\drivers\uliagpkx.sys

10:47:51.0338 3020  uliagpkx - ok

10:47:51.0400 3020  [ 697F0446134CDC8F99E69306184FBBB4 ] uliahci         C:\Windows\system32\drivers\uliahci.sys

10:47:51.0431 3020  uliahci - ok

10:47:51.0462 3020  [ 31707F09846056651EA2C37858F5DDB0 ] UlSata          C:\Windows\system32\drivers\ulsata.sys

10:47:51.0494 3020  UlSata - ok

10:47:51.0525 3020  [ 85E5E43ED5B48C8376281BAB519271B7 ] ulsata2         C:\Windows\system32\drivers\ulsata2.sys

10:47:51.0556 3020  ulsata2 - ok

10:47:51.0587 3020  [ 46E9A994C4FED537DD951F60B86AD3F4 ] umbus           C:\Windows\system32\DRIVERS\umbus.sys

10:47:52.0008 3020  umbus ( UnsignedFile.Multi.Generic ) - warning

10:47:52.0008 3020  umbus - detected UnsignedFile.Multi.Generic (1)

10:47:52.0071 3020  [ 7093799FF80E9DECA0680D2E3535BE60 ] upnphost        C:\Windows\System32\upnphost.dll

10:47:52.0492 3020  upnphost ( UnsignedFile.Multi.Generic ) - warning

10:47:52.0492 3020  upnphost - detected UnsignedFile.Multi.Generic (1)

10:47:52.0570 3020  [ 07E3498FC60834219D2356293DA0FECC ] usbccgp         C:\Windows\system32\DRIVERS\usbccgp.sys

10:47:53.0054 3020  usbccgp ( UnsignedFile.Multi.Generic ) - warning

10:47:53.0054 3020  usbccgp - detected UnsignedFile.Multi.Generic (1)

10:47:53.0116 3020  [ 9247F7E0B65852C1F6631480984D6ED2 ] usbcir          C:\Windows\system32\drivers\usbcir.sys

10:47:53.0631 3020  usbcir ( UnsignedFile.Multi.Generic ) - warning

10:47:53.0631 3020  usbcir - detected UnsignedFile.Multi.Generic (1)

10:47:53.0678 3020  [ 827E44DE934A736EA31E91D353EB126F ] usbehci         C:\Windows\system32\DRIVERS\usbehci.sys

10:47:54.0036 3020  usbehci ( UnsignedFile.Multi.Generic ) - warning

10:47:54.0036 3020  usbehci - detected UnsignedFile.Multi.Generic (1)

10:47:54.0099 3020  [ BB35CD80A2ECECFADC73569B3D70C7D1 ] usbhub          C:\Windows\system32\DRIVERS\usbhub.sys

10:47:54.0614 3020  usbhub ( UnsignedFile.Multi.Generic ) - warning

10:47:54.0614 3020  usbhub - detected UnsignedFile.Multi.Generic (1)

10:47:54.0645 3020  [ EBA14EF0C07CEC233F1529C698D0D154 ] usbohci         C:\Windows\system32\drivers\usbohci.sys

10:47:55.0097 3020  usbohci ( UnsignedFile.Multi.Generic ) - warning

10:47:55.0097 3020  usbohci - detected UnsignedFile.Multi.Generic (1)

10:47:55.0144 3020  [ 28B693B6D31E7B9332C1BDCEFEF228C1 ] usbprint        C:\Windows\system32\DRIVERS\usbprint.sys

10:47:55.0565 3020  usbprint ( UnsignedFile.Multi.Generic ) - warning

10:47:55.0565 3020  usbprint - detected UnsignedFile.Multi.Generic (1)

10:47:55.0596 3020  [ EA0BF666868964FBE8CB10E50C97B9F1 ] usbscan         C:\Windows\system32\DRIVERS\usbscan.sys

10:47:56.0002 3020  usbscan ( UnsignedFile.Multi.Generic ) - warning

10:47:56.0002 3020  usbscan - detected UnsignedFile.Multi.Generic (1)

10:47:56.0049 3020  [ B854C1558FCA0C269A38663E8B59B581 ] USBSTOR         C:\Windows\system32\DRIVERS\USBSTOR.SYS

10:47:56.0454 3020  USBSTOR ( UnsignedFile.Multi.Generic ) - warning

10:47:56.0454 3020  USBSTOR - detected UnsignedFile.Multi.Generic (1)

10:47:56.0501 3020  [ B2872CBF9F47316ABD0E0C74A1ABA507 ] usbuhci         C:\Windows\system32\DRIVERS\usbuhci.sys

10:47:56.0922 3020  usbuhci ( UnsignedFile.Multi.Generic ) - warning

10:47:56.0922 3020  usbuhci - detected UnsignedFile.Multi.Generic (1)

10:47:56.0985 3020  [ FC33099877790D51B0927B7039059855 ] usbvideo        C:\Windows\system32\Drivers\usbvideo.sys

10:47:57.0453 3020  usbvideo ( UnsignedFile.Multi.Generic ) - warning

10:47:57.0453 3020  usbvideo - detected UnsignedFile.Multi.Generic (1)

10:47:57.0500 3020  [ D76E231E4850BB3F88A3D9A78DF191E3 ] UxSms           C:\Windows\System32\uxsms.dll

10:47:57.0983 3020  UxSms ( UnsignedFile.Multi.Generic ) - warning

10:47:57.0983 3020  UxSms - detected UnsignedFile.Multi.Generic (1)

10:47:58.0061 3020  [ 294945381DFA7CE58CECF0A9896AF327 ] vds             C:\Windows\System32\vds.exe

10:47:58.0545 3020  vds ( UnsignedFile.Multi.Generic ) - warning

10:47:58.0545 3020  vds - detected UnsignedFile.Multi.Generic (1)

10:47:58.0592 3020  [ 916B94BCF1E09873FFF2D5FB11767BBC ] vga             C:\Windows\system32\DRIVERS\vgapnp.sys

10:47:58.0982 3020  vga ( UnsignedFile.Multi.Generic ) - warning

10:47:58.0982 3020  vga - detected UnsignedFile.Multi.Generic (1)

10:47:59.0013 3020  [ B83AB16B51FEDA65DD81B8C59D114D63 ] VgaSave         C:\Windows\System32\drivers\vga.sys

10:47:59.0465 3020  VgaSave ( UnsignedFile.Multi.Generic ) - warning

10:47:59.0465 3020  VgaSave - detected UnsignedFile.Multi.Generic (1)

10:47:59.0528 3020  [ 8294B6C3FDB6C33F24E150DE647ECDAA ] viaide          C:\Windows\system32\drivers\viaide.sys

10:47:59.0543 3020  viaide - ok

10:47:59.0559 3020  [ 2B7E885ED951519A12C450D24535DFCA ] volmgr          C:\Windows\system32\drivers\volmgr.sys

10:47:59.0590 3020  volmgr - ok

10:47:59.0684 3020  [ CEC5AC15277D75D9E5DEC2E1C6EAF877 ] volmgrx         C:\Windows\system32\drivers\volmgrx.sys

10:47:59.0793 3020  volmgrx - ok

10:47:59.0824 3020  [ 5280AADA24AB36B01A84A6424C475C8D ] volsnap         C:\Windows\system32\drivers\volsnap.sys

10:47:59.0871 3020  volsnap - ok

10:47:59.0902 3020  [ A68F455ED2673835209318DD61BFBB0E ] vsmraid         C:\Windows\system32\drivers\vsmraid.sys

10:47:59.0933 3020  vsmraid - ok

10:48:00.0105 3020  [ B75232DAD33BFD95BF6F0A3E6BFF51E1 ] VSS             C:\Windows\system32\vssvc.exe

10:48:00.0791 3020  VSS ( UnsignedFile.Multi.Generic ) - warning

10:48:00.0791 3020  VSS - detected UnsignedFile.Multi.Generic (1)

10:48:00.0869 3020  [ F14A7DE2EA41883E250892E1E5230A9A ] W32Time         C:\Windows\system32\w32time.dll

10:48:01.0400 3020  W32Time ( UnsignedFile.Multi.Generic ) - warning

10:48:01.0400 3020  W32Time - detected UnsignedFile.Multi.Generic (1)

10:48:01.0446 3020  [ FEF8FE5923FEAD2CEE4DFABFCE3393A7 ] WacomPen        C:\Windows\system32\drivers\wacompen.sys

10:48:01.0852 3020  WacomPen ( UnsignedFile.Multi.Generic ) - warning

10:48:01.0852 3020  WacomPen - detected UnsignedFile.Multi.Generic (1)

10:48:01.0899 3020  [ B8E7049622300D20BA6D8BE0C47C0CFD ] Wanarp          C:\Windows\system32\DRIVERS\wanarp.sys

10:48:02.0351 3020  Wanarp ( UnsignedFile.Multi.Generic ) - warning

10:48:02.0351 3020  Wanarp - detected UnsignedFile.Multi.Generic (1)

10:48:02.0382 3020  [ B8E7049622300D20BA6D8BE0C47C0CFD ] Wanarpv6        C:\Windows\system32\DRIVERS\wanarp.sys

10:48:02.0913 3020  Wanarpv6 ( UnsignedFile.Multi.Generic ) - warning

10:48:02.0913 3020  Wanarpv6 - detected UnsignedFile.Multi.Generic (1)

10:48:02.0991 3020  [ B4E4C37D0AA6100090A53213EE2BF1C1 ] wcncsvc         C:\Windows\System32\wcncsvc.dll

10:48:03.0615 3020  wcncsvc ( UnsignedFile.Multi.Generic ) - warning

10:48:03.0615 3020  wcncsvc - detected UnsignedFile.Multi.Generic (1)

10:48:03.0646 3020  [ EA4B369560E986F19D93F45A881484AC ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll

10:48:04.0114 3020  WcsPlugInService ( UnsignedFile.Multi.Generic ) - warning

10:48:04.0114 3020  WcsPlugInService - detected UnsignedFile.Multi.Generic (1)

10:48:04.0176 3020  [ 0C17A0816F65B89E362E682AD5E7266E ] Wd              C:\Windows\system32\drivers\wd.sys

10:48:04.0192 3020  Wd - ok

10:48:04.0286 3020  [ DBB4397D703A755FACB05486C449C507 ] Wdf01000        C:\Windows\system32\drivers\Wdf01000.sys

10:48:04.0348 3020  Wdf01000 - ok

10:48:04.0379 3020  [ C5EFDA73EBFCA8B02A094898DE0A9276 ] WdiServiceHost  C:\Windows\system32\wdi.dll

10:48:04.0847 3020  WdiServiceHost ( UnsignedFile.Multi.Generic ) - warning

10:48:04.0847 3020  WdiServiceHost - detected UnsignedFile.Multi.Generic (1)

10:48:04.0878 3020  [ C5EFDA73EBFCA8B02A094898DE0A9276 ] WdiSystemHost   C:\Windows\system32\wdi.dll

10:48:05.0378 3020  WdiSystemHost ( UnsignedFile.Multi.Generic ) - warning

10:48:05.0378 3020  WdiSystemHost - detected UnsignedFile.Multi.Generic (1)

10:48:05.0456 3020  [ 3E6D05381CF35F75EBB055544A8ED9AC ] WebClient       C:\Windows\System32\webclnt.dll

10:48:06.0033 3020  WebClient ( UnsignedFile.Multi.Generic ) - warning

10:48:06.0033 3020  WebClient - detected UnsignedFile.Multi.Generic (1)

10:48:06.0095 3020  [ 8D40BC587993F876658BF9FB0F7D3462 ] Wecsvc          C:\Windows\system32\wecsvc.dll

10:48:10.0120 3020  Wecsvc ( UnsignedFile.Multi.Generic ) - warning

10:48:10.0120 3020  Wecsvc - detected UnsignedFile.Multi.Generic (1)

10:48:10.0167 3020  [ 9C980351D7E96288EA0C23AE232BD065 ] wercplsupport   C:\Windows\System32\wercplsupport.dll

10:48:10.0635 3020  wercplsupport ( UnsignedFile.Multi.Generic ) - warning

10:48:10.0635 3020  wercplsupport - detected UnsignedFile.Multi.Generic (1)

10:48:10.0682 3020  [ 66B9ECEBC46683F47EDC06333C075FEF ] WerSvc          C:\Windows\System32\WerSvc.dll

10:48:11.0150 3020  WerSvc ( UnsignedFile.Multi.Generic ) - warning

10:48:11.0150 3020  WerSvc - detected UnsignedFile.Multi.Generic (1)

10:48:11.0228 3020  WinDefend - ok

10:48:11.0243 3020  WinHttpAutoProxySvc - ok

10:48:11.0399 3020  [ D2E7296ED1BD26D8DB2799770C077A02 ] Winmgmt         C:\Windows\system32\wbem\WMIsvc.dll

10:48:11.0914 3020  Winmgmt ( UnsignedFile.Multi.Generic ) - warning

10:48:11.0914 3020  Winmgmt - detected UnsignedFile.Multi.Generic (1)

10:48:11.0914 3020  WinRM - ok

10:48:12.0054 3020  [ EC339C8115E91BAED835957E9A677F16 ] Wlansvc         C:\Windows\System32\wlansvc.dll

10:48:12.0694 3020  Wlansvc ( UnsignedFile.Multi.Generic ) - warning

10:48:12.0694 3020  Wlansvc - detected UnsignedFile.Multi.Generic (1)

10:48:12.0725 3020  [ E18AEBAAA5A773FE11AA2C70F65320F5 ] WmiAcpi         C:\Windows\system32\DRIVERS\wmiacpi.sys

10:48:13.0365 3020  WmiAcpi ( UnsignedFile.Multi.Generic ) - warning

10:48:13.0365 3020  WmiAcpi - detected UnsignedFile.Multi.Generic (1)

10:48:13.0412 3020  [ 21FA389E65A852698B6A1341F36EE02D ] wmiApSrv        C:\Windows\system32\wbem\WmiApSrv.exe

10:48:13.0848 3020  wmiApSrv ( UnsignedFile.Multi.Generic ) - warning

10:48:13.0848 3020  wmiApSrv - detected UnsignedFile.Multi.Generic (1)

10:48:13.0895 3020  WMPNetworkSvc - ok

10:48:13.0926 3020  [ CBC156C913F099E6680D1DF9307DB7A8 ] WPCSvc          C:\Windows\System32\wpcsvc.dll

10:48:14.0410 3020  WPCSvc ( UnsignedFile.Multi.Generic ) - warning

10:48:14.0410 3020  WPCSvc - detected UnsignedFile.Multi.Generic (1)

10:48:14.0472 3020  [ 490A18B4E4D53DC10879DEAA8E8B70D9 ] WPDBusEnum      C:\Windows\system32\wpdbusenum.dll

10:48:14.0956 3020  WPDBusEnum ( UnsignedFile.Multi.Generic ) - warning

10:48:14.0956 3020  WPDBusEnum - detected UnsignedFile.Multi.Generic (1)

10:48:15.0034 3020  [ 5E2401B3FC1089C90E081291357371A9 ] WpdUsb          C:\Windows\system32\DRIVERS\wpdusb.sys

10:48:15.0533 3020  WpdUsb ( UnsignedFile.Multi.Generic ) - warning

10:48:15.0533 3020  WpdUsb - detected UnsignedFile.Multi.Generic (1)

10:48:16.0001 3020  [ 991E2C2CF3BC204C2BB2EE1476149E4E ] WPFFontCache_v0400 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\WPFFontCache_v0400.exe

10:48:16.0048 3020  WPFFontCache_v0400 - ok

10:48:16.0110 3020  [ 8A900348370E359B6BFF6A550E4649E1 ] ws2ifsl         C:\Windows\system32\drivers\ws2ifsl.sys

10:48:16.0563 3020  ws2ifsl ( UnsignedFile.Multi.Generic ) - warning

10:48:16.0563 3020  ws2ifsl - detected UnsignedFile.Multi.Generic (1)

10:48:16.0594 3020  [ 9EA3E6D0EF7A5C2B9181961052A4B01A ] wscsvc          C:\Windows\System32\wscsvc.dll

10:48:17.0031 3020  wscsvc ( UnsignedFile.Multi.Generic ) - warning

10:48:17.0031 3020  wscsvc - detected UnsignedFile.Multi.Generic (1)

10:48:17.0031 3020  WSearch - ok

10:48:17.0296 3020  [ D9EF901DCA379CFE914E9FA13B73B4C4 ] wuauserv        C:\Windows\system32\wuaueng.dll

10:48:17.0483 3020  wuauserv - ok

10:48:17.0577 3020  [ 501A65252617B495C0F1832F908D54D8 ] WUDFRd          C:\Windows\system32\DRIVERS\WUDFRd.sys

10:48:18.0170 3020  WUDFRd ( UnsignedFile.Multi.Generic ) - warning

10:48:18.0170 3020  WUDFRd - detected UnsignedFile.Multi.Generic (1)

10:48:18.0216 3020  [ 6CBD51FF913C851D56ED9DC7F2A27DDE ] wudfsvc         C:\Windows\System32\WUDFSvc.dll

10:48:18.0622 3020  wudfsvc ( UnsignedFile.Multi.Generic ) - warning

10:48:18.0622 3020  wudfsvc - detected UnsignedFile.Multi.Generic (1)

10:48:18.0684 3020  [ D433F6726A727B0528F6E39F423FE1FD ] yksvc           C:\Windows\System32\ykx64mpcoinst.dll

10:48:19.0199 3020  yksvc ( UnsignedFile.Multi.Generic ) - warning

10:48:19.0199 3020  yksvc - detected UnsignedFile.Multi.Generic (1)

10:48:19.0293 3020  [ 541CBA0F3F679CC6E5ED4967F3FD4F6C ] yukonx64        C:\Windows\system32\DRIVERS\yk60x64.sys

10:48:19.0683 3020  yukonx64 ( UnsignedFile.Multi.Generic ) - warning

10:48:19.0683 3020  yukonx64 - detected UnsignedFile.Multi.Generic (1)

10:48:19.0714 3020  ================ Scan global ===============================

10:48:19.0745 3020  [ 060DC3A7A9A2626031EB23D90151428D ] C:\Windows\system32\basesrv.dll

10:48:19.0823 3020  [ AA137104CDFC81818A309CDE32ABB74A ] C:\Windows\system32\winsrv.dll

10:48:19.0839 3020  [ AA137104CDFC81818A309CDE32ABB74A ] C:\Windows\system32\winsrv.dll

10:48:19.0932 3020  [ 934E0B7D77FF78C18D9F8891221B6DE3 ] C:\Windows\system32\services.exe

10:48:19.0932 3020  [Global] - ok

10:48:19.0932 3020  ================ Scan MBR ==================================

10:48:19.0964 3020  [ 5C616939100B85E558DA92B899A0FC36 ] \Device\Harddisk0\DR0

10:48:21.0664 3020  \Device\Harddisk0\DR0 - ok

10:48:21.0664 3020  ================ Scan VBR ==================================

10:48:21.0695 3020  [ BC7E299168F34C973841D8D393D8CFD4 ] \Device\Harddisk0\DR0\Partition1

10:48:21.0711 3020  \Device\Harddisk0\DR0\Partition1 - ok

10:48:21.0726 3020  [ 13660CE30A37921600294F02FD687243 ] \Device\Harddisk0\DR0\Partition2

10:48:21.0742 3020  \Device\Harddisk0\DR0\Partition2 - ok

10:48:21.0742 3020  ============================================================

10:48:21.0742 3020  Scan finished

10:48:21.0742 3020  ============================================================

10:48:21.0758 3696  Detected object count: 254

10:48:21.0758 3696  Actual detected object count: 254

cosinus

19.11.2012 11:03

Bitte das Log vollständig posten, Screenshots davon bringen nichts

SteGri

19.11.2012 11:05

Hab ich doch im vorherigen Post unter den Screenshots gemacht mit [code] [\code]. War das nicht richtig?
Hier ist das komplette Log nochmal:

Code:

 10:45:21.0427 3592  TDSS rootkit removing tool 2.8.15.0 Oct 31 2012 21:47:35

10:45:21.0737 3592  ============================================================

10:45:21.0737 3592  Current date / time: 2012/11/19 10:45:21.0737

10:45:21.0737 3592  SystemInfo:

10:45:21.0737 3592  

10:45:21.0737 3592  OS Version: 6.0.6002 ServicePack: 2.0

10:45:21.0737 3592  Product type: Workstation

10:45:21.0737 3592  ComputerName: NAME

10:45:21.0737 3592  UserName: Office-PC

10:45:21.0737 3592  Windows directory: C:\Windows

10:45:21.0737 3592  System windows directory: C:\Windows

10:45:21.0737 3592  Running under WOW64

10:45:21.0737 3592  Processor architecture: Intel x64

10:45:21.0737 3592  Number of processors: 2

10:45:21.0737 3592  Page size: 0x1000

10:45:21.0737 3592  Boot type: Normal boot

10:45:21.0737 3592  ============================================================

10:45:25.0247 3592  Drive \Device\Harddisk0\DR0 - Size: 0x4A85D56000 (298.09 Gb), SectorSize: 0x200, Cylinders: 0x9801, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040

10:45:25.0257 3592  ============================================================

10:45:25.0257 3592  \Device\Harddisk0\DR0:

10:45:25.0257 3592  MBR partitions:

10:45:25.0257 3592  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x14000, BlocksNum 0x9C40000

10:45:25.0257 3592  \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x9C54000, BlocksNum 0x1B7DA000

10:45:25.0257 3592  ============================================================

10:45:25.0297 3592  C: <-> \Device\Harddisk0\DR0\Partition1

10:45:25.0397 3592  D: <-> \Device\Harddisk0\DR0\Partition2

10:45:25.0397 3592  ============================================================

10:45:25.0397 3592  Initialize success

10:45:25.0397 3592  ============================================================

10:45:58.0791 3020  ============================================================

10:45:58.0791 3020  Scan started

10:45:58.0791 3020  Mode: Manual; SigCheck; TDLFS; 

10:45:58.0791 3020  ============================================================

10:45:59.0493 3020  ================ Scan system memory ========================

10:45:59.0493 3020  System memory - ok

10:45:59.0508 3020  ================ Scan services =============================

10:46:00.0148 3020  [ 1965AAFFAB07E3FB03C77F81BEBA3547 ] ACPI            C:\Windows\system32\drivers\acpi.sys

10:46:00.0351 3020  ACPI - ok

10:46:00.0491 3020  [ D19C4EE2AC7C47B8F5F84FFF1A789D8A ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

10:46:00.0507 3020  AdobeARMservice - ok

10:46:00.0569 3020  [ F14215E37CF124104575073F782111D2 ] adp94xx         C:\Windows\system32\drivers\adp94xx.sys

10:46:00.0631 3020  adp94xx - ok

10:46:00.0663 3020  [ 7D05A75E3066861A6610F7EE04FF085C ] adpahci         C:\Windows\system32\drivers\adpahci.sys

10:46:00.0709 3020  adpahci - ok

10:46:00.0725 3020  [ 820A201FE08A0C345B3BEDBC30E1A77C ] adpu160m        C:\Windows\system32\drivers\adpu160m.sys

10:46:00.0756 3020  adpu160m - ok

10:46:00.0772 3020  [ 9B4AB6854559DC168FBB4C24FC52E794 ] adpu320         C:\Windows\system32\drivers\adpu320.sys

10:46:00.0803 3020  adpu320 - ok

10:46:00.0850 3020  [ 0F421175574BFE0BF2F4D8E910A253BB ] AeLookupSvc     C:\Windows\System32\aelupsvc.dll

10:46:01.0396 3020  AeLookupSvc ( UnsignedFile.Multi.Generic ) - warning

10:46:01.0396 3020  AeLookupSvc - detected UnsignedFile.Multi.Generic (1)

10:46:01.0599 3020  [ A6FB9DB8F1A86861D955FD6975977AE0 ] AESTFilters     C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_15f4e438\AESTSr64.exe

10:46:01.0989 3020  AESTFilters ( UnsignedFile.Multi.Generic ) - warning

10:46:01.0989 3020  AESTFilters - detected UnsignedFile.Multi.Generic (1)

10:46:02.0051 3020  [ C4F6CE6087760AD70960C9EB130E7943 ] AFD             C:\Windows\system32\drivers\afd.sys

10:46:02.0441 3020  AFD ( UnsignedFile.Multi.Generic ) - warning

10:46:02.0441 3020  AFD - detected UnsignedFile.Multi.Generic (1)

10:46:02.0472 3020  [ F6F6793B7F17B550ECFDBD3B229173F7 ] agp440          C:\Windows\system32\drivers\agp440.sys

10:46:02.0503 3020  agp440 - ok

10:46:02.0550 3020  [ 222CB641B4B8A1D1126F8033F9FD6A00 ] aic78xx         C:\Windows\system32\drivers\djsvs.sys

10:46:02.0581 3020  aic78xx - ok

10:46:02.0597 3020  [ 5922F4F59B7868F3D74BBBBEB7B825A3 ] ALG             C:\Windows\System32\alg.exe

10:46:02.0971 3020  ALG ( UnsignedFile.Multi.Generic ) - warning

10:46:02.0971 3020  ALG - detected UnsignedFile.Multi.Generic (1)

10:46:03.0018 3020  [ 157D0898D4B73F075CE9FA26B482DF98 ] aliide          C:\Windows\system32\drivers\aliide.sys

10:46:03.0034 3020  aliide - ok

10:46:03.0065 3020  [ B5E2434FC851698C1F119CF1C3935A50 ] AMD External Events Utility C:\Windows\system32\atiesrxx.exe

10:46:03.0580 3020  AMD External Events Utility ( UnsignedFile.Multi.Generic ) - warning

10:46:03.0595 3020  AMD External Events Utility - detected UnsignedFile.Multi.Generic (1)

10:46:03.0611 3020  [ 970FA5059E61E30D25307B99903E991E ] amdide          C:\Windows\system32\drivers\amdide.sys

10:46:03.0642 3020  amdide - ok

10:46:03.0673 3020  [ CDC3632A3A5EA4DBB83E46076A3165A1 ] AmdK8           C:\Windows\system32\drivers\amdk8.sys

10:46:04.0063 3020  AmdK8 ( UnsignedFile.Multi.Generic ) - warning

10:46:04.0063 3020  AmdK8 - detected UnsignedFile.Multi.Generic (1)

10:46:05.0249 3020  [ 9E3B4946F7E1BCA0B763E19D81EDBF2C ] amdkmdag        C:\Windows\system32\DRIVERS\atikmdag.sys

10:46:06.0123 3020  amdkmdag ( UnsignedFile.Multi.Generic ) - warning

10:46:06.0123 3020  amdkmdag - detected UnsignedFile.Multi.Generic (1)

10:46:06.0154 3020  [ B9E1C7B7F1865F99B16FF2E1BB94EDB6 ] amdkmdap        C:\Windows\system32\DRIVERS\atikmpag.sys

10:46:06.0606 3020  amdkmdap ( UnsignedFile.Multi.Generic ) - warning

10:46:06.0606 3020  amdkmdap - detected UnsignedFile.Multi.Generic (1)

10:46:06.0762 3020  [ 466A0D95960DAD3222C896D2CEA99993 ] AntiVirSchedulerService C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe

10:46:06.0793 3020  AntiVirSchedulerService - ok

10:46:06.0840 3020  [ A489BE6BB0AA1FF406B488B60542314B ] AntiVirService  C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe

10:46:06.0856 3020  AntiVirService - ok

10:46:06.0903 3020  [ 9C37B3FD5615477CB9A0CD116CF43F5C ] Appinfo         C:\Windows\System32\appinfo.dll

10:46:07.0308 3020  Appinfo ( UnsignedFile.Multi.Generic ) - warning

10:46:07.0308 3020  Appinfo - detected UnsignedFile.Multi.Generic (1)

10:46:07.0324 3020  [ BA8417D4765F3988FF921F30F630E303 ] arc             C:\Windows\system32\drivers\arc.sys

10:46:07.0339 3020  arc - ok

10:46:07.0371 3020  [ 9D41C435619733B34CC16A511E644B11 ] arcsas          C:\Windows\system32\drivers\arcsas.sys

10:46:07.0402 3020  arcsas - ok

10:46:07.0761 3020  [ 9217D874131AE6FF8F642F124F00A555 ] aspnet_state    C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe

10:46:07.0792 3020  aspnet_state - ok

10:46:07.0839 3020  [ 22D13FF3DAFEC2A80634752B1EAA2DE6 ] AsyncMac        C:\Windows\system32\DRIVERS\asyncmac.sys

10:46:08.0244 3020  AsyncMac ( UnsignedFile.Multi.Generic ) - warning

10:46:08.0244 3020  AsyncMac - detected UnsignedFile.Multi.Generic (1)

10:46:08.0275 3020  [ E68D9B3A3905619732F7FE039466A623 ] atapi           C:\Windows\system32\drivers\atapi.sys

10:46:08.0291 3020  atapi - ok

10:46:08.0353 3020  [ 79318C744693EC983D20E9337A2F8196 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll

10:46:08.0806 3020  AudioEndpointBuilder ( UnsignedFile.Multi.Generic ) - warning

10:46:08.0806 3020  AudioEndpointBuilder - detected UnsignedFile.Multi.Generic (1)

10:46:08.0821 3020  [ 79318C744693EC983D20E9337A2F8196 ] AudioSrv        C:\Windows\System32\Audiosrv.dll

10:46:09.0274 3020  AudioSrv ( UnsignedFile.Multi.Generic ) - warning

10:46:09.0274 3020  AudioSrv - detected UnsignedFile.Multi.Generic (1)

10:46:09.0321 3020  [ 26E38B5A58C6C55FAFBC563EEDDB0867 ] avgntflt        C:\Windows\system32\DRIVERS\avgntflt.sys

10:46:09.0367 3020  avgntflt - ok

10:46:09.0383 3020  [ 9D1F00BEFF84CBBF46D7F052BC7E0565 ] avipbb          C:\Windows\system32\DRIVERS\avipbb.sys

10:46:09.0399 3020  avipbb - ok

10:46:09.0414 3020  [ 248DB59FC86DE44D2779F4C7FB1A567D ] avkmgr          C:\Windows\system32\DRIVERS\avkmgr.sys

10:46:09.0430 3020  avkmgr - ok

10:46:09.0523 3020  [ D32F962B71FEE6BDAAEE630BB2C17280 ] BCM43XX         C:\Windows\system32\DRIVERS\bcmwl664.sys

10:46:09.0617 3020  BCM43XX - ok

10:46:09.0726 3020  [ FFB96C2589FFA60473EAD78B39FBDE29 ] BFE             C:\Windows\System32\bfe.dll

10:46:10.0069 3020  BFE ( UnsignedFile.Multi.Generic ) - warning

10:46:10.0069 3020  BFE - detected UnsignedFile.Multi.Generic (1)

10:46:10.0132 3020  [ 6D316F4859634071CC25C4FD4589AD2C ] BITS            C:\Windows\System32\qmgr.dll

10:46:10.0584 3020  BITS ( UnsignedFile.Multi.Generic ) - warning

10:46:10.0584 3020  BITS - detected UnsignedFile.Multi.Generic (1)

10:46:10.0631 3020  [ 79FEEB40056683F8F61398D81DDA65D2 ] blbdrive        C:\Windows\system32\drivers\blbdrive.sys

10:46:10.0990 3020  blbdrive ( UnsignedFile.Multi.Generic ) - warning

10:46:10.0990 3020  blbdrive - detected UnsignedFile.Multi.Generic (1)

10:46:11.0021 3020  [ 2348447A80920B2493A9B582A23E81E1 ] bowser          C:\Windows\system32\DRIVERS\bowser.sys

10:46:11.0442 3020  bowser ( UnsignedFile.Multi.Generic ) - warning

10:46:11.0442 3020  bowser - detected UnsignedFile.Multi.Generic (1)

10:46:11.0473 3020  [ F09EEE9EDC320B5E1501F749FDE686C8 ] BrFiltLo        C:\Windows\system32\drivers\brfiltlo.sys

10:46:11.0832 3020  BrFiltLo ( UnsignedFile.Multi.Generic ) - warning

10:46:11.0832 3020  BrFiltLo - detected UnsignedFile.Multi.Generic (1)

10:46:11.0832 3020  [ B114D3098E9BDB8BEA8B053685831BE6 ] BrFiltUp        C:\Windows\system32\drivers\brfiltup.sys

10:46:12.0222 3020  BrFiltUp ( UnsignedFile.Multi.Generic ) - warning

10:46:12.0222 3020  BrFiltUp - detected UnsignedFile.Multi.Generic (1)

10:46:12.0253 3020  [ A1B39DE453433B115B4EA69EE0343816 ] Browser         C:\Windows\System32\browser.dll

10:46:12.0643 3020  Browser ( UnsignedFile.Multi.Generic ) - warning

10:46:12.0643 3020  Browser - detected UnsignedFile.Multi.Generic (1)

10:46:12.0690 3020  [ F0F0BA4D815BE446AA6A4583CA3BCA9B ] Brserid         C:\Windows\system32\drivers\brserid.sys

10:46:13.0065 3020  Brserid ( UnsignedFile.Multi.Generic ) - warning

10:46:13.0065 3020  Brserid - detected UnsignedFile.Multi.Generic (1)

10:46:13.0096 3020  [ A6ECA2151B08A09CACECA35C07F05B42 ] BrSerWdm        C:\Windows\system32\drivers\brserwdm.sys

10:46:13.0455 3020  BrSerWdm ( UnsignedFile.Multi.Generic ) - warning

10:46:13.0455 3020  BrSerWdm - detected UnsignedFile.Multi.Generic (1)

10:46:13.0501 3020  [ B79968002C277E869CF38BD22CD61524 ] BrUsbMdm        C:\Windows\system32\drivers\brusbmdm.sys

10:46:13.0860 3020  BrUsbMdm ( UnsignedFile.Multi.Generic ) - warning

10:46:13.0860 3020  BrUsbMdm - detected UnsignedFile.Multi.Generic (1)

10:46:13.0860 3020  [ A87528880231C54E75EA7A44943B38BF ] BrUsbSer        C:\Windows\system32\drivers\brusbser.sys

10:46:14.0219 3020  BrUsbSer ( UnsignedFile.Multi.Generic ) - warning

10:46:14.0219 3020  BrUsbSer - detected UnsignedFile.Multi.Generic (1)

10:46:14.0235 3020  [ E0777B34E05F8A82A21856EFC900C29F ] BTHMODEM        C:\Windows\system32\drivers\bthmodem.sys

10:46:14.0562 3020  BTHMODEM ( UnsignedFile.Multi.Generic ) - warning

10:46:14.0562 3020  BTHMODEM - detected UnsignedFile.Multi.Generic (1)

10:46:14.0593 3020  [ B4D787DB8D30793A4D4DF9FEED18F136 ] cdfs            C:\Windows\system32\DRIVERS\cdfs.sys

10:46:14.0937 3020  cdfs ( UnsignedFile.Multi.Generic ) - warning

10:46:14.0937 3020  cdfs - detected UnsignedFile.Multi.Generic (1)

10:46:14.0983 3020  [ C025AA69BE3D0D25C7A2E746EF6F94FC ] cdrom           C:\Windows\system32\DRIVERS\cdrom.sys

10:46:15.0295 3020  cdrom ( UnsignedFile.Multi.Generic ) - warning

10:46:15.0295 3020  cdrom - detected UnsignedFile.Multi.Generic (1)

10:46:15.0358 3020  [ 5A268127633C7EE2A7FB87F39D748D56 ] CertPropSvc     C:\Windows\System32\certprop.dll

10:46:15.0888 3020  CertPropSvc ( UnsignedFile.Multi.Generic ) - warning

10:46:15.0888 3020  CertPropSvc - detected UnsignedFile.Multi.Generic (1)

10:46:15.0935 3020  [ 02EA568D498BBDD4BA55BF3FCE34D456 ] circlass        C:\Windows\system32\drivers\circlass.sys

10:46:16.0419 3020  circlass ( UnsignedFile.Multi.Generic ) - warning

10:46:16.0419 3020  circlass - detected UnsignedFile.Multi.Generic (1)

10:46:16.0512 3020  [ 3DCA9A18B204939CFB24BEA53E31EB48 ] CLFS            C:\Windows\system32\CLFS.sys

10:46:16.0653 3020  CLFS - ok

10:46:16.0731 3020  [ 8EE772032E2FE80A924F3B8DD5082194 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe

10:46:16.0746 3020  clr_optimization_v2.0.50727_32 - ok

10:46:16.0840 3020  [ CE07A466201096F021CD09D631B21540 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe

10:46:16.0855 3020  clr_optimization_v2.0.50727_64 - ok

10:46:16.0965 3020  [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe

10:46:16.0980 3020  clr_optimization_v4.0.30319_32 - ok

10:46:17.0043 3020  [ C6F9AF94DCD58122A4D7E89DB6BED29D ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe

10:46:17.0058 3020  clr_optimization_v4.0.30319_64 - ok

10:46:17.0121 3020  [ B52D9A14CE4101577900A364BA86F3DF ] CmBatt          C:\Windows\system32\DRIVERS\CmBatt.sys

10:46:17.0651 3020  CmBatt ( UnsignedFile.Multi.Generic ) - warning

10:46:17.0651 3020  CmBatt - detected UnsignedFile.Multi.Generic (1)

10:46:17.0698 3020  [ E5D5499A1C50A54B5161296B6AFE6192 ] cmdide          C:\Windows\system32\drivers\cmdide.sys

10:46:17.0713 3020  cmdide - ok

10:46:17.0745 3020  [ 7FB8AD01DB0EABE60C8A861531A8F431 ] Compbatt        C:\Windows\system32\DRIVERS\compbatt.sys

10:46:17.0760 3020  Compbatt - ok

10:46:17.0776 3020  COMSysApp - ok

10:46:17.0791 3020  [ A8585B6412253803CE8EFCBD6D6DC15C ] crcdisk         C:\Windows\system32\drivers\crcdisk.sys

10:46:17.0807 3020  crcdisk - ok

10:46:17.0901 3020  [ 62740B9D2A137E8CED41A9E4239A7A31 ] CryptSvc        C:\Windows\system32\cryptsvc.dll

10:46:18.0369 3020  CryptSvc ( UnsignedFile.Multi.Generic ) - warning

10:46:18.0369 3020  CryptSvc - detected UnsignedFile.Multi.Generic (1)

10:46:18.0431 3020  [ CF8B9A3A5E7DC57724A89D0C3E8CF9EF ] DcomLaunch      C:\Windows\system32\rpcss.dll

10:46:18.0883 3020  DcomLaunch ( UnsignedFile.Multi.Generic ) - warning

10:46:18.0883 3020  DcomLaunch - detected UnsignedFile.Multi.Generic (1)

10:46:18.0946 3020  [ 8B722BA35205C71E7951CDC4CDBADE19 ] DfsC            C:\Windows\system32\Drivers\dfsc.sys

10:46:19.0367 3020  DfsC ( UnsignedFile.Multi.Generic ) - warning

10:46:19.0367 3020  DfsC - detected UnsignedFile.Multi.Generic (1)

10:46:19.0710 3020  [ C647F468F7DE343DF8C143655C5557D4 ] DFSR            C:\Windows\system32\DFSR.exe

10:46:20.0256 3020  DFSR ( UnsignedFile.Multi.Generic ) - warning

10:46:20.0256 3020  DFSR - detected UnsignedFile.Multi.Generic (1)

10:46:20.0303 3020  [ 105373D52E71D2D1355AD3ACD18259C3 ] dg_ssudbus      C:\Windows\system32\DRIVERS\ssudbus.sys

10:46:20.0319 3020  dg_ssudbus - ok

10:46:20.0412 3020  [ 3ED0321127CE70ACDAABBF77E157C2A7 ] Dhcp            C:\Windows\System32\dhcpcsvc.dll

10:46:20.0724 3020  Dhcp ( UnsignedFile.Multi.Generic ) - warning

10:46:20.0724 3020  Dhcp - detected UnsignedFile.Multi.Generic (1)

10:46:20.0755 3020  [ B0107E40ECDB5FA692EBF832F295D905 ] disk            C:\Windows\system32\drivers\disk.sys

10:46:20.0771 3020  disk - ok

10:46:20.0833 3020  [ 06230F1B721494A6DF8D47FD395BB1B0 ] Dnscache        C:\Windows\System32\dnsrslvr.dll

10:46:21.0145 3020  Dnscache ( UnsignedFile.Multi.Generic ) - warning

10:46:21.0145 3020  Dnscache - detected UnsignedFile.Multi.Generic (1)

10:46:21.0208 3020  [ 1A7156DD1E850E9914E5E991E3225B94 ] dot3svc         C:\Windows\System32\dot3svc.dll

10:46:21.0645 3020  dot3svc ( UnsignedFile.Multi.Generic ) - warning

10:46:21.0645 3020  dot3svc - detected UnsignedFile.Multi.Generic (1)

10:46:21.0691 3020  [ 74C02B1717740C3B8039539E23E4B53F ] Dot4            C:\Windows\system32\DRIVERS\Dot4.sys

10:46:22.0097 3020  Dot4 ( UnsignedFile.Multi.Generic ) - warning

10:46:22.0097 3020  Dot4 - detected UnsignedFile.Multi.Generic (1)

10:46:22.0159 3020  [ 08321D1860235BF42CF2854234337AEA ] Dot4Print       C:\Windows\system32\DRIVERS\Dot4Prt.sys

10:46:22.0581 3020  Dot4Print ( UnsignedFile.Multi.Generic ) - warning

10:46:22.0581 3020  Dot4Print - detected UnsignedFile.Multi.Generic (1)

10:46:22.0612 3020  [ 4ADCCF0124F2B6911D3786A5D0E779E5 ] dot4usb         C:\Windows\system32\DRIVERS\dot4usb.sys

10:46:22.0939 3020  dot4usb ( UnsignedFile.Multi.Generic ) - warning

10:46:22.0939 3020  dot4usb - detected UnsignedFile.Multi.Generic (1)

10:46:22.0986 3020  [ 1583B39790DB3EAEC7EDB0CB0140C708 ] DPS             C:\Windows\system32\dps.dll

10:46:23.0314 3020  DPS ( UnsignedFile.Multi.Generic ) - warning

10:46:23.0314 3020  DPS - detected UnsignedFile.Multi.Generic (1)

10:46:23.0345 3020  [ F1A78A98CFC2EE02144C6BEC945447E6 ] drmkaud         C:\Windows\system32\drivers\drmkaud.sys

10:46:23.0829 3020  drmkaud ( UnsignedFile.Multi.Generic ) - warning

10:46:23.0829 3020  drmkaud - detected UnsignedFile.Multi.Generic (1)

10:46:23.0891 3020  [ B8E554E502D5123BC111F99D6A2181B4 ] DXGKrnl         C:\Windows\System32\drivers\dxgkrnl.sys

10:46:23.0953 3020  DXGKrnl - ok

10:46:24.0047 3020  [ 264CEE7B031A9D6C827F3D0CB031F2FE ] E1G60           C:\Windows\system32\DRIVERS\E1G6032E.sys

10:46:24.0562 3020  E1G60 ( UnsignedFile.Multi.Generic ) - warning

10:46:24.0562 3020  E1G60 - detected UnsignedFile.Multi.Generic (1)

10:46:24.0624 3020  [ C2303883FD9BE49DC36A6400643002EA ] EapHost         C:\Windows\System32\eapsvc.dll

10:46:25.0030 3020  EapHost ( UnsignedFile.Multi.Generic ) - warning

10:46:25.0030 3020  EapHost - detected UnsignedFile.Multi.Generic (1)

10:46:25.0061 3020  [ 5F94962BE5A62DB6E447FF6470C4F48A ] Ecache          C:\Windows\system32\drivers\ecache.sys

10:46:25.0092 3020  Ecache - ok

10:46:25.0201 3020  [ 14CE384D2E27B64C256BDA4DC39C312D ] ehRecvr         C:\Windows\ehome\ehRecvr.exe

10:46:25.0669 3020  ehRecvr ( UnsignedFile.Multi.Generic ) - warning

10:46:25.0669 3020  ehRecvr - detected UnsignedFile.Multi.Generic (1)

10:46:25.0747 3020  [ B93159C1313D66FDFBBE876F5189CD52 ] ehSched         C:\Windows\ehome\ehsched.exe

10:46:26.0169 3020  ehSched ( UnsignedFile.Multi.Generic ) - warning

10:46:26.0169 3020  ehSched - detected UnsignedFile.Multi.Generic (1)

10:46:26.0262 3020  [ F5EE2527D74449868E3C3227A59BCD28 ] ehstart         C:\Windows\ehome\ehstart.dll

10:46:26.0683 3020  ehstart ( UnsignedFile.Multi.Generic ) - warning

10:46:26.0683 3020  ehstart - detected UnsignedFile.Multi.Generic (1)

10:46:26.0730 3020  [ C4636D6E10469404AB5308D9FD45ED07 ] elxstor         C:\Windows\system32\drivers\elxstor.sys

10:46:26.0777 3020  elxstor - ok

10:46:26.0824 3020  [ A9B18B63A4FD6BAAB83326706D857FAB ] EMDMgmt         C:\Windows\system32\emdmgmt.dll

10:46:27.0697 3020  EMDMgmt ( UnsignedFile.Multi.Generic ) - warning

10:46:27.0697 3020  EMDMgmt - detected UnsignedFile.Multi.Generic (1)

10:46:27.0729 3020  [ BC3A58E938BB277E46BF4B3003B01ABD ] ErrDev          C:\Windows\system32\drivers\errdev.sys

10:46:28.0228 3020  ErrDev ( UnsignedFile.Multi.Generic ) - warning

10:46:28.0228 3020  ErrDev - detected UnsignedFile.Multi.Generic (1)

10:46:28.0275 3020  [ E12F22B73F153DECE721CD45EC05B4AF ] EventSystem     C:\Windows\system32\es.dll

10:46:28.0633 3020  EventSystem ( UnsignedFile.Multi.Generic ) - warning

10:46:28.0633 3020  EventSystem - detected UnsignedFile.Multi.Generic (1)

10:46:28.0696 3020  [ 486844F47B6636044A42454614ED4523 ] exfat           C:\Windows\system32\drivers\exfat.sys

10:46:29.0179 3020  exfat ( UnsignedFile.Multi.Generic ) - warning

10:46:29.0179 3020  exfat - detected UnsignedFile.Multi.Generic (1)

10:46:29.0257 3020  [ 1A4BEE34277784619DDAF0422C0C6E23 ] fastfat         C:\Windows\system32\drivers\fastfat.sys

10:46:29.0663 3020  fastfat ( UnsignedFile.Multi.Generic ) - warning

10:46:29.0663 3020  fastfat - detected UnsignedFile.Multi.Generic (1)

10:46:29.0710 3020  [ 81B79B6DF71FA1D2C6D688D830616E39 ] fdc             C:\Windows\system32\DRIVERS\fdc.sys

10:46:30.0131 3020  fdc ( UnsignedFile.Multi.Generic ) - warning

10:46:30.0131 3020  fdc - detected UnsignedFile.Multi.Generic (1)

10:46:30.0162 3020  [ BB9267ACACD8B7533DD936C34A0CBA5E ] fdPHost         C:\Windows\system32\fdPHost.dll

10:46:30.0615 3020  fdPHost ( UnsignedFile.Multi.Generic ) - warning

10:46:30.0615 3020  fdPHost - detected UnsignedFile.Multi.Generic (1)

10:46:30.0661 3020  [ 300C80931EABBE1DB7591C516EFE8D0F ] FDResPub        C:\Windows\system32\fdrespub.dll

10:46:31.0036 3020  FDResPub ( UnsignedFile.Multi.Generic ) - warning

10:46:31.0036 3020  FDResPub - detected UnsignedFile.Multi.Generic (1)

10:46:31.0067 3020  [ 457B7D1D533E4BD62A99AED9C7BB4C59 ] FileInfo        C:\Windows\system32\drivers\fileinfo.sys

10:46:31.0098 3020  FileInfo - ok

10:46:31.0145 3020  [ D421327FD6EFCCAF884A54C58E1B0D7F ] Filetrace       C:\Windows\system32\drivers\filetrace.sys

10:46:31.0597 3020  Filetrace ( UnsignedFile.Multi.Generic ) - warning

10:46:31.0597 3020  Filetrace - detected UnsignedFile.Multi.Generic (1)

10:46:31.0613 3020  [ 230923EA2B80F79B0F88D90F87B87EBD ] flpydisk        C:\Windows\system32\DRIVERS\flpydisk.sys

10:46:32.0019 3020  flpydisk ( UnsignedFile.Multi.Generic ) - warning

10:46:32.0019 3020  flpydisk - detected UnsignedFile.Multi.Generic (1)

10:46:32.0050 3020  [ E3041BC26D6930D61F42AEDB79C91720 ] FltMgr          C:\Windows\system32\drivers\fltmgr.sys

10:46:32.0081 3020  FltMgr - ok

10:46:32.0175 3020  [ BE1C5BD1CA7ED015BC6FA1AE67E592C8 ] FontCache       C:\Windows\system32\FntCache.dll

10:46:32.0861 3020  FontCache ( UnsignedFile.Multi.Generic ) - warning

10:46:32.0861 3020  FontCache - detected UnsignedFile.Multi.Generic (1)

10:46:32.0955 3020  [ BC5B0BE5AF3510B0FD8C140EE42C6D3E ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe

10:46:32.0970 3020  FontCache3.0.0.0 - ok

10:46:33.0017 3020  [ 5779B86CD8B32519FBECB136394D946A ] Fs_Rec          C:\Windows\system32\drivers\Fs_Rec.sys

10:46:33.0391 3020  Fs_Rec ( UnsignedFile.Multi.Generic ) - warning

10:46:33.0391 3020  Fs_Rec - detected UnsignedFile.Multi.Generic (1)

10:46:33.0485 3020  [ C8E416668D3DC2BE3D4FE4C79224997F ] gagp30kx        C:\Windows\system32\drivers\gagp30kx.sys

10:46:33.0501 3020  gagp30kx - ok

10:46:33.0579 3020  [ A0E1B575BA8F504968CD40C0FAEB2384 ] gpsvc           C:\Windows\System32\gpsvc.dll

10:46:34.0031 3020  gpsvc ( UnsignedFile.Multi.Generic ) - warning

10:46:34.0031 3020  gpsvc - detected UnsignedFile.Multi.Generic (1)

10:46:34.0078 3020  [ 68E732382B32417FF61FD663259B4B09 ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys

10:46:34.0483 3020  HdAudAddService ( UnsignedFile.Multi.Generic ) - warning

10:46:34.0483 3020  HdAudAddService - detected UnsignedFile.Multi.Generic (1)

10:46:34.0717 3020  [ F942C5820205F2FB453243EDFEC82A3D ] HDAudBus        C:\Windows\system32\DRIVERS\HDAudBus.sys

10:46:35.0279 3020  HDAudBus ( UnsignedFile.Multi.Generic ) - warning

10:46:35.0279 3020  HDAudBus - detected UnsignedFile.Multi.Generic (1)

10:46:35.0326 3020  [ B4881C84A180E75B8C25DC1D726C375F ] HidBth          C:\Windows\system32\drivers\hidbth.sys

10:46:35.0685 3020  HidBth ( UnsignedFile.Multi.Generic ) - warning

10:46:35.0685 3020  HidBth - detected UnsignedFile.Multi.Generic (1)

10:46:35.0700 3020  [ 4E77A77E2C986E8F88F996BB3E1AD829 ] HidIr           C:\Windows\system32\drivers\hidir.sys

10:46:36.0075 3020  HidIr ( UnsignedFile.Multi.Generic ) - warning

10:46:36.0075 3020  HidIr - detected UnsignedFile.Multi.Generic (1)

10:46:36.0106 3020  [ 59361D38A297755D46A540E450202B2A ] hidserv         C:\Windows\system32\hidserv.dll

10:46:36.0589 3020  hidserv ( UnsignedFile.Multi.Generic ) - warning

10:46:36.0589 3020  hidserv - detected UnsignedFile.Multi.Generic (1)

10:46:36.0605 3020  [ 443BDD2D30BB4F00795C797E2CF99EDF ] HidUsb          C:\Windows\system32\DRIVERS\hidusb.sys

10:46:36.0995 3020  HidUsb ( UnsignedFile.Multi.Generic ) - warning

10:46:36.0995 3020  HidUsb - detected UnsignedFile.Multi.Generic (1)

10:46:37.0026 3020  [ B12F367EA39C0795FD57E31242CE1A5A ] hkmsvc          C:\Windows\system32\kmsvc.dll

10:46:37.0432 3020  hkmsvc ( UnsignedFile.Multi.Generic ) - warning

10:46:37.0432 3020  hkmsvc - detected UnsignedFile.Multi.Generic (1)

10:46:37.0479 3020  [ D7109A1E6BD2DFDBCBA72A6BC626A13B ] HpCISSs         C:\Windows\system32\drivers\hpcisss.sys

10:46:37.0510 3020  HpCISSs - ok

10:46:37.0619 3020  [ 0A3C6AA4A9FC38C20BA4EAC2C3351C05 ] hpqcxs08        C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcxs08.dll

10:46:38.0087 3020  hpqcxs08 ( UnsignedFile.Multi.Generic ) - warning

10:46:38.0087 3020  hpqcxs08 - detected UnsignedFile.Multi.Generic (1)

10:46:38.0165 3020  [ F3F72A2A86C22610BCA5439FA789DD52 ] hpqddsvc        C:\Program Files (x86)\HP\Digital Imaging\bin\hpqddsvc.dll

10:46:38.0539 3020  hpqddsvc ( UnsignedFile.Multi.Generic ) - warning

10:46:38.0539 3020  hpqddsvc - detected UnsignedFile.Multi.Generic (1)

10:46:38.0586 3020  [ D972F48D0CE396759B788693CD665926 ] HPSLPSVC        C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL

10:46:39.0054 3020  HPSLPSVC ( UnsignedFile.Multi.Generic ) - warning

10:46:39.0054 3020  HPSLPSVC - detected UnsignedFile.Multi.Generic (1)

10:46:39.0101 3020  [ 098F1E4E5C9CB5B0063A959063631610 ] HTTP            C:\Windows\system32\drivers\HTTP.sys

10:46:39.0491 3020  HTTP ( UnsignedFile.Multi.Generic ) - warning

10:46:39.0491 3020  HTTP - detected UnsignedFile.Multi.Generic (1)

10:46:39.0522 3020  [ DA94C854CEA5FAC549D4E1F6E88349E8 ] i2omp           C:\Windows\system32\drivers\i2omp.sys

10:46:39.0553 3020  i2omp - ok

10:46:39.0585 3020  [ CBB597659A2713CE0C9CC20C88C7591F ] i8042prt        C:\Windows\system32\DRIVERS\i8042prt.sys

10:46:39.0928 3020  i8042prt ( UnsignedFile.Multi.Generic ) - warning

10:46:39.0928 3020  i8042prt - detected UnsignedFile.Multi.Generic (1)

10:46:39.0975 3020  [ 3E3BF3627D886736D0B4E90054F929F6 ] iaStorV         C:\Windows\system32\drivers\iastorv.sys

10:46:40.0006 3020  iaStorV - ok

10:46:40.0068 3020  [ 749F5F8CEDCA70F2A512945325FC489D ] idsvc           C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe

10:46:40.0162 3020  idsvc - ok

10:46:40.0224 3020  [ 8C3951AD2FE886EF76C7B5027C3125D3 ] iirsp           C:\Windows\system32\drivers\iirsp.sys

10:46:40.0255 3020  iirsp - ok

10:46:40.0333 3020  [ 0C9EA6E654E7B0471741E343A6C671AF ] IKEEXT          C:\Windows\System32\ikeext.dll

10:46:40.0786 3020  IKEEXT ( UnsignedFile.Multi.Generic ) - warning

10:46:40.0786 3020  IKEEXT - detected UnsignedFile.Multi.Generic (1)

10:46:41.0332 3020  [ C2F868881D48A568B525255F084EF063 ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHD64.sys

10:46:41.0722 3020  IntcAzAudAddService - ok

10:46:41.0784 3020  [ DF797A12176F11B2D301C5B234BB200E ] intelide        C:\Windows\system32\drivers\intelide.sys

10:46:41.0800 3020  intelide - ok

10:46:41.0815 3020  [ BFD84AF32FA1BAD6231C4585CB469630 ] intelppm        C:\Windows\system32\DRIVERS\intelppm.sys

10:46:42.0143 3020  intelppm ( UnsignedFile.Multi.Generic ) - warning

10:46:42.0143 3020  intelppm - detected UnsignedFile.Multi.Generic (1)

10:46:42.0205 3020  [ 5624BC1BC5EEB49C0AB76A8114F05EA3 ] IPBusEnum       C:\Windows\system32\ipbusenum.dll

10:46:42.0580 3020  IPBusEnum ( UnsignedFile.Multi.Generic ) - warning

10:46:42.0580 3020  IPBusEnum - detected UnsignedFile.Multi.Generic (1)

10:46:42.0627 3020  [ D8AABC341311E4780D6FCE8C73C0AD81 ] IpFilterDriver  C:\Windows\system32\DRIVERS\ipfltdrv.sys

10:46:43.0219 3020  IpFilterDriver ( UnsignedFile.Multi.Generic ) - warning

10:46:43.0219 3020  IpFilterDriver - detected UnsignedFile.Multi.Generic (1)

10:46:43.0313 3020  [ BF0DBFA9792C5C14FA00F61C75116C1B ] iphlpsvc        C:\Windows\System32\iphlpsvc.dll

10:46:43.0843 3020  iphlpsvc ( UnsignedFile.Multi.Generic ) - warning

10:46:43.0843 3020  iphlpsvc - detected UnsignedFile.Multi.Generic (1)

10:46:43.0859 3020  IpInIp - ok

10:46:43.0875 3020  [ 9C2EE2E6E5A7203BFAE15C299475EC67 ] IPMIDRV         C:\Windows\system32\drivers\ipmidrv.sys

10:46:44.0187 3020  IPMIDRV ( UnsignedFile.Multi.Generic ) - warning

10:46:44.0187 3020  IPMIDRV - detected UnsignedFile.Multi.Generic (1)

10:46:44.0233 3020  [ B7E6212F581EA5F6AB0C3A6CEEEB89BE ] IPNAT           C:\Windows\system32\DRIVERS\ipnat.sys

10:46:44.0545 3020  IPNAT ( UnsignedFile.Multi.Generic ) - warning

10:46:44.0545 3020  IPNAT - detected UnsignedFile.Multi.Generic (1)

10:46:44.0545 3020  [ 8C42CA155343A2F11D29FECA67FAA88D ] IRENUM          C:\Windows\system32\drivers\irenum.sys

10:46:44.0842 3020  IRENUM ( UnsignedFile.Multi.Generic ) - warning

10:46:44.0842 3020  IRENUM - detected UnsignedFile.Multi.Generic (1)

10:46:44.0873 3020  [ 0672BFCEDC6FC468A2B0500D81437F4F ] isapnp          C:\Windows\system32\drivers\isapnp.sys

10:46:44.0889 3020  isapnp - ok

10:46:44.0935 3020  [ E4FDF99599F27EC25D2CF6D754243520 ] iScsiPrt        C:\Windows\system32\DRIVERS\msiscsi.sys

10:46:44.0951 3020  iScsiPrt - ok

10:46:44.0998 3020  [ 63C766CDC609FF8206CB447A65ABBA4A ] iteatapi        C:\Windows\system32\drivers\iteatapi.sys

10:46:45.0013 3020  iteatapi - ok

10:46:45.0060 3020  [ 1281FE73B17664631D12F643CBEA3F59 ] iteraid         C:\Windows\system32\drivers\iteraid.sys

10:46:45.0076 3020  iteraid - ok

10:46:45.0123 3020  [ 423696F3BA6472DD17699209B933BC26 ] kbdclass        C:\Windows\system32\DRIVERS\kbdclass.sys

10:46:45.0138 3020  kbdclass - ok

10:46:45.0185 3020  [ BF8783A5066CFECF45095459E8010FA7 ] kbdhid          C:\Windows\system32\DRIVERS\kbdhid.sys

10:46:45.0575 3020  kbdhid ( UnsignedFile.Multi.Generic ) - warning

10:46:45.0575 3020  kbdhid - detected UnsignedFile.Multi.Generic (1)

10:46:45.0622 3020  [ 260BF9C43EE12C6898A9F5AAB0FB0E5D ] KeyIso          C:\Windows\system32\lsass.exe

10:46:45.0965 3020  KeyIso ( UnsignedFile.Multi.Generic ) - warning

10:46:45.0965 3020  KeyIso - detected UnsignedFile.Multi.Generic (1)

10:46:46.0012 3020  [ 88956AD9FA510848AD176777A6C6C1F5 ] KSecDD          C:\Windows\system32\Drivers\ksecdd.sys

10:46:46.0059 3020  KSecDD - ok

10:46:46.0105 3020  [ 1D419CF43DB29396ECD7113D129D94EB ] ksthunk         C:\Windows\system32\drivers\ksthunk.sys

10:46:46.0605 3020  ksthunk ( UnsignedFile.Multi.Generic ) - warning

10:46:46.0605 3020  ksthunk - detected UnsignedFile.Multi.Generic (1)

10:46:46.0651 3020  [ 1FAF6926F3416D3DA05C5B265491BDAE ] KtmRm           C:\Windows\system32\msdtckrm.dll

10:46:47.0041 3020  KtmRm ( UnsignedFile.Multi.Generic ) - warning

10:46:47.0041 3020  KtmRm - detected UnsignedFile.Multi.Generic (1)

10:46:47.0073 3020  [ 50C7A3CB427E9BB5ED0708A669956AB5 ] LanmanServer    C:\Windows\system32\srvsvc.dll

10:46:47.0385 3020  LanmanServer ( UnsignedFile.Multi.Generic ) - warning

10:46:47.0385 3020  LanmanServer - detected UnsignedFile.Multi.Generic (1)

10:46:47.0431 3020  [ CAF86FC1388BE1E470F1A7B43E348ADB ] LanmanWorkstation C:\Windows\System32\wkssvc.dll

10:46:47.0775 3020  LanmanWorkstation ( UnsignedFile.Multi.Generic ) - warning

10:46:47.0775 3020  LanmanWorkstation - detected UnsignedFile.Multi.Generic (1)

10:46:47.0806 3020  [ 96ECE2659B6654C10A0C310AE3A6D02C ] lltdio          C:\Windows\system32\DRIVERS\lltdio.sys

10:46:48.0102 3020  lltdio ( UnsignedFile.Multi.Generic ) - warning

10:46:48.0102 3020  lltdio - detected UnsignedFile.Multi.Generic (1)

10:46:48.0165 3020  [ 961CCBD0B1CCB5675D64976FAE37D092 ] lltdsvc         C:\Windows\System32\lltdsvc.dll

10:46:48.0508 3020  lltdsvc ( UnsignedFile.Multi.Generic ) - warning

10:46:48.0508 3020  lltdsvc - detected UnsignedFile.Multi.Generic (1)

10:46:48.0523 3020  [ A47F8080CACC23C91FE823AD19AA5612 ] lmhosts         C:\Windows\System32\lmhsvc.dll

10:46:49.0007 3020  lmhosts ( UnsignedFile.Multi.Generic ) - warning

10:46:49.0007 3020  lmhosts - detected UnsignedFile.Multi.Generic (1)

10:46:49.0038 3020  [ ACBE1AF32D3123E330A07BFBC5EC4A9B ] LSI_FC          C:\Windows\system32\drivers\lsi_fc.sys

10:46:49.0069 3020  LSI_FC - ok

10:46:49.0101 3020  [ 799FFB2FC4729FA46D2157C0065B3525 ] LSI_SAS         C:\Windows\system32\drivers\lsi_sas.sys

10:46:49.0132 3020  LSI_SAS - ok

10:46:49.0147 3020  [ F445FF1DAAD8A226366BFAF42551226B ] LSI_SCSI        C:\Windows\system32\drivers\lsi_scsi.sys

10:46:49.0179 3020  LSI_SCSI - ok

10:46:49.0210 3020  [ 52F87B9CC8932C2A7375C3B2A9BE5E3E ] luafv           C:\Windows\system32\drivers\luafv.sys

10:46:49.0537 3020  luafv ( UnsignedFile.Multi.Generic ) - warning

10:46:49.0537 3020  luafv - detected UnsignedFile.Multi.Generic (1)

10:46:49.0569 3020  [ 76A58DF02BD4EA29F189B82D0BEF17F8 ] Mcx2Svc         C:\Windows\system32\Mcx2Svc.dll

10:46:49.0990 3020  Mcx2Svc ( UnsignedFile.Multi.Generic ) - warning

10:46:49.0990 3020  Mcx2Svc - detected UnsignedFile.Multi.Generic (1)

10:46:50.0037 3020  [ 5C5CD6AACED32FB26C3FB34B3DCF972F ] megasas         C:\Windows\system32\drivers\megasas.sys

10:46:50.0052 3020  megasas - ok

10:46:50.0099 3020  [ 859BC2436B076C77C159ED694ACFE8F8 ] MegaSR          C:\Windows\system32\drivers\megasr.sys

10:46:50.0130 3020  MegaSR - ok

10:46:50.0161 3020  [ 3CBE4995E80E13CCFBC42E5DCF3AC81A ] MMCSS           C:\Windows\system32\mmcss.dll

10:46:50.0520 3020  MMCSS ( UnsignedFile.Multi.Generic ) - warning

10:46:50.0520 3020  MMCSS - detected UnsignedFile.Multi.Generic (1)

10:46:50.0551 3020  [ 59848D5CC74606F0EE7557983BB73C2E ] Modem           C:\Windows\system32\drivers\modem.sys

10:46:50.0910 3020  Modem ( UnsignedFile.Multi.Generic ) - warning

10:46:50.0910 3020  Modem - detected UnsignedFile.Multi.Generic (1)

10:46:50.0957 3020  [ C247CC2A57E0A0C8C6DCCF7807B3E9E5 ] monitor         C:\Windows\system32\DRIVERS\monitor.sys

10:46:51.0316 3020  monitor ( UnsignedFile.Multi.Generic ) - warning

10:46:51.0316 3020  monitor - detected UnsignedFile.Multi.Generic (1)

10:46:51.0347 3020  [ 9367304E5E412B120CF5F4EA14E4E4F1 ] mouclass        C:\Windows\system32\DRIVERS\mouclass.sys

10:46:51.0378 3020  mouclass - ok

10:46:51.0409 3020  [ C2C2BD5C5CE5AAF786DDD74B75D2AC69 ] mouhid          C:\Windows\system32\DRIVERS\mouhid.sys

10:46:51.0799 3020  mouhid ( UnsignedFile.Multi.Generic ) - warning

10:46:51.0799 3020  mouhid - detected UnsignedFile.Multi.Generic (1)

10:46:51.0831 3020  [ 11BC9B1E8801B01F7F6ADB9EAD30019B ] MountMgr        C:\Windows\system32\drivers\mountmgr.sys

10:46:51.0846 3020  MountMgr - ok

10:46:51.0924 3020  [ E8D79312373F254DC13F3965BDB3D521 ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe

10:46:51.0955 3020  MozillaMaintenance - ok

10:46:51.0987 3020  [ F8276EB8698142884498A528DFEA8478 ] mpio            C:\Windows\system32\drivers\mpio.sys

10:46:52.0002 3020  mpio - ok

10:46:52.0065 3020  [ C92B9ABDB65A5991E00C28F13491DBA2 ] mpsdrv          C:\Windows\system32\drivers\mpsdrv.sys

10:46:52.0361 3020  mpsdrv ( UnsignedFile.Multi.Generic ) - warning

10:46:52.0361 3020  mpsdrv - detected UnsignedFile.Multi.Generic (1)

10:46:52.0423 3020  [ 897E3BAF68BA406A61682AE39C83900C ] MpsSvc          C:\Windows\system32\mpssvc.dll

10:46:52.0798 3020  MpsSvc ( UnsignedFile.Multi.Generic ) - warning

10:46:52.0798 3020  MpsSvc - detected UnsignedFile.Multi.Generic (1)

10:46:52.0829 3020  [ 3C200630A89EF2C0864D515B7A75802E ] Mraid35x        C:\Windows\system32\drivers\mraid35x.sys

10:46:52.0860 3020  Mraid35x - ok

10:46:52.0891 3020  [ 7C1DE4AA96DC0C071611F9E7DE02A68D ] MRxDAV          C:\Windows\system32\drivers\mrxdav.sys

10:46:53.0235 3020  MRxDAV ( UnsignedFile.Multi.Generic ) - warning

10:46:53.0235 3020  MRxDAV - detected UnsignedFile.Multi.Generic (1)

10:46:53.0281 3020  [ 1485811B320FF8C7EDAD1CAEBB1C6C2B ] mrxsmb          C:\Windows\system32\DRIVERS\mrxsmb.sys

10:46:53.0593 3020  mrxsmb ( UnsignedFile.Multi.Generic ) - warning

10:46:53.0593 3020  mrxsmb - detected UnsignedFile.Multi.Generic (1)

10:46:53.0640 3020  [ 3B929A60C833FC615FD97FBA82BC7632 ] mrxsmb10        C:\Windows\system32\DRIVERS\mrxsmb10.sys

10:46:53.0983 3020  mrxsmb10 ( UnsignedFile.Multi.Generic ) - warning

10:46:53.0983 3020  mrxsmb10 - detected UnsignedFile.Multi.Generic (1)

10:46:54.0015 3020  [ C64AB3E1F53B4F5B5BB6D796B2D7BEC3 ] mrxsmb20        C:\Windows\system32\DRIVERS\mrxsmb20.sys

10:46:54.0373 3020  mrxsmb20 ( UnsignedFile.Multi.Generic ) - warning

10:46:54.0373 3020  mrxsmb20 - detected UnsignedFile.Multi.Generic (1)

10:46:54.0405 3020  [ AA459F2AB3AB603C357FF117CAE3D818 ] msahci          C:\Windows\system32\drivers\msahci.sys

10:46:54.0436 3020  msahci - ok

10:46:54.0467 3020  [ 264BBB4AAF312A485F0E44B65A6B7202 ] msdsm           C:\Windows\system32\drivers\msdsm.sys

10:46:54.0483 3020  msdsm - ok

10:46:54.0529 3020  [ 7EC02CE772F068ED0BEAFA3DA341A9BC ] MSDTC           C:\Windows\System32\msdtc.exe

10:46:54.0888 3020  MSDTC ( UnsignedFile.Multi.Generic ) - warning

10:46:54.0888 3020  MSDTC - detected UnsignedFile.Multi.Generic (1)

10:46:54.0935 3020  [ 704F59BFC4512D2BB0146AEC31B10A7C ] Msfs            C:\Windows\system32\drivers\Msfs.sys

10:46:55.0294 3020  Msfs ( UnsignedFile.Multi.Generic ) - warning

10:46:55.0294 3020  Msfs - detected UnsignedFile.Multi.Generic (1)

10:46:55.0325 3020  [ 00EBC952961664780D43DCA157E79B27 ] msisadrv        C:\Windows\system32\drivers\msisadrv.sys

10:46:55.0341 3020  msisadrv - ok

10:46:55.0372 3020  [ 366B0C1F4478B519C181E37D43DCDA32 ] MSiSCSI         C:\Windows\system32\iscsiexe.dll

10:46:55.0731 3020  MSiSCSI ( UnsignedFile.Multi.Generic ) - warning

10:46:55.0731 3020  MSiSCSI - detected UnsignedFile.Multi.Generic (1)

10:46:55.0731 3020  msiserver - ok

10:46:55.0777 3020  [ 0EA73E498F53B96D83DBFCA074AD4CF8 ] MSKSSRV         C:\Windows\system32\drivers\MSKSSRV.sys

10:46:56.0058 3020  MSKSSRV ( UnsignedFile.Multi.Generic ) - warning

10:46:56.0058 3020  MSKSSRV - detected UnsignedFile.Multi.Generic (1)

10:46:56.0089 3020  [ 52E59B7E992A58E740AA63F57EDBAE8B ] MSPCLOCK        C:\Windows\system32\drivers\MSPCLOCK.sys

10:46:56.0401 3020  MSPCLOCK ( UnsignedFile.Multi.Generic ) - warning

10:46:56.0401 3020  MSPCLOCK - detected UnsignedFile.Multi.Generic (1)

10:46:56.0417 3020  [ 49084A75BAE043AE02D5B44D02991BB2 ] MSPQM           C:\Windows\system32\drivers\MSPQM.sys

10:46:56.0760 3020  MSPQM ( UnsignedFile.Multi.Generic ) - warning

10:46:56.0760 3020  MSPQM - detected UnsignedFile.Multi.Generic (1)

10:46:56.0791 3020  [ DC6CCF440CDEDE4293DB41C37A5060A5 ] MsRPC           C:\Windows\system32\drivers\MsRPC.sys

10:46:56.0823 3020  MsRPC - ok

10:46:56.0869 3020  [ 855796E59DF77EA93AF46F20155BF55B ] mssmbios        C:\Windows\system32\DRIVERS\mssmbios.sys

10:46:56.0885 3020  mssmbios - ok

10:46:56.0901 3020  [ 86D632D75D05D5B7C7C043FA3564AE86 ] MSTEE           C:\Windows\system32\drivers\MSTEE.sys

10:46:57.0228 3020  MSTEE ( UnsignedFile.Multi.Generic ) - warning

10:46:57.0228 3020  MSTEE - detected UnsignedFile.Multi.Generic (1)

10:46:57.0259 3020  [ 0CC49F78D8ACA0877D885F149084E543 ] Mup             C:\Windows\system32\Drivers\mup.sys

10:46:57.0291 3020  Mup - ok

10:46:57.0353 3020  [ A5B10C845E7538C60C0F5D87A57CB3F5 ] napagent        C:\Windows\system32\qagentRT.dll

10:46:57.0665 3020  napagent ( UnsignedFile.Multi.Generic ) - warning

10:46:57.0665 3020  napagent - detected UnsignedFile.Multi.Generic (1)

10:46:57.0727 3020  [ 2007B826C4ACD94AE32232B41F0842B9 ] NativeWifiP     C:\Windows\system32\DRIVERS\nwifi.sys

10:46:58.0102 3020  NativeWifiP ( UnsignedFile.Multi.Generic ) - warning

10:46:58.0102 3020  NativeWifiP - detected UnsignedFile.Multi.Generic (1)

10:46:58.0321 3020  [ 65950E07329FCEE8E6516B17C8D0ABB6 ] NDIS            C:\Windows\system32\drivers\ndis.sys

10:46:58.0387 3020  NDIS - ok

10:46:58.0433 3020  [ 64DF698A425478E321981431AC171334 ] NdisTapi        C:\Windows\system32\DRIVERS\ndistapi.sys

10:46:58.0792 3020  NdisTapi ( UnsignedFile.Multi.Generic ) - warning

10:46:58.0792 3020  NdisTapi - detected UnsignedFile.Multi.Generic (1)

10:46:58.0830 3020  [ 8BAA43196D7B5BB972C9A6B2BBF61A19 ] Ndisuio         C:\Windows\system32\DRIVERS\ndisuio.sys

10:46:59.0217 3020  Ndisuio ( UnsignedFile.Multi.Generic ) - warning

10:46:59.0217 3020  Ndisuio - detected UnsignedFile.Multi.Generic (1)

10:46:59.0264 3020  [ F8158771905260982CE724076419EF19 ] NdisWan         C:\Windows\system32\DRIVERS\ndiswan.sys

10:46:59.0779 3020  NdisWan ( UnsignedFile.Multi.Generic ) - warning

10:46:59.0779 3020  NdisWan - detected UnsignedFile.Multi.Generic (1)

10:46:59.0810 3020  [ 9CB77ED7CB72850253E973A2D6AFDF49 ] NDProxy         C:\Windows\system32\drivers\NDProxy.sys

10:47:00.0403 3020  NDProxy ( UnsignedFile.Multi.Generic ) - warning

10:47:00.0403 3020  NDProxy - detected UnsignedFile.Multi.Generic (1)

10:47:00.0434 3020  [ D5AC41AE382738483FAFFBD7E373D49A ] Net Driver HPZ12 C:\Windows\system32\HPZinw12.dll

10:47:00.0933 3020  Net Driver HPZ12 ( UnsignedFile.Multi.Generic ) - warning

10:47:00.0933 3020  Net Driver HPZ12 - detected UnsignedFile.Multi.Generic (1)

10:47:00.0964 3020  [ A499294F5029A7862ADC115BDA7371CE ] NetBIOS         C:\Windows\system32\DRIVERS\netbios.sys

10:47:01.0651 3020  NetBIOS ( UnsignedFile.Multi.Generic ) - warning

10:47:01.0651 3020  NetBIOS - detected UnsignedFile.Multi.Generic (1)

10:47:01.0713 3020  [ FC2C792EBDDC8E28DF939D6A92C83D61 ] netbt           C:\Windows\system32\DRIVERS\netbt.sys

10:47:02.0197 3020  netbt ( UnsignedFile.Multi.Generic ) - warning

10:47:02.0197 3020  netbt - detected UnsignedFile.Multi.Generic (1)

10:47:02.0212 3020  [ 260BF9C43EE12C6898A9F5AAB0FB0E5D ] Netlogon        C:\Windows\system32\lsass.exe

10:47:02.0618 3020  Netlogon ( UnsignedFile.Multi.Generic ) - warning

10:47:02.0618 3020  Netlogon - detected UnsignedFile.Multi.Generic (1)

10:47:02.0696 3020  [ 9B63B29DEFC0F3115A559D2597BF5D75 ] Netman          C:\Windows\System32\netman.dll

10:47:03.0507 3020  Netman ( UnsignedFile.Multi.Generic ) - warning

10:47:03.0507 3020  Netman - detected UnsignedFile.Multi.Generic (1)

10:47:03.0554 3020  [ D22CD77D4F0D63D1169BB35911BFF12D ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

10:47:03.0585 3020  NetMsmqActivator - ok

10:47:03.0601 3020  [ D22CD77D4F0D63D1169BB35911BFF12D ] NetPipeActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

10:47:03.0616 3020  NetPipeActivator - ok

10:47:03.0694 3020  [ 7846D0136CC2B264926A73047BA7688A ] netprofm        C:\Windows\System32\netprofm.dll

10:47:04.0209 3020  netprofm ( UnsignedFile.Multi.Generic ) - warning

10:47:04.0209 3020  netprofm - detected UnsignedFile.Multi.Generic (1)

10:47:04.0240 3020  [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

10:47:04.0256 3020  NetTcpActivator - ok

10:47:04.0303 3020  [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

10:47:04.0318 3020  NetTcpPortSharing - ok

10:47:04.0349 3020  [ 4AC08BD6AF2DF42E0C3196D826C8AEA7 ] nfrd960         C:\Windows\system32\drivers\nfrd960.sys

10:47:04.0381 3020  nfrd960 - ok

10:47:04.0568 3020  [ F145BF4C4668E7E312069F81EF847CFC ] NlaSvc          C:\Windows\System32\nlasvc.dll

10:47:05.0379 3020  NlaSvc ( UnsignedFile.Multi.Generic ) - warning

10:47:05.0379 3020  NlaSvc - detected UnsignedFile.Multi.Generic (1)

10:47:05.0426 3020  [ B298874F8E0EA93F06EC40AA8D146478 ] Npfs            C:\Windows\system32\drivers\Npfs.sys

10:47:05.0800 3020  Npfs ( UnsignedFile.Multi.Generic ) - warning

10:47:05.0800 3020  Npfs - detected UnsignedFile.Multi.Generic (1)

10:47:05.0831 3020  [ ACB62BAA1C319B17752553DF3026EEEB ] nsi             C:\Windows\system32\nsisvc.dll

10:47:06.0206 3020  nsi ( UnsignedFile.Multi.Generic ) - warning

10:47:06.0206 3020  nsi - detected UnsignedFile.Multi.Generic (1)

10:47:06.0237 3020  [ 1523AF19EE8B030BA682F7A53537EAEB ] nsiproxy        C:\Windows\system32\drivers\nsiproxy.sys

10:47:06.0643 3020  nsiproxy ( UnsignedFile.Multi.Generic ) - warning

10:47:06.0643 3020  nsiproxy - detected UnsignedFile.Multi.Generic (1)

10:47:06.0752 3020  [ BAC869DFB98E499BA4D9BB1FB43270E1 ] Ntfs            C:\Windows\system32\drivers\Ntfs.sys

10:47:06.0908 3020  Ntfs - ok

10:47:06.0955 3020  [ DD5D684975352B85B52E3FD5347C20CB ] Null            C:\Windows\system32\drivers\Null.sys

10:47:07.0298 3020  Null ( UnsignedFile.Multi.Generic ) - warning

10:47:07.0298 3020  Null - detected UnsignedFile.Multi.Generic (1)

10:47:07.0329 3020  [ 2C040B7ADA5B06F6FACADAC8514AA034 ] nvraid          C:\Windows\system32\drivers\nvraid.sys

10:47:07.0345 3020  nvraid - ok

10:47:07.0376 3020  [ F7EA0FE82842D05EDA3EFDD376DBFDBA ] nvstor          C:\Windows\system32\drivers\nvstor.sys

10:47:07.0407 3020  nvstor - ok

10:47:07.0438 3020  [ 19067CA93075EF4823E3938A686F532F ] nv_agp          C:\Windows\system32\drivers\nv_agp.sys

10:47:07.0469 3020  nv_agp - ok

10:47:07.0469 3020  NwlnkFlt - ok

10:47:07.0485 3020  NwlnkFwd - ok

10:47:07.0532 3020  [ 404B0121AE1A75D9A63B6934EB07C258 ] OA013Ufd        C:\Windows\system32\DRIVERS\OA013Ufd.sys

10:47:07.0875 3020  OA013Ufd ( UnsignedFile.Multi.Generic ) - warning

10:47:07.0875 3020  OA013Ufd - detected UnsignedFile.Multi.Generic (1)

10:47:07.0906 3020  [ 650BCC8FF8ED939F3F79D1E8A1CF0595 ] OA013Vid        C:\Windows\system32\DRIVERS\OA013Vid.sys

10:47:08.0296 3020  OA013Vid ( UnsignedFile.Multi.Generic ) - warning

10:47:08.0296 3020  OA013Vid - detected UnsignedFile.Multi.Generic (1)

10:47:08.0359 3020  [ 7B58953E2F263421FDBB09A192712A85 ] ohci1394        C:\Windows\system32\drivers\ohci1394.sys

10:47:08.0780 3020  ohci1394 ( UnsignedFile.Multi.Generic ) - warning

10:47:08.0780 3020  ohci1394 - detected UnsignedFile.Multi.Generic (1)

10:47:08.0920 3020  [ 9AE31D2E1D15C10D91318E0EC149CEAC ] p2pimsvc        C:\Windows\system32\p2psvc.dll

10:47:09.0481 3020  p2pimsvc ( UnsignedFile.Multi.Generic ) - warning

10:47:09.0481 3020  p2pimsvc - detected UnsignedFile.Multi.Generic (1)

10:47:09.0529 3020  [ 9AE31D2E1D15C10D91318E0EC149CEAC ] p2psvc          C:\Windows\system32\p2psvc.dll

10:47:10.0182 3020  p2psvc ( UnsignedFile.Multi.Generic ) - warning

10:47:10.0182 3020  p2psvc - detected UnsignedFile.Multi.Generic (1)

10:47:10.0237 3020  [ AECD57F94C887F58919F307C35498EA0 ] Parport         C:\Windows\system32\drivers\parport.sys

10:47:10.0682 3020  Parport ( UnsignedFile.Multi.Generic ) - warning

10:47:10.0682 3020  Parport - detected UnsignedFile.Multi.Generic (1)

10:47:10.0713 3020  [ B43751085E2ABE389DA466BC62A4B987 ] partmgr         C:\Windows\system32\drivers\partmgr.sys

10:47:10.0744 3020  partmgr - ok

10:47:10.0776 3020  [ 9AB157B374192FF276C1628FBDBA2B0E ] PcaSvc          C:\Windows\System32\pcasvc.dll

10:47:11.0166 3020  PcaSvc ( UnsignedFile.Multi.Generic ) - warning

10:47:11.0166 3020  PcaSvc - detected UnsignedFile.Multi.Generic (1)

10:47:11.0212 3020  [ 47AB1E0FC9D0E12BB53BA246E3A0906D ] pci             C:\Windows\system32\drivers\pci.sys

10:47:11.0228 3020  pci - ok

10:47:11.0259 3020  [ 8D618C829034479985A9ED56106CC732 ] pciide          C:\Windows\system32\drivers\pciide.sys

10:47:11.0275 3020  pciide - ok

10:47:11.0322 3020  [ 037661F3D7C507C9993B7010CEEE6288 ] pcmcia          C:\Windows\system32\drivers\pcmcia.sys

10:47:11.0353 3020  pcmcia - ok

10:47:11.0462 3020  [ 58865916F53592A61549B04941BFD80D ] PEAUTH          C:\Windows\system32\drivers\peauth.sys

10:47:11.0992 3020  PEAUTH ( UnsignedFile.Multi.Generic ) - warning

10:47:11.0992 3020  PEAUTH - detected UnsignedFile.Multi.Generic (1)

10:47:12.0102 3020  [ 0ED8727EA0172860F47258456C06CAEA ] PerfHost        C:\Windows\SysWow64\perfhost.exe

10:47:12.0492 3020  PerfHost ( UnsignedFile.Multi.Generic ) - warning

10:47:12.0492 3020  PerfHost - detected UnsignedFile.Multi.Generic (1)

10:47:12.0585 3020  [ E9E68C1A0F25CF4A7AC966EEA74EE89E ] pla             C:\Windows\system32\pla.dll

10:47:12.0991 3020  pla ( UnsignedFile.Multi.Generic ) - warning

10:47:12.0991 3020  pla - detected UnsignedFile.Multi.Generic (1)

10:47:13.0038 3020  [ FE6B0F59215C9FD9F9D26539C58C8B82 ] PlugPlay        C:\Windows\system32\umpnpmgr.dll

10:47:13.0350 3020  PlugPlay ( UnsignedFile.Multi.Generic ) - warning

10:47:13.0350 3020  PlugPlay - detected UnsignedFile.Multi.Generic (1)

10:47:13.0396 3020  [ 37F6046CDC630442D7DC087501FF6FC6 ] Pml Driver HPZ12 C:\Windows\system32\HPZipm12.dll

10:47:13.0724 3020  Pml Driver HPZ12 ( UnsignedFile.Multi.Generic ) - warning

10:47:13.0724 3020  Pml Driver HPZ12 - detected UnsignedFile.Multi.Generic (1)

10:47:13.0771 3020  [ 9AE31D2E1D15C10D91318E0EC149CEAC ] PNRPAutoReg     C:\Windows\system32\p2psvc.dll

10:47:14.0145 3020  PNRPAutoReg ( UnsignedFile.Multi.Generic ) - warning

10:47:14.0145 3020  PNRPAutoReg - detected UnsignedFile.Multi.Generic (1)

10:47:14.0176 3020  [ 9AE31D2E1D15C10D91318E0EC149CEAC ] PNRPsvc         C:\Windows\system32\p2psvc.dll

10:47:14.0551 3020  PNRPsvc ( UnsignedFile.Multi.Generic ) - warning

10:47:14.0551 3020  PNRPsvc - detected UnsignedFile.Multi.Generic (1)

10:47:14.0582 3020  [ 89A5560671C2D8B4A4B51F3E1AA069D8 ] PolicyAgent     C:\Windows\System32\ipsecsvc.dll

10:47:15.0050 3020  PolicyAgent ( UnsignedFile.Multi.Generic ) - warning

10:47:15.0050 3020  PolicyAgent - detected UnsignedFile.Multi.Generic (1)

10:47:15.0081 3020  [ 23386E9952025F5F21C368971E2E7301 ] PptpMiniport    C:\Windows\system32\DRIVERS\raspptp.sys

10:47:15.0424 3020  PptpMiniport ( UnsignedFile.Multi.Generic ) - warning

10:47:15.0424 3020  PptpMiniport - detected UnsignedFile.Multi.Generic (1)

10:47:15.0440 3020  [ 5080E59ECEE0BC923F14018803AA7A01 ] Processor       C:\Windows\system32\drivers\processr.sys

10:47:15.0768 3020  Processor ( UnsignedFile.Multi.Generic ) - warning

10:47:15.0768 3020  Processor - detected UnsignedFile.Multi.Generic (1)

10:47:15.0799 3020  [ E058CE4FC2449D8BFA14739C83B7FF2A ] ProfSvc         C:\Windows\system32\profsvc.dll

10:47:16.0142 3020  ProfSvc ( UnsignedFile.Multi.Generic ) - warning

10:47:16.0142 3020  ProfSvc - detected UnsignedFile.Multi.Generic (1)

10:47:16.0173 3020  [ 260BF9C43EE12C6898A9F5AAB0FB0E5D ] ProtectedStorage C:\Windows\system32\lsass.exe

10:47:16.0610 3020  ProtectedStorage ( UnsignedFile.Multi.Generic ) - warning

10:47:16.0610 3020  ProtectedStorage - detected UnsignedFile.Multi.Generic (1)

10:47:16.0641 3020  [ C5AB7F0809392D0DA027F4A2A81BFA31 ] PSched          C:\Windows\system32\DRIVERS\pacer.sys

10:47:17.0016 3020  PSched ( UnsignedFile.Multi.Generic ) - warning

10:47:17.0016 3020  PSched - detected UnsignedFile.Multi.Generic (1)

10:47:17.0062 3020  [ 0B83F4E681062F3839BE2EC1D98FD94A ] ql2300          C:\Windows\system32\drivers\ql2300.sys

10:47:17.0156 3020  ql2300 - ok

10:47:17.0203 3020  [ E1C80F8D4D1E39EF9595809C1369BF2A ] ql40xx          C:\Windows\system32\drivers\ql40xx.sys

10:47:17.0234 3020  ql40xx - ok

10:47:17.0281 3020  [ 90574842C3DA781E279061A3EFF91F07 ] QWAVE           C:\Windows\system32\qwave.dll

10:47:17.0608 3020  QWAVE ( UnsignedFile.Multi.Generic ) - warning

10:47:17.0608 3020  QWAVE - detected UnsignedFile.Multi.Generic (1)

10:47:17.0640 3020  [ E8D76EDAB77EC9C634C27B8EAC33ADC5 ] QWAVEdrv        C:\Windows\system32\drivers\qwavedrv.sys

10:47:17.0998 3020  QWAVEdrv ( UnsignedFile.Multi.Generic ) - warning

10:47:17.0998 3020  QWAVEdrv - detected UnsignedFile.Multi.Generic (1)

10:47:18.0014 3020  [ 1013B3B663A56D3DDD784F581C1BD005 ] RasAcd          C:\Windows\system32\DRIVERS\rasacd.sys

10:47:18.0357 3020  RasAcd ( UnsignedFile.Multi.Generic ) - warning

10:47:18.0357 3020  RasAcd - detected UnsignedFile.Multi.Generic (1)

10:47:18.0388 3020  [ B2AE18F847D07F0044404DDF7CB04497 ] RasAuto         C:\Windows\System32\rasauto.dll

10:47:18.0685 3020  RasAuto ( UnsignedFile.Multi.Generic ) - warning

10:47:18.0685 3020  RasAuto - detected UnsignedFile.Multi.Generic (1)

10:47:18.0732 3020  [ AC7BC4D42A7E558718DFDEC599BBFC2C ] Rasl2tp         C:\Windows\system32\DRIVERS\rasl2tp.sys

10:47:19.0044 3020  Rasl2tp ( UnsignedFile.Multi.Generic ) - warning

10:47:19.0044 3020  Rasl2tp - detected UnsignedFile.Multi.Generic (1)

10:47:19.0059 3020  [ 3AD83E4046C43BE510DE681588ACB8AF ] RasMan          C:\Windows\System32\rasmans.dll

10:47:19.0402 3020  RasMan ( UnsignedFile.Multi.Generic ) - warning

10:47:19.0402 3020  RasMan - detected UnsignedFile.Multi.Generic (1)

10:47:19.0434 3020  [ 4517FBF8B42524AFE4EDE1DE102AAE3E ] RasPppoe        C:\Windows\system32\DRIVERS\raspppoe.sys

10:47:19.0777 3020  RasPppoe ( UnsignedFile.Multi.Generic ) - warning

10:47:19.0777 3020  RasPppoe - detected UnsignedFile.Multi.Generic (1)

10:47:19.0839 3020  [ C6A593B51F34C33E5474539544072527 ] RasSstp         C:\Windows\system32\DRIVERS\rassstp.sys

10:47:20.0167 3020  RasSstp ( UnsignedFile.Multi.Generic ) - warning

10:47:20.0167 3020  RasSstp - detected UnsignedFile.Multi.Generic (1)

10:47:20.0198 3020  [ 322DB5C6B55E8D8EE8D6F358B2AAABB1 ] rdbss           C:\Windows\system32\DRIVERS\rdbss.sys

10:47:20.0557 3020  rdbss ( UnsignedFile.Multi.Generic ) - warning

10:47:20.0557 3020  rdbss - detected UnsignedFile.Multi.Generic (1)

10:47:20.0572 3020  [ 603900CC05F6BE65CCBF373800AF3716 ] RDPCDD          C:\Windows\system32\DRIVERS\RDPCDD.sys

10:47:20.0978 3020  RDPCDD ( UnsignedFile.Multi.Generic ) - warning

10:47:20.0978 3020  RDPCDD - detected UnsignedFile.Multi.Generic (1)

10:47:21.0009 3020  [ C045D1FB111C28DF0D1BE8D4BDA22C06 ] rdpdr           C:\Windows\system32\drivers\rdpdr.sys

10:47:21.0477 3020  rdpdr ( UnsignedFile.Multi.Generic ) - warning

10:47:21.0477 3020  rdpdr - detected UnsignedFile.Multi.Generic (1)

10:47:21.0493 3020  [ CAB9421DAF3D97B33D0D055858E2C3AB ] RDPENCDD        C:\Windows\system32\drivers\rdpencdd.sys

10:47:21.0898 3020  RDPENCDD ( UnsignedFile.Multi.Generic ) - warning

10:47:21.0898 3020  RDPENCDD - detected UnsignedFile.Multi.Generic (1)

10:47:21.0961 3020  [ AE4BD9E1C33D351D8E607FC81F15160C ] RDPWD           C:\Windows\system32\drivers\RDPWD.sys

10:47:22.0304 3020  RDPWD ( UnsignedFile.Multi.Generic ) - warning

10:47:22.0304 3020  RDPWD - detected UnsignedFile.Multi.Generic (1)

10:47:22.0351 3020  [ C612B9557DA73F70D41F8A6FBC8E5344 ] RemoteAccess    C:\Windows\System32\mprdim.dll

10:47:22.0710 3020  RemoteAccess ( UnsignedFile.Multi.Generic ) - warning

10:47:22.0710 3020  RemoteAccess - detected UnsignedFile.Multi.Generic (1)

10:47:22.0756 3020  [ 44B9D8EC2F3EF3A0EFB00857AF70D861 ] RemoteRegistry  C:\Windows\system32\regsvc.dll

10:47:23.0115 3020  RemoteRegistry ( UnsignedFile.Multi.Generic ) - warning

10:47:23.0115 3020  RemoteRegistry - detected UnsignedFile.Multi.Generic (1)

10:47:23.0162 3020  [ F46C457840D4B7A4DAAFEE739CE04102 ] RpcLocator      C:\Windows\system32\locator.exe

10:47:23.0521 3020  RpcLocator ( UnsignedFile.Multi.Generic ) - warning

10:47:23.0521 3020  RpcLocator - detected UnsignedFile.Multi.Generic (1)

10:47:23.0568 3020  [ CF8B9A3A5E7DC57724A89D0C3E8CF9EF ] RpcSs           C:\Windows\system32\rpcss.dll

10:47:23.0926 3020  RpcSs ( UnsignedFile.Multi.Generic ) - warning

10:47:23.0926 3020  RpcSs - detected UnsignedFile.Multi.Generic (1)

10:47:23.0973 3020  [ 22A9CB08B1A6707C1550C6BF099AAE73 ] rspndr          C:\Windows\system32\DRIVERS\rspndr.sys

10:47:24.0316 3020  rspndr ( UnsignedFile.Multi.Generic ) - warning

10:47:24.0316 3020  rspndr - detected UnsignedFile.Multi.Generic (1)

10:47:24.0348 3020  [ 260BF9C43EE12C6898A9F5AAB0FB0E5D ] SamSs           C:\Windows\system32\lsass.exe

10:47:24.0706 3020  SamSs ( UnsignedFile.Multi.Generic ) - warning

10:47:24.0706 3020  SamSs - detected UnsignedFile.Multi.Generic (1)

10:47:24.0738 3020  [ CD9C693589C60AD59BBBCFB0E524E01B ] sbp2port        C:\Windows\system32\drivers\sbp2port.sys

10:47:24.0769 3020  sbp2port - ok

10:47:24.0831 3020  [ FD1CDCF108D5EF3366F00D18B70FB89B ] SCardSvr        C:\Windows\System32\SCardSvr.dll

10:47:25.0206 3020  SCardSvr ( UnsignedFile.Multi.Generic ) - warning

10:47:25.0206 3020  SCardSvr - detected UnsignedFile.Multi.Generic (1)

10:47:25.0284 3020  [ 0F838C811AD295D2A4489B9993096C63 ] Schedule        C:\Windows\system32\schedsvc.dll

10:47:25.0736 3020  Schedule ( UnsignedFile.Multi.Generic ) - warning

10:47:25.0736 3020  Schedule - detected UnsignedFile.Multi.Generic (1)

10:47:25.0767 3020  [ 5A268127633C7EE2A7FB87F39D748D56 ] SCPolicySvc     C:\Windows\System32\certprop.dll

10:47:26.0095 3020  SCPolicySvc ( UnsignedFile.Multi.Generic ) - warning

10:47:26.0095 3020  SCPolicySvc - detected UnsignedFile.Multi.Generic (1)

10:47:26.0126 3020  [ 4FF71B076A7760FE75EA5AE2D0EE0018 ] SDRSVC          C:\Windows\System32\SDRSVC.dll

10:47:26.0547 3020  SDRSVC ( UnsignedFile.Multi.Generic ) - warning

10:47:26.0547 3020  SDRSVC - detected UnsignedFile.Multi.Generic (1)

10:47:26.0578 3020  [ 3EA8A16169C26AFBEB544E0E48421186 ] secdrv          C:\Windows\system32\drivers\secdrv.sys

10:47:26.0937 3020  secdrv ( UnsignedFile.Multi.Generic ) - warning

10:47:26.0937 3020  secdrv - detected UnsignedFile.Multi.Generic (1)

10:47:26.0968 3020  [ 5ACDCBC67FCF894A1815B9F96D704490 ] seclogon        C:\Windows\system32\seclogon.dll

10:47:27.0312 3020  seclogon ( UnsignedFile.Multi.Generic ) - warning

10:47:27.0312 3020  seclogon - detected UnsignedFile.Multi.Generic (1)

10:47:27.0343 3020  [ 90973A64B96CD647FF81C79443618EED ] SENS            C:\Windows\System32\sens.dll

10:47:27.0702 3020  SENS ( UnsignedFile.Multi.Generic ) - warning

10:47:27.0702 3020  SENS - detected UnsignedFile.Multi.Generic (1)

10:47:27.0733 3020  [ F71BFE7AC6C52273B7C82CBF1BB2A222 ] Serenum         C:\Windows\system32\drivers\serenum.sys

10:47:28.0107 3020  Serenum ( UnsignedFile.Multi.Generic ) - warning

10:47:28.0107 3020  Serenum - detected UnsignedFile.Multi.Generic (1)

10:47:28.0138 3020  [ E62FAC91EE288DB29A9696A9D279929C ] Serial          C:\Windows\system32\drivers\serial.sys

10:47:28.0544 3020  Serial ( UnsignedFile.Multi.Generic ) - warning

10:47:28.0544 3020  Serial - detected UnsignedFile.Multi.Generic (1)

10:47:28.0591 3020  [ A842F04833684BCEEA7336211BE478DF ] sermouse        C:\Windows\system32\drivers\sermouse.sys

10:47:28.0981 3020  sermouse ( UnsignedFile.Multi.Generic ) - warning

10:47:28.0981 3020  sermouse - detected UnsignedFile.Multi.Generic (1)

10:47:29.0012 3020  [ A8E4A4407A09F35DCCC3771AF590B0C4 ] SessionEnv      C:\Windows\system32\sessenv.dll

10:47:29.0433 3020  SessionEnv ( UnsignedFile.Multi.Generic ) - warning

10:47:29.0433 3020  SessionEnv - detected UnsignedFile.Multi.Generic (1)

10:47:29.0480 3020  [ 14D4B4465193A87C127933978E8C4106 ] sffdisk         C:\Windows\system32\drivers\sffdisk.sys

10:47:29.0870 3020  sffdisk ( UnsignedFile.Multi.Generic ) - warning

10:47:29.0870 3020  sffdisk - detected UnsignedFile.Multi.Generic (1)

10:47:29.0901 3020  [ 7073AEE3F82F3D598E3825962AA98AB2 ] sffp_mmc        C:\Windows\system32\drivers\sffp_mmc.sys

10:47:30.0276 3020  sffp_mmc ( UnsignedFile.Multi.Generic ) - warning

10:47:30.0276 3020  sffp_mmc - detected UnsignedFile.Multi.Generic (1)

10:47:30.0291 3020  [ 35E59EBE4A01A0532ED67975161C7B82 ] sffp_sd         C:\Windows\system32\drivers\sffp_sd.sys

10:47:30.0790 3020  sffp_sd ( UnsignedFile.Multi.Generic ) - warning

10:47:30.0790 3020  sffp_sd - detected UnsignedFile.Multi.Generic (1)

10:47:30.0806 3020  [ 6B7838C94135768BD455CBDC23E39E5F ] sfloppy         C:\Windows\system32\drivers\sfloppy.sys

10:47:31.0227 3020  sfloppy ( UnsignedFile.Multi.Generic ) - warning

10:47:31.0227 3020  sfloppy - detected UnsignedFile.Multi.Generic (1)

10:47:31.0274 3020  [ 4C5AEE179DA7E1EE9A9CCB9DA289AF34 ] SharedAccess    C:\Windows\System32\ipnathlp.dll

10:47:31.0945 3020  SharedAccess ( UnsignedFile.Multi.Generic ) - warning

10:47:31.0945 3020  SharedAccess - detected UnsignedFile.Multi.Generic (1)

10:47:31.0976 3020  [ 56793271ECDEDD350C5ADD305603E963 ] ShellHWDetection C:\Windows\System32\shsvcs.dll

10:47:32.0600 3020  ShellHWDetection ( UnsignedFile.Multi.Generic ) - warning

10:47:32.0600 3020  ShellHWDetection - detected UnsignedFile.Multi.Generic (1)

10:47:32.0647 3020  [ 7A5DE502AEB719D4594C6471060A78B3 ] SiSRaid2        C:\Windows\system32\drivers\sisraid2.sys

10:47:32.0662 3020  SiSRaid2 - ok

10:47:32.0740 3020  [ 3A2F769FAB9582BC720E11EA1DFB184D ] SiSRaid4        C:\Windows\system32\drivers\sisraid4.sys

10:47:32.0756 3020  SiSRaid4 - ok

10:47:32.0865 3020  [ A9A27A8E257B45A604FDAD4F26FE7241 ] slsvc           C:\Windows\system32\SLsvc.exe

10:47:33.0536 3020  slsvc ( UnsignedFile.Multi.Generic ) - warning

10:47:33.0536 3020  slsvc - detected UnsignedFile.Multi.Generic (1)

10:47:33.0583 3020  [ FD74B4B7C2088E390A30C85A896FC3AF ] SLUINotify      C:\Windows\system32\SLUINotify.dll

10:47:33.0957 3020  SLUINotify ( UnsignedFile.Multi.Generic ) - warning

10:47:33.0957 3020  SLUINotify - detected UnsignedFile.Multi.Generic (1)

10:47:33.0988 3020  [ 290B6F6A0EC4FCDFC90F5CB6D7020473 ] Smb             C:\Windows\system32\DRIVERS\smb.sys

10:47:34.0363 3020  Smb ( UnsignedFile.Multi.Generic ) - warning

10:47:34.0363 3020  Smb - detected UnsignedFile.Multi.Generic (1)

10:47:34.0441 3020  [ F8F47F38909823B1AF28D60B96340CFF ] SNMPTRAP        C:\Windows\System32\snmptrap.exe

10:47:34.0768 3020  SNMPTRAP ( UnsignedFile.Multi.Generic ) - warning

10:47:34.0768 3020  SNMPTRAP - detected UnsignedFile.Multi.Generic (1)

10:47:34.0831 3020  [ 386C3C63F00A7040C7EC5E384217E89D ] spldr           C:\Windows\system32\drivers\spldr.sys

10:47:34.0862 3020  spldr - ok

10:47:34.0909 3020  [ F66FF751E7EFC816D266977939EF5DC3 ] Spooler         C:\Windows\System32\spoolsv.exe

10:47:35.0252 3020  Spooler ( UnsignedFile.Multi.Generic ) - warning

10:47:35.0252 3020  Spooler - detected UnsignedFile.Multi.Generic (1)

10:47:35.0314 3020  [ 880A57FCCB571EBD063D4DD50E93E46D ] srv             C:\Windows\system32\DRIVERS\srv.sys

10:47:35.0969 3020  srv ( UnsignedFile.Multi.Generic ) - warning

10:47:35.0969 3020  srv - detected UnsignedFile.Multi.Generic (1)

10:47:35.0989 3020  [ A1AD14A6D7A37891FFFECA35EBBB0730 ] srv2            C:\Windows\system32\DRIVERS\srv2.sys

10:47:36.0343 3020  srv2 ( UnsignedFile.Multi.Generic ) - warning

10:47:36.0343 3020  srv2 - detected UnsignedFile.Multi.Generic (1)

10:47:36.0355 3020  [ 4BED62F4FA4D8300973F1151F4C4D8A7 ] srvnet          C:\Windows\system32\DRIVERS\srvnet.sys

10:47:36.0830 3020  srvnet ( UnsignedFile.Multi.Generic ) - warning

10:47:36.0830 3020  srvnet - detected UnsignedFile.Multi.Generic (1)

10:47:36.0861 3020  [ 192C74646EC5725AEF3F80D19FF75F6A ] SSDPSRV         C:\Windows\System32\ssdpsrv.dll

10:47:37.0204 3020  SSDPSRV ( UnsignedFile.Multi.Generic ) - warning

10:47:37.0204 3020  SSDPSRV - detected UnsignedFile.Multi.Generic (1)

10:47:37.0266 3020  [ 2EE3FA0308E6185BA64A9A7F2E74332B ] SstpSvc         C:\Windows\system32\sstpsvc.dll

10:47:37.0625 3020  SstpSvc ( UnsignedFile.Multi.Generic ) - warning

10:47:37.0625 3020  SstpSvc - detected UnsignedFile.Multi.Generic (1)

10:47:37.0703 3020  [ 74425FFA11C133D045E1C3BE2EAD481D ] ssudmdm         C:\Windows\system32\DRIVERS\ssudmdm.sys

10:47:37.0719 3020  ssudmdm - ok

10:47:37.0875 3020  [ C5DF63AE2693C9B6B01B4A2E6C1C64AC ] STacSV          C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_15f4e438\STacSV64.exe

10:47:38.0280 3020  STacSV ( UnsignedFile.Multi.Generic ) - warning

10:47:38.0280 3020  STacSV - detected UnsignedFile.Multi.Generic (1)

10:47:38.0358 3020  [ BA16447226ABFD342E130D2F24F73D32 ] STHDA           C:\Windows\system32\DRIVERS\stwrt64.sys

10:47:38.0764 3020  STHDA ( UnsignedFile.Multi.Generic ) - warning

10:47:38.0764 3020  STHDA - detected UnsignedFile.Multi.Generic (1)

10:47:38.0826 3020  [ 15825C1FBFB8779992CB65087F316AF5 ] stisvc          C:\Windows\System32\wiaservc.dll

10:47:39.0232 3020  stisvc ( UnsignedFile.Multi.Generic ) - warning

10:47:39.0232 3020  stisvc - detected UnsignedFile.Multi.Generic (1)

10:47:39.0248 3020  [ 8A851CA908B8B974F89C50D2E18D4F0C ] swenum          C:\Windows\system32\DRIVERS\swenum.sys

10:47:39.0279 3020  swenum - ok

10:47:39.0310 3020  [ 6DE37F4DE19D4EFD9C48C43ADDBC949A ] swprv           C:\Windows\System32\swprv.dll

10:47:39.0747 3020  swprv ( UnsignedFile.Multi.Generic ) - warning

10:47:39.0747 3020  swprv - detected UnsignedFile.Multi.Generic (1)

10:47:39.0778 3020  [ 2F26A2C6FC96B29BEFF5D8ED74E6625B ] Symc8xx         C:\Windows\system32\drivers\symc8xx.sys

10:47:39.0794 3020  Symc8xx - ok

10:47:39.0825 3020  [ A909667976D3BCCD1DF813FED517D837 ] Sym_hi          C:\Windows\system32\drivers\sym_hi.sys

10:47:39.0840 3020  Sym_hi - ok

10:47:39.0872 3020  [ 36887B56EC2D98B9C362F6AE4DE5B7B0 ] Sym_u3          C:\Windows\system32\drivers\sym_u3.sys

10:47:39.0903 3020  Sym_u3 - ok

10:47:39.0950 3020  [ 3178B56219E0E4FB5F95299E49B83B44 ] SynTP           C:\Windows\system32\DRIVERS\SynTP.sys

10:47:39.0981 3020  SynTP - ok

10:47:40.0043 3020  [ 92D7A8B0F87B036F17D25885937897A6 ] SysMain         C:\Windows\system32\sysmain.dll

10:47:40.0496 3020  SysMain ( UnsignedFile.Multi.Generic ) - warning

10:47:40.0496 3020  SysMain - detected UnsignedFile.Multi.Generic (1)

10:47:40.0511 3020  [ 005CE42567F9113A3BCCB3B20073B029 ] TabletInputService C:\Windows\System32\TabSvc.dll

10:47:40.0901 3020  TabletInputService ( UnsignedFile.Multi.Generic ) - warning

10:47:40.0917 3020  TabletInputService - detected UnsignedFile.Multi.Generic (1)

10:47:40.0948 3020  [ CC2562B4D55E0B6A4758C65407F63B79 ] TapiSrv         C:\Windows\System32\tapisrv.dll

10:47:42.0929 3020  TapiSrv ( UnsignedFile.Multi.Generic ) - warning

10:47:42.0929 3020  TapiSrv - detected UnsignedFile.Multi.Generic (1)

10:47:42.0960 3020  [ CDBE8D7C1E201B911CDC346D06617FB5 ] TBS             C:\Windows\System32\tbssvc.dll

10:47:43.0397 3020  TBS ( UnsignedFile.Multi.Generic ) - warning

10:47:43.0397 3020  TBS - detected UnsignedFile.Multi.Generic (1)

10:47:43.0522 3020  [ 46D448E9117464E4D3BBF36D7E3FA48E ] Tcpip           C:\Windows\system32\drivers\tcpip.sys

10:47:43.0694 3020  Tcpip - ok

10:47:43.0787 3020  [ 46D448E9117464E4D3BBF36D7E3FA48E ] Tcpip6          C:\Windows\system32\DRIVERS\tcpip.sys

10:47:43.0865 3020  Tcpip6 - ok

10:47:43.0912 3020  [ C7E72A4071EE0200E3C075DACFB2B334 ] tcpipreg        C:\Windows\system32\drivers\tcpipreg.sys

10:47:44.0505 3020  tcpipreg ( UnsignedFile.Multi.Generic ) - warning

10:47:44.0505 3020  tcpipreg - detected UnsignedFile.Multi.Generic (1)

10:47:44.0536 3020  [ 1D8BF4AAA5FB7A2761475781DC1195BC ] TDPIPE          C:\Windows\system32\drivers\tdpipe.sys

10:47:45.0051 3020  TDPIPE ( UnsignedFile.Multi.Generic ) - warning

10:47:45.0051 3020  TDPIPE - detected UnsignedFile.Multi.Generic (1)

10:47:45.0066 3020  [ 7F7E00CDF609DF657F4CDA02DD1C9BB1 ] TDTCP           C:\Windows\system32\drivers\tdtcp.sys

10:47:45.0566 3020  TDTCP ( UnsignedFile.Multi.Generic ) - warning

10:47:45.0566 3020  TDTCP - detected UnsignedFile.Multi.Generic (1)

10:47:45.0597 3020  [ 458919C8C42E398DC4802178D5FFEE27 ] tdx             C:\Windows\system32\DRIVERS\tdx.sys

10:47:45.0924 3020  tdx ( UnsignedFile.Multi.Generic ) - warning

10:47:45.0924 3020  tdx - detected UnsignedFile.Multi.Generic (1)

10:47:45.0956 3020  [ 8C19678D22649EC002EF2282EAE92F98 ] TermDD          C:\Windows\system32\DRIVERS\termdd.sys

10:47:45.0987 3020  TermDD - ok

10:47:46.0034 3020  [ 5CDD30BC217082DAC71A9878D9BFD566 ] TermService     C:\Windows\System32\termsrv.dll

10:47:46.0377 3020  TermService ( UnsignedFile.Multi.Generic ) - warning

10:47:46.0377 3020  TermService - detected UnsignedFile.Multi.Generic (1)

10:47:46.0424 3020  [ 56793271ECDEDD350C5ADD305603E963 ] Themes          C:\Windows\system32\shsvcs.dll

10:47:46.0892 3020  Themes ( UnsignedFile.Multi.Generic ) - warning

10:47:46.0892 3020  Themes - detected UnsignedFile.Multi.Generic (1)

10:47:46.0970 3020  [ 3CBE4995E80E13CCFBC42E5DCF3AC81A ] THREADORDER     C:\Windows\system32\mmcss.dll

10:47:47.0469 3020  THREADORDER ( UnsignedFile.Multi.Generic ) - warning

10:47:47.0469 3020  THREADORDER - detected UnsignedFile.Multi.Generic (1)

10:47:47.0594 3020  [ F4689F05AF472A651A7B1B7B02D200E7 ] TrkWks          C:\Windows\System32\trkwks.dll

10:47:48.0077 3020  TrkWks ( UnsignedFile.Multi.Generic ) - warning

10:47:48.0077 3020  TrkWks - detected UnsignedFile.Multi.Generic (1)

10:47:48.0140 3020  [ 66328B08EF5A9305D8EDE36B93930369 ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe

10:47:48.0530 3020  TrustedInstaller ( UnsignedFile.Multi.Generic ) - warning

10:47:48.0530 3020  TrustedInstaller - detected UnsignedFile.Multi.Generic (1)

10:47:48.0545 3020  [ 9E5409CD17C8BEF193AAD498F3BC2CB8 ] tssecsrv        C:\Windows\system32\DRIVERS\tssecsrv.sys

10:47:48.0966 3020  tssecsrv ( UnsignedFile.Multi.Generic ) - warning

10:47:48.0966 3020  tssecsrv - detected UnsignedFile.Multi.Generic (1)

10:47:48.0998 3020  [ 89EC74A9E602D16A75A4170511029B3C ] tunmp           C:\Windows\system32\DRIVERS\tunmp.sys

10:47:49.0575 3020  tunmp ( UnsignedFile.Multi.Generic ) - warning

10:47:49.0575 3020  tunmp - detected UnsignedFile.Multi.Generic (1)

10:47:49.0622 3020  [ 30A9B3F45AD081BFFC3BCAA9C812B609 ] tunnel          C:\Windows\system32\DRIVERS\tunnel.sys

10:47:50.0074 3020  tunnel ( UnsignedFile.Multi.Generic ) - warning

10:47:50.0074 3020  tunnel - detected UnsignedFile.Multi.Generic (1)

10:47:50.0136 3020  [ FEC266EF401966311744BD0F359F7F56 ] uagp35          C:\Windows\system32\drivers\uagp35.sys

10:47:50.0168 3020  uagp35 - ok

10:47:50.0261 3020  [ FAF2640A2A76ED03D449E443194C4C34 ] udfs            C:\Windows\system32\DRIVERS\udfs.sys

10:47:50.0760 3020  udfs ( UnsignedFile.Multi.Generic ) - warning

10:47:50.0760 3020  udfs - detected UnsignedFile.Multi.Generic (1)

10:47:50.0854 3020  [ 060507C4113391394478F6953A79EEDC ] UI0Detect       C:\Windows\system32\UI0Detect.exe

10:47:51.0260 3020  UI0Detect ( UnsignedFile.Multi.Generic ) - warning

10:47:51.0260 3020  UI0Detect - detected UnsignedFile.Multi.Generic (1)

10:47:51.0306 3020  [ 4EC9447AC3AB462647F60E547208CA00 ] uliagpkx        C:\Windows\system32\drivers\uliagpkx.sys

10:47:51.0338 3020  uliagpkx - ok

10:47:51.0400 3020  [ 697F0446134CDC8F99E69306184FBBB4 ] uliahci         C:\Windows\system32\drivers\uliahci.sys

10:47:51.0431 3020  uliahci - ok

10:47:51.0462 3020  [ 31707F09846056651EA2C37858F5DDB0 ] UlSata          C:\Windows\system32\drivers\ulsata.sys

10:47:51.0494 3020  UlSata - ok

10:47:51.0525 3020  [ 85E5E43ED5B48C8376281BAB519271B7 ] ulsata2         C:\Windows\system32\drivers\ulsata2.sys

10:47:51.0556 3020  ulsata2 - ok

10:47:51.0587 3020  [ 46E9A994C4FED537DD951F60B86AD3F4 ] umbus           C:\Windows\system32\DRIVERS\umbus.sys

10:47:52.0008 3020  umbus ( UnsignedFile.Multi.Generic ) - warning

10:47:52.0008 3020  umbus - detected UnsignedFile.Multi.Generic (1)

10:47:52.0071 3020  [ 7093799FF80E9DECA0680D2E3535BE60 ] upnphost        C:\Windows\System32\upnphost.dll

10:47:52.0492 3020  upnphost ( UnsignedFile.Multi.Generic ) - warning

10:47:52.0492 3020  upnphost - detected UnsignedFile.Multi.Generic (1)

10:47:52.0570 3020  [ 07E3498FC60834219D2356293DA0FECC ] usbccgp         C:\Windows\system32\DRIVERS\usbccgp.sys

10:47:53.0054 3020  usbccgp ( UnsignedFile.Multi.Generic ) - warning

10:47:53.0054 3020  usbccgp - detected UnsignedFile.Multi.Generic (1)

10:47:53.0116 3020  [ 9247F7E0B65852C1F6631480984D6ED2 ] usbcir          C:\Windows\system32\drivers\usbcir.sys

10:47:53.0631 3020  usbcir ( UnsignedFile.Multi.Generic ) - warning

10:47:53.0631 3020  usbcir - detected UnsignedFile.Multi.Generic (1)

10:47:53.0678 3020  [ 827E44DE934A736EA31E91D353EB126F ] usbehci         C:\Windows\system32\DRIVERS\usbehci.sys

10:47:54.0036 3020  usbehci ( UnsignedFile.Multi.Generic ) - warning

10:47:54.0036 3020  usbehci - detected UnsignedFile.Multi.Generic (1)

10:47:54.0099 3020  [ BB35CD80A2ECECFADC73569B3D70C7D1 ] usbhub          C:\Windows\system32\DRIVERS\usbhub.sys

10:47:54.0614 3020  usbhub ( UnsignedFile.Multi.Generic ) - warning

10:47:54.0614 3020  usbhub - detected UnsignedFile.Multi.Generic (1)

10:47:54.0645 3020  [ EBA14EF0C07CEC233F1529C698D0D154 ] usbohci         C:\Windows\system32\drivers\usbohci.sys

10:47:55.0097 3020  usbohci ( UnsignedFile.Multi.Generic ) - warning

10:47:55.0097 3020  usbohci - detected UnsignedFile.Multi.Generic (1)

10:47:55.0144 3020  [ 28B693B6D31E7B9332C1BDCEFEF228C1 ] usbprint        C:\Windows\system32\DRIVERS\usbprint.sys

10:47:55.0565 3020  usbprint ( UnsignedFile.Multi.Generic ) - warning

10:47:55.0565 3020  usbprint - detected UnsignedFile.Multi.Generic (1)

10:47:55.0596 3020  [ EA0BF666868964FBE8CB10E50C97B9F1 ] usbscan         C:\Windows\system32\DRIVERS\usbscan.sys

10:47:56.0002 3020  usbscan ( UnsignedFile.Multi.Generic ) - warning

10:47:56.0002 3020  usbscan - detected UnsignedFile.Multi.Generic (1)

10:47:56.0049 3020  [ B854C1558FCA0C269A38663E8B59B581 ] USBSTOR         C:\Windows\system32\DRIVERS\USBSTOR.SYS

10:47:56.0454 3020  USBSTOR ( UnsignedFile.Multi.Generic ) - warning

10:47:56.0454 3020  USBSTOR - detected UnsignedFile.Multi.Generic (1)

10:47:56.0501 3020  [ B2872CBF9F47316ABD0E0C74A1ABA507 ] usbuhci         C:\Windows\system32\DRIVERS\usbuhci.sys

10:47:56.0922 3020  usbuhci ( UnsignedFile.Multi.Generic ) - warning

10:47:56.0922 3020  usbuhci - detected UnsignedFile.Multi.Generic (1)

10:47:56.0985 3020  [ FC33099877790D51B0927B7039059855 ] usbvideo        C:\Windows\system32\Drivers\usbvideo.sys

10:47:57.0453 3020  usbvideo ( UnsignedFile.Multi.Generic ) - warning

10:47:57.0453 3020  usbvideo - detected UnsignedFile.Multi.Generic (1)

10:47:57.0500 3020  [ D76E231E4850BB3F88A3D9A78DF191E3 ] UxSms           C:\Windows\System32\uxsms.dll

10:47:57.0983 3020  UxSms ( UnsignedFile.Multi.Generic ) - warning

10:47:57.0983 3020  UxSms - detected UnsignedFile.Multi.Generic (1)

10:47:58.0061 3020  [ 294945381DFA7CE58CECF0A9896AF327 ] vds             C:\Windows\System32\vds.exe

10:47:58.0545 3020  vds ( UnsignedFile.Multi.Generic ) - warning

10:47:58.0545 3020  vds - detected UnsignedFile.Multi.Generic (1)

10:47:58.0592 3020  [ 916B94BCF1E09873FFF2D5FB11767BBC ] vga             C:\Windows\system32\DRIVERS\vgapnp.sys

10:47:58.0982 3020  vga ( UnsignedFile.Multi.Generic ) - warning

10:47:58.0982 3020  vga - detected UnsignedFile.Multi.Generic (1)

10:47:59.0013 3020  [ B83AB16B51FEDA65DD81B8C59D114D63 ] VgaSave         C:\Windows\System32\drivers\vga.sys

10:47:59.0465 3020  VgaSave ( UnsignedFile.Multi.Generic ) - warning

10:47:59.0465 3020  VgaSave - detected UnsignedFile.Multi.Generic (1)

10:47:59.0528 3020  [ 8294B6C3FDB6C33F24E150DE647ECDAA ] viaide          C:\Windows\system32\drivers\viaide.sys

10:47:59.0543 3020  viaide - ok

10:47:59.0559 3020  [ 2B7E885ED951519A12C450D24535DFCA ] volmgr          C:\Windows\system32\drivers\volmgr.sys

10:47:59.0590 3020  volmgr - ok

10:47:59.0684 3020  [ CEC5AC15277D75D9E5DEC2E1C6EAF877 ] volmgrx         C:\Windows\system32\drivers\volmgrx.sys

10:47:59.0793 3020  volmgrx - ok

10:47:59.0824 3020  [ 5280AADA24AB36B01A84A6424C475C8D ] volsnap         C:\Windows\system32\drivers\volsnap.sys

10:47:59.0871 3020  volsnap - ok

10:47:59.0902 3020  [ A68F455ED2673835209318DD61BFBB0E ] vsmraid         C:\Windows\system32\drivers\vsmraid.sys

10:47:59.0933 3020  vsmraid - ok

10:48:00.0105 3020  [ B75232DAD33BFD95BF6F0A3E6BFF51E1 ] VSS             C:\Windows\system32\vssvc.exe

10:48:00.0791 3020  VSS ( UnsignedFile.Multi.Generic ) - warning

10:48:00.0791 3020  VSS - detected UnsignedFile.Multi.Generic (1)

10:48:00.0869 3020  [ F14A7DE2EA41883E250892E1E5230A9A ] W32Time         C:\Windows\system32\w32time.dll

10:48:01.0400 3020  W32Time ( UnsignedFile.Multi.Generic ) - warning

10:48:01.0400 3020  W32Time - detected UnsignedFile.Multi.Generic (1)

10:48:01.0446 3020  [ FEF8FE5923FEAD2CEE4DFABFCE3393A7 ] WacomPen        C:\Windows\system32\drivers\wacompen.sys

10:48:01.0852 3020  WacomPen ( UnsignedFile.Multi.Generic ) - warning

10:48:01.0852 3020  WacomPen - detected UnsignedFile.Multi.Generic (1)

10:48:01.0899 3020  [ B8E7049622300D20BA6D8BE0C47C0CFD ] Wanarp          C:\Windows\system32\DRIVERS\wanarp.sys

10:48:02.0351 3020  Wanarp ( UnsignedFile.Multi.Generic ) - warning

10:48:02.0351 3020  Wanarp - detected UnsignedFile.Multi.Generic (1)

10:48:02.0382 3020  [ B8E7049622300D20BA6D8BE0C47C0CFD ] Wanarpv6        C:\Windows\system32\DRIVERS\wanarp.sys

10:48:02.0913 3020  Wanarpv6 ( UnsignedFile.Multi.Generic ) - warning

10:48:02.0913 3020  Wanarpv6 - detected UnsignedFile.Multi.Generic (1)

10:48:02.0991 3020  [ B4E4C37D0AA6100090A53213EE2BF1C1 ] wcncsvc         C:\Windows\System32\wcncsvc.dll

10:48:03.0615 3020  wcncsvc ( UnsignedFile.Multi.Generic ) - warning

10:48:03.0615 3020  wcncsvc - detected UnsignedFile.Multi.Generic (1)

10:48:03.0646 3020  [ EA4B369560E986F19D93F45A881484AC ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll

10:48:04.0114 3020  WcsPlugInService ( UnsignedFile.Multi.Generic ) - warning

10:48:04.0114 3020  WcsPlugInService - detected UnsignedFile.Multi.Generic (1)

10:48:04.0176 3020  [ 0C17A0816F65B89E362E682AD5E7266E ] Wd              C:\Windows\system32\drivers\wd.sys

10:48:04.0192 3020  Wd - ok

10:48:04.0286 3020  [ DBB4397D703A755FACB05486C449C507 ] Wdf01000        C:\Windows\system32\drivers\Wdf01000.sys

10:48:04.0348 3020  Wdf01000 - ok

10:48:04.0379 3020  [ C5EFDA73EBFCA8B02A094898DE0A9276 ] WdiServiceHost  C:\Windows\system32\wdi.dll

10:48:04.0847 3020  WdiServiceHost ( UnsignedFile.Multi.Generic ) - warning

10:48:04.0847 3020  WdiServiceHost - detected UnsignedFile.Multi.Generic (1)

10:48:04.0878 3020  [ C5EFDA73EBFCA8B02A094898DE0A9276 ] WdiSystemHost   C:\Windows\system32\wdi.dll

10:48:05.0378 3020  WdiSystemHost ( UnsignedFile.Multi.Generic ) - warning

10:48:05.0378 3020  WdiSystemHost - detected UnsignedFile.Multi.Generic (1)

10:48:05.0456 3020  [ 3E6D05381CF35F75EBB055544A8ED9AC ] WebClient       C:\Windows\System32\webclnt.dll

10:48:06.0033 3020  WebClient ( UnsignedFile.Multi.Generic ) - warning

10:48:06.0033 3020  WebClient - detected UnsignedFile.Multi.Generic (1)

10:48:06.0095 3020  [ 8D40BC587993F876658BF9FB0F7D3462 ] Wecsvc          C:\Windows\system32\wecsvc.dll

10:48:10.0120 3020  Wecsvc ( UnsignedFile.Multi.Generic ) - warning

10:48:10.0120 3020  Wecsvc - detected UnsignedFile.Multi.Generic (1)

10:48:10.0167 3020  [ 9C980351D7E96288EA0C23AE232BD065 ] wercplsupport   C:\Windows\System32\wercplsupport.dll

10:48:10.0635 3020  wercplsupport ( UnsignedFile.Multi.Generic ) - warning

10:48:10.0635 3020  wercplsupport - detected UnsignedFile.Multi.Generic (1)

10:48:10.0682 3020  [ 66B9ECEBC46683F47EDC06333C075FEF ] WerSvc          C:\Windows\System32\WerSvc.dll

10:48:11.0150 3020  WerSvc ( UnsignedFile.Multi.Generic ) - warning

10:48:11.0150 3020  WerSvc - detected UnsignedFile.Multi.Generic (1)

10:48:11.0228 3020  WinDefend - ok

10:48:11.0243 3020  WinHttpAutoProxySvc - ok

10:48:11.0399 3020  [ D2E7296ED1BD26D8DB2799770C077A02 ] Winmgmt         C:\Windows\system32\wbem\WMIsvc.dll

10:48:11.0914 3020  Winmgmt ( UnsignedFile.Multi.Generic ) - warning

10:48:11.0914 3020  Winmgmt - detected UnsignedFile.Multi.Generic (1)

10:48:11.0914 3020  WinRM - ok

10:48:12.0054 3020  [ EC339C8115E91BAED835957E9A677F16 ] Wlansvc         C:\Windows\System32\wlansvc.dll

10:48:12.0694 3020  Wlansvc ( UnsignedFile.Multi.Generic ) - warning

10:48:12.0694 3020  Wlansvc - detected UnsignedFile.Multi.Generic (1)

10:48:12.0725 3020  [ E18AEBAAA5A773FE11AA2C70F65320F5 ] WmiAcpi         C:\Windows\system32\DRIVERS\wmiacpi.sys

10:48:13.0365 3020  WmiAcpi ( UnsignedFile.Multi.Generic ) - warning

10:48:13.0365 3020  WmiAcpi - detected UnsignedFile.Multi.Generic (1)

10:48:13.0412 3020  [ 21FA389E65A852698B6A1341F36EE02D ] wmiApSrv        C:\Windows\system32\wbem\WmiApSrv.exe

10:48:13.0848 3020  wmiApSrv ( UnsignedFile.Multi.Generic ) - warning

10:48:13.0848 3020  wmiApSrv - detected UnsignedFile.Multi.Generic (1)

10:48:13.0895 3020  WMPNetworkSvc - ok

10:48:13.0926 3020  [ CBC156C913F099E6680D1DF9307DB7A8 ] WPCSvc          C:\Windows\System32\wpcsvc.dll

10:48:14.0410 3020  WPCSvc ( UnsignedFile.Multi.Generic ) - warning

10:48:14.0410 3020  WPCSvc - detected UnsignedFile.Multi.Generic (1)

10:48:14.0472 3020  [ 490A18B4E4D53DC10879DEAA8E8B70D9 ] WPDBusEnum      C:\Windows\system32\wpdbusenum.dll

10:48:14.0956 3020  WPDBusEnum ( UnsignedFile.Multi.Generic ) - warning

10:48:14.0956 3020  WPDBusEnum - detected UnsignedFile.Multi.Generic (1)

10:48:15.0034 3020  [ 5E2401B3FC1089C90E081291357371A9 ] WpdUsb          C:\Windows\system32\DRIVERS\wpdusb.sys

10:48:15.0533 3020  WpdUsb ( UnsignedFile.Multi.Generic ) - warning

10:48:15.0533 3020  WpdUsb - detected UnsignedFile.Multi.Generic (1)

10:48:16.0001 3020  [ 991E2C2CF3BC204C2BB2EE1476149E4E ] WPFFontCache_v0400 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\WPFFontCache_v0400.exe

10:48:16.0048 3020  WPFFontCache_v0400 - ok

10:48:16.0110 3020  [ 8A900348370E359B6BFF6A550E4649E1 ] ws2ifsl         C:\Windows\system32\drivers\ws2ifsl.sys

10:48:16.0563 3020  ws2ifsl ( UnsignedFile.Multi.Generic ) - warning

10:48:16.0563 3020  ws2ifsl - detected UnsignedFile.Multi.Generic (1)

10:48:16.0594 3020  [ 9EA3E6D0EF7A5C2B9181961052A4B01A ] wscsvc          C:\Windows\System32\wscsvc.dll

10:48:17.0031 3020  wscsvc ( UnsignedFile.Multi.Generic ) - warning

10:48:17.0031 3020  wscsvc - detected UnsignedFile.Multi.Generic (1)

10:48:17.0031 3020  WSearch - ok

10:48:17.0296 3020  [ D9EF901DCA379CFE914E9FA13B73B4C4 ] wuauserv        C:\Windows\system32\wuaueng.dll

10:48:17.0483 3020  wuauserv - ok

10:48:17.0577 3020  [ 501A65252617B495C0F1832F908D54D8 ] WUDFRd          C:\Windows\system32\DRIVERS\WUDFRd.sys

10:48:18.0170 3020  WUDFRd ( UnsignedFile.Multi.Generic ) - warning

10:48:18.0170 3020  WUDFRd - detected UnsignedFile.Multi.Generic (1)

10:48:18.0216 3020  [ 6CBD51FF913C851D56ED9DC7F2A27DDE ] wudfsvc         C:\Windows\System32\WUDFSvc.dll

10:48:18.0622 3020  wudfsvc ( UnsignedFile.Multi.Generic ) - warning

10:48:18.0622 3020  wudfsvc - detected UnsignedFile.Multi.Generic (1)

10:48:18.0684 3020  [ D433F6726A727B0528F6E39F423FE1FD ] yksvc           C:\Windows\System32\ykx64mpcoinst.dll

10:48:19.0199 3020  yksvc ( UnsignedFile.Multi.Generic ) - warning

10:48:19.0199 3020  yksvc - detected UnsignedFile.Multi.Generic (1)

10:48:19.0293 3020  [ 541CBA0F3F679CC6E5ED4967F3FD4F6C ] yukonx64        C:\Windows\system32\DRIVERS\yk60x64.sys

10:48:19.0683 3020  yukonx64 ( UnsignedFile.Multi.Generic ) - warning

10:48:19.0683 3020  yukonx64 - detected UnsignedFile.Multi.Generic (1)

10:48:19.0714 3020  ================ Scan global ===============================

10:48:19.0745 3020  [ 060DC3A7A9A2626031EB23D90151428D ] C:\Windows\system32\basesrv.dll

10:48:19.0823 3020  [ AA137104CDFC81818A309CDE32ABB74A ] C:\Windows\system32\winsrv.dll

10:48:19.0839 3020  [ AA137104CDFC81818A309CDE32ABB74A ] C:\Windows\system32\winsrv.dll

10:48:19.0932 3020  [ 934E0B7D77FF78C18D9F8891221B6DE3 ] C:\Windows\system32\services.exe

10:48:19.0932 3020  [Global] - ok

10:48:19.0932 3020  ================ Scan MBR ==================================

10:48:19.0964 3020  [ 5C616939100B85E558DA92B899A0FC36 ] \Device\Harddisk0\DR0

10:48:21.0664 3020  \Device\Harddisk0\DR0 - ok

10:48:21.0664 3020  ================ Scan VBR ==================================

10:48:21.0695 3020  [ BC7E299168F34C973841D8D393D8CFD4 ] \Device\Harddisk0\DR0\Partition1

10:48:21.0711 3020  \Device\Harddisk0\DR0\Partition1 - ok

10:48:21.0726 3020  [ 13660CE30A37921600294F02FD687243 ] \Device\Harddisk0\DR0\Partition2

10:48:21.0742 3020  \Device\Harddisk0\DR0\Partition2 - ok

10:48:21.0742 3020  ============================================================

10:48:21.0742 3020  Scan finished

10:48:21.0742 3020  ============================================================

10:48:21.0758 3696  Detected object count: 254

10:48:21.0758 3696  Actual detected object count: 254

cosinus

19.11.2012 11:49

Log ist immer noch unvollständig die untere Zusammenmfassung fehlt

SteGri

19.11.2012 12:01

Mehr habe ich leider nicht. Die TDSSKiller _log.txt.-Datei endet mit
"10:48:21.0758 3696 Actual detected object count: 254"
und so enden auch die beiden Logs, die ich unten gepostet habe.

cosinus

19.11.2012 13:06

Dann hast du das Log falsch erstellt...

SteGri

19.11.2012 22:55

Tja, außer den zwei Haken laut Anweisung habe ich eigentlich nichts gemacht, was ich hätte falsch machen können.

http://s16.postimage.org/stdg48w6t/Kapers.jpg

Ich habe das Programm jedenfalls nochmal laufen lassen (als Administrator und mit Virenscanner aus).
Und hier ist das Log, das automatisch in C:\ erstellt wird - wie in der Anleitung beschrieben:

Code:

 22:44:35.0516 5900  TDSS rootkit removing tool 2.8.15.0 Oct 31 2012 21:47:35

22:44:35.0719 5900  ============================================================

22:44:35.0719 5900  Current date / time: 2012/11/19 22:44:35.0719

22:44:35.0719 5900  SystemInfo:

22:44:35.0719 5900  

22:44:35.0719 5900  OS Version: 6.0.6002 ServicePack: 2.0

22:44:35.0719 5900  Product type: Workstation

22:44:35.0719 5900  ComputerName: NAME

22:44:35.0719 5900  UserName: Office-PC

22:44:35.0719 5900  Windows directory: C:\Windows

22:44:35.0719 5900  System windows directory: C:\Windows

22:44:35.0719 5900  Running under WOW64

22:44:35.0719 5900  Processor architecture: Intel x64

22:44:35.0719 5900  Number of processors: 2

22:44:35.0719 5900  Page size: 0x1000

22:44:35.0719 5900  Boot type: Normal boot

22:44:35.0719 5900  ============================================================

22:44:37.0108 5900  Drive \Device\Harddisk0\DR0 - Size: 0x4A85D56000 (298.09 Gb), SectorSize: 0x200, Cylinders: 0x9801, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040

22:44:37.0123 5900  ============================================================

22:44:37.0123 5900  \Device\Harddisk0\DR0:

22:44:37.0123 5900  MBR partitions:

22:44:37.0123 5900  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x14000, BlocksNum 0x9C40000

22:44:37.0123 5900  \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x9C54000, BlocksNum 0x1B7DA000

22:44:37.0123 5900  ============================================================

22:44:37.0170 5900  C: <-> \Device\Harddisk0\DR0\Partition1

22:44:37.0248 5900  D: <-> \Device\Harddisk0\DR0\Partition2

22:44:37.0248 5900  ============================================================

22:44:37.0248 5900  Initialize success

22:44:37.0248 5900  ============================================================

22:44:51.0179 5756  ============================================================

22:44:51.0179 5756  Scan started

22:44:51.0179 5756  Mode: Manual; SigCheck; TDLFS; 

22:44:51.0179 5756  ============================================================

22:44:52.0396 5756  ================ Scan system memory ========================

22:44:52.0396 5756  System memory - ok

22:44:52.0396 5756  ================ Scan services =============================

22:44:52.0723 5756  [ 1965AAFFAB07E3FB03C77F81BEBA3547 ] ACPI            C:\Windows\system32\drivers\acpi.sys

22:44:52.0957 5756  ACPI - ok

22:44:53.0035 5756  [ D19C4EE2AC7C47B8F5F84FFF1A789D8A ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

22:44:53.0051 5756  AdobeARMservice - ok

22:44:53.0129 5756  [ F14215E37CF124104575073F782111D2 ] adp94xx         C:\Windows\system32\drivers\adp94xx.sys

22:44:53.0176 5756  adp94xx - ok

22:44:53.0207 5756  [ 7D05A75E3066861A6610F7EE04FF085C ] adpahci         C:\Windows\system32\drivers\adpahci.sys

22:44:53.0269 5756  adpahci - ok

22:44:53.0332 5756  [ 820A201FE08A0C345B3BEDBC30E1A77C ] adpu160m        C:\Windows\system32\drivers\adpu160m.sys

22:44:53.0347 5756  adpu160m - ok

22:44:53.0378 5756  [ 9B4AB6854559DC168FBB4C24FC52E794 ] adpu320         C:\Windows\system32\drivers\adpu320.sys

22:44:53.0410 5756  adpu320 - ok

22:44:53.0456 5756  [ 0F421175574BFE0BF2F4D8E910A253BB ] AeLookupSvc     C:\Windows\System32\aelupsvc.dll

22:44:54.0158 5756  AeLookupSvc ( UnsignedFile.Multi.Generic ) - warning

22:44:54.0158 5756  AeLookupSvc - detected UnsignedFile.Multi.Generic (1)

22:44:54.0283 5756  [ A6FB9DB8F1A86861D955FD6975977AE0 ] AESTFilters     C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_15f4e438\AESTSr64.exe

22:44:54.0767 5756  AESTFilters ( UnsignedFile.Multi.Generic ) - warning

22:44:54.0767 5756  AESTFilters - detected UnsignedFile.Multi.Generic (1)

22:44:54.0829 5756  [ C4F6CE6087760AD70960C9EB130E7943 ] AFD             C:\Windows\system32\drivers\afd.sys

22:44:55.0250 5756  AFD ( UnsignedFile.Multi.Generic ) - warning

22:44:55.0250 5756  AFD - detected UnsignedFile.Multi.Generic (1)

22:44:55.0297 5756  [ F6F6793B7F17B550ECFDBD3B229173F7 ] agp440          C:\Windows\system32\drivers\agp440.sys

22:44:55.0328 5756  agp440 - ok

22:44:55.0375 5756  [ 222CB641B4B8A1D1126F8033F9FD6A00 ] aic78xx         C:\Windows\system32\drivers\djsvs.sys

22:44:55.0391 5756  aic78xx - ok

22:44:55.0438 5756  [ 5922F4F59B7868F3D74BBBBEB7B825A3 ] ALG             C:\Windows\System32\alg.exe

22:44:55.0781 5756  ALG ( UnsignedFile.Multi.Generic ) - warning

22:44:55.0781 5756  ALG - detected UnsignedFile.Multi.Generic (1)

22:44:55.0812 5756  [ 157D0898D4B73F075CE9FA26B482DF98 ] aliide          C:\Windows\system32\drivers\aliide.sys

22:44:55.0828 5756  aliide - ok

22:44:55.0859 5756  [ B5E2434FC851698C1F119CF1C3935A50 ] AMD External Events Utility C:\Windows\system32\atiesrxx.exe

22:44:56.0202 5756  AMD External Events Utility ( UnsignedFile.Multi.Generic ) - warning

22:44:56.0202 5756  AMD External Events Utility - detected UnsignedFile.Multi.Generic (1)

22:44:56.0218 5756  [ 970FA5059E61E30D25307B99903E991E ] amdide          C:\Windows\system32\drivers\amdide.sys

22:44:56.0233 5756  amdide - ok

22:44:56.0264 5756  [ CDC3632A3A5EA4DBB83E46076A3165A1 ] AmdK8           C:\Windows\system32\drivers\amdk8.sys

22:44:56.0639 5756  AmdK8 ( UnsignedFile.Multi.Generic ) - warning

22:44:56.0639 5756  AmdK8 - detected UnsignedFile.Multi.Generic (1)

22:44:57.0310 5756  [ 9E3B4946F7E1BCA0B763E19D81EDBF2C ] amdkmdag        C:\Windows\system32\DRIVERS\atikmdag.sys

22:44:58.0402 5756  amdkmdag ( UnsignedFile.Multi.Generic ) - warning

22:44:58.0402 5756  amdkmdag - detected UnsignedFile.Multi.Generic (1)

22:44:58.0464 5756  [ B9E1C7B7F1865F99B16FF2E1BB94EDB6 ] amdkmdap        C:\Windows\system32\DRIVERS\atikmpag.sys

22:44:59.0088 5756  amdkmdap ( UnsignedFile.Multi.Generic ) - warning

22:44:59.0088 5756  amdkmdap - detected UnsignedFile.Multi.Generic (1)

22:44:59.0197 5756  [ 466A0D95960DAD3222C896D2CEA99993 ] AntiVirSchedulerService C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe

22:44:59.0213 5756  AntiVirSchedulerService - ok

22:44:59.0306 5756  [ A489BE6BB0AA1FF406B488B60542314B ] AntiVirService  C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe

22:44:59.0338 5756  AntiVirService - ok

22:44:59.0384 5756  [ 9C37B3FD5615477CB9A0CD116CF43F5C ] Appinfo         C:\Windows\System32\appinfo.dll

22:44:59.0946 5756  Appinfo ( UnsignedFile.Multi.Generic ) - warning

22:44:59.0946 5756  Appinfo - detected UnsignedFile.Multi.Generic (1)

22:44:59.0977 5756  [ BA8417D4765F3988FF921F30F630E303 ] arc             C:\Windows\system32\drivers\arc.sys

22:45:00.0008 5756  arc - ok

22:45:00.0055 5756  [ 9D41C435619733B34CC16A511E644B11 ] arcsas          C:\Windows\system32\drivers\arcsas.sys

22:45:00.0071 5756  arcsas - ok

22:45:00.0289 5756  [ 9217D874131AE6FF8F642F124F00A555 ] aspnet_state    C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe

22:45:00.0398 5756  aspnet_state - ok

22:45:00.0523 5756  [ 22D13FF3DAFEC2A80634752B1EAA2DE6 ] AsyncMac        C:\Windows\system32\DRIVERS\asyncmac.sys

22:45:01.0054 5756  AsyncMac ( UnsignedFile.Multi.Generic ) - warning

22:45:01.0054 5756  AsyncMac - detected UnsignedFile.Multi.Generic (1)

22:45:01.0085 5756  [ E68D9B3A3905619732F7FE039466A623 ] atapi           C:\Windows\system32\drivers\atapi.sys

22:45:01.0100 5756  atapi - ok

22:45:01.0178 5756  [ 79318C744693EC983D20E9337A2F8196 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll

22:45:01.0693 5756  AudioEndpointBuilder ( UnsignedFile.Multi.Generic ) - warning

22:45:01.0693 5756  AudioEndpointBuilder - detected UnsignedFile.Multi.Generic (1)

22:45:01.0709 5756  [ 79318C744693EC983D20E9337A2F8196 ] AudioSrv        C:\Windows\System32\Audiosrv.dll

22:45:02.0208 5756  AudioSrv ( UnsignedFile.Multi.Generic ) - warning

22:45:02.0208 5756  AudioSrv - detected UnsignedFile.Multi.Generic (1)

22:45:02.0270 5756  [ 26E38B5A58C6C55FAFBC563EEDDB0867 ] avgntflt        C:\Windows\system32\DRIVERS\avgntflt.sys

22:45:02.0317 5756  avgntflt - ok

22:45:02.0333 5756  [ 9D1F00BEFF84CBBF46D7F052BC7E0565 ] avipbb          C:\Windows\system32\DRIVERS\avipbb.sys

22:45:02.0364 5756  avipbb - ok

22:45:02.0380 5756  [ 248DB59FC86DE44D2779F4C7FB1A567D ] avkmgr          C:\Windows\system32\DRIVERS\avkmgr.sys

22:45:02.0395 5756  avkmgr - ok

22:45:02.0473 5756  [ D32F962B71FEE6BDAAEE630BB2C17280 ] BCM43XX         C:\Windows\system32\DRIVERS\bcmwl664.sys

22:45:02.0645 5756  BCM43XX - ok

22:45:02.0707 5756  [ FFB96C2589FFA60473EAD78B39FBDE29 ] BFE             C:\Windows\System32\bfe.dll

22:45:03.0238 5756  BFE ( UnsignedFile.Multi.Generic ) - warning

22:45:03.0238 5756  BFE - detected UnsignedFile.Multi.Generic (1)

22:45:03.0316 5756  [ 6D316F4859634071CC25C4FD4589AD2C ] BITS            C:\Windows\System32\qmgr.dll

22:45:03.0908 5756  BITS ( UnsignedFile.Multi.Generic ) - warning

22:45:03.0908 5756  BITS - detected UnsignedFile.Multi.Generic (1)

22:45:04.0033 5756  [ 79FEEB40056683F8F61398D81DDA65D2 ] blbdrive        C:\Windows\system32\drivers\blbdrive.sys

22:45:04.0876 5756  blbdrive ( UnsignedFile.Multi.Generic ) - warning

22:45:04.0876 5756  blbdrive - detected UnsignedFile.Multi.Generic (1)

22:45:04.0922 5756  [ 2348447A80920B2493A9B582A23E81E1 ] bowser          C:\Windows\system32\DRIVERS\bowser.sys

22:45:05.0422 5756  bowser ( UnsignedFile.Multi.Generic ) - warning

22:45:05.0422 5756  bowser - detected UnsignedFile.Multi.Generic (1)

22:45:05.0468 5756  [ F09EEE9EDC320B5E1501F749FDE686C8 ] BrFiltLo        C:\Windows\system32\drivers\brfiltlo.sys

22:45:05.0983 5756  BrFiltLo ( UnsignedFile.Multi.Generic ) - warning

22:45:05.0983 5756  BrFiltLo - detected UnsignedFile.Multi.Generic (1)

22:45:05.0983 5756  [ B114D3098E9BDB8BEA8B053685831BE6 ] BrFiltUp        C:\Windows\system32\drivers\brfiltup.sys

22:45:06.0467 5756  BrFiltUp ( UnsignedFile.Multi.Generic ) - warning

22:45:06.0467 5756  BrFiltUp - detected UnsignedFile.Multi.Generic (1)

22:45:06.0514 5756  [ A1B39DE453433B115B4EA69EE0343816 ] Browser         C:\Windows\System32\browser.dll

22:45:07.0028 5756  Browser ( UnsignedFile.Multi.Generic ) - warning

22:45:07.0028 5756  Browser - detected UnsignedFile.Multi.Generic (1)

22:45:07.0075 5756  [ F0F0BA4D815BE446AA6A4583CA3BCA9B ] Brserid         C:\Windows\system32\drivers\brserid.sys

22:45:07.0590 5756  Brserid ( UnsignedFile.Multi.Generic ) - warning

22:45:07.0590 5756  Brserid - detected UnsignedFile.Multi.Generic (1)

22:45:07.0637 5756  [ A6ECA2151B08A09CACECA35C07F05B42 ] BrSerWdm        C:\Windows\system32\drivers\brserwdm.sys

22:45:08.0120 5756  BrSerWdm ( UnsignedFile.Multi.Generic ) - warning

22:45:08.0120 5756  BrSerWdm - detected UnsignedFile.Multi.Generic (1)

22:45:08.0152 5756  [ B79968002C277E869CF38BD22CD61524 ] BrUsbMdm        C:\Windows\system32\drivers\brusbmdm.sys

22:45:08.0682 5756  BrUsbMdm ( UnsignedFile.Multi.Generic ) - warning

22:45:08.0682 5756  BrUsbMdm - detected UnsignedFile.Multi.Generic (1)

22:45:08.0698 5756  [ A87528880231C54E75EA7A44943B38BF ] BrUsbSer        C:\Windows\system32\drivers\brusbser.sys

22:45:09.0602 5756  BrUsbSer ( UnsignedFile.Multi.Generic ) - warning

22:45:09.0602 5756  BrUsbSer - detected UnsignedFile.Multi.Generic (1)

22:45:09.0634 5756  [ E0777B34E05F8A82A21856EFC900C29F ] BTHMODEM        C:\Windows\system32\drivers\bthmodem.sys

22:45:10.0070 5756  BTHMODEM ( UnsignedFile.Multi.Generic ) - warning

22:45:10.0070 5756  BTHMODEM - detected UnsignedFile.Multi.Generic (1)

22:45:10.0117 5756  [ B4D787DB8D30793A4D4DF9FEED18F136 ] cdfs            C:\Windows\system32\DRIVERS\cdfs.sys

22:45:10.0757 5756  cdfs ( UnsignedFile.Multi.Generic ) - warning

22:45:10.0757 5756  cdfs - detected UnsignedFile.Multi.Generic (1)

22:45:10.0804 5756  [ C025AA69BE3D0D25C7A2E746EF6F94FC ] cdrom           C:\Windows\system32\DRIVERS\cdrom.sys

22:45:11.0240 5756  cdrom ( UnsignedFile.Multi.Generic ) - warning

22:45:11.0240 5756  cdrom - detected UnsignedFile.Multi.Generic (1)

22:45:11.0287 5756  [ 5A268127633C7EE2A7FB87F39D748D56 ] CertPropSvc     C:\Windows\System32\certprop.dll

22:45:11.0786 5756  CertPropSvc ( UnsignedFile.Multi.Generic ) - warning

22:45:11.0786 5756  CertPropSvc - detected UnsignedFile.Multi.Generic (1)

22:45:11.0833 5756  [ 02EA568D498BBDD4BA55BF3FCE34D456 ] circlass        C:\Windows\system32\drivers\circlass.sys

22:45:12.0473 5756  circlass ( UnsignedFile.Multi.Generic ) - warning

22:45:12.0473 5756  circlass - detected UnsignedFile.Multi.Generic (1)

22:45:12.0520 5756  [ 3DCA9A18B204939CFB24BEA53E31EB48 ] CLFS            C:\Windows\system32\CLFS.sys

22:45:12.0566 5756  CLFS - ok

22:45:12.0660 5756  [ 8EE772032E2FE80A924F3B8DD5082194 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe

22:45:12.0676 5756  clr_optimization_v2.0.50727_32 - ok

22:45:12.0800 5756  [ CE07A466201096F021CD09D631B21540 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe

22:45:12.0816 5756  clr_optimization_v2.0.50727_64 - ok

22:45:12.0894 5756  [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe

22:45:12.0910 5756  clr_optimization_v4.0.30319_32 - ok

22:45:12.0972 5756  [ C6F9AF94DCD58122A4D7E89DB6BED29D ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe

22:45:12.0988 5756  clr_optimization_v4.0.30319_64 - ok

22:45:13.0034 5756  [ B52D9A14CE4101577900A364BA86F3DF ] CmBatt          C:\Windows\system32\DRIVERS\CmBatt.sys

22:45:13.0565 5756  CmBatt ( UnsignedFile.Multi.Generic ) - warning

22:45:13.0565 5756  CmBatt - detected UnsignedFile.Multi.Generic (1)

22:45:13.0596 5756  [ E5D5499A1C50A54B5161296B6AFE6192 ] cmdide          C:\Windows\system32\drivers\cmdide.sys

22:45:13.0612 5756  cmdide - ok

22:45:13.0643 5756  [ 7FB8AD01DB0EABE60C8A861531A8F431 ] Compbatt        C:\Windows\system32\DRIVERS\compbatt.sys

22:45:13.0674 5756  Compbatt - ok

22:45:13.0674 5756  COMSysApp - ok

22:45:13.0690 5756  [ A8585B6412253803CE8EFCBD6D6DC15C ] crcdisk         C:\Windows\system32\drivers\crcdisk.sys

22:45:13.0721 5756  crcdisk - ok

22:45:13.0752 5756  [ 62740B9D2A137E8CED41A9E4239A7A31 ] CryptSvc        C:\Windows\system32\cryptsvc.dll

22:45:14.0438 5756  CryptSvc ( UnsignedFile.Multi.Generic ) - warning

22:45:14.0438 5756  CryptSvc - detected UnsignedFile.Multi.Generic (1)

22:45:14.0485 5756  [ CF8B9A3A5E7DC57724A89D0C3E8CF9EF ] DcomLaunch      C:\Windows\system32\rpcss.dll

22:45:15.0016 5756  DcomLaunch ( UnsignedFile.Multi.Generic ) - warning

22:45:15.0016 5756  DcomLaunch - detected UnsignedFile.Multi.Generic (1)

22:45:15.0062 5756  [ 8B722BA35205C71E7951CDC4CDBADE19 ] DfsC            C:\Windows\system32\Drivers\dfsc.sys

22:45:15.0640 5756  DfsC ( UnsignedFile.Multi.Generic ) - warning

22:45:15.0640 5756  DfsC - detected UnsignedFile.Multi.Generic (1)

22:45:15.0780 5756  [ C647F468F7DE343DF8C143655C5557D4 ] DFSR            C:\Windows\system32\DFSR.exe

22:45:16.0607 5756  DFSR ( UnsignedFile.Multi.Generic ) - warning

22:45:16.0607 5756  DFSR - detected UnsignedFile.Multi.Generic (1)

22:45:16.0654 5756  [ 105373D52E71D2D1355AD3ACD18259C3 ] dg_ssudbus      C:\Windows\system32\DRIVERS\ssudbus.sys

22:45:16.0685 5756  dg_ssudbus - ok

22:45:16.0732 5756  [ 3ED0321127CE70ACDAABBF77E157C2A7 ] Dhcp            C:\Windows\System32\dhcpcsvc.dll

22:45:17.0200 5756  Dhcp ( UnsignedFile.Multi.Generic ) - warning

22:45:17.0200 5756  Dhcp - detected UnsignedFile.Multi.Generic (1)

22:45:17.0246 5756  [ B0107E40ECDB5FA692EBF832F295D905 ] disk            C:\Windows\system32\drivers\disk.sys

22:45:17.0278 5756  disk - ok

22:45:17.0324 5756  [ 06230F1B721494A6DF8D47FD395BB1B0 ] Dnscache        C:\Windows\System32\dnsrslvr.dll

22:45:17.0870 5756  Dnscache ( UnsignedFile.Multi.Generic ) - warning

22:45:17.0870 5756  Dnscache - detected UnsignedFile.Multi.Generic (1)

22:45:17.0933 5756  [ 1A7156DD1E850E9914E5E991E3225B94 ] dot3svc         C:\Windows\System32\dot3svc.dll

22:45:18.0370 5756  dot3svc ( UnsignedFile.Multi.Generic ) - warning

22:45:18.0370 5756  dot3svc - detected UnsignedFile.Multi.Generic (1)

22:45:18.0432 5756  [ 74C02B1717740C3B8039539E23E4B53F ] Dot4            C:\Windows\system32\DRIVERS\Dot4.sys

22:45:18.0947 5756  Dot4 ( UnsignedFile.Multi.Generic ) - warning

22:45:18.0947 5756  Dot4 - detected UnsignedFile.Multi.Generic (1)

22:45:19.0009 5756  [ 08321D1860235BF42CF2854234337AEA ] Dot4Print       C:\Windows\system32\DRIVERS\Dot4Prt.sys

22:45:19.0633 5756  Dot4Print ( UnsignedFile.Multi.Generic ) - warning

22:45:19.0633 5756  Dot4Print - detected UnsignedFile.Multi.Generic (1)

22:45:19.0664 5756  [ 4ADCCF0124F2B6911D3786A5D0E779E5 ] dot4usb         C:\Windows\system32\DRIVERS\dot4usb.sys

22:45:20.0210 5756  dot4usb ( UnsignedFile.Multi.Generic ) - warning

22:45:20.0210 5756  dot4usb - detected UnsignedFile.Multi.Generic (1)

22:45:20.0242 5756  [ 1583B39790DB3EAEC7EDB0CB0140C708 ] DPS             C:\Windows\system32\dps.dll

22:45:20.0756 5756  DPS ( UnsignedFile.Multi.Generic ) - warning

22:45:20.0756 5756  DPS - detected UnsignedFile.Multi.Generic (1)

22:45:20.0788 5756  [ F1A78A98CFC2EE02144C6BEC945447E6 ] drmkaud         C:\Windows\system32\drivers\drmkaud.sys

22:45:21.0209 5756  drmkaud ( UnsignedFile.Multi.Generic ) - warning

22:45:21.0209 5756  drmkaud - detected UnsignedFile.Multi.Generic (1)

22:45:21.0271 5756  [ B8E554E502D5123BC111F99D6A2181B4 ] DXGKrnl         C:\Windows\System32\drivers\dxgkrnl.sys

22:45:21.0380 5756  DXGKrnl - ok

22:45:21.0427 5756  [ 264CEE7B031A9D6C827F3D0CB031F2FE ] E1G60           C:\Windows\system32\DRIVERS\E1G6032E.sys

22:45:21.0880 5756  E1G60 ( UnsignedFile.Multi.Generic ) - warning

22:45:21.0880 5756  E1G60 - detected UnsignedFile.Multi.Generic (1)

22:45:21.0926 5756  [ C2303883FD9BE49DC36A6400643002EA ] EapHost         C:\Windows\System32\eapsvc.dll

22:45:22.0410 5756  EapHost ( UnsignedFile.Multi.Generic ) - warning

22:45:22.0410 5756  EapHost - detected UnsignedFile.Multi.Generic (1)

22:45:22.0457 5756  [ 5F94962BE5A62DB6E447FF6470C4F48A ] Ecache          C:\Windows\system32\drivers\ecache.sys

22:45:22.0472 5756  Ecache - ok

22:45:22.0550 5756  [ 14CE384D2E27B64C256BDA4DC39C312D ] ehRecvr         C:\Windows\ehome\ehRecvr.exe

22:45:23.0034 5756  ehRecvr ( UnsignedFile.Multi.Generic ) - warning

22:45:23.0034 5756  ehRecvr - detected UnsignedFile.Multi.Generic (1)

22:45:23.0081 5756  [ B93159C1313D66FDFBBE876F5189CD52 ] ehSched         C:\Windows\ehome\ehsched.exe

22:45:23.0580 5756  ehSched ( UnsignedFile.Multi.Generic ) - warning

22:45:23.0580 5756  ehSched - detected UnsignedFile.Multi.Generic (1)

22:45:23.0627 5756  [ F5EE2527D74449868E3C3227A59BCD28 ] ehstart         C:\Windows\ehome\ehstart.dll

22:45:24.0391 5756  ehstart ( UnsignedFile.Multi.Generic ) - warning

22:45:24.0391 5756  ehstart - detected UnsignedFile.Multi.Generic (1)

22:45:24.0438 5756  [ C4636D6E10469404AB5308D9FD45ED07 ] elxstor         C:\Windows\system32\drivers\elxstor.sys

22:45:24.0469 5756  elxstor - ok

22:45:24.0516 5756  [ A9B18B63A4FD6BAAB83326706D857FAB ] EMDMgmt         C:\Windows\system32\emdmgmt.dll

22:45:25.0124 5756  EMDMgmt ( UnsignedFile.Multi.Generic ) - warning

22:45:25.0124 5756  EMDMgmt - detected UnsignedFile.Multi.Generic (1)

22:45:25.0156 5756  [ BC3A58E938BB277E46BF4B3003B01ABD ] ErrDev          C:\Windows\system32\drivers\errdev.sys

22:45:25.0639 5756  ErrDev ( UnsignedFile.Multi.Generic ) - warning

22:45:25.0639 5756  ErrDev - detected UnsignedFile.Multi.Generic (1)

22:45:25.0670 5756  [ E12F22B73F153DECE721CD45EC05B4AF ] EventSystem     C:\Windows\system32\es.dll

22:45:26.0232 5756  EventSystem ( UnsignedFile.Multi.Generic ) - warning

22:45:26.0232 5756  EventSystem - detected UnsignedFile.Multi.Generic (1)

22:45:26.0279 5756  [ 486844F47B6636044A42454614ED4523 ] exfat           C:\Windows\system32\drivers\exfat.sys

22:45:26.0700 5756  exfat ( UnsignedFile.Multi.Generic ) - warning

22:45:26.0700 5756  exfat - detected UnsignedFile.Multi.Generic (1)

22:45:26.0731 5756  [ 1A4BEE34277784619DDAF0422C0C6E23 ] fastfat         C:\Windows\system32\drivers\fastfat.sys

22:45:27.0199 5756  fastfat ( UnsignedFile.Multi.Generic ) - warning

22:45:27.0199 5756  fastfat - detected UnsignedFile.Multi.Generic (1)

22:45:27.0246 5756  [ 81B79B6DF71FA1D2C6D688D830616E39 ] fdc             C:\Windows\system32\DRIVERS\fdc.sys

22:45:27.0792 5756  fdc ( UnsignedFile.Multi.Generic ) - warning

22:45:27.0792 5756  fdc - detected UnsignedFile.Multi.Generic (1)

22:45:27.0823 5756  [ BB9267ACACD8B7533DD936C34A0CBA5E ] fdPHost         C:\Windows\system32\fdPHost.dll

22:45:28.0307 5756  fdPHost ( UnsignedFile.Multi.Generic ) - warning

22:45:28.0307 5756  fdPHost - detected UnsignedFile.Multi.Generic (1)

22:45:28.0322 5756  [ 300C80931EABBE1DB7591C516EFE8D0F ] FDResPub        C:\Windows\system32\fdrespub.dll

22:45:28.0759 5756  FDResPub ( UnsignedFile.Multi.Generic ) - warning

22:45:28.0759 5756  FDResPub - detected UnsignedFile.Multi.Generic (1)

22:45:28.0790 5756  [ 457B7D1D533E4BD62A99AED9C7BB4C59 ] FileInfo        C:\Windows\system32\drivers\fileinfo.sys

22:45:28.0806 5756  FileInfo - ok

22:45:28.0853 5756  [ D421327FD6EFCCAF884A54C58E1B0D7F ] Filetrace       C:\Windows\system32\drivers\filetrace.sys

22:45:29.0680 5756  Filetrace ( UnsignedFile.Multi.Generic ) - warning

22:45:29.0680 5756  Filetrace - detected UnsignedFile.Multi.Generic (1)

22:45:29.0711 5756  [ 230923EA2B80F79B0F88D90F87B87EBD ] flpydisk        C:\Windows\system32\DRIVERS\flpydisk.sys

22:45:30.0241 5756  flpydisk ( UnsignedFile.Multi.Generic ) - warning

22:45:30.0241 5756  flpydisk - detected UnsignedFile.Multi.Generic (1)

22:45:30.0272 5756  [ E3041BC26D6930D61F42AEDB79C91720 ] FltMgr          C:\Windows\system32\drivers\fltmgr.sys

22:45:30.0304 5756  FltMgr - ok

22:45:30.0413 5756  [ BE1C5BD1CA7ED015BC6FA1AE67E592C8 ] FontCache       C:\Windows\system32\FntCache.dll

22:45:31.0162 5756  FontCache ( UnsignedFile.Multi.Generic ) - warning

22:45:31.0162 5756  FontCache - detected UnsignedFile.Multi.Generic (1)

22:45:31.0240 5756  [ BC5B0BE5AF3510B0FD8C140EE42C6D3E ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe

22:45:31.0255 5756  FontCache3.0.0.0 - ok

22:45:31.0302 5756  [ 5779B86CD8B32519FBECB136394D946A ] Fs_Rec          C:\Windows\system32\drivers\Fs_Rec.sys

22:45:31.0848 5756  Fs_Rec ( UnsignedFile.Multi.Generic ) - warning

22:45:31.0848 5756  Fs_Rec - detected UnsignedFile.Multi.Generic (1)

22:45:31.0879 5756  [ C8E416668D3DC2BE3D4FE4C79224997F ] gagp30kx        C:\Windows\system32\drivers\gagp30kx.sys

22:45:31.0910 5756  gagp30kx - ok

22:45:31.0988 5756  [ A0E1B575BA8F504968CD40C0FAEB2384 ] gpsvc           C:\Windows\System32\gpsvc.dll

22:45:32.0550 5756  gpsvc ( UnsignedFile.Multi.Generic ) - warning

22:45:32.0550 5756  gpsvc - detected UnsignedFile.Multi.Generic (1)

22:45:32.0597 5756  [ 68E732382B32417FF61FD663259B4B09 ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys

22:45:33.0174 5756  HdAudAddService ( UnsignedFile.Multi.Generic ) - warning

22:45:33.0174 5756  HdAudAddService - detected UnsignedFile.Multi.Generic (1)

22:45:33.0252 5756  [ F942C5820205F2FB453243EDFEC82A3D ] HDAudBus        C:\Windows\system32\DRIVERS\HDAudBus.sys

22:45:33.0720 5756  HDAudBus ( UnsignedFile.Multi.Generic ) - warning

22:45:33.0720 5756  HDAudBus - detected UnsignedFile.Multi.Generic (1)

22:45:33.0751 5756  [ B4881C84A180E75B8C25DC1D726C375F ] HidBth          C:\Windows\system32\drivers\hidbth.sys

22:45:34.0516 5756  HidBth ( UnsignedFile.Multi.Generic ) - warning

22:45:34.0516 5756  HidBth - detected UnsignedFile.Multi.Generic (1)

22:45:34.0547 5756  [ 4E77A77E2C986E8F88F996BB3E1AD829 ] HidIr           C:\Windows\system32\drivers\hidir.sys

22:45:35.0186 5756  HidIr ( UnsignedFile.Multi.Generic ) - warning

22:45:35.0186 5756  HidIr - detected UnsignedFile.Multi.Generic (1)

22:45:35.0218 5756  [ 59361D38A297755D46A540E450202B2A ] hidserv         C:\Windows\system32\hidserv.dll

22:45:35.0732 5756  hidserv ( UnsignedFile.Multi.Generic ) - warning

22:45:35.0732 5756  hidserv - detected UnsignedFile.Multi.Generic (1)

22:45:35.0748 5756  [ 443BDD2D30BB4F00795C797E2CF99EDF ] HidUsb          C:\Windows\system32\DRIVERS\hidusb.sys

22:45:36.0325 5756  HidUsb ( UnsignedFile.Multi.Generic ) - warning

22:45:36.0325 5756  HidUsb - detected UnsignedFile.Multi.Generic (1)

22:45:36.0356 5756  [ B12F367EA39C0795FD57E31242CE1A5A ] hkmsvc          C:\Windows\system32\kmsvc.dll

22:45:36.0918 5756  hkmsvc ( UnsignedFile.Multi.Generic ) - warning

22:45:36.0918 5756  hkmsvc - detected UnsignedFile.Multi.Generic (1)

22:45:36.0965 5756  [ D7109A1E6BD2DFDBCBA72A6BC626A13B ] HpCISSs         C:\Windows\system32\drivers\hpcisss.sys

22:45:36.0996 5756  HpCISSs - ok

22:45:37.0136 5756  [ 0A3C6AA4A9FC38C20BA4EAC2C3351C05 ] hpqcxs08        C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcxs08.dll

22:45:37.0651 5756  hpqcxs08 ( UnsignedFile.Multi.Generic ) - warning

22:45:37.0651 5756  hpqcxs08 - detected UnsignedFile.Multi.Generic (1)

22:45:37.0698 5756  [ F3F72A2A86C22610BCA5439FA789DD52 ] hpqddsvc        C:\Program Files (x86)\HP\Digital Imaging\bin\hpqddsvc.dll

22:45:38.0072 5756  hpqddsvc ( UnsignedFile.Multi.Generic ) - warning

22:45:38.0072 5756  hpqddsvc - detected UnsignedFile.Multi.Generic (1)

22:45:38.0119 5756  [ D972F48D0CE396759B788693CD665926 ] HPSLPSVC        C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL

22:45:38.0618 5756  HPSLPSVC ( UnsignedFile.Multi.Generic ) - warning

22:45:38.0618 5756  HPSLPSVC - detected UnsignedFile.Multi.Generic (1)

22:45:38.0665 5756  [ 098F1E4E5C9CB5B0063A959063631610 ] HTTP            C:\Windows\system32\drivers\HTTP.sys

22:45:39.0258 5756  HTTP ( UnsignedFile.Multi.Generic ) - warning

22:45:39.0258 5756  HTTP - detected UnsignedFile.Multi.Generic (1)

22:45:39.0289 5756  [ DA94C854CEA5FAC549D4E1F6E88349E8 ] i2omp           C:\Windows\system32\drivers\i2omp.sys

22:45:39.0320 5756  i2omp - ok

22:45:39.0352 5756  [ CBB597659A2713CE0C9CC20C88C7591F ] i8042prt        C:\Windows\system32\DRIVERS\i8042prt.sys

22:45:39.0695 5756  i8042prt ( UnsignedFile.Multi.Generic ) - warning

22:45:39.0695 5756  i8042prt - detected UnsignedFile.Multi.Generic (1)

22:45:39.0726 5756  [ 3E3BF3627D886736D0B4E90054F929F6 ] iaStorV         C:\Windows\system32\drivers\iastorv.sys

22:45:39.0757 5756  iaStorV - ok

22:45:39.0913 5756  [ 749F5F8CEDCA70F2A512945325FC489D ] idsvc           C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe

22:45:40.0085 5756  idsvc - ok

22:45:40.0116 5756  [ 8C3951AD2FE886EF76C7B5027C3125D3 ] iirsp           C:\Windows\system32\drivers\iirsp.sys

22:45:40.0132 5756  iirsp - ok

22:45:40.0194 5756  [ 0C9EA6E654E7B0471741E343A6C671AF ] IKEEXT          C:\Windows\System32\ikeext.dll

22:45:40.0693 5756  IKEEXT ( UnsignedFile.Multi.Generic ) - warning

22:45:40.0693 5756  IKEEXT - detected UnsignedFile.Multi.Generic (1)

22:45:40.0818 5756  [ C2F868881D48A568B525255F084EF063 ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHD64.sys

22:45:41.0161 5756  IntcAzAudAddService - ok

22:45:41.0224 5756  [ DF797A12176F11B2D301C5B234BB200E ] intelide        C:\Windows\system32\drivers\intelide.sys

22:45:41.0239 5756  intelide - ok

22:45:41.0270 5756  [ BFD84AF32FA1BAD6231C4585CB469630 ] intelppm        C:\Windows\system32\DRIVERS\intelppm.sys

22:45:41.0629 5756  intelppm ( UnsignedFile.Multi.Generic ) - warning

22:45:41.0629 5756  intelppm - detected UnsignedFile.Multi.Generic (1)

22:45:41.0676 5756  [ 5624BC1BC5EEB49C0AB76A8114F05EA3 ] IPBusEnum       C:\Windows\system32\ipbusenum.dll

22:45:42.0050 5756  IPBusEnum ( UnsignedFile.Multi.Generic ) - warning

22:45:42.0050 5756  IPBusEnum - detected UnsignedFile.Multi.Generic (1)

22:45:42.0128 5756  [ D8AABC341311E4780D6FCE8C73C0AD81 ] IpFilterDriver  C:\Windows\system32\DRIVERS\ipfltdrv.sys

22:45:42.0550 5756  IpFilterDriver ( UnsignedFile.Multi.Generic ) - warning

22:45:42.0550 5756  IpFilterDriver - detected UnsignedFile.Multi.Generic (1)

22:45:42.0612 5756  [ BF0DBFA9792C5C14FA00F61C75116C1B ] iphlpsvc        C:\Windows\System32\iphlpsvc.dll

22:45:43.0018 5756  iphlpsvc ( UnsignedFile.Multi.Generic ) - warning

22:45:43.0018 5756  iphlpsvc - detected UnsignedFile.Multi.Generic (1)

22:45:43.0018 5756  IpInIp - ok

22:45:43.0049 5756  [ 9C2EE2E6E5A7203BFAE15C299475EC67 ] IPMIDRV         C:\Windows\system32\drivers\ipmidrv.sys

22:45:43.0439 5756  IPMIDRV ( UnsignedFile.Multi.Generic ) - warning

22:45:43.0439 5756  IPMIDRV - detected UnsignedFile.Multi.Generic (1)

22:45:43.0470 5756  [ B7E6212F581EA5F6AB0C3A6CEEEB89BE ] IPNAT           C:\Windows\system32\DRIVERS\ipnat.sys

22:45:43.0860 5756  IPNAT ( UnsignedFile.Multi.Generic ) - warning

22:45:43.0860 5756  IPNAT - detected UnsignedFile.Multi.Generic (1)

22:45:43.0891 5756  [ 8C42CA155343A2F11D29FECA67FAA88D ] IRENUM          C:\Windows\system32\drivers\irenum.sys

22:45:44.0344 5756  IRENUM ( UnsignedFile.Multi.Generic ) - warning

22:45:44.0344 5756  IRENUM - detected UnsignedFile.Multi.Generic (1)

22:45:44.0375 5756  [ 0672BFCEDC6FC468A2B0500D81437F4F ] isapnp          C:\Windows\system32\drivers\isapnp.sys

22:45:44.0406 5756  isapnp - ok

22:45:44.0453 5756  [ E4FDF99599F27EC25D2CF6D754243520 ] iScsiPrt        C:\Windows\system32\DRIVERS\msiscsi.sys

22:45:44.0500 5756  iScsiPrt - ok

22:45:44.0515 5756  [ 63C766CDC609FF8206CB447A65ABBA4A ] iteatapi        C:\Windows\system32\drivers\iteatapi.sys

22:45:44.0531 5756  iteatapi - ok

22:45:44.0562 5756  [ 1281FE73B17664631D12F643CBEA3F59 ] iteraid         C:\Windows\system32\drivers\iteraid.sys

22:45:44.0578 5756  iteraid - ok

22:45:44.0624 5756  [ 423696F3BA6472DD17699209B933BC26 ] kbdclass        C:\Windows\system32\DRIVERS\kbdclass.sys

22:45:44.0640 5756  kbdclass - ok

22:45:44.0671 5756  [ BF8783A5066CFECF45095459E8010FA7 ] kbdhid          C:\Windows\system32\DRIVERS\kbdhid.sys

22:45:45.0030 5756  kbdhid ( UnsignedFile.Multi.Generic ) - warning

22:45:45.0030 5756  kbdhid - detected UnsignedFile.Multi.Generic (1)

22:45:45.0077 5756  [ 260BF9C43EE12C6898A9F5AAB0FB0E5D ] KeyIso          C:\Windows\system32\lsass.exe

22:45:45.0420 5756  KeyIso ( UnsignedFile.Multi.Generic ) - warning

22:45:45.0420 5756  KeyIso - detected UnsignedFile.Multi.Generic (1)

22:45:45.0451 5756  [ 88956AD9FA510848AD176777A6C6C1F5 ] KSecDD          C:\Windows\system32\Drivers\ksecdd.sys

22:45:45.0498 5756  KSecDD - ok

22:45:45.0560 5756  [ 1D419CF43DB29396ECD7113D129D94EB ] ksthunk         C:\Windows\system32\drivers\ksthunk.sys

22:45:46.0028 5756  ksthunk ( UnsignedFile.Multi.Generic ) - warning

22:45:46.0028 5756  ksthunk - detected UnsignedFile.Multi.Generic (1)

22:45:46.0075 5756  [ 1FAF6926F3416D3DA05C5B265491BDAE ] KtmRm           C:\Windows\system32\msdtckrm.dll

22:45:46.0528 5756  KtmRm ( UnsignedFile.Multi.Generic ) - warning

22:45:46.0528 5756  KtmRm - detected UnsignedFile.Multi.Generic (1)

22:45:46.0574 5756  [ 50C7A3CB427E9BB5ED0708A669956AB5 ] LanmanServer    C:\Windows\system32\srvsvc.dll

22:45:47.0011 5756  LanmanServer ( UnsignedFile.Multi.Generic ) - warning

22:45:47.0011 5756  LanmanServer - detected UnsignedFile.Multi.Generic (1)

22:45:47.0058 5756  [ CAF86FC1388BE1E470F1A7B43E348ADB ] LanmanWorkstation C:\Windows\System32\wkssvc.dll

22:45:47.0526 5756  LanmanWorkstation ( UnsignedFile.Multi.Generic ) - warning

22:45:47.0526 5756  LanmanWorkstation - detected UnsignedFile.Multi.Generic (1)

22:45:47.0542 5756  [ 96ECE2659B6654C10A0C310AE3A6D02C ] lltdio          C:\Windows\system32\DRIVERS\lltdio.sys

22:45:48.0088 5756  lltdio ( UnsignedFile.Multi.Generic ) - warning

22:45:48.0088 5756  lltdio - detected UnsignedFile.Multi.Generic (1)

22:45:48.0134 5756  [ 961CCBD0B1CCB5675D64976FAE37D092 ] lltdsvc         C:\Windows\System32\lltdsvc.dll

22:45:48.0618 5756  lltdsvc ( UnsignedFile.Multi.Generic ) - warning

22:45:48.0618 5756  lltdsvc - detected UnsignedFile.Multi.Generic (1)

22:45:48.0649 5756  [ A47F8080CACC23C91FE823AD19AA5612 ] lmhosts         C:\Windows\System32\lmhsvc.dll

22:45:49.0055 5756  lmhosts ( UnsignedFile.Multi.Generic ) - warning

22:45:49.0055 5756  lmhosts - detected UnsignedFile.Multi.Generic (1)

22:45:49.0117 5756  [ ACBE1AF32D3123E330A07BFBC5EC4A9B ] LSI_FC          C:\Windows\system32\drivers\lsi_fc.sys

22:45:49.0148 5756  LSI_FC - ok

22:45:49.0164 5756  [ 799FFB2FC4729FA46D2157C0065B3525 ] LSI_SAS         C:\Windows\system32\drivers\lsi_sas.sys

22:45:49.0195 5756  LSI_SAS - ok

22:45:49.0242 5756  [ F445FF1DAAD8A226366BFAF42551226B ] LSI_SCSI        C:\Windows\system32\drivers\lsi_scsi.sys

22:45:49.0258 5756  LSI_SCSI - ok

22:45:49.0289 5756  [ 52F87B9CC8932C2A7375C3B2A9BE5E3E ] luafv           C:\Windows\system32\drivers\luafv.sys

22:45:49.0757 5756  luafv ( UnsignedFile.Multi.Generic ) - warning

22:45:49.0757 5756  luafv - detected UnsignedFile.Multi.Generic (1)

22:45:49.0788 5756  [ 76A58DF02BD4EA29F189B82D0BEF17F8 ] Mcx2Svc         C:\Windows\system32\Mcx2Svc.dll

22:45:50.0147 5756  Mcx2Svc ( UnsignedFile.Multi.Generic ) - warning

22:45:50.0147 5756  Mcx2Svc - detected UnsignedFile.Multi.Generic (1)

22:45:50.0194 5756  [ 5C5CD6AACED32FB26C3FB34B3DCF972F ] megasas         C:\Windows\system32\drivers\megasas.sys

22:45:50.0209 5756  megasas - ok

22:45:50.0256 5756  [ 859BC2436B076C77C159ED694ACFE8F8 ] MegaSR          C:\Windows\system32\drivers\megasr.sys

22:45:50.0287 5756  MegaSR - ok

22:45:50.0318 5756  [ 3CBE4995E80E13CCFBC42E5DCF3AC81A ] MMCSS           C:\Windows\system32\mmcss.dll

22:45:50.0818 5756  MMCSS ( UnsignedFile.Multi.Generic ) - warning

22:45:50.0818 5756  MMCSS - detected UnsignedFile.Multi.Generic (1)

22:45:50.0864 5756  [ 59848D5CC74606F0EE7557983BB73C2E ] Modem           C:\Windows\system32\drivers\modem.sys

22:45:51.0317 5756  Modem ( UnsignedFile.Multi.Generic ) - warning

22:45:51.0317 5756  Modem - detected UnsignedFile.Multi.Generic (1)

22:45:51.0364 5756  [ C247CC2A57E0A0C8C6DCCF7807B3E9E5 ] monitor         C:\Windows\system32\DRIVERS\monitor.sys

22:45:51.0754 5756  monitor ( UnsignedFile.Multi.Generic ) - warning

22:45:51.0754 5756  monitor - detected UnsignedFile.Multi.Generic (1)

22:45:51.0800 5756  [ 9367304E5E412B120CF5F4EA14E4E4F1 ] mouclass        C:\Windows\system32\DRIVERS\mouclass.sys

22:45:51.0816 5756  mouclass - ok

22:45:51.0847 5756  [ C2C2BD5C5CE5AAF786DDD74B75D2AC69 ] mouhid          C:\Windows\system32\DRIVERS\mouhid.sys

22:45:52.0300 5756  mouhid ( UnsignedFile.Multi.Generic ) - warning

22:45:52.0300 5756  mouhid - detected UnsignedFile.Multi.Generic (1)

22:45:52.0331 5756  [ 11BC9B1E8801B01F7F6ADB9EAD30019B ] MountMgr        C:\Windows\system32\drivers\mountmgr.sys

22:45:52.0362 5756  MountMgr - ok

22:45:52.0424 5756  [ E8D79312373F254DC13F3965BDB3D521 ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe

22:45:52.0456 5756  MozillaMaintenance - ok

22:45:52.0487 5756  [ F8276EB8698142884498A528DFEA8478 ] mpio            C:\Windows\system32\drivers\mpio.sys

22:45:52.0502 5756  mpio - ok

22:45:52.0534 5756  [ C92B9ABDB65A5991E00C28F13491DBA2 ] mpsdrv          C:\Windows\system32\drivers\mpsdrv.sys

22:45:52.0908 5756  mpsdrv ( UnsignedFile.Multi.Generic ) - warning

22:45:52.0908 5756  mpsdrv - detected UnsignedFile.Multi.Generic (1)

22:45:53.0033 5756  [ 897E3BAF68BA406A61682AE39C83900C ] MpsSvc          C:\Windows\system32\mpssvc.dll

22:45:53.0563 5756  MpsSvc ( UnsignedFile.Multi.Generic ) - warning

22:45:53.0563 5756  MpsSvc - detected UnsignedFile.Multi.Generic (1)

22:45:53.0610 5756  [ 3C200630A89EF2C0864D515B7A75802E ] Mraid35x        C:\Windows\system32\drivers\mraid35x.sys

22:45:53.0626 5756  Mraid35x - ok

22:45:53.0672 5756  [ 7C1DE4AA96DC0C071611F9E7DE02A68D ] MRxDAV          C:\Windows\system32\drivers\mrxdav.sys

22:45:54.0094 5756  MRxDAV ( UnsignedFile.Multi.Generic ) - warning

22:45:54.0094 5756  MRxDAV - detected UnsignedFile.Multi.Generic (1)

22:45:54.0140 5756  [ 1485811B320FF8C7EDAD1CAEBB1C6C2B ] mrxsmb          C:\Windows\system32\DRIVERS\mrxsmb.sys

22:45:54.0655 5756  mrxsmb ( UnsignedFile.Multi.Generic ) - warning

22:45:54.0655 5756  mrxsmb - detected UnsignedFile.Multi.Generic (1)

22:45:54.0686 5756  [ 3B929A60C833FC615FD97FBA82BC7632 ] mrxsmb10        C:\Windows\system32\DRIVERS\mrxsmb10.sys

22:45:55.0076 5756  mrxsmb10 ( UnsignedFile.Multi.Generic ) - warning

22:45:55.0076 5756  mrxsmb10 - detected UnsignedFile.Multi.Generic (1)

22:45:55.0092 5756  [ C64AB3E1F53B4F5B5BB6D796B2D7BEC3 ] mrxsmb20        C:\Windows\system32\DRIVERS\mrxsmb20.sys

22:45:55.0482 5756  mrxsmb20 ( UnsignedFile.Multi.Generic ) - warning

22:45:55.0482 5756  mrxsmb20 - detected UnsignedFile.Multi.Generic (1)

22:45:55.0529 5756  [ AA459F2AB3AB603C357FF117CAE3D818 ] msahci          C:\Windows\system32\drivers\msahci.sys

22:45:55.0560 5756  msahci - ok

22:45:55.0607 5756  [ 264BBB4AAF312A485F0E44B65A6B7202 ] msdsm           C:\Windows\system32\drivers\msdsm.sys

22:45:55.0638 5756  msdsm - ok

22:45:55.0685 5756  [ 7EC02CE772F068ED0BEAFA3DA341A9BC ] MSDTC           C:\Windows\System32\msdtc.exe

22:45:56.0231 5756  MSDTC ( UnsignedFile.Multi.Generic ) - warning

22:45:56.0231 5756  MSDTC - detected UnsignedFile.Multi.Generic (1)

22:45:56.0262 5756  [ 704F59BFC4512D2BB0146AEC31B10A7C ] Msfs            C:\Windows\system32\drivers\Msfs.sys

22:45:56.0730 5756  Msfs ( UnsignedFile.Multi.Generic ) - warning

22:45:56.0730 5756  Msfs - detected UnsignedFile.Multi.Generic (1)

22:45:56.0761 5756  [ 00EBC952961664780D43DCA157E79B27 ] msisadrv        C:\Windows\system32\drivers\msisadrv.sys

22:45:56.0792 5756  msisadrv - ok

22:45:56.0808 5756  [ 366B0C1F4478B519C181E37D43DCDA32 ] MSiSCSI         C:\Windows\system32\iscsiexe.dll

22:45:57.0198 5756  MSiSCSI ( UnsignedFile.Multi.Generic ) - warning

22:45:57.0198 5756  MSiSCSI - detected UnsignedFile.Multi.Generic (1)

22:45:57.0214 5756  msiserver - ok

22:45:57.0245 5756  [ 0EA73E498F53B96D83DBFCA074AD4CF8 ] MSKSSRV         C:\Windows\system32\drivers\MSKSSRV.sys

22:45:57.0619 5756  MSKSSRV ( UnsignedFile.Multi.Generic ) - warning

22:45:57.0619 5756  MSKSSRV - detected UnsignedFile.Multi.Generic (1)

22:45:57.0635 5756  [ 52E59B7E992A58E740AA63F57EDBAE8B ] MSPCLOCK        C:\Windows\system32\drivers\MSPCLOCK.sys

22:45:57.0962 5756  MSPCLOCK ( UnsignedFile.Multi.Generic ) - warning

22:45:57.0962 5756  MSPCLOCK - detected UnsignedFile.Multi.Generic (1)

22:45:57.0978 5756  [ 49084A75BAE043AE02D5B44D02991BB2 ] MSPQM           C:\Windows\system32\drivers\MSPQM.sys

22:45:58.0399 5756  MSPQM ( UnsignedFile.Multi.Generic ) - warning

22:45:58.0399 5756  MSPQM - detected UnsignedFile.Multi.Generic (1)

22:45:58.0430 5756  [ DC6CCF440CDEDE4293DB41C37A5060A5 ] MsRPC           C:\Windows\system32\drivers\MsRPC.sys

22:45:58.0462 5756  MsRPC - ok

22:45:58.0493 5756  [ 855796E59DF77EA93AF46F20155BF55B ] mssmbios        C:\Windows\system32\DRIVERS\mssmbios.sys

22:45:58.0508 5756  mssmbios - ok

22:45:58.0540 5756  [ 86D632D75D05D5B7C7C043FA3564AE86 ] MSTEE           C:\Windows\system32\drivers\MSTEE.sys

22:45:59.0070 5756  MSTEE ( UnsignedFile.Multi.Generic ) - warning

22:45:59.0070 5756  MSTEE - detected UnsignedFile.Multi.Generic (1)

22:45:59.0117 5756  [ 0CC49F78D8ACA0877D885F149084E543 ] Mup             C:\Windows\system32\Drivers\mup.sys

22:45:59.0132 5756  Mup - ok

22:45:59.0195 5756  [ A5B10C845E7538C60C0F5D87A57CB3F5 ] napagent        C:\Windows\system32\qagentRT.dll

22:45:59.0600 5756  napagent ( UnsignedFile.Multi.Generic ) - warning

22:45:59.0600 5756  napagent - detected UnsignedFile.Multi.Generic (1)

22:45:59.0647 5756  [ 2007B826C4ACD94AE32232B41F0842B9 ] NativeWifiP     C:\Windows\system32\DRIVERS\nwifi.sys

22:45:59.0959 5756  NativeWifiP ( UnsignedFile.Multi.Generic ) - warning

22:45:59.0959 5756  NativeWifiP - detected UnsignedFile.Multi.Generic (1)

22:46:00.0006 5756  [ 65950E07329FCEE8E6516B17C8D0ABB6 ] NDIS            C:\Windows\system32\drivers\ndis.sys

22:46:00.0068 5756  NDIS - ok

22:46:00.0146 5756  [ 64DF698A425478E321981431AC171334 ] NdisTapi        C:\Windows\system32\DRIVERS\ndistapi.sys

22:46:00.0630 5756  NdisTapi ( UnsignedFile.Multi.Generic ) - warning

22:46:00.0630 5756  NdisTapi - detected UnsignedFile.Multi.Generic (1)

22:46:00.0661 5756  [ 8BAA43196D7B5BB972C9A6B2BBF61A19 ] Ndisuio         C:\Windows\system32\DRIVERS\ndisuio.sys

22:46:01.0036 5756  Ndisuio ( UnsignedFile.Multi.Generic ) - warning

22:46:01.0036 5756  Ndisuio - detected UnsignedFile.Multi.Generic (1)

22:46:01.0067 5756  [ F8158771905260982CE724076419EF19 ] NdisWan         C:\Windows\system32\DRIVERS\ndiswan.sys

22:46:01.0410 5756  NdisWan ( UnsignedFile.Multi.Generic ) - warning

22:46:01.0410 5756  NdisWan - detected UnsignedFile.Multi.Generic (1)

22:46:01.0441 5756  [ 9CB77ED7CB72850253E973A2D6AFDF49 ] NDProxy         C:\Windows\system32\drivers\NDProxy.sys

22:46:01.0738 5756  NDProxy ( UnsignedFile.Multi.Generic ) - warning

22:46:01.0738 5756  NDProxy - detected UnsignedFile.Multi.Generic (1)

22:46:01.0769 5756  [ D5AC41AE382738483FAFFBD7E373D49A ] Net Driver HPZ12 C:\Windows\system32\HPZinw12.dll

22:46:02.0128 5756  Net Driver HPZ12 ( UnsignedFile.Multi.Generic ) - warning

22:46:02.0128 5756  Net Driver HPZ12 - detected UnsignedFile.Multi.Generic (1)

22:46:02.0159 5756  [ A499294F5029A7862ADC115BDA7371CE ] NetBIOS         C:\Windows\system32\DRIVERS\netbios.sys

22:46:02.0564 5756  NetBIOS ( UnsignedFile.Multi.Generic ) - warning

22:46:02.0564 5756  NetBIOS - detected UnsignedFile.Multi.Generic (1)

22:46:02.0596 5756  [ FC2C792EBDDC8E28DF939D6A92C83D61 ] netbt           C:\Windows\system32\DRIVERS\netbt.sys

22:46:02.0939 5756  netbt ( UnsignedFile.Multi.Generic ) - warning

22:46:02.0939 5756  netbt - detected UnsignedFile.Multi.Generic (1)

22:46:02.0970 5756  [ 260BF9C43EE12C6898A9F5AAB0FB0E5D ] Netlogon        C:\Windows\system32\lsass.exe

22:46:03.0313 5756  Netlogon ( UnsignedFile.Multi.Generic ) - warning

22:46:03.0313 5756  Netlogon - detected UnsignedFile.Multi.Generic (1)

22:46:03.0360 5756  [ 9B63B29DEFC0F3115A559D2597BF5D75 ] Netman          C:\Windows\System32\netman.dll

22:46:03.0797 5756  Netman ( UnsignedFile.Multi.Generic ) - warning

22:46:03.0797 5756  Netman - detected UnsignedFile.Multi.Generic (1)

22:46:03.0844 5756  [ D22CD77D4F0D63D1169BB35911BFF12D ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

22:46:03.0875 5756  NetMsmqActivator - ok

22:46:03.0922 5756  [ D22CD77D4F0D63D1169BB35911BFF12D ] NetPipeActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

22:46:03.0937 5756  NetPipeActivator - ok

22:46:03.0984 5756  [ 7846D0136CC2B264926A73047BA7688A ] netprofm        C:\Windows\System32\netprofm.dll

22:46:04.0452 5756  netprofm ( UnsignedFile.Multi.Generic ) - warning

22:46:04.0452 5756  netprofm - detected UnsignedFile.Multi.Generic (1)

22:46:04.0468 5756  [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

22:46:04.0499 5756  NetTcpActivator - ok

22:46:04.0530 5756  [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

22:46:04.0546 5756  NetTcpPortSharing - ok

22:46:04.0592 5756  [ 4AC08BD6AF2DF42E0C3196D826C8AEA7 ] nfrd960         C:\Windows\system32\drivers\nfrd960.sys

22:46:04.0608 5756  nfrd960 - ok

22:46:04.0655 5756  [ F145BF4C4668E7E312069F81EF847CFC ] NlaSvc          C:\Windows\System32\nlasvc.dll

22:46:05.0045 5756  NlaSvc ( UnsignedFile.Multi.Generic ) - warning

22:46:05.0045 5756  NlaSvc - detected UnsignedFile.Multi.Generic (1)

22:46:05.0107 5756  [ B298874F8E0EA93F06EC40AA8D146478 ] Npfs            C:\Windows\system32\drivers\Npfs.sys

22:46:05.0482 5756  Npfs ( UnsignedFile.Multi.Generic ) - warning

22:46:05.0482 5756  Npfs - detected UnsignedFile.Multi.Generic (1)

22:46:05.0497 5756  [ ACB62BAA1C319B17752553DF3026EEEB ] nsi             C:\Windows\system32\nsisvc.dll

22:46:05.0872 5756  nsi ( UnsignedFile.Multi.Generic ) - warning

22:46:05.0872 5756  nsi - detected UnsignedFile.Multi.Generic (1)

22:46:05.0903 5756  [ 1523AF19EE8B030BA682F7A53537EAEB ] nsiproxy        C:\Windows\system32\drivers\nsiproxy.sys

22:46:06.0230 5756  nsiproxy ( UnsignedFile.Multi.Generic ) - warning

22:46:06.0230 5756  nsiproxy - detected UnsignedFile.Multi.Generic (1)

22:46:06.0340 5756  [ BAC869DFB98E499BA4D9BB1FB43270E1 ] Ntfs            C:\Windows\system32\drivers\Ntfs.sys

22:46:06.0449 5756  Ntfs - ok

22:46:06.0527 5756  [ DD5D684975352B85B52E3FD5347C20CB ] Null            C:\Windows\system32\drivers\Null.sys

22:46:06.0948 5756  Null ( UnsignedFile.Multi.Generic ) - warning

22:46:06.0948 5756  Null - detected UnsignedFile.Multi.Generic (1)

22:46:06.0979 5756  [ 2C040B7ADA5B06F6FACADAC8514AA034 ] nvraid          C:\Windows\system32\drivers\nvraid.sys

22:46:06.0995 5756  nvraid - ok

22:46:07.0026 5756  [ F7EA0FE82842D05EDA3EFDD376DBFDBA ] nvstor          C:\Windows\system32\drivers\nvstor.sys

22:46:07.0057 5756  nvstor - ok

22:46:07.0073 5756  [ 19067CA93075EF4823E3938A686F532F ] nv_agp          C:\Windows\system32\drivers\nv_agp.sys

22:46:07.0088 5756  nv_agp - ok

22:46:07.0104 5756  NwlnkFlt - ok

22:46:07.0104 5756  NwlnkFwd - ok

22:46:07.0151 5756  [ 404B0121AE1A75D9A63B6934EB07C258 ] OA013Ufd        C:\Windows\system32\DRIVERS\OA013Ufd.sys

22:46:07.0619 5756  OA013Ufd ( UnsignedFile.Multi.Generic ) - warning

22:46:07.0619 5756  OA013Ufd - detected UnsignedFile.Multi.Generic (1)

22:46:07.0650 5756  [ 650BCC8FF8ED939F3F79D1E8A1CF0595 ] OA013Vid        C:\Windows\system32\DRIVERS\OA013Vid.sys

22:46:08.0071 5756  OA013Vid ( UnsignedFile.Multi.Generic ) - warning

22:46:08.0071 5756  OA013Vid - detected UnsignedFile.Multi.Generic (1)

22:46:08.0118 5756  [ 7B58953E2F263421FDBB09A192712A85 ] ohci1394        C:\Windows\system32\drivers\ohci1394.sys

22:46:08.0539 5756  ohci1394 ( UnsignedFile.Multi.Generic ) - warning

22:46:08.0539 5756  ohci1394 - detected UnsignedFile.Multi.Generic (1)

22:46:08.0586 5756  [ 9AE31D2E1D15C10D91318E0EC149CEAC ] p2pimsvc        C:\Windows\system32\p2psvc.dll

22:46:09.0101 5756  p2pimsvc ( UnsignedFile.Multi.Generic ) - warning

22:46:09.0101 5756  p2pimsvc - detected UnsignedFile.Multi.Generic (1)

22:46:09.0257 5756  [ 9AE31D2E1D15C10D91318E0EC149CEAC ] p2psvc          C:\Windows\system32\p2psvc.dll

22:46:09.0896 5756  p2psvc ( UnsignedFile.Multi.Generic ) - warning

22:46:09.0896 5756  p2psvc - detected UnsignedFile.Multi.Generic (1)

22:46:09.0943 5756  [ AECD57F94C887F58919F307C35498EA0 ] Parport         C:\Windows\system32\drivers\parport.sys

22:46:10.0380 5756  Parport ( UnsignedFile.Multi.Generic ) - warning

22:46:10.0380 5756  Parport - detected UnsignedFile.Multi.Generic (1)

22:46:10.0396 5756  [ B43751085E2ABE389DA466BC62A4B987 ] partmgr         C:\Windows\system32\drivers\partmgr.sys

22:46:10.0427 5756  partmgr - ok

22:46:10.0458 5756  [ 9AB157B374192FF276C1628FBDBA2B0E ] PcaSvc          C:\Windows\System32\pcasvc.dll

22:46:10.0864 5756  PcaSvc ( UnsignedFile.Multi.Generic ) - warning

22:46:10.0864 5756  PcaSvc - detected UnsignedFile.Multi.Generic (1)

22:46:10.0910 5756  [ 47AB1E0FC9D0E12BB53BA246E3A0906D ] pci             C:\Windows\system32\drivers\pci.sys

22:46:10.0942 5756  pci - ok

22:46:10.0957 5756  [ 8D618C829034479985A9ED56106CC732 ] pciide          C:\Windows\system32\drivers\pciide.sys

22:46:10.0973 5756  pciide - ok

22:46:11.0004 5756  [ 037661F3D7C507C9993B7010CEEE6288 ] pcmcia          C:\Windows\system32\drivers\pcmcia.sys

22:46:11.0035 5756  pcmcia - ok

22:46:11.0113 5756  [ 58865916F53592A61549B04941BFD80D ] PEAUTH          C:\Windows\system32\drivers\peauth.sys

22:46:11.0503 5756  PEAUTH ( UnsignedFile.Multi.Generic ) - warning

22:46:11.0503 5756  PEAUTH - detected UnsignedFile.Multi.Generic (1)

22:46:11.0628 5756  [ 0ED8727EA0172860F47258456C06CAEA ] PerfHost        C:\Windows\SysWow64\perfhost.exe

22:46:12.0049 5756  PerfHost ( UnsignedFile.Multi.Generic ) - warning

22:46:12.0049 5756  PerfHost - detected UnsignedFile.Multi.Generic (1)

22:46:12.0143 5756  [ E9E68C1A0F25CF4A7AC966EEA74EE89E ] pla             C:\Windows\system32\pla.dll

22:46:12.0658 5756  pla ( UnsignedFile.Multi.Generic ) - warning

22:46:12.0658 5756  pla - detected UnsignedFile.Multi.Generic (1)

22:46:12.0689 5756  [ FE6B0F59215C9FD9F9D26539C58C8B82 ] PlugPlay        C:\Windows\system32\umpnpmgr.dll

22:46:13.0126 5756  PlugPlay ( UnsignedFile.Multi.Generic ) - warning

22:46:13.0126 5756  PlugPlay - detected UnsignedFile.Multi.Generic (1)

22:46:13.0188 5756  [ 37F6046CDC630442D7DC087501FF6FC6 ] Pml Driver HPZ12 C:\Windows\system32\HPZipm12.dll

22:46:13.0516 5756  Pml Driver HPZ12 ( UnsignedFile.Multi.Generic ) - warning

22:46:13.0516 5756  Pml Driver HPZ12 - detected UnsignedFile.Multi.Generic (1)

22:46:13.0562 5756  [ 9AE31D2E1D15C10D91318E0EC149CEAC ] PNRPAutoReg     C:\Windows\system32\p2psvc.dll

22:46:14.0030 5756  PNRPAutoReg ( UnsignedFile.Multi.Generic ) - warning

22:46:14.0030 5756  PNRPAutoReg - detected UnsignedFile.Multi.Generic (1)

22:46:14.0077 5756  [ 9AE31D2E1D15C10D91318E0EC149CEAC ] PNRPsvc         C:\Windows\system32\p2psvc.dll

22:46:14.0623 5756  PNRPsvc ( UnsignedFile.Multi.Generic ) - warning

22:46:14.0623 5756  PNRPsvc - detected UnsignedFile.Multi.Generic (1)

22:46:14.0686 5756  [ 89A5560671C2D8B4A4B51F3E1AA069D8 ] PolicyAgent     C:\Windows\System32\ipsecsvc.dll

22:46:15.0154 5756  PolicyAgent ( UnsignedFile.Multi.Generic ) - warning

22:46:15.0154 5756  PolicyAgent - detected UnsignedFile.Multi.Generic (1)

22:46:15.0185 5756  [ 23386E9952025F5F21C368971E2E7301 ] PptpMiniport    C:\Windows\system32\DRIVERS\raspptp.sys

22:46:15.0497 5756  PptpMiniport ( UnsignedFile.Multi.Generic ) - warning

22:46:15.0497 5756  PptpMiniport - detected UnsignedFile.Multi.Generic (1)

22:46:15.0528 5756  [ 5080E59ECEE0BC923F14018803AA7A01 ] Processor       C:\Windows\system32\drivers\processr.sys

22:46:15.0856 5756  Processor ( UnsignedFile.Multi.Generic ) - warning

22:46:15.0856 5756  Processor - detected UnsignedFile.Multi.Generic (1)

22:46:15.0887 5756  [ E058CE4FC2449D8BFA14739C83B7FF2A ] ProfSvc         C:\Windows\system32\profsvc.dll

22:46:16.0199 5756  ProfSvc ( UnsignedFile.Multi.Generic ) - warning

22:46:16.0199 5756  ProfSvc - detected UnsignedFile.Multi.Generic (1)

22:46:16.0230 5756  [ 260BF9C43EE12C6898A9F5AAB0FB0E5D ] ProtectedStorage C:\Windows\system32\lsass.exe

22:46:16.0573 5756  ProtectedStorage ( UnsignedFile.Multi.Generic ) - warning

22:46:16.0573 5756  ProtectedStorage - detected UnsignedFile.Multi.Generic (1)

22:46:16.0620 5756  [ C5AB7F0809392D0DA027F4A2A81BFA31 ] PSched          C:\Windows\system32\DRIVERS\pacer.sys

22:46:17.0057 5756  PSched ( UnsignedFile.Multi.Generic ) - warning

22:46:17.0057 5756  PSched - detected UnsignedFile.Multi.Generic (1)

22:46:17.0104 5756  [ 0B83F4E681062F3839BE2EC1D98FD94A ] ql2300          C:\Windows\system32\drivers\ql2300.sys

22:46:17.0182 5756  ql2300 - ok

22:46:17.0244 5756  [ E1C80F8D4D1E39EF9595809C1369BF2A ] ql40xx          C:\Windows\system32\drivers\ql40xx.sys

22:46:17.0275 5756  ql40xx - ok

22:46:17.0353 5756  [ 90574842C3DA781E279061A3EFF91F07 ] QWAVE           C:\Windows\system32\qwave.dll

22:46:17.0821 5756  QWAVE ( UnsignedFile.Multi.Generic ) - warning

22:46:17.0821 5756  QWAVE - detected UnsignedFile.Multi.Generic (1)

22:46:17.0837 5756  [ E8D76EDAB77EC9C634C27B8EAC33ADC5 ] QWAVEdrv        C:\Windows\system32\drivers\qwavedrv.sys

22:46:18.0196 5756  QWAVEdrv ( UnsignedFile.Multi.Generic ) - warning

22:46:18.0196 5756  QWAVEdrv - detected UnsignedFile.Multi.Generic (1)

22:46:18.0227 5756  [ 1013B3B663A56D3DDD784F581C1BD005 ] RasAcd          C:\Windows\system32\DRIVERS\rasacd.sys

22:46:18.0570 5756  RasAcd ( UnsignedFile.Multi.Generic ) - warning

22:46:18.0570 5756  RasAcd - detected UnsignedFile.Multi.Generic (1)

22:46:18.0617 5756  [ B2AE18F847D07F0044404DDF7CB04497 ] RasAuto         C:\Windows\System32\rasauto.dll

22:46:19.0007 5756  RasAuto ( UnsignedFile.Multi.Generic ) - warning

22:46:19.0007 5756  RasAuto - detected UnsignedFile.Multi.Generic (1)

22:46:19.0038 5756  [ AC7BC4D42A7E558718DFDEC599BBFC2C ] Rasl2tp         C:\Windows\system32\DRIVERS\rasl2tp.sys

22:46:19.0475 5756  Rasl2tp ( UnsignedFile.Multi.Generic ) - warning

22:46:19.0475 5756  Rasl2tp - detected UnsignedFile.Multi.Generic (1)

22:46:19.0490 5756  [ 3AD83E4046C43BE510DE681588ACB8AF ] RasMan          C:\Windows\System32\rasmans.dll

22:46:20.0005 5756  RasMan ( UnsignedFile.Multi.Generic ) - warning

22:46:20.0005 5756  RasMan - detected UnsignedFile.Multi.Generic (1)

22:46:20.0036 5756  [ 4517FBF8B42524AFE4EDE1DE102AAE3E ] RasPppoe        C:\Windows\system32\DRIVERS\raspppoe.sys

22:46:20.0411 5756  RasPppoe ( UnsignedFile.Multi.Generic ) - warning

22:46:20.0411 5756  RasPppoe - detected UnsignedFile.Multi.Generic (1)

22:46:20.0458 5756  [ C6A593B51F34C33E5474539544072527 ] RasSstp         C:\Windows\system32\DRIVERS\rassstp.sys

22:46:20.0832 5756  RasSstp ( UnsignedFile.Multi.Generic ) - warning

22:46:20.0832 5756  RasSstp - detected UnsignedFile.Multi.Generic (1)

22:46:20.0879 5756  [ 322DB5C6B55E8D8EE8D6F358B2AAABB1 ] rdbss           C:\Windows\system32\DRIVERS\rdbss.sys

22:46:21.0362 5756  rdbss ( UnsignedFile.Multi.Generic ) - warning

22:46:21.0362 5756  rdbss - detected UnsignedFile.Multi.Generic (1)

22:46:21.0394 5756  [ 603900CC05F6BE65CCBF373800AF3716 ] RDPCDD          C:\Windows\system32\DRIVERS\RDPCDD.sys

22:46:21.0768 5756  RDPCDD ( UnsignedFile.Multi.Generic ) - warning

22:46:21.0768 5756  RDPCDD - detected UnsignedFile.Multi.Generic (1)

22:46:21.0799 5756  [ C045D1FB111C28DF0D1BE8D4BDA22C06 ] rdpdr           C:\Windows\system32\drivers\rdpdr.sys

22:46:22.0283 5756  rdpdr ( UnsignedFile.Multi.Generic ) - warning

22:46:22.0283 5756  rdpdr - detected UnsignedFile.Multi.Generic (1)

22:46:22.0298 5756  [ CAB9421DAF3D97B33D0D055858E2C3AB ] RDPENCDD        C:\Windows\system32\drivers\rdpencdd.sys

22:46:22.0735 5756  RDPENCDD ( UnsignedFile.Multi.Generic ) - warning

22:46:22.0735 5756  RDPENCDD - detected UnsignedFile.Multi.Generic (1)

22:46:22.0798 5756  [ AE4BD9E1C33D351D8E607FC81F15160C ] RDPWD           C:\Windows\system32\drivers\RDPWD.sys

22:46:23.0281 5756  RDPWD ( UnsignedFile.Multi.Generic ) - warning

22:46:23.0281 5756  RDPWD - detected UnsignedFile.Multi.Generic (1)

22:46:23.0312 5756  [ C612B9557DA73F70D41F8A6FBC8E5344 ] RemoteAccess    C:\Windows\System32\mprdim.dll

22:46:23.0702 5756  RemoteAccess ( UnsignedFile.Multi.Generic ) - warning

22:46:23.0702 5756  RemoteAccess - detected UnsignedFile.Multi.Generic (1)

22:46:23.0749 5756  [ 44B9D8EC2F3EF3A0EFB00857AF70D861 ] RemoteRegistry  C:\Windows\system32\regsvc.dll

22:46:24.0202 5756  RemoteRegistry ( UnsignedFile.Multi.Generic ) - warning

22:46:24.0202 5756  RemoteRegistry - detected UnsignedFile.Multi.Generic (1)

22:46:24.0233 5756  [ F46C457840D4B7A4DAAFEE739CE04102 ] RpcLocator      C:\Windows\system32\locator.exe

22:46:24.0685 5756  RpcLocator ( UnsignedFile.Multi.Generic ) - warning

22:46:24.0685 5756  RpcLocator - detected UnsignedFile.Multi.Generic (1)

22:46:24.0716 5756  [ CF8B9A3A5E7DC57724A89D0C3E8CF9EF ] RpcSs           C:\Windows\system32\rpcss.dll

22:46:25.0169 5756  RpcSs ( UnsignedFile.Multi.Generic ) - warning

22:46:25.0169 5756  RpcSs - detected UnsignedFile.Multi.Generic (1)

22:46:25.0216 5756  [ 22A9CB08B1A6707C1550C6BF099AAE73 ] rspndr          C:\Windows\system32\DRIVERS\rspndr.sys

22:46:25.0637 5756  rspndr ( UnsignedFile.Multi.Generic ) - warning

22:46:25.0637 5756  rspndr - detected UnsignedFile.Multi.Generic (1)

22:46:25.0684 5756  [ 260BF9C43EE12C6898A9F5AAB0FB0E5D ] SamSs           C:\Windows\system32\lsass.exe

22:46:26.0495 5756  SamSs ( UnsignedFile.Multi.Generic ) - warning

22:46:26.0495 5756  SamSs - detected UnsignedFile.Multi.Generic (1)

22:46:26.0510 5756  [ CD9C693589C60AD59BBBCFB0E524E01B ] sbp2port        C:\Windows\system32\drivers\sbp2port.sys

22:46:26.0542 5756  sbp2port - ok

22:46:26.0588 5756  [ FD1CDCF108D5EF3366F00D18B70FB89B ] SCardSvr        C:\Windows\System32\SCardSvr.dll

22:46:27.0119 5756  SCardSvr ( UnsignedFile.Multi.Generic ) - warning

22:46:27.0119 5756  SCardSvr - detected UnsignedFile.Multi.Generic (1)

22:46:27.0244 5756  [ 0F838C811AD295D2A4489B9993096C63 ] Schedule        C:\Windows\system32\schedsvc.dll

22:46:27.0868 5756  Schedule ( UnsignedFile.Multi.Generic ) - warning

22:46:27.0868 5756  Schedule - detected UnsignedFile.Multi.Generic (1)

22:46:27.0930 5756  [ 5A268127633C7EE2A7FB87F39D748D56 ] SCPolicySvc     C:\Windows\System32\certprop.dll

22:46:28.0476 5756  SCPolicySvc ( UnsignedFile.Multi.Generic ) - warning

22:46:28.0476 5756  SCPolicySvc - detected UnsignedFile.Multi.Generic (1)

22:46:28.0507 5756  [ 4FF71B076A7760FE75EA5AE2D0EE0018 ] SDRSVC          C:\Windows\System32\SDRSVC.dll

22:46:28.0975 5756  SDRSVC ( UnsignedFile.Multi.Generic ) - warning

22:46:28.0975 5756  SDRSVC - detected UnsignedFile.Multi.Generic (1)

22:46:29.0022 5756  [ 3EA8A16169C26AFBEB544E0E48421186 ] secdrv          C:\Windows\system32\drivers\secdrv.sys

22:46:29.0459 5756  secdrv ( UnsignedFile.Multi.Generic ) - warning

22:46:29.0459 5756  secdrv - detected UnsignedFile.Multi.Generic (1)

22:46:29.0521 5756  [ 5ACDCBC67FCF894A1815B9F96D704490 ] seclogon        C:\Windows\system32\seclogon.dll

22:46:29.0974 5756  seclogon ( UnsignedFile.Multi.Generic ) - warning

22:46:29.0974 5756  seclogon - detected UnsignedFile.Multi.Generic (1)

22:46:29.0974 5756  [ 90973A64B96CD647FF81C79443618EED ] SENS            C:\Windows\System32\sens.dll

22:46:30.0332 5756  SENS ( UnsignedFile.Multi.Generic ) - warning

22:46:30.0332 5756  SENS - detected UnsignedFile.Multi.Generic (1)

22:46:30.0379 5756  [ F71BFE7AC6C52273B7C82CBF1BB2A222 ] Serenum         C:\Windows\system32\drivers\serenum.sys

22:46:30.0832 5756  Serenum ( UnsignedFile.Multi.Generic ) - warning

22:46:30.0832 5756  Serenum - detected UnsignedFile.Multi.Generic (1)

22:46:30.0878 5756  [ E62FAC91EE288DB29A9696A9D279929C ] Serial          C:\Windows\system32\drivers\serial.sys

22:46:31.0268 5756  Serial ( UnsignedFile.Multi.Generic ) - warning

22:46:31.0268 5756  Serial - detected UnsignedFile.Multi.Generic (1)

22:46:31.0284 5756  [ A842F04833684BCEEA7336211BE478DF ] sermouse        C:\Windows\system32\drivers\sermouse.sys

22:46:31.0627 5756  sermouse ( UnsignedFile.Multi.Generic ) - warning

22:46:31.0627 5756  sermouse - detected UnsignedFile.Multi.Generic (1)

22:46:31.0674 5756  [ A8E4A4407A09F35DCCC3771AF590B0C4 ] SessionEnv      C:\Windows\system32\sessenv.dll

22:46:32.0064 5756  SessionEnv ( UnsignedFile.Multi.Generic ) - warning

22:46:32.0064 5756  SessionEnv - detected UnsignedFile.Multi.Generic (1)

22:46:32.0126 5756  [ 14D4B4465193A87C127933978E8C4106 ] sffdisk         C:\Windows\system32\drivers\sffdisk.sys

22:46:32.0563 5756  sffdisk ( UnsignedFile.Multi.Generic ) - warning

22:46:32.0563 5756  sffdisk - detected UnsignedFile.Multi.Generic (1)

22:46:32.0579 5756  [ 7073AEE3F82F3D598E3825962AA98AB2 ] sffp_mmc        C:\Windows\system32\drivers\sffp_mmc.sys

22:46:32.0953 5756  sffp_mmc ( UnsignedFile.Multi.Generic ) - warning

22:46:32.0953 5756  sffp_mmc - detected UnsignedFile.Multi.Generic (1)

22:46:32.0984 5756  [ 35E59EBE4A01A0532ED67975161C7B82 ] sffp_sd         C:\Windows\system32\drivers\sffp_sd.sys

22:46:33.0452 5756  sffp_sd ( UnsignedFile.Multi.Generic ) - warning

22:46:33.0452 5756  sffp_sd - detected UnsignedFile.Multi.Generic (1)

22:46:33.0468 5756  [ 6B7838C94135768BD455CBDC23E39E5F ] sfloppy         C:\Windows\system32\drivers\sfloppy.sys

22:46:33.0889 5756  sfloppy ( UnsignedFile.Multi.Generic ) - warning

22:46:33.0889 5756  sfloppy - detected UnsignedFile.Multi.Generic (1)

22:46:33.0952 5756  [ 4C5AEE179DA7E1EE9A9CCB9DA289AF34 ] SharedAccess    C:\Windows\System32\ipnathlp.dll

22:46:34.0451 5756  SharedAccess ( UnsignedFile.Multi.Generic ) - warning

22:46:34.0451 5756  SharedAccess - detected UnsignedFile.Multi.Generic (1)

22:46:34.0482 5756  [ 56793271ECDEDD350C5ADD305603E963 ] ShellHWDetection C:\Windows\System32\shsvcs.dll

22:46:34.0841 5756  ShellHWDetection ( UnsignedFile.Multi.Generic ) - warning

22:46:34.0841 5756  ShellHWDetection - detected UnsignedFile.Multi.Generic (1)

22:46:34.0888 5756  [ 7A5DE502AEB719D4594C6471060A78B3 ] SiSRaid2        C:\Windows\system32\drivers\sisraid2.sys

22:46:34.0903 5756  SiSRaid2 - ok

22:46:34.0966 5756  [ 3A2F769FAB9582BC720E11EA1DFB184D ] SiSRaid4        C:\Windows\system32\drivers\sisraid4.sys

22:46:34.0997 5756  SiSRaid4 - ok

22:46:35.0090 5756  [ A9A27A8E257B45A604FDAD4F26FE7241 ] slsvc           C:\Windows\system32\SLsvc.exe

22:46:35.0636 5756  slsvc ( UnsignedFile.Multi.Generic ) - warning

22:46:35.0636 5756  slsvc - detected UnsignedFile.Multi.Generic (1)

22:46:35.0668 5756  [ FD74B4B7C2088E390A30C85A896FC3AF ] SLUINotify      C:\Windows\system32\SLUINotify.dll

22:46:36.0058 5756  SLUINotify ( UnsignedFile.Multi.Generic ) - warning

22:46:36.0058 5756  SLUINotify - detected UnsignedFile.Multi.Generic (1)

22:46:36.0089 5756  [ 290B6F6A0EC4FCDFC90F5CB6D7020473 ] Smb             C:\Windows\system32\DRIVERS\smb.sys

22:46:36.0494 5756  Smb ( UnsignedFile.Multi.Generic ) - warning

22:46:36.0494 5756  Smb - detected UnsignedFile.Multi.Generic (1)

22:46:36.0557 5756  [ F8F47F38909823B1AF28D60B96340CFF ] SNMPTRAP        C:\Windows\System32\snmptrap.exe

22:46:37.0009 5756  SNMPTRAP ( UnsignedFile.Multi.Generic ) - warning

22:46:37.0009 5756  SNMPTRAP - detected UnsignedFile.Multi.Generic (1)

22:46:37.0056 5756  [ 386C3C63F00A7040C7EC5E384217E89D ] spldr           C:\Windows\system32\drivers\spldr.sys

22:46:37.0072 5756  spldr - ok

22:46:37.0181 5756  [ F66FF751E7EFC816D266977939EF5DC3 ] Spooler         C:\Windows\System32\spoolsv.exe

22:46:37.0586 5756  Spooler ( UnsignedFile.Multi.Generic ) - warning

22:46:37.0586 5756  Spooler - detected UnsignedFile.Multi.Generic (1)

22:46:37.0867 5756  [ 880A57FCCB571EBD063D4DD50E93E46D ] srv             C:\Windows\system32\DRIVERS\srv.sys

22:46:38.0413 5756  srv ( UnsignedFile.Multi.Generic ) - warning

22:46:38.0413 5756  srv - detected UnsignedFile.Multi.Generic (1)

22:46:38.0429 5756  [ A1AD14A6D7A37891FFFECA35EBBB0730 ] srv2            C:\Windows\system32\DRIVERS\srv2.sys

22:46:38.0881 5756  srv2 ( UnsignedFile.Multi.Generic ) - warning

22:46:38.0881 5756  srv2 - detected UnsignedFile.Multi.Generic (1)

22:46:38.0881 5756  [ 4BED62F4FA4D8300973F1151F4C4D8A7 ] srvnet          C:\Windows\system32\DRIVERS\srvnet.sys

22:46:39.0365 5756  srvnet ( UnsignedFile.Multi.Generic ) - warning

22:46:39.0365 5756  srvnet - detected UnsignedFile.Multi.Generic (1)

22:46:39.0412 5756  [ 192C74646EC5725AEF3F80D19FF75F6A ] SSDPSRV         C:\Windows\System32\ssdpsrv.dll

22:46:39.0848 5756  SSDPSRV ( UnsignedFile.Multi.Generic ) - warning

22:46:39.0848 5756  SSDPSRV - detected UnsignedFile.Multi.Generic (1)

22:46:39.0895 5756  [ 2EE3FA0308E6185BA64A9A7F2E74332B ] SstpSvc         C:\Windows\system32\sstpsvc.dll

22:46:40.0285 5756  SstpSvc ( UnsignedFile.Multi.Generic ) - warning

22:46:40.0285 5756  SstpSvc - detected UnsignedFile.Multi.Generic (1)

22:46:40.0348 5756  [ 74425FFA11C133D045E1C3BE2EAD481D ] ssudmdm         C:\Windows\system32\DRIVERS\ssudmdm.sys

22:46:40.0379 5756  ssudmdm - ok

22:46:40.0582 5756  [ C5DF63AE2693C9B6B01B4A2E6C1C64AC ] STacSV          C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_15f4e438\STacSV64.exe

22:46:41.0065 5756  STacSV ( UnsignedFile.Multi.Generic ) - warning

22:46:41.0065 5756  STacSV - detected UnsignedFile.Multi.Generic (1)

22:46:41.0143 5756  [ BA16447226ABFD342E130D2F24F73D32 ] STHDA           C:\Windows\system32\DRIVERS\stwrt64.sys

22:46:41.0658 5756  STHDA ( UnsignedFile.Multi.Generic ) - warning

22:46:41.0658 5756  STHDA - detected UnsignedFile.Multi.Generic (1)

22:46:41.0705 5756  [ 15825C1FBFB8779992CB65087F316AF5 ] stisvc          C:\Windows\System32\wiaservc.dll

22:46:42.0188 5756  stisvc ( UnsignedFile.Multi.Generic ) - warning

22:46:42.0188 5756  stisvc - detected UnsignedFile.Multi.Generic (1)

22:46:42.0251 5756  [ 8A851CA908B8B974F89C50D2E18D4F0C ] swenum          C:\Windows\system32\DRIVERS\swenum.sys

22:46:42.0282 5756  swenum - ok

22:46:42.0313 5756  [ 6DE37F4DE19D4EFD9C48C43ADDBC949A ] swprv           C:\Windows\System32\swprv.dll

22:46:42.0906 5756  swprv ( UnsignedFile.Multi.Generic ) - warning

22:46:42.0906 5756  swprv - detected UnsignedFile.Multi.Generic (1)

22:46:42.0953 5756  [ 2F26A2C6FC96B29BEFF5D8ED74E6625B ] Symc8xx         C:\Windows\system32\drivers\symc8xx.sys

22:46:42.0968 5756  Symc8xx - ok

22:46:43.0015 5756  [ A909667976D3BCCD1DF813FED517D837 ] Sym_hi          C:\Windows\system32\drivers\sym_hi.sys

22:46:43.0046 5756  Sym_hi - ok

22:46:43.0062 5756  [ 36887B56EC2D98B9C362F6AE4DE5B7B0 ] Sym_u3          C:\Windows\system32\drivers\sym_u3.sys

22:46:43.0078 5756  Sym_u3 - ok

22:46:43.0156 5756  [ 3178B56219E0E4FB5F95299E49B83B44 ] SynTP           C:\Windows\system32\DRIVERS\SynTP.sys

22:46:43.0171 5756  SynTP - ok

22:46:43.0234 5756  [ 92D7A8B0F87B036F17D25885937897A6 ] SysMain         C:\Windows\system32\sysmain.dll

22:46:43.0764 5756  SysMain ( UnsignedFile.Multi.Generic ) - warning

22:46:43.0764 5756  SysMain - detected UnsignedFile.Multi.Generic (1)

22:46:43.0795 5756  [ 005CE42567F9113A3BCCB3B20073B029 ] TabletInputService C:\Windows\System32\TabSvc.dll

22:46:44.0201 5756  TabletInputService ( UnsignedFile.Multi.Generic ) - warning

22:46:44.0201 5756  TabletInputService - detected UnsignedFile.Multi.Generic (1)

22:46:44.0248 5756  [ CC2562B4D55E0B6A4758C65407F63B79 ] TapiSrv         C:\Windows\System32\tapisrv.dll

22:46:44.0684 5756  TapiSrv ( UnsignedFile.Multi.Generic ) - warning

22:46:44.0684 5756  TapiSrv - detected UnsignedFile.Multi.Generic (1)

22:46:44.0731 5756  [ CDBE8D7C1E201B911CDC346D06617FB5 ] TBS             C:\Windows\System32\tbssvc.dll

22:46:45.0262 5756  TBS ( UnsignedFile.Multi.Generic ) - warning

22:46:45.0262 5756  TBS - detected UnsignedFile.Multi.Generic (1)

22:46:45.0464 5756  [ 46D448E9117464E4D3BBF36D7E3FA48E ] Tcpip           C:\Windows\system32\drivers\tcpip.sys

22:46:45.0589 5756  Tcpip - ok

22:46:45.0714 5756  [ 46D448E9117464E4D3BBF36D7E3FA48E ] Tcpip6          C:\Windows\system32\DRIVERS\tcpip.sys

22:46:45.0792 5756  Tcpip6 - ok

22:46:45.0839 5756  [ C7E72A4071EE0200E3C075DACFB2B334 ] tcpipreg        C:\Windows\system32\drivers\tcpipreg.sys

22:46:46.0213 5756  tcpipreg ( UnsignedFile.Multi.Generic ) - warning

22:46:46.0213 5756  tcpipreg - detected UnsignedFile.Multi.Generic (1)

22:46:46.0260 5756  [ 1D8BF4AAA5FB7A2761475781DC1195BC ] TDPIPE          C:\Windows\system32\drivers\tdpipe.sys

22:46:46.0603 5756  TDPIPE ( UnsignedFile.Multi.Generic ) - warning

22:46:46.0603 5756  TDPIPE - detected UnsignedFile.Multi.Generic (1)

22:46:46.0634 5756  [ 7F7E00CDF609DF657F4CDA02DD1C9BB1 ] TDTCP           C:\Windows\system32\drivers\tdtcp.sys

22:46:46.0962 5756  TDTCP ( UnsignedFile.Multi.Generic ) - warning

22:46:46.0962 5756  TDTCP - detected UnsignedFile.Multi.Generic (1)

22:46:46.0993 5756  [ 458919C8C42E398DC4802178D5FFEE27 ] tdx             C:\Windows\system32\DRIVERS\tdx.sys

22:46:47.0399 5756  tdx ( UnsignedFile.Multi.Generic ) - warning

22:46:47.0399 5756  tdx - detected UnsignedFile.Multi.Generic (1)

22:46:47.0430 5756  [ 8C19678D22649EC002EF2282EAE92F98 ] TermDD          C:\Windows\system32\DRIVERS\termdd.sys

22:46:47.0446 5756  TermDD - ok

22:46:47.0524 5756  [ 5CDD30BC217082DAC71A9878D9BFD566 ] TermService     C:\Windows\System32\termsrv.dll

22:46:48.0023 5756  TermService ( UnsignedFile.Multi.Generic ) - warning

22:46:48.0023 5756  TermService - detected UnsignedFile.Multi.Generic (1)

22:46:48.0054 5756  [ 56793271ECDEDD350C5ADD305603E963 ] Themes          C:\Windows\system32\shsvcs.dll

22:46:48.0506 5756  Themes ( UnsignedFile.Multi.Generic ) - warning

22:46:48.0506 5756  Themes - detected UnsignedFile.Multi.Generic (1)

22:46:48.0553 5756  [ 3CBE4995E80E13CCFBC42E5DCF3AC81A ] THREADORDER     C:\Windows\system32\mmcss.dll

22:46:49.0006 5756  THREADORDER ( UnsignedFile.Multi.Generic ) - warning

22:46:49.0006 5756  THREADORDER - detected UnsignedFile.Multi.Generic (1)

22:46:49.0037 5756  [ F4689F05AF472A651A7B1B7B02D200E7 ] TrkWks          C:\Windows\System32\trkwks.dll

22:46:49.0630 5756  TrkWks ( UnsignedFile.Multi.Generic ) - warning

22:46:49.0630 5756  TrkWks - detected UnsignedFile.Multi.Generic (1)

22:46:49.0692 5756  [ 66328B08EF5A9305D8EDE36B93930369 ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe

22:46:50.0160 5756  TrustedInstaller ( UnsignedFile.Multi.Generic ) - warning

22:46:50.0160 5756  TrustedInstaller - detected UnsignedFile.Multi.Generic (1)

22:46:50.0176 5756  [ 9E5409CD17C8BEF193AAD498F3BC2CB8 ] tssecsrv        C:\Windows\system32\DRIVERS\tssecsrv.sys

22:46:50.0566 5756  tssecsrv ( UnsignedFile.Multi.Generic ) - warning

22:46:50.0566 5756  tssecsrv - detected UnsignedFile.Multi.Generic (1)

22:46:50.0597 5756  [ 89EC74A9E602D16A75A4170511029B3C ] tunmp           C:\Windows\system32\DRIVERS\tunmp.sys

22:46:51.0018 5756  tunmp ( UnsignedFile.Multi.Generic ) - warning

22:46:51.0018 5756  tunmp - detected UnsignedFile.Multi.Generic (1)

22:46:51.0065 5756  [ 30A9B3F45AD081BFFC3BCAA9C812B609 ] tunnel          C:\Windows\system32\DRIVERS\tunnel.sys

22:46:51.0377 5756  tunnel ( UnsignedFile.Multi.Generic ) - warning

22:46:51.0377 5756  tunnel - detected UnsignedFile.Multi.Generic (1)

22:46:51.0424 5756  [ FEC266EF401966311744BD0F359F7F56 ] uagp35          C:\Windows\system32\drivers\uagp35.sys

22:46:51.0455 5756  uagp35 - ok

22:46:51.0502 5756  [ FAF2640A2A76ED03D449E443194C4C34 ] udfs            C:\Windows\system32\DRIVERS\udfs.sys

22:46:51.0892 5756  udfs ( UnsignedFile.Multi.Generic ) - warning

22:46:51.0892 5756  udfs - detected UnsignedFile.Multi.Generic (1)

22:46:51.0923 5756  [ 060507C4113391394478F6953A79EEDC ] UI0Detect       C:\Windows\system32\UI0Detect.exe

22:46:52.0282 5756  UI0Detect ( UnsignedFile.Multi.Generic ) - warning

22:46:52.0282 5756  UI0Detect - detected UnsignedFile.Multi.Generic (1)

22:46:52.0328 5756  [ 4EC9447AC3AB462647F60E547208CA00 ] uliagpkx        C:\Windows\system32\drivers\uliagpkx.sys

22:46:52.0360 5756  uliagpkx - ok

22:46:52.0391 5756  [ 697F0446134CDC8F99E69306184FBBB4 ] uliahci         C:\Windows\system32\drivers\uliahci.sys

22:46:52.0422 5756  uliahci - ok

22:46:52.0469 5756  [ 31707F09846056651EA2C37858F5DDB0 ] UlSata          C:\Windows\system32\drivers\ulsata.sys

22:46:52.0484 5756  UlSata - ok

22:46:52.0516 5756  [ 85E5E43ED5B48C8376281BAB519271B7 ] ulsata2         C:\Windows\system32\drivers\ulsata2.sys

22:46:52.0531 5756  ulsata2 - ok

22:46:52.0578 5756  [ 46E9A994C4FED537DD951F60B86AD3F4 ] umbus           C:\Windows\system32\DRIVERS\umbus.sys

22:46:53.0015 5756  umbus ( UnsignedFile.Multi.Generic ) - warning

22:46:53.0015 5756  umbus - detected UnsignedFile.Multi.Generic (1)

22:46:53.0233 5756  [ 7093799FF80E9DECA0680D2E3535BE60 ] upnphost        C:\Windows\System32\upnphost.dll

22:46:53.0857 5756  upnphost ( UnsignedFile.Multi.Generic ) - warning

22:46:53.0857 5756  upnphost - detected UnsignedFile.Multi.Generic (1)

22:46:53.0904 5756  [ 07E3498FC60834219D2356293DA0FECC ] usbccgp         C:\Windows\system32\DRIVERS\usbccgp.sys

22:46:54.0310 5756  usbccgp ( UnsignedFile.Multi.Generic ) - warning

22:46:54.0310 5756  usbccgp - detected UnsignedFile.Multi.Generic (1)

22:46:54.0372 5756  [ 9247F7E0B65852C1F6631480984D6ED2 ] usbcir          C:\Windows\system32\drivers\usbcir.sys

22:46:54.0856 5756  usbcir ( UnsignedFile.Multi.Generic ) - warning

22:46:54.0856 5756  usbcir - detected UnsignedFile.Multi.Generic (1)

22:46:54.0902 5756  [ 827E44DE934A736EA31E91D353EB126F ] usbehci         C:\Windows\system32\DRIVERS\usbehci.sys

22:46:55.0261 5756  usbehci ( UnsignedFile.Multi.Generic ) - warning

22:46:55.0261 5756  usbehci - detected UnsignedFile.Multi.Generic (1)

22:46:55.0292 5756  [ BB35CD80A2ECECFADC73569B3D70C7D1 ] usbhub          C:\Windows\system32\DRIVERS\usbhub.sys

22:46:55.0729 5756  usbhub ( UnsignedFile.Multi.Generic ) - warning

22:46:55.0729 5756  usbhub - detected UnsignedFile.Multi.Generic (1)

22:46:55.0776 5756  [ EBA14EF0C07CEC233F1529C698D0D154 ] usbohci         C:\Windows\system32\drivers\usbohci.sys

22:46:56.0213 5756  usbohci ( UnsignedFile.Multi.Generic ) - warning

22:46:56.0213 5756  usbohci - detected UnsignedFile.Multi.Generic (1)

22:46:56.0260 5756  [ 28B693B6D31E7B9332C1BDCEFEF228C1 ] usbprint        C:\Windows\system32\DRIVERS\usbprint.sys

22:46:56.0665 5756  usbprint ( UnsignedFile.Multi.Generic ) - warning

22:46:56.0665 5756  usbprint - detected UnsignedFile.Multi.Generic (1)

22:46:56.0712 5756  [ EA0BF666868964FBE8CB10E50C97B9F1 ] usbscan         C:\Windows\system32\DRIVERS\usbscan.sys

22:46:57.0149 5756  usbscan ( UnsignedFile.Multi.Generic ) - warning

22:46:57.0149 5756  usbscan - detected UnsignedFile.Multi.Generic (1)

22:46:57.0164 5756  [ B854C1558FCA0C269A38663E8B59B581 ] USBSTOR         C:\Windows\system32\DRIVERS\USBSTOR.SYS

22:46:57.0554 5756  USBSTOR ( UnsignedFile.Multi.Generic ) - warning

22:46:57.0554 5756  USBSTOR - detected UnsignedFile.Multi.Generic (1)

22:46:57.0586 5756  [ B2872CBF9F47316ABD0E0C74A1ABA507 ] usbuhci         C:\Windows\system32\DRIVERS\usbuhci.sys

22:46:57.0944 5756  usbuhci ( UnsignedFile.Multi.Generic ) - warning

22:46:57.0944 5756  usbuhci - detected UnsignedFile.Multi.Generic (1)

22:46:57.0991 5756  [ FC33099877790D51B0927B7039059855 ] usbvideo        C:\Windows\system32\Drivers\usbvideo.sys

22:46:58.0444 5756  usbvideo ( UnsignedFile.Multi.Generic ) - warning

22:46:58.0444 5756  usbvideo - detected UnsignedFile.Multi.Generic (1)

22:46:58.0490 5756  [ D76E231E4850BB3F88A3D9A78DF191E3 ] UxSms           C:\Windows\System32\uxsms.dll

22:46:58.0927 5756  UxSms ( UnsignedFile.Multi.Generic ) - warning

22:46:58.0927 5756  UxSms - detected UnsignedFile.Multi.Generic (1)

22:46:58.0958 5756  [ 294945381DFA7CE58CECF0A9896AF327 ] vds             C:\Windows\System32\vds.exe

22:46:59.0380 5756  vds ( UnsignedFile.Multi.Generic ) - warning

22:46:59.0380 5756  vds - detected UnsignedFile.Multi.Generic (1)

22:46:59.0473 5756  [ 916B94BCF1E09873FFF2D5FB11767BBC ] vga             C:\Windows\system32\DRIVERS\vgapnp.sys

22:46:59.0894 5756  vga ( UnsignedFile.Multi.Generic ) - warning

22:46:59.0894 5756  vga - detected UnsignedFile.Multi.Generic (1)

22:46:59.0910 5756  [ B83AB16B51FEDA65DD81B8C59D114D63 ] VgaSave         C:\Windows\System32\drivers\vga.sys

22:47:00.0347 5756  VgaSave ( UnsignedFile.Multi.Generic ) - warning

22:47:00.0347 5756  VgaSave - detected UnsignedFile.Multi.Generic (1)

22:47:00.0362 5756  [ 8294B6C3FDB6C33F24E150DE647ECDAA ] viaide          C:\Windows\system32\drivers\viaide.sys

22:47:00.0378 5756  viaide - ok

22:47:00.0409 5756  [ 2B7E885ED951519A12C450D24535DFCA ] volmgr          C:\Windows\system32\drivers\volmgr.sys

22:47:00.0440 5756  volmgr - ok

22:47:00.0487 5756  [ CEC5AC15277D75D9E5DEC2E1C6EAF877 ] volmgrx         C:\Windows\system32\drivers\volmgrx.sys

22:47:00.0518 5756  volmgrx - ok

22:47:00.0565 5756  [ 5280AADA24AB36B01A84A6424C475C8D ] volsnap         C:\Windows\system32\drivers\volsnap.sys

22:47:00.0612 5756  volsnap - ok

22:47:00.0690 5756  [ A68F455ED2673835209318DD61BFBB0E ] vsmraid         C:\Windows\system32\drivers\vsmraid.sys

22:47:00.0721 5756  vsmraid - ok

22:47:00.0862 5756  [ B75232DAD33BFD95BF6F0A3E6BFF51E1 ] VSS             C:\Windows\system32\vssvc.exe

22:47:01.0408 5756  VSS ( UnsignedFile.Multi.Generic ) - warning

22:47:01.0408 5756  VSS - detected UnsignedFile.Multi.Generic (1)

22:47:01.0454 5756  [ F14A7DE2EA41883E250892E1E5230A9A ] W32Time         C:\Windows\system32\w32time.dll

22:47:01.0876 5756  W32Time ( UnsignedFile.Multi.Generic ) - warning

22:47:01.0876 5756  W32Time - detected UnsignedFile.Multi.Generic (1)

22:47:01.0907 5756  [ FEF8FE5923FEAD2CEE4DFABFCE3393A7 ] WacomPen        C:\Windows\system32\drivers\wacompen.sys

22:47:02.0297 5756  WacomPen ( UnsignedFile.Multi.Generic ) - warning

22:47:02.0297 5756  WacomPen - detected UnsignedFile.Multi.Generic (1)

22:47:02.0344 5756  [ B8E7049622300D20BA6D8BE0C47C0CFD ] Wanarp          C:\Windows\system32\DRIVERS\wanarp.sys

22:47:02.0656 5756  Wanarp ( UnsignedFile.Multi.Generic ) - warning

22:47:02.0656 5756  Wanarp - detected UnsignedFile.Multi.Generic (1)

22:47:02.0656 5756  [ B8E7049622300D20BA6D8BE0C47C0CFD ] Wanarpv6        C:\Windows\system32\DRIVERS\wanarp.sys

22:47:02.0999 5756  Wanarpv6 ( UnsignedFile.Multi.Generic ) - warning

22:47:02.0999 5756  Wanarpv6 - detected UnsignedFile.Multi.Generic (1)

22:47:03.0077 5756  [ B4E4C37D0AA6100090A53213EE2BF1C1 ] wcncsvc         C:\Windows\System32\wcncsvc.dll

22:47:03.0685 5756  wcncsvc ( UnsignedFile.Multi.Generic ) - warning

22:47:03.0685 5756  wcncsvc - detected UnsignedFile.Multi.Generic (1)

22:47:03.0748 5756  [ EA4B369560E986F19D93F45A881484AC ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll

22:47:04.0200 5756  WcsPlugInService ( UnsignedFile.Multi.Generic ) - warning

22:47:04.0200 5756  WcsPlugInService - detected UnsignedFile.Multi.Generic (1)

22:47:04.0247 5756  [ 0C17A0816F65B89E362E682AD5E7266E ] Wd              C:\Windows\system32\drivers\wd.sys

22:47:04.0262 5756  Wd - ok

22:47:04.0387 5756  [ DBB4397D703A755FACB05486C449C507 ] Wdf01000        C:\Windows\system32\drivers\Wdf01000.sys

22:47:04.0590 5756  Wdf01000 - ok

22:47:04.0606 5756  [ C5EFDA73EBFCA8B02A094898DE0A9276 ] WdiServiceHost  C:\Windows\system32\wdi.dll

22:47:05.0136 5756  WdiServiceHost ( UnsignedFile.Multi.Generic ) - warning

22:47:05.0136 5756  WdiServiceHost - detected UnsignedFile.Multi.Generic (1)

22:47:05.0167 5756  [ C5EFDA73EBFCA8B02A094898DE0A9276 ] WdiSystemHost   C:\Windows\system32\wdi.dll

22:47:05.0651 5756  WdiSystemHost ( UnsignedFile.Multi.Generic ) - warning

22:47:05.0651 5756  WdiSystemHost - detected UnsignedFile.Multi.Generic (1)

22:47:05.0698 5756  [ 3E6D05381CF35F75EBB055544A8ED9AC ] WebClient       C:\Windows\System32\webclnt.dll

22:47:06.0150 5756  WebClient ( UnsignedFile.Multi.Generic ) - warning

22:47:06.0150 5756  WebClient - detected UnsignedFile.Multi.Generic (1)

22:47:06.0181 5756  [ 8D40BC587993F876658BF9FB0F7D3462 ] Wecsvc          C:\Windows\system32\wecsvc.dll

22:47:06.0634 5756  Wecsvc ( UnsignedFile.Multi.Generic ) - warning

22:47:06.0634 5756  Wecsvc - detected UnsignedFile.Multi.Generic (1)

22:47:06.0680 5756  [ 9C980351D7E96288EA0C23AE232BD065 ] wercplsupport   C:\Windows\System32\wercplsupport.dll

22:47:07.0070 5756  wercplsupport ( UnsignedFile.Multi.Generic ) - warning

22:47:07.0070 5756  wercplsupport - detected UnsignedFile.Multi.Generic (1)

22:47:07.0102 5756  [ 66B9ECEBC46683F47EDC06333C075FEF ] WerSvc          C:\Windows\System32\WerSvc.dll

22:47:07.0492 5756  WerSvc ( UnsignedFile.Multi.Generic ) - warning

22:47:07.0492 5756  WerSvc - detected UnsignedFile.Multi.Generic (1)

22:47:07.0523 5756  WinDefend - ok

22:47:07.0538 5756  WinHttpAutoProxySvc - ok

22:47:07.0694 5756  [ D2E7296ED1BD26D8DB2799770C077A02 ] Winmgmt         C:\Windows\system32\wbem\WMIsvc.dll

22:47:08.0162 5756  Winmgmt ( UnsignedFile.Multi.Generic ) - warning

22:47:08.0162 5756  Winmgmt - detected UnsignedFile.Multi.Generic (1)

22:47:08.0178 5756  WinRM - ok

22:47:08.0256 5756  [ EC339C8115E91BAED835957E9A677F16 ] Wlansvc         C:\Windows\System32\wlansvc.dll

22:47:08.0708 5756  Wlansvc ( UnsignedFile.Multi.Generic ) - warning

22:47:08.0708 5756  Wlansvc - detected UnsignedFile.Multi.Generic (1)

22:47:08.0740 5756  [ E18AEBAAA5A773FE11AA2C70F65320F5 ] WmiAcpi         C:\Windows\system32\DRIVERS\wmiacpi.sys

22:47:09.0130 5756  WmiAcpi ( UnsignedFile.Multi.Generic ) - warning

22:47:09.0130 5756  WmiAcpi - detected UnsignedFile.Multi.Generic (1)

22:47:09.0176 5756  [ 21FA389E65A852698B6A1341F36EE02D ] wmiApSrv        C:\Windows\system32\wbem\WmiApSrv.exe

22:47:09.0613 5756  wmiApSrv ( UnsignedFile.Multi.Generic ) - warning

22:47:09.0613 5756  wmiApSrv - detected UnsignedFile.Multi.Generic (1)

22:47:09.0676 5756  WMPNetworkSvc - ok

22:47:09.0707 5756  [ CBC156C913F099E6680D1DF9307DB7A8 ] WPCSvc          C:\Windows\System32\wpcsvc.dll

22:47:10.0112 5756  WPCSvc ( UnsignedFile.Multi.Generic ) - warning

22:47:10.0112 5756  WPCSvc - detected UnsignedFile.Multi.Generic (1)

22:47:10.0159 5756  [ 490A18B4E4D53DC10879DEAA8E8B70D9 ] WPDBusEnum      C:\Windows\system32\wpdbusenum.dll

22:47:10.0549 5756  WPDBusEnum ( UnsignedFile.Multi.Generic ) - warning

22:47:10.0549 5756  WPDBusEnum - detected UnsignedFile.Multi.Generic (1)

22:47:10.0596 5756  [ 5E2401B3FC1089C90E081291357371A9 ] WpdUsb          C:\Windows\system32\DRIVERS\wpdusb.sys

22:47:11.0002 5756  WpdUsb ( UnsignedFile.Multi.Generic ) - warning

22:47:11.0002 5756  WpdUsb - detected UnsignedFile.Multi.Generic (1)

22:47:11.0158 5756  [ 991E2C2CF3BC204C2BB2EE1476149E4E ] WPFFontCache_v0400 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\WPFFontCache_v0400.exe

22:47:11.0220 5756  WPFFontCache_v0400 - ok

22:47:11.0267 5756  [ 8A900348370E359B6BFF6A550E4649E1 ] ws2ifsl         C:\Windows\system32\drivers\ws2ifsl.sys

22:47:11.0797 5756  ws2ifsl ( UnsignedFile.Multi.Generic ) - warning

22:47:11.0797 5756  ws2ifsl - detected UnsignedFile.Multi.Generic (1)

22:47:11.0828 5756  [ 9EA3E6D0EF7A5C2B9181961052A4B01A ] wscsvc          C:\Windows\System32\wscsvc.dll

22:47:12.0343 5756  wscsvc ( UnsignedFile.Multi.Generic ) - warning

22:47:12.0343 5756  wscsvc - detected UnsignedFile.Multi.Generic (1)

22:47:12.0343 5756  WSearch - ok

22:47:12.0562 5756  [ D9EF901DCA379CFE914E9FA13B73B4C4 ] wuauserv        C:\Windows\system32\wuaueng.dll

22:47:12.0702 5756  wuauserv - ok

22:47:12.0764 5756  [ 501A65252617B495C0F1832F908D54D8 ] WUDFRd          C:\Windows\system32\DRIVERS\WUDFRd.sys

22:47:13.0186 5756  WUDFRd ( UnsignedFile.Multi.Generic ) - warning

22:47:13.0186 5756  WUDFRd - detected UnsignedFile.Multi.Generic (1)

22:47:13.0217 5756  [ 6CBD51FF913C851D56ED9DC7F2A27DDE ] wudfsvc         C:\Windows\System32\WUDFSvc.dll

22:47:13.0576 5756  wudfsvc ( UnsignedFile.Multi.Generic ) - warning

22:47:13.0576 5756  wudfsvc - detected UnsignedFile.Multi.Generic (1)

22:47:13.0622 5756  [ D433F6726A727B0528F6E39F423FE1FD ] yksvc           C:\Windows\System32\ykx64mpcoinst.dll

22:47:14.0059 5756  yksvc ( UnsignedFile.Multi.Generic ) - warning

22:47:14.0059 5756  yksvc - detected UnsignedFile.Multi.Generic (1)

22:47:14.0106 5756  [ 541CBA0F3F679CC6E5ED4967F3FD4F6C ] yukonx64        C:\Windows\system32\DRIVERS\yk60x64.sys

22:47:14.0590 5756  yukonx64 ( UnsignedFile.Multi.Generic ) - warning

22:47:14.0590 5756  yukonx64 - detected UnsignedFile.Multi.Generic (1)

22:47:14.0605 5756  ================ Scan global ===============================

22:47:14.0652 5756  [ 060DC3A7A9A2626031EB23D90151428D ] C:\Windows\system32\basesrv.dll

22:47:14.0714 5756  [ AA137104CDFC81818A309CDE32ABB74A ] C:\Windows\system32\winsrv.dll

22:47:14.0746 5756  [ AA137104CDFC81818A309CDE32ABB74A ] C:\Windows\system32\winsrv.dll

22:47:14.0808 5756  [ 934E0B7D77FF78C18D9F8891221B6DE3 ] C:\Windows\system32\services.exe

22:47:14.0824 5756  [Global] - ok

22:47:14.0824 5756  ================ Scan MBR ==================================

22:47:14.0839 5756  [ 5C616939100B85E558DA92B899A0FC36 ] \Device\Harddisk0\DR0

22:47:15.0635 5756  \Device\Harddisk0\DR0 - ok

22:47:15.0635 5756  ================ Scan VBR ==================================

22:47:15.0682 5756  [ BC7E299168F34C973841D8D393D8CFD4 ] \Device\Harddisk0\DR0\Partition1

22:47:15.0697 5756  \Device\Harddisk0\DR0\Partition1 - ok

22:47:15.0713 5756  [ 13660CE30A37921600294F02FD687243 ] \Device\Harddisk0\DR0\Partition2

22:47:15.0713 5756  \Device\Harddisk0\DR0\Partition2 - ok

22:47:15.0713 5756  ============================================================

22:47:15.0713 5756  Scan finished

22:47:15.0713 5756  ============================================================

22:47:15.0728 5740  Detected object count: 254

22:47:15.0728 5740  Actual detected object count: 254

In der txt.-Datei des Logs habe ich "Alles markieren" gedrückt und hier reinkopiert.
Im Orginal steht auch unter der oben reinkopierten Textmenge nichts weiter, was ich hätte vergessen können. Was mache ich falsch?

SteGri

20.11.2012 01:45

OK, hier ist nochmal was. Ist das besser, oder genau das Gleiche? Ich habe das direkt aus der TDSS-Maske in ein txt-Dokument reinkopiert.

Oh, Mann. Jetzt darf ich das nicht einfügen, weil es zu lang ist. Ich bin so müde. Also hab ichs als Anhang drangemacht, siehe unten. War das richtig?

cosinus

20.11.2012 10:32

Jetzt ist es vollständig. Und soweit unauffällig.
Was genau ist an Problemen jetzt noch offen?

SteGri

20.11.2012 12:24

Die 250 Warnhinweise von TDSSKiller kann ich also ignorieren?

Die Symptome sind:

1) Das Original-Problem war, dass mein Thunderbird plötzlich verschwunden war. Einfach weg. "Auf C:\ ... Thundberbird kann nicht zugegriffen werden". "... beschädigt und nicht lesbar." Die Verknüpfung dazu auf dem Desktop führt ins Leere und fragt bei Anklicken, ob sie gelöscht werden kann. Ich habe zwar ein Thunderbird-Backup von drei Monaten vorher, hätte aber gerne den Thunderbird wieder zurückgeholt - oder gewusst warum/wohin er verschwunden ist.
Post #1: http://www.trojaner-board.de/123240-...tml#post905279

2) Windows fordert mich ständig auf, schon beim Hochfahren, "CHKDSK" laufen zu lassen, weil diese oder jene Datei (bspw. winlogon.exe) beschädigt ist. Aber ich kann CHKDSK nicht laufen lassen, weil ich keinen Zugriff bekomme. "Volume kann für direkten Zugriff nicht geöffnet werden". Auch als Administrator wird CHKDSK nicht ausgeführt. Siehe erste Seite dieses Threads.
Post #5: http://www.trojaner-board.de/123240-...tml#post907203

3) Windows Update schlägt fehl. Code 80070000B. Ich kann die Update-Dateien nicht installieren. Siehe hier.
Post #15 (unterer Teil): http://www.trojaner-board.de/123240-...tml#post958819

4) Die CPU-Auslastung steigt bei Standard-Gebrauch zum Teil auf 90% und der Physikalische Speicher wird mit 42% angegeben.

5) Die Festplatte und/oder der Lüfter machen perodisch laute Summgeräusche.

cosinus

20.11.2012 14:25

Danke für die aktuelle Zusammenfassung

Dann bitte jetzt CF ausführen:

ComboFix

Ein Leitfaden und Tutorium zur Nutzung von ComboFix

Lade dir ComboFix hier herunter auf deinen Desktop.

Schliesse alle Programme, vor allem dein Antivirenprogramm und andere Hintergrundwächter sowie deinen Internetbrowser.

Starte combofix.exe von deinem Desktop aus, bestätige die Warnmeldungen, führe die Updates durch (falls vorgeschlagen), installiere die Wiederherstellungskonsole (falls vorgeschlagen) und lass dein System durchsuchen.
Vermeide es auch während Combofix läuft die Maus und Tastatur zu benutzen.

Im Anschluss öffnet sich automatisch eine combofix.txt, diesen Inhalt bitte kopieren ([Strg]a, [Strg]c) und in deinen Beitrag einfügen ([Strg]v). Die Datei findest du außerdem unter: C:\ComboFix.txt.

Wichtiger Hinweis:

Combofix darf ausschließlich ausgeführt werden, wenn ein Kompetenzler dies ausdrücklich empfohlen hat!

Es sollte nie auf eigene Initiative hin ausgeführt werden! Eine falsche Benutzung kann ernsthafte Computerprobleme nach sich ziehen und eine Bereinigung der Infektion noch erschweren.

Solltest du nach der Ausführung von Combofix Probleme beim Starten von Anwendungen haben und Meldungen erhalten wie

Zitat:

Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.

startest du Windows dann manuell neu und die Fehlermeldungen sollten nicht mehr auftauchen.

SteGri

20.11.2012 20:43

OK, das ComboFix habe ich auch laufen lassen. Das Programm hat mich - außer zum Warten - zu gar nichts aufgefordert.

Ich habe das Programm nicht mit Rechtsklick auf den .exe-Link "als Administrator" ausgeführt. Hätte ich das machen müssen? Ich habe aber AntiVir und die Windows-Firewall ausgeschaltet.

http://s10.postimage.org/bk93rbamh/Combo.jpg

Das ist der Inhalt der Log-Datei, die das Programm nach dem Durchlauf von selbst geöffnet hat:

Combofix Logfile:

Code:

ComboFix 12-11-20.02 - Office-PC 20.11.2012  20:23:57.1.2 - x64

Microsoft® Windows Vista™ Home Premium   6.0.6002.2.1252.49.1031.18.4091.2676 [GMT 1:00]

ausgeführt von:: c:\users\NAME\Desktop\ComboFix.exe

AV: Avira Desktop *Disabled/Updated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}

SP: Avira Desktop *Disabled/Updated* {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}

SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

 * Neuer Wiederherstellungspunkt wurde erstellt

.

.

((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))

.

.

c:\users\Office-PC\AppData\Local\Temp\{26F98962-4D84-4DF8-AF9B-629FC4B4D03A}\ISBEW64.exe

c:\users\Office-PC\AppData\Local\Temp\{67365063-E8B1-40F7-91B3-E42A8BE4B6C7}\fpb.tmp

c:\users\Office-PC\AppData\Local\Temp\MarkAny\ContentSafer\MaAgent.exe

c:\users\Office-PC\AppData\Local\Temp\MarkAny\ContentSafer\MAAuthProc.dll

c:\users\Office-PC\AppData\Local\Temp\MarkAny\ContentSafer\MACLICX13.dll

c:\users\Office-PC\AppData\Local\Temp\MarkAny\ContentSafer\MACLicX15.dll

c:\users\Office-PC\AppData\Local\Temp\MarkAny\ContentSafer\MACSMANAGER.dll

c:\users\Office-PC\AppData\Local\Temp\MarkAny\ContentSafer\MaCSMgr.exe

c:\users\Office-PC\AppData\Local\Temp\MarkAny\ContentSafer\MaCSProHook.dll

c:\users\Office-PC\AppData\Local\Temp\MarkAny\ContentSafer\mapshapi.dll

c:\users\Office-PC\AppData\Local\Temp\MarkAny\ContentSafer\mapwij10.dll

c:\users\Office-PC\AppData\Local\Temp\MarkAny\ContentSafer\MaSyncP.dll

c:\users\Office-PC\AppData\Local\Temp\MarkAny\ContentSafer\MaWAMP.dll

c:\users\Office-PC\AppData\Local\Temp\MarkAny\ContentSafer\MAWebControl.exe

c:\users\Office-PC\AppData\Local\Temp\MarkAny\ContentSafer\MaWMP.dll

c:\users\Office-PC\AppData\Local\Temp\MarkAny\ContentSafer\MPXBox.exe

c:\users\Office-PC\AppData\Local\Temp\MarkAny\ContentSafer\MtpAccess.dll

c:\users\Office-PC\AppData\Local\Temp\MarkAny\ContentSafer\UpdateClient\MAFileUpdate.dll

c:\users\Office-PC\AppData\Local\Temp\MarkAny\ContentSafer\UpdateClient\MAUpdate.exe

c:\users\Office-PC\AppData\Local\Temp\MarkAny\ContentSafer\UpdateClient\MAUpdateBoot.exe

c:\users\Office-PC\AppData\Local\Temp\MarkAny\ContentSafer\UpdateClient\MaUpdateClient.exe

c:\users\Office-PC\AppData\Local\Temp\MarkAny\ContentSafer\UserShare.dll

c:\users\Office-PC\AppData\Local\Temp\MarkAny\ContentSafer\XSYNCClt.dll

c:\users\OFFICE~1\AppData\Local\Temp\{26F98962-4D84-4DF8-AF9B-629FC4B4D03A}\ISBEW64.exe

c:\users\OFFICE~1\AppData\Local\Temp\{67365063-E8B1-40F7-91B3-E42A8BE4B6C7}\fpb.tmp

c:\users\OFFICE~1\AppData\Local\Temp\MarkAny\ContentSafer\MaAgent.exe

c:\users\OFFICE~1\AppData\Local\Temp\MarkAny\ContentSafer\MAAuthProc.dll

c:\users\OFFICE~1\AppData\Local\Temp\MarkAny\ContentSafer\MACLICX13.dll

c:\users\OFFICE~1\AppData\Local\Temp\MarkAny\ContentSafer\MACLicX15.dll

c:\users\OFFICE~1\AppData\Local\Temp\MarkAny\ContentSafer\MACSMANAGER.dll

c:\users\OFFICE~1\AppData\Local\Temp\MarkAny\ContentSafer\MaCSMgr.exe

c:\users\OFFICE~1\AppData\Local\Temp\MarkAny\ContentSafer\MaCSProHook.dll

c:\users\OFFICE~1\AppData\Local\Temp\MarkAny\ContentSafer\mapshapi.dll

c:\users\OFFICE~1\AppData\Local\Temp\MarkAny\ContentSafer\mapwij10.dll

c:\users\OFFICE~1\AppData\Local\Temp\MarkAny\ContentSafer\MaSyncP.dll

c:\users\OFFICE~1\AppData\Local\Temp\MarkAny\ContentSafer\MaWAMP.dll

c:\users\OFFICE~1\AppData\Local\Temp\MarkAny\ContentSafer\MAWebControl.exe

c:\users\OFFICE~1\AppData\Local\Temp\MarkAny\ContentSafer\MaWMP.dll

c:\users\OFFICE~1\AppData\Local\Temp\MarkAny\ContentSafer\MPXBox.exe

c:\users\OFFICE~1\AppData\Local\Temp\MarkAny\ContentSafer\MtpAccess.dll

c:\users\OFFICE~1\AppData\Local\Temp\MarkAny\ContentSafer\UpdateClient\MAFileUpdate.dll

c:\users\OFFICE~1\AppData\Local\Temp\MarkAny\ContentSafer\UpdateClient\MAUpdate.exe

c:\users\OFFICE~1\AppData\Local\Temp\MarkAny\ContentSafer\UpdateClient\MAUpdateBoot.exe

c:\users\OFFICE~1\AppData\Local\Temp\MarkAny\ContentSafer\UpdateClient\MaUpdateClient.exe

c:\users\OFFICE~1\AppData\Local\Temp\MarkAny\ContentSafer\UserShare.dll

c:\users\OFFICE~1\AppData\Local\Temp\MarkAny\ContentSafer\XSYNCClt.dll

c:\windows\SysWow64\muzapp.exe

.

.

(((((((((((((((((((((((   Dateien erstellt von 2012-10-20 bis 2012-11-20  ))))))))))))))))))))))))))))))

.

.

2012-11-20 19:29 . 2012-11-20 19:29        --------        d-----w-        c:\users\NAME\AppData\Local\temp

2012-11-20 19:29 . 2012-11-20 19:29        --------        d-----w-        c:\users\Default\AppData\Local\temp

2012-11-20 19:21 . 2012-11-20 19:21        --------        d-----w-        C:\32788R22FWJFW

2012-11-20 11:16 . 2012-11-08 17:24        9125352        ----a-w-        c:\programdata\Microsoft\Windows Defender\Definition Updates\{D18A1852-8C17-4E0A-8AC9-98DE0B03B3E6}\mpengine.dll

2012-11-18 17:05 . 2012-11-18 17:05        --------        d-----w-        c:\program files (x86)\Seagate

2012-11-18 17:04 . 2012-11-18 17:04        --------        d-----w-        c:\program files (x86)\Common Files\Wise Installation Wizard

2012-11-17 02:17 . 2012-11-17 02:17        --------        d-----w-        c:\program files\7-Zip

2012-11-15 12:13 . 2012-09-24 22:16        95208        ----a-w-        c:\windows\SysWow64\WindowsAccessBridge-32.dll

2012-11-13 12:13 . 2012-11-13 12:13        --------        d-----w-        c:\program files (x86)\Fotosizer

2012-11-04 18:24 . 2012-11-04 18:24        --------        d-----w-        c:\users\NAME\AppData\Roaming\FreeHideIP

2012-11-04 18:17 . 2012-11-04 18:17        --------        d-----w-        c:\programdata\FreeHideIP

2012-11-04 18:17 . 2012-11-04 18:17        --------        d-----w-        c:\users\Office-PC\AppData\Roaming\FreeHideIP

2012-11-04 18:16 . 2012-11-04 18:16        --------        d-----w-        c:\program files (x86)\FreeHideIP

.

.

.

((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2012-11-16 02:02 . 2006-11-02 12:35        66395536        ----a-w-        c:\windows\system32\mrt.exe

2012-11-15 12:10 . 2012-07-19 17:09        73656        ----a-w-        c:\windows\SysWow64\FlashPlayerCPLApp.cpl

2012-11-15 12:10 . 2012-07-19 17:09        697272        ----a-w-        c:\windows\SysWow64\FlashPlayerApp.exe

2012-09-10 20:44 . 2012-09-10 20:45        821736        ----a-w-        c:\windows\SysWow64\npDeployJava1.dll

2012-09-10 20:44 . 2012-09-10 20:45        746984        ----a-w-        c:\windows\SysWow64\deployJava1.dll

2012-08-28 08:05 . 2012-09-22 15:23        4659712        ----a-w-        c:\windows\SysWow64\Redemption.dll

2012-08-28 08:04 . 2012-08-28 08:04        90112        ----a-w-        c:\windows\MAMCityDownload.ocx

2012-08-28 08:04 . 2012-08-28 08:04        81920        ----a-w-        c:\windows\SysWow64\issacapi_bs-2.3.dll

2012-08-28 08:04 . 2012-08-28 08:04        65536        ----a-w-        c:\windows\SysWow64\issacapi_pe-2.3.dll

2012-08-28 08:04 . 2012-08-28 08:04        57344        ----a-w-        c:\windows\SysWow64\issacapi_se-2.3.dll

2012-08-28 08:04 . 2012-08-28 08:04        49152        ----a-w-        c:\windows\SysWow64\MaJGUILib.dll

2012-08-28 08:04 . 2012-08-28 08:04        45056        ----a-w-        c:\windows\SysWow64\MaXMLProto.dll

2012-08-28 08:04 . 2012-08-28 08:04        40960        ----a-w-        c:\windows\SysWow64\MTTELECHIP.dll

2012-08-28 08:04 . 2012-08-28 08:04        330240        ----a-w-        c:\windows\MASetupCaller.dll

2012-08-28 08:04 . 2012-08-28 08:04        30568        ----a-w-        c:\windows\MusiccityDownload.exe

2012-08-28 08:04 . 2012-08-28 08:04        200704        ----a-w-        c:\windows\SysWow64\muzwmts.dll

2012-08-28 08:04 . 2012-08-28 08:04        143360        ----a-w-        c:\windows\SysWow64\3DAudio.ax

2012-08-28 08:04 . 2012-08-28 08:04        135168        ----a-w-        c:\windows\SysWow64\muzaf1.dll

2012-08-28 08:04 . 2012-08-28 08:04        122880        ----a-w-        c:\windows\SysWow64\muzeffect.ax

2012-08-28 08:04 . 2012-08-28 08:04        118784        ----a-w-        c:\windows\SysWow64\MaDRM.dll

2012-08-28 08:04 . 2012-08-28 08:04        110592        ----a-w-        c:\windows\SysWow64\muzmp4sp.ax

2012-08-28 08:04 . 2012-09-22 15:22        821824        ----a-w-        c:\windows\SysWow64\dgderapi.dll

2012-08-28 08:04 . 2012-09-22 15:22        319456        ----a-w-        c:\windows\SysWow64\DIFxAPI.dll

2012-08-28 08:04 . 2012-09-22 15:22        20032        ----a-w-        c:\windows\SysWow64\drivers\dgderdrv.sys

2012-08-28 08:04 . 2012-08-28 08:04        974848        ----a-w-        c:\windows\SysWow64\cis-2.4.dll

2012-08-28 08:04 . 2012-08-28 08:04        57344        ----a-w-        c:\windows\SysWow64\MTXSYNCICON.dll

2012-08-28 08:04 . 2012-08-28 08:04        57344        ----a-w-        c:\windows\SysWow64\MK_Lyric.dll

2012-08-28 08:04 . 2012-08-28 08:04        569344        ----a-w-        c:\windows\SysWow64\muzdecode.ax

2012-08-28 08:04 . 2012-08-28 08:04        491520        ----a-w-        c:\windows\SysWow64\muzapp.dll

2012-08-28 08:04 . 2012-08-28 08:04        45320        ----a-w-        c:\windows\SysWow64\MAMACExtract.dll

2012-08-28 08:04 . 2012-08-28 08:04        45056        ----a-w-        c:\windows\SysWow64\MACXMLProto.dll

2012-08-28 08:04 . 2012-08-28 08:04        352256        ----a-w-        c:\windows\SysWow64\MSLUR71.dll

2012-08-28 08:04 . 2012-08-28 08:04        258048        ----a-w-        c:\windows\SysWow64\muzoggsp.ax

2012-08-28 08:04 . 2012-08-28 08:04        245760        ----a-w-        c:\windows\SysWow64\MSCLib.dll

2012-08-28 08:04 . 2012-08-28 08:04        24576        ----a-w-        c:\windows\SysWow64\MASetupCleaner.exe

2012-08-28 08:04 . 2012-08-28 08:04        155648        ----a-w-        c:\windows\SysWow64\MSFLib.dll

2012-08-28 08:04 . 2012-08-28 08:04        131072        ----a-w-        c:\windows\SysWow64\muzmpgsp.ax

.

.

------- Sigcheck -------

Note: Unsigned files aren't necessarily malware.

.

[-] 2008-01-21 . 22D13FF3DAFEC2A80634752B1EAA2DE6 . 22016 . . [6.0.6001.18000] .. c:\windows\system32\drivers\asyncmac.sys

.

[-] 2006-11-02 . DD5D684975352B85B52E3FD5347C20CB . 6144 . . [6.0.6000.16386] .. c:\windows\system32\drivers\null.sys

.

[-] 2009-04-11 . 458919C8C42E398DC4802178D5FFEE27 . 94720 . . [6.0.6002.18005] .. c:\windows\system32\drivers\tdx.sys

.

[-] 2008-01-21 . A1B39DE453433B115B4EA69EE0343816 . 103424 . . [6.0.6000.16386] .. c:\windows\system32\browser.dll

.

[-] 2011-11-16 . 260BF9C43EE12C6898A9F5AAB0FB0E5D . 11264 . . [6.0.6000.16386] .. c:\windows\system32\lsass.exe

.

[-] 2008-01-21 . 9B63B29DEFC0F3115A559D2597BF5D75 . 348160 . . [6.0.6000.16386] .. c:\windows\system32\netman.dll

.

[-] 2009-04-11 . 6D316F4859634071CC25C4FD4589AD2C . 1081856 . . [7.0.6001.18000] .. c:\windows\system32\qmgr.dll

.

[-] 2009-04-11 . CF8B9A3A5E7DC57724A89D0C3E8CF9EF . 719872 . . [6.0.6000.16386] .. c:\windows\system32\rpcss.dll

.

[-] 2009-04-11 . 934E0B7D77FF78C18D9F8891221B6DE3 . 384512 . . [6.0.6000.16386] .. c:\windows\system32\services.exe

.

[-] 2010-08-17 . F66FF751E7EFC816D266977939EF5DC3 . 273920 . . [6.0.6000.16386] .. c:\windows\system32\spoolsv.exe

.

[-] 2009-04-11 . 6D0773A3A65D28B663F334C90441D01A . 405504 . . [6.0.6001.18000] .. c:\windows\system32\winlogon.exe

.

[-] 2010-08-31 . 74ABE02BF1937B32C6FC169A782FCF60 . 633856 . . [5.82] .. c:\windows\system32\comctl32.dll

.

[-] 2008-01-21 . DDEE5FE5C3C3141CE02DE6B7B2BF686B . 1291264 . . [2001.12.6930.16386] .. c:\windows\system32\comres.dll

.

[-] 2012-04-23 . 62740B9D2A137E8CED41A9E4239A7A31 . 174592 . . [6.0.6000.16386] .. c:\windows\system32\cryptsvc.dll

.

[-] 2009-04-11 . E12F22B73F153DECE721CD45EC05B4AF . 361984 . . [2001.12.6932.18005] .. c:\windows\system32\es.dll

.

[-] 2009-04-11 . 62C15795629FA290656C6A7E5CD25F52 . 163840 . . [6.0.6002.18005] .. c:\windows\system32\imm32.dll

.

[-] 2010-04-16 . 11EAF90B44A9E378CB6F4ECBF2471F60 . 621568 . . [1.0626.6002.18244] .. c:\windows\system32\usp10.dll

.

[-] 2011-04-12 . 2299078C1E59FE69ADDF49897D6A373A . 1210880 . . [6.0.6001.18000] .. c:\windows\system32\kernel32.dll

.

[-] 2008-01-21 . 8BDE3074EE7BB92030448419E33635C7 . 29184 . . [6.0.6001.18000] .. c:\windows\system32\linkinfo.dll

.

[-] 2008-01-21 . 891E1D0DCDE747C8F1EE71E61EA193F5 . 32768 . . [6.0.6001.18000] .. c:\windows\system32\lpk.dll

.

[-] 2008-01-21 . D23E5184266747DDCE9D0C6581D916B3 . 433664 . . [6.0.6000.16386] .. c:\windows\system32\hnetcfg.dll

.

[-] 2012-06-28 . 864DFCF19D99711E6449255DD1F4F2B0 . 17809920 . . [9.00.8112.16421] .. c:\windows\system32\mshtml.dll

.

[-] 2011-12-14 . 2C74308C8A20F3F3A2226DFE36914CBF . 621056 . . [7.0.6002.18551] .. c:\windows\system32\msvcrt.dll

.

[-] 2009-04-11 . BB08D93011B82883EC33C7707A9627BE . 304128 . . [6.0.6000.16386] .. c:\windows\system32\mswsock.dll

.

[-] 2009-04-11 . A3F1B171702CA04744EE514243B45BFB . 717312 . . [6.0.6001.18000] .. c:\windows\system32\netlogon.dll

.

[-] 2009-04-11 . 7823A58BF0FE3CAAA555C12B5CF91290 . 123392 . . [6.0.6001.18000] .. c:\windows\system32\powrprof.dll

.

[-] 2009-04-11 . 9922ADB6DCA8F0F5EA038BEFF339C08B . 235520 . . [6.0.6000.16386] .. c:\windows\system32\scecli.dll

.

[-] 2006-11-02 . 2CCA759379C220D29F0066CA49E9259F . 6144 . . [6.0.6000.16386] .. c:\windows\system32\sfc.dll

.

[-] 2008-01-21 . CDA9F1373805AF88F6FA4F2064BBA24D . 27648 . . [6.0.6000.16386] .. c:\windows\system32\svchost.exe

.

[-] 2009-04-11 . CC2562B4D55E0B6A4758C65407F63B79 . 318976 . . [6.0.6000.16386] .. c:\windows\system32\tapisrv.dll

.

[-] 2009-04-11 . F3F5549E69AE8509342E67E4F972CA1C . 820224 . . [6.0.6001.18000] .. c:\windows\system32\user32.dll

.

[-] 2008-01-21 . A0AB2BB9A92293D9CE66E252719AB5FE . 28160 . . [6.0.6000.16386] .. c:\windows\system32\userinit.exe

.

[-] 2012-06-28 . 807CAA713A27CDF8ABE91BC367DBB269 . 1392128 . . [9.00.8112.16421] .. c:\windows\system32\wininet.dll

.

[-] 2009-04-11 . BAB10B35E2D5EE0DC3DE05A177C52C50 . 264704 . . [6.0.6000.16386] .. c:\windows\system32\ws2_32.dll

.

[-] 2008-01-21 . 9CD45523D76E4177C612B03C879E0AFF . 5120 . . [6.0.6001.18000] .. c:\windows\system32\ws2help.dll

.

[-] 2010-06-28 . 0CB93E3F36C4F4122E7CBBAA731F67D1 . 1915904 . . [6.0.6000.16386] .. c:\windows\system32\ole32.dll

.

[-] 2006-11-02 . 21322B1A2AD337C579F4A65EA0D25193 . 14848 . . [6.0.6000.16386] .. c:\windows\system32\cngaudit.dll

.

[-] 2008-01-21 . 117EA87DF785CA1B9D821F6F213DCE07 . 123904 . . [6.0.6000.16386] .. c:\windows\system32\wininit.exe

.

[-] 2006-11-02 . 7E370DF3743B39CD375C52F7995783C4 . 9728 . . [6.0.6000.16386] .. c:\windows\system32\ctfmon.exe

.

[-] 2009-07-10 . 56793271ECDEDD350C5ADD305603E963 . 302080 . . [6.0.6000.16386] .. c:\windows\system32\shsvcs.dll

.

[-] 2009-04-11 . 44B9D8EC2F3EF3A0EFB00857AF70D861 . 206848 . . [6.0.6000.16386] .. c:\windows\system32\regsvc.dll

.

[-] 2010-11-06 . 0F838C811AD295D2A4489B9993096C63 . 855040 . . [6.0.6001.18000] .. c:\windows\system32\schedsvc.dll

.

[-] 2008-01-21 . 192C74646EC5725AEF3F80D19FF75F6A . 185856 . . [6.0.6000.16386] .. c:\windows\system32\ssdpsrv.dll

.

[-] 2009-04-11 . 5CDD30BC217082DAC71A9878D9BFD566 . 547328 . . [6.0.6001.18000] .. c:\windows\system32\termsrv.dll

.

[-] 2008-01-21 . 17BF3BF5296936B153FDDDA189B60E07 . 5120 . . [6.0.6001.18000] .. c:\windows\system32\ksuser.dll

.

[-] 2008-01-21 . 6B58266234B36ABCDD43C797B0D1932E . 8192 . . [6.0.6001.18000] .. c:\windows\system32\msimg32.dll

.

[-] 2010-08-31 . DC8891A9203810FC994E7FCCF76E94C8 . 531968 . . [5.82] .. c:\windows\SysWOW64\comctl32.dll

.

[-] 2012-04-23 . 75C6A297E364014840B48ECCD7525E30 . 133120 . . [6.0.6000.16386] .. c:\windows\SysWOW64\cryptsvc.dll

.

[-] 2009-04-11 . 67058C46504BC12D821F38CF99B7B28F . 268800 . . [2001.12.6932.18005] .. c:\windows\SysWOW64\es.dll

.

[-] 2009-04-11 . B8FBE5F40B09F5D20E1E5CCFEF893D62 . 116224 . . [6.0.6002.18005] .. c:\windows\SysWOW64\imm32.dll

.

[-] 2011-04-12 . 7F4CAEAC24592FA9F574E1F8CD1D0604 . 859648 . . [6.0.6001.18000] .. c:\windows\SysWOW64\kernel32.dll

.

[-] 2006-11-02 . 24F90AEFEBE601D427CB4511E74CDCB6 . 22016 . . [6.0.6000.16386] .. c:\windows\SysWOW64\linkinfo.dll

.

[-] 2009-04-11 . DF37346EA13082E3E1B423B54014E641 . 23552 . . [6.0.6002.18005] .. c:\windows\SysWOW64\lpk.dll

.

[-] 2012-06-28 . 525F42376AA8D997B638145415244162 . 12317184 . . [9.00.8112.16421] .. c:\windows\SysWOW64\mshtml.dll

.

[-] 2011-12-14 . 17AF64D727545F2804F6E6D998327E3F . 680448 . . [7.0.6002.18551] .. c:\windows\SysWOW64\msvcrt.dll

.

[-] 2009-04-11 . 8617350C9B590B63E620881092751BCB . 223232 . . [6.0.6000.16386] .. c:\windows\SysWOW64\mswsock.dll

.

[-] 2009-04-11 . 95DAECF0FB120A7B5DA679CC54E37DDE . 592896 . . [6.0.6001.18000] .. c:\windows\SysWOW64\netlogon.dll

.

[-] 2009-04-11 . 9A7F4B2EDACD11444D048AA19CBB26AF . 98816 . . [6.0.6001.18000] .. c:\windows\SysWOW64\powrprof.dll

.

[-] 2009-04-11 . 8FC182167381E9915651267044105EE1 . 177152 . . [6.0.6000.16386] .. c:\windows\SysWOW64\scecli.dll

.

[-] 2006-11-02 . F4E1AA5D59C849A4AB47E895DC76B9C8 . 4608 . . [6.0.6000.16386] .. c:\windows\SysWOW64\sfc.dll

.

[-] 2008-01-21 . 3794B461C45882E06856F282EEF025AF . 21504 . . [6.0.6000.16386] .. c:\windows\SysWOW64\svchost.exe

.

[-] 2009-04-11 . D7673E4B38CE21EE54C59EEEB65E2483 . 242688 . . [6.0.6000.16386] .. c:\windows\SysWOW64\tapisrv.dll

.

[-] 2009-04-11 . D29FDB5DEDBDC1BD882164DC6DC4DD53 . 648704 . . [6.0.6001.18000] .. c:\windows\SysWOW64\user32.dll

.

[-] 2008-01-21 . 0E135526E9785D085BCD9AEDE6FBCBF9 . 25088 . . [6.0.6000.16386] .. c:\windows\SysWOW64\userinit.exe

.

[-] 2012-06-28 . 975129E360241BE751BE93D9E0AC7409 . 1129472 . . [9.00.8112.16421] .. c:\windows\SysWOW64\wininet.dll

.

[-] 2008-01-21 . B304D47D5744BA20FCB99FB8B2C07B0B . 179200 . . [6.0.6000.16386] .. c:\windows\SysWOW64\ws2_32.dll

.

[-] 2006-11-02 . 17C0671BF57057108A6D949510EE42C8 . 4608 . . [6.0.6000.16386] .. c:\windows\SysWOW64\ws2help.dll

.

[-] 2009-04-11 . 6B08E54A451B3F95E4109DBA7E594270 . 3079168 . . [6.0.6000.16386] .. c:\windows\explorer.exe

.

[-] 2008-01-21 . 5DFBCE56E689D90AE9E2FB278F80058E . 134656 . . [6.0.6000.16386] .. c:\windows\regedit.exe

.

[-] 2010-06-28 . 9586E7CB2255A8B097A7E4538202585E . 1316864 . . [6.0.6000.16386] .. c:\windows\SysWOW64\ole32.dll

.

[-] 2010-04-16 . 80FFF14F1757B9AF8BE9D314FC1AE88B . 502272 . . [1.0626.6002.18244] .. c:\windows\SysWOW64\usp10.dll

.

[-] 2006-11-02 . 919CC2A0476D5A6A4C935D4B88E29912 . 4608 . . [6.0.6000.16386] .. c:\windows\SysWOW64\ksuser.dll

.

[-] 2006-11-02 . 22BFD03DF51065A9ED8D17F8FB72296B . 8704 . . [6.0.6000.16386] .. c:\windows\SysWOW64\ctfmon.exe

.

[-] 2009-07-10 . C7230FBEE14437716701C15BE02C27B8 . 247808 . . [6.0.6000.16386] .. c:\windows\SysWOW64\shsvcs.dll

.

[-] 2006-11-02 . 2EC53B5A351C4D443896DBAD117F7E82 . 4608 . . [6.0.6000.16386] .. c:\windows\SysWOW64\msimg32.dll

.

[-] 2006-11-02 . 7F15B4953378C8B5161D65C26D5FED4D . 11776 . . [6.0.6000.16386] .. c:\windows\SysWOW64\cngaudit.dll

.

[-] 2008-01-21 . 101BA3EA053480BB5D957EF37C06B5ED . 96768 . . [6.0.6000.16386] .. c:\windows\SysWOW64\wininit.exe

.

[-] 2008-01-21 . 7A5F8218325F00396DAEA2F985FA0ECB . 18944 . . [6.0.6001.18000] .. c:\windows\SysWOW64\ias.dll

.

[-] 2010-08-31 15:46 . 2A64FE405579BB073FBABD68AF1468E7 . 954288 . . [4.1.6140] .. c:\windows\SysWOW64\mfc40u.dll

.

[-] 2008-01-21 . 68308183F4AE0BE7BF8ECD07CB297999 . 259072 . . [6.0.6000.16386] .. c:\windows\SysWOW64\upnphost.dll

.

[-] 2009-04-11 . 84B8827562B005C118CADBA0F25DB2C6 . 444416 . . [6.0.6000.16386] .. c:\windows\SysWOW64\dsound.dll

.

[-] 2009-04-11 . 8AAEEE8E59A70F37579993D118A34EE0 . 1788416 . . [6.0.6002.18005] .. c:\windows\SysWOW64\d3d9.dll

.

[-] 2008-01-21 . FA2A3AFADC4FB47DBC234A4E57F92CDB . 522752 . . [6.0.6000.16386] .. c:\windows\SysWOW64\ddraw.dll

.

[-] 2009-04-11 06:28 . A944A73CEC5921B871542FE5CC5E03E4 . 88576 . . [6.0.6002.18005] .. c:\windows\SysWOW64\olepro32.dll

.

[-] 2006-11-02 . BA7C3E9DD6B1A632124C8659E8014028 . 39424 . . [6.0.6000.16386] .. c:\windows\SysWOW64\perfctrs.dll

.

[-] 2009-04-11 . 69827805A221C21450BA22F4326A2EE3 . 20480 . . [6.0.6002.18005] .. c:\windows\SysWOW64\version.dll

.

[-] 2009-04-11 . 83199EF88D691E730B80666E29F90D58 . 17408 . . [6.0.6000.16386] .. c:\windows\SysWOW64\midimap.dll

.

[-] 2006-11-02 . A7D525E5C0D91C8C1D84C6BCD25AD77D . 10240 . . [6.0.6000.16386] .. c:\windows\SysWOW64\rasadhlp.dll

.

[-] 2008-01-21 . 22CFAEB9172F5F198048401485CD0571 . 9216 . . [6.0.6000.16386] .. c:\windows\SysWOW64\WSHTCPIP.DLL

.

((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))

.

.

*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 

REGEDIT4

.

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-04-11 1555968]

"Free Hide IP"="c:\program files (x86)\FreeHideIP\FreeHideIP.exe" [2012-09-25 3810688]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]

"avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2012-08-08 348664]

"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2012-02-20 59240]

"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2012-04-18 421888]

"HP Software Update"="c:\program files (x86)\HP\HP Software Update\HPWuSchd2.exe" [2007-05-08 54840]

"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-07-27 919008]

"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2012-07-03 252848]

.

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\

HP Digital Imaging Monitor.lnk - c:\program files (x86)\HP\Digital Imaging\bin\hpqtra08.exe [2009-5-21 275768]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"EnableUIADesktopToggle"= 0 (0x0)

.

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]

BootExecute        REG_MULTI_SZ           autocheck autochk /r \??\C:\0autocheck autochk *

.

S2 AESTFilters;Andrea ST Filters Service;c:\windows\System32\DriverStore\FileRepository\stwrt64.inf_15f4e438\AESTSr64.exe [2009-03-02 89600]

.

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost]

hpdevmgmt        REG_MULTI_SZ           hpqcxs08 hpqddsvc

.

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Svchost  - NetSvcs

Themes

.

.

--------- X64 Entries -----------

.

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"Skytel"="c:\program files\Realtek\Audio\HDA\Skytel.exe" [2010-11-03 1833576]

.

------- Zusätzlicher Suchlauf -------

.

uLocal Page = c:\windows\system32\blank.htm

uStart Page = hxxp://www.google.de/

mLocal Page = c:\windows\SysWOW64\blank.htm

uInternet Settings,ProxyServer = http=;ftp=;https=;

TCP: DhcpNameServer = 192.168.2.1

FF - ProfilePath - c:\users\Office-PC\AppData\Roaming\Mozilla\Firefox\Profiles\p8o9pvz3.default\

FF - prefs.js: browser.startup.homepage - hxxp://www.google.de/webhp?hl=de&tab=ww

FF - user.js: network.cookie.cookieBehavior - 0

FF - user.js: privacy.clearOnShutdown.cookies - false

FF - user.js: security.warn_viewing_mixed - false

FF - user.js: security.warn_viewing_mixed.show_once - false

FF - user.js: security.warn_submit_insecure - false

FF - user.js: security.warn_submit_insecure.show_once - false

.

- - - - Entfernte verwaiste Registrierungseinträge - - - -

.

HKLM-Run-SysTrayApp - c:\program files (x86)\IDT\WDM\sttray64.exe

HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe

AddRemove-Mozilla Thunderbird 14.0 (x86 de) - c:\program files (x86)\Mozilla Thunderbird\uninstall\helper.exe

.

.

.

--------------------- Gesperrte Registrierungsschluessel ---------------------

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]

@Denied: (A 2) (Everyone)

@="FlashBroker"

"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_3_300_265_ActiveX.exe,-101"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]

"Enabled"=dword:00000001

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_3_300_265_ActiveX.exe"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Shockwave Flash Object"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_265.ocx"

"ThreadingModel"="Apartment"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]

@="0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]

@="ShockwaveFlash.ShockwaveFlash.11"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_265.ocx, 1"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="ShockwaveFlash.ShockwaveFlash"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Macromedia Flash Factory Object"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_265.ocx"

"ThreadingModel"="Apartment"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]

@="FlashFactory.FlashFactory.1"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_265.ocx, 1"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="FlashFactory.FlashFactory"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]

@Denied: (A 2) (Everyone)

@="IFlashBroker4"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]

@="{00020424-0000-0000-C000-000000000046}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

"Version"="1.0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{D27CDB6B-AE6D-11CF-96B8-444553540000}]

@Denied: (A 2) (Everyone)

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{D27CDB6B-AE6D-11CF-96B8-444553540000}\1.0]

@="Shockwave Flash"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{FAB3E735-69C7-453B-A446-B6823C6DF1C9}]

@Denied: (A 2) (Everyone)

@=""

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{FAB3E735-69C7-453B-A446-B6823C6DF1C9}\1.0]

@="FlashBroker"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes]

"SymbolicLinkValue"=hex(6):5c,00,52,00,45,00,47,00,49,00,53,00,54,00,52,00,59,

   00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,4f,00,46,00,\

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

"BlindDial"=dword:00000000

.

Zeit der Fertigstellung: 2012-11-20  20:34:57

ComboFix-quarantined-files.txt  2012-11-20 19:34

.

Vor Suchlauf: 10 Verzeichnis(se), 28.398.170.112 Bytes frei

Nach Suchlauf: 14 Verzeichnis(se), 28.593.205.248 Bytes frei

.

- - End Of File - - 1FEB8EED3F8AD7E4992724B640031E04

--- --- ---

Ich habe den Computer danach neugestartet und vorher das mit Windows Update versucht, geht weiterhin nicht.
Beim Hochfahren kommt zunächst der DOS-Hinweis, dass das Volume für den direkten Zugriff nicht geöffnet werden kann. Und auf der Seite mit dem Windows-Begrüßungsbildchirm kommt dann eine Fehlermeldung, dass windows/fonts usw. defekt ist. Wenn man den Hinweis wegklickt, erscheint hinten dran der nächste, mit einem anderen Font-Fehler. Man kann aber auch drunter auf den Benutzernamen klicken, dann wird der Desktop geöffnet und alles scheint normal.

.

cosinus

20.11.2012 21:19

Downloade dir bitte Farbar's Service Scanner

Starte das Tool mit Doppelklick auf die FSS.exe
Gehe sicher, dass folgende Optionen angehakt sind.
- Internet Services
- Windows Firewall
- System Restore
- SecurityCenter / ActionCenter
Klicke auf Scan.
Wenn das Tool fertig ist, wird es eine FSS.txt in dem Verzeichnis erstellen, wo das Tool gelaufen ist.

Poste bitte den Inhalt hier.

SteGri

21.11.2012 20:37

Hm, das ist blitzschnell durchgelaufen:

Code:

 Farbar Service Scanner Version: 09-11-2012

Ran by Office-PC (administrator) on 21-11-2012 at 20:34:59

Running from "C:\Users\NAME\Desktop"

Windows Vista (TM) Home Premium Service Pack 2 (X64)

Boot Mode: Normal

****************************************************************
 

Internet Services:

============
 

Connection Status:

==============

Localhost is accessible.

LAN connected.

Google IP is accessible.

Google.com is accessible.

Yahoo IP is accessible.

Yahoo.com is accessible.
 
 

Windows Firewall:

=============
 

Firewall Disabled Policy: 

==================
 
 

System Restore:

============
 

System Restore Disabled Policy: 

========================
 
 

Security Center:

============
 

Other Services:

==============
 
 

File Check:

========

\Windows\System32\nsisvc.dll => MD5 is legit

\Windows\System32\drivers\nsiproxy.sys => MD5 is legit

\Windows\System32\dhcpcsvc.dll

[2012-07-20 00:22] - [2009-04-11 08:11] - 0268288 ____A (Microsoft Corporation) 3ED0321127CE70ACDAABBF77E157C2A7
 

\Windows\System32\drivers\afd.sys

[2012-07-22 12:37] - [2012-01-03 15:25] - 0404992 ____A (Microsoft Corporation) C4F6CE6087760AD70960C9EB130E7943
 

\Windows\System32\drivers\tdx.sys => MD5 is legit

\Windows\System32\Drivers\tcpip.sys

[2012-07-22 12:43] - [2012-03-30 13:45] - 1423744 ____A (Microsoft Corporation) 46D448E9117464E4D3BBF36D7E3FA48E
 

\Windows\System32\dnsrslvr.dll

[2012-07-19 18:13] - [2011-03-02 17:12] - 0117760 ____A (Microsoft Corporation) 06230F1B721494A6DF8D47FD395BB1B0
 

\Windows\System32\mpssvc.dll

[2012-07-20 00:22] - [2009-04-11 08:11] - 0603136 ____A (Microsoft Corporation) 897E3BAF68BA406A61682AE39C83900C
 

\Windows\System32\bfe.dll

[2012-07-20 00:21] - [2009-04-11 08:11] - 0458240 ____A (Microsoft Corporation) FFB96C2589FFA60473EAD78B39FBDE29
 

\Windows\System32\drivers\mpsdrv.sys => MD5 is legit

\Windows\System32\SDRSVC.dll => MD5 is legit

\Windows\System32\vssvc.exe

[2012-07-20 00:23] - [2009-04-11 08:11] - 1433600 ____A (Microsoft Corporation) B75232DAD33BFD95BF6F0A3E6BFF51E1
 

\Windows\System32\wscsvc.dll

[2012-07-20 00:20] - [2009-04-11 08:11] - 0074752 ____A (Microsoft Corporation) 9EA3E6D0EF7A5C2B9181961052A4B01A
 

\Windows\System32\wbem\WMIsvc.dll

[2012-07-20 00:22] - [2009-04-11 08:11] - 0221696 ____A (Microsoft Corporation) D2E7296ED1BD26D8DB2799770C077A02
 

\Windows\System32\svchost.exe => MD5 is legit

\Windows\System32\rpcss.dll

[2012-07-20 00:23] - [2009-04-11 08:11] - 0719872 ____A (Microsoft Corporation) CF8B9A3A5E7DC57724A89D0C3E8CF9EF
 
 
 

**** End of log ****

cosinus

21.11.2012 21:21

Auch unauffällig

Entweder ist richtig was im System kaputt oder ich sehe es nicht. Mach mal einen Dateisystem-Check oder ist CHKDSK immer noch weg? :balla:

chkdsk der Systempartition unter Windows Vista

1. Klick mit rechts auf einen freien Bereich auf dem Desktop und sag "Neu, Verknüpfung erstellen"
2. Tipp als Ziel cmd.exe ein und bestätige mit OK, eine neue Verknüpfung zur Konsole auf dem Desktop müsste sich nun befinden
3. Falls dem so ist, diese neue Verknüpfung rechtsklicken => Als Administrator ausführen => Sicherheitsabfrage von Vista Benutzerkontensteuerung ggf. bestätigen => schwarze Eingabeaufforderung öffnet sich
4. Tipp dort ein: chkdsk c: /f /r /v und bestätige mit enter.
5. Die folgende Abfrage mit j bestätigen und enter drücken.
6. Windows neu starten, es sollte ein Hinweis auf eine geplante Datenträgerüberprüfung erscheinen - die Zeit verstreichen lassen, keine Taste drücken!!
7. Abwarten bis der Vorgang abgeschlossen ist. Bei großen Partitionen kann es u.U. recht lange dauern. Windows bootet automatisch neu.

SteGri

21.11.2012 22:12

Alles wie gehabt, leider.
Die "Datenträgerprüfung" dauert zwei Sekunden.

http://s16.postimage.org/nncbc9hwl/1121_220025.jpg

cosinus

22.11.2012 12:48

Dann versuch den chkdsk auf dieser Vista-Partition mal vom OTLPE aus zu starten

Alle Zeitangaben in WEZ +1. Es ist jetzt 01:35 Uhr.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131