Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)
-   -   Sobald ich einen Browser öffne wir mein Internet extrem langsam (https://www.trojaner-board.de/124817-sobald-browser-oeffne-internet-extrem-langsam.html)

mac17 28.09.2012 14:17
Sobald ich einen Browser öffne wir mein Internet extrem langsam
 
Also wie im Titel beschrieben sobald ich nen Browser öffne wird mein Internet arg langsam, egal ob Internet Explorer oder Firefox. Habt ihr ne Ahnung?

markusg 28.09.2012 14:43
hi
Falls noch nicht vorhanden, lade Dir bitte OTL von Oldtimer herunter und speichere es auf Deinem Desktop
Code:
activex
netsvcs
msconfig
%SYSTEMDRIVE%\*.
%PROGRAMFILES%\*.exe
%LOCALAPPDATA%\*.exe
%systemroot%\*. /mp /s
C:\Windows\system32\*.tsp
/md5start
userinit.exe
eventlog.dll
scecli.dll
netlogon.dll
cngaudit.dll
ws2ifsl.sys
sceclt.dll
ntelogon.dll
winlogon.exe
logevent.dll
user32.DLL
explorer.exe
iaStor.sys
nvstor.sys
atapi.sys
IdeChnDr.sys
viasraid.sys
AGP440.sys
vaxscsi.sys
nvatabus.sys
viamraid.sys
nvata.sys
nvgts.sys
iastorv.sys
ViPrt.sys
eNetHook.dll
ahcix86.sys
KR10N.sys
nvstor32.sys
ahcix86s.sys
/md5stop
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav
%systemroot%\system32\*.dll /lockedfiles
%USERPROFILE%\*.*
%USERPROFILE%\Local Settings\Temp\*.exe
%USERPROFILE%\Local Settings\Temp\*.dll
%USERPROFILE%\Application Data\*.exe
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems|Windows /rs
CREATERESTOREPOINT
  • Schliesse bitte nun alle Programme. (Wichtig)
  • Klicke nun bitte auf den Quick Scan Button.
  • Kopiere
    nun den Inhalt aus OTL.txt und Extra.txt hier in Deinen Thread

mac17 28.09.2012 16:14
So ich habe den Scan direkt nach dem Systemstart ausgeführt nur Firefox lief.
OTL Logfile:
Code:
OTL logfile created on: 28.09.2012 17:16:23 - Run 1
OTL by OldTimer - Version 3.2.69.0    Folder = C:\Users\Marc\Desktop
64bit- Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
7,98 Gb Total Physical Memory | 5,47 Gb Available Physical Memory | 68,52% Memory free
15,97 Gb Paging File | 13,34 Gb Available in Paging File | 83,55% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 465,66 Gb Total Space | 67,46 Gb Free Space | 14,49% Space Free | Partition Type: NTFS
Drive E: | 1000,00 Gb Total Space | 104,51 Gb Free Space | 10,45% Space Free | Partition Type: NTFS
Drive H: | 100,00 Mb Total Space | 84,72 Mb Free Space | 84,73% Space Free | Partition Type: NTFS
Drive I: | 863,01 Gb Total Space | 828,46 Gb Free Space | 96,00% Space Free | Partition Type: NTFS
Drive K: | 931,51 Gb Total Space | 441,21 Gb Free Space | 47,36% Space Free | Partition Type: NTFS
 
Computer Name: MARC-PC | User Name: Marc | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - [2012.09.28 15:49:15 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Marc\Desktop\OTL.exe
PRC - [2012.09.21 15:22:49 | 001,807,280 | ---- | M] (Adobe Systems, Inc.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_4_402_278.exe
PRC - [2012.09.06 03:24:58 | 000,917,984 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
PRC - [2012.08.30 21:14:00 | 001,258,856 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
PRC - [2012.08.30 10:40:00 | 000,382,312 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
PRC - [2012.08.29 12:03:38 | 001,996,200 | ---- | M] (LogMeIn Inc.) -- C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
PRC - [2012.08.24 13:01:40 | 002,735,528 | ---- | M] (TeamViewer GmbH) -- C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe
PRC - [2012.07.29 15:28:12 | 000,138,096 | ---- | M] (Facebook Inc.) -- C:\Users\Marc\AppData\Local\Facebook\Update\FacebookUpdate.exe
PRC - [2012.07.27 22:51:38 | 000,823,224 | ---- | M] (Adobe Systems Inc.) -- C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\acrotray.exe
PRC - [2012.07.27 13:51:28 | 000,063,960 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2012.06.16 04:24:19 | 000,138,272 | R--- | M] (Symantec Corporation) -- C:\Program Files (x86)\Norton Internet Security\Engine\19.8.0.14\ccSvcHst.exe
PRC - [2012.05.24 20:39:22 | 027,112,840 | ---- | M] (Dropbox, Inc.) -- C:\Users\Marc\AppData\Roaming\Dropbox\bin\Dropbox.exe
PRC - [2012.04.17 17:19:40 | 003,671,872 | ---- | M] (DT Soft Ltd) -- C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
PRC - [2012.04.17 17:19:32 | 002,614,080 | ---- | M] (DT Soft Ltd) -- C:\Program Files (x86)\DAEMON Tools Lite\DTShellHlp.exe
PRC - [2012.04.06 17:59:49 | 000,076,888 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrA.exe
PRC - [2012.01.18 06:44:52 | 000,450,848 | ---- | M] (Logitech Inc.) -- C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe
PRC - [2011.09.09 17:11:58 | 000,142,848 | ---- | M] () -- C:\Program Files (x86)\Facebook Desktop\Facebook Desktop.exe
PRC - [2011.07.11 23:47:06 | 000,074,752 | ---- | M] (Nullsoft, Inc.) -- C:\Program Files (x86)\Winamp\winampa.exe
PRC - [2010.04.22 15:05:26 | 001,011,712 | ---- | M] (Gigabyte Technology CO., LTD.) -- C:\Program Files (x86)\GIGABYTE\Smart6\Timelock\AlarmClock.exe
PRC - [2009.12.02 19:40:40 | 000,068,136 | ---- | M] () -- C:\Program Files (x86)\GIGABYTE\EnergySaver\GSvr.exe
PRC - [2009.12.01 14:13:08 | 000,035,880 | ---- | M] () -- C:\Program Files (x86)\GIGABYTE\smart6\dbios\SDBMSG.exe
PRC - [2009.10.13 16:39:46 | 000,114,688 | ---- | M] (Gigabyte Technology CO., LTD.) -- C:\Program Files (x86)\GIGABYTE\Smart6\Timelock\TimeMgmtDaemon.exe
PRC - [2009.08.27 18:09:10 | 001,253,376 | ---- | M] (MAGIX AG) -- C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe
PRC - [2009.06.17 16:13:06 | 000,068,136 | ---- | M] () -- C:\Program Files (x86)\GIGABYTE\EnergySaver2\des2svr.exe
PRC - [2009.06.02 19:05:58 | 000,457,200 | ---- | M] () -- C:\Program Files (x86)\Roxio\BackOnTrack\Disaster Recovery\SaibSVC.exe
PRC - [2009.03.30 15:00:54 | 000,221,184 | ---- | M] (Brother Industries, Ltd.) -- C:\Program Files (x86)\Brother\Brmfcmon\BrMfcmon.exe
PRC - [2007.07.11 16:09:48 | 000,020,480 | ---- | M] () -- C:\Windows\FixCamera.exe
PRC - [2007.05.10 13:18:10 | 000,835,584 | ---- | M] () -- C:\Windows\vsnp325.exe
PRC - [2007.04.21 09:36:50 | 000,270,336 | ---- | M] () -- C:\Windows\tsnp325.exe
PRC - [2006.10.16 10:18:36 | 000,344,064 | ---- | M] (Sonix) -- C:\Windows\vphc710.exe
PRC - [2006.05.10 11:37:54 | 000,278,528 | ---- | M] () -- C:\Program Files (x86)\Philips\Philips SPC710NC Webcam\TrayMin710.exe
 
 
========== Modules (No Company Name) ==========
 
MOD - [2012.09.21 15:22:49 | 009,813,424 | ---- | M] () -- C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_4_402_278.dll
MOD - [2012.09.06 03:25:12 | 002,244,064 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
MOD - [2012.08.30 10:39:42 | 000,374,120 | ---- | M] () -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\Nv3DVStreaming.dll
MOD - [2012.08.22 19:23:53 | 012,436,480 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\7b7fbe651c6e72f12099a298654c9594\System.Windows.Forms.ni.dll
MOD - [2012.08.22 19:23:40 | 001,591,808 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\6bb439b3f87736d3248ae27d43e2c0d6\System.Drawing.ni.dll
MOD - [2012.08.22 19:23:20 | 007,967,232 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\ce9ff6baf9053ed2ed673d948179195c\System.ni.dll
MOD - [2012.08.22 19:23:16 | 011,492,864 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\acfc1391e45fedd2a359778ea57d914c\mscorlib.ni.dll
MOD - [2012.07.27 22:51:54 | 000,019,968 | ---- | M] () -- C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Locale\de_DE\acrotray.deu
MOD - [2011.09.09 17:11:58 | 000,142,848 | ---- | M] () -- C:\Program Files (x86)\Facebook Desktop\Facebook Desktop.exe
MOD - [2011.06.24 22:56:36 | 000,087,328 | ---- | M] () -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
MOD - [2011.06.24 22:56:14 | 001,241,888 | ---- | M] () -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
MOD - [2011.03.17 00:11:16 | 004,297,568 | ---- | M] () -- C:\PROGRA~3\COMMON~1\MICROS~1\OFFICE14\Cultures\office.odf
MOD - [2009.12.01 14:13:08 | 000,035,880 | ---- | M] () -- C:\Program Files (x86)\GIGABYTE\smart6\dbios\SDBMSG.exe
MOD - [2009.06.10 16:28:56 | 000,106,496 | ---- | M] () -- C:\Program Files (x86)\GIGABYTE\smart6\dbios\DBIOS.dll
MOD - [2009.02.27 16:38:22 | 000,139,264 | R--- | M] () -- C:\Program Files (x86)\Brother\BrUtilities\BrLogAPI.dll
MOD - [2007.07.11 16:09:48 | 000,020,480 | ---- | M] () -- C:\Windows\FixCamera.exe
MOD - [2007.05.10 13:18:10 | 000,835,584 | ---- | M] () -- C:\Windows\vsnp325.exe
MOD - [2007.04.21 09:36:50 | 000,270,336 | ---- | M] () -- C:\Windows\tsnp325.exe
MOD - [2006.05.10 11:37:54 | 000,278,528 | ---- | M] () -- C:\Program Files (x86)\Philips\Philips SPC710NC Webcam\TrayMin710.exe
 
 
========== Services (SafeList) ==========
 
SRV:64bit: - [2010.04.06 16:30:38 | 000,031,272 | ---- | M] () [On_Demand | Stopped] -- C:\Windows\SysNative\AppleChargerSrv.exe -- (AppleChargerSrv)
SRV:64bit: - [2009.07.14 03:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)
SRV - [2012.09.22 11:08:37 | 000,529,744 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2012.09.21 15:22:54 | 000,250,288 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2012.09.06 03:25:06 | 000,114,144 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2012.09.05 20:38:06 | 006,364,024 | ---- | M] (Native Instruments GmbH) [Auto | Running] -- C:\Programme\Common Files\Native Instruments\Hardware\NIHardwareService.exe -- (NIHardwareService)
SRV - [2012.08.30 21:14:00 | 001,258,856 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe -- (nvUpdatusService)
SRV - [2012.08.30 10:40:00 | 000,382,312 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)
SRV - [2012.08.29 12:03:36 | 002,369,960 | ---- | M] (LogMeIn Inc.) [Auto | Running] -- C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe -- (Hamachi2Svc)
SRV - [2012.08.24 13:01:40 | 002,735,528 | ---- | M] (TeamViewer GmbH) [Auto | Running] -- C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe -- (TeamViewer7)
SRV - [2012.08.21 17:12:24 | 000,018,360 | ---- | M] (Overwolf Ltd) [On_Demand | Stopped] -- C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe -- (OverwolfUpdaterService)
SRV - [2012.07.27 13:51:28 | 000,063,960 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2012.07.13 13:28:36 | 000,160,944 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2012.06.16 04:24:19 | 000,138,272 | R--- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files (x86)\Norton Internet Security\Engine\19.8.0.14\ccSvcHst.exe -- (NIS)
SRV - [2012.04.06 17:59:49 | 000,076,888 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA)
SRV - [2012.01.18 06:44:52 | 000,450,848 | ---- | M] (Logitech Inc.) [Auto | Running] -- C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe -- (UMVPFSrv)
SRV - [2011.10.23 22:07:34 | 000,630,784 | ---- | M] (FileZilla Project) [On_Demand | Stopped] -- C:\Program Files (x86)\FileZilla Server\FileZilla Server.exe -- (FileZilla Server)
SRV - [2010.12.13 14:37:16 | 000,194,416 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Programme\Microsoft LifeCam\MSCamS64.exe -- (MSCamSvc)
SRV - [2010.03.18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2010.02.19 13:37:14 | 000,517,096 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe -- (SwitchBoard)
SRV - [2010.01.09 21:34:24 | 004,925,184 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programme\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE -- (osppsvc)
SRV - [2010.01.09 21:20:56 | 000,174,440 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programme\Common Files\Microsoft Shared\Source Engine\OSE.EXE -- (ose64)
SRV - [2009.12.02 19:40:40 | 000,068,136 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\GIGABYTE\EnergySaver\GSvr.exe -- (GEST Service)
SRV - [2009.10.13 16:39:46 | 000,114,688 | ---- | M] (Gigabyte Technology CO., LTD.) [Auto | Running] -- C:\Program Files (x86)\GIGABYTE\Smart6\Timelock\TimeMgmtDaemon.exe -- (Smart TimeLock)
SRV - [2009.08.27 18:09:10 | 001,253,376 | ---- | M] (MAGIX AG) [Auto | Running] -- C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe -- (Fabs)
SRV - [2009.07.24 08:33:34 | 000,219,632 | ---- | M] (Sonic Solutions) [Auto | Stopped] -- C:\Program Files (x86)\Common Files\Roxio Shared\12.0\SharedCOM\RoxWatch12.exe -- (RoxWatch12)
SRV - [2009.07.24 08:33:10 | 001,116,656 | ---- | M] (Sonic Solutions) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Roxio Shared\12.0\SharedCOM\RoxMediaDB12.exe -- (RoxMediaDB12)
SRV - [2009.06.17 16:13:06 | 000,068,136 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\GIGABYTE\EnergySaver2\des2svr.exe -- (DES2 Service)
SRV - [2009.06.10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2009.06.02 19:05:58 | 000,457,200 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Roxio\BackOnTrack\Disaster Recovery\SaibSVC.exe -- (9734BF6A-2DCD-40f0-BAB0-5AAFEEBE1269)
SRV - [2008.08.07 12:10:02 | 003,276,800 | ---- | M] (MAGIX®) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe -- (FirebirdServerMAGIXInstance)
SRV - [2007.12.17 06:00:00 | 000,163,840 | ---- | M] (SEIKO EPSON CORPORATION) [Auto | Running] -- C:\ProgramData\EPSON\EPW!3 SSRP\E_S40STB.EXE -- (EPSON_EB_RPCV4_01)
SRV - [2007.01.11 06:02:00 | 000,126,464 | ---- | M] (SEIKO EPSON CORPORATION) [Auto | Running] -- C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE -- (EPSON_PM_RPCV4_01)
 
 
========== Driver Services (SafeList) ==========
 
DRV:64bit: - [2012.08.21 13:01:20 | 000,033,240 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GEARAspiWDM)
DRV:64bit: - [2012.07.30 13:32:08 | 000,203,104 | ---- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssudobex.sys -- (ssudobex)
DRV:64bit: - [2012.07.30 13:32:08 | 000,203,104 | ---- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssudmdm.sys -- (ssudmdm)
DRV:64bit: - [2012.07.30 13:32:08 | 000,102,240 | ---- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssudbus.sys -- (dg_ssudbus)
DRV:64bit: - [2012.07.06 04:17:58 | 000,037,536 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\NISx64\1308000.00E\srtspx64.sys -- (SRTSPX)
DRV:64bit: - [2012.07.06 04:17:57 | 000,737,952 | ---- | M] (Symantec Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\NISx64\1308000.00E\srtsp64.sys -- (SRTSP)
DRV:64bit: - [2012.07.03 17:25:16 | 000,189,288 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvhda64v.sys -- (NVHDA)
DRV:64bit: - [2012.06.07 06:43:38 | 000,167,072 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\NISx64\1308000.00E\ccsetx64.sys -- (ccSet_NIS)
DRV:64bit: - [2012.05.22 14:26:10 | 000,147,288 | ---- | M] (Oracle Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\VBoxNetAdp.sys -- (VBoxNetAdp)
DRV:64bit: - [2012.05.22 03:37:12 | 001,129,120 | ---- | M] (Symantec Corporation) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\NISx64\1308000.00E\symefa64.sys -- (SymEFA)
DRV:64bit: - [2012.05.06 15:15:04 | 000,283,200 | ---- | M] (DT Soft Ltd) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\dtsoftbus01.sys -- (dtsoftbus01)
DRV:64bit: - [2012.04.18 04:13:32 | 000,405,624 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\NISx64\1308000.00E\symnets.sys -- (SymNetS)
DRV:64bit: - [2012.04.18 03:42:14 | 000,190,072 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\NISx64\1308000.00E\ironx64.sys -- (SymIRON)
DRV:64bit: - [2012.03.27 18:49:40 | 000,175,736 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SYMEVENT64x86.SYS -- (SymEvent)
DRV:64bit: - [2012.03.01 08:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:64bit: - [2012.02.22 12:34:36 | 000,028,160 | ---- | M] (ManyCam LLC) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mcaudrv_x64.sys -- (mcaudrv_simple)
DRV:64bit: - [2012.02.22 12:23:14 | 000,358,480 | ---- | M] (Native Instruments GmbH) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ks2avs.sys -- (ks2avs)
DRV:64bit: - [2012.02.22 12:23:14 | 000,080,464 | ---- | M] (Native Instruments GmbH) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ks2usb.sys -- (ks2usb_svc)
DRV:64bit: - [2012.02.22 11:03:22 | 000,358,480 | ---- | M] (Native Instruments GmbH) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\a2djavs.sys -- (a2djavs)
DRV:64bit: - [2012.02.22 11:03:22 | 000,096,336 | ---- | M] (Native Instruments GmbH) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\a2djusb.sys -- (a2djusb_svc)
DRV:64bit: - [2012.02.15 12:01:50 | 000,052,736 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbaapl64.sys -- (USBAAPL64)
DRV:64bit: - [2012.01.18 06:44:36 | 004,865,568 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lvuvc64.sys -- (LVUVC64)
DRV:64bit: - [2012.01.18 06:44:28 | 000,351,136 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lvrs64.sys -- (LVRS64)
DRV:64bit: - [2012.01.11 08:11:20 | 000,034,304 | ---- | M] (ManyCam LLC) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mcvidrv_x64.sys -- (ManyCam)
DRV:64bit: - [2011.11.24 04:23:20 | 000,043,640 | R--- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\SymIMV.sys -- (SymIM)
DRV:64bit: - [2011.11.03 03:01:00 | 000,056,208 | ---- | M] (Rovi Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\PxHlpa64.sys -- (PxHlpa64)
DRV:64bit: - [2011.08.01 15:59:06 | 000,045,416 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\point64.sys -- (Point64)
DRV:64bit: - [2011.07.28 18:37:10 | 000,052,584 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\dc3d.sys -- (dc3d)
DRV:64bit: - [2011.07.27 20:48:14 | 000,014,952 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\iPodDrv.sys -- (iPodDrv)
DRV:64bit: - [2011.07.25 20:18:36 | 000,451,192 | R--- | M] (Symantec Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\NISx64\1308000.00E\symds64.sys -- (SymDS)
DRV:64bit: - [2011.06.23 21:39:54 | 000,088,480 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\atksgt.sys -- (atksgt)
DRV:64bit: - [2011.06.23 21:39:54 | 000,046,400 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\lirsgt.sys -- (lirsgt)
DRV:64bit: - [2011.06.10 14:34:52 | 000,539,240 | ---- | M] (Realtek                                            ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
DRV:64bit: - [2011.06.02 07:47:22 | 000,177,640 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssadmdm.sys -- (ssadmdm)
DRV:64bit: - [2011.06.02 07:47:22 | 000,157,672 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssadbus.sys -- (ssadbus)
DRV:64bit: - [2011.06.02 07:47:22 | 000,016,872 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssadmdfl.sys -- (ssadmdfl)
DRV:64bit: - [2011.04.12 01:33:54 | 001,579,520 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\athrx.sys -- (athr)
DRV:64bit: - [2011.03.11 08:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2011.03.11 08:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2011.03.07 11:22:00 | 000,065,280 | ---- | M] (Etron Technology Inc) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\EtronXHCI.sys -- (EtronXHCI)
DRV:64bit: - [2011.03.07 11:22:00 | 000,040,832 | ---- | M] (Etron Technology Inc) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\EtronHub3.sys -- (EtronHub3)
DRV:64bit: - [2011.01.10 18:16:08 | 000,021,104 | ---- | M] () [Kernel | System | Running] -- C:\Windows\SysNative\drivers\AppleCharger.sys -- (AppleCharger)
DRV:64bit: - [2010.12.21 07:55:02 | 000,172,104 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sscdmdm.sys -- (sscdmdm)
DRV:64bit: - [2010.12.21 07:55:02 | 000,136,264 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sscdbus.sys -- (sscdbus)
DRV:64bit: - [2010.12.21 07:55:02 | 000,036,328 | ---- | M] (Google Inc) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssadadb.sys -- (androidusb)
DRV:64bit: - [2010.12.21 07:55:02 | 000,019,016 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sscdmdfl.sys -- (sscdmdfl)
DRV:64bit: - [2010.11.21 05:24:43 | 000,020,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV:64bit: - [2010.11.21 05:24:33 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:64bit: - [2010.11.21 05:23:48 | 000,117,248 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tsusbhub.sys -- (tsusbhub)
DRV:64bit: - [2010.11.21 05:23:48 | 000,088,960 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Synth3dVsc.sys -- (Synth3dVsc)
DRV:64bit: - [2010.11.21 05:23:48 | 000,071,168 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\dmvsc.sys -- (dmvsc)
DRV:64bit: - [2010.11.21 05:23:48 | 000,034,816 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\terminpt.sys -- (terminpt)
DRV:64bit: - [2010.11.21 05:23:47 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2010.11.21 05:23:47 | 000,031,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD)
DRV:64bit: - [2010.10.19 23:34:26 | 000,056,344 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (MEIx64)
DRV:64bit: - [2010.01.06 05:23:18 | 001,847,296 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\athurx.sys -- (athur)
DRV:64bit: - [2009.10.08 13:59:34 | 000,044,624 | ---- | M] (Native Instruments GmbH) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\a2djavs_x64.sys -- (a2djavs_x64)
DRV:64bit: - [2009.10.08 13:59:31 | 000,300,112 | ---- | M] (Native Instruments GmbH) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\a2djusb_x64.sys -- (a2djusb_x64)
DRV:64bit: - [2009.07.14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009.07.14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009.07.14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009.06.10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009.06.10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009.06.10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009.06.10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:64bit: - [2009.06.02 01:00:00 | 000,027,632 | ---- | M] (Sonic Solutions) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\SaibVdAd64.sys -- (SaibVdAd64)
DRV:64bit: - [2009.06.02 01:00:00 | 000,027,120 | ---- | M] (Sonic Solutions) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\Sahdad64.sys -- (Sahdad64)
DRV:64bit: - [2009.06.02 01:00:00 | 000,019,952 | ---- | M] (Sonic Solutions) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\Saibad64.sys -- (Saibad64)
DRV:64bit: - [2009.04.29 16:28:30 | 000,030,208 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\KMWDFILTER.sys -- (KMWDFILTER)
DRV:64bit: - [2009.03.18 17:35:42 | 000,033,856 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hamachi.sys -- (hamachi)
DRV:64bit: - [2007.11.22 14:48:46 | 010,733,184 | ---- | M] (Sonix Co. Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\snp325.sys -- (SNP325)
DRV:64bit: - [2006.10.16 10:35:24 | 000,867,712 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\phc710.sys -- (phc710)
DRV - [2012.09.28 16:54:22 | 000,025,640 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Running] -- C:\Windows\gdrv.sys -- (gdrv)
DRV - [2012.09.28 14:48:06 | 002,084,000 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.1.0.28\Definitions\VirusDefs\20120927.034\ex64.sys -- (NAVEX15)
DRV - [2012.09.28 14:48:06 | 000,126,112 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.1.0.28\Definitions\VirusDefs\20120927.034\eng64.sys -- (NAVENG)
DRV - [2012.09.12 12:21:57 | 000,138,912 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys -- (EraserUtilRebootDrv)
DRV - [2012.09.01 02:27:24 | 000,513,184 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.1.0.28\Definitions\IPSDefs\20120927.001\IDSviA64.sys -- (IDSVia64)
DRV - [2012.09.01 00:09:13 | 001,385,120 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.1.0.28\Definitions\BASHDefs\20120919.001\BHDrvx64.sys -- (BHDrvx64)
DRV - [2012.08.21 18:25:33 | 000,484,512 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys -- (eeCtrl)
DRV - [2012.06.06 22:49:42 | 000,030,528 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\GVTDrv64.sys -- (GVTDrv64)
DRV - [2012.06.06 20:31:44 | 000,025,640 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\etdrv.sys -- (etdrv)
DRV - [2009.07.14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default Download Directory = C:\Users\Marc\Desktop
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = DE E0 DE 9C 61 8C CD 01  [binary data]
IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&form=SPLBR1&pc=SPLH
IE - HKCU\..\SearchScopes\{0647B9BC-2C83-41bb-823F-E8789C72E908}: "URL" = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=chr-devicevm&type=IEBDSV
IE - HKCU\..\SearchScopes\{AFBCB7E0-F91A-4951-9F31-58FEE57A25C4}: "URL" = hxxp://int.search-results.com/web?q={SEARCHTERMS}&o=15527&l=dis&prt=NIS&chn=retail&geo=DE&ver=18
IE - HKCU\..\SearchScopes\{F5CC370D-0E53-4eea-A9C4-65DB5D120CAC}: "URL" = hxxp://www.google.com/cse?cx=partner-pub-3794288947762788%3A7941509802&ie=UTF-8&q=&sa=Search&siteurl=www.google.com%2Fcse%2Fhome%3Fcx%3Dpartner-pub-3794288947762788%3A7941509802&q={searchTerms}
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local;127.0.0.1:9421;<local>
 
========== FireFox ==========
 
FF - prefs.js..browser.startup.homepage: "hxxp://www.wisedock.de/m.php?id=2332406674768a7e760877fb50ef6c1161c7"
FF - prefs.js..extensions.enabledAddons: amznUWL2@amazon.com:1.10
FF - prefs.js..extensions.enabledAddons: de-DE@dictionaries.addons.mozilla.org:2.0.2
FF - prefs.js..extensions.enabledAddons: ich@maltegoetz.de:1.4.3
FF - prefs.js..extensions.enabledAddons: youtube2mp3@mondayx.de:1.2.3
FF - prefs.js..extensions.enabledAddons: {1018e4d6-728f-4b20-ad56-37578a4de76b}:4.2.1
FF - prefs.js..extensions.enabledAddons: {b9db16a4-6edc-47ec-a1f4-b86292ed211d}:4.9.10
FF - prefs.js..extensions.enabledAddons: {DDC359D1-844A-42a7-9AA1-88A850A938A8}:2.0.15
FF - prefs.js..extensions.enabledAddons: {ef62e1ce-d2a4-4cdd-b7ec-92b120366b66}:2.7.6
FF - prefs.js..extensions.enabledAddons: {BBDA0591-3099-440a-AA10-41764D9DB4DB}:11.1.1.5 - 1
FF - prefs.js..extensions.enabledAddons: {2D3F3651-74B9-4795-BDEC-6DA2F431CB62}:2012.7.5.2
FF - user.js - File not found
 
FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_4_402_278.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~2\MICROS~4\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF:64bit: - HKLM\Software\MozillaPlugins\adobe.com/AdobeAAMDetect: C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll (Adobe Systems)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_4_402_278.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=:  File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@esn.me/esnsonar,version=0.70.4: C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch,version=1.122.0: C:\Program Files (x86)\Battlelog Web Plugins\1.122.0\npesnlaunch.dll (ESN Social Software AB)
FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch,version=1.132.0: C:\Program Files (x86)\Battlelog Web Plugins\1.132.0\npesnlaunch.dll (ESN Social Software AB)
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=1.6.0_35: C:\Windows\SysWOW64\npdeployJava1.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~3\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~3\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8117.0416: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@ngm.nexoneu.com/NxGame: C:\ProgramData\NexonEU\NGM\npNxGameeu.dll (Nexon)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.1: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\Adobe Acrobat: C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll File not found
FF - HKLM\Software\MozillaPlugins\adobe.com/AdobeAAMDetect: C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems)
FF - HKCU\Software\MozillaPlugins\@doubletwist.com/NPPodcast: C:\Program Files (x86)\Common Files\doubleTwist\NPPodcast.dll (doubleTwist Corporation)
FF - HKCU\Software\MozillaPlugins\@Skype Limited.com/Facebook Video Calling Plugin: C:\Users\Marc\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF - HKCU\Software\MozillaPlugins\@talk.google.com/GoogleTalkPlugin: C:\Users\Marc\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF - HKCU\Software\MozillaPlugins\@talk.google.com/O3DPlugin: C:\Users\Marc\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll ()
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Marc\AppData\Local\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Marc\AppData\Local\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\amazon.com/AmazonMP3DownloaderPlugin: C:\Program Files (x86)\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin.dll (Amazon.com, Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.1.0.28\coFFPlgn\ [2012.09.28 16:53:53 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{BBDA0591-3099-440a-AA10-41764D9DB4DB}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.1.0.28\IPSFFPlgn\ [2012.01.14 16:26:35 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\web2pdfextension@web2pdf.adobedotcom: C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn [2012.08.16 13:38:34 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 15.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012.09.25 17:29:05 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 15.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\mail@gutscheinrausch.de: C:\Users\Marc\AppData\Roaming\Mozilla\Firefox\Profiles\qmuapb03.default\extensions\mail@gutscheinrausch.de
 
[2012.09.25 17:29:33 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Marc\AppData\Roaming\mozilla\Extensions
[2012.09.25 17:37:39 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Marc\AppData\Roaming\mozilla\Firefox\Profiles\r28uct31.default\extensions
[2012.09.25 17:37:36 | 000,000,000 | ---D | M] (Flagfox) -- C:\Users\Marc\AppData\Roaming\mozilla\Firefox\Profiles\r28uct31.default\extensions\{1018e4d6-728f-4b20-ad56-37578a4de76b}
[2012.09.25 17:37:36 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Users\Marc\AppData\Roaming\mozilla\Firefox\Profiles\r28uct31.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
[2012.09.25 17:37:39 | 000,000,000 | ---D | M] (FoxLingo) -- C:\Users\Marc\AppData\Roaming\mozilla\Firefox\Profiles\r28uct31.default\extensions\{ef62e1ce-d2a4-4cdd-b7ec-92b120366b66}
[2012.09.25 17:37:36 | 000,000,000 | ---D | M] (German Dictionary) -- C:\Users\Marc\AppData\Roaming\mozilla\Firefox\Profiles\r28uct31.default\extensions\de-DE@dictionaries.addons.mozilla.org
[2012.09.25 17:37:36 | 000,000,000 | ---D | M] (ProxTube - Unblock YouTube) -- C:\Users\Marc\AppData\Roaming\mozilla\Firefox\Profiles\r28uct31.default\extensions\ich@maltegoetz.de
[2012.09.25 17:37:36 | 000,243,287 | ---- | M] () (No name found) -- C:\Users\Marc\AppData\Roaming\mozilla\firefox\profiles\r28uct31.default\extensions\amznUWL2@amazon.com.xpi
[2012.09.25 17:37:36 | 000,011,510 | ---- | M] () (No name found) -- C:\Users\Marc\AppData\Roaming\mozilla\firefox\profiles\r28uct31.default\extensions\youtube2mp3@mondayx.de.xpi
[2012.09.25 17:37:36 | 000,698,867 | ---- | M] () (No name found) -- C:\Users\Marc\AppData\Roaming\mozilla\firefox\profiles\r28uct31.default\extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi
[2012.09.25 17:29:05 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions
[2012.09.28 16:53:53 | 000,000,000 | ---D | M] (Norton Toolbar) -- C:\PROGRAMDATA\NORTON\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.1.0.28\COFFPLGN
[2012.01.14 16:26:35 | 000,000,000 | ---D | M] (Norton Vulnerability Protection) -- C:\PROGRAMDATA\NORTON\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.1.0.28\IPSFFPLGN
[2012.09.06 03:26:03 | 000,266,720 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
[2012.09.06 04:07:37 | 000,001,392 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom-de.xml
[2012.09.06 04:07:37 | 000,002,465 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml
[2012.09.06 04:07:37 | 000,001,153 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-de.xml
[2012.09.06 04:07:37 | 000,006,805 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\leo_ende_de.xml
[2012.09.06 04:07:37 | 000,001,178 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-de.xml
[2012.09.06 04:07:37 | 000,001,105 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml
 
O1 HOSTS File: ([2012.07.10 17:21:32 | 000,003,225 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 3dns.adobe.com
O1 - Hosts: 127.0.0.1 3dns-1.adobe.com
O1 - Hosts: 127.0.0.1 3dns-2.adobe.com
O1 - Hosts: 127.0.0.1 3dns-3.adobe.com
O1 - Hosts: 127.0.0.1 3dns-4.adobe.com
O1 - Hosts: 127.0.0.1 activate.adobe.com
O1 - Hosts: 127.0.0.1 activate-sea.adobe.com
O1 - Hosts: 127.0.0.1 activate-sea.adobe.com
O1 - Hosts: 127.0.0.1 activate-sjc0.adobe.com
O1 - Hosts: 127.0.0.1 activate.wip.adobe.com
O1 - Hosts: 127.0.0.1 activate.wip1.adobe.com
O1 - Hosts: 127.0.0.1 activate.wip2.adobe.com
O1 - Hosts: 127.0.0.1 activate.wip3.adobe.com
O1 - Hosts: 127.0.0.1 activate.wip4.adobe.com
O1 - Hosts: 127.0.0.1 adobe-dns.adobe.com
O1 - Hosts: 127.0.0.1 adobe-dns-1.adobe.com
O1 - Hosts: 127.0.0.1 adobe-dns-2.adobe.com
O1 - Hosts: 127.0.0.1 adobe-dns-3.adobe.com
O1 - Hosts: 127.0.0.1 adobe-dns-4.adobe.com
O1 - Hosts: 127.0.0.1 crl.verisign.net
O1 - Hosts: 127.0.0.1 CRL.VERISIGN.NET
O1 - Hosts: 127.0.0.1 ood.opsource.net
O1 - Hosts: 127.0.0.1 209-34-83-73.ood.opsource.net
O1 - Hosts: 127.0.0.1 practivate.adobe
O1 - Hosts: 127.0.0.1 practivate.adobe
O1 - Hosts: 57 more lines...
O2:64bit: - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Programme\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
O2:64bit: - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Programme\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
O2 - BHO: (Norton Identity Protection) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\19.8.0.14\coIEPlg.dll (Symantec Corporation)
O2 - BHO: (PodcastBHO Class) - {65134FDF-F8A5-4B3D-91D9-CDF273CFD578} - C:\Program Files (x86)\Common Files\doubleTwist\IEPodcastPlugin.dll (doubleTwist Corporation)
O2 - BHO: (Norton Vulnerability Protection) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\19.8.0.14\IPS\IPSBHO.DLL (Symantec Corporation)
O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~3\MICROS~2\Office14\GROOVEEX.DLL (Microsoft Corporation)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (Adobe PDF Conversion Toolbar Helper) - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~3\MICROS~2\Office14\URLREDIR.DLL (Microsoft Corporation)
O2 - BHO: (SmartSelect Class) - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O3 - HKLM\..\Toolbar: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O3 - HKLM\..\Toolbar: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\19.8.0.14\coIEPlg.dll (Symantec Corporation)
O3 - HKCU\..\Toolbar\WebBrowser: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O3 - HKCU\..\Toolbar\WebBrowser: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\19.8.0.14\coIEPlg.dll (Symantec Corporation)
O4:64bit: - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated)
O4:64bit: - HKLM..\Run: [IntelliPoint] C:\Program Files\Microsoft IntelliPoint\ipoint.exe (Microsoft Corporation)
O4:64bit: - HKLM..\Run: [itype] C:\Program Files\Microsoft IntelliType Pro\itype.exe (Microsoft Corporation)
O4:64bit: - HKLM..\Run: [phc710] C:\Windows\vphc710.exe (Sonix)
O4:64bit: - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
O4:64bit: - HKLM..\Run: [snp325] C:\Windows\vsnp325.exe ()
O4 - HKLM..\Run: []  File not found
O4 - HKLM..\Run: [Acrobat Assistant 8.0] C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe (Adobe Systems Inc.)
O4 - HKLM..\Run: [Adobe Acrobat Speed Launcher] C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [AdobeCS6ServiceManager] C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [ControlCenter3] C:\Program Files (x86)\Brother\ControlCenter3\brctrcen.exe (Brother Industries, Ltd.)
O4 - HKLM..\Run: [FixCamera] C:\Windows\FixCamera.exe ()
O4 - HKLM..\Run: [LifeCam] C:\Program Files (x86)\Microsoft LifeCam\LifeExp.exe (Microsoft Corporation)
O4 - HKLM..\Run: [LogMeIn Hamachi Ui] C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe (LogMeIn Inc.)
O4 - HKLM..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [tsnp325] C:\Windows\tsnp325.exe ()
O4 - HKLM..\Run: [WinampAgent] C:\Program Files (x86)\Winamp\winampa.exe (Nullsoft, Inc.)
O4 - HKCU..\Run: [AdobeBridge]  File not found
O4 - HKCU..\Run: [DAEMON Tools Lite] C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
O4 - HKCU..\Run: [Facebook Update] C:\Users\Marc\AppData\Local\Facebook\Update\FacebookUpdate.exe (Facebook Inc.)
O4 - HKLM..\RunOnce: [DES2] C:\Program Files (x86)\GIGABYTE\EnergySaver2\des2.exe ()
O4 - HKLM..\RunOnce: [SDBOK] C:\Program Files (x86)\GIGABYTE\smart6\dbios\run.exe ()
O4 - Startup: C:\Users\Marc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk = C:\Users\Marc\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
O4 - Startup: C:\Users\Marc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Facebook Desktop.lnk = C:\Program Files (x86)\Facebook Desktop\Facebook Desktop.exe ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutorun = 0
O8:64bit: - Extra context menu item: An OneNote s&enden - C:\Programme\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O8:64bit: - Extra context menu item: An vorhandene PDF-Datei anfügen - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8:64bit: - Extra context menu item: In Adobe PDF konvertieren - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8:64bit: - Extra context menu item: Linkziel an vorhandene PDF-Datei anhängen - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8:64bit: - Extra context menu item: Linkziel in Adobe PDF konvertieren - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8:64bit: - Extra context menu item: Nach Microsoft &Excel exportieren - res://C:\PROGRA~2\MICROS~1\OFFICE11\EXCEL.EXE/3000 File not found
O8:64bit: - Extra context menu item: Nach Microsoft E&xcel exportieren - C:\Programme\Microsoft Office\Office14\EXCEL.EXE (Microsoft Corporation)
O8 - Extra context menu item: An OneNote s&enden - C:\Programme\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O8 - Extra context menu item: An vorhandene PDF-Datei anfügen - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: In Adobe PDF konvertieren - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Linkziel an vorhandene PDF-Datei anhängen - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Linkziel in Adobe PDF konvertieren - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Nach Microsoft &Excel exportieren - res://C:\PROGRA~2\MICROS~1\OFFICE11\EXCEL.EXE/3000 File not found
O8 - Extra context menu item: Nach Microsoft E&xcel exportieren - C:\Programme\Microsoft Office\Office14\EXCEL.EXE (Microsoft Corporation)
O9:64bit: - Extra Button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programme\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9:64bit: - Extra 'Tools' menuitem : An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programme\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9:64bit: - Extra Button: Verknüpfte &OneNote-Notizen - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Programme\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9:64bit: - Extra 'Tools' menuitem : Verknüpfte &OneNote-Notizen - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Programme\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra Button: ICQ7.6 - {7644E42D-B096-457F-8B5B-901238FC81AE} - C:\Program Files (x86)\ICQ7.6\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : ICQ7.6 - {7644E42D-B096-457F-8B5B-901238FC81AE} - C:\Program Files (x86)\ICQ7.6\ICQ.exe (ICQ, LLC.)
O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000007 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O16:64bit: - DPF: {CAFEEFAC-0016-0000-0027-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_27-windows-i586.cab (Java Plug-in 1.6.0_27)
O16:64bit: - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_27-windows-i586.cab (Java Plug-in 1.6.0_27)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_35-windows-i586.cab (Java Plug-in 1.6.0_35)
O16 - DPF: {C8BC46C7-921C-4102-B67D-F1F7E65FB0BE} https://battlefield.play4free.com/static/updater/BP4FUpdater_1.0.53.2.cab (Battlefield Play4Free Updater)
O16 - DPF: {CAFEEFAC-0016-0000-0027-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_27-windows-i586.cab (Java Plug-in 1.6.0_27)
O16 - DPF: {CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_35-windows-i586.cab (Java Plug-in 1.6.0_35)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_35-windows-i586.cab (Java Plug-in 1.6.0_35)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{10F71570-F32B-4796-9EAE-8ECDAD908688}: DhcpNameServer = 192.168.2.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{654CC677-78AE-43FA-9C8C-CEEF8BB3CA38}: DhcpNameServer = 192.168.2.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{BF4A41BF-FABF-4D9B-BE1F-E1C2EC2E212D}: DhcpNameServer = 192.168.2.1
O18:64bit: - Protocol\Handler\msdaipp - No CLSID value found
O18:64bit: - Protocol\Handler\msdaipp\0x00000001 - No CLSID value found
O18:64bit: - Protocol\Handler\msdaipp\oledb - No CLSID value found
O18:64bit: - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Programme\Common Files\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\skype4com - No CLSID value found
O18:64bit: - Protocol\Handler\skype-ie-addon-data - No CLSID value found
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\ms-help - No CLSID value found
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~3\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O18:64bit: - Protocol\Filter\text/xml {807573E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O28:64bit: - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Programme\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~3\MICROS~2\Office14\GROOVEEX.DLL (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{f192303a-c4e4-11e0-a109-1c6f65d978ed}\Shell - "" = AutoRun
O33 - MountPoints2\{f192303a-c4e4-11e0-a109-1c6f65d978ed}\Shell\AutoRun\command - "" = G:\setup.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
 
ActiveX:64bit: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun)
ActiveX:64bit: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
ActiveX:64bit: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX:64bit: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX:64bit: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX:64bit: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX:64bit: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX:64bit: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX:64bit: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX:64bit: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX:64bit: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX:64bit: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX:64bit: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX:64bit: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX:64bit: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\System32\ie4uinit.exe -BaseSettings
ActiveX:64bit: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install
ActiveX:64bit: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX:64bit: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX:64bit: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX:64bit: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX:64bit: {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4} - .NET Framework
ActiveX:64bit: {FEBEF00C-046D-438D-8A88-BF94A6C9E703} - .NET Framework
ActiveX:64bit: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP
ActiveX:64bit: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\System32\ie4uinit.exe -UserIconConfig
ActiveX:64bit: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Microsoft VM
ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
ActiveX: {25FFAAD0-F4A3-4164-95FF-4461E9F35D51} - .NET Framework
ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles(x86)%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX: {73FA19D0-2D75-11D2-995D-00C04F98BBC9} - Webordner
ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\SysWOW64\ie4uinit.exe -BaseSettings
ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\SysWOW64\Rundll32.exe C:\Windows\SysWOW64\mscories.dll,Install
ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX: {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4} - .NET Framework
ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP
ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\SysWOW64\ie4uinit.exe -UserIconConfig
ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\SysWOW64\rundll32.exe" "C:\Windows\SysWOW64\iedkcs32.dll",BrandIEActiveSetup SIGNUP
 
NetSvcs:64bit: AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)
 
MsConfig:64bit - StartUpReg: AdobeCS5.5ServiceManager - hkey= - key= -  File not found
MsConfig:64bit - StartUpReg: AdobeCS5ServiceManager - hkey= - key= -  File not found
MsConfig:64bit - StartUpReg: Akamai NetSession Interface - hkey= - key= - C:\Users\Marc\AppData\Local\Akamai\netsession_win.exe (Akamai Technologies, Inc)
MsConfig:64bit - StartUpReg: APSDaemon - hkey= - key= - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
MsConfig:64bit - StartUpReg: CPMonitor - hkey= - key= - C:\Program Files (x86)\Roxio 2010\5.0\CPMonitor.exe ()
MsConfig:64bit - StartUpReg: Desktop Disc Tool - hkey= - key= - C:\Program Files (x86)\Roxio 2010\Roxio Burn\RoxioBurnLauncher.exe ()
MsConfig:64bit - StartUpReg: KiesPDLR - hkey= - key= - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe ()
MsConfig:64bit - StartUpReg: KPeerNexonEU - hkey= - key= - C:\Nexon\NEXON_EU_Downloader\nxEULauncher.exe (NEXON Inc.)
MsConfig:64bit - StartUpReg: LogMeIn Hamachi Ui - hkey= - key= - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe (LogMeIn Inc.)
MsConfig:64bit - StartUpReg: QuickTime Task - hkey= - key= - C:\Program Files (x86)\QuickTime\QTTask.exe (Apple Inc.)
MsConfig:64bit - StartUpReg: STCAgent - hkey= - key= -  File not found
MsConfig:64bit - StartUpReg: ZyngaGamesAgent - hkey= - key= -  File not found
MsConfig:64bit - State: "bootini" - Reg Error: Key error.
MsConfig:64bit - State: "startup" - Reg Error: Key error.
 
CREATERESTOREPOINT
Restore point Set: OTL Restore Point
 
========== Files/Folders - Created Within 30 Days ==========
 
[2012.09.28 15:48:56 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Marc\Desktop\OTL.exe
[2012.09.26 12:03:26 | 000,245,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\OxpsConverter.exe
[2012.09.25 17:29:07 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Maintenance Service
[2012.09.25 17:29:05 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox
[2012.09.22 12:25:38 | 000,096,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll
[2012.09.22 12:25:38 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll
[2012.09.22 12:25:37 | 002,312,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll
[2012.09.22 12:25:37 | 001,494,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl
[2012.09.22 12:25:37 | 001,427,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl
[2012.09.22 12:25:37 | 000,248,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll
[2012.09.22 12:25:37 | 000,237,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\url.dll
[2012.09.22 12:25:37 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\url.dll
[2012.09.22 12:25:37 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll
[2012.09.22 12:25:37 | 000,173,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieUnatt.exe
[2012.09.22 12:25:37 | 000,142,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe
[2012.09.22 12:25:36 | 000,816,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll
[2012.09.22 12:25:36 | 000,729,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll
[2012.09.22 12:25:36 | 000,717,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll
[2012.09.22 12:25:36 | 000,599,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vbscript.dll
[2012.09.21 18:17:28 | 000,000,000 | -H-D | C] -- C:\ProgramData\{30FA7941-4170-4C83-A9A8-FDF01C431704}
[2012.09.20 20:07:52 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
[2012.09.20 20:07:49 | 000,033,240 | ---- | C] (GEAR Software Inc.) -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys
[2012.09.20 20:07:12 | 000,000,000 | ---D | C] -- C:\Program Files\iTunes
[2012.09.20 20:07:12 | 000,000,000 | ---D | C] -- C:\Program Files\iPod
[2012.09.20 20:07:12 | 000,000,000 | ---D | C] -- C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
[2012.09.18 20:59:06 | 000,696,240 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe
[2012.09.18 14:20:29 | 000,073,136 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
[2012.09.17 19:15:57 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\edcastASIO
[2012.09.17 18:57:41 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\edcast
[2012.09.16 21:42:37 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\uTorrent
[2012.09.16 21:41:18 | 000,000,000 | ---D | C] -- C:\Users\Marc\AppData\Roaming\uTorrent
[2012.09.14 15:09:55 | 000,000,000 | ---D | C] -- C:\Users\Marc\Documents\Amazon MP3
[2012.09.14 15:07:23 | 026,228,072 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvoglv64.dll
[2012.09.14 15:07:23 | 025,256,296 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcompiler.dll
[2012.09.14 15:07:23 | 019,828,584 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvoglv32.dll
[2012.09.14 15:07:23 | 017,559,912 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcompiler.dll
[2012.09.14 15:07:23 | 009,066,344 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcuda.dll
[2012.09.14 15:07:23 | 007,626,088 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcuda.dll
[2012.09.14 15:07:23 | 007,397,736 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvopencl.dll
[2012.09.14 15:07:23 | 006,109,032 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvopencl.dll
[2012.09.14 15:07:23 | 002,745,192 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcuvid.dll
[2012.09.14 15:07:23 | 002,573,672 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcuvid.dll
[2012.09.14 15:07:23 | 002,216,808 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcuvenc.dll
[2012.09.14 15:07:23 | 001,866,088 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcuvenc.dll
[2012.09.14 15:07:23 | 001,482,600 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvdispgenco64.dll
[2012.09.14 15:07:23 | 000,971,624 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvumdshimx.dll
[2012.09.14 15:07:23 | 000,830,312 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvumdshim.dll
[2012.09.14 15:07:23 | 000,247,144 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvinitx.dll
[2012.09.14 15:07:23 | 000,202,600 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvinit.dll
[2012.09.14 15:07:23 | 000,189,288 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\drivers\nvhda64v.sys
[2012.09.14 15:07:23 | 000,031,080 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvhdap64.dll
[2012.09.12 18:39:52 | 000,041,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\RNDISMP.sys
[2012.09.12 18:39:51 | 000,574,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10level9.dll
[2012.09.12 18:39:50 | 000,376,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\netio.sys
[2012.09.12 18:39:49 | 000,288,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\FWPKCLNT.SYS
[2012.09.11 12:55:05 | 000,000,000 | -HSD | C] -- C:\found.004
[2012.09.08 13:12:57 | 000,477,168 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\npdeployJava1.dll
[2012.09.08 13:12:57 | 000,157,680 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaws.exe
[2012.09.08 13:12:57 | 000,149,488 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaw.exe
[2012.09.08 13:12:57 | 000,149,488 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\java.exe
[2012.09.08 10:53:28 | 001,579,520 | ---- | C] (Atheros Communications, Inc.) -- C:\Windows\SysNative\drivers\athrx.sys
[2012.09.07 16:56:48 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\simfy
[2012.09.07 16:56:48 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\simfy
[2012.09.06 20:52:19 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client
[2012.09.06 20:52:04 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\TeamSpeak 3 Client
[2012.09.04 20:57:44 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XSplit
[2012.09.04 20:57:44 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\SplitMediaLabs
[2012.09.03 15:54:29 | 000,000,000 | ---D | C] -- C:\Users\Marc\AppData\Local\CANON_INC
[2012.09.03 15:50:25 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities
[2012.09.03 15:50:24 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Canon
[2012.09.03 15:49:18 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Canon
[2012.09.03 14:47:53 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EOS Camera Movie Record
[2012.09.03 14:47:52 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\eos_movrec
[2012.09.02 21:50:32 | 000,000,000 | ---D | C] -- C:\Users\Marc\AppData\Local\Purplizer
[2012.09.02 21:16:09 | 000,000,000 | ---D | C] -- C:\Users\Marc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Overwolf
[2012.09.02 21:15:45 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Overwolf
[2012.09.02 21:15:45 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Overwolf
[2012.09.02 20:59:04 | 000,000,000 | ---D | C] -- C:\Users\Marc\AppData\Local\Overwolf
[2012.09.02 12:23:40 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
[2012.09.02 12:23:40 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\LogMeIn Hamachi
[6 C:\Users\Marc\Desktop\*.tmp files -> C:\Users\Marc\Desktop\*.tmp -> ]
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
 
========== Files - Modified Within 30 Days ==========
 
[2012.09.28 17:02:49 | 000,016,768 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012.09.28 17:02:49 | 000,016,768 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012.09.28 16:58:00 | 000,001,116 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1771800032-78958699-3666061034-1000UA.job
[2012.09.28 16:56:13 | 000,001,068 | ---- | M] () -- C:\Users\Marc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Facebook Desktop.lnk
[2012.09.28 16:54:22 | 000,025,640 | ---- | M] (Windows (R) Server 2003 DDK provider) -- C:\Windows\gdrv.sys
[2012.09.28 16:54:07 | 000,001,102 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2012.09.28 16:53:25 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012.09.28 16:53:19 | 4277,264,383 | -HS- | M] () -- C:\hiberfil.sys
[2012.09.28 16:51:38 | 006,034,724 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat
[2012.09.28 16:51:38 | 002,373,056 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat
[2012.09.28 16:51:38 | 000,768,884 | ---- | M] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2012.09.28 16:51:38 | 000,655,070 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2012.09.28 16:51:38 | 000,121,942 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2012.09.28 16:51:30 | 000,768,884 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2012.09.28 16:40:00 | 000,001,106 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2012.09.28 16:19:00 | 000,000,884 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2012.09.28 15:49:15 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Marc\Desktop\OTL.exe
[2012.09.28 15:33:00 | 000,001,134 | ---- | M] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-1771800032-78958699-3666061034-1000UA.job
[2012.09.28 15:33:00 | 000,001,112 | ---- | M] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-1771800032-78958699-3666061034-1000Core.job
[2012.09.27 21:58:10 | 000,001,064 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1771800032-78958699-3666061034-1000Core.job
[2012.09.24 19:54:39 | 000,000,132 | ---- | M] () -- C:\Users\Marc\AppData\Roaming\Adobe CS6-PNG-Format - Voreinstellungen
[2012.09.23 16:04:06 | 438,312,960 | ---- | M] () -- C:\Users\Marc\Desktop\Auftritt Blue Diamonds 23-09-2012.MTS
[2012.09.22 21:47:45 | 000,281,520 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.xtr
[2012.09.22 21:47:45 | 000,281,520 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.exe
[2012.09.22 21:47:30 | 000,280,904 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.ex0
[2012.09.21 15:22:49 | 000,696,240 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe
[2012.09.21 15:22:49 | 000,073,136 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
[2012.09.20 20:07:53 | 000,001,792 | ---- | M] () -- C:\Users\Public\Desktop\iTunes.lnk
[2012.09.18 18:17:46 | 000,001,611 | ---- | M] () -- C:\Users\Marc\AppData\Roaming\buttrc
[2012.09.18 17:51:25 | 000,001,040 | ---- | M] () -- C:\Users\Marc\Desktop\EdcastStandalone.lnk
[2012.09.16 20:46:30 | 855,678,175 | ---- | M] () -- C:\Windows\MEMORY.DMP
[2012.09.09 19:57:23 | 000,007,660 | ---- | M] () -- C:\Users\Marc\AppData\Local\Resmon.ResmonCfg
[2012.09.08 13:12:30 | 000,477,168 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\npdeployJava1.dll
[2012.09.08 13:12:30 | 000,473,072 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\deployJava1.dll
[2012.09.08 13:12:30 | 000,157,680 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaws.exe
[2012.09.08 13:12:30 | 000,149,488 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaw.exe
[2012.09.08 13:12:30 | 000,149,488 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\java.exe
[2012.09.06 20:52:21 | 000,001,171 | ---- | M] () -- C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk
[2012.09.03 15:50:26 | 000,001,076 | ---- | M] () -- C:\Users\Public\Desktop\EOS Utility.lnk
[2012.08.31 16:38:55 | 000,344,187 | ---- | M] () -- C:\Users\Marc\Desktop\4437215_t201209047.pdf
[2012.08.30 21:14:00 | 026,228,072 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvoglv64.dll
[2012.08.30 21:14:00 | 025,256,296 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcompiler.dll
[2012.08.30 21:14:00 | 019,828,584 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvoglv32.dll
[2012.08.30 21:14:00 | 018,229,096 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvd3dumx.dll
[2012.08.30 21:14:00 | 017,559,912 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcompiler.dll
[2012.08.30 21:14:00 | 015,291,752 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvd3dum.dll
[2012.08.30 21:14:00 | 014,879,080 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvwgf2umx.dll
[2012.08.30 21:14:00 | 012,465,512 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvwgf2um.dll
[2012.08.30 21:14:00 | 009,066,344 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcuda.dll
[2012.08.30 21:14:00 | 007,626,088 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcuda.dll
[2012.08.30 21:14:00 | 007,397,736 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvopencl.dll
[2012.08.30 21:14:00 | 006,109,032 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvopencl.dll
[2012.08.30 21:14:00 | 002,745,192 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcuvid.dll
[2012.08.30 21:14:00 | 002,725,224 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvapi64.dll
[2012.08.30 21:14:00 | 002,573,672 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcuvid.dll
[2012.08.30 21:14:00 | 002,422,120 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvapi.dll
[2012.08.30 21:14:00 | 002,216,808 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcuvenc.dll
[2012.08.30 21:14:00 | 001,866,088 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcuvenc.dll
[2012.08.30 21:14:00 | 001,760,104 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvdispco64.dll
[2012.08.30 21:14:00 | 001,482,600 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvdispgenco64.dll
[2012.08.30 21:14:00 | 000,971,624 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvumdshimx.dll
[2012.08.30 21:14:00 | 000,830,312 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvumdshim.dll
[2012.08.30 21:14:00 | 000,247,144 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvinitx.dll
[2012.08.30 21:14:00 | 000,202,600 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvinit.dll
[2012.08.30 21:14:00 | 000,016,366 | ---- | M] () -- C:\Windows\SysNative\nvinfo.pb
[2012.08.30 18:18:05 | 002,557,800 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvsvcr.dll
[2012.08.30 18:18:05 | 000,118,120 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvmctray.dll
[2012.08.30 18:18:05 | 000,063,336 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvshext.dll
[2012.08.30 18:18:04 | 003,487,434 | ---- | M] () -- C:\Windows\SysNative\nvcoproc.bin
[2012.08.30 18:18:01 | 003,266,920 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvsvc64.dll
[2012.08.30 18:17:59 | 006,198,120 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcpl.dll
[2012.08.30 10:40:14 | 000,429,416 | ---- | M] () -- C:\Windows\SysWow64\nvStreaming.exe
[6 C:\Users\Marc\Desktop\*.tmp files -> C:\Users\Marc\Desktop\*.tmp -> ]
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
 
========== Files Created - No Company Name ==========
 
[2012.09.25 17:29:08 | 000,001,151 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
[2012.09.24 21:53:51 | 000,001,116 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1771800032-78958699-3666061034-1000UA.job
[2012.09.24 21:53:50 | 000,001,064 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1771800032-78958699-3666061034-1000Core.job
[2012.09.24 21:49:13 | 438,312,960 | ---- | C] () -- C:\Users\Marc\Desktop\Auftritt Blue Diamonds 23-09-2012.MTS
[2012.09.22 11:06:33 | 000,001,106 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Content Viewer.lnk
[2012.09.22 11:05:49 | 000,001,539 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Application Manager.lnk
[2012.09.20 20:07:53 | 000,001,792 | ---- | C] () -- C:\Users\Public\Desktop\iTunes.lnk
[2012.09.18 20:59:07 | 000,000,884 | ---- | C] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2012.09.17 19:15:48 | 000,001,040 | ---- | C] () -- C:\Users\Marc\Desktop\EdcastStandalone.lnk
[2012.09.06 20:52:21 | 000,001,171 | ---- | C] () -- C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk
[2012.09.06 20:48:10 | 855,678,175 | ---- | C] () -- C:\Windows\MEMORY.DMP
[2012.09.03 15:50:26 | 000,001,076 | ---- | C] () -- C:\Users\Public\Desktop\EOS Utility.lnk
[2012.08.31 16:38:54 | 000,344,187 | ---- | C] () -- C:\Users\Marc\Desktop\4437215_t201209047.pdf
[2012.08.30 10:40:14 | 000,429,416 | ---- | C] () -- C:\Windows\SysWow64\nvStreaming.exe
[2012.08.21 19:04:51 | 000,768,884 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2012.08.19 19:26:26 | 000,000,132 | ---- | C] () -- C:\Users\Marc\AppData\Roaming\Adobe CS6-PNG-Format - Voreinstellungen
[2012.08.11 21:09:57 | 000,020,480 | ---- | C] () -- C:\Windows\FixCamera.exe
[2012.08.11 21:09:50 | 000,835,584 | ---- | C] () -- C:\Windows\vsnp325.exe
[2012.08.11 21:09:50 | 000,270,336 | ---- | C] () -- C:\Windows\tsnp325.exe
[2012.08.11 21:09:50 | 000,015,498 | ---- | C] () -- C:\Windows\snp325.ini
[2012.08.11 21:09:49 | 000,147,456 | ---- | C] ( ) -- C:\Windows\SysWow64\rsnp325.dll
[2012.08.11 21:09:49 | 000,057,344 | ---- | C] ( ) -- C:\Windows\SysWow64\vsnp325.dll
[2012.08.11 21:09:49 | 000,053,248 | ---- | C] ( ) -- C:\Windows\SysWow64\csnp325.dll
[2012.06.07 03:45:28 | 000,007,660 | ---- | C] () -- C:\Users\Marc\AppData\Local\Resmon.ResmonCfg
[2012.03.23 19:45:05 | 000,005,632 | ---- | C] () -- C:\Users\Marc\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012.03.16 19:39:42 | 000,000,132 | ---- | C] () -- C:\Users\Marc\AppData\Roaming\Adobe AIFF Format CS5 Prefs
[2012.02.25 15:03:05 | 000,057,344 | ---- | C] () -- C:\Windows\SysWow64\ff_vfw.dll
[2012.02.12 18:06:18 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat
[2012.01.18 06:44:00 | 010,920,984 | ---- | C] () -- C:\Windows\SysWow64\LogiDPP.dll
[2012.01.18 06:44:00 | 000,336,408 | ---- | C] () -- C:\Windows\SysWow64\DevManagerCore.dll
[2012.01.18 06:44:00 | 000,104,472 | ---- | C] () -- C:\Windows\SysWow64\LogiDPPApp.exe
[2012.01.13 20:42:06 | 000,338,432 | ---- | C] () -- C:\Windows\SysWow64\sqlite36_engine.dll
[2011.12.30 15:12:37 | 000,000,032 | ---- | C] () -- C:\Users\Marc\.simfy
[2011.12.08 21:26:35 | 000,819,200 | ---- | C] () -- C:\Windows\SysWow64\xvidcore.dll
[2011.12.08 21:26:35 | 000,180,224 | ---- | C] () -- C:\Windows\SysWow64\xvidvfw.dll
[2011.10.28 20:29:00 | 000,001,611 | ---- | C] () -- C:\Users\Marc\AppData\Roaming\buttrc
[2011.10.09 18:59:15 | 000,120,200 | ---- | C] () -- C:\Windows\SysWow64\DLLDEV32i.dll
[2011.09.01 19:10:44 | 000,000,425 | ---- | C] () -- C:\Windows\BRWMARK.INI
[2011.09.01 19:10:44 | 000,000,027 | ---- | C] () -- C:\Windows\BRPP2KA.INI
[2011.07.17 18:40:46 | 000,000,132 | ---- | C] () -- C:\Users\Marc\AppData\Roaming\Adobe PNG Format CS5 Prefs
[2011.07.06 19:57:48 | 000,030,528 | ---- | C] () -- C:\Windows\GVTDrv64.sys
[2011.07.06 19:49:06 | 000,008,192 | ---- | C] () -- C:\Windows\SysWow64\drivers\IntelMEFWVer.dll
[2011.07.06 19:38:49 | 000,000,010 | ---- | C] () -- C:\Windows\GSetup.ini
[2011.05.24 12:00:44 | 000,001,057 | ---- | C] () -- C:\Users\Marc\AppData\Roaming\vso_ts_preview.xml
[2011.04.27 14:19:32 | 000,030,568 | ---- | C] () -- C:\Windows\MusiccityDownload.exe
[2011.04.27 14:19:30 | 000,974,848 | ---- | C] () -- C:\Windows\SysWow64\cis-2.4.dll
[2011.04.27 14:19:30 | 000,081,920 | ---- | C] () -- C:\Windows\SysWow64\issacapi_bs-2.3.dll
[2011.04.27 14:19:30 | 000,065,536 | ---- | C] () -- C:\Windows\SysWow64\issacapi_pe-2.3.dll
[2011.04.27 14:19:30 | 000,057,344 | ---- | C] () -- C:\Windows\SysWow64\issacapi_se-2.3.dll
[2011.04.21 16:05:03 | 000,000,000 | ---- | C] () -- C:\Windows\SysWow64\Access.dat
[2011.04.08 15:51:13 | 000,281,520 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.exe
[2011.04.08 15:51:05 | 000,076,888 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrA.exe
[2011.04.07 21:11:10 | 000,000,400 | ---- | C] () -- C:\Windows\ODBC.INI
[2011.04.07 20:45:03 | 000,015,488 | ---- | C] () -- C:\Windows\phc710.ini
 
========== ZeroAccess Check ==========
 
[2009.07.14 06:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
 
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
 
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2012.06.09 07:43:10 | 014,172,672 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2012.06.09 06:41:00 | 012,873,728 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009.07.14 03:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010.11.21 05:24:25 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009.07.14 03:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
 
========== LOP Check ==========
 
[2012.09.04 22:17:25 | 000,000,000 | ---D | M] -- C:\Users\Marc\AppData\Roaming\.minecraft
[2012.07.11 12:30:55 | 000,000,000 | ---D | M] -- C:\Users\Marc\AppData\Roaming\.Nitrous
[2012.04.03 16:26:27 | 000,000,000 | ---D | M] -- C:\Users\Marc\AppData\Roaming\Ableton
[2012.01.02 15:21:33 | 000,000,000 | ---D | M] -- C:\Users\Marc\AppData\Roaming\Amazon
[2012.01.02 15:21:33 | 000,000,000 | ---D | M] -- C:\Users\Marc\AppData\Roaming\AnvSoft
[2012.01.02 15:21:55 | 000,000,000 | ---D | M] -- C:\Users\Marc\AppData\Roaming\BeatportDownloader.EE670286545758FAB4A69D4439CF6054F83E0AC2.1
[2012.01.02 15:21:55 | 000,000,000 | ---D | M] -- C:\Users\Marc\AppData\Roaming\Clonk Rage
[2012.01.02 15:21:55 | 000,000,000 | ---D | M] -- C:\Users\Marc\AppData\Roaming\com.adobe.downloadassistant.AdobeDownloadAssistant
[2012.08.01 12:19:56 | 000,000,000 | ---D | M] -- C:\Users\Marc\AppData\Roaming\com.beatport.BeatportDownloader
[2012.01.02 15:21:55 | 000,000,000 | ---D | M] -- C:\Users\Marc\AppData\Roaming\com.facebookdesktop.app
[2012.02.09 20:06:45 | 000,000,000 | ---D | M] -- C:\Users\Marc\AppData\Roaming\DAEMON Tools Lite
[2012.01.13 21:16:30 | 000,000,000 | ---D | M] -- C:\Users\Marc\AppData\Roaming\DesktopIconForAmazon
[2012.01.02 15:21:55 | 000,000,000 | ---D | M] -- C:\Users\Marc\AppData\Roaming\dreamload
[2012.09.28 16:56:23 | 000,000,000 | ---D | M] -- C:\Users\Marc\AppData\Roaming\Dropbox
[2012.07.05 22:33:35 | 000,000,000 | ---D | M] -- C:\Users\Marc\AppData\Roaming\EurekaLog
[2012.08.21 19:10:04 | 000,000,000 | ---D | M] -- C:\Users\Marc\AppData\Roaming\FFsplit
[2012.09.24 19:42:13 | 000,000,000 | ---D | M] -- C:\Users\Marc\AppData\Roaming\FileZilla
[2012.09.11 18:57:06 | 000,000,000 | ---D | M] -- C:\Users\Marc\AppData\Roaming\ICQ
[2012.03.13 19:58:02 | 000,000,000 | ---D | M] -- C:\Users\Marc\AppData\Roaming\Kores
[2012.01.02 15:22:20 | 000,000,000 | ---D | M] -- C:\Users\Marc\AppData\Roaming\Leadertech
[2012.01.02 15:22:23 | 000,000,000 | ---D | M] -- C:\Users\Marc\AppData\Roaming\MAGIX
[2012.04.15 15:57:28 | 000,000,000 | ---D | M] -- C:\Users\Marc\AppData\Roaming\ManyCam
[2012.08.17 01:56:31 | 000,000,000 | ---D | M] -- C:\Users\Marc\AppData\Roaming\MAXON
[2012.03.13 21:24:34 | 000,000,000 | ---D | M] -- C:\Users\Marc\AppData\Roaming\michaelkaesper.de Software
[2012.09.14 15:48:20 | 000,000,000 | ---D | M] -- C:\Users\Marc\AppData\Roaming\Mp3tag
[2012.08.12 01:34:29 | 000,000,000 | ---D | M] -- C:\Users\Marc\AppData\Roaming\Origin
[2012.09.16 22:06:34 | 000,000,000 | ---D | M] -- C:\Users\Marc\AppData\Roaming\PACE Anti-Piracy
[2012.09.23 21:29:04 | 000,000,000 | ---D | M] -- C:\Users\Marc\AppData\Roaming\PhotoScape
[2012.01.02 15:22:34 | 000,000,000 | ---D | M] -- C:\Users\Marc\AppData\Roaming\ResourceCentral.E6E1B28A311BC518DB6C6883EA3757FDE0E90ADC.1
[2012.01.02 15:22:34 | 000,000,000 | ---D | M] -- C:\Users\Marc\AppData\Roaming\Samsung
[2012.01.02 15:22:38 | 000,000,000 | ---D | M] -- C:\Users\Marc\AppData\Roaming\Simfy
[2012.01.02 15:22:44 | 000,000,000 | ---D | M] -- C:\Users\Marc\AppData\Roaming\Simple Star
[2012.03.23 19:45:04 | 000,000,000 | ---D | M] -- C:\Users\Marc\AppData\Roaming\Solveig Multimedia
[2012.07.05 20:01:06 | 000,000,000 | ---D | M] -- C:\Users\Marc\AppData\Roaming\Splashtop
[2012.04.15 15:55:58 | 000,000,000 | ---D | M] -- C:\Users\Marc\AppData\Roaming\SplitMediaLabs
[2012.01.02 15:22:44 | 000,000,000 | ---D | M] -- C:\Users\Marc\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1
[2012.01.02 15:22:47 | 000,000,000 | ---D | M] -- C:\Users\Marc\AppData\Roaming\Steinberg
[2012.01.02 15:22:47 | 000,000,000 | ---D | M] -- C:\Users\Marc\AppData\Roaming\TeamViewer
[2012.01.02 15:22:47 | 000,000,000 | ---D | M] -- C:\Users\Marc\AppData\Roaming\Tific
[2012.08.06 23:32:08 | 000,000,000 | ---D | M] -- C:\Users\Marc\AppData\Roaming\TS3Client
[2012.03.16 18:57:56 | 000,000,000 | ---D | M] -- C:\Users\Marc\AppData\Roaming\ts3overlay
[2012.01.02 15:22:47 | 000,000,000 | ---D | M] -- C:\Users\Marc\AppData\Roaming\Tunngle
[2012.01.02 15:22:47 | 000,000,000 | ---D | M] -- C:\Users\Marc\AppData\Roaming\URSoft
[2012.09.20 21:05:17 | 000,000,000 | ---D | M] -- C:\Users\Marc\AppData\Roaming\UseNeXT
[2012.09.16 22:10:00 | 000,000,000 | ---D | M] -- C:\Users\Marc\AppData\Roaming\uTorrent
[2012.07.11 13:46:44 | 000,000,000 | ---D | M] -- C:\Users\Marc\AppData\Roaming\Vso
[2012.01.02 15:22:48 | 000,000,000 | ---D | M] -- C:\Users\Marc\AppData\Roaming\wargaming.net
 
========== Purity Check ==========
 
 
 
========== Custom Scans ==========
 
< %SYSTEMDRIVE%\*. >
[2012.01.27 19:33:40 | 000,000,000 | -HSD | M] -- C:\$RECYCLE.BIN
[2012.02.18 15:02:33 | 000,000,000 | -HSD | M] -- C:\Boot
[2012.09.28 16:51:53 | 000,000,000 | -HSD | M] -- C:\Config.Msi
[2009.07.14 07:08:56 | 000,000,000 | -HSD | M] -- C:\Documents and Settings
[2011.03.27 15:38:04 | 000,000,000 | -HSD | M] -- C:\Dokumente und Einstellungen
[2011.04.08 14:04:58 | 000,000,000 | ---D | M] -- C:\dreamloaddata
[2011.10.03 22:27:52 | 000,000,000 | -HSD | M] -- C:\found.000
[2011.10.03 22:27:52 | 000,000,000 | -HSD | M] -- C:\found.001
[2011.10.03 22:27:52 | 000,000,000 | -HSD | M] -- C:\found.002
[2012.08.04 16:30:23 | 000,000,000 | -HSD | M] -- C:\found.003
[2012.09.11 12:55:05 | 000,000,000 | -HSD | M] -- C:\found.004
[2012.08.06 21:44:44 | 000,000,000 | ---D | M] -- C:\Fraps
[2011.11.22 19:59:20 | 000,000,000 | ---D | M] -- C:\Games
[2012.04.08 23:04:47 | 000,000,000 | ---D | M] -- C:\GTA SanAndreas
[2011.07.06 19:41:45 | 000,000,000 | ---D | M] -- C:\Intel
[2012.07.05 22:38:36 | 000,000,000 | RH-D | M] -- C:\MSOCache
[2012.04.04 21:07:39 | 000,000,000 | ---D | M] -- C:\Nexon
[2012.05.21 19:05:07 | 000,000,000 | ---D | M] -- C:\NVIDIA
[2009.07.14 05:20:08 | 000,000,000 | ---D | M] -- C:\PerfLogs
[2012.09.20 20:07:12 | 000,000,000 | R--D | M] -- C:\Program Files
[2012.09.25 17:29:07 | 000,000,000 | R--D | M] -- C:\Program Files (x86)
[2012.09.21 18:17:28 | 000,000,000 | -H-D | M] -- C:\ProgramData
[2012.01.02 01:40:26 | 000,000,000 | ---D | M] -- C:\ProgramData (0)
[2011.03.27 15:38:04 | 000,000,000 | -HSD | M] -- C:\Programme
[2012.01.02 15:58:15 | 000,000,000 | -HSD | M] -- C:\Recovery
[2012.09.28 17:17:49 | 000,000,000 | -HSD | M] -- C:\System Volume Information
[2012.09.14 15:08:23 | 000,000,000 | ---D | M] -- C:\Temp
[2012.04.02 20:52:08 | 000,000,000 | R--D | M] -- C:\Users
[2012.09.22 11:12:02 | 000,000,000 | ---D | M] -- C:\Windows
 
< %PROGRAMFILES%\*.exe >
 
< %LOCALAPPDATA%\*.exe >
 
< %systemroot%\*. /mp /s >
 
< C:\Windows\system32\*.tsp >
[2009.07.14 03:14:11 | 000,030,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\hidphone.tsp
[2009.07.14 03:14:11 | 000,038,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\kmddsp.tsp
[2009.07.14 03:14:11 | 000,050,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\ndptsp.tsp
[2009.07.14 03:14:11 | 000,082,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\remotesp.tsp
[2010.11.21 05:23:55 | 000,281,088 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\unimdm.tsp
[2009.07.14 07:08:49 | 000,000,006 | -H-- | C] () -- C:\Windows\Tasks\SA.DAT
[2009.07.14 07:08:49 | 000,028,602 | ---- | C] () -- C:\Windows\Tasks\SCHEDLGU.TXT
[2011.09.20 21:00:07 | 000,001,112 | ---- | C] () -- C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1771800032-78958699-3666061034-1000Core.job
[2011.09.20 21:00:08 | 000,001,134 | ---- | C] () -- C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1771800032-78958699-3666061034-1000UA.job
[2011.10.13 21:33:34 | 000,001,102 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
[2011.10.13 21:33:35 | 000,001,106 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
[2012.09.18 20:59:07 | 000,000,884 | ---- | C] () -- C:\Windows\Tasks\Adobe Flash Player Updater.job
[2012.09.24 21:53:50 | 000,001,064 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1771800032-78958699-3666061034-1000Core.job
[2012.09.24 21:53:51 | 000,001,116 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1771800032-78958699-3666061034-1000UA.job
 
< MD5 for: AGP440.SYS  >
[2009.07.14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\SysNative\drivers\AGP440.sys
[2009.07.14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\SysNative\DriverStore\FileRepository\machine.inf_amd64_neutral_a2f120466549d68b\AGP440.sys
[2009.07.14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7601.17514_none_1838f2aad55063bb\AGP440.sys
 
< MD5 for: ATAPI.SYS  >
[2009.07.14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\drivers\atapi.sys
[2009.07.14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\DriverStore\FileRepository\mshdc.inf_amd64_neutral_aad30bdeec04ea5e\atapi.sys
[2009.07.14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7601.17514_none_3b5e2d89382958dd\atapi.sys
 
< MD5 for: CNGAUDIT.DLL  >
[2009.07.14 03:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\SysWOW64\cngaudit.dll
[2009.07.14 03:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_e83a414890e8132b\cngaudit.dll
[2009.07.14 03:40:20 | 000,018,944 | ---- | M] (Microsoft Corporation) MD5=86FE1B1F8FD42CD0DB641AB1CDB13093 -- C:\Windows\SysNative\cngaudit.dll
[2009.07.14 03:40:20 | 000,018,944 | ---- | M] (Microsoft Corporation) MD5=86FE1B1F8FD42CD0DB641AB1CDB13093 -- C:\Windows\winsxs\amd64_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_4458dccc49458461\cngaudit.dll
 
< MD5 for: EXPLORER.EXE  >
[2011.02.26 07:19:21 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=0FB9C74046656D1579A64660AD67B746 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_ba87e574ddfe652d\explorer.exe
[2011.02.25 08:19:30 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 -- C:\Windows\explorer.exe
[2011.02.25 08:19:30 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_afa79dc39081d0ba\explorer.exe
[2011.02.26 08:14:34 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=3B69712041F3D63605529BD66DC00C48 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_b0333b22a99da332\explorer.exe
[2010.11.21 05:24:25 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_ba2f56d3c4bcbafb\explorer.exe
[2011.02.25 07:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\SysWOW64\explorer.exe
[2011.02.25 07:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_b9fc4815c4e292b5\explorer.exe
[2010.11.21 05:24:11 | 002,872,320 | ---- | M] (Microsoft Corporation) MD5=AC4C51EB24AA95B77F705AB159189E24 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_afdaac81905bf900\explorer.exe
 
< MD5 for: IASTORV.SYS  >
[2010.11.21 05:23:47 | 000,410,496 | ---- | M] (Intel Corporation) MD5=3DF4395A7CF8B7A72A5F4606366B8C2D -- C:\Windows\SysNative\DriverStore\FileRepository\iastorv.inf_amd64_neutral_668286aa35d55928\iaStorV.sys
[2010.11.21 05:23:47 | 000,410,496 | ---- | M] (Intel Corporation) MD5=3DF4395A7CF8B7A72A5F4606366B8C2D -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7601.17514_none_0d3757e79e6784d0\iaStorV.sys
[2011.03.11 08:19:16 | 000,410,496 | ---- | M] (Intel Corporation) MD5=5B3DE7208E5000D5B451B9D290D2579C -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7601.21680_none_0d714416b7c182d5\iaStorV.sys
[2011.03.11 08:41:26 | 000,410,496 | ---- | M] (Intel Corporation) MD5=AAAF44DB3BD0B9D1FB6969B23ECC8366 -- C:\Windows\SysNative\drivers\iaStorV.sys
[2011.03.11 08:41:26 | 000,410,496 | ---- | M] (Intel Corporation) MD5=AAAF44DB3BD0B9D1FB6969B23ECC8366 -- C:\Windows\SysNative\DriverStore\FileRepository\iastorv.inf_amd64_neutral_0bcee2057afcc090\iaStorV.sys
[2011.03.11 08:41:26 | 000,410,496 | ---- | M] (Intel Corporation) MD5=AAAF44DB3BD0B9D1FB6969B23ECC8366 -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7601.17577_none_0cf9793d9e95787b\iaStorV.sys
 
< MD5 for: NETLOGON.DLL  >
[2010.11.21 05:24:01 | 000,695,808 | ---- | M] (Microsoft Corporation) MD5=AA339DD8BB128EF66660DFBBB59043D3 -- C:\Windows\SysNative\netlogon.dll
[2010.11.21 05:24:01 | 000,695,808 | ---- | M] (Microsoft Corporation) MD5=AA339DD8BB128EF66660DFBBB59043D3 -- C:\Windows\winsxs\amd64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7601.17514_none_5bddbcb24e997298\netlogon.dll
[2010.11.21 05:24:09 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\SysWOW64\netlogon.dll
[2010.11.21 05:24:09 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\winsxs\wow64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7601.17514_none_6632670482fa3493\netlogon.dll
 
< MD5 for: NVSTOR.SYS  >
[2011.03.11 08:19:21 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=D23C7E8566DA2B8A7C0DBBB761D54888 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.21680_none_983ab4c5eef82cad\nvstor.sys
[2011.03.11 08:41:34 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=DAB0E87525C10052BF65F06152F37E4A -- C:\Windows\SysNative\drivers\nvstor.sys
[2011.03.11 08:41:34 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=DAB0E87525C10052BF65F06152F37E4A -- C:\Windows\SysNative\DriverStore\FileRepository\nvraid.inf_amd64_neutral_0276fc3b3ea60d41\nvstor.sys
[2011.03.11 08:41:34 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=DAB0E87525C10052BF65F06152F37E4A -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.17577_none_97c2e9ecd5cc2253\nvstor.sys
[2010.11.21 05:23:47 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=F7CD50FE7139F07E77DA8AC8033D1832 -- C:\Windows\SysNative\DriverStore\FileRepository\nvraid.inf_amd64_neutral_dd659ed032d28a14\nvstor.sys
[2010.11.21 05:23:47 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=F7CD50FE7139F07E77DA8AC8033D1832 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.17514_none_9800c896d59e2ea8\nvstor.sys
 
< MD5 for: SCECLI.DLL  >
[2010.11.21 05:23:54 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\SysWOW64\scecli.dll
[2010.11.21 05:23:54 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_a088921d241bbb4e\scecli.dll
[2010.11.21 05:24:32 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- C:\Windows\SysNative\scecli.dll
[2010.11.21 05:24:32 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- C:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_9633e7caefbaf953\scecli.dll
 
< MD5 for: USER32.DLL  >
[2010.11.21 05:24:20 | 000,833,024 | ---- | M] (Microsoft Corporation) MD5=5E0DB2D8B2750543CD2EBB9EA8E6CDD3 -- C:\Windows\SysWOW64\user32.dll
[2010.11.21 05:24:20 | 000,833,024 | ---- | M] (Microsoft Corporation) MD5=5E0DB2D8B2750543CD2EBB9EA8E6CDD3 -- C:\Windows\winsxs\wow64_microsoft-windows-user32_31bf3856ad364e35_6.1.7601.17514_none_35b31c02b85ccb6e\user32.dll
[2010.11.21 05:24:09 | 001,008,128 | ---- | M] (Microsoft Corporation) MD5=FE70103391A64039A921DBFFF9C7AB1B -- C:\Windows\SysNative\user32.dll
[2010.11.21 05:24:09 | 001,008,128 | ---- | M] (Microsoft Corporation) MD5=FE70103391A64039A921DBFFF9C7AB1B -- C:\Windows\winsxs\amd64_microsoft-windows-user32_31bf3856ad364e35_6.1.7601.17514_none_2b5e71b083fc0973\user32.dll
 
< MD5 for: USERINIT.EXE  >
[2010.11.21 05:23:55 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\SysWOW64\userinit.exe
[2010.11.21 05:23:55 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe
[2010.11.21 05:24:28 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\SysNative\userinit.exe
[2010.11.21 05:24:28 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_3a4ebf84e84f824c\userinit.exe
 
< MD5 for: WINLOGON.EXE  >
[2010.11.21 05:24:29 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\SysNative\winlogon.exe
[2010.11.21 05:24:29 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_cde90685eb910636\winlogon.exe
 
< MD5 for: WS2IFSL.SYS  >
[2009.07.14 02:10:33 | 000,021,504 | ---- | M] (Microsoft Corporation) MD5=6BCC1D7D2FD2453957C5479A32364E52 -- C:\Windows\SysNative\drivers\ws2ifsl.sys
[2009.07.14 02:10:33 | 000,021,504 | ---- | M] (Microsoft Corporation) MD5=6BCC1D7D2FD2453957C5479A32364E52 -- C:\Windows\winsxs\amd64_microsoft-windows-w..rastructure-ws2ifsl_31bf3856ad364e35_6.1.7600.16385_none_ab7b927be17eace8\ws2ifsl.sys
 
< %systemroot%\system32\drivers\*.sys /lockedfiles >
 
< %systemroot%\System32\config\*.sav >
 
< %systemroot%\system32\*.dll /lockedfiles >
[2009.07.14 03:15:21 | 000,462,848 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\system32\FirewallAPI.dll
 
< %USERPROFILE%\*.* >
[2011.12.30 15:12:37 | 000,000,032 | ---- | M] () -- C:\Users\Marc\.simfy
[2012.09.28 17:27:13 | 006,291,456 | -H-- | M] () -- C:\Users\Marc\NTUSER.DAT
[2012.09.28 17:27:13 | 000,262,144 | -HS- | M] () -- C:\Users\Marc\ntuser.dat.LOG1
[2012.09.11 14:20:05 | 000,262,144 | -HS- | M] () -- C:\Users\Marc\ntuser.dat.LOG2
[2012.01.02 14:55:18 | 000,065,536 | -HS- | M] () -- C:\Users\Marc\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf
[2012.01.02 14:55:18 | 000,524,288 | -HS- | M] () -- C:\Users\Marc\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms
[2012.01.02 14:55:18 | 000,524,288 | -HS- | M] () -- C:\Users\Marc\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms
[2012.07.05 19:26:17 | 000,065,536 | -HS- | M] () -- C:\Users\Marc\NTUSER.DAT{e88df6ce-c6c5-11e1-be35-1c6f65d978ed}.TM.blf
[2012.07.05 19:26:17 | 000,524,288 | -HS- | M] () -- C:\Users\Marc\NTUSER.DAT{e88df6ce-c6c5-11e1-be35-1c6f65d978ed}.TMContainer00000000000000000001.regtrans-ms
[2012.07.05 19:26:17 | 000,524,288 | -HS- | M] () -- C:\Users\Marc\NTUSER.DAT{e88df6ce-c6c5-11e1-be35-1c6f65d978ed}.TMContainer00000000000000000002.regtrans-ms
[2012.01.02 15:58:21 | 000,000,020 | -HS- | M] () -- C:\Users\Marc\ntuser.ini
 
< %USERPROFILE%\Local Settings\Temp\*.exe >
 
< %USERPROFILE%\Local Settings\Temp\*.dll >
 
< %USERPROFILE%\Application Data\*.exe >
 
< HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems|Windows /rs >
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems\\Required: DebugWindows [binary data]
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems\\Windows: %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
 
<          >
 
========== Alternate Data Streams ==========
 
@Alternate Data Stream - 173 bytes -> C:\ProgramData\TEMP:1CE11B51
@Alternate Data Stream - 1176 bytes -> C:\Users\Marc\AppData\Local\Temp:JqXJqIvCPi0Drr1yrX0QK

< End of report >
--- --- ---

[/CODE]

Mfg Marc

mac17 28.09.2012 16:15
und noch die Extra Log:
OTL EXTRAS Logfile:
Code:
OTL Extras logfile created on: 28.09.2012 16:58:35 - Run 1
OTL by OldTimer - Version 3.2.69.0    Folder = C:\Users\Marc\Desktop
64bit- Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
7,98 Gb Total Physical Memory | 6,09 Gb Available Physical Memory | 76,29% Memory free
15,97 Gb Paging File | 13,92 Gb Available in Paging File | 87,18% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 465,66 Gb Total Space | 67,47 Gb Free Space | 14,49% Space Free | Partition Type: NTFS
Drive E: | 1000,00 Gb Total Space | 104,51 Gb Free Space | 10,45% Space Free | Partition Type: NTFS
Drive H: | 100,00 Mb Total Space | 84,72 Mb Free Space | 84,73% Space Free | Partition Type: NTFS
Drive I: | 863,01 Gb Total Space | 828,46 Gb Free Space | 96,00% Space Free | Partition Type: NTFS
Drive K: | 931,51 Gb Total Space | 441,21 Gb Free Space | 47,36% Space Free | Partition Type: NTFS
 
Computer Name: MARC-PC | User Name: Marc | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
 
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
 
========== Shell Spawning ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\system32\rundll32.exe" "C:\Windows\system32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [Bridge] -- C:\Program Files (x86)\Adobe\Adobe Bridge CS6\Bridge.exe "%L" (Adobe Systems, Inc.)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Directory [Winamp.Bookmark] -- "C:\Program Files (x86)\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft, Inc.)
Directory [Winamp.Enqueue] -- "C:\Program Files (x86)\Winamp\winamp.exe" /ADD "%1" (Nullsoft, Inc.)
Directory [Winamp.Play] -- "C:\Program Files (x86)\Winamp\winamp.exe" "%1" (Nullsoft, Inc.)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [Bridge] -- C:\Program Files (x86)\Adobe\Adobe Bridge CS6\Bridge.exe "%L" (Adobe Systems, Inc.)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Directory [Winamp.Bookmark] -- "C:\Program Files (x86)\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft, Inc.)
Directory [Winamp.Enqueue] -- "C:\Program Files (x86)\Winamp\winamp.exe" /ADD "%1" (Nullsoft, Inc.)
Directory [Winamp.Play] -- "C:\Program Files (x86)\Winamp\winamp.exe" "%1" (Nullsoft, Inc.)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
========== Security Center Settings ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01  [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
 
========== Firewall Settings ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
"DoNotAllowExceptions" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
"DoNotAllowExceptions" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
========== Authorized Applications List ==========
 
 
========== Vista Active Open Ports Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{03454EF3-940B-4E41-B970-42007DA148AE}" = lport=2869 | protocol=6 | dir=in | app=system |
"{096D4551-B184-452C-A4AA-DED3CC6F21EF}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{0A2BABE6-2F33-49A4-96F8-7175D16D7B3D}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{1A6DFC10-8D9A-4598-893B-FDDB07187109}" = lport=999 | protocol=6 | dir=in | app=%systemroot%\windowsmobile\wmdhost.exe |
"{33C2F5AC-EC49-4E65-9630-9CF1F589FAAC}" = lport=6004 | protocol=17 | dir=in | app=c:\program files\microsoft office\office14\outlook.exe |
"{41F76671-D0C7-4FFD-8A72-E3288F347F68}" = lport=5678 | protocol=6 | dir=in | app=%systemroot%\windowsmobile\wmdhost.exe |
"{47E5E01C-E439-43FD-865D-144D06ACC32B}" = lport=67 | protocol=17 | dir=in | svc=sharedaccess | app=%systemroot%\system32\svchost.exe |
"{54498819-7E23-40F6-BF62-EC38F6DC03E5}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{567AF1CC-F4DC-4D9C-866A-71DBD3647561}" = lport=5721 | protocol=6 | dir=in | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{5F23B0A9-C70F-40BC-BCAF-7E266AC5C698}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{755D4E5A-5EB4-4CF2-A67B-F4DACB1A6DA2}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{82326F72-D59E-4CDE-86D4-783F9590253E}" = rport=5679 | protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{895BC069-F116-4536-8FEE-BAB1ACC6C4EA}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{9DA73957-4C6F-4B5D-A2BC-3A19C2EE8019}" = lport=26675 | protocol=6 | dir=in | name=@%systemroot%\windowsmobile\wmdcbase.exe,-4006 |
"{AB524504-EFC6-4A67-B249-B1773E405BD0}" = lport=990 | protocol=6 | dir=in | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{B9A93537-FBA5-4A4E-ABD7-141BF3806DAA}" = rport=10243 | protocol=6 | dir=out | app=system |
"{BC5F015B-399C-4355-8E6A-3D542077B7C2}" = rport=2869 | protocol=6 | dir=out | app=system |
"{D19EDBA5-F305-4C04-A5C2-D235224F84AA}" = lport=53 | protocol=17 | dir=in | svc=sharedaccess | app=%systemroot%\system32\svchost.exe |
"{D58BFD18-A6E4-4BEB-87AD-099D01502B86}" = lport=10243 | protocol=6 | dir=in | app=system |
"{D9D46F43-96AC-4592-B5B6-DCA7E2402D9A}" = lport=547 | protocol=17 | dir=in | svc=sharedaccess | app=%systemroot%\system32\svchost.exe |
"{DC24A4DC-0900-4B76-8638-E1E861F5F17E}" = lport=2869 | protocol=6 | dir=in | app=system |
"{EFE38879-8D26-4D44-B3EE-175D38703F34}" = lport=68 | protocol=17 | dir=in | svc=sharedaccess | app=%systemroot%\system32\svchost.exe |
"{F1BC0C36-61EF-4777-9395-D6AB935CC998}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{F3E37ABD-2979-4650-8384-83EB9993BE55}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
 
========== Vista Active Application Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{02C8B788-496D-4AD9-8EB3-733CA608A040}" = protocol=17 | dir=in | app=c:\program files (x86)\icq7.6\icq.exe |
"{065A42C0-4E63-401F-9AC4-82E3759105CE}" = protocol=6 | dir=in | app=c:\program files (x86)\utorrent\utorrent.exe |
"{09E2D412-9D59-4B9F-97A6-7FF9B2D65135}" = protocol=6 | dir=in | app=c:\program files (x86)\teamviewer\version7\teamviewer_service.exe |
"{0A48876A-3553-4AC3-ABFE-B7869D2F7333}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{0C834B37-5360-4CE8-A059-F59C8C5A9F84}" = protocol=17 | dir=in | app=c:\program files (x86)\radio toolbox\rtb.exe |
"{0CF10902-D13C-4240-8B42-5ED7B5A95A47}" = protocol=17 | dir=in | app=c:\program files (x86)\teamviewer\version7\teamviewer_service.exe |
"{0D6EEA6F-7F29-4836-9D6F-7DB688FA7BF0}" = dir=in | app=c:\program files (x86)\itunes\itunes.exe |
"{1494F9CD-39BC-4BB6-A075-50B990D81028}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstra.exe |
"{1AE6153E-5363-4A66-BC78-E80F9413D9BF}" = protocol=17 | dir=in | app=c:\program files (x86)\origin games\battlefield 3\bf3.exe |
"{1EAE22CC-382D-4596-9D73-28543E94039A}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstra.exe |
"{1F3FAA14-E59B-488B-AEC6-811298D45349}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft lifecam\lifeexp.exe |
"{20B3C73A-23B3-4151-A403-7D3B2B69B56B}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office14\groove.exe |
"{20C1AD6F-47F1-4F2E-BFE9-CC72908315A7}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft lifecam\lifecam.exe |
"{22A1E82E-3F58-4DE0-A193-D90068FF9EAD}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft lifecam\lifecam.exe |
"{2CB31AD8-8F4E-48CF-B4C4-3C27DE0489AA}" = protocol=17 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe |
"{2D1EC30E-A755-4272-A433-1E0C85710CE3}" = protocol=6 | dir=in | app=c:\program files (x86)\icq7.5\icq.exe |
"{2DF5DA93-30D8-4504-9BE9-9F58065C13CB}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe |
"{36061B54-17D7-4AE1-AB9C-21A6FBFD939E}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{37F38554-7C1D-43E9-9FA6-D7F1C38083C7}" = dir=in | app=c:\program files (x86)\windows live\sync\windowslivesync.exe |
"{38D92F4C-113C-486C-81A4-ED27A7751426}" = protocol=17 | dir=in | app=c:\program files (x86)\utorrent\utorrent.exe |
"{3AC903EF-30E6-49CD-94DF-F39504791447}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstra.exe |
"{46E28280-59E9-40D6-B365-C989461D8942}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstra.exe |
"{470ECEE2-255C-4253-A859-29DCAF91FF8E}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{4A3835D5-27CC-4049-BADD-84096CA05CC3}" = protocol=17 | dir=in | app=c:\users\marc\appdata\roaming\dropbox\bin\dropbox.exe |
"{4B513041-4F3F-4DEA-A9A8-5D9C62E8F963}" = dir=in | app=c:\program files (x86)\common files\apple\apple application support\webkit2webprocess.exe |
"{4DA6213E-0465-4102-AC4A-A079B71E0141}" = protocol=6 | dir=in | app=c:\program files (x86)\origin games\battlefield 3\bf3.exe |
"{5270A2E3-4AE3-4AD5-9314-46595D5394D5}" = dir=out | svc=sharedaccess | app=%systemroot%\system32\svchost.exe |
"{5A602974-89EA-4E35-8C94-98730194DD45}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steam.exe |
"{5AB3C9BA-EFCC-4BC2-9AB6-BFECC6CEE988}" = protocol=6 | dir=in | app=c:\program files (x86)\radio toolbox\rtb.exe |
"{5C9C7615-0E66-4A18-B5CE-FE8EE66C83A4}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{5DB0219C-8FF2-46AB-867B-45C4C134E9D0}" = protocol=17 | dir=in | app=c:\program files (x86)\teamviewer\version6\teamviewer.exe |
"{5E55B214-58F4-41AC-97EC-F2B50DC5A5A2}" = protocol=17 | dir=in | app=c:\program files (x86)\icq7.6\icq.exe |
"{5F4F42E3-D28B-4B4A-9D0C-580D8EA74380}" = protocol=6 | dir=in | app=c:\programdata\nexoneu\ngm\ngm.exe |
"{6103E926-6E4C-4A7D-9FB7-FBA15A9B10D6}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\portal 2\portal2.exe |
"{659C729D-4247-4A4C-9C4C-8930FA626D14}" = protocol=17 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{6674CE9E-3140-48A8-BCB8-0D5CABBA8971}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\borderlands 2\binaries\win32\launcher.exe |
"{66EAD6E8-9CE8-48C3-8978-D34FF53A3C0F}" = protocol=17 | dir=in | app=c:\program files (x86)\icq7.6\icq.exe |
"{681AE765-6BEF-4B09-9608-1D7D6B0DECF6}" = dir=in | app=c:\users\marc\appdata\local\facebook\video\skype\facebookvideocalling.exe |
"{69E4B8DF-33AB-4B90-8ADE-53F02C101A97}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe |
"{719455A9-3DC2-487A-8503-0C3D2272A859}" = protocol=6 | dir=in | app=c:\windows\syswow64\muzapp.exe |
"{744943E7-65F4-47A0-A942-94D5C1A4FB9B}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\shoot many robots\shootmanyrobots\binaries\shootmanyrobots.exe |
"{78E1B704-0D83-48F2-8229-8AB7A823F20C}" = protocol=6 | dir=in | app=c:\program files (x86)\icq7.6\icq.exe |
"{7B6CB47E-1540-4F86-818A-45B6F22AC1AC}" = protocol=6 | dir=in | app=c:\program files (x86)\icq7.6\icq.exe |
"{7E404DE1-9557-45C9-87E3-5B83D6E75C2F}" = protocol=6 | dir=in | app=c:\users\marc\appdata\roaming\dropbox\bin\dropbox.exe |
"{80CA8B7B-40A2-4B1C-AD15-83616991CCA5}" = protocol=17 | dir=in | app=c:\program files (x86)\codemasters\of dragon rising\ofdr.exe |
"{827AD8FB-2012-419F-815D-A1268A25E34D}" = dir=out | app=%systemdrive%\games\world_of_tanks\worldoftanks.exe |
"{84DC9E8F-A88B-4088-96B3-9652999F766B}" = protocol=17 | dir=in | app=c:\program files (x86)\icq7.5\icq.exe |
"{8CD7E03B-252E-468A-9948-0BAC0D817D75}" = protocol=6 | dir=in | app=c:\program files (x86)\teamviewer\version6\teamviewer_service.exe |
"{8EBB04B6-1934-4B04-98E5-4738718C4E12}" = protocol=17 | dir=in | app=c:\program files (x86)\battlelog web plugins\sonar\0.70.4\sonarhost.exe |
"{91FDBA21-4B7F-44A3-AEC9-E9FAFF3AA593}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\sanctum\binaries\win32\sanctumgame-win32-shipping.exe |
"{948092FD-AF41-4576-A2BC-156E27FB8A90}" = protocol=6 | dir=in | app=c:\program files (x86)\icq7.6\icq.exe |
"{9670DE21-D578-47FF-ACB8-279FFFB8DFA2}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\portal 2\portal2.exe |
"{9673EAA2-F096-4EBE-A34A-1D2EFD69B8AB}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{98D799CF-50FB-4AE6-B11B-29E7D2FBA03B}" = protocol=6 | dir=in | app=c:\program files (x86)\teamviewer\version7\teamviewer.exe |
"{99CAC734-BBA6-4482-8230-086E50657A3D}" = protocol=17 | dir=in | app=c:\windows\syswow64\muzapp.exe |
"{9ACD77F7-3843-4F95-AA84-3EEBAB9C3322}" = protocol=6 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{A319450C-AC5B-4805-BD80-64AA48AAE415}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steam.exe |
"{A37566EC-5087-4CD7-8310-5815D0347174}" = protocol=6 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe |
"{A4F3A4D8-BBD7-419A-90E5-2509A1D5C7BC}" = protocol=17 | dir=in | app=c:\program files (x86)\teamviewer\version7\teamviewer.exe |
"{A95274C2-A254-4A81-AC3D-57F701E0E760}" = protocol=17 | dir=in | app=c:\users\marc\appdata\local\akamai\netsession_win.exe |
"{AE14C40C-D941-4538-B6C5-56CCF84364F7}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe |
"{AF44D805-4278-4732-B694-0AD28CC0D57D}" = protocol=6 | dir=in | app=c:\nexon\combat arms eu\nmservice.exe |
"{B1102DE9-FA78-47F3-BABC-A32627773F48}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft lifecam\lifeenc2.exe |
"{B56C6AFC-57D7-4FE2-8C3C-82798A972D1D}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\sanctum\binaries\win32\sanctumgame-win32-shipping.exe |
"{B78A0DC1-A4D3-49E8-8C64-A7A77F9456B7}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{B90CBB9E-AB06-48B6-875D-0677BA0FB15C}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{BD6A2CDE-F4D2-42FA-A1DD-E1B99B4B087F}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{C09B0398-E4D8-40E1-876D-61F10671C91E}" = protocol=17 | dir=in | app=c:\nexon\combat arms eu\nmservice.exe |
"{C185F7CF-02E4-4946-B9CA-33AF5240FDDD}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\shoot many robots\shootmanyrobots\binaries\shootmanyrobots.exe |
"{C1AF869F-8E22-4DC3-8543-F8834C1DEF91}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{C55E7AA3-FD14-467D-A2E3-5F83D36C1368}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{C6F99825-E7F4-4741-9C48-EB4A82538FDC}" = dir=in | app=c:\program files (x86)\norton internet security\engine\19.7.1.5\ccsvchst.exe |
"{CD030BEE-F015-4220-A4CA-574474ED22C3}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft lifecam\lifetray.exe |
"{CD2532C8-8013-4324-835A-F59968E5FF6C}" = protocol=17 | dir=in | app=c:\programdata\nexoneu\ngm\ngm.exe |
"{CD68F935-6E80-4285-955B-6AE0DFF9C93E}" = protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{CE851775-D007-42CB-B515-1D5757E1E216}" = protocol=6 | dir=in | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{CF382E92-9352-428E-98A7-B4D9592ED9DD}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft lifecam\lifetray.exe |
"{CFC740F1-B836-4F66-9CC2-DD8BE371FE3B}" = protocol=6 | dir=out | app=system |
"{D0CA64CA-9013-4728-A2E0-93B40C85C239}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft lifecam\lifeenc2.exe |
"{D30571B8-7481-46E3-A93D-7E974AD3C86D}" = protocol=17 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe |
"{D3E5DF77-64E9-403B-957A-4AB667DC0624}" = protocol=17 | dir=in | app=c:\program files (x86)\teamviewer\version6\teamviewer_service.exe |
"{D6F843CA-BAAE-4A4C-8291-9C73394A3921}" = protocol=58 | dir=in | name=@hnetcfg.dll,-148 |
"{D77B75FF-9FC0-4ABE-B0A2-ADDAC561A2BE}" = protocol=6 | dir=in | app=c:\users\marc\appdata\local\akamai\netsession_win.exe |
"{D9DA09C2-BDE1-4699-942C-41222E36D086}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft lifecam\lifeexp.exe |
"{D9FF302D-0EF7-40D8-A762-72490CE9C9F5}" = protocol=6 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{DA075407-A3CD-4A5D-B22F-315D6823A1DB}" = protocol=6 | dir=in | app=c:\program files (x86)\codemasters\of dragon rising\ofdr.exe |
"{DDFB8742-F8E1-4EC9-8495-D27AE71DF1B3}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{DE09D6C2-8638-42EA-9435-C09C36A37EA0}" = protocol=6 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe |
"{E1034E74-19EB-4AA3-A369-4DF475479F03}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office14\onenote.exe |
"{E39104A5-C02A-4EC2-966F-E15AE309E8C5}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\borderlands 2\binaries\win32\launcher.exe |
"{E3A56668-AB8A-478C-85DE-E7F7ED3F832E}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office14\groove.exe |
"{EA102F1D-E32E-4228-A1FF-C052F16C03B3}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{EA46463A-B8C9-4FFB-84C7-E8BC655E791A}" = protocol=6 | dir=in | app=c:\program files (x86)\battlelog web plugins\sonar\0.70.4\sonarhost.exe |
"{EBEADB2C-BA08-42B9-B163-111B469DBB7C}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe |
"{F61F9E92-CEB7-41D5-8372-9EE52B3AE33A}" = dir=out | app=%systemdrive%\games\world_of_tanks\wotlauncher.exe |
"{F79ECC9F-DB85-42E0-BED3-5C3A6DE6A0CA}" = protocol=6 | dir=in | app=c:\program files (x86)\teamviewer\version6\teamviewer.exe |
"{FBF38D7B-EC92-46C9-AF8E-AF274ECDFC96}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office14\onenote.exe |
"TCP Query User{0202718D-0C66-469E-813B-5AC99AE8637A}C:\program files (x86)\radio toolbox\rtb.exe" = protocol=6 | dir=in | app=c:\program files (x86)\radio toolbox\rtb.exe |
"TCP Query User{40C29C38-9602-4656-9D76-4542DD9CF21E}C:\users\marc\appdata\roaming\dropbox\bin\dropbox.exe" = protocol=6 | dir=in | app=c:\users\marc\appdata\roaming\dropbox\bin\dropbox.exe |
"TCP Query User{5D1EAD48-AF4D-47C5-8C73-6D5E16B9D01F}C:\program files (x86)\icq7.5\icq.exe" = protocol=6 | dir=in | app=c:\program files (x86)\icq7.5\icq.exe |
"TCP Query User{7F65E12A-B161-4363-9B75-63B5585414E6}C:\program files (x86)\ea games\battlefield play4free\bfp4f.exe" = protocol=6 | dir=in | app=c:\program files (x86)\ea games\battlefield play4free\bfp4f.exe |
"TCP Query User{A2DFCB1D-5E14-4124-8C71-B4A403C81FE7}C:\program files (x86)\winamp\winamp.exe" = protocol=6 | dir=in | app=c:\program files (x86)\winamp\winamp.exe |
"TCP Query User{DEC3C099-A778-47FA-BF3D-1440E44EA291}C:\program files (x86)\winamp\winamp.exe" = protocol=6 | dir=in | app=c:\program files (x86)\winamp\winamp.exe |
"TCP Query User{E25B87DB-98D7-4E5F-9841-5DADDD870AFE}C:\nexon\nexon_eu_downloader\nexon_eu_downloader_engine.exe" = protocol=6 | dir=in | app=c:\nexon\nexon_eu_downloader\nexon_eu_downloader_engine.exe |
"UDP Query User{05124A6F-7FD1-4245-A37C-4DB2F7D84E9F}C:\program files (x86)\icq7.5\icq.exe" = protocol=17 | dir=in | app=c:\program files (x86)\icq7.5\icq.exe |
"UDP Query User{28848CAC-C9AA-457F-B83C-AD2B899B3B42}C:\users\marc\appdata\roaming\dropbox\bin\dropbox.exe" = protocol=17 | dir=in | app=c:\users\marc\appdata\roaming\dropbox\bin\dropbox.exe |
"UDP Query User{3F2C966D-4ED4-416B-A85D-53FF657F1BF5}C:\nexon\nexon_eu_downloader\nexon_eu_downloader_engine.exe" = protocol=17 | dir=in | app=c:\nexon\nexon_eu_downloader\nexon_eu_downloader_engine.exe |
"UDP Query User{50C0F2D9-FB6B-4B1B-85EC-1B82CA7F37A0}C:\program files (x86)\radio toolbox\rtb.exe" = protocol=17 | dir=in | app=c:\program files (x86)\radio toolbox\rtb.exe |
"UDP Query User{A5C98DE2-85A8-4670-942E-B40646CA2D73}C:\program files (x86)\winamp\winamp.exe" = protocol=17 | dir=in | app=c:\program files (x86)\winamp\winamp.exe |
"UDP Query User{EEF2C9B3-CB35-4127-ACED-0BC8A6F0386C}C:\program files (x86)\ea games\battlefield play4free\bfp4f.exe" = protocol=17 | dir=in | app=c:\program files (x86)\ea games\battlefield play4free\bfp4f.exe |
"UDP Query User{FBCEED65-0F03-443C-B125-B3D8D3D0CC71}C:\program files (x86)\winamp\winamp.exe" = protocol=17 | dir=in | app=c:\program files (x86)\winamp\winamp.exe |
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{02382870-19C7-3ACD-BBAE-F6E3760947DC}" = Microsoft .NET Framework 4 Extended DEU Language Pack
"{071c9b48-7c32-4621-a0ac-3f809523288f}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{0886900B-B2F3-452C-B580-60F1253F7F80}" = Native Instruments Controller Editor
"{0B8565BA-BAD5-4732-B122-5FD78EFC50A9}" = Native Instruments Service Center
"{0E3DAF3D-FF69-345A-A99E-1FED304CA083}" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"{1493B2AE-0261-47D2-B1AA-F4DAD0F6C48B}" = iTunes
"{1D8E6291-B0D5-35EC-8441-6616F567A0F7}" = Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219
"{1E9FC118-651D-4934-97BE-E53CAE5C7D45}" = Microsoft_VC80_MFCLOC_x86_x64
"{23A66953-369C-4d22-A189-C6E403D4A19F}" = Native Instruments Audio 2 DJ Driver
"{26A24AE4-039D-4CA4-87B4-2F86416027FF}" = Java(TM) 6 Update 27 (64-bit)
"{3D8003CE-E3CD-49b7-A59E-9C21546AF95E}" = Native Instruments Traktor Kontrol S2 Driver
"{4569AD91-47F4-4D9E-8FC9-717EC32D7AE1}" = Microsoft_VC80_CRT_x86_x64
"{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
"{5CE7E3F5-9803-4F32-AA89-2D8848A80109}" = Microsoft LifeCam
"{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
"{60B2315F-680F-4EB3-B8DD-CCDC86A7CCAB}" = Roxio File Backup
"{624C7F0A-89B2-4C49-9CAB-9D69613EC95A}" = Microsoft IntelliPoint 8.2
"{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}" = Bonjour
"{7446FE8D-C1F9-4D42-AAAE-5DBCE58605A6}" = Apple Mobile Device Support
"{8219EDCB-CE5A-4348-B056-AAC0FE4E99D0}" = Microsoft IntelliType Pro 8.2
"{8557397C-A42D-486F-97B3-A2CBC2372593}" = Microsoft_VC90_ATL_x86_x64
"{8E34682C-8118-31F1-BC4C-98CD9675E1C2}" = Microsoft .NET Framework 4 Extended
"{90140000-0011-0000-1000-0000000FF1CE}" = Microsoft Office Professional Plus 2010
"{90140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUS_{7BC9B5EB-125A-4E9B-97E1-8D85B5E960B8}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0015-0407-1000-0000000FF1CE}" = Microsoft Office Access MUI (German) 2010
"{90140000-0015-0407-1000-0000000FF1CE}_Office14.PROPLUS_{BBBD3986-9A9D-402A-BA73-CCDE3EF0ED77}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0016-0407-1000-0000000FF1CE}" = Microsoft Office Excel MUI (German) 2010
"{90140000-0016-0407-1000-0000000FF1CE}_Office14.PROPLUS_{BBBD3986-9A9D-402A-BA73-CCDE3EF0ED77}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0018-0407-1000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (German) 2010
"{90140000-0018-0407-1000-0000000FF1CE}_Office14.PROPLUS_{BBBD3986-9A9D-402A-BA73-CCDE3EF0ED77}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0019-0407-1000-0000000FF1CE}" = Microsoft Office Publisher MUI (German) 2010
"{90140000-0019-0407-1000-0000000FF1CE}_Office14.PROPLUS_{BBBD3986-9A9D-402A-BA73-CCDE3EF0ED77}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001A-0407-1000-0000000FF1CE}" = Microsoft Office Outlook MUI (German) 2010
"{90140000-001A-0407-1000-0000000FF1CE}_Office14.PROPLUS_{BBBD3986-9A9D-402A-BA73-CCDE3EF0ED77}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001B-0407-1000-0000000FF1CE}" = Microsoft Office Word MUI (German) 2010
"{90140000-001B-0407-1000-0000000FF1CE}_Office14.PROPLUS_{BBBD3986-9A9D-402A-BA73-CCDE3EF0ED77}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-0407-1000-0000000FF1CE}" = Microsoft Office Proof (German) 2010
"{90140000-001F-0407-1000-0000000FF1CE}_Office14.PROPLUS_{70A3169E-288F-454F-A08D-20DF66639B50}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-0409-1000-0000000FF1CE}" = Microsoft Office Proof (English) 2010
"{90140000-001F-0409-1000-0000000FF1CE}_Office14.PROPLUS_{0242505C-4E90-407F-9299-B5B275F50D86}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-040C-1000-0000000FF1CE}" = Microsoft Office Proof (French) 2010
"{90140000-001F-040C-1000-0000000FF1CE}_Office14.PROPLUS_{B51389C8-2890-4633-81D8-47D2A7402274}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-0410-1000-0000000FF1CE}" = Microsoft Office Proof (Italian) 2010
"{90140000-001F-0410-1000-0000000FF1CE}_Office14.PROPLUS_{3013A793-10A7-4D1F-B8B4-2FAA82F4D259}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-002C-0407-1000-0000000FF1CE}" = Microsoft Office Proofing (German) 2010
"{90140000-002C-0407-1000-0000000FF1CE}_Office14.PROPLUS_{98782D5D-A9EE-43C6-88AD-B50AD8530E78}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0043-0000-1000-0000000FF1CE}" = Microsoft Office Office 32-bit Components 2010
"{90140000-0043-0000-1000-0000000FF1CE}_Office14.PROPLUS_{E8B6D35B-0B6F-4DCE-9493-859BF3809A7F}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0043-0407-1000-0000000FF1CE}" = Microsoft Office Shared 32-bit MUI (German) 2010
"{90140000-0043-0407-1000-0000000FF1CE}_Office14.PROPLUS_{8DFD91C7-66AE-4E54-9901-5D5F401AD329}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0044-0407-1000-0000000FF1CE}" = Microsoft Office InfoPath MUI (German) 2010
"{90140000-0044-0407-1000-0000000FF1CE}_Office14.PROPLUS_{BBBD3986-9A9D-402A-BA73-CCDE3EF0ED77}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-006E-0407-1000-0000000FF1CE}" = Microsoft Office Shared MUI (German) 2010
"{90140000-006E-0407-1000-0000000FF1CE}_Office14.PROPLUS_{8299B64F-1537-4081-974C-033EAB8F098E}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-00A1-0407-1000-0000000FF1CE}" = Microsoft Office OneNote MUI (German) 2010
"{90140000-00A1-0407-1000-0000000FF1CE}_Office14.PROPLUS_{BBBD3986-9A9D-402A-BA73-CCDE3EF0ED77}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-00BA-0407-1000-0000000FF1CE}" = Microsoft Office Groove MUI (German) 2010
"{90140000-00BA-0407-1000-0000000FF1CE}_Office14.PROPLUS_{BBBD3986-9A9D-402A-BA73-CCDE3EF0ED77}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90BF0360-A1DB-4599-A643-95AB90A52C1E}" = Microsoft_VC90_MFCLOC_x86_x64
"{925D058B-564A-443A-B4B2-7E90C6432E55}" = Microsoft_VC80_ATL_x86_x64
"{92A3CA0D-55CD-4C5D-BA95-5C2600C20F26}" = Microsoft_VC90_CRT_x86_x64
"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting
"{9C5A08BF-BB99-4998-81BD-F6CC32483B34}" = Microsoft Corporation
"{A472B9E4-0AFF-4F7B-B25D-F64F8E928AAB}" = Microsoft_VC90_MFC_x86_x64
"{A8EC0CC0-AD8D-4244-B080-424EDF7A7634}" = Native Instruments Traktor 2
"{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision" = NVIDIA 3D Vision Treiber 306.23
"{B2FE1952-0186-46c3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = NVIDIA Systemsteuerung 306.23
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Grafiktreiber 306.23
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB" = NVIDIA 3D Vision Controller-Treiber 306.23
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX" = NVIDIA PhysX-Systemsoftware 9.12.0604
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update" = NVIDIA Update 1.10.8
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver" = NVIDIA HD-Audiotreiber 1.3.18.0
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVIDIA.Update" = NVIDIA Update Components
"{B6E3757B-5E77-3915-866A-CCFC4B8D194C}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053
"{C8C1BAD5-54E6-4146-AD07-3A8AD36569C3}" = Microsoft_VC80_MFC_x86_x64
"{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}" = SAMSUNG USB Driver for Mobile Phones
"{DB9C43F7-0B0F-4E43-9E6B-F945C71C469E}" = VD64Inst
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"{F7ADB493-B913-4D61-9A63-DA736C20C3F2}" = Adobe Photoshop Lightroom 4.1 64-bit
"{FD67869B-C97B-4F2C-AD80-ABF130238441}" = Oracle VM VirtualBox 4.1.16
"EPSON SX100 Series" = EPSON SX100 Series Printer Uninstall
"MAXON8C02D5E0" = CINEMA 4D 12.016
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile DEU Language Pack" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"Microsoft .NET Framework 4 Extended DEU Language Pack" = Microsoft .NET Framework 4 Extended DEU Language Pack
"Microsoft IntelliPoint 8.2" = Microsoft IntelliPoint 8.2
"Microsoft IntelliType Pro 8.2" = Microsoft IntelliType Pro 8.2
"Office14.PROPLUS" = Microsoft Office Professional Plus 2010
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
"{024521CF-C07E-4F8E-8481-0D75695E03AF}" = PxMergeModule
"{033E378E-6AD3-4AD5-BDEB-CBD69B31046C}" = Microsoft_VC90_ATL_x86
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{0659E943-DDF4-44FC-9FEE-A13B09F8BB08}" = Adobe Flash Media Live Encoder 3.2
"{08D2E121-7F6A-43EB-97FD-629B44903403}" = Microsoft_VC90_CRT_x86
"{0E64B098-8018-4256-BA23-C316A43AD9B0}" = QuickTime
"{0F3647F8-E51D-4FCC-8862-9A8D0C5ACF25}" = Microsoft_VC80_ATL_x86
"{14DC0059-00F1-4F62-BD1A-AB23CD51A95E}" = Adobe AIR
"{15ED9EF1-672B-333C-B653-3A655B6DE4F7}" = Adobe® Content Viewer
"{185F9795-9663-4F13-9EF9-307A282ADB5A}" = ph
"{1A4052AB-BA77-44F7-8EE7-9F9131BFD7A6}" = OF Dragon Rising
"{1EAC1D02-C6AC-4FA6-9A44-96258C37C812}_is1" = World of Tanks v.0.6.7
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Windows Live-Uploadtool
"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT
"{26A24AE4-039D-4CA4-87B4-2F83216027F0}" = Java(TM) 6 Update 27
"{26A24AE4-039D-4CA4-87B4-2F83216035FF}" = Java(TM) 6 Update 35
"{289AC7E0-0AEE-4a7b-913C-709D9803D23E}" = Nexon Game Manager
"{2934DCB0-F8EE-11E0-A4A5-B8AC6F97B88E}" = Google Earth Plug-in
"{2A075BB4-E976-4278-BF3F-E5C6945D84C0}" = bl
"{2B11BA9C-7F97-4C16-970F-1491FD77969B}_is1" = GutscheinRausch.de - AddOn für Firefox
"{2FDD750F-49B7-40C1-9D5E-D2955BC0E2D8}" = NVIDIA PhysX
"{3175E049-F9A9-4A3D-8F19-AC9FB04514D1}" = Windows Live Communications Platform
"{34EB6245-C8D0-4D8A-B8D8-EEBFF7A91485}" = Firebird SQL Server - MAGIX Edition
"{3B35725F-C623-4A1E-B5CC-99C0868679E3}" = Smart 6 B10.1221.1
"{3DECD372-76A1-4483-BF10-B547790A3261}" = ON_OFF Charge B11.0110.1
"{457D7505-D665-4F95-91C3-ECB8C56E9ACA}" = Easy Tune 6 B11.0309.1
"{46578609-AD6D-4E69-AC8F-28B89C090F3B}" = Roxio Creator 2010 Pro
"{490BF87E-1F75-4453-BF55-9F540543A3CA}" = Steinberg Drum Loop Expansion 01
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4A19D6AC-ADE0-4A07-80FF-9C9812C45557}" = Steinberg Cubase 5
"{4A7FDA4D-F4D7-4A49-934A-066D59A43C7E}" = SmartSound Quicktracks Plugin
"{4D454CF8-12FD-464D-B57B-B46FE27B78BB}" = Steinberg LoopMash Content
"{52B65911-1559-4ED5-9461-46957FDD48CD}" = Borderlands
"{52B97218-98CB-4B8B-9283-D213C85E1AA4}" = Windows Live Anmelde-Assistent
"{5310C7A5-A385-6E26-66E9-C0F0CA5A7E45}" = BeatportDownloader
"{532B917B-8235-4FA5-BE36-643A8BB053A5}" = Steinberg REVerence Content 01
"{55AE564D-F4C0-624E-6784-A4040D2ED7F7}" = Facebook Desktop
"{586509F0-350D-48B5-B763-9CC2F8D96C4C}" = Windows Live Sync
"{5A06423A-210C-49FB-950E-CB0EB8C5CEC7}" = Roxio BackOnTrack
"{5B0D20D7-AA12-4FC8-9A4A-AF722F430738}_is1" = EOS Camera Movie Record 0.3.1.1 Beta
"{635FED5B-2C6D-49BE-87E6-7A6FCD22BC5A}" = Microsoft_VC90_MFC_x86
"{63EC2120-1742-4625-AA47-C6A8AEC9C64C}" = Apple Application Support
"{65153EA5-8B6E-43B6-857B-C6E4FC25798A}" = Intel(R) Management Engine Components
"{675F86A8-E093-4002-87D5-915CC2C45571}" = DES 2.0
"{6AFCA4E1-9B78-3640-8F72-A7BF33448200}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729
"{6B4AD1A9-E73A-4184-9D6B-072F8A3C5EBA}" = VoiceOver Kit
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{733CDF24-0A93-426E-AA89-DF281EB54793}" = Roxio CinePlayer
"{744DA166-F189-4ED4-92EA-E06F3347DD44}" = Philips SPC710NC Webcam
"{74DC8A26-4E05-40B6-AD11-C9428A1AE150}" = Roxio Creator 2010 Pro
"{758C8301-2696-4855-AF45-534B1200980A}" = Samsung Kies
"{76285C16-411A-488A-BCE3-C83CB933D8CF}" = Battlefield 3™
"{7644E42D-B096-457F-8B5B-901238FC81AE}" = ICQ7.6
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{7B3F0113-E63C-4D6D-AF19-111A3165CCA2}" = Text-To-Speech-Runtime
"{7CAC6A44-C3DE-4153-ACA6-7524602C789E}" = Facebook Video Calling 1.2.0.159
"{7E48AFD3-F28A-4E54-99A8-9F3A4A27DBC4}" = Brother MFL-Pro Suite DCP-130C
"{7ED169D4-5053-4166-93DF-53B12AE6C539}" = Energy Saver Advance B10.0309.1
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{84DE49CA-0AFB-4557-B1B4-B9B8C1DAE2DE}" = XSplit
"{850C7BD3-9F3F-46AD-9396-E7985B38C55E}" = Windows Live Fotogalerie
"{865D9ED1-EAC2-436D-AFA7-0B750EB5AAAB}" = Steinberg HALionOne Studio Drum Set
"{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570
"{86DDDAAD-AEB9-42E5-BE01-0E8FABD2BB29}" = Roxio Video Capture USB
"{87686C21-8A15-4b4d-A3F1-11141D9BE094}" = Battlefield Play4Free
"{87A83C6F-F53C-448A-B078-FF00E3EAEB29}" = Roxio Disaster Recovery
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver
"{89A15676-78AE-4D51-BF5B-DEE3E0D46C94}" = Roxio Creator 2010 Pro
"{905D4F6B-FADC-4CA4-AA41-BD32A2E446CE}" = Anno 1701 - Der Fluch des Drachen
"{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}" = Microsoft_VC80_CRT_x86
"{955AB765-E48B-4D82-9F06-F2E142433B71}" = Ableton Live 8
"{96D06FDD-6AF4-4309-BC1B-1C9588B0575E}" = Dead Space™ 2
"{9A00EC4E-27E1-42C4-98DD-662F32AC8870}" = Roxio CinePlayer Decoder Pack
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{A048F6D6-BECE-D521-9BC9-B8806BFB118C}" = Beatport Downloader
"{A121EEDE-C68F-461D-91AA-D48BA226AF1C}" = Roxio Activation Module
"{A2433A63-5F5D-40E5-B529-9123C2B3E734}" = Anno 1701
"{A33E7B0C-B99C-4EC9-B702-8A328B161AF9}" = Roxio Burn
"{A49F249F-0C91-497F-86DF-B2585E8E76B7}" = Microsoft Visual C++ 2005 Redistributable
"{A7496F46-78AE-4DB2-BCF5-95F210FA6F96}" = Windows Live Movie Maker
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AC0E0FA6-B945-4F48-BC36-055FCB0DB42B}" = Overwolf
"{AC76BA86-1033-F400-7760-000000000005}" = Adobe Acrobat X Pro - English, Français, Deutsch
"{AC997F93-0757-4ED4-A701-F40C2D654D09}" = Steinberg HALionOne GM Drum Set
"{AD86049C-3D9C-43E1-BE73-643F57D83D50}" = Easy Migration
"{AF37176A-78CA-545B-34EF-8B6A21514DD1}" = Adobe Help Manager
"{AF9E97C1-7431-426D-A8D5-ABE40995C0B1}" = DirectX 9 Runtime
"{B2DC3F08-2EB2-49A5-AA24-15DFC8B1CB83}" = @BIOS
"{B3BC9DB1-0B0A-48B0-B86B-EA77CAA7F800}" = Microsoft Corporation
"{B6CF2967-C81E-40C0-9815-C05774FEF120}" = Skype Click to Call
"{B6D38690-755E-4F40-A35A-23F8BC2B86AC}" = Microsoft_VC90_MFCLOC_x86
"{B8ABD8C7-991E-4A70-B5A3-20C6FC680680}" = LogMeIn Hamachi
"{BD86F1AC-B594-46E4-85DC-1258AC9E2232}" = Steinberg Groove Agent ONE Content
"{BFEAAE77-BD7F-4534-B286-9C5CB4697EB1}" = PDF Settings CS6
"{C75FAD21-EC08-42F3-92D6-C9C0AB355345}" = AutoGreen B10.1021.1
"{CAFA57E8-8927-4912-AFCF-B0AA3837E989}" = Windows Live Essentials
"{D1A19B02-817E-4296-A45B-07853FD74D57}" = Microsoft_VC80_MFC_x86
"{D23CBFDA-C46B-4920-BA70-FC7878A3F05A}" = Steinberg HALionOne Studio Set
"{D82CDA0D-C182-42C8-8FF2-5649C98D6003}" = Steinberg HALionOne Pro Set
"{D92BBB52-82FF-42ED-8A3C-4E062F944AB7}" = Microsoft_VC80_MFCLOC_x86
"{DB6AB705-C9BD-40E3-8929-2EA57F36A4FF}_is1" = ConvertXtoDVD 4.1.10.348
"{DFBB738C-71D8-4DC5-B8D2-D65C37680E27}" = Etron USB3.0 Host Controller
"{E22AD5D3-EB60-4A8F-835C-6C10E369DCE2}" = Steinberg HALionOne Expression Set
"{E52F8D95-AEB5-3B67-879C-C59DF8AF88EE}" = Google Talk Plugin
"{E70E7159-93B1-470D-9FBD-D8E9EF34B538}" = Steinberg HALionOne
"{E8AD3069-9EB7-4BA8-8BFE-83F4E69355C0}" = Adobe Creative Suite 6 Master Collection
"{EDA02C05-A98F-71F6-8F01-9CE3E253D34C}" = simfy
"{EE7257A2-39A2-4D2F-9DAC-F9F25B8AE1D8}" = Skype™ 5.10
"{EFBE6DD5-B224-96E5-72B9-68D328CB12A6}" = Adobe Widget Browser
"{F057965A-D974-4C64-ADB1-4381CD4B8956}" = Steinberg HALionOne GM Set
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219
"{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}" = Microsoft Choice Guard
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F3AFD063-8BAD-485E-B641-E7F5A2C5AE71}" = Steinberg HALionOne Additional Content Set 01
"{F8A9085D-4C7A-41a9-8A77-C8998A96C421}" = Intel(R) Control Center
"{F9466082-90E9-4BE4-92F0-CF0AF195B0CF}" = 325 USB PC Camera
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"1489-3350-5074-6281" = JDownloader 0.9
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Akamai" = Akamai NetSession Interface Service
"Amazon MP3-Downloader" = Amazon MP3-Downloader 1.0.15
"Any DVD Converter Professional_is1" = Any DVD Converter Professional 4.0.1
"ASIO4ALL" = ASIO4ALL
"Battlelog Web Plugins" = Battlelog Web Plugins
"BeatportDownloader.EE670286545758FAB4A69D4439CF6054F83E0AC2.1" = BeatportDownloader
"butt" = butt
"chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Help Manager
"Clonk Rage" = Clonk Rage
"com.adobe.dmp.contentviewer" = Adobe® Content Viewer
"com.adobe.WidgetBrowser" = Adobe Widget Browser
"com.beatport.BeatportDownloader" = Beatport Downloader
"com.facebookdesktop.app" = Facebook Desktop
"Combat Arms EU" = Combat Arms EU
"DAEMON Tools Lite" = DAEMON Tools Lite
"doubleTwist" = doubleTwist
"Dreamload" = Dreamload
"EdcastStandalone" = Edcast Standalone 3.37.2011
"EOS Utility" = Canon Utilities EOS Utility
"ESN Sonar-0.70.4" = ESN Sonar
"ffdshow_is1" = ffdshow [rev 2527] [2008-12-19]
"FileZilla Client" = FileZilla Client 3.5.3
"FileZilla Server" = FileZilla Server
"Fraps" = Fraps (remove only)
"HyperCam 3" = HyperCam 3
"InstallShield_{758C8301-2696-4855-AF45-534B1200980A}" = Samsung Kies
"InstallShield_{DFBB738C-71D8-4DC5-B8D2-D65C37680E27}" = Etron USB3.0 Host Controller
"KORES Print Designer" = KORES Print Designer
"LogMeIn Hamachi" = LogMeIn Hamachi
"MAGIX Speed burnR D" = MAGIX Speed burnR
"Michas Jingle-Player" = Michas Jingle-Player
"Mozilla Firefox 15.0.1 (x86 de)" = Mozilla Firefox 15.0.1 (x86 de)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"Mp3tag" = Mp3tag v2.52
"Native Instruments Audio 2 DJ Driver" = Native Instruments Audio 2 DJ Driver
"Native Instruments Controller Editor" = Native Instruments Controller Editor
"Native Instruments Service Center" = Native Instruments Service Center
"Native Instruments Traktor 2" = Native Instruments Traktor 2
"Native Instruments Traktor Kontrol S2 Driver" = Native Instruments Traktor Kontrol S2 Driver
"NBRTWizard" = Norton Bootable Recovery Tool Wizard
"NIS" = Norton Internet Security
"NVIDIAStereo" = NVIDIA Stereoscopic 3D Driver
"Origin" = Origin
"PhotoScape" = PhotoScape
"PhotoStitch" = Canon Utilities PhotoStitch
"PunkBusterSvc" = PunkBuster Services
"Radio Toolbox" = Radio Toolbox
"reFX Nexus_is1" = reFX Nexus VSTi RTAS v2.2.0
"Roxio PhotoShow" = Roxio PhotoShow
"SCDNAS" = SHOUTcast DNAS (remove only)
"SHOUTcast" = SHOUTcast DNAS Server v2
"Simfy" = simfy
"Steam App 400" = Portal
"Steam App 49520" = Borderlands 2
"Steam App 620" = Portal 2
"Steam App 91600" = Sanctum
"Steam App 96400" = Shoot Many Robots
"TeamSpeak 3 Client" = TeamSpeak 3 Client
"TeamViewer 7" = TeamViewer 7
"USB_AUDIO_DEusb-audio.deBehringer2902" = BEHRINGER USB AUDIO DRIVER
"UseNeXT_is1" = UseNeXT
"uTorrent" = µTorrent
"VLC media player" = VLC media player 2.0.1
"Winamp" = Winamp
"WinLiveSuite_Wave3" = Windows Live Essentials
"WinRAR archiver" = WinRAR archiver
"YU2010_is1" = Your Uninstaller! 2010
 
========== HKEY_CURRENT_USER Uninstall List ==========
 
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Akamai" = Akamai NetSession Interface
"Dropbox" = Dropbox
"Winamp Detect" = Winamp Erkennungs-Plug-in
 
========== Last 20 Event Log Errors ==========
 
[ Application Events ]
Error - 28.09.2012 10:44:07 | Computer Name = Marc-PC | Source = Microsoft-Windows-LoadPerf | ID = 3012
Description = Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung
 werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter
 ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste
 DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich
 und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.
 
Error - 28.09.2012 10:45:13 | Computer Name = Marc-PC | Source = Microsoft-Windows-LoadPerf | ID = 3012
Description = Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung
 werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter
 ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste
 DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich
 und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.
 
Error - 28.09.2012 10:45:16 | Computer Name = Marc-PC | Source = Microsoft-Windows-LoadPerf | ID = 3012
Description = Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung
 werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter
 ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste
 DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich
 und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.
 
Error - 28.09.2012 10:45:26 | Computer Name = Marc-PC | Source = Microsoft-Windows-LoadPerf | ID = 3012
Description = Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung
 werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter
 ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste
 DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich
 und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.
 
Error - 28.09.2012 10:47:03 | Computer Name = Marc-PC | Source = Microsoft-Windows-LoadPerf | ID = 3012
Description = Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung
 werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter
 ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste
 DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich
 und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.
 
Error - 28.09.2012 10:47:05 | Computer Name = Marc-PC | Source = Microsoft-Windows-LoadPerf | ID = 3012
Description = Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung
 werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter
 ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste
 DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich
 und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.
 
Error - 28.09.2012 10:50:46 | Computer Name = Marc-PC | Source = Microsoft-Windows-LoadPerf | ID = 3012
Description = Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung
 werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter
 ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste
 DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich
 und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.
 
Error - 28.09.2012 10:51:25 | Computer Name = Marc-PC | Source = Microsoft-Windows-LoadPerf | ID = 3012
Description = Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung
 werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter
 ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste
 DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich
 und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.
 
Error - 28.09.2012 10:51:27 | Computer Name = Marc-PC | Source = Microsoft-Windows-LoadPerf | ID = 3012
Description = Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung
 werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter
 ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste
 DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich
 und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.
 
Error - 28.09.2012 10:51:33 | Computer Name = Marc-PC | Source = Microsoft-Windows-LoadPerf | ID = 3012
Description = Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung
 werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter
 ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste
 DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich
 und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.
 
Error - 28.09.2012 10:55:08 | Computer Name = Marc-PC | Source = WinMgmt | ID = 10
Description =
 
[ System Events ]
Error - 25.09.2012 11:24:52 | Computer Name = Marc-PC | Source = NetBT | ID = 4321
Description = Der Name "MARC-PC        :20" konnte nicht auf der Schnittstelle mit
 IP-Adresse 192.168.2.139  registriert werden. Der Computer mit IP-Adresse 192.168.2.102
 hat nicht  zugelassen, dass dieser Computer diesen Namen verwendet.
 
Error - 25.09.2012 11:24:53 | Computer Name = Marc-PC | Source = NetBT | ID = 4321
Description = Der Name "MARC-PC        :0" konnte nicht auf der Schnittstelle mit
 IP-Adresse 192.168.2.139  registriert werden. Der Computer mit IP-Adresse 192.168.2.102
 hat nicht  zugelassen, dass dieser Computer diesen Namen verwendet.
 
Error - 28.09.2012 08:42:36 | Computer Name = Marc-PC | Source = Disk | ID = 262151
Description = Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.
 
Error - 28.09.2012 08:42:38 | Computer Name = Marc-PC | Source = Disk | ID = 262151
Description = Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.
 
Error - 28.09.2012 08:58:21 | Computer Name = Marc-PC | Source = Service Control Manager | ID = 7031
Description = Der Dienst "Apple Mobile Device" wurde unerwartet beendet. Dies ist
 bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden
 durchgeführt: Neustart des Diensts.
 
Error - 28.09.2012 09:23:31 | Computer Name = Marc-PC | Source = DCOM | ID = 10010
Description =
 
Error - 28.09.2012 09:38:44 | Computer Name = Marc-PC | Source = Service Control Manager | ID = 7009
Description = Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst
 Roxio Hard Drive Watcher 12 erreicht.
 
Error - 28.09.2012 09:38:49 | Computer Name = Marc-PC | Source = NetBT | ID = 4321
Description = Der Name "MARC-PC        :0" konnte nicht auf der Schnittstelle mit
 IP-Adresse 192.168.2.139  registriert werden. Der Computer mit IP-Adresse 192.168.2.102
 hat nicht  zugelassen, dass dieser Computer diesen Namen verwendet.
 
Error - 28.09.2012 09:48:01 | Computer Name = Marc-PC | Source = Microsoft-Windows-WLAN-AutoConfig | ID = 10000
Description = Das WLAN-Erweiterungsmodul konnte nicht gestartet werden.    Modulpfad:
 C:\Windows\system32\athExt.dll  Fehlercode: 126 
 
Error - 28.09.2012 10:53:45 | Computer Name = Marc-PC | Source = Service Control Manager | ID = 7009
Description = Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst
 Roxio Hard Drive Watcher 12 erreicht.
 
 
< End of report >
--- --- ---


Mfg Marc

markusg 28.09.2012 17:08
hi
download tdss killer:
http://www.trojaner-board.de/82358-t...entfernen.html
Klicke auf Change parameters
• Setze die Haken bei Verify driver digital signatures und Detect TDLFS file system
• Klick auf OK und anschließend auf Start scan
- bei funden erst mal immer skip wählen, log posten

mac17 28.09.2012 18:10
Code:
19:08:06.0950 4872  TDSS rootkit removing tool 2.8.10.0 Sep 17 2012 19:23:24
19:08:07.0354 4872  ============================================================
19:08:07.0354 4872  Current date / time: 2012/09/28 19:08:07.0354
19:08:07.0354 4872  SystemInfo:
19:08:07.0354 4872 
19:08:07.0354 4872  OS Version: 6.1.7601 ServicePack: 1.0
19:08:07.0354 4872  Product type: Workstation
19:08:07.0354 4872  ComputerName: MARC-PC
19:08:07.0354 4872  UserName: Marc
19:08:07.0354 4872  Windows directory: C:\Windows
19:08:07.0354 4872  System windows directory: C:\Windows
19:08:07.0354 4872  Running under WOW64
19:08:07.0354 4872  Processor architecture: Intel x64
19:08:07.0354 4872  Number of processors: 4
19:08:07.0354 4872  Page size: 0x1000
19:08:07.0354 4872  Boot type: Normal boot
19:08:07.0354 4872  ============================================================
19:08:08.0889 4872  Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 (465.76 Gb), SectorSize: 0x200, Cylinders: 0xFC59, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xF0, Type 'K0', Flags 0x00000040
19:08:08.0889 4872  Drive \Device\Harddisk1\DR1 - Size: 0x1D1C1116000 (1863.02 Gb), SectorSize: 0x200, Cylinders: 0x3B601, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
19:08:08.0892 4872  Drive \Device\Harddisk2\DR2 - Size: 0xE8E0DB6000 (931.51 Gb), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W'
19:08:08.0894 4872  ============================================================
19:08:08.0894 4872  \Device\Harddisk0\DR0:
19:08:08.0894 4872  MBR partitions:
19:08:08.0895 4872  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x32000
19:08:08.0895 4872  \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x32800, BlocksNum 0x3A352000
19:08:08.0895 4872  \Device\Harddisk1\DR1:
19:08:08.0895 4872  MBR partitions:
19:08:08.0895 4872  \Device\Harddisk1\DR1\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x7D000000
19:08:08.0895 4872  \Device\Harddisk1\DR1\Partition2: MBR, Type 0x7, StartLBA 0x7D000800, BlocksNum 0x6BE07000
19:08:08.0895 4872  \Device\Harddisk2\DR2:
19:08:08.0895 4872  MBR partitions:
19:08:08.0895 4872  \Device\Harddisk2\DR2\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x74705982
19:08:08.0895 4872  ============================================================
19:08:08.0913 4872  C: <-> \Device\Harddisk0\DR0\Partition2
19:08:08.0940 4872  K: <-> \Device\Harddisk2\DR2\Partition1
19:08:08.0955 4872  H: <-> \Device\Harddisk0\DR0\Partition1
19:08:09.0371 4872  E: <-> \Device\Harddisk1\DR1\Partition1
19:08:09.0440 4872  I: <-> \Device\Harddisk1\DR1\Partition2
19:08:09.0440 4872  ============================================================
19:08:09.0440 4872  Initialize success
19:08:09.0440 4872  ============================================================
19:08:26.0067 6300  ============================================================
19:08:26.0067 6300  Scan started
19:08:26.0067 6300  Mode: Manual; SigCheck; TDLFS;
19:08:26.0067 6300  ============================================================
19:08:26.0902 6300  ================ Scan system memory ========================
19:08:26.0902 6300  System memory - ok
19:08:26.0903 6300  ================ Scan services =============================
19:08:27.0032 6300  [ A87D604AEA360176311474C87A63BB88 ] 1394ohci        C:\Windows\system32\DRIVERS\1394ohci.sys
19:08:27.0096 6300  1394ohci - ok
19:08:27.0195 6300  [ A15069EEC83EBC54150564B2585CFDBA ] 9734BF6A-2DCD-40f0-BAB0-5AAFEEBE1269 C:\Program Files (x86)\Roxio\BackOnTrack\Disaster Recovery\SaibSVC.exe
19:08:27.0212 6300  9734BF6A-2DCD-40f0-BAB0-5AAFEEBE1269 - ok
19:08:27.0241 6300  [ 3A935600DADB122887B0BD3BCEB0247D ] a2djavs        C:\Windows\system32\Drivers\a2djavs.sys
19:08:27.0252 6300  a2djavs - ok
19:08:27.0316 6300  [ BDED0E1B0A0B5D53B8E174B57545FC75 ] a2djavs_x64    C:\Windows\system32\Drivers\a2djavs_x64.sys
19:08:27.0323 6300  a2djavs_x64 - ok
19:08:27.0378 6300  [ B5821079E99C9420AC78F60D536A9F1F ] a2djusb_svc    C:\Windows\system32\Drivers\a2djusb.sys
19:08:27.0385 6300  a2djusb_svc - ok
19:08:27.0423 6300  [ C515FAFDE87046D2EF465CDA999DB38F ] a2djusb_x64    C:\Windows\system32\Drivers\a2djusb_x64.sys
19:08:27.0433 6300  a2djusb_x64 - ok
19:08:27.0452 6300  [ D81D9E70B8A6DD14D42D7B4EFA65D5F2 ] ACPI            C:\Windows\system32\drivers\ACPI.sys
19:08:27.0464 6300  ACPI - ok
19:08:27.0507 6300  [ 99F8E788246D495CE3794D7E7821D2CA ] AcpiPmi        C:\Windows\system32\drivers\acpipmi.sys
19:08:27.0573 6300  AcpiPmi - ok
19:08:27.0672 6300  [ D19C4EE2AC7C47B8F5F84FFF1A789D8A ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
19:08:27.0680 6300  AdobeARMservice - ok
19:08:27.0811 6300  [ E12CFCF1DDBFC50948A75E6E38793225 ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
19:08:27.0820 6300  AdobeFlashPlayerUpdateSvc - ok
19:08:27.0858 6300  [ 2F6B34B83843F0C5118B63AC634F5BF4 ] adp94xx        C:\Windows\system32\drivers\adp94xx.sys
19:08:27.0873 6300  adp94xx - ok
19:08:27.0911 6300  [ 597F78224EE9224EA1A13D6350CED962 ] adpahci        C:\Windows\system32\drivers\adpahci.sys
19:08:27.0923 6300  adpahci - ok
19:08:27.0954 6300  [ E109549C90F62FB570B9540C4B148E54 ] adpu320        C:\Windows\system32\drivers\adpu320.sys
19:08:27.0964 6300  adpu320 - ok
19:08:27.0980 6300  [ 4B78B431F225FD8624C5655CB1DE7B61 ] AeLookupSvc    C:\Windows\System32\aelupsvc.dll
19:08:28.0089 6300  AeLookupSvc - ok
19:08:28.0132 6300  [ 1C7857B62DE5994A75B054A9FD4C3825 ] AFD            C:\Windows\system32\drivers\afd.sys
19:08:28.0181 6300  AFD - ok
19:08:28.0218 6300  [ 608C14DBA7299D8CB6ED035A68A15799 ] agp440          C:\Windows\system32\drivers\agp440.sys
19:08:28.0226 6300  agp440 - ok
19:08:28.0234 6300  [ 3290D6946B5E30E70414990574883DDB ] ALG            C:\Windows\System32\alg.exe
19:08:28.0256 6300  ALG - ok
19:08:28.0266 6300  [ 5812713A477A3AD7363C7438CA2EE038 ] aliide          C:\Windows\system32\drivers\aliide.sys
19:08:28.0273 6300  aliide - ok
19:08:28.0284 6300  [ 1FF8B4431C353CE385C875F194924C0C ] amdide          C:\Windows\system32\drivers\amdide.sys
19:08:28.0291 6300  amdide - ok
19:08:28.0311 6300  [ 7024F087CFF1833A806193EF9D22CDA9 ] AmdK8          C:\Windows\system32\drivers\amdk8.sys
19:08:28.0330 6300  AmdK8 - ok
19:08:28.0342 6300  [ 1E56388B3FE0D031C44144EB8C4D6217 ] AmdPPM          C:\Windows\system32\drivers\amdppm.sys
19:08:28.0372 6300  AmdPPM - ok
19:08:28.0405 6300  [ D4121AE6D0C0E7E13AA221AA57EF2D49 ] amdsata        C:\Windows\system32\drivers\amdsata.sys
19:08:28.0414 6300  amdsata - ok
19:08:28.0439 6300  [ F67F933E79241ED32FF46A4F29B5120B ] amdsbs          C:\Windows\system32\drivers\amdsbs.sys
19:08:28.0449 6300  amdsbs - ok
19:08:28.0462 6300  [ 540DAF1CEA6094886D72126FD7C33048 ] amdxata        C:\Windows\system32\drivers\amdxata.sys
19:08:28.0470 6300  amdxata - ok
19:08:28.0488 6300  [ 4DE0D5D747A73797C95A97DCCE5018B5 ] androidusb      C:\Windows\system32\Drivers\ssadadb.sys
19:08:28.0503 6300  androidusb - ok
19:08:28.0532 6300  [ 89A69C3F2F319B43379399547526D952 ] AppID          C:\Windows\system32\drivers\appid.sys
19:08:28.0635 6300  AppID - ok
19:08:28.0660 6300  [ 0BC381A15355A3982216F7172F545DE1 ] AppIDSvc        C:\Windows\System32\appidsvc.dll
19:08:28.0700 6300  AppIDSvc - ok
19:08:28.0736 6300  [ 3977D4A871CA0D4F2ED1E7DB46829731 ] Appinfo        C:\Windows\System32\appinfo.dll
19:08:28.0775 6300  Appinfo - ok
19:08:28.0851 6300  [ A5299D04ED225D64CF07A568A3E1BF8C ] Apple Mobile Device C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
19:08:28.0858 6300  Apple Mobile Device - ok
19:08:28.0909 6300  [ 6BE11AD81D4527D299F0CB5F3731AABC ] AppleCharger    C:\Windows\system32\DRIVERS\AppleCharger.sys
19:08:28.0916 6300  AppleCharger - ok
19:08:28.0957 6300  [ 95EF7247C50C7241FDAE39A9B3AFF4AE ] AppleChargerSrv C:\Windows\system32\AppleChargerSrv.exe
19:08:28.0965 6300  AppleChargerSrv - ok
19:08:29.0013 6300  [ 4ABA3E75A76195A3E38ED2766C962899 ] AppMgmt        C:\Windows\System32\appmgmts.dll
19:08:29.0040 6300  AppMgmt - ok
19:08:29.0087 6300  [ C484F8CEB1717C540242531DB7845C4E ] arc            C:\Windows\system32\drivers\arc.sys
19:08:29.0096 6300  arc - ok
19:08:29.0110 6300  [ 019AF6924AEFE7839F61C830227FE79C ] arcsas          C:\Windows\system32\drivers\arcsas.sys
19:08:29.0119 6300  arcsas - ok
19:08:29.0228 6300  [ 9217D874131AE6FF8F642F124F00A555 ] aspnet_state    C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
19:08:29.0236 6300  aspnet_state - ok
19:08:29.0257 6300  [ 769765CE2CC62867468CEA93969B2242 ] AsyncMac        C:\Windows\system32\DRIVERS\asyncmac.sys
19:08:29.0293 6300  AsyncMac - ok
19:08:29.0325 6300  [ 02062C0B390B7729EDC9E69C680A6F3C ] atapi          C:\Windows\system32\drivers\atapi.sys
19:08:29.0333 6300  atapi - ok
19:08:29.0394 6300  [ 7D89B0C443F6068E5B27AA3B972069FF ] athr            C:\Windows\system32\DRIVERS\athrx.sys
19:08:29.0435 6300  athr - ok
19:08:29.0490 6300  [ 36322190763845975E0D001E90687BF2 ] athur          C:\Windows\system32\DRIVERS\athurx.sys
19:08:29.0530 6300  athur - ok
19:08:29.0563 6300  [ B4BDE3F758A34658A37DFED3D9783CD8 ] atksgt          C:\Windows\system32\DRIVERS\atksgt.sys
19:08:29.0572 6300  atksgt - ok
19:08:29.0599 6300  [ F23FEF6D569FCE88671949894A8BECF1 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
19:08:29.0650 6300  AudioEndpointBuilder - ok
19:08:29.0697 6300  [ F23FEF6D569FCE88671949894A8BECF1 ] AudioSrv        C:\Windows\System32\Audiosrv.dll
19:08:29.0726 6300  AudioSrv - ok
19:08:29.0740 6300  [ A6BF31A71B409DFA8CAC83159E1E2AFF ] AxInstSV        C:\Windows\System32\AxInstSV.dll
19:08:29.0794 6300  AxInstSV - ok
19:08:29.0836 6300  [ 3E5B191307609F7514148C6832BB0842 ] b06bdrv        C:\Windows\system32\drivers\bxvbda.sys
19:08:29.0867 6300  b06bdrv - ok
19:08:29.0920 6300  [ B5ACE6968304A3900EEB1EBFD9622DF2 ] b57nd60a        C:\Windows\system32\DRIVERS\b57nd60a.sys
19:08:29.0956 6300  b57nd60a - ok
19:08:30.0035 6300  [ FDE360167101B4E45A96F939F388AEB0 ] BDESVC          C:\Windows\System32\bdesvc.dll
19:08:30.0150 6300  BDESVC - ok
19:08:30.0164 6300  [ 16A47CE2DECC9B099349A5F840654746 ] Beep            C:\Windows\system32\drivers\Beep.sys
19:08:30.0197 6300  Beep - ok
19:08:30.0233 6300  [ 82974D6A2FD19445CC5171FC378668A4 ] BFE            C:\Windows\System32\bfe.dll
19:08:30.0276 6300  BFE - ok
19:08:30.0449 6300  [ A45BE4E091636F6C86D6E4FC945D5A26 ] BHDrvx64        C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.1.0.28\Definitions\BASHDefs\20120919.001\BHDrvx64.sys
19:08:30.0475 6300  BHDrvx64 - ok
19:08:30.0507 6300  [ 1EA7969E3271CBC59E1730697DC74682 ] BITS            C:\Windows\System32\qmgr.dll
19:08:30.0553 6300  BITS - ok
19:08:30.0579 6300  [ 61583EE3C3A17003C4ACD0475646B4D3 ] blbdrive        C:\Windows\system32\DRIVERS\blbdrive.sys
19:08:30.0607 6300  blbdrive - ok
19:08:30.0667 6300  [ EBBCD5DFBB1DE70E8F4AF8FA59E401FD ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe
19:08:30.0680 6300  Bonjour Service - ok
19:08:30.0694 6300  [ 6C02A83164F5CC0A262F4199F0871CF5 ] bowser          C:\Windows\system32\DRIVERS\bowser.sys
19:08:30.0733 6300  bowser - ok
19:08:30.0747 6300  [ F09EEE9EDC320B5E1501F749FDE686C8 ] BrFiltLo        C:\Windows\system32\drivers\BrFiltLo.sys
19:08:30.0772 6300  BrFiltLo - ok
19:08:30.0788 6300  [ B114D3098E9BDB8BEA8B053685831BE6 ] BrFiltUp        C:\Windows\system32\drivers\BrFiltUp.sys
19:08:30.0817 6300  BrFiltUp - ok
19:08:30.0848 6300  [ 05F5A0D14A2EE1D8255C2AA0E9E8E694 ] Browser        C:\Windows\System32\browser.dll
19:08:30.0864 6300  Browser - ok
19:08:30.0887 6300  [ 43BEA8D483BF1870F018E2D02E06A5BD ] Brserid        C:\Windows\System32\Drivers\Brserid.sys
19:08:30.0911 6300  Brserid - ok
19:08:30.0935 6300  [ A6ECA2151B08A09CACECA35C07F05B42 ] BrSerWdm        C:\Windows\System32\Drivers\BrSerWdm.sys
19:08:30.0952 6300  BrSerWdm - ok
19:08:30.0958 6300  [ B79968002C277E869CF38BD22CD61524 ] BrUsbMdm        C:\Windows\System32\Drivers\BrUsbMdm.sys
19:08:30.0969 6300  BrUsbMdm - ok
19:08:30.0979 6300  [ A87528880231C54E75EA7A44943B38BF ] BrUsbSer        C:\Windows\System32\Drivers\BrUsbSer.sys
19:08:30.0988 6300  BrUsbSer - ok
19:08:30.0996 6300  [ 9DA669F11D1F894AB4EB69BF546A42E8 ] BTHMODEM        C:\Windows\system32\drivers\bthmodem.sys
19:08:31.0020 6300  BTHMODEM - ok
19:08:31.0053 6300  [ 95F9C2976059462CBBF227F7AAB10DE9 ] bthserv        C:\Windows\system32\bthserv.dll
19:08:31.0080 6300  bthserv - ok
19:08:31.0189 6300  [ 2C6FFCCA37B002AAB3C7C31A6D780A76 ] ccSet_NIS      C:\Windows\system32\drivers\NISx64\1308000.00E\ccSetx64.sys
19:08:31.0199 6300  ccSet_NIS - ok
19:08:31.0247 6300  [ B8BD2BB284668C84865658C77574381A ] cdfs            C:\Windows\system32\DRIVERS\cdfs.sys
19:08:31.0279 6300  cdfs - ok
19:08:31.0307 6300  [ F036CE71586E93D94DAB220D7BDF4416 ] cdrom          C:\Windows\system32\DRIVERS\cdrom.sys
19:08:31.0331 6300  cdrom - ok
19:08:31.0343 6300  [ F17D1D393BBC69C5322FBFAFACA28C7F ] CertPropSvc    C:\Windows\System32\certprop.dll
19:08:31.0378 6300  CertPropSvc - ok
19:08:31.0384 6300  [ D7CD5C4E1B71FA62050515314CFB52CF ] circlass        C:\Windows\system32\drivers\circlass.sys
19:08:31.0396 6300  circlass - ok
19:08:31.0413 6300  [ FE1EC06F2253F691FE36217C592A0206 ] CLFS            C:\Windows\system32\CLFS.sys
19:08:31.0426 6300  CLFS - ok
19:08:31.0466 6300  [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
19:08:31.0473 6300  clr_optimization_v2.0.50727_32 - ok
19:08:31.0510 6300  [ D1CEEA2B47CB998321C579651CE3E4F8 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
19:08:31.0518 6300  clr_optimization_v2.0.50727_64 - ok
19:08:31.0595 6300  [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
19:08:31.0603 6300  clr_optimization_v4.0.30319_32 - ok
19:08:31.0644 6300  [ C6F9AF94DCD58122A4D7E89DB6BED29D ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
19:08:31.0651 6300  clr_optimization_v4.0.30319_64 - ok
19:08:31.0688 6300  [ 0840155D0BDDF1190F84A663C284BD33 ] CmBatt          C:\Windows\system32\drivers\CmBatt.sys
19:08:31.0709 6300  CmBatt - ok
19:08:31.0718 6300  [ E19D3F095812725D88F9001985B94EDD ] cmdide          C:\Windows\system32\drivers\cmdide.sys
19:08:31.0726 6300  cmdide - ok
19:08:31.0767 6300  [ 9AC4F97C2D3E93367E2148EA940CD2CD ] CNG            C:\Windows\system32\Drivers\cng.sys
19:08:31.0786 6300  CNG - ok
19:08:31.0800 6300  [ 102DE219C3F61415F964C88E9085AD14 ] Compbatt        C:\Windows\system32\drivers\compbatt.sys
19:08:31.0808 6300  Compbatt - ok
19:08:31.0824 6300  [ 03EDB043586CCEBA243D689BDDA370A8 ] CompositeBus    C:\Windows\system32\DRIVERS\CompositeBus.sys
19:08:31.0852 6300  CompositeBus - ok
19:08:31.0854 6300  COMSysApp - ok
19:08:31.0868 6300  [ 1C827878A998C18847245FE1F34EE597 ] crcdisk        C:\Windows\system32\drivers\crcdisk.sys
19:08:31.0876 6300  crcdisk - ok
19:08:31.0904 6300  [ 4F5414602E2544A4554D95517948B705 ] CryptSvc        C:\Windows\system32\cryptsvc.dll
19:08:31.0944 6300  CryptSvc - ok
19:08:31.0974 6300  [ 54DA3DFD29ED9F1619B6F53F3CE55E49 ] CSC            C:\Windows\system32\drivers\csc.sys
19:08:32.0016 6300  CSC - ok
19:08:32.0036 6300  [ 3AB183AB4D2C79DCF459CD2C1266B043 ] CscService      C:\Windows\System32\cscsvc.dll
19:08:32.0058 6300  CscService - ok
19:08:32.0104 6300  [ 1CA90212A99DB6975C344826D11055C9 ] dc3d            C:\Windows\system32\DRIVERS\dc3d.sys
19:08:32.0111 6300  dc3d - ok
19:08:32.0131 6300  [ 5C627D1B1138676C0A7AB2C2C190D123 ] DcomLaunch      C:\Windows\system32\rpcss.dll
19:08:32.0161 6300  DcomLaunch - ok
19:08:32.0198 6300  [ 3CEC7631A84943677AA8FA8EE5B6B43D ] defragsvc      C:\Windows\System32\defragsvc.dll
19:08:32.0229 6300  defragsvc - ok
19:08:32.0323 6300  [ FDC0C5ADDE1CDE6EDB0BEF78F0699AF3 ] DES2 Service    C:\Program Files (x86)\GIGABYTE\EnergySaver2\des2svr.exe
19:08:32.0330 6300  DES2 Service - ok
19:08:32.0342 6300  [ 9BB2EF44EAA163B29C4A4587887A0FE4 ] DfsC            C:\Windows\system32\Drivers\dfsc.sys
19:08:32.0368 6300  DfsC - ok
19:08:32.0398 6300  [ 105373D52E71D2D1355AD3ACD18259C3 ] dg_ssudbus      C:\Windows\system32\DRIVERS\ssudbus.sys
19:08:32.0406 6300  dg_ssudbus - ok
19:08:32.0437 6300  [ 43D808F5D9E1A18E5EEB5EBC83969E4E ] Dhcp            C:\Windows\system32\dhcpcore.dll
19:08:32.0476 6300  Dhcp - ok
19:08:32.0507 6300  [ 13096B05847EC78F0977F2C0F79E9AB3 ] discache        C:\Windows\system32\drivers\discache.sys
19:08:32.0532 6300  discache - ok
19:08:32.0589 6300  [ 9819EEE8B5EA3784EC4AF3B137A5244C ] Disk            C:\Windows\system32\drivers\disk.sys
19:08:32.0597 6300  Disk - ok
19:08:32.0628 6300  [ 5DB085A8A6600BE6401F2B24EECB5415 ] dmvsc          C:\Windows\system32\drivers\dmvsc.sys
19:08:32.0648 6300  dmvsc - ok
19:08:32.0657 6300  [ 16835866AAA693C7D7FCEBA8FFF706E4 ] Dnscache        C:\Windows\System32\dnsrslvr.dll
19:08:32.0677 6300  Dnscache - ok
19:08:32.0690 6300  [ B1FB3DDCA0FDF408750D5843591AFBC6 ] dot3svc        C:\Windows\System32\dot3svc.dll
19:08:32.0717 6300  dot3svc - ok
19:08:32.0728 6300  [ B26F4F737E8F9DF4F31AF6CF31D05820 ] DPS            C:\Windows\system32\dps.dll
19:08:32.0766 6300  DPS - ok
19:08:32.0804 6300  [ 9B19F34400D24DF84C858A421C205754 ] drmkaud        C:\Windows\system32\drivers\drmkaud.sys
19:08:32.0815 6300  drmkaud - ok
19:08:32.0844 6300  [ 46571ED73AE84469DCA53081D33CF3C8 ] dtsoftbus01    C:\Windows\system32\DRIVERS\dtsoftbus01.sys
19:08:32.0854 6300  dtsoftbus01 - ok
19:08:32.0875 6300  [ F5BEE30450E18E6B83A5012C100616FD ] DXGKrnl        C:\Windows\System32\drivers\dxgkrnl.sys
19:08:32.0896 6300  DXGKrnl - ok
19:08:32.0914 6300  EagleX64 - ok
19:08:32.0930 6300  [ E2DDA8726DA9CB5B2C4000C9018A9633 ] EapHost        C:\Windows\System32\eapsvc.dll
19:08:32.0957 6300  EapHost - ok
19:08:33.0003 6300  [ DC5D737F51BE844D8C82C695EB17372F ] ebdrv          C:\Windows\system32\drivers\evbda.sys
19:08:33.0066 6300  ebdrv - ok
19:08:33.0113 6300  [ 4353FF94D47A0A9D52B89ECCF0CDB013 ] eeCtrl          C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys
19:08:33.0127 6300  eeCtrl - ok
19:08:33.0149 6300  [ C118A82CD78818C29AB228366EBF81C3 ] EFS            C:\Windows\System32\lsass.exe
19:08:33.0173 6300  EFS - ok
19:08:33.0214 6300  [ C4002B6B41975F057D98C439030CEA07 ] ehRecvr        C:\Windows\ehome\ehRecvr.exe
19:08:33.0241 6300  ehRecvr - ok
19:08:33.0252 6300  [ 4705E8EF9934482C5BB488CE28AFC681 ] ehSched        C:\Windows\ehome\ehsched.exe
19:08:33.0274 6300  ehSched - ok
19:08:33.0297 6300  [ 0E5DA5369A0FCAEA12456DD852545184 ] elxstor        C:\Windows\system32\drivers\elxstor.sys
19:08:33.0312 6300  elxstor - ok
19:08:33.0392 6300  [ B5581646636759D0DAFA8B008881C079 ] EPSON_EB_RPCV4_01 C:\ProgramData\EPSON\EPW!3 SSRP\E_S40STB.EXE
19:08:33.0412 6300  EPSON_EB_RPCV4_01 - ok
19:08:33.0440 6300  [ 1E345F2A2D95DA3190596E691CDE9342 ] EPSON_PM_RPCV4_01 C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE
19:08:33.0448 6300  EPSON_PM_RPCV4_01 - ok
19:08:33.0525 6300  [ C5BCCB378D0A896304A3E71BE7215983 ] EraserUtilRebootDrv C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys
19:08:33.0536 6300  EraserUtilRebootDrv - ok
19:08:33.0549 6300  [ 34A3C54752046E79A126E15C51DB409B ] ErrDev          C:\Windows\system32\drivers\errdev.sys
19:08:33.0558 6300  ErrDev - ok
19:08:33.0594 6300  [ 84486624268E078255BC7AA47F0960BC ] etdrv          C:\Windows\etdrv.sys
19:08:33.0601 6300  etdrv - ok
19:08:33.0638 6300  [ 3663291D0D26001A2BB67678AB61D14C ] EtronHub3      C:\Windows\system32\Drivers\EtronHub3.sys
19:08:33.0667 6300  EtronHub3 - ok
19:08:33.0698 6300  [ 744420D6C062C38F7361870F010D6D4B ] EtronXHCI      C:\Windows\system32\Drivers\EtronXHCI.sys
19:08:33.0718 6300  EtronXHCI - ok
19:08:33.0747 6300  [ 4166F82BE4D24938977DD1746BE9B8A0 ] EventSystem    C:\Windows\system32\es.dll
19:08:33.0781 6300  EventSystem - ok
19:08:33.0832 6300  [ A510C654EC00C1E9BDD91EEB3A59823B ] exfat          C:\Windows\system32\drivers\exfat.sys
19:08:33.0869 6300  exfat - ok
19:08:33.0906 6300  Fabs - ok
19:08:33.0935 6300  [ 0ADC83218B66A6DB380C330836F3E36D ] fastfat        C:\Windows\system32\drivers\fastfat.sys
19:08:33.0968 6300  fastfat - ok
19:08:33.0990 6300  [ DBEFD454F8318A0EF691FDD2EAAB44EB ] Fax            C:\Windows\system32\fxssvc.exe
19:08:34.0006 6300  Fax - ok
19:08:34.0013 6300  [ D765D19CD8EF61F650C384F62FAC00AB ] fdc            C:\Windows\system32\drivers\fdc.sys
19:08:34.0023 6300  fdc - ok
19:08:34.0034 6300  [ 0438CAB2E03F4FB61455A7956026FE86 ] fdPHost        C:\Windows\system32\fdPHost.dll
19:08:34.0078 6300  fdPHost - ok
19:08:34.0092 6300  [ 802496CB59A30349F9A6DD22D6947644 ] FDResPub        C:\Windows\system32\fdrespub.dll
19:08:34.0126 6300  FDResPub - ok
19:08:34.0139 6300  [ 655661BE46B5F5F3FD454E2C3095B930 ] FileInfo        C:\Windows\system32\drivers\fileinfo.sys
19:08:34.0147 6300  FileInfo - ok
19:08:34.0157 6300  [ 5F671AB5BC87EEA04EC38A6CD5962A47 ] Filetrace      C:\Windows\system32\drivers\filetrace.sys
19:08:34.0182 6300  Filetrace - ok
19:08:34.0239 6300  [ C623057D3905323F760A8B3C8523C072 ] FileZilla Server C:\Program Files (x86)\FileZilla Server\FileZilla Server.exe
19:08:34.0250 6300  FileZilla Server ( UnsignedFile.Multi.Generic ) - warning
19:08:34.0250 6300  FileZilla Server - detected UnsignedFile.Multi.Generic (1)
19:08:34.0310 6300  [ FFF1130F7C9FA01D093A1EDFC5CCE8FC ] FirebirdServerMAGIXInstance C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe
19:08:34.0383 6300  FirebirdServerMAGIXInstance ( UnsignedFile.Multi.Generic ) - warning
19:08:34.0383 6300  FirebirdServerMAGIXInstance - detected UnsignedFile.Multi.Generic (1)
19:08:34.0401 6300  [ C172A0F53008EAEB8EA33FE10E177AF5 ] flpydisk        C:\Windows\system32\drivers\flpydisk.sys
19:08:34.0426 6300  flpydisk - ok
19:08:34.0448 6300  [ DA6B67270FD9DB3697B20FCE94950741 ] FltMgr          C:\Windows\system32\drivers\fltmgr.sys
19:08:34.0460 6300  FltMgr - ok
19:08:34.0491 6300  [ 5C4CB4086FB83115B153E47ADD961A0C ] FontCache      C:\Windows\system32\FntCache.dll
19:08:34.0527 6300  FontCache - ok
19:08:34.0572 6300  [ A8B7F3818AB65695E3A0BB3279F6DCE6 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
19:08:34.0579 6300  FontCache3.0.0.0 - ok
19:08:34.0587 6300  [ D43703496149971890703B4B1B723EAC ] FsDepends      C:\Windows\system32\drivers\FsDepends.sys
19:08:34.0595 6300  FsDepends - ok
19:08:34.0616 6300  [ 6BD9295CC032DD3077C671FCCF579A7B ] Fs_Rec          C:\Windows\system32\drivers\Fs_Rec.sys
19:08:34.0624 6300  Fs_Rec - ok
19:08:34.0646 6300  [ 1F7B25B858FA27015169FE95E54108ED ] fvevol          C:\Windows\system32\DRIVERS\fvevol.sys
19:08:34.0660 6300  fvevol - ok
19:08:34.0698 6300  [ 8C778D335C9D272CFD3298AB02ABE3B6 ] gagp30kx        C:\Windows\system32\drivers\gagp30kx.sys
19:08:34.0707 6300  gagp30kx - ok
19:08:34.0734 6300  [ 7907E14F9BCF3A4689C9A74A1A873CB6 ] gdrv            C:\Windows\gdrv.sys
19:08:34.0740 6300  gdrv - ok
19:08:34.0763 6300  [ 8E98D21EE06192492A5671A6144D092F ] GEARAspiWDM    C:\Windows\system32\DRIVERS\GEARAspiWDM.sys
19:08:34.0769 6300  GEARAspiWDM - ok
19:08:34.0837 6300  [ 2DDD5CBB203C3C3FD6F74979EBD8CC92 ] GEST Service    C:\Program Files (x86)\GIGABYTE\EnergySaver\GSvr.exe
19:08:34.0844 6300  GEST Service - ok
19:08:34.0863 6300  [ 277BBC7E1AA1EE957F573A10ECA7EF3A ] gpsvc          C:\Windows\System32\gpsvc.dll
19:08:34.0896 6300  gpsvc - ok
19:08:34.0944 6300  [ F02A533F517EB38333CB12A9E8963773 ] gupdate        C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
19:08:34.0951 6300  gupdate - ok
19:08:34.0965 6300  [ F02A533F517EB38333CB12A9E8963773 ] gupdatem        C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
19:08:34.0972 6300  gupdatem - ok
19:08:34.0988 6300  [ 8126331FBD4ED29EB3B356F9C905064D ] GVTDrv64        C:\Windows\GVTDrv64.sys
19:08:34.0996 6300  GVTDrv64 - ok
19:08:35.0030 6300  [ 1E6438D4EA6E1174A3B3B1EDC4DE660B ] hamachi        C:\Windows\system32\DRIVERS\hamachi.sys
19:08:35.0037 6300  hamachi - ok
19:08:35.0137 6300  [ F10C3F2E002100BF8B797DCF283FEA7D ] Hamachi2Svc    C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
19:08:35.0181 6300  Hamachi2Svc - ok
19:08:35.0216 6300  [ F2523EF6460FC42405B12248338AB2F0 ] hcw85cir        C:\Windows\system32\drivers\hcw85cir.sys
19:08:35.0244 6300  hcw85cir - ok
19:08:35.0326 6300  [ 975761C778E33CD22498059B91E7373A ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
19:08:35.0378 6300  HdAudAddService - ok
19:08:35.0421 6300  [ 97BFED39B6B79EB12CDDBFEED51F56BB ] HDAudBus        C:\Windows\system32\DRIVERS\HDAudBus.sys
19:08:35.0534 6300  HDAudBus - ok
19:08:35.0578 6300  [ 78E86380454A7B10A5EB255DC44A355F ] HidBatt        C:\Windows\system32\drivers\HidBatt.sys
19:08:35.0597 6300  HidBatt - ok
19:08:35.0610 6300  [ 7FD2A313F7AFE5C4DAB14798C48DD104 ] HidBth          C:\Windows\system32\drivers\hidbth.sys
19:08:35.0622 6300  HidBth - ok
19:08:35.0631 6300  [ 0A77D29F311B88CFAE3B13F9C1A73825 ] HidIr          C:\Windows\system32\drivers\hidir.sys
19:08:35.0654 6300  HidIr - ok
19:08:35.0677 6300  [ BD9EB3958F213F96B97B1D897DEE006D ] hidserv        C:\Windows\system32\hidserv.dll
19:08:35.0712 6300  hidserv - ok
19:08:35.0734 6300  [ 9592090A7E2B61CD582B612B6DF70536 ] HidUsb          C:\Windows\system32\DRIVERS\hidusb.sys
19:08:35.0743 6300  HidUsb - ok
19:08:35.0764 6300  [ 387E72E739E15E3D37907A86D9FF98E2 ] hkmsvc          C:\Windows\system32\kmsvc.dll
19:08:35.0795 6300  hkmsvc - ok
19:08:35.0810 6300  [ EFDFB3DD38A4376F93E7985173813ABD ] HomeGroupListener C:\Windows\system32\ListSvc.dll
19:08:35.0820 6300  HomeGroupListener - ok
19:08:35.0828 6300  [ 908ACB1F594274965A53926B10C81E89 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
19:08:35.0838 6300  HomeGroupProvider - ok
19:08:35.0862 6300  [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC ] HpSAMD          C:\Windows\system32\drivers\HpSAMD.sys
19:08:35.0870 6300  HpSAMD - ok
19:08:35.0892 6300  [ 0EA7DE1ACB728DD5A369FD742D6EEE28 ] HTTP            C:\Windows\system32\drivers\HTTP.sys
19:08:35.0926 6300  HTTP - ok
19:08:35.0933 6300  [ A5462BD6884960C9DC85ED49D34FF392 ] hwpolicy        C:\Windows\system32\drivers\hwpolicy.sys
19:08:35.0941 6300  hwpolicy - ok
19:08:35.0950 6300  [ FA55C73D4AFFA7EE23AC4BE53B4592D3 ] i8042prt        C:\Windows\system32\DRIVERS\i8042prt.sys
19:08:35.0972 6300  i8042prt - ok
19:08:36.0009 6300  [ AAAF44DB3BD0B9D1FB6969B23ECC8366 ] iaStorV        C:\Windows\system32\drivers\iaStorV.sys
19:08:36.0022 6300  iaStorV - ok
19:08:36.0085 6300  [ 1CF03C69B49ACB70C722DF92755C0C8C ] IDriverT        C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
19:08:36.0094 6300  IDriverT ( UnsignedFile.Multi.Generic ) - warning
19:08:36.0094 6300  IDriverT - detected UnsignedFile.Multi.Generic (1)
19:08:36.0125 6300  [ 5988FC40F8DB5B0739CD1E3A5D0D78BD ] idsvc          C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
19:08:36.0143 6300  idsvc - ok
19:08:36.0208 6300  [ A48928D4CCA6F8B731989DB08CF2C0AB ] IDSVia64        C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.1.0.28\Definitions\IPSDefs\20120927.001\IDSvia64.sys
19:08:36.0222 6300  IDSVia64 - ok
19:08:36.0234 6300  [ 5C18831C61933628F5BB0EA2675B9D21 ] iirsp          C:\Windows\system32\drivers\iirsp.sys
19:08:36.0243 6300  iirsp - ok
19:08:36.0267 6300  [ FCD84C381E0140AF901E58D48882D26B ] IKEEXT          C:\Windows\System32\ikeext.dll
19:08:36.0309 6300  IKEEXT - ok
19:08:36.0388 6300  [ A5F7CEF8A939EBE270462EDEFD629F20 ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHD64.sys
19:08:36.0466 6300  IntcAzAudAddService - ok
19:08:36.0482 6300  [ F00F20E70C6EC3AA366910083A0518AA ] intelide        C:\Windows\system32\drivers\intelide.sys
19:08:36.0490 6300  intelide - ok
19:08:36.0503 6300  [ ADA036632C664CAA754079041CF1F8C1 ] intelppm        C:\Windows\system32\DRIVERS\intelppm.sys
19:08:36.0522 6300  intelppm - ok
19:08:36.0542 6300  [ 098A91C54546A3B878DAD6A7E90A455B ] IPBusEnum      C:\Windows\system32\ipbusenum.dll
19:08:36.0581 6300  IPBusEnum - ok
19:08:36.0616 6300  [ C9F0E1BD74365A8771590E9008D22AB6 ] IpFilterDriver  C:\Windows\system32\DRIVERS\ipfltdrv.sys
19:08:36.0646 6300  IpFilterDriver - ok
19:08:36.0662 6300  [ A34A587FFFD45FA649FBA6D03784D257 ] iphlpsvc        C:\Windows\System32\iphlpsvc.dll
19:08:36.0693 6300  iphlpsvc - ok
19:08:36.0705 6300  [ 0FC1AEA580957AA8817B8F305D18CA3A ] IPMIDRV        C:\Windows\system32\drivers\IPMIDrv.sys
19:08:36.0721 6300  IPMIDRV - ok
19:08:36.0732 6300  [ AF9B39A7E7B6CAA203B3862582E9F2D0 ] IPNAT          C:\Windows\system32\drivers\ipnat.sys
19:08:36.0769 6300  IPNAT - ok
19:08:36.0849 6300  [ 6E50CFA46527B39015B750AAD161C5CC ] iPod Service    C:\Program Files\iPod\bin\iPodService.exe
19:08:36.0868 6300  iPod Service - ok
19:08:36.0896 6300  [ 02DEF37AB75E0032C50724646F708DE8 ] iPodDrv        C:\Windows\system32\drivers\iPodDrv.sys
19:08:36.0904 6300  iPodDrv - ok
19:08:36.0922 6300  [ 3ABF5E7213EB28966D55D58B515D5CE9 ] IRENUM          C:\Windows\system32\drivers\irenum.sys
19:08:36.0948 6300  IRENUM - ok
19:08:36.0963 6300  [ 2F7B28DC3E1183E5EB418DF55C204F38 ] isapnp          C:\Windows\system32\drivers\isapnp.sys
19:08:36.0971 6300  isapnp - ok
19:08:37.0001 6300  [ D931D7309DEB2317035B07C9F9E6B0BD ] iScsiPrt        C:\Windows\system32\drivers\msiscsi.sys
19:08:37.0012 6300  iScsiPrt - ok
19:08:37.0029 6300  [ BC02336F1CBA7DCC7D1213BB588A68A5 ] kbdclass        C:\Windows\system32\DRIVERS\kbdclass.sys
19:08:37.0038 6300  kbdclass - ok
19:08:37.0054 6300  [ 0705EFF5B42A9DB58548EEC3B26BB484 ] kbdhid          C:\Windows\system32\DRIVERS\kbdhid.sys
19:08:37.0064 6300  kbdhid - ok
19:08:37.0074 6300  [ C118A82CD78818C29AB228366EBF81C3 ] KeyIso          C:\Windows\system32\lsass.exe
19:08:37.0083 6300  KeyIso - ok
19:08:37.0103 6300  [ 07071C1E3CD8F0F9114AAC8B072CA1E5 ] KMWDFILTER      C:\Windows\system32\DRIVERS\KMWDFILTER.sys
19:08:37.0110 6300  KMWDFILTER - ok
19:08:37.0163 6300  [ 21153127E50EAAEEEB6282B3D17FBCDF ] ks2avs          C:\Windows\system32\Drivers\ks2avs.sys
19:08:37.0173 6300  ks2avs - ok
19:08:37.0200 6300  [ 5DA41A519DFF55EF3A969577E18119E0 ] ks2usb_svc      C:\Windows\system32\Drivers\ks2usb.sys
19:08:37.0208 6300  ks2usb_svc - ok
19:08:37.0234 6300  [ 97A7070AEA4C058B6418519E869A63B4 ] KSecDD          C:\Windows\system32\Drivers\ksecdd.sys
19:08:37.0243 6300  KSecDD - ok
19:08:37.0256 6300  [ 26C43A7C2862447EC59DEDA188D1DA07 ] KSecPkg        C:\Windows\system32\Drivers\ksecpkg.sys
19:08:37.0266 6300  KSecPkg - ok
19:08:37.0293 6300  [ 6869281E78CB31A43E969F06B57347C4 ] ksthunk        C:\Windows\system32\drivers\ksthunk.sys
19:08:37.0318 6300  ksthunk - ok
19:08:37.0341 6300  [ 6AB66E16AA859232F64DEB66887A8C9C ] KtmRm          C:\Windows\system32\msdtckrm.dll
19:08:37.0382 6300  KtmRm - ok
19:08:37.0404 6300  [ D9F42719019740BAA6D1C6D536CBDAA6 ] LanmanServer    C:\Windows\system32\srvsvc.dll
19:08:37.0446 6300  LanmanServer - ok
19:08:37.0472 6300  [ 851A1382EED3E3A7476DB004F4EE3E1A ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
19:08:37.0499 6300  LanmanWorkstation - ok
19:08:37.0521 6300  [ 955982BF4421B77722196552B62E8DC2 ] lirsgt          C:\Windows\system32\DRIVERS\lirsgt.sys
19:08:37.0529 6300  lirsgt - ok
19:08:37.0549 6300  [ 1538831CF8AD2979A04C423779465827 ] lltdio          C:\Windows\system32\DRIVERS\lltdio.sys
19:08:37.0593 6300  lltdio - ok
19:08:37.0644 6300  [ C1185803384AB3FEED115F79F109427F ] lltdsvc        C:\Windows\System32\lltdsvc.dll
19:08:37.0673 6300  lltdsvc - ok
19:08:37.0681 6300  [ F993A32249B66C9D622EA5592A8B76B8 ] lmhosts        C:\Windows\System32\lmhsvc.dll
19:08:37.0707 6300  lmhosts - ok
19:08:37.0725 6300  [ 1A93E54EB0ECE102495A51266DCDB6A6 ] LSI_FC          C:\Windows\system32\drivers\lsi_fc.sys
19:08:37.0734 6300  LSI_FC - ok
19:08:37.0747 6300  [ 1047184A9FDC8BDBFF857175875EE810 ] LSI_SAS        C:\Windows\system32\drivers\lsi_sas.sys
19:08:37.0755 6300  LSI_SAS - ok
19:08:37.0764 6300  [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93 ] LSI_SAS2        C:\Windows\system32\drivers\lsi_sas2.sys
19:08:37.0773 6300  LSI_SAS2 - ok
19:08:37.0809 6300  [ 0504EACAFF0D3C8AED161C4B0D369D4A ] LSI_SCSI        C:\Windows\system32\drivers\lsi_scsi.sys
19:08:37.0818 6300  LSI_SCSI - ok
19:08:37.0836 6300  [ 43D0F98E1D56CCDDB0D5254CFF7B356E ] luafv          C:\Windows\system32\drivers\luafv.sys
19:08:37.0863 6300  luafv - ok
19:08:37.0899 6300  [ 0C85B2B6FB74B36A251792D45E0EF860 ] LVRS64          C:\Windows\system32\DRIVERS\lvrs64.sys
19:08:37.0912 6300  LVRS64 - ok
19:08:37.0994 6300  [ FF3A488924B0032B1A9CA6948C1FA9E8 ] LVUVC64        C:\Windows\system32\DRIVERS\lvuvc64.sys
19:08:38.0093 6300  LVUVC64 - ok
19:08:38.0141 6300  [ 922CBAC7B992B9614CAB7122F4BF9406 ] ManyCam        C:\Windows\system32\DRIVERS\mcvidrv_x64.sys
19:08:38.0149 6300  ManyCam - ok
19:08:38.0171 6300  [ 34A42DD7CF525D0D2C5232916496E4B8 ] mcaudrv_simple  C:\Windows\system32\drivers\mcaudrv_x64.sys
19:08:38.0192 6300  mcaudrv_simple - ok
19:08:38.0216 6300  [ 0BE09CD858ABF9DF6ED259D57A1A1663 ] Mcx2Svc        C:\Windows\system32\Mcx2Svc.dll
19:08:38.0232 6300  Mcx2Svc - ok
19:08:38.0266 6300  [ A55805F747C6EDB6A9080D7C633BD0F4 ] megasas        C:\Windows\system32\drivers\megasas.sys
19:08:38.0274 6300  megasas - ok
19:08:38.0290 6300  [ BAF74CE0072480C3B6B7C13B2A94D6B3 ] MegaSR          C:\Windows\system32\drivers\MegaSR.sys
19:08:38.0301 6300  MegaSR - ok
19:08:38.0331 6300  [ A6518DCC42F7A6E999BB3BEA8FD87567 ] MEIx64          C:\Windows\system32\DRIVERS\HECIx64.sys
19:08:38.0339 6300  MEIx64 - ok
19:08:38.0390 6300  Microsoft SharePoint Workspace Audit Service - ok
19:08:38.0402 6300  [ E40E80D0304A73E8D269F7141D77250B ] MMCSS          C:\Windows\system32\mmcss.dll
19:08:38.0429 6300  MMCSS - ok
19:08:38.0455 6300  [ 800BA92F7010378B09F9ED9270F07137 ] Modem          C:\Windows\system32\drivers\modem.sys
19:08:38.0491 6300  Modem - ok
19:08:38.0526 6300  [ B03D591DC7DA45ECE20B3B467E6AADAA ] monitor        C:\Windows\system32\DRIVERS\monitor.sys
19:08:38.0548 6300  monitor - ok
19:08:38.0567 6300  [ 7D27EA49F3C1F687D357E77A470AEA99 ] mouclass        C:\Windows\system32\DRIVERS\mouclass.sys
19:08:38.0576 6300  mouclass - ok
19:08:38.0592 6300  [ D3BF052C40B0C4166D9FD86A4288C1E6 ] mouhid          C:\Windows\system32\DRIVERS\mouhid.sys
19:08:38.0617 6300  mouhid - ok
19:08:38.0667 6300  [ 32E7A3D591D671A6DF2DB515A5CBE0FA ] mountmgr        C:\Windows\system32\drivers\mountmgr.sys
19:08:38.0676 6300  mountmgr - ok
19:08:38.0742 6300  [ CB8AF049AC9BE419A77ADAE288673359 ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
19:08:38.0750 6300  MozillaMaintenance - ok
19:08:38.0767 6300  [ A44B420D30BD56E145D6A2BC8768EC58 ] mpio            C:\Windows\system32\drivers\mpio.sys
19:08:38.0777 6300  mpio - ok
19:08:38.0788 6300  [ 6C38C9E45AE0EA2FA5E551F2ED5E978F ] mpsdrv          C:\Windows\system32\drivers\mpsdrv.sys
19:08:38.0813 6300  mpsdrv - ok
19:08:38.0861 6300  [ 54FFC9C8898113ACE189D4AA7199D2C1 ] MpsSvc          C:\Windows\system32\mpssvc.dll
19:08:38.0894 6300  MpsSvc - ok
19:08:38.0903 6300  [ DC722758B8261E1ABAFD31A3C0A66380 ] MRxDAV          C:\Windows\system32\drivers\mrxdav.sys
19:08:38.0918 6300  MRxDAV - ok
19:08:38.0930 6300  [ A5D9106A73DC88564C825D317CAC68AC ] mrxsmb          C:\Windows\system32\DRIVERS\mrxsmb.sys
19:08:38.0952 6300  mrxsmb - ok
19:08:38.0986 6300  [ D711B3C1D5F42C0C2415687BE09FC163 ] mrxsmb10        C:\Windows\system32\DRIVERS\mrxsmb10.sys
19:08:38.0998 6300  mrxsmb10 - ok
19:08:39.0008 6300  [ 9423E9D355C8D303E76B8CFBD8A5C30C ] mrxsmb20        C:\Windows\system32\DRIVERS\mrxsmb20.sys
19:08:39.0030 6300  mrxsmb20 - ok
19:08:39.0040 6300  [ C25F0BAFA182CBCA2DD3C851C2E75796 ] msahci          C:\Windows\system32\drivers\msahci.sys
19:08:39.0048 6300  msahci - ok
19:08:39.0078 6300  [ 41FB1D61DF09C36CCAB0B04EEC66F6D5 ] MSCamSvc        C:\Program Files\Microsoft LifeCam\MSCamS64.exe
19:08:39.0087 6300  MSCamSvc - ok
19:08:39.0107 6300  [ DB801A638D011B9633829EB6F663C900 ] msdsm          C:\Windows\system32\drivers\msdsm.sys
19:08:39.0116 6300  msdsm - ok
19:08:39.0124 6300  [ DE0ECE52236CFA3ED2DBFC03F28253A8 ] MSDTC          C:\Windows\System32\msdtc.exe
19:08:39.0136 6300  MSDTC - ok
19:08:39.0151 6300  [ AA3FB40E17CE1388FA1BEDAB50EA8F96 ] Msfs            C:\Windows\system32\drivers\Msfs.sys
19:08:39.0183 6300  Msfs - ok
19:08:39.0200 6300  [ F9D215A46A8B9753F61767FA72A20326 ] mshidkmdf      C:\Windows\System32\drivers\mshidkmdf.sys
19:08:39.0225 6300  mshidkmdf - ok
19:08:39.0229 6300  [ D916874BBD4F8B07BFB7FA9B3CCAE29D ] msisadrv        C:\Windows\system32\drivers\msisadrv.sys
19:08:39.0237 6300  msisadrv - ok
19:08:39.0257 6300  [ 808E98FF49B155C522E6400953177B08 ] MSiSCSI        C:\Windows\system32\iscsiexe.dll
19:08:39.0291 6300  MSiSCSI - ok
19:08:39.0293 6300  msiserver - ok
19:08:39.0312 6300  [ 49CCF2C4FEA34FFAD8B1B59D49439366 ] MSKSSRV        C:\Windows\system32\drivers\MSKSSRV.sys
19:08:39.0338 6300  MSKSSRV - ok
19:08:39.0354 6300  [ BDD71ACE35A232104DDD349EE70E1AB3 ] MSPCLOCK        C:\Windows\system32\drivers\MSPCLOCK.sys
19:08:39.0381 6300  MSPCLOCK - ok
19:08:39.0390 6300  [ 4ED981241DB27C3383D72092B618A1D0 ] MSPQM          C:\Windows\system32\drivers\MSPQM.sys
19:08:39.0426 6300  MSPQM - ok
19:08:39.0439 6300  [ 759A9EEB0FA9ED79DA1FB7D4EF78866D ] MsRPC          C:\Windows\system32\drivers\MsRPC.sys
19:08:39.0452 6300  MsRPC - ok
19:08:39.0455 6300  [ 0EED230E37515A0EAEE3C2E1BC97B288 ] mssmbios        C:\Windows\system32\DRIVERS\mssmbios.sys
19:08:39.0463 6300  mssmbios - ok
19:08:39.0491 6300  [ 2E66F9ECB30B4221A318C92AC2250779 ] MSTEE          C:\Windows\system32\drivers\MSTEE.sys
19:08:39.0516 6300  MSTEE - ok
19:08:39.0523 6300  [ 7EA404308934E675BFFDE8EDF0757BCD ] MTConfig        C:\Windows\system32\drivers\MTConfig.sys
19:08:39.0532 6300  MTConfig - ok
19:08:39.0557 6300  [ F9A18612FD3526FE473C1BDA678D61C8 ] Mup            C:\Windows\system32\Drivers\mup.sys
19:08:39.0566 6300  Mup - ok
19:08:39.0586 6300  [ 582AC6D9873E31DFA28A4547270862DD ] napagent        C:\Windows\system32\qagentRT.dll
19:08:39.0631 6300  napagent - ok
19:08:39.0680 6300  [ 1EA3749C4114DB3E3161156FFFFA6B33 ] NativeWifiP    C:\Windows\system32\DRIVERS\nwifi.sys
19:08:39.0704 6300  NativeWifiP - ok
19:08:39.0766 6300  [ C58D8A669D6551F616D90244BD2C2D4F ] NAVENG          C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.1.0.28\Definitions\VirusDefs\20120927.034\ENG64.SYS
19:08:39.0774 6300  NAVENG - ok
19:08:39.0811 6300  [ A3DBDB412ADFA5882DD6843B11FE0828 ] NAVEX15        C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.1.0.28\Definitions\VirusDefs\20120927.034\EX64.SYS
19:08:39.0872 6300  NAVEX15 - ok
19:08:39.0930 6300  [ 760E38053BF56E501D562B70AD796B88 ] NDIS            C:\Windows\system32\drivers\ndis.sys
19:08:39.0951 6300  NDIS - ok
19:08:39.0982 6300  [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC ] NdisCap        C:\Windows\system32\DRIVERS\ndiscap.sys
19:08:40.0018 6300  NdisCap - ok
19:08:40.0038 6300  [ 30639C932D9FEF22B31268FE25A1B6E5 ] NdisTapi        C:\Windows\system32\DRIVERS\ndistapi.sys
19:08:40.0064 6300  NdisTapi - ok
19:08:40.0072 6300  [ 136185F9FB2CC61E573E676AA5402356 ] Ndisuio        C:\Windows\system32\DRIVERS\ndisuio.sys
19:08:40.0097 6300  Ndisuio - ok
19:08:40.0105 6300  [ 53F7305169863F0A2BDDC49E116C2E11 ] NdisWan        C:\Windows\system32\DRIVERS\ndiswan.sys
19:08:40.0153 6300  NdisWan - ok
19:08:40.0191 6300  [ 015C0D8E0E0421B4CFD48CFFE2825879 ] NDProxy        C:\Windows\system32\drivers\NDProxy.sys
19:08:40.0215 6300  NDProxy - ok
19:08:40.0240 6300  [ 86743D9F5D2B1048062B14B1D84501C4 ] NetBIOS        C:\Windows\system32\DRIVERS\netbios.sys
19:08:40.0265 6300  NetBIOS - ok
19:08:40.0291 6300  [ 09594D1089C523423B32A4229263F068 ] NetBT          C:\Windows\system32\DRIVERS\netbt.sys
19:08:40.0325 6300  NetBT - ok
19:08:40.0341 6300  [ C118A82CD78818C29AB228366EBF81C3 ] Netlogon        C:\Windows\system32\lsass.exe
19:08:40.0350 6300  Netlogon - ok
19:08:40.0371 6300  [ 847D3AE376C0817161A14A82C8922A9E ] Netman          C:\Windows\System32\netman.dll
19:08:40.0411 6300  Netman - ok
19:08:40.0448 6300  [ D22CD77D4F0D63D1169BB35911BFF12D ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
19:08:40.0456 6300  NetMsmqActivator - ok
19:08:40.0473 6300  [ D22CD77D4F0D63D1169BB35911BFF12D ] NetPipeActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
19:08:40.0480 6300  NetPipeActivator - ok
19:08:40.0496 6300  [ 5F28111C648F1E24F7DBC87CDEB091B8 ] netprofm        C:\Windows\System32\netprofm.dll
19:08:40.0526 6300  netprofm - ok
19:08:40.0531 6300  [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
19:08:40.0538 6300  NetTcpActivator - ok
19:08:40.0540 6300  [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
19:08:40.0548 6300  NetTcpPortSharing - ok
19:08:40.0597 6300  [ 77889813BE4D166CDAB78DDBA990DA92 ] nfrd960        C:\Windows\system32\drivers\nfrd960.sys
19:08:40.0627 6300  nfrd960 - ok
19:08:40.0797 6300  [ 93F304DEB07095BCF33BD1C17C2DB2A7 ] NIHardwareService C:\Program Files\Common Files\Native Instruments\Hardware\NIHardwareService.exe
19:08:40.0947 6300  NIHardwareService - ok
19:08:41.0090 6300  [ F2840DBFE9322F35557219AE82CC4597 ] NIS            C:\Program Files (x86)\Norton Internet Security\Engine\19.8.0.14\ccSvcHst.exe
19:08:41.0099 6300  NIS - ok
19:08:41.0120 6300  [ 1EE99A89CC788ADA662441D1E9830529 ] NlaSvc          C:\Windows\System32\nlasvc.dll
19:08:41.0154 6300  NlaSvc - ok
19:08:41.0166 6300  [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7 ] Npfs            C:\Windows\system32\drivers\Npfs.sys
19:08:41.0191 6300  Npfs - ok
19:08:41.0197 6300  [ D54BFDF3E0C953F823B3D0BFE4732528 ] nsi            C:\Windows\system32\nsisvc.dll
19:08:41.0240 6300  nsi - ok
19:08:41.0254 6300  [ E7F5AE18AF4168178A642A9247C63001 ] nsiproxy        C:\Windows\system32\drivers\nsiproxy.sys
19:08:41.0279 6300  nsiproxy - ok
19:08:41.0316 6300  [ A2F74975097F52A00745F9637451FDD8 ] Ntfs            C:\Windows\system32\drivers\Ntfs.sys
19:08:41.0353 6300  Ntfs - ok
19:08:41.0359 6300  [ 9899284589F75FA8724FF3D16AED75C1 ] Null            C:\Windows\system32\drivers\Null.sys
19:08:41.0396 6300  Null - ok
19:08:41.0438 6300  [ 1F07B814C0BB5AABA703ABFF1F31F2E8 ] NVHDA          C:\Windows\system32\drivers\nvhda64v.sys
19:08:41.0448 6300  NVHDA - ok
19:08:41.0645 6300  [ BF7A24A71E1932200D864BC1CE15E596 ] nvlddmkm        C:\Windows\system32\DRIVERS\nvlddmkm.sys
19:08:41.0926 6300  nvlddmkm - ok
19:08:41.0952 6300  [ 0A92CB65770442ED0DC44834632F66AD ] nvraid          C:\Windows\system32\drivers\nvraid.sys
19:08:41.0962 6300  nvraid - ok
19:08:41.0972 6300  [ DAB0E87525C10052BF65F06152F37E4A ] nvstor          C:\Windows\system32\drivers\nvstor.sys
19:08:41.0982 6300  nvstor - ok
19:08:42.0025 6300  [ 43F91595049DE14C4B61D1E76436164F ] NVSvc          C:\Windows\system32\nvvsvc.exe
19:08:42.0041 6300  NVSvc - ok
19:08:42.0125 6300  [ 322B69422836F97B76F4AA59B47507BA ] nvUpdatusService C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
19:08:42.0150 6300  nvUpdatusService - ok
19:08:42.0189 6300  [ 270D7CD42D6E3979F6DD0146650F0E05 ] nv_agp          C:\Windows\system32\drivers\nv_agp.sys
19:08:42.0198 6300  nv_agp - ok
19:08:42.0232 6300  [ 3589478E4B22CE21B41FA1BFC0B8B8A0 ] ohci1394        C:\Windows\system32\drivers\ohci1394.sys
19:08:42.0249 6300  ohci1394 - ok
19:08:42.0282 6300  [ 4965B005492CBA7719E82B71E3245495 ] ose64          C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
19:08:42.0290 6300  ose64 - ok
19:08:42.0431 6300  [ 61BFFB5F57AD12F83AB64B7181829B34 ] osppsvc        C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
19:08:42.0548 6300  osppsvc - ok
19:08:42.0680 6300  [ 01B14F4D64BC70E93734211C3D324099 ] OverwolfUpdaterService C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe
19:08:42.0687 6300  OverwolfUpdaterService - ok
19:08:42.0712 6300  [ 3EAC4455472CC2C97107B5291E0DCAFE ] p2pimsvc        C:\Windows\system32\pnrpsvc.dll
19:08:42.0735 6300  p2pimsvc - ok
19:08:42.0764 6300  [ 927463ECB02179F88E4B9A17568C63C3 ] p2psvc          C:\Windows\system32\p2psvc.dll
19:08:42.0789 6300  p2psvc - ok
19:08:42.0801 6300  [ 0086431C29C35BE1DBC43F52CC273887 ] Parport        C:\Windows\system32\drivers\parport.sys
19:08:42.0811 6300  Parport - ok
19:08:42.0837 6300  [ E9766131EEADE40A27DC27D2D68FBA9C ] partmgr        C:\Windows\system32\drivers\partmgr.sys
19:08:42.0846 6300  partmgr - ok
19:08:42.0862 6300  [ 3AEAA8B561E63452C655DC0584922257 ] PcaSvc          C:\Windows\System32\pcasvc.dll
19:08:42.0883 6300  PcaSvc - ok
19:08:42.0893 6300  [ 94575C0571D1462A0F70BDE6BD6EE6B3 ] pci            C:\Windows\system32\drivers\pci.sys
19:08:42.0903 6300  pci - ok
19:08:42.0927 6300  [ B5B8B5EF2E5CB34DF8DCF8831E3534FA ] pciide          C:\Windows\system32\drivers\pciide.sys
19:08:42.0935 6300  pciide - ok
19:08:42.0965 6300  [ B2E81D4E87CE48589F98CB8C05B01F2F ] pcmcia          C:\Windows\system32\drivers\pcmcia.sys
19:08:42.0976 6300  pcmcia - ok
19:08:42.0986 6300  [ D6B9C2E1A11A3A4B26A182FFEF18F603 ] pcw            C:\Windows\system32\drivers\pcw.sys
19:08:42.0994 6300  pcw - ok
19:08:43.0007 6300  [ 68769C3356B3BE5D1C732C97B9A80D6E ] PEAUTH          C:\Windows\system32\drivers\peauth.sys
19:08:43.0039 6300  PEAUTH - ok
19:08:43.0087 6300  [ B9B0A4299DD2D76A4243F75FD54DC680 ] PeerDistSvc    C:\Windows\system32\peerdistsvc.dll
19:08:43.0124 6300  PeerDistSvc - ok
19:08:43.0201 6300  [ E495E408C93141E8FC72DC0C6046DDFA ] PerfHost        C:\Windows\SysWow64\perfhost.exe
19:08:43.0218 6300  PerfHost - ok
19:08:43.0269 6300  [ FE9E913758C770CC6E88D9B8C95D0AD4 ] phc710          C:\Windows\system32\DRIVERS\phc710.sys
19:08:43.0320 6300  phc710 - ok
19:08:43.0360 6300  [ C7CF6A6E137463219E1259E3F0F0DD6C ] pla            C:\Windows\system32\pla.dll
19:08:43.0421 6300  pla - ok
19:08:43.0451 6300  [ 25FBDEF06C4D92815B353F6E792C8129 ] PlugPlay        C:\Windows\system32\umpnpmgr.dll
19:08:43.0464 6300  PlugPlay - ok
19:08:43.0483 6300  PnkBstrA - ok
19:08:43.0494 6300  [ 7195581CEC9BB7D12ABE54036ACC2E38 ] PNRPAutoReg    C:\Windows\system32\pnrpauto.dll
19:08:43.0523 6300  PNRPAutoReg - ok
19:08:43.0549 6300  [ 3EAC4455472CC2C97107B5291E0DCAFE ] PNRPsvc        C:\Windows\system32\pnrpsvc.dll
19:08:43.0560 6300  PNRPsvc - ok
19:08:43.0571 6300  [ 4F0878FD62D5F7444C5F1C4C66D9D293 ] Point64        C:\Windows\system32\DRIVERS\point64.sys
19:08:43.0577 6300  Point64 - ok
19:08:43.0600 6300  [ 4F15D75ADF6156BF56ECED6D4A55C389 ] PolicyAgent    C:\Windows\System32\ipsecsvc.dll
19:08:43.0639 6300  PolicyAgent - ok
19:08:43.0673 6300  [ 6BA9D927DDED70BD1A9CADED45F8B184 ] Power          C:\Windows\system32\umpo.dll
19:08:43.0700 6300  Power - ok
19:08:43.0729 6300  [ F92A2C41117A11A00BE01CA01A7FCDE9 ] PptpMiniport    C:\Windows\system32\DRIVERS\raspptp.sys
19:08:43.0767 6300  PptpMiniport - ok
19:08:43.0799 6300  [ 0D922E23C041EFB1C3FAC2A6F943C9BF ] Processor      C:\Windows\system32\drivers\processr.sys
19:08:43.0824 6300  Processor - ok
19:08:43.0851 6300  [ 53E83F1F6CF9D62F32801CF66D8352A8 ] ProfSvc        C:\Windows\system32\profsvc.dll
19:08:43.0862 6300  ProfSvc - ok
19:08:43.0866 6300  [ C118A82CD78818C29AB228366EBF81C3 ] ProtectedStorage C:\Windows\system32\lsass.exe
19:08:43.0875 6300  ProtectedStorage - ok
19:08:43.0911 6300  [ 0557CF5A2556BD58E26384169D72438D ] Psched          C:\Windows\system32\DRIVERS\pacer.sys
19:08:43.0937 6300  Psched - ok
19:08:43.0968 6300  [ BC08F7F3C53CBEE68670ED1314E290FD ] PxHlpa64        C:\Windows\system32\Drivers\PxHlpa64.sys
19:08:43.0976 6300  PxHlpa64 - ok
19:08:44.0020 6300  [ A53A15A11EBFD21077463EE2C7AFEEF0 ] ql2300          C:\Windows\system32\drivers\ql2300.sys
19:08:44.0049 6300  ql2300 - ok
19:08:44.0063 6300  [ 4F6D12B51DE1AAEFF7DC58C4D75423C8 ] ql40xx          C:\Windows\system32\drivers\ql40xx.sys
19:08:44.0073 6300  ql40xx - ok
19:08:44.0091 6300  [ 906191634E99AEA92C4816150BDA3732 ] QWAVE          C:\Windows\system32\qwave.dll
19:08:44.0106 6300  QWAVE - ok
19:08:44.0114 6300  [ 76707BB36430888D9CE9D705398ADB6C ] QWAVEdrv        C:\Windows\system32\drivers\qwavedrv.sys
19:08:44.0127 6300  QWAVEdrv - ok
19:08:44.0151 6300  [ 5A0DA8AD5762FA2D91678A8A01311704 ] RasAcd          C:\Windows\system32\DRIVERS\rasacd.sys
19:08:44.0180 6300  RasAcd - ok
19:08:44.0226 6300  [ 7ECFF9B22276B73F43A99A15A6094E90 ] RasAgileVpn    C:\Windows\system32\DRIVERS\AgileVpn.sys
19:08:44.0259 6300  RasAgileVpn - ok
19:08:44.0271 6300  [ 8F26510C5383B8DBE976DE1CD00FC8C7 ] RasAuto        C:\Windows\System32\rasauto.dll
19:08:44.0297 6300  RasAuto - ok
19:08:44.0303 6300  [ 471815800AE33E6F1C32FB1B97C490CA ] Rasl2tp        C:\Windows\system32\DRIVERS\rasl2tp.sys
19:08:44.0342 6300  Rasl2tp - ok
19:08:44.0365 6300  [ EE867A0870FC9E4972BA9EAAD35651E2 ] RasMan          C:\Windows\System32\rasmans.dll
19:08:44.0410 6300  RasMan - ok
19:08:44.0433 6300  [ 855C9B1CD4756C5E9A2AA58A15F58C25 ] RasPppoe        C:\Windows\system32\DRIVERS\raspppoe.sys
19:08:44.0464 6300  RasPppoe - ok
19:08:44.0472 6300  [ E8B1E447B008D07FF47D016C2B0EEECB ] RasSstp        C:\Windows\system32\DRIVERS\rassstp.sys
19:08:44.0507 6300  RasSstp - ok
19:08:44.0518 6300  [ 77F665941019A1594D887A74F301FA2F ] rdbss          C:\Windows\system32\DRIVERS\rdbss.sys
19:08:44.0551 6300  rdbss - ok
19:08:44.0574 6300  [ 302DA2A0539F2CF54D7C6CC30C1F2D8D ] rdpbus          C:\Windows\system32\DRIVERS\rdpbus.sys
19:08:44.0585 6300  rdpbus - ok
19:08:44.0613 6300  [ CEA6CC257FC9B7715F1C2B4849286D24 ] RDPCDD          C:\Windows\system32\DRIVERS\RDPCDD.sys
19:08:44.0648 6300  RDPCDD - ok
19:08:44.0674 6300  [ 1B6163C503398B23FF8B939C67747683 ] RDPDR          C:\Windows\system32\drivers\rdpdr.sys
19:08:44.0701 6300  RDPDR - ok
19:08:44.0715 6300  [ BB5971A4F00659529A5C44831AF22365 ] RDPENCDD        C:\Windows\system32\drivers\rdpencdd.sys
19:08:44.0740 6300  RDPENCDD - ok
19:08:44.0753 6300  [ 216F3FA57533D98E1F74DED70113177A ] RDPREFMP        C:\Windows\system32\drivers\rdprefmp.sys
19:08:44.0792 6300  RDPREFMP - ok
19:08:44.0821 6300  [ 70CBA1A0C98600A2AA1863479B35CB90 ] RdpVideoMiniport C:\Windows\system32\drivers\rdpvideominiport.sys
19:08:44.0840 6300  RdpVideoMiniport - ok
19:08:44.0860 6300  [ E61608AA35E98999AF9AAEEEA6114B0A ] RDPWD          C:\Windows\system32\drivers\RDPWD.sys
19:08:44.0870 6300  RDPWD - ok
19:08:44.0879 6300  [ 34ED295FA0121C241BFEF24764FC4520 ] rdyboost        C:\Windows\system32\drivers\rdyboost.sys
19:08:44.0889 6300  rdyboost - ok
19:08:44.0909 6300  [ 254FB7A22D74E5511C73A3F6D802F192 ] RemoteAccess    C:\Windows\System32\mprdim.dll
19:08:44.0935 6300  RemoteAccess - ok
19:08:44.0950 6300  [ E4D94F24081440B5FC5AA556C7C62702 ] RemoteRegistry  C:\Windows\system32\regsvc.dll
19:08:44.0984 6300  RemoteRegistry - ok
19:08:45.0103 6300  [ FF578453D3B3ADAAB22D7151D7F9E592 ] RoxMediaDB12    C:\Program Files (x86)\Common Files\Roxio Shared\12.0\SharedCOM\RoxMediaDB12.exe
19:08:45.0125 6300  RoxMediaDB12 - ok
19:08:45.0158 6300  [ 71B38B8DF1A9B55FC0FB64958CC7B9DD ] RoxWatch12      C:\Program Files (x86)\Common Files\Roxio Shared\12.0\SharedCOM\RoxWatch12.exe
19:08:45.0168 6300  RoxWatch12 - ok
19:08:45.0171 6300  [ E4DC58CF7B3EA515AE917FF0D402A7BB ] RpcEptMapper    C:\Windows\System32\RpcEpMap.dll
19:08:45.0197 6300  RpcEptMapper - ok
19:08:45.0215 6300  [ D5BA242D4CF8E384DB90E6A8ED850B8C ] RpcLocator      C:\Windows\system32\locator.exe
19:08:45.0224 6300  RpcLocator - ok
19:08:45.0239 6300  [ 5C627D1B1138676C0A7AB2C2C190D123 ] RpcSs          C:\Windows\system32\rpcss.dll
19:08:45.0268 6300  RpcSs - ok
19:08:45.0302 6300  [ DDC86E4F8E7456261E637E3552E804FF ] rspndr          C:\Windows\system32\DRIVERS\rspndr.sys
19:08:45.0339 6300  rspndr - ok
19:08:45.0381 6300  [ EE082E06A82FF630351D1E0EBBD3D8D0 ] RTL8167        C:\Windows\system32\DRIVERS\Rt64win7.sys
19:08:45.0395 6300  RTL8167 - ok
19:08:45.0430 6300  [ E60C0A09F997826C7627B244195AB581 ] s3cap          C:\Windows\system32\drivers\vms3cap.sys
19:08:45.0438 6300  s3cap - ok
19:08:45.0472 6300  [ 27DB9153D259D632D15483DEEAB799ED ] Sahdad64        C:\Windows\system32\Drivers\Sahdad64.sys
19:08:45.0479 6300  Sahdad64 - ok
19:08:45.0484 6300  [ F77849D909B90BCACFCF7295AECF299B ] Saibad64        C:\Windows\system32\Drivers\Saibad64.sys
19:08:45.0491 6300  Saibad64 - ok
19:08:45.0505 6300  [ 704D415290A568F68DE20942DAC23F7E ] SaibVdAd64      C:\Windows\system32\Drivers\SaibVdAd64.sys
19:08:45.0512 6300  SaibVdAd64 - ok
19:08:45.0524 6300  [ C118A82CD78818C29AB228366EBF81C3 ] SamSs          C:\Windows\system32\lsass.exe
19:08:45.0533 6300  SamSs - ok
19:08:45.0545 6300  [ AC03AF3329579FFFB455AA2DAABBE22B ] sbp2port        C:\Windows\system32\drivers\sbp2port.sys
19:08:45.0554 6300  sbp2port - ok
19:08:45.0566 6300  [ 9B7395789E3791A3B6D000FE6F8B131E ] SCardSvr        C:\Windows\System32\SCardSvr.dll
19:08:45.0605 6300  SCardSvr - ok
19:08:45.0640 6300  [ 253F38D0D7074C02FF8DEB9836C97D2B ] scfilter        C:\Windows\system32\DRIVERS\scfilter.sys
19:08:45.0679 6300  scfilter - ok
19:08:45.0710 6300  [ 262F6592C3299C005FD6BEC90FC4463A ] Schedule        C:\Windows\system32\schedsvc.dll
19:08:45.0763 6300  Schedule - ok
19:08:45.0790 6300  [ F17D1D393BBC69C5322FBFAFACA28C7F ] SCPolicySvc    C:\Windows\System32\certprop.dll
19:08:45.0815 6300  SCPolicySvc - ok
19:08:45.0821 6300  [ 6EA4234DC55346E0709560FE7C2C1972 ] SDRSVC          C:\Windows\System32\SDRSVC.dll
19:08:45.0849 6300  SDRSVC - ok
19:08:45.0895 6300  [ 3EA8A16169C26AFBEB544E0E48421186 ] secdrv          C:\Windows\system32\drivers\secdrv.sys
19:08:45.0920 6300  secdrv - ok
19:08:45.0925 6300  [ BC617A4E1B4FA8DF523A061739A0BD87 ] seclogon        C:\Windows\system32\seclogon.dll
19:08:45.0950 6300  seclogon - ok
19:08:45.0956 6300  [ C32AB8FA018EF34C0F113BD501436D21 ] SENS            C:\Windows\System32\sens.dll
19:08:45.0982 6300  SENS - ok
19:08:45.0989 6300  [ 0336CFFAFAAB87A11541F1CF1594B2B2 ] SensrSvc        C:\Windows\system32\sensrsvc.dll
19:08:46.0003 6300  SensrSvc - ok
19:08:46.0015 6300  [ CB624C0035412AF0DEBEC78C41F5CA1B ] Serenum        C:\Windows\system32\DRIVERS\serenum.sys
19:08:46.0035 6300  Serenum - ok
19:08:46.0046 6300  [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6 ] Serial          C:\Windows\system32\DRIVERS\serial.sys
19:08:46.0069 6300  Serial - ok
19:08:46.0092 6300  [ 1C545A7D0691CC4A027396535691C3E3 ] sermouse        C:\Windows\system32\drivers\sermouse.sys
19:08:46.0107 6300  sermouse - ok
19:08:46.0124 6300  [ 0B6231BF38174A1628C4AC812CC75804 ] SessionEnv      C:\Windows\system32\sessenv.dll
19:08:46.0151 6300  SessionEnv - ok
19:08:46.0185 6300  [ A554811BCD09279536440C964AE35BBF ] sffdisk        C:\Windows\system32\drivers\sffdisk.sys
19:08:46.0196 6300  sffdisk - ok
19:08:46.0201 6300  [ FF414F0BAEFEBA59BC6C04B3DB0B87BF ] sffp_mmc        C:\Windows\system32\drivers\sffp_mmc.sys
19:08:46.0212 6300  sffp_mmc - ok
19:08:46.0221 6300  [ DD85B78243A19B59F0637DCF284DA63C ] sffp_sd        C:\Windows\system32\drivers\sffp_sd.sys
19:08:46.0231 6300  sffp_sd - ok
19:08:46.0260 6300  [ A9D601643A1647211A1EE2EC4E433FF4 ] sfloppy        C:\Windows\system32\drivers\sfloppy.sys
19:08:46.0269 6300  sfloppy - ok
19:08:46.0298 6300  [ B95F6501A2F8B2E78C697FEC401970CE ] SharedAccess    C:\Windows\System32\ipnathlp.dll
19:08:46.0327 6300  SharedAccess - ok
19:08:46.0342 6300  [ AAF932B4011D14052955D4B212A4DA8D ] ShellHWDetection C:\Windows\System32\shsvcs.dll
19:08:46.0371 6300  ShellHWDetection - ok
19:08:46.0386 6300  [ 843CAF1E5FDE1FFD5FF768F23A51E2E1 ] SiSRaid2        C:\Windows\system32\drivers\SiSRaid2.sys
19:08:46.0394 6300  SiSRaid2 - ok
19:08:46.0404 6300  [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4 ] SiSRaid4        C:\Windows\system32\drivers\sisraid4.sys
19:08:46.0413 6300  SiSRaid4 - ok
19:08:46.0491 6300  [ F07AF60B152221472FBDB2FECEC4896D ] SkypeUpdate    C:\Program Files (x86)\Skype\Updater\Updater.exe
19:08:46.0499 6300  SkypeUpdate - ok
19:08:46.0588 6300  [ 101556F6216E97F1258D87C38203695F ] Smart TimeLock  C:\Program Files (x86)\GIGABYTE\Smart6\Timelock\TimeMgmtDaemon.exe
19:08:46.0607 6300  Smart TimeLock ( UnsignedFile.Multi.Generic ) - warning
19:08:46.0607 6300  Smart TimeLock - detected UnsignedFile.Multi.Generic (1)
19:08:46.0624 6300  [ 548260A7B8654E024DC30BF8A7C5BAA4 ] Smb            C:\Windows\system32\DRIVERS\smb.sys
19:08:46.0656 6300  Smb - ok
19:08:46.0696 6300  [ 6313F223E817CC09AA41811DAA7F541D ] SNMPTRAP        C:\Windows\System32\snmptrap.exe
19:08:46.0713 6300  SNMPTRAP - ok
19:08:46.0891 6300  [ BE35CC81081328B1CFB2A5AB5CF0CE33 ] SNP325          C:\Windows\system32\DRIVERS\snp325.sys
19:08:47.0080 6300  SNP325 - ok
19:08:47.0102 6300  [ B9E31E5CACDFE584F34F730A677803F9 ] spldr          C:\Windows\system32\drivers\spldr.sys
19:08:47.0110 6300  spldr - ok
19:08:47.0128 6300  [ 85DAA09A98C9286D4EA2BA8D0E644377 ] Spooler        C:\Windows\System32\spoolsv.exe
19:08:47.0154 6300  Spooler - ok
19:08:47.0209 6300  [ E17E0188BB90FAE42D83E98707EFA59C ] sppsvc          C:\Windows\system32\sppsvc.exe
19:08:47.0309 6300  sppsvc - ok
19:08:47.0326 6300  [ 93D7D61317F3D4BC4F4E9F8A96A7DE45 ] sppuinotify    C:\Windows\system32\sppuinotify.dll
19:08:47.0352 6300  sppuinotify - ok
19:08:47.0433 6300  [ 891793E00432FA055CF040605C260E49 ] SRTSP          C:\Windows\System32\Drivers\NISx64\1308000.00E\SRTSP64.SYS
19:08:47.0450 6300  SRTSP - ok
19:08:47.0471 6300  [ 1CB7BB3B0561FB5ECFE37F7731E8BF3E ] SRTSPX          C:\Windows\system32\drivers\NISx64\1308000.00E\SRTSPX64.SYS
19:08:47.0477 6300  SRTSPX - ok
19:08:47.0515 6300  [ 441FBA48BFF01FDB9D5969EBC1838F0B ] srv            C:\Windows\system32\DRIVERS\srv.sys
19:08:47.0552 6300  srv - ok
19:08:47.0564 6300  [ B4ADEBBF5E3677CCE9651E0F01F7CC28 ] srv2            C:\Windows\system32\DRIVERS\srv2.sys
19:08:47.0586 6300  srv2 - ok
19:08:47.0601 6300  [ 27E461F0BE5BFF5FC737328F749538C3 ] srvnet          C:\Windows\system32\DRIVERS\srvnet.sys
19:08:47.0611 6300  srvnet - ok
19:08:47.0639 6300  [ 8F8324ED1DE63FFC7B1A02CD2D963C72 ] ssadbus        C:\Windows\system32\DRIVERS\ssadbus.sys
19:08:47.0650 6300  ssadbus - ok
19:08:47.0661 6300  [ 58221EFCB74167B73667F0024C661CE0 ] ssadmdfl        C:\Windows\system32\DRIVERS\ssadmdfl.sys
19:08:47.0671 6300  ssadmdfl - ok
19:08:47.0686 6300  [ 4DA7C71BFAC5AD71255B7E4CAB980163 ] ssadmdm        C:\Windows\system32\DRIVERS\ssadmdm.sys
19:08:47.0703 6300  ssadmdm - ok
19:08:47.0730 6300  [ ED161B91FDF7EAA39469D72D463D5F4E ] sscdbus        C:\Windows\system32\DRIVERS\sscdbus.sys
19:08:47.0739 6300  sscdbus - ok
19:08:47.0751 6300  [ 4CB09E77593DBD8D7AF33B37375CA715 ] sscdmdfl        C:\Windows\system32\DRIVERS\sscdmdfl.sys
19:08:47.0758 6300  sscdmdfl - ok
19:08:47.0771 6300  [ C7B4CF53497A6E5363F3439427663882 ] sscdmdm        C:\Windows\system32\DRIVERS\sscdmdm.sys
19:08:47.0780 6300  sscdmdm - ok
19:08:47.0805 6300  [ 51B52FBD583CDE8AA9BA62B8B4298F33 ] SSDPSRV        C:\Windows\System32\ssdpsrv.dll
19:08:47.0832 6300  SSDPSRV - ok
19:08:47.0865 6300  [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB ] SstpSvc        C:\Windows\system32\sstpsvc.dll
19:08:47.0891 6300  SstpSvc - ok
19:08:47.0929 6300  [ 74425FFA11C133D045E1C3BE2EAD481D ] ssudmdm        C:\Windows\system32\DRIVERS\ssudmdm.sys
19:08:47.0938 6300  ssudmdm - ok
19:08:47.0971 6300  [ D4B75B0A46F7BF74E13F1493E7721786 ] ssudobex        C:\Windows\system32\DRIVERS\ssudobex.sys
19:08:47.0981 6300  ssudobex - ok
19:08:47.0992 6300  Steam Client Service - ok
19:08:48.0117 6300  [ A766CCAD980235FF34E7F8089D3175A3 ] Stereo Service  C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
19:08:48.0128 6300  Stereo Service - ok
19:08:48.0164 6300  [ F3817967ED533D08327DC73BC4D5542A ] stexstor        C:\Windows\system32\drivers\stexstor.sys
19:08:48.0172 6300  stexstor - ok
19:08:48.0201 6300  [ 8DD52E8E6128F4B2DA92CE27402871C1 ] stisvc          C:\Windows\System32\wiaservc.dll
19:08:48.0226 6300  stisvc - ok
19:08:48.0254 6300  [ 7785DC213270D2FC066538DAF94087E7 ] storflt        C:\Windows\system32\drivers\vmstorfl.sys
19:08:48.0263 6300  storflt - ok
19:08:48.0299 6300  [ D34E4943D5AC096C8EDEEBFD80D76E23 ] storvsc        C:\Windows\system32\drivers\storvsc.sys
19:08:48.0307 6300  storvsc - ok
19:08:48.0320 6300  [ D01EC09B6711A5F8E7E6564A4D0FBC90 ] swenum          C:\Windows\system32\DRIVERS\swenum.sys
19:08:48.0328 6300  swenum - ok
19:08:48.0398 6300  [ F577910A133A592234EBAAD3F3AFA258 ] SwitchBoard    C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
19:08:48.0410 6300  SwitchBoard ( UnsignedFile.Multi.Generic ) - warning
19:08:48.0410 6300  SwitchBoard - detected UnsignedFile.Multi.Generic (1)
19:08:48.0423 6300  [ E08E46FDD841B7184194011CA1955A0B ] swprv          C:\Windows\System32\swprv.dll
19:08:48.0455 6300  swprv - ok
19:08:48.0486 6300  [ 8B2430762099598DA40686F754632EFD ] SymDS          C:\Windows\system32\drivers\NISx64\1308000.00E\SYMDS64.SYS
19:08:48.0499 6300  SymDS - ok
19:08:48.0527 6300  [ 5CB7F2FD7E30A0F52F93574BFC3A8041 ] SymEFA          C:\Windows\system32\drivers\NISx64\1308000.00E\SYMEFA64.SYS
19:08:48.0551 6300  SymEFA - ok
19:08:48.0603 6300  [ 894579207E39C465737E850A252CE4F2 ] SymEvent        C:\Windows\system32\Drivers\SYMEVENT64x86.SYS
19:08:48.0612 6300  SymEvent - ok
19:08:48.0630 6300  [ B681D1B0F9596684225DCC9B94C6BACF ] SymIM          C:\Windows\system32\DRIVERS\SymIMv.sys
19:08:48.0637 6300  SymIM - ok
19:08:48.0662 6300  [ 5013A76CAAA1D7CF1C55214B490B4E35 ] SymIRON        C:\Windows\system32\drivers\NISx64\1308000.00E\Ironx64.SYS
19:08:48.0671 6300  SymIRON - ok
19:08:48.0677 6300  [ 3911BD0E68C010E5438A87706ABBE9AB ] SymNetS        C:\Windows\System32\Drivers\NISx64\1308000.00E\SYMNETS.SYS
19:08:48.0689 6300  SymNetS - ok
19:08:48.0720 6300  [ C3A39C4079305480972D29C44B868C78 ] Synth3dVsc      C:\Windows\system32\drivers\synth3dvsc.sys
19:08:48.0729 6300  Synth3dVsc - ok
19:08:48.0758 6300  [ BF9CCC0BF39B418C8D0AE8B05CF95B7D ] SysMain        C:\Windows\system32\sysmain.dll
19:08:48.0797 6300  SysMain - ok
19:08:48.0810 6300  [ E3C61FD7B7C2557E1F1B0B4CEC713585 ] TabletInputService C:\Windows\System32\TabSvc.dll
19:08:48.0824 6300  TabletInputService - ok
19:08:48.0839 6300  [ 40F0849F65D13EE87B9A9AE3C1DD6823 ] TapiSrv        C:\Windows\System32\tapisrv.dll
19:08:48.0875 6300  TapiSrv - ok
19:08:48.0886 6300  [ 1BE03AC720F4D302EA01D40F588162F6 ] TBS            C:\Windows\System32\tbssvc.dll
19:08:48.0929 6300  TBS - ok
19:08:48.0981 6300  [ F782CAD3CEDBB3F9FFE3BF2775D92DDC ] Tcpip          C:\Windows\system32\drivers\tcpip.sys
19:08:49.0022 6300  Tcpip - ok
19:08:49.0050 6300  [ F782CAD3CEDBB3F9FFE3BF2775D92DDC ] TCPIP6          C:\Windows\system32\DRIVERS\tcpip.sys
19:08:49.0078 6300  TCPIP6 - ok
19:08:49.0115 6300  [ DF687E3D8836BFB04FCC0615BF15A519 ] tcpipreg        C:\Windows\system32\drivers\tcpipreg.sys
19:08:49.0140 6300  tcpipreg - ok
19:08:49.0149 6300  [ 3371D21011695B16333A3934340C4E7C ] TDPIPE          C:\Windows\system32\drivers\tdpipe.sys
19:08:49.0158 6300  TDPIPE - ok
19:08:49.0171 6300  [ 51C5ECEB1CDEE2468A1748BE550CFBC8 ] TDTCP          C:\Windows\system32\drivers\tdtcp.sys
19:08:49.0200 6300  TDTCP - ok
19:08:49.0222 6300  [ DDAD5A7AB24D8B65F8D724F5C20FD806 ] tdx            C:\Windows\system32\DRIVERS\tdx.sys
19:08:49.0279 6300  tdx - ok
19:08:49.0460 6300  [ 9C1F776825207C203CB44CA3C63B5A6E ] TeamViewer7    C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe
19:08:49.0517 6300  TeamViewer7 - ok
19:08:49.0531 6300  [ 561E7E1F06895D78DE991E01DD0FB6E5 ] TermDD          C:\Windows\system32\DRIVERS\termdd.sys
19:08:49.0543 6300  TermDD - ok
19:08:49.0571 6300  [ 2B5BDFF688EC9871D7EC5837833374E9 ] terminpt        C:\Windows\system32\drivers\terminpt.sys
19:08:49.0591 6300  terminpt - ok
19:08:49.0616 6300  [ 2E648163254233755035B46DD7B89123 ] TermService    C:\Windows\System32\termsrv.dll
19:08:49.0648 6300  TermService - ok
19:08:49.0672 6300  [ F0344071948D1A1FA732231785A0664C ] Themes          C:\Windows\system32\themeservice.dll
19:08:49.0685 6300  Themes - ok
19:08:49.0697 6300  [ E40E80D0304A73E8D269F7141D77250B ] THREADORDER    C:\Windows\system32\mmcss.dll
19:08:49.0722 6300  THREADORDER - ok
19:08:49.0732 6300  [ 7E7AFD841694F6AC397E99D75CEAD49D ] TrkWks          C:\Windows\System32\trkwks.dll
19:08:49.0769 6300  TrkWks - ok
19:08:49.0787 6300  [ 773212B2AAA24C1E31F10246B15B276C ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
19:08:49.0825 6300  TrustedInstaller - ok
19:08:49.0837 6300  [ CE18B2CDFC837C99E5FAE9CA6CBA5D30 ] tssecsrv        C:\Windows\system32\DRIVERS\tssecsrv.sys
19:08:49.0862 6300  tssecsrv - ok
19:08:49.0881 6300  [ D11C783E3EF9A3C52C0EBE83CC5000E9 ] TsUsbFlt        C:\Windows\system32\drivers\tsusbflt.sys
19:08:49.0897 6300  TsUsbFlt - ok
19:08:49.0905 6300  [ 9CC2CCAE8A84820EAECB886D477CBCB8 ] TsUsbGD        C:\Windows\system32\drivers\TsUsbGD.sys
19:08:49.0913 6300  TsUsbGD - ok
19:08:49.0922 6300  [ E1748D04AE40118B62BC18AC86032192 ] tsusbhub        C:\Windows\system32\drivers\tsusbhub.sys
19:08:49.0945 6300  tsusbhub - ok
19:08:49.0995 6300  [ 3566A8DAAFA27AF944F5D705EAA64894 ] tunnel          C:\Windows\system32\DRIVERS\tunnel.sys
19:08:50.0031 6300  tunnel - ok
19:08:50.0042 6300  [ B4DD609BD7E282BFC683CEC7EAAAAD67 ] uagp35          C:\Windows\system32\drivers\uagp35.sys
19:08:50.0051 6300  uagp35 - ok
19:08:50.0067 6300  [ FF4232A1A64012BAA1FD97C7B67DF593 ] udfs            C:\Windows\system32\DRIVERS\udfs.sys
19:08:50.0114 6300  udfs - ok
19:08:50.0135 6300  [ 3CBDEC8D06B9968ABA702EBA076364A1 ] UI0Detect      C:\Windows\system32\UI0Detect.exe
19:08:50.0146 6300  UI0Detect - ok
19:08:50.0163 6300  [ 4BFE1BC28391222894CBF1E7D0E42320 ] uliagpkx        C:\Windows\system32\drivers\uliagpkx.sys
19:08:50.0171 6300  uliagpkx - ok
19:08:50.0174 6300  [ DC54A574663A895C8763AF0FA1FF7561 ] umbus          C:\Windows\system32\DRIVERS\umbus.sys
19:08:50.0194 6300  umbus - ok
19:08:50.0218 6300  [ B2E8E8CB557B156DA5493BBDDCC1474D ] UmPass          C:\Windows\system32\drivers\umpass.sys
19:08:50.0227 6300  UmPass - ok
19:08:50.0263 6300  [ A293DCD756D04D8492A750D03B9A297C ] UmRdpService    C:\Windows\System32\umrdp.dll
19:08:50.0291 6300  UmRdpService - ok
19:08:50.0343 6300  [ 67A95B9D129ED5399E7965CD09CF30E7 ] UMVPFSrv        C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe
19:08:50.0356 6300  UMVPFSrv - ok
19:08:50.0366 6300  [ D47EC6A8E81633DD18D2436B19BAF6DE ] upnphost        C:\Windows\System32\upnphost.dll
19:08:50.0407 6300  upnphost - ok
19:08:50.0453 6300  [ FB251567F41BC61988B26731DEC19E4B ] USBAAPL64      C:\Windows\system32\Drivers\usbaapl64.sys
19:08:50.0457 6300  USBAAPL64 ( UnsignedFile.Multi.Generic ) - warning
19:08:50.0457 6300  USBAAPL64 - detected UnsignedFile.Multi.Generic (1)
19:08:50.0493 6300  [ 82E8F44688E6FAC57B5B7C6FC7ADBC2A ] usbaudio        C:\Windows\system32\drivers\usbaudio.sys
19:08:50.0521 6300  usbaudio - ok
19:08:50.0548 6300  [ 6F1A3157A1C89435352CEB543CDB359C ] usbccgp        C:\Windows\system32\DRIVERS\usbccgp.sys
19:08:50.0558 6300  usbccgp - ok
19:08:50.0588 6300  [ AF0892A803FDDA7492F595368E3B68E7 ] usbcir          C:\Windows\system32\drivers\usbcir.sys
19:08:50.0612 6300  usbcir - ok
19:08:50.0631 6300  [ C025055FE7B87701EB042095DF1A2D7B ] usbehci        C:\Windows\system32\drivers\usbehci.sys
19:08:50.0646 6300  usbehci - ok
19:08:50.0671 6300  [ 287C6C9410B111B68B52CA298F7B8C24 ] usbhub          C:\Windows\system32\DRIVERS\usbhub.sys
19:08:50.0684 6300  usbhub - ok
19:08:50.0697 6300  [ 9840FC418B4CBD632D3D0A667A725C31 ] usbohci        C:\Windows\system32\drivers\usbohci.sys
19:08:50.0706 6300  usbohci - ok
19:08:50.0738 6300  [ 73188F58FB384E75C4063D29413CEE3D ] usbprint        C:\Windows\system32\DRIVERS\usbprint.sys
19:08:50.0758 6300  usbprint - ok
19:08:50.0807 6300  [ AAA2513C8AED8B54B189FD0C6B1634C0 ] usbscan        C:\Windows\system32\DRIVERS\usbscan.sys
19:08:50.0830 6300  usbscan - ok
19:08:50.0843 6300  [ FED648B01349A3C8395A5169DB5FB7D6 ] USBSTOR        C:\Windows\system32\DRIVERS\USBSTOR.SYS
19:08:50.0852 6300  USBSTOR - ok
19:08:50.0863 6300  [ 62069A34518BCF9C1FD9E74B3F6DB7CD ] usbuhci        C:\Windows\system32\drivers\usbuhci.sys
19:08:50.0873 6300  usbuhci - ok
19:08:50.0912 6300  [ 454800C2BC7F3927CE030141EE4F4C50 ] usbvideo        C:\Windows\system32\Drivers\usbvideo.sys
19:08:50.0924 6300  usbvideo - ok
19:08:50.0943 6300  [ EDBB23CBCF2CDF727D64FF9B51A6070E ] UxSms          C:\Windows\System32\uxsms.dll
19:08:50.0986 6300  UxSms - ok
19:08:51.0007 6300  [ C118A82CD78818C29AB228366EBF81C3 ] VaultSvc        C:\Windows\system32\lsass.exe
19:08:51.0016 6300  VaultSvc - ok
19:08:51.0035 6300  [ BA20A718E25228B9D69D72E4F19EDEB5 ] VBoxDrv        C:\Windows\system32\DRIVERS\VBoxDrv.sys
19:08:51.0045 6300  VBoxDrv - ok
19:08:51.0065 6300  [ 48630B4530C80AAF3DDE9633E4291D8C ] VBoxNetAdp      C:\Windows\system32\DRIVERS\VBoxNetAdp.sys
19:08:51.0074 6300  VBoxNetAdp - ok
19:08:51.0086 6300  [ 8B86A00D13E2DCBFE320061F3435FAFF ] VBoxNetFlt      C:\Windows\system32\DRIVERS\VBoxNetFlt.sys
19:08:51.0096 6300  VBoxNetFlt - ok
19:08:51.0110 6300  [ 4831EE295C9911B0236867931BE493F1 ] VBoxUSB        C:\Windows\system32\Drivers\VBoxUSB.sys
19:08:51.0119 6300  VBoxUSB - ok
19:08:51.0133 6300  [ CEC73CEA22B7258C0A8F2354DC49D25C ] VBoxUSBMon      C:\Windows\system32\DRIVERS\VBoxUSBMon.sys
19:08:51.0141 6300  VBoxUSBMon - ok
19:08:51.0175 6300  [ C5C876CCFC083FF3B128F933823E87BD ] vdrvroot        C:\Windows\system32\drivers\vdrvroot.sys
19:08:51.0183 6300  vdrvroot - ok
19:08:51.0196 6300  [ 8D6B481601D01A456E75C3210F1830BE ] vds            C:\Windows\System32\vds.exe
19:08:51.0245 6300  vds - ok
19:08:51.0270 6300  [ DA4DA3F5E02943C2DC8C6ED875DE68DD ] vga            C:\Windows\system32\DRIVERS\vgapnp.sys
19:08:51.0281 6300  vga - ok
19:08:51.0293 6300  [ 53E92A310193CB3C03BEA963DE7D9CFC ] VgaSave        C:\Windows\System32\drivers\vga.sys
19:08:51.0325 6300  VgaSave - ok
19:08:51.0327 6300  VGPU - ok
19:08:51.0355 6300  [ 2CE2DF28C83AEAF30084E1B1EB253CBB ] vhdmp          C:\Windows\system32\drivers\vhdmp.sys
19:08:51.0366 6300  vhdmp - ok
19:08:51.0380 6300  [ E5689D93FFE4E5D66C0178761240DD54 ] viaide          C:\Windows\system32\drivers\viaide.sys
19:08:51.0387 6300  viaide - ok
19:08:51.0415 6300  [ 80E731A278695B47345D0171A19E428B ] vmbus          C:\Windows\system32\drivers\vmbus.sys
19:08:51.0425 6300  vmbus - ok
19:08:51.0432 6300  [ 7DE90B48F210D29649380545DB45A187 ] VMBusHID        C:\Windows\system32\drivers\VMBusHID.sys
19:08:51.0440 6300  VMBusHID - ok
19:08:51.0454 6300  [ D2AAFD421940F640B407AEFAAEBD91B0 ] volmgr          C:\Windows\system32\drivers\volmgr.sys
19:08:51.0462 6300  volmgr - ok
19:08:51.0492 6300  [ A255814907C89BE58B79EF2F189B843B ] volmgrx        C:\Windows\system32\drivers\volmgrx.sys
19:08:51.0505 6300  volmgrx - ok
19:08:51.0517 6300  [ 0D08D2F3B3FF84E433346669B5E0F639 ] volsnap        C:\Windows\system32\drivers\volsnap.sys
19:08:51.0529 6300  volsnap - ok
19:08:51.0548 6300  [ 5E2016EA6EBACA03C04FEAC5F330D997 ] vsmraid        C:\Windows\system32\drivers\vsmraid.sys
19:08:51.0558 6300  vsmraid - ok
19:08:51.0599 6300  [ B60BA0BC31B0CB414593E169F6F21CC2 ] VSS            C:\Windows\system32\vssvc.exe
19:08:51.0653 6300  VSS - ok
19:08:51.0675 6300  [ 36D4720B72B5C5D9CB2B9C29E9DF67A1 ] vwifibus        C:\Windows\system32\DRIVERS\vwifibus.sys
19:08:51.0687 6300  vwifibus - ok
19:08:51.0703 6300  [ 6A3D66263414FF0D6FA754C646612F3F ] vwififlt        C:\Windows\system32\DRIVERS\vwififlt.sys
19:08:51.0716 6300  vwififlt - ok
19:08:51.0756 6300  [ 6A638FC4BFDDC4D9B186C28C91BD1A01 ] vwifimp        C:\Windows\system32\DRIVERS\vwifimp.sys
19:08:51.0802 6300  vwifimp - ok
19:08:51.0824 6300  [ 1C9D80CC3849B3788048078C26486E1A ] W32Time        C:\Windows\system32\w32time.dll
19:08:51.0854 6300  W32Time - ok
19:08:51.0870 6300  [ 4E9440F4F152A7B944CB1663D3935A3E ] WacomPen        C:\Windows\system32\drivers\wacompen.sys
19:08:51.0879 6300  WacomPen - ok
19:08:51.0894 6300  [ 356AFD78A6ED4457169241AC3965230C ] WANARP          C:\Windows\system32\DRIVERS\wanarp.sys
19:08:51.0934 6300  WANARP - ok
19:08:51.0947 6300  [ 356AFD78A6ED4457169241AC3965230C ] Wanarpv6        C:\Windows\system32\DRIVERS\wanarp.sys
19:08:51.0972 6300  Wanarpv6 - ok
19:08:52.0025 6300  [ 3CEC96DE223E49EAAE3651FCF8FAEA6C ] WatAdminSvc    C:\Windows\system32\Wat\WatAdminSvc.exe
19:08:52.0051 6300  WatAdminSvc - ok
19:08:52.0077 6300  [ 78F4E7F5C56CB9716238EB57DA4B6A75 ] wbengine        C:\Windows\system32\wbengine.exe
19:08:52.0123 6300  wbengine - ok
19:08:52.0145 6300  [ 3AA101E8EDAB2DB4131333F4325C76A3 ] WbioSrvc        C:\Windows\System32\wbiosrvc.dll
19:08:52.0160 6300  WbioSrvc - ok
19:08:52.0170 6300  [ 7368A2AFD46E5A4481D1DE9D14848EDD ] wcncsvc        C:\Windows\System32\wcncsvc.dll
19:08:52.0198 6300  wcncsvc - ok
19:08:52.0212 6300  [ 20F7441334B18CEE52027661DF4A6129 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
19:08:52.0231 6300  WcsPlugInService - ok
19:08:52.0243 6300  [ 72889E16FF12BA0F235467D6091B17DC ] Wd              C:\Windows\system32\drivers\wd.sys
19:08:52.0252 6300  Wd - ok
19:08:52.0273 6300  [ 441BD2D7B4F98134C3A4F9FA570FD250 ] Wdf01000        C:\Windows\system32\drivers\Wdf01000.sys
19:08:52.0289 6300  Wdf01000 - ok
19:08:52.0296 6300  [ BF1FC3F79B863C914687A737C2F3D681 ] WdiServiceHost  C:\Windows\system32\wdi.dll
19:08:52.0328 6300  WdiServiceHost - ok
19:08:52.0330 6300  [ BF1FC3F79B863C914687A737C2F3D681 ] WdiSystemHost  C:\Windows\system32\wdi.dll
19:08:52.0344 6300  WdiSystemHost - ok
19:08:52.0361 6300  [ 3DB6D04E1C64272F8B14EB8BC4616280 ] WebClient      C:\Windows\System32\webclnt.dll
19:08:52.0383 6300  WebClient - ok
19:08:52.0396 6300  [ C749025A679C5103E575E3B48E092C43 ] Wecsvc          C:\Windows\system32\wecsvc.dll
19:08:52.0438 6300  Wecsvc - ok
19:08:52.0458 6300  [ 7E591867422DC788B9E5BD337A669A08 ] wercplsupport  C:\Windows\System32\wercplsupport.dll
19:08:52.0485 6300  wercplsupport - ok
19:08:52.0501 6300  [ 6D137963730144698CBD10F202E9F251 ] WerSvc          C:\Windows\System32\WerSvc.dll
19:08:52.0540 6300  WerSvc - ok
19:08:52.0564 6300  [ 611B23304BF067451A9FDEE01FBDD725 ] WfpLwf          C:\Windows\system32\DRIVERS\wfplwf.sys
19:08:52.0590 6300  WfpLwf - ok
19:08:52.0620 6300  [ 05ECAEC3E4529A7153B3136CEB49F0EC ] WIMMount        C:\Windows\system32\drivers\wimmount.sys
19:08:52.0628 6300  WIMMount - ok
19:08:52.0635 6300  WinDefend - ok
19:08:52.0639 6300  WinHttpAutoProxySvc - ok
19:08:52.0680 6300  [ 19B07E7E8915D701225DA41CB3877306 ] Winmgmt        C:\Windows\system32\wbem\WMIsvc.dll
19:08:52.0709 6300  Winmgmt - ok
19:08:52.0850 6300  [ BCB1310604AA415C4508708975B3931E ] WinRM          C:\Windows\system32\WsmSvc.dll
19:08:52.0896 6300  WinRM - ok
19:08:52.0936 6300  [ FE88B288356E7B47B74B13372ADD906D ] WinUsb          C:\Windows\system32\DRIVERS\WinUSB.sys
19:08:52.0948 6300  WinUsb - ok
19:08:52.0965 6300  [ 4FADA86E62F18A1B2F42BA18AE24E6AA ] Wlansvc        C:\Windows\System32\wlansvc.dll
19:08:52.0987 6300  Wlansvc - ok
19:08:53.0012 6300  [ F6FF8944478594D0E414D3F048F0D778 ] WmiAcpi        C:\Windows\system32\DRIVERS\wmiacpi.sys
19:08:53.0031 6300  WmiAcpi - ok
19:08:53.0063 6300  [ 38B84C94C5A8AF291ADFEA478AE54F93 ] wmiApSrv        C:\Windows\system32\wbem\WmiApSrv.exe
19:08:53.0083 6300  wmiApSrv - ok
19:08:53.0090 6300  WMPNetworkSvc - ok
19:08:53.0098 6300  [ 96C6E7100D724C69FCF9E7BF590D1DCA ] WPCSvc          C:\Windows\System32\wpcsvc.dll
19:08:53.0108 6300  WPCSvc - ok
19:08:53.0117 6300  [ 93221146D4EBBF314C29B23CD6CC391D ] WPDBusEnum      C:\Windows\system32\wpdbusenum.dll
19:08:53.0129 6300  WPDBusEnum - ok
19:08:53.0141 6300  [ 6BCC1D7D2FD2453957C5479A32364E52 ] ws2ifsl        C:\Windows\system32\drivers\ws2ifsl.sys
19:08:53.0167 6300  ws2ifsl - ok
19:08:53.0173 6300  [ E8B1FE6669397D1772D8196DF0E57A9E ] wscsvc          C:\Windows\System32\wscsvc.dll
19:08:53.0187 6300  wscsvc - ok
19:08:53.0189 6300  WSearch - ok
19:08:53.0231 6300  [ D9EF901DCA379CFE914E9FA13B73B4C4 ] wuauserv        C:\Windows\system32\wuaueng.dll
19:08:53.0286 6300  wuauserv - ok
19:08:53.0294 6300  [ D3381DC54C34D79B22CEE0D65BA91B7C ] WudfPf          C:\Windows\system32\drivers\WudfPf.sys
19:08:53.0320 6300  WudfPf - ok
19:08:53.0355 6300  [ CF8D590BE3373029D57AF80914190682 ] WUDFRd          C:\Windows\system32\DRIVERS\WUDFRd.sys
19:08:53.0381 6300  WUDFRd - ok
19:08:53.0407 6300  [ 7A95C95B6C4CF292D689106BCAE49543 ] wudfsvc        C:\Windows\System32\WUDFSvc.dll
19:08:53.0432 6300  wudfsvc - ok
19:08:53.0439 6300  [ 9A3452B3C2A46C073166C5CF49FAD1AE ] WwanSvc        C:\Windows\System32\wwansvc.dll
19:08:53.0468 6300  WwanSvc - ok
19:08:53.0522 6300  ================ Scan global ===============================
19:08:53.0543 6300  [ BA0CD8C393E8C9F83354106093832C7B ] C:\Windows\system32\basesrv.dll
19:08:53.0554 6300  [ EB6A48CC998E1090E44E8E7F1009A640 ] C:\Windows\system32\winsrv.dll
19:08:53.0560 6300  [ EB6A48CC998E1090E44E8E7F1009A640 ] C:\Windows\system32\winsrv.dll
19:08:53.0581 6300  [ D6160F9D869BA3AF0B787F971DB56368 ] C:\Windows\system32\sxssrv.dll
19:08:53.0598 6300  [ 24ACB7E5BE595468E3B9AA488B9B4FCB ] C:\Windows\system32\services.exe
19:08:53.0601 6300  [Global] - ok
19:08:53.0601 6300  ================ Scan MBR ==================================
19:08:53.0612 6300  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
19:08:53.0949 6300  \Device\Harddisk0\DR0 - ok
19:08:53.0950 6300  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk1\DR1
19:08:54.0468 6300  \Device\Harddisk1\DR1 - ok
19:08:54.0471 6300  [ 5FB38429D5D77768867C76DCBDB35194 ] \Device\Harddisk2\DR2
19:08:54.0585 6300  \Device\Harddisk2\DR2 - ok
19:08:54.0586 6300  ================ Scan VBR ==================================
19:08:54.0593 6300  [ 2932F18FA649FF21C5D3A40912159221 ] \Device\Harddisk0\DR0\Partition1
19:08:54.0594 6300  \Device\Harddisk0\DR0\Partition1 - ok
19:08:54.0596 6300  [ 42F18F50D0B8E38AA17CAD8ED13D3B53 ] \Device\Harddisk0\DR0\Partition2
19:08:54.0597 6300  \Device\Harddisk0\DR0\Partition2 - ok
19:08:54.0599 6300  [ D569134E1863D52A561E8BAA8F12D57D ] \Device\Harddisk1\DR1\Partition1
19:08:54.0599 6300  \Device\Harddisk1\DR1\Partition1 - ok
19:08:54.0601 6300  [ 674D508787620AD6D105EA49EF3D8F0B ] \Device\Harddisk1\DR1\Partition2
19:08:54.0602 6300  \Device\Harddisk1\DR1\Partition2 - ok
19:08:54.0604 6300  [ EB4B1F85FC6692F93233D8C57DDF3F8B ] \Device\Harddisk2\DR2\Partition1
19:08:54.0606 6300  \Device\Harddisk2\DR2\Partition1 - ok
19:08:54.0607 6300  ============================================================
19:08:54.0607 6300  Scan finished
19:08:54.0607 6300  ============================================================
19:08:54.0612 6452  Detected object count: 6
19:08:54.0612 6452  Actual detected object count: 6
19:09:02.0449 6452  FileZilla Server ( UnsignedFile.Multi.Generic ) - skipped by user
19:09:02.0449 6452  FileZilla Server ( UnsignedFile.Multi.Generic ) - User select action: Skip
19:09:02.0450 6452  FirebirdServerMAGIXInstance ( UnsignedFile.Multi.Generic ) - skipped by user
19:09:02.0450 6452  FirebirdServerMAGIXInstance ( UnsignedFile.Multi.Generic ) - User select action: Skip
19:09:02.0450 6452  IDriverT ( UnsignedFile.Multi.Generic ) - skipped by user
19:09:02.0450 6452  IDriverT ( UnsignedFile.Multi.Generic ) - User select action: Skip
19:09:02.0451 6452  Smart TimeLock ( UnsignedFile.Multi.Generic ) - skipped by user
19:09:02.0451 6452  Smart TimeLock ( UnsignedFile.Multi.Generic ) - User select action: Skip
19:09:02.0452 6452  SwitchBoard ( UnsignedFile.Multi.Generic ) - skipped by user
19:09:02.0452 6452  SwitchBoard ( UnsignedFile.Multi.Generic ) - User select action: Skip
19:09:02.0452 6452  USBAAPL64 ( UnsignedFile.Multi.Generic ) - skipped by user
19:09:02.0452 6452  USBAAPL64 ( UnsignedFile.Multi.Generic ) - User select action: Skip

mac17 01.10.2012 13:36
Reminder ;)

markusg 03.10.2012 17:46
Combofix darf ausschließlich ausgeführt werden, wenn dies von einem Team Mitglied angewiesen wurde!
Es sollte nie auf eigene Initiative hin ausgeführt werden! Eine falsche Benutzung kann ernsthafte Computerprobleme nach sich
ziehen und eine Bereinigung der Infektion noch erschweren.
Downloade dir bitte Combofix von einem dieser Downloadspiegel

Link 1
Link 2


WICHTIG - Speichere Combofix auf deinem Desktop
  • Deaktiviere bitte all deine Anti Viren sowie Anti Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören.
Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.

Wenn Combofix fertig ist, wird es eine Logfile erstellen. Bitte poste die C:\Combofix.txt in deiner nächsten Antwort.

mac17 04.10.2012 15:16
Hier die Log von Combofix:
[CODE]
Combofix Logfile:
Code:
ComboFix 12-10-04.01 - Marc 04.10.2012  15:52:37.1.4 - x64
Microsoft Windows 7 Ultimate  6.1.7601.1.1252.49.1031.18.8175.5107 [GMT 2:00]
ausgeführt von:: c:\users\Marc\Desktop\ComboFix.exe
AV: Norton Internet Security *Disabled/Updated* {63DF5164-9100-186D-2187-8DC619EFD8BF}
FW: Norton Internet Security *Disabled* {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}
SP: Norton Internet Security *Disabled/Updated* {D8BEB080-B73A-17E3-1B37-B6B462689202}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((  Weitere Löschungen  ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\TrayMin710.exe.lnk
c:\programdata\ntuser.dat
c:\users\Marc\AppData\Roaming\vso_ts_preview.xml
c:\windows\SysWow64\muzapp.exe
c:\windows\SysWow64\System32\MASetupCleaner.exe
c:\windows\SysWow64\System32\muzapp.exe
.
.
(((((((((((((((((((((((  Dateien erstellt von 2012-09-04 bis 2012-10-04  ))))))))))))))))))))))))))))))
.
.
2012-10-04 14:09 . 2012-10-04 14:09        --------        d-----w-        c:\users\UpdatusUser.Marc-PC\AppData\Local\temp
2012-10-04 14:09 . 2012-10-04 14:09        --------        d-----w-        c:\users\Default\AppData\Local\temp
2012-10-02 11:01 . 2012-10-02 11:01        --------        d-----w-        c:\windows\system32\drivers\NISx64\1309000.009
2012-09-26 10:03 . 2012-08-21 21:01        245760        ----a-w-        c:\windows\system32\OxpsConverter.exe
2012-09-25 15:29 . 2012-09-25 15:29        --------        d-----w-        c:\program files (x86)\Mozilla Maintenance Service
2012-09-21 16:17 . 2012-09-21 16:17        --------        dc-h--w-        c:\programdata\{30FA7941-4170-4C83-A9A8-FDF01C431704}
2012-09-20 18:07 . 2012-08-21 11:01        33240        ----a-w-        c:\windows\system32\drivers\GEARAspiWDM.sys
2012-09-20 18:07 . 2012-09-20 18:07        --------        d-----w-        c:\programdata\34BE82C4-E596-4e99-A191-52C6199EBF69
2012-09-20 18:07 . 2012-09-20 18:07        --------        d-----w-        c:\program files\iTunes
2012-09-20 18:07 . 2012-09-20 18:07        --------        d-----w-        c:\program files\iPod
2012-09-18 18:59 . 2012-09-21 13:22        696240        ----a-w-        c:\windows\SysWow64\FlashPlayerApp.exe
2012-09-18 12:20 . 2012-09-21 13:22        73136        ----a-w-        c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2012-09-17 16:57 . 2012-09-25 17:45        --------        d-----w-        c:\program files (x86)\edcast
2012-09-16 19:42 . 2012-09-16 19:42        --------        d-----w-        c:\program files (x86)\uTorrent
2012-09-16 19:41 . 2012-09-16 20:10        --------        d-----w-        c:\users\Marc\AppData\Roaming\uTorrent
2012-09-12 16:39 . 2012-08-22 18:12        950128        ----a-w-        c:\windows\system32\drivers\ndis.sys
2012-09-12 16:39 . 2012-07-04 20:26        41472        ----a-w-        c:\windows\system32\drivers\RNDISMP.sys
2012-09-12 16:39 . 2012-08-02 17:58        574464        ----a-w-        c:\windows\system32\d3d10level9.dll
2012-09-12 16:39 . 2012-08-02 16:57        490496        ----a-w-        c:\windows\SysWow64\d3d10level9.dll
2012-09-12 16:39 . 2012-08-22 18:12        1913200        ----a-w-        c:\windows\system32\drivers\tcpip.sys
2012-09-12 16:39 . 2012-08-22 18:12        376688        ----a-w-        c:\windows\system32\drivers\netio.sys
2012-09-12 16:39 . 2012-08-22 18:12        288624        ----a-w-        c:\windows\system32\drivers\FWPKCLNT.SYS
2012-09-11 10:55 . 2012-09-11 10:55        --------        d-----w-        C:\found.004
2012-09-08 11:12 . 2012-09-08 11:12        477168        ----a-w-        c:\windows\SysWow64\npdeployJava1.dll
2012-09-08 08:53 . 2011-04-11 23:33        1579520        ----a-w-        c:\windows\system32\drivers\athrx.sys
2012-09-07 14:56 . 2012-09-07 14:56        --------        d-----w-        c:\program files (x86)\simfy
2012-09-06 18:52 . 2012-09-06 18:52        --------        d-----w-        c:\program files (x86)\TeamSpeak 3 Client
2012-09-04 18:57 . 2012-09-04 18:57        --------        d-----w-        c:\program files (x86)\SplitMediaLabs
.
.
.
((((((((((((((((((((((((((((((((((((  Find3M Bericht  ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-10-04 12:58 . 2011-07-06 17:57        25640        ----a-w-        c:\windows\gdrv.sys
2012-09-22 19:47 . 2011-04-08 14:45        281520        ----a-w-        c:\windows\SysWow64\PnkBstrB.xtr
2012-09-22 19:47 . 2011-04-08 13:51        281520        ----a-w-        c:\windows\SysWow64\PnkBstrB.exe
2012-09-22 19:47 . 2011-04-08 13:51        280904        ----a-w-        c:\windows\SysWow64\PnkBstrB.ex0
2012-09-13 12:59 . 2012-01-02 14:26        64462936        ----a-w-        c:\windows\system32\MRT.exe
2012-09-08 11:12 . 2011-06-20 18:38        473072        ----a-w-        c:\windows\SysWow64\deployJava1.dll
2012-08-30 19:14 . 2012-02-19 11:31        1760104        ----a-w-        c:\windows\system32\nvdispco64.dll
2012-08-30 19:14 . 2011-08-12 13:42        2725224        ----a-w-        c:\windows\system32\nvapi64.dll
2012-08-30 19:14 . 2011-05-21 04:01        2422120        ----a-w-        c:\windows\SysWow64\nvapi.dll
2012-08-30 19:14 . 2011-05-21 04:01        18229096        ----a-w-        c:\windows\system32\nvd3dumx.dll
2012-08-30 19:14 . 2011-05-21 04:01        15291752        ----a-w-        c:\windows\SysWow64\nvd3dum.dll
2012-08-30 19:14 . 2011-05-21 04:01        14879080        ----a-w-        c:\windows\system32\nvwgf2umx.dll
2012-08-30 19:14 . 2011-05-21 04:01        12465512        ----a-w-        c:\windows\SysWow64\nvwgf2um.dll
2012-08-30 16:18 . 2011-01-07 18:49        118120        ----a-w-        c:\windows\system32\nvmctray.dll
2012-08-30 16:18 . 2011-01-07 18:49        891240        ----a-w-        c:\windows\system32\nvvsvc.exe
2012-08-30 16:18 . 2011-01-07 18:49        63336        ----a-w-        c:\windows\system32\nvshext.dll
2012-08-30 16:18 . 2011-01-07 18:49        2557800        ----a-w-        c:\windows\system32\nvsvcr.dll
2012-08-30 16:18 . 2012-05-21 16:57        3487434        ----a-w-        c:\windows\system32\nvcoproc.bin
2012-08-30 16:18 . 2011-01-07 18:49        3266920        ----a-w-        c:\windows\system32\nvsvc64.dll
2012-08-30 16:17 . 2011-01-07 18:50        6198120        ----a-w-        c:\windows\system32\nvcpl.dll
2012-08-30 08:40 . 2012-08-30 08:40        429416        ----a-w-        c:\windows\SysWow64\nvStreaming.exe
2012-08-21 11:01 . 2011-04-20 18:48        125872        ----a-w-        c:\windows\system32\GEARAspi64.dll
2012-08-21 11:01 . 2011-04-20 18:48        106928        ----a-w-        c:\windows\SysWow64\GEARAspi.dll
2012-07-30 11:32 . 2012-07-30 11:32        708168        ----a-w-        c:\windows\system32\WinUSBCoInstaller.dll
2012-07-30 11:32 . 2012-07-30 11:32        203104        ----a-w-        c:\windows\system32\drivers\ssudobex.sys
2012-07-30 11:32 . 2012-07-30 11:32        203104        ----a-w-        c:\windows\system32\drivers\ssudmdm.sys
2012-07-30 11:32 . 2012-07-30 11:32        1490656        ----a-w-        c:\windows\system32\WdfCoInstaller01007.dll
2012-07-30 11:32 . 2012-07-30 11:32        102240        ----a-w-        c:\windows\system32\drivers\ssudbus.sys
2012-07-18 18:15 . 2012-08-15 08:41        3148800        ----a-w-        c:\windows\system32\win32k.sys
.
.
((((((((((((((((((((((((((((  Autostartpunkte der Registrierung  ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2011-02-18 05:12        94208        ----a-w-        c:\users\Marc\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2011-02-18 05:12        94208        ----a-w-        c:\users\Marc\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2011-02-18 05:12        94208        ----a-w-        c:\users\Marc\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-21 1475584]
"DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2012-04-17 3671872]
"Facebook Update"="c:\users\Marc\AppData\Local\Facebook\Update\FacebookUpdate.exe" [2012-07-29 138096]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-07-27 919008]
"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2012-08-27 59280]
"BrMfcWnd"="c:\program files (x86)\Brother\Brmfcmon\BrMfcWnd.exe" [2009-05-26 1159168]
"ControlCenter3"="c:\program files (x86)\Brother\ControlCenter3\brctrcen.exe" [2008-12-24 114688]
"WinampAgent"="c:\program files (x86)\Winamp\winampa.exe" [2011-07-11 74752]
"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2012-04-18 421888]
"SwitchBoard"="c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe" [2010-02-19 517096]
"AdobeCS6ServiceManager"="c:\program files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" [2012-06-25 1073352]
"Adobe Acrobat Speed Launcher"="c:\program files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe" [2012-07-27 36800]
"Acrobat Assistant 8.0"="c:\program files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe" [2012-07-27 823224]
"FixCamera"="c:\windows\FixCamera.exe" [2007-07-11 20480]
"tsnp325"="c:\windows\tsnp325.exe" [2007-04-21 270336]
"LifeCam"="c:\program files (x86)\Microsoft LifeCam\LifeExp.exe" [2010-12-13 135536]
"LogMeIn Hamachi Ui"="c:\program files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" [2012-08-29 1996200]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2012-01-18 254696]
"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2012-09-09 421776]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce]
"DES2"="c:\program files (x86)\GIGABYTE\EnergySaver2\des2.exe" [2011-03-08 359024]
"SDBOK"="c:\program files (x86)\GIGABYTE\smart6\dbios\run.exe" [2009-07-06 207400]
.
c:\users\Marc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Dropbox.lnk - c:\users\Marc\AppData\Roaming\Dropbox\bin\Dropbox.exe [2012-5-24 27112840]
Facebook Desktop.lnk - c:\program files (x86)\Facebook Desktop\Facebook Desktop.exe [2011-9-9 142848]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=0 (0x0)
.
R2 gupdate;Google Update-Dienst (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-10-13 136176]
R2 RoxWatch12;Roxio Hard Drive Watcher 12;c:\program files (x86)\Common Files\Roxio Shared\12.0\SharedCOM\RoxWatch12.exe [2009-07-24 219632]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2012-07-13 160944]
R3 a2djavs_x64;a2djavs_x64;c:\windows\system32\Drivers\a2djavs_x64.sys [2009-10-08 44624]
R3 a2djusb_x64;a2djusb_x64;c:\windows\system32\Drivers\a2djusb_x64.sys [2009-10-08 300112]
R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-09-21 250288]
R3 androidusb;SAMSUNG Android Composite ADB Interface Driver;c:\windows\system32\Drivers\ssadadb.sys [2010-12-21 36328]
R3 AppleChargerSrv;AppleChargerSrv;c:\windows\system32\AppleChargerSrv.exe [2010-04-06 31272]
R3 athur;Wireless Network Adapter Service;c:\windows\system32\DRIVERS\athurx.sys [2010-01-06 1847296]
R3 dc3d;MS Hardware Device Detection Driver (USB);c:\windows\system32\DRIVERS\dc3d.sys [2011-07-28 52584]
R3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudbus.sys [2012-07-30 102240]
R3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys [2010-11-21 71168]
R3 EagleX64;EagleX64;c:\windows\system32\drivers\EagleX64.sys [x]
R3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2012-09-12 138912]
R3 etdrv;etdrv;c:\windows\etdrv.sys [2012-06-06 25640]
R3 FirebirdServerMAGIXInstance;Firebird Server - MAGIX Instance;c:\program files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe [2008-08-07 3276800]
R3 gupdatem;Google Update-Dienst (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-10-13 136176]
R3 GVTDrv64;GVTDrv64;c:\windows\GVTDrv64.sys [2012-06-06 30528]
R3 ks2avs;Kontrol S2 WDM Audio;c:\windows\system32\Drivers\ks2avs.sys [2012-02-22 358480]
R3 ks2usb_svc;Traktor Kontrol S2;c:\windows\system32\Drivers\ks2usb.sys [2012-02-22 80464]
R3 LVRS64;Logitech RightSound Filter Driver;c:\windows\system32\DRIVERS\lvrs64.sys [2012-01-18 351136]
R3 LVUVC64;Logitech HD Webcam C270(UVC);c:\windows\system32\DRIVERS\lvuvc64.sys [2012-01-18 4865568]
R3 ManyCam;ManyCam Virtual Webcam;c:\windows\system32\DRIVERS\mcvidrv_x64.sys [2012-01-11 34304]
R3 mcaudrv_simple;ManyCam Virtual Microphone;c:\windows\system32\drivers\mcaudrv_x64.sys [2012-02-22 28160]
R3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service;c:\program files\Microsoft Office\Office14\GROOVE.EXE [2011-06-12 51740536]
R3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2012-09-06 114144]
R3 ose64;Office 64 Source Engine;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 174440]
R3 OverwolfUpdaterService;Overwolf Updater Service;c:\program files (x86)\Overwolf\OverwolfUpdater.exe [2012-08-21 18360]
R3 Point64;Microsoft IntelliPoint Filter Driver;c:\windows\system32\DRIVERS\point64.sys [2011-08-01 45416]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2010-11-21 20992]
R3 RoxMediaDB12;RoxMediaDB12;c:\program files (x86)\Common Files\Roxio Shared\12.0\SharedCOM\RoxMediaDB12.exe [2009-07-24 1116656]
R3 SNP325;USB PC Camera (SNPSTD325);c:\windows\system32\DRIVERS\snp325.sys [2007-11-22 10733184]
R3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM);c:\windows\system32\DRIVERS\ssadbus.sys [2011-06-02 157672]
R3 ssadmdfl;SAMSUNG Android USB Modem (Filter);c:\windows\system32\DRIVERS\ssadmdfl.sys [2011-06-02 16872]
R3 ssadmdm;SAMSUNG Android USB Modem Drivers;c:\windows\system32\DRIVERS\ssadmdm.sys [2011-06-02 177640]
R3 ssudmdm;SAMSUNG  Mobile USB Modem Drivers (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudmdm.sys [2012-07-30 203104]
R3 ssudobex;SAMSUNG Mobile USB OBEX Serial Port(DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudobex.sys [2012-07-30 203104]
R3 SwitchBoard;SwitchBoard;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys [2010-11-21 88960]
R3 terminpt;Microsoft Remote Desktop Input Driver;c:\windows\system32\drivers\terminpt.sys [2010-11-21 34816]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys [2010-11-21 117248]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys [2012-02-15 52736]
R3 VBoxUSB;VirtualBox USB;c:\windows\system32\Drivers\VBoxUSB.sys [2012-03-14 117040]
R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys [x]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
R3 WatAdminSvc;Windows-Aktivierungstechnologieservice;c:\windows\system32\Wat\WatAdminSvc.exe [2011-04-19 1255736]
S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys [2011-11-03 56208]
S0 Sahdad64;HDD Filter Driver;c:\windows\System32\Drivers\Sahdad64.sys [2009-06-01 27120]
S0 Saibad64;Volume Filter Driver;c:\windows\System32\Drivers\Saibad64.sys [2009-06-01 19952]
S0 SymDS;Symantec Data Store;c:\windows\system32\drivers\NISx64\1308000.00E\SYMDS64.SYS [2011-07-25 451192]
S0 SymEFA;Symantec Extended File Attributes;c:\windows\system32\drivers\NISx64\1308000.00E\SYMEFA64.SYS [2012-05-22 1129120]
S1 AppleCharger;AppleCharger;c:\windows\system32\DRIVERS\AppleCharger.sys [2011-01-10 21104]
S1 BHDrvx64;BHDrvx64;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.1.0.28\Definitions\BASHDefs\20120928.001\BHDrvx64.sys [2012-08-31 1385120]
S1 ccSet_NIS;Norton Internet Security Settings Manager;c:\windows\system32\drivers\NISx64\1308000.00E\ccSetx64.sys [2012-06-07 167072]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [2012-05-06 283200]
S1 IDSVia64;IDSVia64;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.1.0.28\Definitions\IPSDefs\20121003.001\IDSvia64.sys [2012-09-01 513184]
S1 SaibVdAd64;Virtual Disk Driver;c:\windows\system32\Drivers\SaibVdAd64.sys [2009-06-01 27632]
S1 SymIRON;Symantec Iron Driver;c:\windows\system32\drivers\NISx64\1308000.00E\Ironx64.SYS [2012-04-18 190072]
S1 SymNetS;Symantec Network Security WFP Driver;c:\windows\System32\Drivers\NISx64\1308000.00E\SYMNETS.SYS [2012-04-18 405624]
S1 VBoxDrv;VirtualBox Service;c:\windows\system32\DRIVERS\VBoxDrv.sys [2012-05-22 224088]
S1 VBoxUSBMon;VirtualBox USB Monitor Driver;c:\windows\system32\DRIVERS\VBoxUSBMon.sys [2012-05-22 130904]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
S2 9734BF6A-2DCD-40f0-BAB0-5AAFEEBE1269;Roxio SAIB Service;c:\program files (x86)\Roxio\BackOnTrack\Disaster Recovery\SaibSVC.exe [2009-06-02 457200]
S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-07-27 63960]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 DES2 Service;DES2 Service for Energy Saving.;c:\program files (x86)\GIGABYTE\EnergySaver2\des2svr.exe [2009-06-17 68136]
S2 Fabs;FABS - Helping agent for MAGIX media database;c:\program files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe [2009-08-27 1253376]
S2 GEST Service;GEST Service for program management.;c:\program files (x86)\GIGABYTE\EnergySaver\GSvr.exe [2009-12-02 68136]
S2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;c:\program files (x86)\LogMeIn Hamachi\hamachi-2.exe [2012-08-29 2369960]
S2 iPodDrv;iPodDrv;c:\windows\system32\drivers\iPodDrv.sys [2011-07-27 14952]
S2 NIHardwareService;NIHardwareService;c:\program files\Common Files\Native Instruments\Hardware\NIHardwareService.exe [2012-09-05 6364024]
S2 NIS;Norton Internet Security;c:\program files (x86)\Norton Internet Security\Engine\19.8.0.14\ccSvcHst.exe [2012-06-16 138272]
S2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2012-08-30 1258856]
S2 Smart TimeLock;Smart TimeLock Service;c:\program files (x86)\GIGABYTE\Smart6\Timelock\TimeMgmtDaemon.exe [2009-10-13 114688]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2012-08-30 382312]
S2 TeamViewer7;TeamViewer 7;c:\program files (x86)\TeamViewer\Version7\TeamViewer_Service.exe [2012-08-24 2735528]
S2 UMVPFSrv;UMVPFSrv;c:\program files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe [2012-01-18 450848]
S3 a2djavs;Audio 2 DJ WDM Audio;c:\windows\system32\Drivers\a2djavs.sys [2012-02-22 358480]
S3 a2djusb_svc;Audio 2 DJ;c:\windows\system32\Drivers\a2djusb.sys [2012-02-22 96336]
S3 EtronHub3;Etron USB 3.0 Extensible Hub Driver;c:\windows\system32\Drivers\EtronHub3.sys [2011-03-07 40832]
S3 EtronXHCI;Etron USB 3.0 Extensible Host Controller Driver;c:\windows\system32\Drivers\EtronXHCI.sys [2011-03-07 65280]
S3 MEIx64;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys [2010-10-19 56344]
S3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda64v.sys [2012-07-03 189288]
S3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 phc710;USB PC Camera (SPC710NC);c:\windows\system32\DRIVERS\phc710.sys [2006-10-16 867712]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [2011-06-10 539240]
S3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter;c:\windows\system32\DRIVERS\VBoxNetAdp.sys [2012-05-22 147288]
S3 VBoxNetFlt;VirtualBox Bridged Networking Service;c:\windows\system32\DRIVERS\VBoxNetFlt.sys [2012-05-22 166232]
.
.
Inhalt des "geplante Tasks" Ordners
.
2012-10-04 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-09-18 13:22]
.
2012-10-04 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1771800032-78958699-3666061034-1000Core.job
- c:\users\Marc\AppData\Local\Facebook\Update\FacebookUpdate.exe [2011-09-20 13:28]
.
2012-10-04 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1771800032-78958699-3666061034-1000UA.job
- c:\users\Marc\AppData\Local\Facebook\Update\FacebookUpdate.exe [2011-09-20 13:28]
.
2012-10-04 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-10-13 19:33]
.
2012-10-04 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-10-13 19:33]
.
2012-10-03 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1771800032-78958699-3666061034-1000Core.job
- c:\users\Marc\AppData\Local\Google\Update\GoogleUpdate.exe [2012-09-24 15:34]
.
2012-10-04 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1771800032-78958699-3666061034-1000UA.job
- c:\users\Marc\AppData\Local\Google\Update\GoogleUpdate.exe [2012-09-24 15:34]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{45d30484-7ded-43d9-957a-d2fd1f046511}]
2010-11-21 03:23        444752        ----a-w-        c:\windows\System32\mscoree.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{1d09c093-f71e-43c3-b948-19316cbd695e}"= "mscoree.dll" [2010-11-21 444752]
.
[HKEY_CLASSES_ROOT\CLSID\{1d09c093-f71e-43c3-b948-19316cbd695e}]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2011-02-18 05:12        97792        ----a-w-        c:\users\Marc\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2011-02-18 05:12        97792        ----a-w-        c:\users\Marc\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2011-02-18 05:12        97792        ----a-w-        c:\users\Marc\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]
@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
2011-02-18 05:12        97792        ----a-w-        c:\users\Marc\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2011-08-26 12681320]
"phc710"="c:\windows\vphc710.exe" [2006-10-16 344064]
"AdobeAAMUpdater-1.0"="c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2012-09-20 444904]
"IntelliPoint"="c:\program files\Microsoft IntelliPoint\ipoint.exe" [2011-08-01 2417032]
"itype"="c:\program files\Microsoft IntelliType Pro\itype.exe" [2011-08-01 1873288]
"BCSSync"="c:\program files\Microsoft Office\Office14\BCSSync.exe" [2010-03-13 112512]
"snp325"="c:\windows\vsnp325.exe" [2007-05-10 835584]
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = *.local;127.0.0.1:9421;<local>
IE: An OneNote s&enden - c:\progra~2\MICROS~4\Office14\ONBttnIE.dll/105
IE: An vorhandene PDF-Datei anfügen - c:\program files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
IE: In Adobe PDF konvertieren - c:\program files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
IE: Linkziel an vorhandene PDF-Datei anhängen - c:\program files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Linkziel in Adobe PDF konvertieren - c:\program files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Nach Microsoft &Excel exportieren - c:\progra~2\MICROS~1\OFFICE11\EXCEL.EXE/3000
IE: Nach Microsoft E&xcel exportieren - c:\progra~2\MICROS~4\Office14\EXCEL.EXE/3000
IE: {{7644E42D-B096-457F-8B5B-901238FC81AE} - c:\program files (x86)\ICQ7.6\ICQ.exe
TCP: DhcpNameServer = 192.168.2.1
FF - ProfilePath - c:\users\Marc\AppData\Roaming\Mozilla\Firefox\Profiles\r28uct31.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.wisedock.de/m.php?id=2332406674768a7e760877fb50ef6c1161c7
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Wow6432Node-HKCU-Run-AdobeBridge - (no file)
Wow6432Node-HKLM-Run-<NO NAME> - (no file)
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NIS]
"ImagePath"="\"c:\program files (x86)\Norton Internet Security\Engine\19.8.0.14\ccSvcHst.exe\" /s \"NIS\" /m \"c:\program files (x86)\Norton Internet Security\Engine\19.8.0.14\diMaster.dll\" /prefetch:1"
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_USERS\S-1-5-21-1771800032-78958699-3666061034-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*m*p*3*3â÷q\OpenWithList]
@Class="Shell"
"a"="vlc.exe"
"MRUList"="a"
.
[HKEY_USERS\S-1-5-21-1771800032-78958699-3666061034-1000\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{F6C3A976-80A1-894B-D985-1EA6030CF0D3}*]
"hafjnmijjagpnomk"=hex:69,61,70,6e,67,63,6d,68,6e,6d,64,66,6d,63,6a,68,62,61,
  00,77
"iadilonndclckbmkii"=hex:63,61,6d,6e,65,64,00,00
"iapidopeablphfibgc"=hex:69,61,70,6e,67,63,6d,68,6e,6d,64,66,6d,63,6a,68,62,61,
  00,77
"dbaoobcbffhmbcgihabihihhbcbcgkekacjpaoip"=hex:68,61,69,6c,6d,67,6e,67,68,68,
  69,6f,62,67,6f,6d,00,00
"jbaoobcbffhmbcgihabiijfjiophoonlnnjldfffbchlhjdppjpd"=hex:68,61,69,6c,6d,67,
  6e,67,68,68,69,6f,62,67,6f,6d,00,00
"dbaoobcbffhmbcgihabigjeinflkpfcddignjdke"=hex:62,61,66,70,00,fa
.
[HKEY_USERS\S-1-5-21-1771800032-78958699-3666061034-1000\Software\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Common Client\ccIPC]
@Denied: (C D) (Everyone)
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_4_402_278_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_4_402_278_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_4_402_278_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_4_402_278_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_278.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_278.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_278.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_278.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Common Client\ccIPC\Channels]
@Denied: (C D) (Everyone)
"ccSvcHst_UserSession_3260"="{7AD13F65-10E5-4087-8D07-70ADAE091903}"
"g_coUserCommandChannel"="{0E4D14DB-8DC6-429F-BADF-4FC30ED1A2CA}"
"ccSvcHst_UserSession_3036"="{FEEF351E-734E-4737-8E0A-48A10EFB02C9}"
"ccSvcHst_UserSession_5760"="{8C65AD0F-04B5-413C-90CF-509DBC052D8B}"
"ccSvcHst_UserSession_3632"="{0CCF73C1-FEAA-4AA0-BCEE-9850A251B643}"
"ccSvcHst_UserSession_5096"="{D6E60F79-AE4F-4B1C-8B85-1A8F2A7111BB}"
"ccSvcHst_UserSession_2300"="{49AFFE68-3D4F-4F08-8FBC-0632857C43B8}"
"ccSvcHst_UserSession_3368"="{DE6A5807-7505-46C3-8CDA-58DEFDA7B745}"
"ccSvcHst_UserSession_2448"="{083942F0-EBA4-4AD0-8281-E14496BEA3D8}"
"ccSvcHst_UserSession_1992"="{14A5F078-4460-4D7A-A08B-5A16CC9BA29F}"
"ccSvcHst_UserSession_1036"="{B66A1EDF-2721-4562-A432-A9D8AFD9ACAF}"
"ccSvcHst_UserSession_2944"="{FE3B354E-4196-4AAB-A569-2EFB0FAAFC4D}"
"ccSvcHst_UserSession_2104"="{EF6A4C12-813C-4D9E-88D8-BD64B48FAAC0}"
"ccSvcHst_UserSession_3576"="{12A54274-C7EC-4590-BF52-8FDE56424A49}"
"ccSvcHst_UserSession_2584"="{99E38C87-BA20-4A65-B0CC-7648091B1EEA}"
"ccSvcHst_UserSession_3724"="{4AA45098-4DA2-4FFC-AA95-7FAFE790D308}"
"ccSvcHst_UserSession_2356"="{75E5EF4F-8C0A-4052-B745-3B9CF265499F}"
"ccSvcHst_UserSession_3140"="{9718306E-5223-4014-B83F-43DD5C749926}"
"ccSvcHst_UserSession_3800"="{5F623640-979A-4DA7-B57D-42367C0CB067}"
"ccSvcHst_UserSession_3464"="{52E2BDF0-97FA-4446-8E2C-492964AB1719}"
"ccSvcHst_UserSession_3740"="{C08195F3-15E6-449E-95E1-205E0ADE39A3}"
"ccSvcHst_UserSession_3796"="{A2E25DB8-9CFB-40BB-930C-8493A0F93DC6}"
"ccSvcHst_UserSession_3108"="{E00008B5-1115-48CB-85DB-F4A3E533A7A8}"
"ccSvcHst_UserSession_3136"="{1109EFDB-4823-492F-8BFF-5CAD3F1A79D8}"
"ccSvcHst_UserSession_3092"="{23DC5769-8F61-4306-A8B4-7F482B330B1D}"
"ccSvcHst_UserSession_3524"="{0C749241-47AD-462A-92D0-D8354204F79B}"
"ccSvcHst_UserSession_2784"="{1F7AA2CA-1EB5-4F51-9DE7-EAFD0ACE9E43}"
"ccSvcHst_UserSession_3100"="{C5BF6593-CDF6-4829-B051-EA9752425CDF}"
"ccSvcHst_UserSession_3160"="{CDB4783F-CA09-4CA7-A953-10C10EF448E9}"
"ccSvcHst_UserSession_3572"="{D9618681-6100-4628-B32D-23C24BAEBF12}"
"ccSvcHst_UserSession_3948"="{DB42BE2D-BBE2-428F-B246-D7D524C3AAAA}"
"ccSvcHst_UserSession_1760"="{0FDA1CD7-5D22-4B8A-87BE-6F6F5FAB9E02}"
"ccSvcHst_UserSession_2404"="{430DA3AF-25C2-425D-AF61-24B742738471}"
"g_coVistaProxyChannel"="{E7A91E1D-C2BE-4125-A7A7-4B8104FD2EFD}"
"{A1B48937-0778-4e7c-885B-271F65B485D2}"="{E7A91E1D-C2BE-4125-A7A7-4B8104FD2EFD}"
"ccSvcHst_NIS"="{E7A91E1D-C2BE-4125-A7A7-4B8104FD2EFD}"
"ccSvcHst_UserSession_3988"="{71DA9B7A-31F6-451A-B433-2DD9A0543720}"
"{9BBA000F-092F-432f-B9DF-9D64FD1C2978}"="{3BD88611-85D3-4A37-818A-3644A2DBEB84}"
"g_coUserCommandChannel_S-1-5-21-1771800032-78958699-3666061034-1000"="{3BD88611-85D3-4A37-818A-3644A2DBEB84}"
"DING_{4467AB8F-68C8-4ab5-9B48-B3E6EB65F6A1}"="{E7A91E1D-C2BE-4125-A7A7-4B8104FD2EFD}"
"ccGenericEvent_Global_EM"="{E7A91E1D-C2BE-4125-A7A7-4B8104FD2EFD}"
"ccGenericEvent_Global_LM"="{E7A91E1D-C2BE-4125-A7A7-4B8104FD2EFD}"
"ccGenericLog_Manager"="{E7A91E1D-C2BE-4125-A7A7-4B8104FD2EFD}"
"ccJobMgr_general_{ABD582DE-8F75-412d-81CF-6A180F1203DD}"="{E7A91E1D-C2BE-4125-A7A7-4B8104FD2EFD}"
"ccJobMgr_session_{ABD582DE-8F75-412d-81CF-6A180F1203DD}"="{E7A91E1D-C2BE-4125-A7A7-4B8104FD2EFD}"
"{3F11C6A7-CEA8-40c9-88EE-E5461341AE97}_ccSubmissionEngineIPC"="{E7A91E1D-C2BE-4125-A7A7-4B8104FD2EFD}"
"{A2DE0E79-877C-485b-B604-78B170313E9E}_IronIPC"="{E7A91E1D-C2BE-4125-A7A7-4B8104FD2EFD}"
"SNDServiceRequestChannel"="{E7A91E1D-C2BE-4125-A7A7-4B8104FD2EFD}"
"SymRedirSvcRequestChannel"="{E7A91E1D-C2BE-4125-A7A7-4B8104FD2EFD}"
"NortonNetServiceIPC"="{E7A91E1D-C2BE-4125-A7A7-4B8104FD2EFD}"
"ncw_performance_IPC"="{E7A91E1D-C2BE-4125-A7A7-4B8104FD2EFD}"
"_NCWSvcComm_NortonCommunityWatchConfiguration"="{E7A91E1D-C2BE-4125-A7A7-4B8104FD2EFD}"
"_ProcessDetection_"="{E7A91E1D-C2BE-4125-A7A7-4B8104FD2EFD}"
"NetMapServiceIPC"="{E7A91E1D-C2BE-4125-A7A7-4B8104FD2EFD}"
"SNDLocationChannel"="{E7A91E1D-C2BE-4125-A7A7-4B8104FD2EFD}"
"isError_Service_IPC"="{E7A91E1D-C2BE-4125-A7A7-4B8104FD2EFD}"
"QuickStart{4302D82E-BA29-4be2-A0EF-72589D61BCD3}"="{E7A91E1D-C2BE-4125-A7A7-4B8104FD2EFD}"
"BashIPCChannel"="{E7A91E1D-C2BE-4125-A7A7-4B8104FD2EFD}"
"ipcChannel_ShastaServer"="{E7A91E1D-C2BE-4125-A7A7-4B8104FD2EFD}"
"_ISPOCClient_"="{E7A91E1D-C2BE-4125-A7A7-4B8104FD2EFD}"
"_isDataPrComm_"="{E7A91E1D-C2BE-4125-A7A7-4B8104FD2EFD}"
"_IDataStoreMgr_"="{E7A91E1D-C2BE-4125-A7A7-4B8104FD2EFD}"
"_AvProdSvcComm_"="{E7A91E1D-C2BE-4125-A7A7-4B8104FD2EFD}"
"_NortonOnlineCommFeatureRequest_"="{E7A91E1D-C2BE-4125-A7A7-4B8104FD2EFD}"
"_HSPlayerCommand_"="{E7A91E1D-C2BE-4125-A7A7-4B8104FD2EFD}"
"{C4A09495-F6BC-4166-B717-F3F3250462BB}"="{E7A91E1D-C2BE-4125-A7A7-4B8104FD2EFD}"
"FWAlert"="{E7A91E1D-C2BE-4125-A7A7-4B8104FD2EFD}"
"IPS_COMMAND_CHANNEL"="{E7A91E1D-C2BE-4125-A7A7-4B8104FD2EFD}"
"ccSvcHst_UserSession_3696"="{7E219DC3-FC66-4479-95A4-8B4CBE92D613}"
"AvProdSession_01"="{3BD88611-85D3-4A37-818A-3644A2DBEB84}"
"AvProdSession_Options_01"="{3BD88611-85D3-4A37-818A-3644A2DBEB84}"
"AvProdSession_MessageCenter_01"="{3BD88611-85D3-4A37-818A-3644A2DBEB84}"
"AvProdSession_Scanless_01"="{3BD88611-85D3-4A37-818A-3644A2DBEB84}"
"AvProdSession_IPUA_01"="{3BD88611-85D3-4A37-818A-3644A2DBEB84}"
"AvProdSession_CanIRun_01"="{3BD88611-85D3-4A37-818A-3644A2DBEB84}"
"_IPCChannel_PerformAutoLogin_1_"="{3BD88611-85D3-4A37-818A-3644A2DBEB84}"
"_ReputationSvcComm_ReputationPublisher"="{E7A91E1D-C2BE-4125-A7A7-4B8104FD2EFD}"
"ncw_reputation_scan_server_IPC"="{E7A91E1D-C2BE-4125-A7A7-4B8104FD2EFD}"
"ccSvcHst_UserSession_3420"="{3BD88611-85D3-4A37-818A-3644A2DBEB84}"
"{B44E7D73-F081-414B-ADD2-CD66675A190D}1"="{3BD88611-85D3-4A37-818A-3644A2DBEB84}"
"CO_PS_{55DBA8A2-CF13-4600-8FC8-C7B989ABF841}_1"="{3BD88611-85D3-4A37-818A-3644A2DBEB84}"
"clt::AlertChannel2_01"="{3BD88611-85D3-4A37-818A-3644A2DBEB84}"
"QuickStart{4A16DDA3-2513-41ea-90C8-E34A67781129}1"="{3BD88611-85D3-4A37-818A-3644A2DBEB84}"
"TRUSTCHANNEL"="{3BD88611-85D3-4A37-818A-3644A2DBEB84}"
"SDKCHANNEL1"="{3BD88611-85D3-4A37-818A-3644A2DBEB84}"
"ToasterNotify\\SessionID_1"="{3BD88611-85D3-4A37-818A-3644A2DBEB84}"
"{436E95FE-192E-469f-8F34-5038FBA89BF4}1"="{3BD88611-85D3-4A37-818A-3644A2DBEB84}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Common Client\ccIPC\Endpoints]
@Denied: (C D) (Everyone)
"{31D28890-BC66-4548-94B9-C84E409A6586}"=""
"{7AD13F65-10E5-4087-8D07-70ADAE091903}"=""
"{43384C25-FD59-4894-B4DD-D27EE379DA30}"=""
"{BA4ADA64-C6A3-4814-82F2-E9DC4BB39D0E}"=""
"{BFCB0218-0CF8-45C2-8423-7003023D466D}"=""
"{CAF69B79-5031-4406-90D1-112E86C049B7}"=""
"{63197D6D-D81A-48E5-86DC-C4D0847F764A}"=""
"{FEEF351E-734E-4737-8E0A-48A10EFB02C9}"=""
"{F0210051-8F30-45DF-907E-B586638D623E}"=""
"{893724B2-D1A9-450F-8B17-77FC0D9C90DA}"=""
"{47F63204-2B8E-4240-B45D-9A8B7FA7190C}"=""
"{45E65594-F8E7-4CE9-A2AC-2748CD7A924C}"=""
"{5F339DB0-D0BF-4A1A-B96A-7E40FB1869F7}"=""
"{1177D39F-90BB-4405-B57C-5CAB92F144E8}"=""
"{C87CC020-8D98-4797-81B2-AF2B78341DED}"=""
"{D23C226A-27C7-4A60-B65D-8E197BCFF1DE}"=""
"{0DD0D708-9E74-44C9-A850-C488F2358B92}"=""
"{0E4D14DB-8DC6-429F-BADF-4FC30ED1A2CA}"=""
"{3DACB72D-1481-433C-921C-B708684A8522}"=""
"{8C65AD0F-04B5-413C-90CF-509DBC052D8B}"=""
"{7586277D-07FF-4A21-ADEE-76486A007810}"=""
"{3CED894F-B4CA-4985-9F11-51DA8AFE7FC4}"=""
"{D1A71491-FF0E-422E-A0A1-200E63E932C5}"=""
"{B840492E-B3EE-4B9A-8562-FF9D3B919C3F}"=""
"{E7731816-2D75-4C3D-BA49-CEF43FBFC7A8}"=""
"{525E402C-9E18-4332-B3BC-DE7BB5A6D8BC}"=""
"{1AE995A7-A21F-4E2C-82DA-0037961DC756}"=""
"{03537630-4B0B-46DD-A286-7A906E3EFF38}"=""
"{21B988A6-DB68-47F9-A882-AC6FFCBBE1FC}"=""
"{0EEFF4C4-C254-4401-91D1-75CC7796DD0C}"=""
"{1A0D516D-D352-4FD5-AE85-9E64B2F5C7C0}"=""
"{C22802B1-7874-4BD7-B4D5-C06799E91DA8}"=""
"{F2D19814-85DD-4141-ABF0-77576D46CA1C}"=""
"{3432DE6F-4DB9-4EE3-80EB-37609C90313A}"=""
"{1E5759FE-00AC-4965-B8E7-40D94BA4E1DF}"=""
"{72621F17-F8D2-4898-933A-5562163ACACF}"=""
"{A7BE95DE-8A3F-498E-9D46-75FDFEA6F830}"=""
"{77A12E1E-54AD-4A56-8393-C026E7A364C3}"=""
"{9E7187B1-4E88-4002-AD94-4F1A0D081073}"=""
"{7B7DC8AA-A4B4-4F3A-B2B4-B5EB888829F0}"=""
"{C85B0FDB-04F0-4501-8BC8-F36D1598DE52}"=""
"{4E983FFB-F450-40AB-8B4E-EE1E78E336FF}"=""
"{518073EB-767B-4BBD-8040-81484F747D96}"=""
"{1612E17F-6787-4ED2-98D0-2E8B0A0C009B}"=""
"{B7073CFB-DBD8-4431-A20E-7550A4AD463E}"=""
"{90123824-B6F0-4331-8390-5E6A3995B813}"=""
"{AE88CCC9-1198-49B7-AD34-FAC03152A465}"=""
"{00D9F2A7-2B8E-4C25-B640-2133916FFE1E}"=""
"{028A0711-6EE2-458D-BD37-697E660DB569}"=""
"{5540F35D-D52B-4DE3-B825-0B47A132BA68}"=""
"{C6CC6190-E3A2-484A-94F9-325ED2A2FBBF}"=""
"{0254BE81-2401-4DFC-8AC6-54BC15331A77}"=""
"{2105FC74-2191-484E-A70C-D51C61E8433B}"=""
"{0CCF73C1-FEAA-4AA0-BCEE-9850A251B643}"=""
"{0340C946-E9A0-4DBE-B47C-41F3FB812931}"=""
"{EF8EABC8-B0FD-4C6D-9212-0B62927E81E8}"=""
"{3F516BEA-644D-4A93-9746-8BFBC00840FA}"=""
"{9887B0AE-4686-4269-A31A-922B350AFD96}"=""
"{5B22E2EC-0D78-4542-8E01-94A9962168E1}"=""
"{495C292E-9F45-4322-859D-38C3835842E9}"=""
"{CF7EA717-2F29-4603-A36E-BAC679BEFB5A}"=""
"{B0C1493A-74F3-485B-93F7-95FEB57BC2E8}"=""
"{C91ECC38-1F10-4929-8BE7-B10F8E22C0BA}"=""
"{C21BECB9-ADD8-4FD5-B421-0492B70129A2}"=""
"{0D94EDF7-68F5-4941-8287-EC3C078CA014}"=""
"{25CEEA4D-4EFA-4DC2-ABBD-311F9AEB4F11}"=""
"{692B7235-E02D-4FE5-BEB8-FEBB17107DC6}"=""
"{7CA17BFF-E795-45D5-88EF-435B798633F7}"=""
"{ACBA6A0B-D626-4C52-8A8F-9E7C9397A38C}"=""
"{6F3B5D8A-9D68-45FF-891F-CE408D952E63}"=""
"{70DBDEF5-44AC-4C2A-94F3-56D6587A5D91}"=""
"{8360B87D-3A57-43CB-8880-0081DB4460A9}"=""
"{4A9CEFC8-C5ED-4C25-9D10-100FBB3D1365}"=""
"{796F2351-F739-4695-AE1C-8D5CFC55472C}"=""
"{374F44E9-B644-4D50-BDEC-3288ED1E5309}"=""
"{F4A96801-F822-4BF7-8505-CA0324C97FAD}"=""
"{71BC76F4-B12A-46B2-B9D9-A617F354FAB7}"=""
"{D3CC758A-496F-4758-865A-BB33CF37329E}"=""
"{0FA2B64B-5629-4A22-849A-A9EEE153F6E9}"=""
"{73D95C5F-6317-44FF-A5B3-D8F3E1F251DC}"=""
"{36CA9874-2F09-4852-83B4-C2FDE4BB1FB0}"=""
"{1C67EAC1-2341-4397-A9C8-E24912E93D86}"=""
"{DC5019DD-4393-49E6-A949-CC468291A7E8}"=""
"{D6E60F79-AE4F-4B1C-8B85-1A8F2A7111BB}"=""
"{F0519DBB-8A97-4643-B44E-5CCD7957C487}"=""
"{DC6B1A17-B27A-4CF4-B53E-DAAE7791F024}"=""
"{7C8AD3E5-60DA-4B08-84DF-5095EA8E11B8}"=""
"{C66C4126-6A62-4345-AC0B-7472C1FA5AC3}"=""
"{B9A29325-26EC-41F1-A74F-14E8ED30C9C2}"=""
"{AA5C1182-4985-4291-AA06-E4739BEC6E27}"=""
"{E67118EC-D5D0-42F3-BB0E-0B3E7B25D34A}"=""
"{92B8F617-9944-4281-97AE-87B1EE80393E}"=""
"{BE1ADC3D-72DB-4903-9AFD-C0DE942489B0}"=""
"{1A5BBFC9-A0BC-4BD6-B2A7-87AEC138BFE8}"=""
"{A4578D28-CEBF-4E8F-88DA-422BCBEBD04E}"=""
"{49AFFE68-3D4F-4F08-8FBC-0632857C43B8}"=""
"{C130B069-79CB-4528-AE99-8FEA3EE29861}"=""
"{F23DD840-1CB5-47E3-A037-5777F8236EB4}"=""
"{1ED0F91B-9632-42F7-BE39-DA8D8B5E6FF5}"=""
"{74A59BAC-55C3-477B-BC7B-1E0F35F168DB}"=""
"{F8511691-8C63-431F-A860-D716A17338FA}"=""
"{DE6A5807-7505-46C3-8CDA-58DEFDA7B745}"=""
"{65F3D647-1F29-4C0F-A18B-F79449CE0A58}"=""
"{083942F0-EBA4-4AD0-8281-E14496BEA3D8}"=""
"{A1A32588-D81D-47BA-ADFF-0C517AD4C35D}"=""
"{C061CD22-CCCD-4D27-85C3-8FFCD49519BA}"=""
"{A8A7E560-ABE0-47FE-83C4-1C2317E26881}"=""
"{2DC3031F-A9AB-436D-94CC-747CE2B47587}"=""
"{85EA8F58-ADF0-4C54-BB72-E65FDFEDD92A}"=""
"{F930FD20-45DC-4F62-B07F-FFC0FAD2B922}"=""
"{2C855EF6-A66F-4B72-97EF-3A1E20027F1A}"=""
"{3131C8E0-6465-47C5-8FF3-4B278F2E3401}"=""
"{40434B11-B0C6-4D3E-A9E2-C89C377B15F5}"=""
"{5D346F65-B95A-48BD-9872-7DE0D5FB93B0}"=""
"{7C68554D-85E7-4181-A0EB-61549624CF74}"=""
"{1EBF3E40-DC1E-4413-857D-D3AC3B795FB3}"=""
"{CAB58E49-A42A-47B2-9E49-8EC5E3DC02E2}"=""
"{2E320FE5-7A58-43C0-98B0-55AC4E2BF5C7}"=""
"{36F05336-8BD0-45A8-9742-84BD144CB45E}"=""
"{F408D8DB-40AF-4464-86EC-B7A2B82EA67A}"=""
"{CC7CC34D-C387-495A-BED4-A19A13D90C8F}"=""
"{E91479B5-E90E-4CE9-ABBC-1D28B30A6B15}"=""
"{15A3D61D-43A7-4E4A-A58E-C389A7A841A7}"=""
"{0F6DF0EB-A764-472A-8D37-0513D86912D9}"=""
"{546984D1-C73C-4568-9F36-A01104CB257C}"=""
"{42ADEAEE-8831-481D-B83B-19B4C8AC9046}"=""
"{701CF786-1E00-456F-8ACC-CF7FC7F9CFF8}"=""
"{14A5F078-4460-4D7A-A08B-5A16CC9BA29F}"=""
"{6BAD6E98-81F6-49A6-AE19-20C8E0505C37}"=""
"{B66A1EDF-2721-4562-A432-A9D8AFD9ACAF}"=""
"{83F5A053-43DB-4998-8B65-2140A57F3AF3}"=""
"{B0E5A95F-7BFB-48FD-8130-468AB5831812}"=""
"{94591B92-AB45-45B0-8376-BFEE44CAA71C}"=""
"{FE3B354E-4196-4AAB-A569-2EFB0FAAFC4D}"=""
"{135DC4BD-525E-4A93-BCD4-606E1A26A65F}"=""
"{AF59F538-AB6C-4ACB-83F9-E5F8D4896F52}"=""
"{E860AC30-A3EE-4519-9127-33F8F2D27FDE}"=""
"{EF6A4C12-813C-4D9E-88D8-BD64B48FAAC0}"=""
"{30B1486D-A27B-44FD-9DF7-C436C7BB015D}"=""
"{FA8E0986-E8DD-4DCE-B6C3-34856108C4A7}"=""
"{BB93FA21-E208-41A0-94B1-5B3BE2F0894E}"=""
"{917D3358-F66E-4C4B-AFFF-B5A4A906B1FB}"=""
"{CE472A7E-18A5-4A7A-96CE-587B6EA33F1E}"=""
"{8A7E75B7-55C8-4C99-B384-7357FBF4C5A5}"=""
"{AF74F5F8-D7D4-463A-A70D-681C63CC03DA}"=""
"{12A54274-C7EC-4590-BF52-8FDE56424A49}"=""
"{901992BF-F816-40AC-874F-E51B54CAB887}"=""
"{C266CD48-3BD7-43A4-983A-2BF4D9440C25}"=""
"{44DF0806-BBF9-40E8-86D1-68316BC7C51F}"=""
"{A145B174-2305-415F-9288-330A95F7E515}"=""
"{2983047B-83DD-4B1B-A98A-2C05818CFCAA}"=""
"{99E38C87-BA20-4A65-B0CC-7648091B1EEA}"=""
"{F9B1E1FC-95D4-4699-AA2A-78BA5A613B41}"=""
"{4AA45098-4DA2-4FFC-AA95-7FAFE790D308}"=""
"{50A05E3E-E32D-496E-B5EE-E56442D2739A}"=""
"{75E5EF4F-8C0A-4052-B745-3B9CF265499F}"=""
"{D8B3E8E1-4C54-4E10-85D0-94F967E8B916}"=""
"{511AA929-4FB9-4589-8C5F-E1BD58852400}"=""
"{2764B993-3488-4418-8B21-8729B778863B}"=""
"{9718306E-5223-4014-B83F-43DD5C749926}"=""
"{99699088-F146-472B-B4A0-D5E7CA0FF90E}"=""
"{085C3D26-CFD2-4A6C-9F83-A0422B6CA899}"=""
"{0D8C1E40-6EF0-4606-A5CA-79CB9C5A4DDE}"=""
"{931E3908-863E-43ED-B459-883229D4959F}"=""
"{0F23675C-B908-4DBF-912A-EAA4FB8283EE}"=""
"{5F623640-979A-4DA7-B57D-42367C0CB067}"=""
"{98273B17-4754-4D9E-82A4-0416C9774B71}"=""
"{52E2BDF0-97FA-4446-8E2C-492964AB1719}"=""
"{1514F77F-5D81-4AC9-9773-CC092DFC4658}"=""
"{EA3C8F8B-1452-4561-B79C-37519D8C40F6}"=""
"{4489C55D-458F-4575-9DE5-D613F55AA40A}"=""
"{28EDF0F6-1149-469F-949A-2F7F065B5452}"=""
"{A63FC71F-7B63-4E35-A687-D58227E240EB}"=""
"{C08195F3-15E6-449E-95E1-205E0ADE39A3}"=""
"{7BF2DB7F-0270-4095-9E83-25E16051F899}"=""
"{A2E25DB8-9CFB-40BB-930C-8493A0F93DC6}"=""
"{63154596-0252-4B44-89F2-B3B55EEACCE9}"=""
"{E00008B5-1115-48CB-85DB-F4A3E533A7A8}"=""
"{6F5A8B14-6CE6-47EA-85DE-C481D0638A42}"=""
"{74FE06E0-81FF-45CC-A957-29588E6A0DF4}"=""
"{0E785B00-361E-438A-98C5-EB7EC8727854}"=""
"{26DA05CB-0A9A-44D5-B073-8031525DB4E7}"=""
"{1C7DFB73-F76A-417F-BCEC-78149BC0AB0F}"=""
"{1109EFDB-4823-492F-8BFF-5CAD3F1A79D8}"=""
"{E8C8226C-6708-43B7-99BE-623FB0BFCC7C}"=""
"{23DC5769-8F61-4306-A8B4-7F482B330B1D}"=""
"{A57BAD4F-A7FC-4307-BE51-F37C0E04D71D}"=""
"{0C749241-47AD-462A-92D0-D8354204F79B}"=""
"{7A546934-ED8D-4237-8714-39B8B9A45A7B}"=""
"{1F7AA2CA-1EB5-4F51-9DE7-EAFD0ACE9E43}"=""
"{F55192E0-2549-4BFD-85D1-80B1589267A0}"=""
"{C5BF6593-CDF6-4829-B051-EA9752425CDF}"=""
"{4B4079F1-8AD3-4A3E-AC97-AEEB55436A7B}"=""
"{CDB4783F-CA09-4CA7-A953-10C10EF448E9}"=""
"{E56B72B8-896E-481E-B4AF-02C4F77C885A}"=""
"{90420AB4-35B2-495C-B461-E7EDDEB308E1}"=""
"{4F307491-60BE-4CE1-B7F9-9FD2741F6974}"=""
"{D9618681-6100-4628-B32D-23C24BAEBF12}"=""
"{7C15BF70-CE5D-435A-885A-EFE305B2D857}"=""
"{DB42BE2D-BBE2-428F-B246-D7D524C3AAAA}"=""
"{8BCBFFF8-25E6-4A15-BD90-BA964E68FF61}"=""
"{0FDA1CD7-5D22-4B8A-87BE-6F6F5FAB9E02}"=""
"{C30CC5B2-AE13-4010-BB0C-55C4053D0D32}"=""
"{430DA3AF-25C2-425D-AF61-24B742738471}"=""
"{F624B18D-E73D-433D-94AF-2E70C018ACF6}"=""
"{0E7F2971-B1F3-49C8-B116-E77CB003E6B1}"=""
"{AFE73930-322D-4D9E-8B28-FE4C02D2C95B}"=""
"{EC8226F4-E89F-44E9-ACA7-BFFDB9EB795B}"=""
"{568664A6-2FBD-4A5F-A70D-71A2AD42F804}"=""
"{1D97F805-80DD-45EC-B96A-D0D6459139A1}"=""
"{C0A6FD55-B848-429D-84AB-3DC474F1BAC8}"=""
"{71DA9B7A-31F6-451A-B433-2DD9A0543720}"=""
"{1FCB60C1-8A22-4547-8404-457809EAC292}"=""
"{7E219DC3-FC66-4479-95A4-8B4CBE92D613}"=""
"{E7A91E1D-C2BE-4125-A7A7-4B8104FD2EFD}"=""
"{3BD88611-85D3-4A37-818A-3644A2DBEB84}"=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0004\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0005\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2012-10-04  16:13:18
ComboFix-quarantined-files.txt  2012-10-04 14:13
.
Vor Suchlauf: 15 Verzeichnis(se), 69.348.085.760 Bytes frei
Nach Suchlauf: 26 Verzeichnis(se), 108.885.303.296 Bytes frei
.
- - End Of File - - 5BC3EBDE5D94D5EDB67A39253BA65FFE
--- --- ---

markusg 05.10.2012 17:34
hi

malwarebytes:
Downloade Dir bitte Malwarebytes
  • Installiere
    das Programm in den vorgegebenen Pfad.
    Vista und Win7 User mit Rechtsklick "als Administrator starten"
  • Starte Malwarebytes, klicke auf Aktualisierung --> Suche
    nach Aktualisierung
  • Wenn das Update beendet wurde, aktiviere vollständiger Scan durchführen und drücke auf Scannen.
  • Wenn der Scan beendet
    ist, klicke auf Ergebnisse anzeigen.
  • Versichere Dich, dass alle Funde markiert sind und drücke Entferne Auswahl.
  • Poste
    das Logfile, welches sich in Notepad öffnet, hier in den Thread.
  • Nachträglich kannst du den Bericht unter "Log Dateien" finden.

mac17 13.10.2012 20:27
Sorry das ich so lange nicht geschrieben habe, war im Urlaub ;)
Also Maleware Byts hat nichts gefunden, hier trotzdem die Log:
Code:
Malwarebytes Anti-Malware (Test) 1.65.0.1400
www.malwarebytes.org

Datenbank Version: v2012.10.13.07

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
Marc :: MARC-PC [Administrator]

Schutz: Aktiviert

13.10.2012 19:22:08
mbam-log-2012-10-13 (19-22-08).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|E:\|H:\|I:\|K:\|)
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 729683
Laufzeit: 2 Stunde(n), 2 Minute(n), 25 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 0
(Keine bösartigen Objekte gefunden)

(Ende)
Mfg Marc

markusg 18.10.2012 21:29
hi
lade den CCleaner standard:
CCleaner Download - CCleaner 3.23.1823
falls der CCleaner
bereits instaliert, überspringen.
instalieren, öffnen, extras, liste der instalierten programme, als txt speichern. öffnen.
hinter, jedes von dir benötigte programm, schreibe notwendig.
hinter, jedes, von dir nicht benötigte, unnötig.
hinter, dir unbekannte, unbekannt.
liste posten.

mac17 19.10.2012 13:54
hier die Liste:

Code:
325 USB PC Camera        Sonix        11.08.2012                0.6.0.001                                                unbekannt
@BIOS        GIGABYTE        06.07.2011                2.11                                                                wichtig
Ableton Live 8        Ableton        03.04.2012        902MB        8.0.0.0                                                                wichtig
Adobe Acrobat X Pro - English, Français, Deutsch        Adobe Systems        13.10.2012        2,81GB        10.1.4                wichtig       
Adobe AIR        Adobe Systems Incorporated        13.10.2012                3.4.0.2710                                wichtig
Adobe Creative Suite 6 Master Collection        Adobe Systems Incorporated        05.10.2012        9,83GB        6        wichtig
Adobe Flash Media Live Encoder 3.2        Adobe Systems Incorporated        11.03.2012        44,0MB        3.2.0                wichtig
Adobe Flash Player 11 ActiveX        Adobe Systems Incorporated        13.10.2012        6,00MB        11.4.402.287                wichtig
Adobe Flash Player 11 Plugin        Adobe Systems Incorporated        13.10.2012        6,00MB        11.4.402.287                wichtig
Adobe Help Manager        Adobe Systems Incorporated        31.07.2012                4.0.244                                wichtig
Adobe Photoshop Lightroom 4.1 64-bit        Adobe        31.07.2012        806MB        4.1.2                                        wichtig
Adobe Widget Browser        Adobe Systems Incorporated.        31.07.2012                2.0 Build 348                        wichtig
Adobe® Content Viewer        Adobe Systems Incorporated        18.10.2012                2.8.0                                wichtig
Akamai NetSession Interface                02.01.2012                                                                ungekannt
Akamai NetSession Interface Service                02.01.2012                                                        unbekannt
Amazon MP3-Downloader 1.0.15        Amazon Services LLC        01.08.2012                1.0.15                                wichtig
Anno 1701        Sunflowers        22.06.2011                1.00                                                        muss nicht
Anno 1701 - Der Fluch des Drachen        Sunflowers        22.06.2011                2.03                                muss nicht
Any DVD Converter Professional 4.0.1        Any-DVD-Converter.com        20.04.2011                                        wichtig
Apple Application Support        Apple Inc.        20.09.2012        64,4MB        2.2.2                                        wichtig
Apple Mobile Device Support        Apple Inc.        20.09.2012        23,7MB        6.0.0.59                                wichtig
Apple Software Update        Apple Inc.        07.07.2011        2,38MB        2.1.3.127                                        wichtig
ASIO4ALL        Michael Tippach        02.01.2012                2.10                                                        wichtig
Battlefield 3™        Electronic Arts        10.09.2012                1.4.0.0                                                        wichtig
Battlefield Play4Free        EA Digital illusions        02.01.2012                                                        wichtig
Battlelog Web Plugins        EA Digital Illusions CE AB        09.09.2012                1.132.0                                wichtig
Beatport Downloader        Beatport LLC        01.08.2012                1.4                                                wichtig
BeatportDownloader        Beatport LLC        25.02.2012                1.003                                                wichtig
BEHRINGER USB AUDIO DRIVER                19.01.2012                                                                wichtig
Bonjour        Apple Inc.        17.10.2011        2,00MB        3.0.0.10                                                        wichtig
Borderlands        2K Games        20.04.2011        6,88GB        1.0.295                                                        wichtig
Borderlands 2        Gearbox Software        21.09.2012                                                                wichtig
Brother MFL-Pro Suite DCP-130C        Brother Industries, Ltd.        01.09.2011                1.0.3.0                        wichtig
butt                02.01.2012                                                                                        wichtig
Canon Utilities EOS Utility        Canon Inc.        03.09.2012                2.10.0.0                                wichtig
Canon Utilities PhotoStitch        Canon Inc.        03.09.2012                3.1.22.46                                wichtig
CCleaner        Piriform        24.09.2012                3.23                                                        wichtig
CINEMA 4D 12.016        MAXON Computer GmbH        17.08.2012        3,81GB        12.016                                        wichtig
Clonk Rage        RedWolf Design GmbH        02.01.2012                                                                muss nicht
Combat Arms EU                04.04.2012                                                                                muss nicht
ConvertXtoDVD 4.1.10.348                24.05.2011        68,1MB        4.1.10.348                                        wichtig
DAEMON Tools Lite        DT Soft Ltd        06.05.2012                4.45.4.0315                                        wichtig
Dead Space™ 2        Electronic Arts        23.12.2011        10,0GB        1.0.948.0                                                wichtig
DES 2.0        Gigabyte        06.07.2011                1.00.0000                                                        wichtig
doubleTwist        doubleTwist Corporation        25.02.2012                3.2.0.12944                                        unwichtig
Dreamload        Dreamload LLC        08.04.2011                1.297                                                        unwichtig
Dropbox        Dropbox, Inc.        10.07.2012                1.4.7                                                                wichtig
Easy Migration        Samsung Electronics Co., Ltd.        05.07.2012                1.0                                        muss nicht
Edcast Standalone 3.37.2011        PCGraFix        17.09.2012                3.37.2011.1214                                wichtig
Energy Saver Advance B10.0309.1        GIGABYTE        07.04.2011                1.10.0000                                wichtig
EOS Camera Movie Record 0.3.1.1 Beta        Chernov A.A.        03.09.2012                                                wichtig
EPSON SX100 Series Printer Uninstall        SEIKO EPSON Corporation        06.08.2012                                        wichtig
ESN Sonar        ESN Social Software AB        06.06.2012                0.70.4                                                wichtig
Etron USB3.0 Host Controller        Etron Technology        06.07.2011        5,18MB        0.98                                wichtig
Facebook Desktop        UNKNOWN        02.01.2012                0.84                                                        muss nicht
Facebook Video Calling 1.2.0.159        Skype Limited        22.03.2012        4,76MB        1.2.159                                wichtig
ffdshow [rev 2527] [2008-12-19]                25.02.2012                1.0                                                wichtig
FileZilla Client 3.5.3        FileZilla Project        12.02.2012        16,5MB        3.5.3                                        wichtig
FileZilla Server        FileZilla Project        12.02.2012        3,65MB        beta 0.9.40                                wichtig
Firebird SQL Server - MAGIX Edition        MAGIX AG        30.10.2011        10,1MB        2.1.27.0                        muss nicht
Fraps (remove only)                20.04.2012                                                                        wichtig
Google Earth Plug-in        Google        18.11.2011        40,8MB        6.1.0.5001                                                wichtig
Google Talk Plugin        Google        13.10.2012        19,1MB        3.9.1.9832                                                wichtig
GutscheinRausch.de - AddOn für Firefox        GutscheinRausch.de        13.01.2012        1,51MB        2.81                        muss nicht
Half-Life 2        Valve        13.10.2012                                                                                wichtig
Half-Life 2: Lost Coast        Valve        13.10.2012                                                                        wichtig
ICQ7.6        ICQ        07.11.2011                7.6                                                                        wichtig
Intel(R) Control Center        Intel Corporation        02.01.2012                1.2.1.1007                                wichtig
Intel(R) Management Engine Components        Intel Corporation        02.01.2012                7.0.0.1118                wichtig
iTunes        Apple Inc.        20.09.2012        182MB        10.7.0.21                                                        wichtig
Java 7 Update 7 (64-bit)        Oracle        13.10.2012        127MB        7.0.70                                                wichtig
Java(TM) 6 Update 27        Oracle        22.10.2011        97,0MB        6.0.270                                                        wenn 7 da ist könnne die doch weg oder? :D
Java(TM) 6 Update 27 (64-bit)        Oracle        22.10.2011        91,6MB        6.0.270                                                "
Java(TM) 6 Update 37        Oracle        08.09.2012        95,7MB        6.0.370                                                        "
JDownloader 0.9        AppWork GmbH        02.01.2012                0.9                                                        unbekannt
KORES Print Designer                13.03.2012                                                                        muss nicht
MAGIX Speed burnR        MAGIX AG        30.10.2011                6.0.1.4                                                muss nicht
Malwarebytes Anti-Malware Version 1.65.1.1000        Malwarebytes Corporation        18.10.2012        19,4MB        1.65.1.1000 wichtig
Michas Jingle-Player                13.03.2012                                                                        muss nicht
Microsoft .NET Framework 4 Client Profile        Microsoft Corporation        02.01.2012        38,8MB        4.0.30320        wichtig
Microsoft .NET Framework 4 Client Profile DEU Language Pack                07.04.2011                                wichtig
Microsoft .NET Framework 4 Client Profile DEU Language Pack        Microsoft Corporation        02.01.2012        2,93MB        4.0.30320 zweimal?
Microsoft .NET Framework 4 Extended        Microsoft Corporation        21.08.2012        51,9MB        4.0.30319                wichtig
Microsoft .NET Framework 4 Extended DEU Language Pack        Microsoft Corporation        21.08.2012        10,6MB        4.0.30319 wichtig
Microsoft LifeCam        Microsoft Corporation        21.08.2012        33,2MB        3.60.253.0                                wichtig
Microsoft Office Professional Plus 2010        Microsoft Corporation        05.07.2012                14.0.6029.1000                wichtig
Microsoft SQL Server 2005 Compact Edition [ENU]        Microsoft Corporation        11.04.2011        1,72MB        3.1.0000        wichtig
Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053        Microsoft Corporation        24.01.2012        258KB        8.0.50727.4053        wichtig
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053        Microsoft Corporation        17.05.2011        252KB        8.0.50727.4053        wichtig
Microsoft Visual C++ 2005 Redistributable        Microsoft Corporation        22.09.2012        2,38MB        8.0.59193        wichtig
Microsoft Visual C++ 2005 Redistributable (x64)        Microsoft Corporation        08.12.2011        708KB        8.0.61000        wichtig
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148        Microsoft Corporation        13.04.2011        200KB        9.0.30729.4148        wichtig
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570        Microsoft Corporation        15.04.2011        598KB        9.0.30729.5570 wichtig
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148        Microsoft Corporation        19.04.2012        788KB        9.0.30729.4148 wichtig
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161        Microsoft Corporation        20.04.2012        784KB        9.0.30729.6161 wichtig
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022        Microsoft Corporation        22.09.2012        1,41MB        9.0.21022 wichtig
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729        Microsoft Corporation        23.12.2011        234KB        9.0.30729 wichtig
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17        Microsoft Corporation        07.04.2011        596KB        9.0.30729 wichtig
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148        Microsoft Corporation        19.04.2012        230KB        9.0.30729.4148 wichtig
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161        Microsoft Corporation        16.06.2011        600KB        9.0.30729.6161 wichtig
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219        Microsoft Corporation        06.10.2011        13,8MB        10.0.40219 wichtig
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219        Microsoft Corporation        06.10.2011        12,2MB        10.0.40219 wichtig
Microsoft-Maus- und Tastatur-Center        Microsoft Corporation        18.10.2012                2.0.161.0                wichtig
Microsoft_VC80_ATL_x86                22.04.2012                                                                        unbekannt
Microsoft_VC80_MFC_x86                22.04.2012                                                                        "
Microsoft_VC80_MFCLOC_x86                22.04.2012                                                                "
Microsoft_VC90_ATL_x86                22.04.2012                                                                        "
Mozilla Firefox 15.0.1 (x86 de)        Mozilla        25.09.2012        38,4MB        15.0.1                                                unwichtig
Mozilla Firefox 16.0.1 (x86 de)        Mozilla        13.10.2012        38,5MB        16.0.1                                                wichtig
Mozilla Maintenance Service        Mozilla        13.10.2012        329KB        16.0.1                                                wichtig
Mp3tag v2.52        Florian Heidenreich        01.08.2012                v2.52                                                wichtig
MSXML 4.0 SP2 (KB954430)        Microsoft Corporation        21.04.2011        1,27MB        4.20.9870.0                        unbekannt
MSXML 4.0 SP2 (KB973688)        Microsoft Corporation        21.04.2011        1,33MB        4.20.9876.0                        unbekannt
Native Instruments Audio 2 DJ Driver                24.05.2012                                                        kann weg, Update vorhanden
Native Instruments Audio 2 DJ Driver        Native Instruments        29.07.2012                                        wichtig
Native Instruments Controller Editor                21.09.2012                                                        wichtig
Native Instruments Controller Editor        Native Instruments        21.09.2012                                        zweimal?       
Native Instruments Service Center                24.05.2012                                                        kann weg, Update vorhanden
Native Instruments Service Center        Native Instruments        29.07.2012                                        wichtig
Native Instruments Traktor 2                29.07.2012                                                                wichtig
Native Instruments Traktor 2        Native Instruments        29.07.2012                                                zweimal?
Native Instruments Traktor Kontrol S2 Driver                24.05.2012                                                wichtig
Native Instruments Traktor Kontrol S2 Driver        Native Instruments        29.07.2012                                same again ...
Nexon Game Manager                04.04.2012                                                                        unbekannt
Norton Bootable Recovery Tool Wizard        Symantec Corporation        20.04.2011                3.5.0.23                muss nicht
Norton Internet Security        Symantec Corporation        14.01.2012                19.8.0.14                        wichtig
NVIDIA 3D Vision Controller-Treiber 306.97        NVIDIA Corporation        13.10.2012                306.97                wichtig
NVIDIA 3D Vision Treiber 306.97        NVIDIA Corporation        13.10.2012                306.97                                wichtig
NVIDIA Grafiktreiber 306.97        NVIDIA Corporation        13.10.2012                306.97                                wichtig
NVIDIA HD-Audiotreiber 1.3.18.0        NVIDIA Corporation        13.10.2012                1.3.18.0                        wichtig
NVIDIA PhysX-Systemsoftware 9.12.0604        NVIDIA Corporation        14.09.2012                9.12.0604                wichtig
NVIDIA Update 1.10.8        NVIDIA Corporation        13.10.2012                1.10.8                                        wichtig
OF Dragon Rising        Codemasters        18.07.2011                1.00.0000                                        muss nicht
ON_OFF Charge B11.0110.1        GIGABYTE        06.07.2011                1.00.0001                                wichtig
Oracle VM VirtualBox 4.1.16        Oracle Corporation        06.06.2012        139MB        4.1.16                                wichtig
Origin        Electronic Arts, Inc.        05.04.2012                8.5.2.23                                                wichtig
Overwolf        Overwolf        02.09.2012        81,3MB        0.36.212                                                muss nicht
Philips SPC710NC Webcam                02.01.2012                                                                        wichtig
PhotoScape                19.08.2012                                                                                wichtig
Portal        Valve        02.01.2012                                                                                        wichtig
Portal 2        Valve        02.01.2012                                                                                wichtig
PunkBuster Services        Even Balance, Inc.        06.04.2012                0.991                                        wichtig
QuickTime        Apple Inc.        18.05.2012        73,2MB        7.72.80.56                                                wichtig
Radio Toolbox        www.radiotoolbox.com        05.01.2012                1.1.1                                                wichtig
Realtek Ethernet Controller Driver        Realtek        09.09.2011                7.46.610.2011                                wichtig
Realtek High Definition Audio Driver        Realtek Semiconductor Corp.        02.01.2012                6.0.1.6449        wichtig
reFX Nexus VSTi RTAS v2.2.0                11.04.2011                                                                wichtig
Roxio Creator 2010 Pro        Roxio        02.01.2012        3,34GB        12.0                                                        wichtig
Roxio PhotoShow        Roxio        02.01.2012                6.0                                                                wichtig
Samsung Kies        Samsung Electronics Co., Ltd.        04.05.2011        181MB        2.0.0.11044_11                                unwichtig
SAMSUNG USB Driver for Mobile Phones        SAMSUNG Electronics Co., Ltd.        02.01.2012        46,0MB        1.4.4.0                wichtig
Sanctum                04.05.2012                                                                                        wichtig
Shoot Many Robots                04.05.2012                                                                        wichtig
SHOUTcast DNAS (remove only)                02.01.2012                                                                wichtig
SHOUTcast DNAS Server v2                02.01.2012                                                                wichtig
simfy        simfy AG        07.09.2012                1.6.10                                                                wichtig
Skype Click to Call        Skype Technologies S.A.        29.03.2012        12,4MB        5.9.9216                                muss nicht
Skype™ 5.10        Skype Technologies S.A.        02.09.2012        19,4MB        5.10.116                                        wichtig
Smart 6 B10.1221.1        GIGABYTE        06.07.2011                1.00.0000                                        wichtig
Steam        Valve Corporation        20.12.2011        35,4MB        1.0.0.0                                                        wichtig
Steinberg Cubase 5        Steinberg Media Technologies GmbH        08.04.2011        291MB        5.1.0                        wichtig
Steinberg Drum Loop Expansion 01        Steinberg Media Technologies GmbH        08.04.2011        424MB        1.0.0.1        wichtig
Steinberg Groove Agent ONE Content        Steinberg Media Technologies GmbH        08.04.2011        142MB        1.0.0.003 wichtig
Steinberg HALionOne        Steinberg Media Technologies GmbH        08.04.2011        387MB        1.1.0.457                wichtig
Steinberg HALionOne Additional Content Set 01        Steinberg Media Technologies GmbH        08.04.2011        940MB        1.0.0.001 wichtig
Steinberg HALionOne Expression Set        Steinberg Media Technologies GmbH        08.04.2011        231MB        1.0.1.0        wichtig
Steinberg HALionOne GM Drum Set        Steinberg Media Technologies GmbH        08.04.2011        23,9MB        1.0.1.457        wichtig
Steinberg HALionOne GM Set        Steinberg Media Technologies GmbH        08.04.2011        63,6MB        1.0.1.457        wichtig
Steinberg HALionOne Pro Set        Steinberg Media Technologies GmbH        08.04.2011        123MB        1.0.1.457        wichtig
Steinberg HALionOne Studio Drum Set        Steinberg Media Technologies GmbH        08.04.2011        48,0MB        1.0.1.457 wichtig
Steinberg HALionOne Studio Set        Steinberg Media Technologies GmbH        08.04.2011        112MB        1.0.1.457        wichtig
Steinberg LoopMash Content        Steinberg Media Technologies GmbH        08.04.2011        612MB        1.0.0.005        wichtig
Steinberg REVerence Content 01        Steinberg Media Technologies GmbH        08.04.2011        169MB        1.0.0.006        wichtig
Synergy        Synergy Development Team        13.10.2012                                                                wichtig
TeamSpeak 3 Client        TeamSpeak Systems GmbH        06.09.2012                3.0.6                                        wichtig
TeamViewer 7        TeamViewer        05.10.2012                7.0.14563                                                wichtig
Text-To-Speech-Runtime        Magix Development GmbH        09.10.2011        260KB        1.0.0.0                                        muss nicht
UseNeXT        Tangysoft Ltd.        09.07.2012        5,23MB                                                                        wichtig
VLC media player 2.0.3        VideoLAN        05.10.2012                2.0.3                                                wichtig
VoiceOver Kit        Apple Inc.        22.04.2012        41,7MB        1.42.128.0                                                muss nicht
webcamXP 5        Moonware Studios        18.10.2012                5.5.1.5                                        wichtig
Winamp        Nullsoft, Inc        02.01.2012                5.621                                                                wichtig
Winamp Erkennungs-Plug-in        Nullsoft, Inc        21.08.2011        75,0KB        1.0.0.1                                        wichtig
Windows Live Anmelde-Assistent        Microsoft Corporation        11.04.2011        1,93MB        5.000.818.5                        muss nicht
Windows Live Essentials        Microsoft Corporation        02.01.2012                14.0.8117.0416                                muss nicht
Windows Live Sync        Microsoft Corporation        11.04.2011        2,79MB        14.0.8117.416                                muss nicht
Windows Live-Uploadtool        Microsoft Corporation        11.04.2011        224KB        14.0.8014.1029                                muss nicht
Windows Mobile-Gerätecenter                02.01.2012                                                                wichtig
WinRAR archiver                02.01.2012                                                                                wichtig
World of Tanks v.0.6.7        Wargaming.net        22.11.2011                                                                muss nicht
XSplit        SplitMediaLabs        04.09.2012        92,1MB        1.1.1209.0401                                                        wichtig
Your Uninstaller! 2010        URSoft, Inc.        31.08.2011        10,7MB        7.0                                                wichtig
µTorrent        BitTorrent Inc.        16.09.2012                3.2.0                                                        wichtig


Alle Zeitangaben in WEZ +1. Es ist jetzt 07:09 Uhr.

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131