Trojaner-Board - vlc trojaner?

Trojaner-Board (https://www.trojaner-board.de/)

- Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)

- - vlc trojaner? (https://www.trojaner-board.de/131183-vlc-trojaner.html)

hallo, bräuchte schnelle hilfe...

hab gestern blöderweise den vlc player vlc.de runtergeladen....hatte dann dieses "startfenster" problem....habe dann ein bischen hier rumgesucht und einiege sachen ausgetestet und dachte frei zu sein.-.---aufgefallen war mir das überhaupt als sich plötzlich mein win 7 design von custom auf blau von ALLEINE umstellte....

gerade mach ich den rechner an...alle symbole sind riessig, auflösung steht zwar auf voll. trotzdem sieht es so aus als wäre es runtergeschraubt...

kann mir bitte noch jmnd schnell helfen was ich tun muss????

hi,
was heißt "einiges" was genau?
programme läd man bitte beim Hersteller, vlc zb hier:
VideoLAN - Official page for VLC media player, the Open Source video framework!
Falls noch nicht vorhanden, lade Dir bitte OTL von Oldtimer herunter und speichere es auf Deinem Desktop

Starte bitte die
OTL.exe
.
Vista und Win7 User mit Rechtsklick "als Administrator starten"
Kopiere nun den Inhalt in die http://larusso.trojaner-board.de/Images/otlfix.jpg
Textbox.

Code:

activex

netsvcs

msconfig

%SYSTEMDRIVE%\*.

%PROGRAMFILES%\*.exe

%LOCALAPPDATA%\*.exe

%systemroot%\*. /mp /s

C:\Windows\system32\*.tsp

/md5start

userinit.exe

eventlog.dll

scecli.dll

netlogon.dll

cngaudit.dll

ws2ifsl.sys

sceclt.dll

ntelogon.dll

winlogon.exe

logevent.dll

user32.DLL

explorer.exe

iaStor.sys

nvstor.sys

atapi.sys

IdeChnDr.sys

viasraid.sys

AGP440.sys

vaxscsi.sys

nvatabus.sys

viamraid.sys

nvata.sys

nvgts.sys

iastorv.sys

ViPrt.sys

eNetHook.dll

ahcix86.sys

KR10N.sys

nvstor32.sys

ahcix86s.sys

/md5stop

%systemroot%\system32\drivers\*.sys /lockedfiles

%systemroot%\System32\config\*.sav

%systemroot%\system32\*.dll /lockedfiles

%USERPROFILE%\*.*

%USERPROFILE%\Local Settings\Temp\*.exe

%USERPROFILE%\Local Settings\Temp\*.dll

%USERPROFILE%\Application Data\*.exe

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems|Windows /rs

CREATERESTOREPOINT

Schliesse bitte nun alle Programme. (Wichtig)
Klicke nun bitte auf den Quick Scan Button.
Kopiere
nun den Inhalt aus OTL.txt und Extra.txt hier in Deinen Thread

OTL EXTRAS Logfile:

Code:

OTL Extras logfile created on: 17.02.2013 18:13:46 - Run 1

OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\Sicky Popp\Desktop

64bit- Professional Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation

Internet Explorer (Version = 9.0.8112.16421)

Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy

 

8,00 Gb Total Physical Memory | 6,43 Gb Available Physical Memory | 80,44% Memory free

16,00 Gb Paging File | 14,38 Gb Available in Paging File | 89,92% Paging File free

Paging file location(s): ?:\pagefile.sys [binary data]

 

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)

Drive C: | 135,22 Gb Total Space | 30,88 Gb Free Space | 22,84% Space Free | Partition Type: NTFS

Drive D: | 58,59 Gb Total Space | 12,07 Gb Free Space | 20,59% Space Free | Partition Type: NTFS

Drive E: | 19,53 Gb Total Space | 12,30 Gb Free Space | 62,97% Space Free | Partition Type: NTFS

Drive F: | 97,65 Gb Total Space | 36,76 Gb Free Space | 37,65% Space Free | Partition Type: NTFS

Drive G: | 48,83 Gb Total Space | 4,90 Gb Free Space | 10,04% Space Free | Partition Type: NTFS

Drive H: | 41,62 Gb Total Space | 6,04 Gb Free Space | 14,51% Space Free | Partition Type: NTFS

Drive I: | 29,29 Gb Total Space | 5,66 Gb Free Space | 19,33% Space Free | Partition Type: NTFS

Drive J: | 27,85 Gb Total Space | 8,88 Gb Free Space | 31,89% Space Free | Partition Type: NTFS

Drive K: | 7,92 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: CDFS

 

Computer Name: TOWEROFPOWER | User Name: Sicky Popp | Logged in as Administrator.

Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans

Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

 
 ========== Extra Registry (SafeList) ==========

 

 
 ========== File Associations ==========

 
 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]

.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]

.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)

 
 ========== Shell Spawning ==========

 
 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]

batfile [open] -- "%1" %*

cmdfile [open] -- "%1" %*

comfile [open] -- "%1" %*

exefile [open] -- "%1" %*

helpfile [open] -- Reg Error: Key error.

htmlfile [edit] -- Reg Error: Key error.

htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"

inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)

InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)

InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)

piffile [open] -- "%1" %*

regfile [merge] -- Reg Error: Key error.

scrfile [config] -- "%1"

scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l

scrfile [open] -- "%1" /S

txtfile [edit] -- Reg Error: Key error.

Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1

Directory [Bridge] -- C:\Program Files (x86)\Adobe\Adobe Bridge CS5\Bridge.exe "%L" (Adobe Systems, Inc.)

Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)

Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

Folder [explore] -- Reg Error: Value error.

Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]

batfile [open] -- "%1" %*

cmdfile [open] -- "%1" %*

comfile [open] -- "%1" %*

cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)

exefile [open] -- "%1" %*

helpfile [open] -- Reg Error: Key error.

htmlfile [edit] -- Reg Error: Key error.

htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"

inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)

piffile [open] -- "%1" %*

regfile [merge] -- Reg Error: Key error.

scrfile [config] -- "%1"

scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l

scrfile [open] -- "%1" /S

txtfile [edit] -- Reg Error: Key error.

Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1

Directory [Bridge] -- C:\Program Files (x86)\Adobe\Adobe Bridge CS5\Bridge.exe "%L" (Adobe Systems, Inc.)

Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)

Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

Folder [explore] -- Reg Error: Value error.

Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

 
 ========== Security Center Settings ==========

 
 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

"cval" = 1

 
 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

 
 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

"VistaSp1" = 28 4D B2 76 41 04 CA 01  [binary data]

"AntiVirusOverride" = 0

"AntiSpywareOverride" = 0

"FirewallOverride" = 0

 
 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

 
 ========== Firewall Settings ==========

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

"DisableNotifications" = 0

"EnableFirewall" = 1

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]

"DisableNotifications" = 0

"EnableFirewall" = 1

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]

"DisableNotifications" = 0

"EnableFirewall" = 1

 
 ========== Authorized Applications List ==========

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]

"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe" = C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe:*:Enabled:Spybot-S&D 2 Tray Icon -- (Safer-Networking Ltd.)

"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe" = C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe:*:Enabled:Spybot-S&D 2 Scanner Service -- (Safer-Networking Ltd.)

"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe" = C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe:*:Enabled:Spybot-S&D 2 Updater -- (Safer-Networking Ltd.)

"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe" = C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe:*:Enabled:Spybot-S&D 2 Background update service -- (Safer-Networking Ltd.)

"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe" = C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe:*:Enabled:Spybot-S&D 2 Tray Icon -- (Safer-Networking Ltd.)

"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe" = C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe:*:Enabled:Spybot-S&D 2 Scanner Service -- (Safer-Networking Ltd.)

"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe" = C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe:*:Enabled:Spybot-S&D 2 Updater -- (Safer-Networking Ltd.)

"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe" = C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe:*:Enabled:Spybot-S&D 2 Background update service -- (Safer-Networking Ltd.)

 

 
 ========== Vista Active Open Ports Exception List ==========

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]

"{01EA3A6A-E234-4291-AAF5-63EDFF5513F6}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 | 

"{0CEE62B0-BF59-4BCF-BE9E-48A6BF8199BC}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | 

"{34F380B2-07A9-4459-A22D-5544675349A9}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 

"{49E1376F-7F4B-4E06-88B6-46DFE4AE5103}" = rport=137 | protocol=17 | dir=out | app=system | 

"{5932A9E7-DCC7-45F1-BC1B-D790E38E7BB0}" = rport=445 | protocol=6 | dir=out | app=system | 

"{5C21BBCA-3042-487F-9DB5-ADB71A4049F3}" = lport=137 | protocol=17 | dir=in | app=system | 

"{6F3DE774-5C3E-46CE-8425-E4329846E249}" = rport=10243 | protocol=6 | dir=out | app=system | 

"{7506E467-4BC7-4829-A163-106CE7F06EF9}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe | 

"{8AEE728C-F54C-45A4-9559-FF18FA7832C0}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | 

"{944A0027-DE2B-4A04-ABBA-67451BC9CDB0}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | 

"{9956A58D-CBAA-440E-BDC9-C12D696F2A06}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | 

"{A499545B-A49F-4E4D-9A91-FD084F5A11AB}" = lport=138 | protocol=17 | dir=in | app=system | 

"{AF81A79A-3050-44D5-9E90-9678A8F3C330}" = lport=445 | protocol=6 | dir=in | app=system | 

"{B13D1DAF-A942-4841-B422-080AC53C1739}" = rport=139 | protocol=6 | dir=out | app=system | 

"{B91AF419-F454-4776-A373-7E28448A5CE4}" = rport=138 | protocol=17 | dir=out | app=system | 

"{CA9B9C12-CD90-4E45-93CE-2A486138193F}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 

"{CB297534-E9F5-40AF-AEF1-D52399A130F0}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | 

"{DDFFAC4F-31CF-499D-993C-C1CE16EE4956}" = lport=139 | protocol=6 | dir=in | app=system | 

"{E4D50F5B-D842-4461-8C6D-C2134B6CF9DE}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | 

"{E8715FA3-AD3D-4E01-909D-46EC71DAB715}" = lport=10243 | protocol=6 | dir=in | app=system | 

"{F0E5BE06-EC0A-4653-86DB-E5587287F61F}" = lport=2869 | protocol=6 | dir=in | app=system | 

 
 ========== Vista Active Application Exception List ==========

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]

"{01CEED01-409D-42F1-9F6A-BF4E581DF567}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | 

"{03634B3F-9AE6-4529-9508-CD1AB3BDD3DB}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | 

"{0FCAEC1D-41E3-41BC-B6BD-5E0C0269411D}" = dir=in | app=c:\program files (x86)\common files\apple\apple application support\webkit2webprocess.exe | 

"{13EE8BB4-A239-4E38-9213-44D12D21AE4B}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 

"{1922071E-0F7B-4F2F-A73E-A213D43E4437}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | 

"{1CEAF3AF-9388-4444-B32C-870A851CEF89}" = protocol=17 | dir=in | app=k:\network\epsonnetsetup\eneasyapp.exe | 

"{2C2318AF-66AD-45C8-B2D3-E23F8E7A9886}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\call of duty modern warfare 3\iw5mp_server.exe | 

"{2FB126CA-DB71-4666-8948-90557291BBB6}" = protocol=17 | dir=in | app=c:\windows\syswow64\muzapp.exe | 

"{34D347C9-D54D-460A-B6A0-2EEEC74FBF30}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 

"{34F6BB5E-038B-460E-9015-837AF6473838}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | 

"{3F94E84E-E754-41BE-82EF-2562044DB613}" = protocol=6 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe | 

"{4C594306-FC39-4EC6-B478-4F97D3FB8F7B}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steam.exe | 

"{4C8FD954-BD50-4D68-9A49-BF52D2994907}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe | 

"{509AB1BC-108D-4DE8-84A8-0B9DC524CDC0}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steam.exe | 

"{5C17D26E-5729-4051-9EE3-3FDB5AB7C90E}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | 

"{652475E9-B87D-49AF-B589-51D0088DDBC7}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | 

"{6A06B701-0E49-4271-BCDB-DE45A88FCD90}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\call of duty modern warfare 3\iw5sp.exe | 

"{6E4ED824-FF68-46B4-8CDF-B87817FD5D29}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\amd driver updater, vista and 7, 64 bit\setup.exe | 

"{73392619-B4C0-415B-976B-6BA1C1694C21}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 | 

"{76A371F1-DC2E-4CEF-B3EE-D6CE85F055E0}" = protocol=17 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe | 

"{7C4D04F2-22FB-4778-8B44-49EA4F57A6D0}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\call of duty modern warfare 3\iw5mp_server.exe | 

"{7EB8D114-7B3D-4CF4-BA0E-A2E7656A0EB2}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 | 

"{819B8551-3718-4E66-8C04-DA6C47367A31}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 | 

"{84318402-7866-4ADC-B9F8-E5FAF3EB41FF}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\call of duty modern warfare 3\iw5sp.exe | 

"{85CCB67B-1F2C-4DB9-9AF7-AAC54ED658AB}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | 

"{8909612A-61A6-40E7-8858-D755A0A91DA2}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 

"{AAD73856-223E-47D6-9B83-C330C712D576}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | 

"{ADD4BCD4-46B6-4CE2-BA41-63353677A3D1}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\amd driver updater, vista and 7, 64 bit\setup.exe | 

"{C0D03BB7-5742-430F-8F5E-C1CD940827D8}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\call of duty modern warfare 3\iw5mp.exe | 

"{C1C28F4C-C4FF-4267-A4D1-17FC2AF37E02}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe | 

"{CAEEDA73-8BD4-4F92-BA81-09B578DD5538}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 

"{E33178DE-46C1-475E-8672-4123E651BF24}" = protocol=6 | dir=out | app=system | 

"{E8580A3C-01A0-44AF-9F24-07AFBE56F70F}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 | 

"{EE7A5947-9185-4BC4-88FE-30D1C38440D2}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | 

"{F2B388CB-CC35-4B77-9B6E-DE3BE939815B}" = protocol=6 | dir=in | app=k:\network\epsonnetsetup\eneasyapp.exe | 

"{F69DF0BB-6A01-493F-81CD-E902699D0115}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\call of duty modern warfare 3\iw5mp.exe | 

"{F8B228B8-DCFC-471F-A9FB-FF796219A235}" = protocol=6 | dir=in | app=c:\windows\syswow64\muzapp.exe | 

"{F9846AE2-98EE-4746-AC5F-AFC4D5E9D954}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe | 

"{FA3298CD-F41D-45CF-9CC7-F7A1D7486EF0}" = dir=in | app=c:\program files (x86)\itunes\itunes.exe | 

"TCP Query User{32241780-EE97-4095-BF0A-FA44FB03B4ED}C:\program files (x86)\videolan\vlc\vlc.exe" = protocol=6 | dir=in | app=c:\program files (x86)\videolan\vlc\vlc.exe | 

"TCP Query User{5E026113-C059-4CD3-B271-6F83A7A8CC38}C:\program files (x86)\epson software\event manager\eeventmanager.exe" = protocol=6 | dir=in | app=c:\program files (x86)\epson software\event manager\eeventmanager.exe | 

"TCP Query User{6B11E6B2-5AFC-47A3-B991-82F43D4B7B3A}C:\program files (x86)\epson software\event manager\eeventmanager.exe" = protocol=6 | dir=in | app=c:\program files (x86)\epson software\event manager\eeventmanager.exe | 

"TCP Query User{71DE2C74-8E0D-4552-943A-ED5429B07D4C}K:\easysetupassistant\wr741n\easysetupassistant.exe" = protocol=6 | dir=in | app=k:\easysetupassistant\wr741n\easysetupassistant.exe | 

"TCP Query User{EB0C2119-9765-47B5-8002-A23BF160623F}K:\easysetupassistant\wr741n\easysetupassistant.exe" = protocol=6 | dir=in | app=k:\easysetupassistant\wr741n\easysetupassistant.exe | 

"UDP Query User{46C491FB-F911-4993-9C93-D1786463C48B}K:\easysetupassistant\wr741n\easysetupassistant.exe" = protocol=17 | dir=in | app=k:\easysetupassistant\wr741n\easysetupassistant.exe | 

"UDP Query User{4F996F79-D48F-430A-A4E3-54775F1A6067}K:\easysetupassistant\wr741n\easysetupassistant.exe" = protocol=17 | dir=in | app=k:\easysetupassistant\wr741n\easysetupassistant.exe | 

"UDP Query User{B49F58E2-DE5A-479B-8F7B-C669C6F7B6FF}C:\program files (x86)\epson software\event manager\eeventmanager.exe" = protocol=17 | dir=in | app=c:\program files (x86)\epson software\event manager\eeventmanager.exe | 

"UDP Query User{C7CC8B53-F0E3-4038-953E-69E0EB4B935F}C:\program files (x86)\videolan\vlc\vlc.exe" = protocol=17 | dir=in | app=c:\program files (x86)\videolan\vlc\vlc.exe | 

"UDP Query User{EA2B74AF-D7E0-40D1-BFE7-641C92D9408C}C:\program files (x86)\epson software\event manager\eeventmanager.exe" = protocol=17 | dir=in | app=c:\program files (x86)\epson software\event manager\eeventmanager.exe | 

 
 ========== HKEY_LOCAL_MACHINE Uninstall List ==========

 

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

"{01D57CF6-B5BC-4D03-AFF5-7960CFBD05A9}" = Native Instruments Guitar Rig 5

"{02382870-19C7-3ACD-BBAE-F6E3760947DC}" = Microsoft .NET Framework 4 Extended DEU Language Pack

"{0886900B-B2F3-452C-B580-60F1253F7F80}" = Native Instruments Controller Editor

"{0B8565BA-BAD5-4732-B122-5FD78EFC50A9}" = Native Instruments Service Center

"{0E086923-AAA3-4F98-A6E2-48B64CE27553}" = Native Instruments Reaktor Factory Selection

"{0E3DAF3D-FF69-345A-A99E-1FED304CA083}" = Microsoft .NET Framework 4 Client Profile DEU Language Pack

"{1493B2AE-0261-47D2-B1AA-F4DAD0F6C48B}" = iTunes

"{16B2C43D-6C49-4A56-957D-E40CEAA2AC06}" = M-Audio Delta 6.0.8 (x64)

"{1D8E6291-B0D5-35EC-8441-6616F567A0F7}" = Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219

"{1E9FC118-651D-4934-97BE-E53CAE5C7D45}" = Microsoft_VC80_MFCLOC_x86_x64

"{23170F69-40C1-2702-0920-000001000000}" = 7-Zip 9.20 (x64 edition)

"{27225900-26A4-11E1-9C98-F04DA23A5C58}" = Vegas Pro 11.0 (64-bit)

"{2930FB47-6452-4476-BF16-D77F748646DB}" = Native Instruments Guitar Rig Mobile I/O

"{29AFE1B0-26A4-11E1-BFD4-F04DA23A5C58}" = MSVCRT Redists

"{2BBE23DB-F92C-4319-9179-7E79717EE9AC}" = Native Instruments Komplete 8 Players

"{2CA9F96F-AFFC-4D41-B781-47EBD2378DB8}" = M-Audio Legacy Keyboard Driver 5.0.0 (x64)

"{3165EA9B-36CC-499B-96FF-36FC30E10EF4}" = License Support

"{4569AD91-47F4-4D9E-8FC9-717EC32D7AE1}" = Microsoft_VC80_CRT_x86_x64

"{491DF203-7B61-4F0E-BDCB-A1218C4DAFE9}" = Native Instruments Massive

"{4975DE61-6BF6-B9BC-1FDE-C04C5EC78E4C}" = AMD Media Foundation Decoders

"{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148

"{503F672D-6C84-448A-8F8F-4BC35AC83441}" = AMD APP SDK Runtime

"{550331CC-C34B-494F-BCDA-37CE4EF6E924}" = Garmin Communicator Plugin x64

"{5552453B-BB76-45E3-973D-F95E458ED780}" = Native Instruments Kontakt 5

"{5E03A267-415E-5383-FA8F-3CE4145663B9}" = AMD Catalyst Install Manager

"{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161

"{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}" = Bonjour

"{7446FE8D-C1F9-4D42-AAAE-5DBCE58605A6}" = Apple Mobile Device Support

"{75d2897c-87aa-4a06-8710-3ebda9f02de0}.sdb" = Adobe Audition 3.0 Vista Compatibility

"{7930FB47-6452-4476-BF16-D77F748646DB}" = Native Instruments Guitar Rig Session I/O

"{7AB6F8D7-7804-4662-BE8C-1AFCCD602D9F}" = Microsoft-Maus- und Tastatur-Center

"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17

"{8557397C-A42D-486F-97B3-A2CBC2372593}" = Microsoft_VC90_ATL_x86_x64

"{8812511F-8D8C-49D3-A711-C9650B2F5566}" = Native Instruments Guitar Rig Factory Selection for Maschine

"{89EE4A30-080F-2C95-6F78-C98D18FBD74D}" = AMD Accelerated Video Transcoding

"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight

"{8A61B820-598D-05B2-5F8D-7388E15AE2DB}" = AMD Drag and Drop Transcoding

"{8E34682C-8118-31F1-BC4C-98CD9675E1C2}" = Microsoft .NET Framework 4 Extended

"{925D058B-564A-443A-B4B2-7E90C6432E55}" = Microsoft_VC80_ATL_x86_x64

"{92A3CA0D-55CD-4C5D-BA95-5C2600C20F26}" = Microsoft_VC90_CRT_x86_x64

"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting

"{9CF11D16-ECEB-90A5-A028-CA9E068D848B}" = ccc-utility64

"{A472B9E4-0AFF-4F7B-B25D-F64F8E928AAB}" = Microsoft_VC90_MFC_x86_x64

"{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}" = Microsoft Visual C++ 2005 Redistributable (x64)

"{B0FC9E28-1CE6-4A40-BEF1-C6E6EDFCA070}" = Native Instruments Kontakt Factory Selection

"{B962AD08-335F-46f7-A182-257D37672E5C}" = Native Instruments Rig Kontrol 3

"{C8C1BAD5-54E6-4146-AD07-3A8AD36569C3}" = Microsoft_VC80_MFC_x86_x64

"{C9608300-11F5-11E0-A64B-0013D3D69929}" = MSVCRT Redists

"{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}" = SAMSUNG USB Driver for Mobile Phones

"{E3F22B4A-1296-4EEC-85D4-AC211AEF63EB}" = M-Audio Conectiv Driver 6.0.3 (x64)

"{E9EA5F38-6299-45A1-9D23-F21729A19357}" = Native Instruments Reaktor 5

"{EF728EC1-799C-4570-9AE0-8A9A54E4670A}" = Native Instruments Driver

"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile

"98157A226B40B173301B0F53C8E98C47805D5152" = Windows Driver Package - Garmin (grmnusb) GARMIN Devices  (04/19/2012 2.3.1.0)

"Cakewalk Studio Instruments_is1" = Studio Instruments 1.0

"EPSON SX235 Series" = EPSON SX235 Series Printer Uninstall

"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile

"Microsoft .NET Framework 4 Client Profile DEU Language Pack" = Microsoft .NET Framework 4 Client Profile DEU Language Pack

"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended

"Microsoft .NET Framework 4 Extended DEU Language Pack" = Microsoft .NET Framework 4 Extended DEU Language Pack

"Microsoft Mouse and Keyboard Center" = Microsoft-Maus- und Tastatur-Center

"Novation USB Audio Driver_is1" = Novation USB Audio Driver 2.1

"sp6" = Logitech SetPoint 6.32

"WinRAR archiver" = WinRAR 4.00 (64-Bit)

"z3ta+_x64_is1" = rgc:audio z3ta+ 1.5 (x64)

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

"{017F8447-2A1D-0DDB-B5D7-CA2BFACE2886}" = CCC Help French

"{0194F916-7E00-4EBE-A024-65A63B4C7D92}" = Torq 2

"{024521CF-C07E-4F8E-8481-0D75695E03AF}" = PxMergeModule

"{033E378E-6AD3-4AD5-BDEB-CBD69B31046C}" = Microsoft_VC90_ATL_x86

"{041D03C9-E009-4ECF-937E-DBD134F184C8}" = Torq 2.0.2

"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam

"{05181A78-3BA6-4B63-BCE8-888A4BCAACFA}" = Creative Pack Volume 1

"{054E9A1C-3EA2-C657-E787-FD8DCF5C3D3B}" = CCC Help Czech

"{08D2E121-7F6A-43EB-97FD-629B44903403}" = Microsoft_VC90_CRT_x86

"{0F3647F8-E51D-4FCC-8862-9A8D0C5ACF25}" = Microsoft_VC80_ATL_x86

"{0FD5FD0B-4BA6-47A1-99C3-F8A964C3CCA5}" = Magellan Communicator

"{13F054F3-0B07-4D15-9E80-C55B496AB557}" = Garmin Communicator Plugin

"{15FEDA5F-141C-4127-8D7E-B962D1742728}" = Adobe Photoshop CS5

"{1DE2BD51-0300-772D-5E18-F337D95D5687}" = CCC Help German

"{1E5C7043-09C5-4974-A69F-A5271FD82BBC}" = PlayMemories Home

"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148

"{224E8FEB-5C1F-077F-6FC5-602AC1AE644D}" = CCC Help Danish

"{24036256-BFDB-4CD3-BE8A-A3D6160F2E16}" = TuneUp Utilities 2011

"{26A24AE4-039D-4CA4-87B4-2F83216022F0}" = Java(TM) 6 Update 22

"{26A24AE4-039D-4CA4-87B4-2F83216033FF}" = Java(TM) 6 Update 39

"{275E9C49-C72F-D754-DEB7-77F10A9C00D8}" = CCC Help Japanese

"{2C303EE0-A595-3543-A71A-931C7AC40EDE}" = Microsoft Primary Interoperability Assemblies 2005

"{30049739-BE95-6591-B504-E6D7057D49CC}" = CCC Help Spanish

"{3D5D6CFC-3097-425A-8D8F-7EAF5D57641D}" = Garmin USB Drivers

"{3E31400D-274E-4647-916C-2CACC3741799}" = EpsonNet Print

"{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}" = eReg

"{3F1EB155-F96E-EB7B-2EF2-7375490E0FA9}" = CCC Help English

"{4286716B-1287-48E7-9078-3DC8248DBA96}" = OpenOffice.org 3.3

"{47FA2C44-D148-4DBC-AF60-B91934AA4842}" = Adobe AIR

"{49471DB8-7F3C-42DB-89C2-AC50FA0C5290}" = Camtasia Studio 7

"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater

"{4B023D7B-9E67-795D-FB31-B5E1F6DCA451}" = CCC Help Italian

"{5310C7A5-A385-6E26-66E9-C0F0CA5A7E45}" = BeatportDownloader

"{53C141BA-4F9E-43FB-B4F9-0C01BB716FA8}" = Adobe Audition 3.0

"{55F6C486-8C75-2A72-DAFE-CE78A624C9F7}" = CCC Help Russian

"{5A3C1721-F8ED-11E0-8AFB-B8AC6F97B88E}" = Google Earth

"{5AF23993-7152-1620-E43F-1B4542FB4F84}" = CCC Help Thai

"{5D4C60AA-84E6-4E1A-8A68-69970D387BE1}" = TuneUp Utilities Language Pack (de-DE)

"{63326924-3CAF-C858-3A8F-8598C87019D7}" = Catalyst Control Center

"{635FED5B-2C6D-49BE-87E6-7A6FCD22BC5A}" = Microsoft_VC90_MFC_x86

"{63822E89-11AA-F8EC-D433-F72A85799EC0}" = CCC Help Greek

"{66361420-4905-AEB8-17AE-172FDD164A7E}" = CCC Help Polish

"{6AFCA4E1-9B78-3640-8F72-A7BF33448200}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729

"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable

"{769F2A4B-84A3-9486-ADD2-9E5AB4B4E1E3}" = Catalyst Control Center InstallProxy

"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053

"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update

"{7AB01508-C2B2-43C8-8B44-514801E7CCC9}" = Jing

"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable

"{8773DD1C-5FB2-95B5-5A93-0EFEAC900A4D}" = CCC Help Norwegian

"{8CCBB0BF-9CC1-1A65-BB93-56012A460EE6}" = CCC Help Portuguese

"{8ED43F7E-A8F6-4898-AF11-B6158F2EDF94}" = Epson Event Manager

"{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}" = Microsoft_VC80_CRT_x86

"{933B4015-4618-4716-A828-5289FC03165F}" = VC80CRTRedist - 8.0.50727.6195

"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17

"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161

"{A02D7029-C4EF-44C1-9FD4-C0D3CA518113}" = Epson Easy Photo Print 2

"{A0A3CE05-96CB-52E9-434E-074F3BB7807E}" = CCC Help Turkish

"{A36908E4-B69B-413A-9A2B-4B2E063D1720}_is1" = SynthMasterBE x64 VSTi Software Synthesizer Plug-In version 1.0.4.7

"{A78FE97A-C0C8-49CE-89D0-EDD524A17392}" = PDF Settings CS5

"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper

"{A9C64319-932F-D02B-B14C-FFFC3EC49E77}" = CCC Help Chinese Standard

"{AC76BA86-7AD7-1031-7B44-AA1000000001}" = Adobe Reader X (10.1.0) - Deutsch

"{AE1EC58E-B2AC-4959-A4C2-C38202A25239}" = Garmin WebUpdater

"{AF0CE7C0-A3E4-4D73-988B-B29187EC6E9A}" = QuickTime

"{AF37176A-78CA-545B-34EF-8B6A21514DD1}" = Adobe Help Manager

"{B2D55EB8-32C5-4B43-9006-9E97DECBA178}" = Epson Easy Photo Print Plug-in for PMB(Picture Motion Browser)

"{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1" = Spybot - Search & Destroy

"{B6D38690-755E-4F40-A35A-23F8BC2B86AC}" = Microsoft_VC90_MFCLOC_x86

"{BE6F412F-C276-4FD8-B3E1-F996CC172776}" = WD Spindown or Stop Utility for External Drive, v1.00

"{C09DB932-7619-7B56-30E3-C0454811D6D7}" = CCC Help Korean

"{C22A4697-BD77-ACB1-744F-1FD0A0BFF798}" = CCC Help Swedish

"{C2AF7B2D-7018-414B-9B8B-D3C9F3BED04F}" = Visual C++ Redistributables

"{C5C1C0F0-D62F-4DBF-81D4-D7EF397C228B}" = NVIDIA PhysX

"{C8773FDB-D0DB-BE52-D536-F48F9886B57B}" = Adobe Download Assistant

"{CA32BB95-CB00-46EC-A2E8-53632C887AC9}" = Garmin BaseCamp

"{D1A19B02-817E-4296-A45B-07853FD74D57}" = Microsoft_VC80_MFC_x86

"{D4B457B2-260F-C561-CA87-703BD3B724CA}" = Catalyst Control Center Graphics Previews Common

"{D6CDB506-297D-AE70-0EF6-DE5185F961BE}" = CCC Help Chinese Traditional

"{D92BBB52-82FF-42ED-8A3C-4E062F944AB7}" = Microsoft_VC80_MFCLOC_x86

"{E2F0AF23-FE2F-4222-9A43-55E63CC41EF1}" = Catalyst Control Center - Branding

"{ECFD508E-68A2-91B2-46DD-1D03D783D94B}" = Catalyst Control Center Localization All

"{EDE361D5-35A5-DA7D-3462-C3DABD24029B}" = CCC Help Hungarian

"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219

"{F1E7DD6A-AE2D-D706-BEB3-937F76CA6AE9}" = CCC Help Finnish

"{F5266D28-E0B2-4130-BFC5-EE155AD514DC}" = Apple Application Support

"{F56F54DD-BCB2-1221-2CB7-E983A5CF9D15}" = CCC Help Dutch

"{F9000000-0018-0000-0000-074957833700}" = ABBYY FineReader 9.0 Sprint

"ABBYY FineReader 9.0 Sprint" = ABBYY FineReader 9.0 Sprint

"Ad-Aware Browsing Protection" = Ad-Aware Browsing Protection

"Addictive Drums Inno Setup_is1" = Addictive Drums 1.5

"Adobe AIR" = Adobe AIR

"Adobe Audition 3.0" = Adobe Audition 3.0

"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX

"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin

"AMP WinOFF" = AMP WinOFF

"ASIO4ALL" = ASIO4ALL

"avast" = avast! Free Antivirus

"BeatportDownloader.EE670286545758FAB4A69D4439CF6054F83E0AC2.1" = BeatportDownloader

"chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Help Manager

"com.adobe.downloadassistant.AdobeDownloadAssistant" = Adobe Download Assistant

"DivX Setup" = DivX-Setup

"EPSON Scanner" = EPSON Scan

"FL Studio 10" = FL Studio 10

"FL Studio 10.6" = FL Studio 10.6

"FL Studio 10.8" = FL Studio 10.8

"FL Studio 10.9" = FL Studio 10.9

"Fraps" = Fraps (remove only)

"Free Studio_is1" = Free Studio version 5.7.4.918

"Free YouTube Download_is1" = Free YouTube Download version 2.10.35.426

"Groove Machine" = Groove Machine

"HandBrake" = HandBrake 0.9.8

"Hardcore" = Hardcore

"IL Download Manager" = IL Download Manager

"IL Gross Beat" = IL Gross Beat

"IL Harmor" = IL Harmor

"IL Shared Libraries" = IL Shared Libraries

"ImgBurn" = ImgBurn

"InstallShield_{0FD5FD0B-4BA6-47A1-99C3-F8A964C3CCA5}" = Magellan Communicator

"InstallShield_{3165EA9B-36CC-499B-96FF-36FC30E10EF4}" = License Support

"InstallShield_{C2AF7B2D-7018-414B-9B8B-D3C9F3BED04F}" = Visual C++ Redistributables

"KLiteCodecPack_is1" = K-Lite Mega Codec Pack 9.7.5

"Mozilla Thunderbird 17.0.2 (x86 de)" = Mozilla Thunderbird 17.0.2 (x86 de)

"MozillaMaintenanceService" = Mozilla Maintenance Service

"Native Instruments Controller Editor" = Native Instruments Controller Editor

"Native Instruments Driver" = Native Instruments Driver

"Native Instruments Guitar Rig 5" = Native Instruments Guitar Rig 5

"Native Instruments Guitar Rig Factory Selection for Maschine" = Native Instruments Guitar Rig Factory Selection for Maschine

"Native Instruments Guitar Rig Mobile I/O" = Native Instruments Guitar Rig Mobile I/O

"Native Instruments Guitar Rig Session I/O" = Native Instruments Guitar Rig Session I/O

"Native Instruments Komplete 8 Players" = Native Instruments Komplete 8 Players

"Native Instruments Kontakt 5" = Native Instruments Kontakt 5

"Native Instruments Kontakt Factory Selection" = Native Instruments Kontakt Factory Selection

"Native Instruments Massive" = Native Instruments Massive

"Native Instruments Reaktor 5" = Native Instruments Reaktor 5

"Native Instruments Reaktor Factory Selection" = Native Instruments Reaktor Factory Selection

"Native Instruments Rig Kontrol 3" = Native Instruments Rig Kontrol 3

"Native Instruments Service Center" = Native Instruments Service Center

"PoiZone" = PoiZone

"Ravensburger tiptoi" = Ravensburger tiptoi

"reFX Nexus_is1" = reFX Nexus VSTi RTAS v2.2.0

"Sakura" = Sakura

"Sawer" = Sawer

"Steam App 42680" = Call of Duty: Modern Warfare 3

"Steam App 42690" = Call of Duty: Modern Warfare 3 - Multiplayer

"Steam App 42750" = Call of Duty: Modern Warfare 3 - Dedicated Server

"Tone2 FireBird_is1" = FireBird plus v1.11

"Toxic Biohazard" = Toxic Biohazard

"TuneUp Utilities 2011" = TuneUp Utilities 2011

"Uninstall_is1" = Uninstall 1.0.0.1

"WOW" = WOW

 
 ========== HKEY_CURRENT_USER Uninstall List ==========

 

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

"Google Chrome" = Google Chrome

"MyFreeCodec" = MyFreeCodec

 
 ========== Last 20 Event Log Errors ==========

 

[ Application Events ]

Error - 23.01.2013 17:05:14 | Computer Name = TowerofPower | Source = VSS | ID = 12289

Description = 

 

Error - 28.01.2013 17:12:52 | Computer Name = TowerofPower | Source = Application Error | ID = 1000

Description = Name der fehlerhaften Anwendung: FL (extended memory).exe, Version:

 0.0.0.0, Zeitstempel: 0x4d357373  Name des fehlerhaften Moduls: unknown, Version:

 0.0.0.0, Zeitstempel: 0x00000000  Ausnahmecode: 0xc0000005  Fehleroffset: 0x743ec9f1

ID

 des fehlerhaften Prozesses: 0x1008  Startzeit der fehlerhaften Anwendung: 0x01cdfd9aa471d25b

Pfad

 der fehlerhaften Anwendung: C:\Program Files (x86)\Image-Line\FL Studio 10.0.9\FL

 (extended memory).exe  Pfad des fehlerhaften Moduls: unknown  Berichtskennung: 79ad2b60-698f-11e2-9489-00190e01fd3d

 

Error - 01.02.2013 20:11:55 | Computer Name = TowerofPower | Source = Application Error | ID = 1000

Description = Name der fehlerhaften Anwendung: ExSpinDn.exe, Version: 2.0.0.0, Zeitstempel:

 0x4117f78e  Name des fehlerhaften Moduls: ExSpinDn.exe, Version: 2.0.0.0, Zeitstempel:

 0x4117f78e  Ausnahmecode: 0xc0000005  Fehleroffset: 0x000078ee  ID des fehlerhaften Prozesses:

 0x13b4  Startzeit der fehlerhaften Anwendung: 0x01ce00d9da289a38  Pfad der fehlerhaften

 Anwendung: C:\Program Files (x86)\Western Digital Technologies\Spindown\ExSpinDn.exe

Pfad

 des fehlerhaften Moduls: C:\Program Files (x86)\Western Digital Technologies\Spindown\ExSpinDn.exe

Berichtskennung:

 26c58820-6ccd-11e2-a999-00190e01fd3d

 

Error - 03.02.2013 15:57:33 | Computer Name = TowerofPower | Source = Application Hang | ID = 1002

Description = Programm vegas110.exe, Version 11.0.0.511 kann nicht mehr unter Windows

 ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung,

 um nach weiteren Informationen zum Problem zu suchen.    Prozess-ID: d94    Startzeit: 

01ce023c8d0e3cab    Endzeit: 83    Anwendungspfad: C:\Program Files\Sony\Vegas Pro 11.0\vegas110.exe
 

Berichts-ID:

 ee08f620-6e3b-11e2-8ac0-00190e01fd3d  

 

Error - 03.02.2013 17:11:29 | Computer Name = TowerofPower | Source = Application Error | ID = 1000

Description = Name der fehlerhaften Anwendung: vegas110.exe, Version: 11.0.0.511,

 Zeitstempel: 0x4ee92310  Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0,

 Zeitstempel: 0x00000000  Ausnahmecode: 0xc0000005  Fehleroffset: 0x000000003c0ad6c9

ID

 des fehlerhaften Prozesses: 0x143c  Startzeit der fehlerhaften Anwendung: 0x01ce0248b74508b0

Pfad

 der fehlerhaften Anwendung: C:\Program Files\Sony\Vegas Pro 11.0\vegas110.exe  Pfad

 des fehlerhaften Moduls: unknown  Berichtskennung: 466cbedc-6e46-11e2-8ac0-00190e01fd3d

 

Error - 06.02.2013 20:25:49 | Computer Name = TowerofPower | Source = Application Error | ID = 1000

Description = Name der fehlerhaften Anwendung: vegas110.exe, Version: 11.0.0.511,

 Zeitstempel: 0x4ee92310  Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.17725,

 Zeitstempel: 0x4ec4aa8e  Ausnahmecode: 0xc0000374  Fehleroffset: 0x00000000000c40f2

ID

 des fehlerhaften Prozesses: 0x2d0  Startzeit der fehlerhaften Anwendung: 0x01ce04c4a29f3efb

Pfad

 der fehlerhaften Anwendung: C:\Program Files\Sony\Vegas Pro 11.0\vegas110.exe  Pfad

 des fehlerhaften Moduls: C:\Windows\SYSTEM32\ntdll.dll  Berichtskennung: ebb271d6-70bc-11e2-9dd0-00190e01fd3d

 

Error - 09.02.2013 03:24:23 | Computer Name = TowerofPower | Source = Application Hang | ID = 1002

Description = Programm FL (extended memory).exe, Version 0.0.0.0 kann nicht mehr

 unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf

 in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem

 zu suchen.    Prozess-ID: ab0    Startzeit: 01ce0696097eb2f5    Endzeit: 60000    Anwendungspfad:

 C:\Program Files (x86)\Image-Line\FL Studio 10.0.9\FL (extended memory).exe    Berichts-ID:

 80f0a5da-7289-11e2-9a89-00190e01fd3d  

 

Error - 11.02.2013 13:12:17 | Computer Name = TowerofPower | Source = Application Hang | ID = 1002

Description = Programm chrome.exe, Version 24.0.1312.57 kann nicht mehr unter Windows

 ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung,

 um nach weiteren Informationen zum Problem zu suchen.    Prozess-ID: 1258    Startzeit:

 01ce086a3f85b35c    Endzeit: 31    Anwendungspfad: C:\Users\Sicky Popp\AppData\Local\Google\Chrome\Application\chrome.exe
 

Berichts-ID:

   

 

Error - 15.02.2013 16:52:30 | Computer Name = TowerofPower | Source = LegacyUninstaller | ID = 0

Description = 

 

Error - 15.02.2013 17:51:55 | Computer Name = TowerofPower | Source = Application Hang | ID = 1002

Description = Programm vegas110.exe, Version 11.0.0.511 kann nicht mehr unter Windows

 ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung,

 um nach weiteren Informationen zum Problem zu suchen.    Prozess-ID: 280    Startzeit: 

01ce0bbfde256451    Endzeit: 69    Anwendungspfad: C:\Program Files\Sony\Vegas Pro 11.0\vegas110.exe
 

Berichts-ID:

 e6f3215e-77b9-11e2-a48a-00190e01fd3d  

 

[ System Events ]

Error - 17.02.2013 13:17:41 | Computer Name = TowerofPower | Source = Disk | ID = 262151

Description = Fehlerhafter Block bei Gerät \Device\Harddisk4\DR4.

 

Error - 17.02.2013 13:17:41 | Computer Name = TowerofPower | Source = Disk | ID = 262151

Description = Fehlerhafter Block bei Gerät \Device\Harddisk4\DR4.

 

Error - 17.02.2013 13:17:41 | Computer Name = TowerofPower | Source = Disk | ID = 262151

Description = Fehlerhafter Block bei Gerät \Device\Harddisk4\DR4.

 

Error - 17.02.2013 13:17:41 | Computer Name = TowerofPower | Source = Disk | ID = 262151

Description = Fehlerhafter Block bei Gerät \Device\Harddisk4\DR4.

 

Error - 17.02.2013 13:17:41 | Computer Name = TowerofPower | Source = Disk | ID = 262151

Description = Fehlerhafter Block bei Gerät \Device\Harddisk4\DR4.

 

Error - 17.02.2013 13:17:41 | Computer Name = TowerofPower | Source = Disk | ID = 262151

Description = Fehlerhafter Block bei Gerät \Device\Harddisk4\DR4.

 

Error - 17.02.2013 13:17:41 | Computer Name = TowerofPower | Source = Disk | ID = 262151

Description = Fehlerhafter Block bei Gerät \Device\Harddisk4\DR4.

 

Error - 17.02.2013 13:17:41 | Computer Name = TowerofPower | Source = Disk | ID = 262151

Description = Fehlerhafter Block bei Gerät \Device\Harddisk4\DR4.

 

Error - 17.02.2013 13:17:41 | Computer Name = TowerofPower | Source = Disk | ID = 262151

Description = Fehlerhafter Block bei Gerät \Device\Harddisk4\DR4.

 

Error - 17.02.2013 13:17:41 | Computer Name = TowerofPower | Source = Disk | ID = 262151

Description = Fehlerhafter Block bei Gerät \Device\Harddisk4\DR4.

 

 

< End of report >

--- --- ---

OTL Logfile:

Code:

OTL logfile created on: 17.02.2013 18:13:46 - Run 1

OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\Sicky Popp\Desktop

64bit- Professional Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation

Internet Explorer (Version = 9.0.8112.16421)

Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy

 

8,00 Gb Total Physical Memory | 6,43 Gb Available Physical Memory | 80,44% Memory free

16,00 Gb Paging File | 14,38 Gb Available in Paging File | 89,92% Paging File free

Paging file location(s): ?:\pagefile.sys [binary data]

 

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)

Drive C: | 135,22 Gb Total Space | 30,88 Gb Free Space | 22,84% Space Free | Partition Type: NTFS

Drive D: | 58,59 Gb Total Space | 12,07 Gb Free Space | 20,59% Space Free | Partition Type: NTFS

Drive E: | 19,53 Gb Total Space | 12,30 Gb Free Space | 62,97% Space Free | Partition Type: NTFS

Drive F: | 97,65 Gb Total Space | 36,76 Gb Free Space | 37,65% Space Free | Partition Type: NTFS

Drive G: | 48,83 Gb Total Space | 4,90 Gb Free Space | 10,04% Space Free | Partition Type: NTFS

Drive H: | 41,62 Gb Total Space | 6,04 Gb Free Space | 14,51% Space Free | Partition Type: NTFS

Drive I: | 29,29 Gb Total Space | 5,66 Gb Free Space | 19,33% Space Free | Partition Type: NTFS

Drive J: | 27,85 Gb Total Space | 8,88 Gb Free Space | 31,89% Space Free | Partition Type: NTFS

Drive K: | 7,92 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: CDFS

 

Computer Name: TOWEROFPOWER | User Name: Sicky Popp | Logged in as Administrator.

Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans

Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

 
 ========== Processes (SafeList) ==========

 

PRC - [2013.02.17 18:02:51 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Sicky Popp\Desktop\OTL.exe

PRC - [2013.02.16 22:44:47 | 000,213,384 | ---- | M] (Google Inc.) -- C:\Users\Sicky Popp\AppData\Local\Google\Update\1.3.21.135\GoogleCrashHandler.exe

PRC - [2013.01.31 16:11:58 | 000,542,632 | ---- | M] (Lavasoft) -- C:\ProgramData\Ad-Aware Browsing Protection\adawarebp.exe

PRC - [2012.11.27 21:12:44 | 000,479,840 | ---- | M] (Sony Corporation) -- C:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe

PRC - [2012.11.13 14:08:08 | 003,825,176 | ---- | M] (Safer-Networking Ltd.) -- C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe

PRC - [2012.11.13 14:07:24 | 000,168,384 | ---- | M] (Safer-Networking Ltd.) -- C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe

PRC - [2012.11.13 14:07:20 | 001,369,624 | ---- | M] (Safer-Networking Ltd.) -- C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe

PRC - [2012.11.13 14:07:16 | 001,103,392 | ---- | M] (Safer-Networking Ltd.) -- C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe

PRC - [2012.10.30 23:50:59 | 004,297,136 | ---- | M] (AVAST Software) -- C:\Programme\AVAST Software\Avast\AvastUI.exe

PRC - [2012.10.30 23:50:59 | 000,044,808 | ---- | M] (AVAST Software) -- C:\Programme\AVAST Software\Avast\AvastSvc.exe

PRC - [2012.01.25 18:33:06 | 000,237,872 | ---- | M] () -- C:\Windows\SysWOW64\DeltaIITray.exe

PRC - [2011.06.06 11:55:28 | 000,064,952 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

PRC - [2010.11.08 00:09:20 | 002,647,552 | ---- | M] (PACE Anti-Piracy, Inc.) -- C:\Program Files (x86)\Common Files\PACE\Services\LicenseServices\LDSvc.exe

PRC - [2006.12.19 17:23:20 | 000,094,208 | ---- | M] (SEIKO EPSON CORPORATION) -- C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBSVC.exe

 

 
 ========== Modules (No Company Name) ==========

 

MOD - [2012.11.13 14:06:32 | 000,158,624 | ---- | M] () -- C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl

MOD - [2012.11.13 14:06:30 | 000,108,960 | ---- | M] () -- C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl

MOD - [2012.11.13 14:06:28 | 000,554,400 | ---- | M] () -- C:\Program Files (x86)\Spybot - Search & Destroy 2\VirtualTreesDXE150.bpl

MOD - [2012.11.13 14:06:28 | 000,528,288 | ---- | M] () -- C:\Program Files (x86)\Spybot - Search & Destroy 2\JSDialogPack150.bpl

MOD - [2012.11.13 14:06:28 | 000,416,160 | ---- | M] () -- C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl

MOD - [2012.01.25 18:33:06 | 000,237,872 | ---- | M] () -- C:\Windows\SysWOW64\DeltaIITray.exe

 

 
 ========== Services (SafeList) ==========

 

SRV:64bit: - [2012.12.19 20:56:00 | 000,240,640 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)

SRV:64bit: - [2010.11.19 15:49:08 | 000,036,160 | ---- | M] (TuneUp Software) [Auto | Running] -- C:\Windows\SysNative\uxtuneup.dll -- (UxTuneUp)

SRV:64bit: - [2009.07.14 02:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)

SRV - [2013.02.15 13:08:20 | 000,543,144 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)

SRV - [2013.02.08 07:53:17 | 000,251,248 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)

SRV - [2013.01.12 00:13:25 | 000,115,760 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)

SRV - [2012.11.27 21:12:44 | 000,479,840 | ---- | M] (Sony Corporation) [Auto | Running] -- C:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe -- (PMBDeviceInfoProvider)

SRV - [2012.11.09 22:09:14 | 000,151,648 | ---- | M] (SEIKO EPSON CORPORATION) [Auto | Running] -- C:\Programme\Common Files\EPSON\EPW!3 SSRP\E_S50RPB.EXE -- (EPSON_PM_RPCV4_04)

SRV - [2012.10.30 23:50:59 | 000,044,808 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Programme\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)

SRV - [2011.12.05 13:02:44 | 005,739,008 | ---- | M] (Native Instruments GmbH) [Auto | Running] -- C:\Programme\Common Files\Native Instruments\Hardware\NIHardwareService.exe -- (NIHardwareService)

SRV - [2011.09.27 20:04:08 | 000,359,192 | ---- | M] (Logitech, Inc.) [On_Demand | Stopped] -- C:\Programme\Common Files\LogiShrd\Bluetooth\LBTServ.exe -- (LBTServ)

SRV - [2011.06.06 11:55:28 | 000,064,952 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)

SRV - [2011.01.12 08:00:00 | 000,168,448 | ---- | M] (SEIKO EPSON CORPORATION) [Auto | Running] -- C:\Programme\Common Files\EPSON\EPW!3 SSRP\E_S50STB.EXE -- (EPSON_EB_RPCV4_04)

SRV - [2010.11.19 15:53:16 | 001,974,080 | ---- | M] (TuneUp Software) [Auto | Running] -- C:\Program Files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesService64.exe -- (TuneUp.UtilitiesSvc)

SRV - [2010.11.19 15:49:04 | 000,029,504 | ---- | M] (TuneUp Software) [Auto | Running] -- C:\Windows\SysWOW64\uxtuneup.dll -- (UxTuneUp)

SRV - [2010.11.08 00:09:20 | 002,647,552 | ---- | M] (PACE Anti-Piracy, Inc.) [Auto | Running] -- C:\Program Files (x86)\Common Files\PACE\Services\LicenseServices\LDSvc.exe -- (PaceLicenseDServices)

SRV - [2010.03.18 12:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)

SRV - [2010.02.19 12:37:14 | 000,517,096 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe -- (SwitchBoard)

SRV - [2009.06.10 22:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)

SRV - [2009.05.14 16:07:14 | 000,759,048 | ---- | M] (ABBYY) [Disabled | Stopped] -- C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe -- (ABBYY.Licensing.FineReader.Sprint.9.0)

SRV - [2006.12.19 17:23:20 | 000,094,208 | ---- | M] (SEIKO EPSON CORPORATION) [Auto | Running] -- C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBSVC.exe -- (EpsonBidirectionalService)

 

 
 ========== Driver Services (SafeList) ==========

 

DRV:64bit: - [2013.02.17 01:51:21 | 000,014,456 | ---- | M] (GFI Software) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\gfibto.sys -- (gfibto)

DRV:64bit: - [2012.12.19 21:48:48 | 011,278,336 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (amdkmdag)

DRV:64bit: - [2012.12.19 20:32:54 | 000,552,960 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap)

DRV:64bit: - [2012.11.06 12:11:52 | 000,096,256 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AtihdW76.sys -- (AtiHDAudioService)

DRV:64bit: - [2012.10.30 23:51:56 | 000,059,728 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswTdi.sys -- (aswTdi)

DRV:64bit: - [2012.10.30 23:51:55 | 000,984,144 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\SysNative\drivers\aswSnx.sys -- (aswSnx)

DRV:64bit: - [2012.10.30 23:51:55 | 000,370,288 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswSP.sys -- (aswSP)

DRV:64bit: - [2012.10.30 23:51:55 | 000,071,600 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswMonFlt.sys -- (aswMonFlt)

DRV:64bit: - [2012.10.30 23:51:53 | 000,025,232 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswFsBlk.sys -- (aswFsBlk)

DRV:64bit: - [2012.10.15 17:59:28 | 000,054,072 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswRdr2.sys -- (aswRdr)

DRV:64bit: - [2012.08.23 15:10:20 | 000,019,456 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)

DRV:64bit: - [2012.08.23 15:07:35 | 000,057,856 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)

DRV:64bit: - [2012.08.21 12:01:20 | 000,033,240 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GEARAspiWDM)

DRV:64bit: - [2012.04.23 12:35:22 | 000,111,696 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\NIWinCDEmu.sys -- (NIWinCDEmu)

DRV:64bit: - [2012.04.18 10:05:16 | 000,019,304 | ---- | M] (GARMIN Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\grmnusb.sys -- (grmnusb)

DRV:64bit: - [2012.04.05 19:47:57 | 000,503,352 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\sptd.sys -- (sptd)

DRV:64bit: - [2012.03.01 07:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)

DRV:64bit: - [2012.02.15 11:01:50 | 000,052,736 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbaapl64.sys -- (USBAAPL64)

DRV:64bit: - [2012.01.25 17:32:58 | 000,339,760 | ---- | M] (Avid Technology, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\MAudioDelta.sys -- (DELTAII)

DRV:64bit: - [2011.10.27 02:25:42 | 000,177,640 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssadmdm.sys -- (ssadmdm)

DRV:64bit: - [2011.10.27 02:25:42 | 000,157,672 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssadbus.sys -- (ssadbus)

DRV:64bit: - [2011.10.27 02:25:42 | 000,146,920 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssadserd.sys -- (ssadserd)

DRV:64bit: - [2011.10.27 02:25:42 | 000,036,328 | ---- | M] (Google Inc) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssadadb.sys -- (androidusb)

DRV:64bit: - [2011.10.27 02:25:42 | 000,016,872 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssadmdfl.sys -- (ssadmdfl)

DRV:64bit: - [2011.09.02 07:30:36 | 000,060,696 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\LMouFilt.Sys -- (LMouFilt)

DRV:64bit: - [2011.09.02 07:30:24 | 000,066,840 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\LHidFilt.Sys -- (LHidFilt)

DRV:64bit: - [2011.07.06 16:12:16 | 000,019,800 | ---- | M] (Focusrite Audio Engineering Limited) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\automap.sys -- (automap)

DRV:64bit: - [2011.03.11 07:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)

DRV:64bit: - [2011.03.11 07:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)

DRV:64bit: - [2011.02.16 14:36:10 | 000,050,232 | ---- | M] (Novation DMS Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvnusbaudio.sys -- (NvnUsbAudio)

DRV:64bit: - [2010.11.20 04:33:36 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)

DRV:64bit: - [2010.11.03 17:39:48 | 000,105,592 | ---- | M] (PACE Anti-Piracy, Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\Tpkd.sys -- (Tpkd)

DRV:64bit: - [2010.08.24 18:29:54 | 000,041,040 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\LUsbFilt.sys -- (LUsbFilt)

DRV:64bit: - [2010.03.16 19:50:18 | 000,046,088 | ---- | M] (M-Audio) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\MAudioConectiv_DFU.sys -- (MADFUCONECTIV)

DRV:64bit: - [2010.03.16 19:50:14 | 000,187,912 | ---- | M] (Avid Technology, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\MAudioConectiv.sys -- (MAUSBCONECTIV)

DRV:64bit: - [2010.02.09 08:53:30 | 000,028,680 | ---- | M] (M-Audio) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\MAudioLegacyKeyboard_DFU.sys -- (MADFULEGACYKEYBOARD)

DRV:64bit: - [2010.02.09 08:53:26 | 000,196,616 | ---- | M] (M-Audio) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\MAudioLegacyKeyboard.sys -- (MAUSBLEGACYKEYBOARD)

DRV:64bit: - [2009.10.30 13:39:54 | 000,460,864 | ---- | M] (BEHRINGER) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\BUSB2902.sys -- (BEHRINGER_2902)

DRV:64bit: - [2009.10.30 13:39:54 | 000,049,728 | ---- | M] (BEHRINGER) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\busbwdm.sys -- (BUSB_AUDIO_WDM)

DRV:64bit: - [2009.07.14 02:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)

DRV:64bit: - [2009.07.14 02:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)

DRV:64bit: - [2009.07.14 02:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)

DRV:64bit: - [2009.07.09 02:00:00 | 000,055,280 | ---- | M] (Sonic Solutions) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\PxHlpa64.sys -- (PxHlpa64)

DRV:64bit: - [2009.06.10 21:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)

DRV:64bit: - [2009.06.10 21:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)

DRV:64bit: - [2009.06.10 21:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)

DRV:64bit: - [2009.06.10 21:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)

DRV:64bit: - [2009.03.01 22:05:32 | 000,187,392 | ---- | M] (Realtek Corporation                                            ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)

DRV:64bit: - [2008.03.13 08:46:00 | 000,027,136 | ---- | M] (ManyCam LLC.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ManyCam_x64.sys -- (ManyCam)

DRV:64bit: - [2005.09.23 22:18:34 | 000,261,120 | ---- | M] (Pinnacle Systems GmbH) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\MarvinBus64.sys -- (MarvinBus)

DRV - [2010.10.07 11:34:32 | 000,011,856 | ---- | M] (TuneUp Software) [Kernel | On_Demand | Running] -- C:\Program Files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesDriver64.sys -- (TuneUpUtilitiesDrv)

DRV - [2009.07.14 02:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)

 

 
 ========== Standard Registry (SafeList) ==========

 

 
 ========== Internet Explorer ==========

 

IE:64bit: - HKLM\..\SearchScopes,DefaultScope = 

IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm

IE - HKLM\..\SearchScopes,DefaultScope = 

IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC

 

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = Lavasoft SecureSearch

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = MSN Deutschland: Hotmail, Skype Download und Messenger sowie Nachrichten, Unterhaltung, Video, Sport, Lifestyle, Finanzen, Auto uvm. bei MSN

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 91 6C C7 94 57 FA CD 01  [binary data]

IE - HKCU\..\SearchScopes,DefaultScope = 

IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC

IE - HKCU\..\SearchScopes\{3BD44F0E-0596-4008-AEE0-45D47E3A8F0E}: "URL" = hxxp://lavasoft.blekko.com/ws/?source=f439e2c0&tbp=rbox&toolbarid=adawaretb&u=A9DF01CB43AC7EC4704536512029F075&q={searchTerms}

IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

 

 
 ========== FireFox ==========

 

FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_5_502_149.dll File not found

FF:64bit: - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)

FF:64bit: - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_5_502_149.dll ()

FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=:  File not found

FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()

FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)

FF - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)

FF - HKLM\Software\MozillaPlugins\@garmin.com/GpsControl: C:\Program Files (x86)\Garmin GPS Plugin\npGarmin.dll (GARMIN Corp.)

FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)

FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=1.6.0_39: C:\Windows\SysWOW64\npdeployJava1.dll (Sun Microsystems, Inc.)

FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)

FF - HKLM\Software\MozillaPlugins\@MagellanGPS.com/CommunicationPlugin: C:\Program Files (x86)\Magellan\Magellan Communicator\npMgnPlg.dll (Magellan Navigation, Inc.)

FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.)

FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.)

FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Sicky Popp\AppData\Local\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.)

FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Sicky Popp\AppData\Local\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.)

 

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2012.12.04 22:20:04 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{23fcfd51-4958-4f00-80a3-ae97e717ed8b}: C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2012.01.06 00:34:15 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 17.0.2\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2013.02.16 22:24:53 | 000,000,000 | ---D | M]

FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Thunderbird 17.0.2\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2013.02.16 22:24:53 | 000,000,000 | ---D | M]

 

[2011.04.13 14:24:14 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Sicky Popp\AppData\Roaming\mozilla\Extensions

[2011.04.13 14:24:14 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Sicky Popp\AppData\Roaming\mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6}

[2012.12.01 23:25:37 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions

[2012.07.02 09:08:17 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA}

[2012.11.19 21:54:47 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA}

 
 ========== Chrome  ==========

 

CHR - homepage: Google

CHR - default_search_provider: Google (Enabled)

CHR - default_search_provider: search_url = hxxp://www.google.com/search?q={searchTerms}&ie=utf-8&oe=utf-8&aq=t

CHR - default_search_provider: suggest_url = hxxp://suggestqueries.google.com/complete/search?q={searchTerms}

CHR - homepage: Google

CHR - plugin: Shockwave Flash (Enabled) = C:\Users\Sicky Popp\AppData\Local\Google\Chrome\User Data\PepperFlash\11.6.602.167\pepflashplayer.dll

CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer

CHR - plugin: Native Client (Enabled) = C:\Users\Sicky Popp\AppData\Local\Google\Chrome\Application\24.0.1312.57\ppGoogleNaClPluginChrome.dll

CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\Sicky Popp\AppData\Local\Google\Chrome\Application\24.0.1312.57\pdf.dll

CHR - plugin: Free Studio (Enabled) = C:\Users\Sicky Popp\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp\1.0.0.0_0\np_dvs_plugin.dll

CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll

CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin.dll

CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin2.dll

CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin3.dll

CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin4.dll

CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin5.dll

CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin6.dll

CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin7.dll

CHR - plugin: DivX VOD Helper Plug-in (Enabled) = C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll

CHR - plugin: DivX Plus Web Player (Enabled) = C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll

CHR - plugin: Garmin Communicator Plug-In (Enabled) = C:\Program Files (x86)\Garmin GPS Plugin\npGarmin.dll

CHR - plugin: Google Earth Plugin (Enabled) = C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll

CHR - plugin: Google Update (Enabled) = C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll

CHR - plugin: Java(TM) Platform SE 6 U39 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll

CHR - plugin: Magellan Plug-In (Enabled) = C:\Program Files (x86)\Magellan\Magellan Communicator\npMgnPlg.dll

CHR - plugin: Silverlight Plug-In (Enabled) = C:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll

CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll

CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_5_502_149.dll

CHR - plugin: Java Deployment Toolkit 6.0.390.4 (Enabled) = C:\Windows\SysWOW64\npdeployJava1.dll

CHR - Extension: Adblock Plus = C:\Users\Sicky Popp\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb\1.3.4_0\

CHR - Extension: AdBlock = C:\Users\Sicky Popp\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.5.60_0\

CHR - Extension: avast! WebRep = C:\Users\Sicky Popp\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\

CHR - Extension: Sicky Popp: FL Studio Tutorials and more... - YouTube = C:\Users\Sicky Popp\AppData\Local\Google\Chrome\User Data\Default\Extensions\lelhhkikoabdjonaenoohdaghailpkif\2013.2.17.2780_0\

CHR - Extension: DvdVideoSoft Free Youtube Download = C:\Users\Sicky Popp\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp\1.0.0.0_0\

CHR - Extension: Mehr Leistung und Videoformate f\u00FCr dein HTML5 \u003Cvideo\u003E = C:\Users\Sicky Popp\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm\2.1.2.145_0\

 

O1 HOSTS File: ([2009.06.10 22:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts

O2:64bit: - BHO: (avast! WebRep) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Programme\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)

O2:64bit: - BHO: (Easy Photo Print) - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION / CyCom Technology Corp.)

O2 - BHO: (DivX Plus Web Player HTML5 <video>) - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)

O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDHelper.dll (Safer-Networking Ltd.)

O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)

O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Programme\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)

O3:64bit: - HKLM\..\Toolbar: (avast! WebRep) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Programme\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)

O3:64bit: - HKLM\..\Toolbar: (Easy Photo Print) - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION / CyCom Technology Corp.)

O3 - HKLM\..\Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Programme\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)

O4:64bit: - HKLM..\Run: [IntelliType Pro] C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe (Microsoft Corporation)

O4 - HKLM..\Run: [Ad-Aware Browsing Protection] C:\ProgramData\Ad-Aware Browsing Protection\adawarebp.exe (Lavasoft)

O4 - HKLM..\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)

O4 - HKLM..\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software)

O4 - HKLM..\Run: [M-Audio Taskbar Icon] C:\Windows\SysWOW64\DeltaIITray.exe ()

O4 - HKLM..\Run: [SDTray] C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe (Safer-Networking Ltd.)

O4 - HKLM..\Run: [SearchProtection] C:\ProgramData\Search Protection\_run.bat File not found

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3

O8:64bit: - Extra context menu item: Free YouTube Download - C:\Users\Sicky Popp\AppData\Roaming\DVDVideoSoftIEHelpers\freeytvdownloader.htm ()

O8:64bit: - Extra context menu item: Free YouTube to MP3 Converter - C:\Users\Sicky Popp\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm ()

O8 - Extra context menu item: Free YouTube Download - C:\Users\Sicky Popp\AppData\Roaming\DVDVideoSoftIEHelpers\freeytvdownloader.htm ()

O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Users\Sicky Popp\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm ()

O9 - Extra 'Tools' menuitem : Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDHelper.dll (Safer-Networking Ltd.)

O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000007 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.)

O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)

O1364bit: - gopher Prefix: missing

O13 - gopher Prefix: missing

O16 - DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} hxxp://dlm.tools.akamai.com/dlmanager/versions/activex/dlm-activex-2.2.5.7.cab (DLM Control)

O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_39-windows-i586.cab (Java Plug-in 1.6.0_39)

O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)

O16 - DPF: {CAFEEFAC-0016-0000-0039-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_39-windows-i586.cab (Java Plug-in 1.6.0_39)

O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_39-windows-i586.cab (Java Plug-in 1.6.0_39)

O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1

O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{6FC24DBA-1AEC-4D3F-952F-F116C52A5443}: DhcpNameServer = 192.168.0.1

O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)

O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)

O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)

O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)

O20:64bit: - Winlogon\Notify\LBTWlgn: DllName - (c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll) - c:\Programme\Common Files\LogiShrd\Bluetooth\LBTWLgn.dll (Logitech, Inc.)

O20 - Winlogon\Notify\SDWinLogon: DllName - (SDWinLogon.dll) -  File not found

O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.

O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.

O27:64bit: - HKLM IFEO\bonus.screenshotreader.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2011\TUAutoReactivator64.exe (TuneUp Software)

O27:64bit: - HKLM IFEO\itunes.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2011\TUAutoReactivator64.exe (TuneUp Software)

O27:64bit: - HKLM IFEO\sprint.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2011\TUAutoReactivator64.exe (TuneUp Software)

O27 - HKLM IFEO\bonus.screenshotreader.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2011\TUAutoReactivator64.exe (TuneUp Software)

O27 - HKLM IFEO\itunes.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2011\TUAutoReactivator64.exe (TuneUp Software)

O27 - HKLM IFEO\sprint.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2011\TUAutoReactivator64.exe (TuneUp Software)

O32 - HKLM CDRom: AutoRun - 1

O34 - HKLM BootExecute: (autocheck autochk *)

O35:64bit: - HKLM\..comfile [open] -- "%1" %*

O35:64bit: - HKLM\..exefile [open] -- "%1" %*

O35 - HKLM\..comfile [open] -- "%1" %*

O35 - HKLM\..exefile [open] -- "%1" %*

O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*

O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*

O37 - HKLM\...com [@ = comfile] -- "%1" %*

O37 - HKLM\...exe [@ = exefile] -- "%1" %*

O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)

O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

 

ActiveX:64bit: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0

ActiveX:64bit: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll

ActiveX:64bit: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack

ActiveX:64bit: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE

ActiveX:64bit: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx

ActiveX:64bit: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help

ActiveX:64bit: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6

ActiveX:64bit: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools

ActiveX:64bit: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements

ActiveX:64bit: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player

ActiveX:64bit: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access

ActiveX:64bit: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7

ActiveX:64bit: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll

ActiveX:64bit: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\System32\ie4uinit.exe -BaseSettings

ActiveX:64bit: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install

ActiveX:64bit: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding

ActiveX:64bit: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts

ActiveX:64bit: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help

ActiveX:64bit: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface

ActiveX:64bit: {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4} - .NET Framework

ActiveX:64bit: {FEBEF00C-046D-438D-8A88-BF94A6C9E703} - .NET Framework

ActiveX:64bit: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP

ActiveX:64bit: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\System32\ie4uinit.exe -UserIconConfig

ActiveX:64bit: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP

ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Microsoft VM

ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0

ActiveX: {25FFAAD0-F4A3-4164-95FF-4461E9F35D51} - .NET Framework

ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll

ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack

ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles(x86)%\Windows Mail\WinMail.exe" OCInstallUserConfigOE

ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx

ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help

ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6

ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools

ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements

ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player

ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access

ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7

ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework

ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll

ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\SysWOW64\ie4uinit.exe -BaseSettings

ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\SysWOW64\Rundll32.exe C:\Windows\SysWOW64\mscories.dll,Install

ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding

ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts

ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help

ActiveX: {E1FC9742-6CB2-A481-4CD1-2A1E5B29B35C} - Themes Setup

ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface

ActiveX: {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4} - .NET Framework

ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP

ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\SysWOW64\ie4uinit.exe -UserIconConfig

ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\SysWOW64\rundll32.exe" "C:\Windows\SysWOW64\iedkcs32.dll",BrandIEActiveSetup SIGNUP

 

NetSvcs:64bit: UxTuneUp - C:\Windows\SysNative\uxtuneup.dll (TuneUp Software)

NetSvcs:64bit: AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)

 

MsConfig:64bit - StartUpReg: APSDaemon - hkey= - key= - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)

MsConfig:64bit - StartUpReg: Facebook Update - hkey= - key= -  File not found

MsConfig:64bit - StartUpReg: iTunesHelper - hkey= - key= - C:\Program Files (x86)\iTunes\iTunesHelper.exe (Apple Inc.)

MsConfig:64bit - StartUpReg: KiesHelper - hkey= - key= -  File not found

MsConfig:64bit - StartUpReg: KiesPDLR - hkey= - key= -  File not found

MsConfig:64bit - StartUpReg: KiesTrayAgent - hkey= - key= -  File not found

MsConfig:64bit - StartUpReg: M-Audio Taskbar Icon - hkey= - key= - C:\Windows\SysWOW64\DeltaIITray.exe ()

MsConfig:64bit - StartUpReg: StartCCC - hkey= - key= - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)

MsConfig:64bit - State: "startup" - Reg Error: Key error.

 

CREATERESTOREPOINT

Restore point Set: OTL Restore Point

 
 ========== Files/Folders - Created Within 30 Days ==========

 

[2013.02.17 18:12:53 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Sicky Popp\Desktop\OTL.exe

[2013.02.17 01:53:28 | 000,000,000 | ---D | C] -- C:\ProgramData\Search Protection

[2013.02.17 01:53:24 | 000,000,000 | ---D | C] -- C:\Users\Sicky Popp\AppData\Local\adawarebp

[2013.02.17 01:53:22 | 000,000,000 | ---D | C] -- C:\ProgramData\Ad-Aware Browsing Protection

[2013.02.17 01:52:33 | 000,000,000 | ---D | C] -- C:\ProgramData\Downloaded Installations

[2013.02.17 01:51:23 | 000,000,000 | ---D | C] -- C:\Users\Sicky Popp\AppData\Roaming\LavasoftStatistics

[2013.02.17 01:51:21 | 000,014,456 | ---- | C] (GFI Software) -- C:\Windows\SysNative\drivers\gfibto.sys

[2013.02.16 22:24:47 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime

[2013.02.16 22:21:19 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack

[2013.02.16 22:21:18 | 004,102,656 | ---- | C] (x264vfw project) -- C:\Windows\SysWow64\x264vfw.dll

[2013.02.16 22:21:17 | 000,151,552 | ---- | C] (fccHandler) -- C:\Windows\SysWow64\ac3acm.acm

[2013.02.16 22:21:13 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\K-Lite Codec Pack

[2013.02.13 22:51:59 | 000,000,000 | ---D | C] -- C:\Users\Sicky Popp\Desktop\100CASIO

[2013.02.13 10:59:52 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Magellan

[2013.02.13 00:21:54 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight

[2013.02.13 00:21:00 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Silverlight

[2013.02.13 00:21:00 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Silverlight

[2013.02.13 00:15:46 | 000,000,000 | ---D | C] -- C:\ProgramData\ATI

[2013.02.13 00:15:12 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AMD AVT

[2013.02.13 00:14:55 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AMD APP

[2013.02.13 00:14:36 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Catalyst Control Center

[2013.02.12 23:26:19 | 000,000,000 | ---D | C] -- C:\Users\Sicky Popp\AppData\Local\Logishrd

[2013.02.12 23:25:32 | 000,000,000 | ---D | C] -- C:\Program Files\Logitech

[2013.02.10 19:10:02 | 000,000,000 | ---D | C] -- C:\ProgramData\Eisenberg

[2013.02.09 08:14:43 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Addictive Drums

[2013.02.09 06:44:18 | 000,000,000 | ---D | C] -- C:\Users\Sicky Popp\AppData\Roaming\ImgBurn

[2013.02.09 06:39:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ImgBurn

[2013.02.09 06:39:00 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ImgBurn

[2013.02.09 06:21:20 | 000,000,000 | ---D | C] -- C:\Users\Sicky Popp\Documents\Addictive Keys Logs

[2013.02.09 06:20:37 | 000,000,000 | ---D | C] -- C:\ProgramData\XLN Audio

[2013.02.09 06:20:36 | 000,000,000 | ---D | C] -- C:\Users\Sicky Popp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\XLN Audio

[2013.02.09 06:20:36 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\XLN Audio

[2013.02.07 02:20:27 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Garmin

[2013.01.27 11:38:33 | 000,000,000 | ---D | C] -- C:\Users\Sicky Popp\Desktop\Bilder Stix Bilderahmen Mutter

 
 ========== Files - Modified Within 30 Days ==========

 

[2013.02.17 18:17:47 | 000,018,976 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

[2013.02.17 18:17:47 | 000,018,976 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

[2013.02.17 18:02:51 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Sicky Popp\Desktop\OTL.exe

[2013.02.17 17:59:00 | 000,001,118 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

[2013.02.17 17:57:39 | 000,001,114 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job

[2013.02.17 17:53:01 | 000,000,884 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job

[2013.02.17 17:49:01 | 000,001,140 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1303213111-1996448718-967368058-1001UA.job

[2013.02.17 17:46:35 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat

[2013.02.17 01:58:55 | 000,000,105 | ---- | M] () -- C:\prefs.js

[2013.02.17 01:51:21 | 000,014,456 | ---- | M] (GFI Software) -- C:\Windows\SysNative\drivers\gfibto.sys

[2013.02.17 00:36:41 | 000,133,600 | ---- | M] () -- C:\Users\Sicky Popp\Desktop\Starwars Mix.mp4.sfk

[2013.02.16 23:34:11 | 000,916,573 | ---- | M] () -- C:\Users\Sicky Popp\Desktop\IMAG0182.jpg

[2013.02.16 23:32:28 | 000,016,147 | ---- | M] () -- C:\Users\Sicky Popp\Desktop\598546_515510028471325_1965973135_n.jpg

[2013.02.16 23:20:42 | 003,747,956 | ---- | M] () -- C:\Users\Sicky Popp\Desktop\20130108_162815.jpg

[2013.02.16 22:49:00 | 000,001,088 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1303213111-1996448718-967368058-1001Core.job

[2013.02.16 02:11:28 | 000,005,862 | ---- | M] () -- C:\Users\Sicky Popp\Desktop\fb-button.jpg

[2013.02.15 23:00:54 | 003,775,581 | ---- | M] () -- C:\Users\Sicky Popp\Desktop\Starwars Mix.mp4

[2013.02.15 22:54:42 | 000,014,893 | ---- | M] () -- C:\Users\Sicky Popp\Desktop\Swtheme.mid

[2013.02.15 11:33:46 | 001,621,400 | ---- | M] () -- C:\Users\Sicky Popp\Desktop\Kreativrunde.sfk

[2013.02.15 11:25:51 | 207,530,600 | ---- | M] () -- C:\Users\Sicky Popp\Desktop\Kreativrunde.wav

[2013.02.14 13:47:41 | 000,000,132 | ---- | M] () -- C:\Users\Sicky Popp\AppData\Roaming\Adobe PNG Format CS5 Prefs

[2013.02.14 13:01:32 | 000,171,800 | ---- | M] () -- C:\Users\Sicky Popp\Desktop\männel stempel.jpg

[2013.02.14 11:37:40 | 009,137,936 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT

[2013.02.14 02:06:49 | 001,634,468 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI

[2013.02.14 02:06:49 | 000,696,848 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat

[2013.02.14 02:06:49 | 000,652,166 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat

[2013.02.14 02:06:49 | 000,148,144 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat

[2013.02.14 02:06:49 | 000,121,098 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat

[2013.02.13 09:22:56 | 000,000,550 | RHS- | M] () -- C:\ProgramData\ntuser.pol

[2013.02.13 00:19:47 | 000,072,822 | ---- | M] () -- C:\Windows\SysWow64\ieuinit.inf

[2013.02.13 00:19:46 | 000,072,822 | ---- | M] () -- C:\Windows\SysNative\ieuinit.inf

[2013.02.11 22:37:10 | 004,156,135 | ---- | M] () -- C:\Users\Sicky Popp\Desktop\CIMG4121.JPG

[2013.02.06 19:00:00 | 000,112,640 | ---- | M] () -- C:\Windows\SysWow64\ff_vfw.dll

[2013.02.05 02:30:33 | 000,002,107 | ---- | M] () -- C:\Users\Public\Desktop\FL Studio 10.9 (beta).lnk

[2013.02.02 15:43:31 | 002,628,767 | ---- | M] () -- C:\Users\Sicky Popp\Desktop\Auge Arm.jpg

[2013.01.28 22:38:47 | 010,412,478 | ---- | M] () -- C:\Users\Sicky Popp\Desktop\Elli Gypsy 2013.mp3

[2013.01.27 15:06:32 | 002,986,302 | ---- | M] () -- C:\Users\Sicky Popp\Desktop\maZe liegend.jpg

[2013.01.26 16:31:48 | 000,007,708 | ---- | M] () -- C:\Users\Sicky Popp\Desktop\shams114.jpg

[2013.01.21 14:49:18 | 000,000,615 | ---- | M] () -- C:\Users\Sicky Popp\Desktop\untitled.fsc

 
 ========== Files Created - No Company Name ==========

 

[2013.02.17 01:58:55 | 000,000,105 | ---- | C] () -- C:\prefs.js

[2013.02.17 00:36:17 | 000,133,600 | ---- | C] () -- C:\Users\Sicky Popp\Desktop\Starwars Mix.mp4.sfk

[2013.02.16 23:34:11 | 000,916,573 | ---- | C] () -- C:\Users\Sicky Popp\Desktop\IMAG0182.jpg

[2013.02.16 23:32:27 | 000,016,147 | ---- | C] () -- C:\Users\Sicky Popp\Desktop\598546_515510028471325_1965973135_n.jpg

[2013.02.16 22:21:18 | 000,243,200 | ---- | C] () -- C:\Windows\SysWow64\xvidvfw.dll

[2013.02.16 22:21:18 | 000,216,064 | ---- | C] ( ) -- C:\Windows\SysWow64\lagarith.dll

[2013.02.16 22:21:17 | 000,178,688 | ---- | C] () -- C:\Windows\SysWow64\unrar.dll

[2013.02.16 22:21:15 | 000,112,640 | ---- | C] () -- C:\Windows\SysWow64\ff_vfw.dll

[2013.02.16 02:11:28 | 000,005,862 | ---- | C] () -- C:\Users\Sicky Popp\Desktop\fb-button.jpg

[2013.02.15 23:00:50 | 003,775,581 | ---- | C] () -- C:\Users\Sicky Popp\Desktop\Starwars Mix.mp4

[2013.02.15 22:54:42 | 000,014,893 | ---- | C] () -- C:\Users\Sicky Popp\Desktop\Swtheme.mid

[2013.02.15 11:30:00 | 001,621,400 | ---- | C] () -- C:\Users\Sicky Popp\Desktop\Kreativrunde.sfk

[2013.02.15 11:07:50 | 207,530,600 | ---- | C] () -- C:\Users\Sicky Popp\Desktop\Kreativrunde.wav

[2013.02.14 13:01:30 | 000,171,800 | ---- | C] () -- C:\Users\Sicky Popp\Desktop\männel stempel.jpg

[2013.02.13 22:51:59 | 004,156,135 | ---- | C] () -- C:\Users\Sicky Popp\Desktop\CIMG4121.JPG

[2013.02.13 00:19:47 | 000,072,822 | ---- | C] () -- C:\Windows\SysWow64\ieuinit.inf

[2013.02.13 00:19:46 | 000,072,822 | ---- | C] () -- C:\Windows\SysNative\ieuinit.inf

[2013.02.09 06:39:00 | 000,001,877 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ImgBurn.lnk

[2013.02.05 02:30:33 | 000,002,107 | ---- | C] () -- C:\Users\Public\Desktop\FL Studio 10.9 (beta).lnk

[2013.02.05 02:29:42 | 000,002,119 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FL Studio 10.9.lnk

[2013.02.02 15:43:28 | 002,628,767 | ---- | C] () -- C:\Users\Sicky Popp\Desktop\Auge Arm.jpg

[2013.01.28 22:38:11 | 010,412,478 | ---- | C] () -- C:\Users\Sicky Popp\Desktop\Elli Gypsy 2013.mp3

[2013.01.27 15:06:29 | 002,986,302 | ---- | C] () -- C:\Users\Sicky Popp\Desktop\maZe liegend.jpg

[2013.01.27 11:38:33 | 005,508,383 | ---- | C] () -- C:\Users\Sicky Popp\Desktop\DSC_0076.JPG

[2013.01.26 16:31:48 | 000,007,708 | ---- | C] () -- C:\Users\Sicky Popp\Desktop\shams114.jpg

[2013.01.21 14:49:18 | 000,000,615 | ---- | C] () -- C:\Users\Sicky Popp\Desktop\untitled.fsc

[2012.12.04 19:52:40 | 000,000,550 | RHS- | C] () -- C:\ProgramData\ntuser.pol

[2012.11.22 15:27:13 | 000,000,132 | ---- | C] () -- C:\Users\Sicky Popp\AppData\Roaming\Adobe IllExport Filter CS5 Prefs

[2012.06.13 02:35:07 | 000,157,144 | ---- | C] () -- C:\Windows\SysWow64\ativvsva.dat

[2012.06.13 02:33:51 | 000,204,952 | ---- | C] () -- C:\Windows\SysWow64\ativvsvl.dat

[2012.05.24 20:06:41 | 000,001,456 | ---- | C] () -- C:\Users\Sicky Popp\AppData\Local\Adobe Save for Web 12.0 Prefs

[2012.05.03 11:08:43 | 001,590,370 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI

[2012.05.02 13:58:10 | 000,029,184 | ---- | C] () -- C:\Windows\SysWow64\kdbsdk32.dll

[2012.03.04 17:20:38 | 000,000,081 | ---- | C] () -- C:\Users\Sicky Popp\AppData\Roaming\MPluginConfiguration.xml

[2012.03.04 17:05:09 | 000,086,536 | ---- | C] () -- C:\Users\Sicky Popp\AppData\Roaming\MRhythmizerSequencepresets.xml

[2012.03.04 17:05:09 | 000,085,968 | ---- | C] () -- C:\Users\Sicky Popp\AppData\Roaming\MRhythmizerpresets.xml

[2012.03.04 17:05:09 | 000,051,825 | ---- | C] () -- C:\Users\Sicky Popp\AppData\Roaming\MRhythmizerSequenceVolumepresets.xml

[2012.03.04 17:05:09 | 000,012,248 | ---- | C] () -- C:\Users\Sicky Popp\AppData\Roaming\MRhythmizerSequenceSetpresets.xml

[2012.03.04 17:05:09 | 000,005,022 | ---- | C] () -- C:\Users\Sicky Popp\AppData\Roaming\MRhythmizerSequenceVolumeSetpresets.xml

[2012.01.25 18:33:06 | 000,237,872 | ---- | C] () -- C:\Windows\SysWow64\DeltaIITray.exe

[2011.10.31 11:22:40 | 000,081,920 | ---- | C] () -- C:\Windows\SysWow64\issacapi_bs-2.3.dll

[2011.10.31 11:22:40 | 000,065,536 | ---- | C] () -- C:\Windows\SysWow64\issacapi_pe-2.3.dll

[2011.10.31 11:22:40 | 000,057,344 | ---- | C] () -- C:\Windows\SysWow64\issacapi_se-2.3.dll

[2011.10.31 11:22:38 | 000,974,848 | ---- | C] () -- C:\Windows\SysWow64\cis-2.4.dll

[2011.10.25 21:21:34 | 000,056,832 | ---- | C] () -- C:\Windows\SysWow64\OVDecoder.dll

[2011.10.19 12:28:17 | 000,013,847 | ---- | C] () -- C:\Users\Sicky Popp\maZe EFX.efx

[2011.10.19 10:46:29 | 008,491,008 | ---- | C] () -- C:\Windows\SysWow64\QtGui_Torq_2.0.0.3_4.dll

[2011.10.19 10:46:29 | 003,166,208 | ---- | C] () -- C:\Windows\SysWow64\QtXmlPatterns_Torq_2.0.0.3_4.dll

[2011.10.19 10:46:29 | 002,666,496 | ---- | C] () -- C:\Windows\SysWow64\QtDeclarative_Torq_2.0.0.3_4.dll

[2011.10.19 10:46:29 | 002,363,392 | ---- | C] () -- C:\Windows\SysWow64\QtCore_Torq_2.0.0.3_4.dll

[2011.10.19 10:46:29 | 001,339,392 | ---- | C] () -- C:\Windows\SysWow64\QtScript_Torq_2.0.0.3_4.dll

[2011.10.19 10:46:29 | 000,864,256 | ---- | C] () -- C:\Windows\SysWow64\QtNetwork_Torq_2.0.0.3_4.dll

[2011.10.19 10:46:29 | 000,720,896 | ---- | C] () -- C:\Windows\SysWow64\QtOpenGL_Torq_2.0.0.3_4.dll

[2011.10.19 10:46:29 | 000,614,400 | ---- | C] () -- C:\Windows\SysWow64\QtSql_Torq_2.0.0.3_4.dll

[2011.10.19 10:46:29 | 000,368,640 | ---- | C] () -- C:\Windows\SysWow64\QtXml_Torq_2.0.0.3_4.dll

[2011.10.13 23:26:46 | 000,000,132 | ---- | C] () -- C:\Users\Sicky Popp\AppData\Roaming\Adobe BMP Format CS5 Prefs

[2011.10.13 20:58:53 | 000,017,408 | ---- | C] () -- C:\Users\Sicky Popp\AppData\Local\WebpageIcons.db

[2011.09.12 23:06:16 | 000,003,917 | ---- | C] () -- C:\Windows\SysWow64\atipblag.dat

[2011.09.08 16:28:33 | 000,000,132 | ---- | C] () -- C:\Users\Sicky Popp\AppData\Roaming\Adobe PNG Format CS5 Prefs

[2011.07.04 21:33:19 | 000,191,692 | ---- | C] () -- C:\Users\Sicky Popp\AppData\Roaming\MAnalyzerpresets.xml

[2011.07.04 21:33:19 | 000,013,964 | ---- | C] () -- C:\Users\Sicky Popp\AppData\Roaming\MFlangerpresets.xml

[2011.07.04 21:33:19 | 000,009,119 | ---- | C] () -- C:\Users\Sicky Popp\AppData\Roaming\MFreqShifterpresets.xml

[2011.07.04 21:33:19 | 000,007,130 | ---- | C] () -- C:\Users\Sicky Popp\AppData\Roaming\MEqualizerpresets.xml

[2011.07.04 21:33:19 | 000,006,687 | ---- | C] () -- C:\Users\Sicky Popp\AppData\Roaming\menvelopepresets.xml

[2011.07.04 21:33:19 | 000,006,444 | ---- | C] () -- C:\Users\Sicky Popp\AppData\Roaming\MCompressorpresets.xml

[2011.07.04 21:33:19 | 000,005,138 | ---- | C] () -- C:\Users\Sicky Popp\AppData\Roaming\MWaveShaperpresets.xml

[2011.07.04 21:33:19 | 000,004,362 | ---- | C] () -- C:\Users\Sicky Popp\AppData\Roaming\MPhaserpresets.xml

[2011.07.04 21:33:19 | 000,003,771 | ---- | C] () -- C:\Users\Sicky Popp\AppData\Roaming\MRingModulatorpresets.xml

[2011.07.04 21:33:19 | 000,002,820 | ---- | C] () -- C:\Users\Sicky Popp\AppData\Roaming\MEqualizerAreasEditorpresets.xml

[2011.07.04 21:33:19 | 000,002,775 | ---- | C] () -- C:\Users\Sicky Popp\AppData\Roaming\MStereoExpanderpresets.xml

[2011.07.04 21:33:19 | 000,002,666 | ---- | C] () -- C:\Users\Sicky Popp\AppData\Roaming\MVibratopresets.xml

[2011.07.04 21:33:19 | 000,002,492 | ---- | C] () -- C:\Users\Sicky Popp\AppData\Roaming\MSpectralAnalyzerPrefilterpresets.xml

[2011.07.04 21:33:19 | 000,002,366 | ---- | C] () -- C:\Users\Sicky Popp\AppData\Roaming\MTremolopresets.xml

[2011.07.04 21:33:19 | 000,001,907 | ---- | C] () -- C:\Users\Sicky Popp\AppData\Roaming\MAutopanpresets.xml

[2011.07.04 21:33:19 | 000,001,381 | ---- | C] () -- C:\Users\Sicky Popp\AppData\Roaming\MLimiterpresets.xml

[2011.07.04 21:33:19 | 000,001,235 | ---- | C] () -- C:\Users\Sicky Popp\AppData\Roaming\mbasestyleconfigurationpresets.xml

[2011.07.04 21:33:19 | 000,001,011 | ---- | C] () -- C:\Users\Sicky Popp\AppData\Roaming\MValueToColor5presets.xml

[2011.04.22 10:19:22 | 000,009,216 | ---- | C] () -- C:\Users\Sicky Popp\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

[2011.04.19 19:23:38 | 000,000,000 | ---- | C] () -- C:\Users\Sicky Popp\AppData\Roaming\chrtmp

[2011.04.14 17:05:13 | 000,007,605 | ---- | C] () -- C:\Users\Sicky Popp\AppData\Local\Resmon.ResmonCfg

[2011.04.13 13:10:13 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin

 
 ========== ZeroAccess Check ==========

 

[2009.07.14 05:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

 

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

 

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

 

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64

 

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

 

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

"" = C:\Windows\SysNative\shell32.dll -- [2012.06.09 06:43:10 | 014,172,672 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Apartment

 

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

"" = %SystemRoot%\system32\shell32.dll -- [2012.06.09 05:41:00 | 012,873,728 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Apartment

 

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64

"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009.07.14 02:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Free

 

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]

"" = %systemroot%\system32\wbem\fastprox.dll -- [2010.11.20 03:19:04 | 000,606,208 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Free

 

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64

"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009.07.14 02:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Both

 

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

 
 ========== LOP Check ==========

 

[2012.03.07 15:53:41 | 000,000,000 | ---D | M] -- C:\Users\Sicky Popp\AppData\Roaming\Ableton

[2011.12.09 22:42:04 | 000,000,000 | ---D | M] -- C:\Users\Sicky Popp\AppData\Roaming\BeatportDownloader.EE670286545758FAB4A69D4439CF6054F83E0AC2.1

[2012.05.25 00:16:27 | 000,000,000 | ---D | M] -- C:\Users\Sicky Popp\AppData\Roaming\com.adobe.downloadassistant.AdobeDownloadAssistant

[2013.02.11 19:58:47 | 000,000,000 | ---D | M] -- C:\Users\Sicky Popp\AppData\Roaming\DVDVideoSoft

[2012.09.15 19:56:45 | 000,000,000 | ---D | M] -- C:\Users\Sicky Popp\AppData\Roaming\DVDVideoSoftIEHelpers

[2012.08.09 07:37:45 | 000,000,000 | ---D | M] -- C:\Users\Sicky Popp\AppData\Roaming\EPSON

[2011.06.28 18:02:07 | 000,000,000 | ---D | M] -- C:\Users\Sicky Popp\AppData\Roaming\FireShot

[2012.10.11 22:59:03 | 000,000,000 | ---D | M] -- C:\Users\Sicky Popp\AppData\Roaming\Garmin

[2013.01.15 20:36:37 | 000,000,000 | ---D | M] -- C:\Users\Sicky Popp\AppData\Roaming\Groove Machine

[2012.12.29 00:24:59 | 000,000,000 | ---D | M] -- C:\Users\Sicky Popp\AppData\Roaming\HandBrake

[2011.11.20 10:10:25 | 000,000,000 | ---D | M] -- C:\Users\Sicky Popp\AppData\Roaming\HD Tune Pro

[2011.05.17 03:59:55 | 000,000,000 | ---D | M] -- C:\Users\Sicky Popp\AppData\Roaming\Image-Line

[2013.02.09 06:48:42 | 000,000,000 | ---D | M] -- C:\Users\Sicky Popp\AppData\Roaming\ImgBurn

[2011.11.06 21:52:37 | 000,000,000 | ---D | M] -- C:\Users\Sicky Popp\AppData\Roaming\Korg

[2011.04.13 14:41:32 | 000,000,000 | ---D | M] -- C:\Users\Sicky Popp\AppData\Roaming\Leadertech

[2011.10.05 17:08:17 | 000,000,000 | ---D | M] -- C:\Users\Sicky Popp\AppData\Roaming\MAGIX

[2011.10.07 15:50:16 | 000,000,000 | ---D | M] -- C:\Users\Sicky Popp\AppData\Roaming\ManyCam

[2012.03.04 17:20:28 | 000,000,000 | ---D | M] -- C:\Users\Sicky Popp\AppData\Roaming\MeldaProduction

[2012.09.19 17:47:42 | 000,000,000 | ---D | M] -- C:\Users\Sicky Popp\AppData\Roaming\MeldaProduction MAnalyzer

[2012.03.03 22:29:36 | 000,000,000 | ---D | M] -- C:\Users\Sicky Popp\AppData\Roaming\MixVibes

[2011.04.14 16:02:44 | 000,000,000 | ---D | M] -- C:\Users\Sicky Popp\AppData\Roaming\MSPS

[2011.07.04 21:33:19 | 000,000,000 | ---D | M] -- C:\Users\Sicky Popp\AppData\Roaming\MTexturedStyles

[2012.06.03 19:10:08 | 000,000,000 | ---D | M] -- C:\Users\Sicky Popp\AppData\Roaming\MW3 FoV Changer

[2011.06.03 00:05:18 | 000,000,000 | ---D | M] -- C:\Users\Sicky Popp\AppData\Roaming\OpenOffice.org

[2012.09.16 21:42:47 | 000,000,000 | ---D | M] -- C:\Users\Sicky Popp\AppData\Roaming\PACE Anti-Piracy

[2012.05.25 00:54:32 | 000,000,000 | ---D | M] -- C:\Users\Sicky Popp\AppData\Roaming\PDAppFlex

[2011.04.19 19:35:55 | 000,000,000 | ---D | M] -- C:\Users\Sicky Popp\AppData\Roaming\Publish Providers

[2011.12.28 18:58:17 | 000,000,000 | ---D | M] -- C:\Users\Sicky Popp\AppData\Roaming\RavensburgerTipToi

[2011.11.29 18:28:31 | 000,000,000 | ---D | M] -- C:\Users\Sicky Popp\AppData\Roaming\Samsung

[2012.05.29 12:14:37 | 000,000,000 | ---D | M] -- C:\Users\Sicky Popp\AppData\Roaming\Sawer

[2012.12.04 23:29:40 | 000,000,000 | ---D | M] -- C:\Users\Sicky Popp\AppData\Roaming\Sony

[2012.12.15 22:20:05 | 000,000,000 | ---D | M] -- C:\Users\Sicky Popp\AppData\Roaming\Sony Creative Software Inc

[2011.04.13 21:59:54 | 000,000,000 | ---D | M] -- C:\Users\Sicky Popp\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1

[2011.06.16 11:23:51 | 000,000,000 | ---D | M] -- C:\Users\Sicky Popp\AppData\Roaming\SynthMaker

[2012.03.04 17:20:38 | 000,000,000 | ---D | M] -- C:\Users\Sicky Popp\AppData\Roaming\System

[2011.12.01 22:08:42 | 000,000,000 | ---D | M] -- C:\Users\Sicky Popp\AppData\Roaming\Temp

[2011.04.13 14:24:14 | 000,000,000 | ---D | M] -- C:\Users\Sicky Popp\AppData\Roaming\Thunderbird

[2011.04.13 21:03:34 | 000,000,000 | ---D | M] -- C:\Users\Sicky Popp\AppData\Roaming\TuneUp Software

[2011.10.05 18:07:40 | 000,000,000 | ---D | M] -- C:\Users\Sicky Popp\AppData\Roaming\Yellow Tools

 
 ========== Purity Check ==========

 

 

 
 ========== Custom Scans ==========

 
 < %SYSTEMDRIVE%\*. >

[2011.10.09 18:58:36 | 000,000,000 | -HSD | M] -- C:\$Recycle.Bin

[2012.10.29 17:55:14 | 000,000,000 | ---D | M] -- C:\AMD

[2011.04.13 13:07:48 | 000,000,000 | ---D | M] -- C:\ATI

[2011.04.13 13:49:46 | 000,000,000 | -HSD | M] -- C:\Boot

[2011.04.13 12:57:33 | 000,000,000 | -HSD | M] -- C:\Dokumente und Einstellungen

[2012.08.14 09:13:44 | 000,000,000 | ---D | M] -- C:\Fraps

[2009.07.14 04:20:08 | 000,000,000 | ---D | M] -- C:\PerfLogs

[2013.02.17 01:06:53 | 000,000,000 | R--D | M] -- C:\Program Files

[2013.02.17 02:00:07 | 000,000,000 | R--D | M] -- C:\Program Files (x86)

[2013.02.17 02:00:04 | 000,000,000 | -H-D | M] -- C:\ProgramData

[2011.04.13 12:57:33 | 000,000,000 | -HSD | M] -- C:\Programme

[2011.04.13 12:57:34 | 000,000,000 | -HSD | M] -- C:\Recovery

[2013.02.17 18:15:13 | 000,000,000 | -HSD | M] -- C:\System Volume Information

[2011.08.17 23:09:26 | 000,000,000 | ---D | M] -- C:\Temp

[2011.04.13 12:57:43 | 000,000,000 | R--D | M] -- C:\Users

[2013.02.17 17:46:31 | 000,000,000 | ---D | M] -- C:\Windows

 
 < %PROGRAMFILES%\*.exe >

 
 < %LOCALAPPDATA%\*.exe >

 
 < %systemroot%\*. /mp /s >

 
 < C:\Windows\system32\*.tsp >

[2009.07.14 02:14:11 | 000,030,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\hidphone.tsp

[2009.07.14 02:14:11 | 000,038,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\kmddsp.tsp

[2009.07.14 02:14:11 | 000,050,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\ndptsp.tsp

[2009.07.14 02:14:11 | 000,082,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\remotesp.tsp

[2010.11.20 03:16:54 | 000,281,088 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\unimdm.tsp

[2009.07.14 06:08:49 | 000,000,006 | -H-- | C] () -- C:\Windows\Tasks\SA.DAT

[2009.07.14 06:08:49 | 000,032,640 | ---- | C] () -- C:\Windows\Tasks\SCHEDLGU.TXT

[2011.11.19 13:16:15 | 000,001,088 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1303213111-1996448718-967368058-1001Core.job

[2011.11.19 13:16:16 | 000,001,140 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1303213111-1996448718-967368058-1001UA.job

[2011.12.14 13:29:50 | 000,001,114 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

[2011.12.14 13:29:51 | 000,001,118 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

[2012.04.02 20:21:37 | 000,000,884 | ---- | C] () -- C:\Windows\Tasks\Adobe Flash Player Updater.job

 
 < MD5 for: AGP440.SYS  >

[2009.07.14 02:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\SysNative\drivers\AGP440.sys

[2009.07.14 02:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\SysNative\DriverStore\FileRepository\machine.inf_amd64_neutral_a2f120466549d68b\AGP440.sys

[2009.07.14 02:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7600.16385_none_1607dee2d861e021\AGP440.sys

[2009.07.14 02:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7601.17514_none_1838f2aad55063bb\AGP440.sys

 
 < MD5 for: ATAPI.SYS  >

[2009.07.14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\drivers\atapi.sys

[2009.07.14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\DriverStore\FileRepository\mshdc.inf_amd64_neutral_aad30bdeec04ea5e\atapi.sys

[2009.07.14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7600.16385_none_392d19c13b3ad543\atapi.sys

[2009.07.14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7601.17514_none_3b5e2d89382958dd\atapi.sys

 
 < MD5 for: CNGAUDIT.DLL  >

[2009.07.14 02:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\SysWOW64\cngaudit.dll

[2009.07.14 02:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_e83a414890e8132b\cngaudit.dll

[2009.07.14 02:40:20 | 000,018,944 | ---- | M] (Microsoft Corporation) MD5=86FE1B1F8FD42CD0DB641AB1CDB13093 -- C:\Windows\SysNative\cngaudit.dll

[2009.07.14 02:40:20 | 000,018,944 | ---- | M] (Microsoft Corporation) MD5=86FE1B1F8FD42CD0DB641AB1CDB13093 -- C:\Windows\winsxs\amd64_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_4458dccc49458461\cngaudit.dll

 
 < MD5 for: EXPLORER.EXE  >

[2011.02.26 07:23:14 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=0862495E0C825893DB75EF44FAEA8E93 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16768_none_adc24107935a7e25\explorer.exe

[2011.02.26 06:19:21 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=0FB9C74046656D1579A64660AD67B746 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_ba87e574ddfe652d\explorer.exe

[2009.07.14 02:14:20 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=15BC38A7492BEFE831966ADB477CF76F -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_b7fe430bc7ce3761\explorer.exe

[2011.02.26 06:51:13 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=255CF508D7CFB10E0794D6AC93280BD8 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20910_none_b8ce9756e0b786a4\explorer.exe

[2011.02.26 06:33:07 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=2AF58D15EDC06EC6FDACCE1F19482BBF -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16768_none_b816eb59c7bb4020\explorer.exe

[2011.02.25 07:19:30 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 -- C:\Windows\explorer.exe

[2011.02.25 07:19:30 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_afa79dc39081d0ba\explorer.exe

[2011.02.26 07:14:34 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=3B69712041F3D63605529BD66DC00C48 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_b0333b22a99da332\explorer.exe

[2010.11.20 03:17:10 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_ba2f56d3c4bcbafb\explorer.exe

[2011.02.25 06:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\SysWOW64\explorer.exe

[2011.02.25 06:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_b9fc4815c4e292b5\explorer.exe

[2010.11.20 04:24:46 | 002,872,320 | ---- | M] (Microsoft Corporation) MD5=AC4C51EB24AA95B77F705AB159189E24 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_afdaac81905bf900\explorer.exe

[2009.07.14 02:39:10 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=C235A51CB740E45FFA0EBFB9BAFCDA64 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_ada998b9936d7566\explorer.exe

[2011.02.26 07:26:45 | 002,870,784 | ---- | M] (Microsoft Corporation) MD5=E38899074D4951D31B4040E994DD7C8D -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20910_none_ae79ed04ac56c4a9\explorer.exe

[2012.11.13 14:07:52 | 003,906,584 | ---- | M] (Safer-Networking Ltd.) MD5=E4A0900CF535888DDD85B10040CA3E34 -- C:\Program Files (x86)\Spybot - Search & Destroy 2\explorer.exe

 
 < MD5 for: IASTORV.SYS  >

[2010.11.20 04:33:40 | 000,410,496 | ---- | M] (Intel Corporation) MD5=3DF4395A7CF8B7A72A5F4606366B8C2D -- C:\Windows\SysNative\DriverStore\FileRepository\iastorv.inf_amd64_neutral_668286aa35d55928\iaStorV.sys

[2010.11.20 04:33:40 | 000,410,496 | ---- | M] (Intel Corporation) MD5=3DF4395A7CF8B7A72A5F4606366B8C2D -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7601.17514_none_0d3757e79e6784d0\iaStorV.sys

[2011.03.11 07:19:16 | 000,410,496 | ---- | M] (Intel Corporation) MD5=5B3DE7208E5000D5B451B9D290D2579C -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7601.21680_none_0d714416b7c182d5\iaStorV.sys

[2011.03.11 07:41:26 | 000,410,496 | ---- | M] (Intel Corporation) MD5=AAAF44DB3BD0B9D1FB6969B23ECC8366 -- C:\Windows\SysNative\drivers\iaStorV.sys

[2011.03.11 07:41:26 | 000,410,496 | ---- | M] (Intel Corporation) MD5=AAAF44DB3BD0B9D1FB6969B23ECC8366 -- C:\Windows\SysNative\DriverStore\FileRepository\iastorv.inf_amd64_neutral_0bcee2057afcc090\iaStorV.sys

[2011.03.11 07:41:26 | 000,410,496 | ---- | M] (Intel Corporation) MD5=AAAF44DB3BD0B9D1FB6969B23ECC8366 -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7601.17577_none_0cf9793d9e95787b\iaStorV.sys

[2011.03.11 07:23:00 | 000,410,496 | ---- | M] (Intel Corporation) MD5=B75E45C564E944A2657167D197AB29DA -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7600.16778_none_0b141c81a16e25e6\iaStorV.sys

[2011.03.11 07:25:49 | 000,410,496 | ---- | M] (Intel Corporation) MD5=BFDC9D75698800CFE4D1698BF2750EA2 -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7600.20921_none_0bccc8c8ba6985c1\iaStorV.sys

[2009.07.14 02:48:04 | 000,410,688 | ---- | M] (Intel Corporation) MD5=D83EFB6FD45DF9D55E9A1AFC63640D50 -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7600.16385_none_0b06441fa1790136\iaStorV.sys

 
 < MD5 for: NETLOGON.DLL  >

[2009.07.14 02:41:52 | 000,692,736 | ---- | M] (Microsoft Corporation) MD5=956D030D375F207B22FB111E06EF9C35 -- C:\Windows\winsxs\amd64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7600.16385_none_59aca8ea51aaeefe\netlogon.dll

[2010.11.20 04:27:24 | 000,695,808 | ---- | M] (Microsoft Corporation) MD5=AA339DD8BB128EF66660DFBBB59043D3 -- C:\Windows\SysNative\netlogon.dll

[2010.11.20 04:27:24 | 000,695,808 | ---- | M] (Microsoft Corporation) MD5=AA339DD8BB128EF66660DFBBB59043D3 -- C:\Windows\winsxs\amd64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7601.17514_none_5bddbcb24e997298\netlogon.dll

[2010.11.20 03:20:30 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\SysWOW64\netlogon.dll

[2010.11.20 03:20:30 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\winsxs\wow64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7601.17514_none_6632670482fa3493\netlogon.dll

[2009.07.14 02:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows\winsxs\wow64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7600.16385_none_6401533c860bb0f9\netlogon.dll

 
 < MD5 for: NVSTOR.SYS  >

[2009.07.14 02:45:45 | 000,167,488 | ---- | M] (NVIDIA Corporation) MD5=477DC4D6DEB99BE37084C9AC6D013DA1 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.16385_none_95cfb4ced8afab0e\nvstor.sys

[2011.03.11 07:23:06 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=6C1D5F70E7A6A3FD1C90D840EDC048B9 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.16778_none_95dd8d30d8a4cfbe\nvstor.sys

[2011.03.11 07:25:53 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=AE274836BA56518E279087363A781214 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.20921_none_96963977f1a02f99\nvstor.sys

[2011.03.11 07:19:21 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=D23C7E8566DA2B8A7C0DBBB761D54888 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.21680_none_983ab4c5eef82cad\nvstor.sys

[2011.03.11 07:41:34 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=DAB0E87525C10052BF65F06152F37E4A -- C:\Windows\SysNative\drivers\nvstor.sys

[2011.03.11 07:41:34 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=DAB0E87525C10052BF65F06152F37E4A -- C:\Windows\SysNative\DriverStore\FileRepository\nvraid.inf_amd64_neutral_0276fc3b3ea60d41\nvstor.sys

[2011.03.11 07:41:34 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=DAB0E87525C10052BF65F06152F37E4A -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.17577_none_97c2e9ecd5cc2253\nvstor.sys

[2010.11.20 04:33:50 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=F7CD50FE7139F07E77DA8AC8033D1832 -- C:\Windows\SysNative\DriverStore\FileRepository\nvraid.inf_amd64_neutral_dd659ed032d28a14\nvstor.sys

[2010.11.20 04:33:50 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=F7CD50FE7139F07E77DA8AC8033D1832 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.17514_none_9800c896d59e2ea8\nvstor.sys

 
 < MD5 for: SCECLI.DLL  >

[2009.07.14 02:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_9e577e55272d37b4\scecli.dll

[2009.07.14 02:41:53 | 000,232,448 | ---- | M] (Microsoft Corporation) MD5=398712DDDAEFB85EDF61DF6A07B65C79 -- C:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_9402d402f2cc75b9\scecli.dll

[2010.11.20 03:21:06 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\SysWOW64\scecli.dll

[2010.11.20 03:21:06 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_a088921d241bbb4e\scecli.dll

[2010.11.20 04:27:26 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- C:\Windows\SysNative\scecli.dll

[2010.11.20 04:27:26 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- C:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_9633e7caefbaf953\scecli.dll

 
 < MD5 for: USER32.DLL  >

[2010.11.20 03:08:58 | 000,833,024 | ---- | M] (Microsoft Corporation) MD5=5E0DB2D8B2750543CD2EBB9EA8E6CDD3 -- C:\Windows\SysWOW64\user32.dll

[2010.11.20 03:08:58 | 000,833,024 | ---- | M] (Microsoft Corporation) MD5=5E0DB2D8B2750543CD2EBB9EA8E6CDD3 -- C:\Windows\winsxs\wow64_microsoft-windows-user32_31bf3856ad364e35_6.1.7601.17514_none_35b31c02b85ccb6e\user32.dll

[2009.07.14 02:41:56 | 001,008,640 | ---- | M] (Microsoft Corporation) MD5=72D7B3EA16946E8F0CF7458150031CC6 -- C:\Windows\winsxs\amd64_microsoft-windows-user32_31bf3856ad364e35_6.1.7600.16385_none_292d5de8870d85d9\user32.dll

[2009.07.14 02:11:24 | 000,833,024 | ---- | M] (Microsoft Corporation) MD5=E8B0FFC209E504CB7E79FC24E6C085F0 -- C:\Windows\winsxs\wow64_microsoft-windows-user32_31bf3856ad364e35_6.1.7600.16385_none_3382083abb6e47d4\user32.dll

[2010.11.20 04:27:28 | 001,008,128 | ---- | M] (Microsoft Corporation) MD5=FE70103391A64039A921DBFFF9C7AB1B -- C:\Windows\SysNative\user32.dll

[2010.11.20 04:27:28 | 001,008,128 | ---- | M] (Microsoft Corporation) MD5=FE70103391A64039A921DBFFF9C7AB1B -- C:\Windows\winsxs\amd64_microsoft-windows-user32_31bf3856ad364e35_6.1.7601.17514_none_2b5e71b083fc0973\user32.dll

 
 < MD5 for: USERINIT.EXE  >

[2010.11.20 03:17:50 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\SysWOW64\userinit.exe

[2010.11.20 03:17:50 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe

[2009.07.14 02:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_dbff103933038d7c\userinit.exe

[2009.07.14 02:39:48 | 000,030,208 | ---- | M] (Microsoft Corporation) MD5=6F8F1376A13114CC10C0E69274F5A4DE -- C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_381dabbceb60feb2\userinit.exe

[2010.11.20 04:25:26 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\SysNative\userinit.exe

[2010.11.20 04:25:26 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_3a4ebf84e84f824c\userinit.exe

 
 < MD5 for: WINLOGON.EXE  >

[2010.11.20 04:25:32 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\SysNative\winlogon.exe

[2010.11.20 04:25:32 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_cde90685eb910636\winlogon.exe

[2009.07.14 02:39:52 | 000,389,120 | ---- | M] (Microsoft Corporation) MD5=132328DF455B0028F13BF0ABEE51A63A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_cbb7f2bdeea2829c\winlogon.exe

 
 < MD5 for: WS2IFSL.SYS  >

[2009.07.14 01:10:33 | 000,021,504 | ---- | M] (Microsoft Corporation) MD5=6BCC1D7D2FD2453957C5479A32364E52 -- C:\Windows\SysNative\drivers\ws2ifsl.sys

[2009.07.14 01:10:33 | 000,021,504 | ---- | M] (Microsoft Corporation) MD5=6BCC1D7D2FD2453957C5479A32364E52 -- C:\Windows\winsxs\amd64_microsoft-windows-w..rastructure-ws2ifsl_31bf3856ad364e35_6.1.7600.16385_none_ab7b927be17eace8\ws2ifsl.sys

 
 < %systemroot%\system32\drivers\*.sys /lockedfiles >

 
 < %systemroot%\System32\config\*.sav >

 
 < %systemroot%\system32\*.dll /lockedfiles >

 
 < %USERPROFILE%\*.* >

[2011.10.19 12:57:23 | 000,013,847 | ---- | M] () -- C:\Users\Sicky Popp\maZe EFX.efx

[2013.02.17 18:22:05 | 004,718,592 | -HS- | M] () -- C:\Users\Sicky Popp\ntuser.dat

[2013.02.17 18:22:05 | 000,262,144 | -HS- | M] () -- C:\Users\Sicky Popp\ntuser.dat.LOG1

[2011.04.13 12:57:45 | 000,000,000 | -HS- | M] () -- C:\Users\Sicky Popp\ntuser.dat.LOG2

[2011.04.13 13:09:22 | 000,065,536 | -HS- | M] () -- C:\Users\Sicky Popp\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf

[2011.04.13 13:09:22 | 000,524,288 | -HS- | M] () -- C:\Users\Sicky Popp\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms

[2011.04.13 13:09:22 | 000,524,288 | -HS- | M] () -- C:\Users\Sicky Popp\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms

[2012.10.03 01:47:16 | 000,065,536 | -HS- | M] () -- C:\Users\Sicky Popp\ntuser.dat{4ae386b5-0ca8-11e2-af2c-0019668803f8}.TM.blf

[2012.10.03 01:47:16 | 000,524,288 | -HS- | M] () -- C:\Users\Sicky Popp\ntuser.dat{4ae386b5-0ca8-11e2-af2c-0019668803f8}.TMContainer00000000000000000001.regtrans-ms

[2012.10.03 01:47:16 | 000,524,288 | -HS- | M] () -- C:\Users\Sicky Popp\ntuser.dat{4ae386b5-0ca8-11e2-af2c-0019668803f8}.TMContainer00000000000000000002.regtrans-ms

[2011.04.13 12:57:45 | 000,000,020 | -HS- | M] () -- C:\Users\Sicky Popp\ntuser.ini

 
 < %USERPROFILE%\Local Settings\Temp\*.exe >

 
 < %USERPROFILE%\Local Settings\Temp\*.dll >

 
 < %USERPROFILE%\Application Data\*.exe >

 
 < HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems|Windows /rs >

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems\\Required: DebugWindows [binary data]

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems\\Windows: %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16

 
 ========== Alternate Data Streams ==========

 

@Alternate Data Stream - 1343 bytes -> C:\Users\Sicky Popp\AppData\Local\Temp:BWdi8VCf4lo5LUuhdKgzZ
 

< End of report >

--- --- ---

bekomm ich noch ne Antwort auf meine Frage?

ups sry, total übersehen...

ich hab: adwcleaner und security check drübber laufen lassen...dann viel mir noch add aware ein von lavasoft...was aber iwie mittlerweile n ganz andere programm ist wie ich es in erinnerung habe...habs dann gestoppt und gelöscht

ok, das adwcleaner log hätt ich gern.
das alte meine ich.
danach:
Downloade dir bitte

TDSSKiller.exe und speichere diese Datei auf dem Desktop

Starte die TDSSKiller.exe - Einstellen wie in der Anleitung zu TDSSKiller beschrieben.
Drücke Start Scan
Sollten infizierte Objekte gefunden werden, wähle keinesfalls Cure. Wähle Skip und klicke auf Continue.
TDSSKiller wird eine Logfile auf deinem Systemlaufwerk speichern (Meistens C:\)
Als Beispiel: C:\TDSSKiller.<Version_Datum_Uhrzeit>log.txt

Poste den Inhalt bitte in jedem Fall hier in deinen Thread.

AdwCleaner Logfile:

Code:

# AdwCleaner v2.112 - Datei am 17/02/2013 um 01:21:51 erstellt

# Aktualisiert am 10/02/2013 von Xplode

# Betriebssystem : Windows 7 Professional Service Pack 1 (64 bits)

# Benutzer : Sicky Popp - TOWEROFPOWER

# Bootmodus : Normal

# Ausgeführt unter : C:\Users\Sicky Popp\Desktop\adwcleaner0.exe

# Option [Löschen]
 
 

**** [Dienste] ****
 
 

***** [Dateien / Ordner] *****
 

Datei Gelöscht : C:\Users\Sicky Popp\AppData\Roaming\Microsoft\Windows\Start Menu\Startfenster.lnk

Ordner Gelöscht : C:\Program Files (x86)\Common Files\Plasmoo

Ordner Gelöscht : C:\ProgramData\Ask

Ordner Gelöscht : C:\ProgramData\boost_interprocess

Ordner Gelöscht : C:\Users\Sicky Popp\AppData\Local\APN

Ordner Gelöscht : C:\Users\Sicky Popp\AppData\LocalLow\boost_interprocess
 

***** [Registrierungsdatenbank] *****
 

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apntoolbarinstaller_RASAPI32

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apntoolbarinstaller_RASMANCS
 

***** [Internet Browser] *****
 

-\\ Internet Explorer v9.0.8112.16464
 

Ersetzt : [HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://www.startfenster.com --> hxxp://www.google.com
 

-\\ Google Chrome v24.0.1312.57
 

Datei : C:\Users\Sicky Popp\AppData\Local\Google\Chrome\User Data\Default\Preferences
 

Gelöscht [l.20] : urls_to_restore_on_startup = [ "hxxp://www.startfenster.com" ]

Gelöscht [l.2929] : urls_to_restore_on_startup = [ "hxxp://www.startfenster.com" ]
 

*************************
 

AdwCleaner[S1].txt - [1508 octets] - [17/02/2013 01:21:51]
 

########## EOF - C:\AdwCleaner[S1].txt - [1568 octets] ##########

--- --- ---

http://i60.photobucket.com/albums/h7...ps344524ff.jpg

das bekomme ich beim dem tdss killer, klicke ich auf sontinue, komme ich in den startscreen

ja aber das log benötige ich, wo das zu finden ist, steht oben in der Anleitung

19:20:02.0078 4504 TDSS rootkit removing tool 2.8.16.0 Feb 11 2013 18:50:42
19:20:02.0703 4504 ============================================================
19:20:02.0703 4504 Current date / time: 2013/02/17 19:20:02.0703
19:20:02.0703 4504 SystemInfo:
19:20:02.0703 4504
19:20:02.0703 4504 OS Version: 6.1.7601 ServicePack: 1.0
19:20:02.0703 4504 Product type: Workstation
19:20:02.0703 4504 ComputerName: TOWEROFPOWER
19:20:02.0703 4504 UserName: Sicky Popp
19:20:02.0703 4504 Windows directory: C:\Windows
19:20:02.0703 4504 System windows directory: C:\Windows
19:20:02.0703 4504 Running under WOW64
19:20:02.0703 4504 Processor architecture: Intel x64
19:20:02.0703 4504 Number of processors: 2
19:20:02.0703 4504 Page size: 0x1000
19:20:02.0703 4504 Boot type: Normal boot
19:20:02.0703 4504 ============================================================
19:20:08.0421 4504 Drive \Device\Harddisk0\DR0 - Size: 0x25433D6000 (149.05 Gb), SectorSize: 0x200, Cylinders: 0x4C01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
19:20:08.0437 4504 Drive \Device\Harddisk1\DR1 - Size: 0x132C570000 (76.69 Gb), SectorSize: 0x200, Cylinders: 0x271B, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
19:20:08.0453 4504 Drive \Device\Harddisk2\DR2 - Size: 0x3A38B2E000 (232.89 Gb), SectorSize: 0x200, Cylinders: 0x76C1, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
19:20:08.0515 4504 ============================================================
19:20:08.0515 4504 \Device\Harddisk0\DR0:
19:20:08.0515 4504 MBR partitions:
19:20:08.0515 4504 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x7530462
19:20:08.0531 4504 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x75304E0, BlocksNum 0x61A7927
19:20:08.0546 4504 \Device\Harddisk0\DR0\Partition3: MBR, Type 0x7, StartLBA 0xD6D7E46, BlocksNum 0x533CDBA
19:20:08.0546 4504 \Device\Harddisk1\DR1:
19:20:08.0546 4504 MBR partitions:
19:20:08.0546 4504 \Device\Harddisk1\DR1\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x2711637
19:20:08.0562 4504 \Device\Harddisk1\DR1\Partition2: MBR, Type 0x7, StartLBA 0x27116B5, BlocksNum 0x3A962B1
19:20:08.0578 4504 \Device\Harddisk1\DR1\Partition3: MBR, Type 0x7, StartLBA 0x61A79A5, BlocksNum 0x37B4CF5
19:20:08.0578 4504 \Device\Harddisk2\DR2:
19:20:08.0609 4504 MBR partitions:
19:20:08.0609 4504 \Device\Harddisk2\DR2\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x10E713B5
19:20:08.0625 4504 \Device\Harddisk2\DR2\Partition2: MBR, Type 0x7, StartLBA 0x10E71433, BlocksNum 0xC34F28D
19:20:08.0625 4504 ============================================================
19:20:08.0687 4504 C: <-> \Device\Harddisk2\DR2\Partition1
19:20:08.0703 4504 D: <-> \Device\Harddisk0\DR0\Partition1
19:20:08.0750 4504 E: <-> \Device\Harddisk1\DR1\Partition1
19:20:08.0843 4504 F: <-> \Device\Harddisk2\DR2\Partition2
19:20:08.0875 4504 G: <-> \Device\Harddisk0\DR0\Partition2
19:20:08.0890 4504 H: <-> \Device\Harddisk0\DR0\Partition3
19:20:08.0921 4504 I: <-> \Device\Harddisk1\DR1\Partition2
19:20:08.0953 4504 J: <-> \Device\Harddisk1\DR1\Partition3
19:20:08.0953 4504 ============================================================
19:20:08.0953 4504 Initialize success
19:20:08.0953 4504 ============================================================
19:20:18.0656 4640 ============================================================
19:20:18.0656 4640 Scan started
19:20:18.0656 4640 Mode: Manual; SigCheck; TDLFS;
19:20:18.0656 4640 ============================================================
19:20:22.0406 4640 ================ Scan system memory ========================
19:20:22.0406 4640 System memory - ok
19:20:22.0406 4640 ================ Scan services =============================
19:20:22.0781 4640 [ A87D604AEA360176311474C87A63BB88 ] 1394ohci C:\Windows\system32\drivers\1394ohci.sys
19:20:23.0390 4640 1394ohci - ok
19:20:23.0578 4640 [ B33CF4DE909A5B30F526D82053A63C8E ] ABBYY.Licensing.FineReader.Sprint.9.0 C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe
19:20:23.0625 4640 ABBYY.Licensing.FineReader.Sprint.9.0 - ok
19:20:23.0671 4640 [ D81D9E70B8A6DD14D42D7B4EFA65D5F2 ] ACPI C:\Windows\system32\drivers\ACPI.sys
19:20:23.0687 4640 ACPI - ok
19:20:23.0781 4640 [ 99F8E788246D495CE3794D7E7821D2CA ] AcpiPmi C:\Windows\system32\drivers\acpipmi.sys
19:20:23.0859 4640 AcpiPmi - ok
19:20:23.0906 4640 [ 4AE327C9C375D985FF2A2AAB92765218 ] Adobe LM Service C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
19:20:23.0937 4640 Adobe LM Service ( UnsignedFile.Multi.Generic ) - warning
19:20:23.0937 4640 Adobe LM Service - detected UnsignedFile.Multi.Generic (1)
19:20:24.0031 4640 [ 11A52CF7B265631DEEB24C6149309EFF ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
19:20:24.0031 4640 AdobeARMservice - ok
19:20:24.0156 4640 [ EC807244904FA170C299AB06D87FBDBE ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
19:20:24.0187 4640 AdobeFlashPlayerUpdateSvc - ok
19:20:24.0281 4640 [ 2F6B34B83843F0C5118B63AC634F5BF4 ] adp94xx C:\Windows\system32\DRIVERS\adp94xx.sys
19:20:24.0343 4640 adp94xx - ok
19:20:24.0406 4640 [ 597F78224EE9224EA1A13D6350CED962 ] adpahci C:\Windows\system32\DRIVERS\adpahci.sys
19:20:24.0453 4640 adpahci - ok
19:20:24.0500 4640 [ E109549C90F62FB570B9540C4B148E54 ] adpu320 C:\Windows\system32\DRIVERS\adpu320.sys
19:20:24.0515 4640 adpu320 - ok
19:20:24.0546 4640 [ 4B78B431F225FD8624C5655CB1DE7B61 ] AeLookupSvc C:\Windows\System32\aelupsvc.dll
19:20:24.0796 4640 AeLookupSvc - ok
19:20:24.0828 4640 [ 1C7857B62DE5994A75B054A9FD4C3825 ] AFD C:\Windows\system32\drivers\afd.sys
19:20:24.0906 4640 AFD - ok
19:20:24.0953 4640 [ 608C14DBA7299D8CB6ED035A68A15799 ] agp440 C:\Windows\system32\drivers\agp440.sys
19:20:24.0968 4640 agp440 - ok
19:20:25.0000 4640 [ 3290D6946B5E30E70414990574883DDB ] ALG C:\Windows\System32\alg.exe
19:20:25.0078 4640 ALG - ok
19:20:25.0093 4640 [ 5812713A477A3AD7363C7438CA2EE038 ] aliide C:\Windows\system32\drivers\aliide.sys
19:20:25.0125 4640 aliide - ok
19:20:25.0156 4640 [ 4EAAAAB8759644D572522FBCDD196A13 ] AMD External Events Utility C:\Windows\system32\atiesrxx.exe
19:20:25.0234 4640 AMD External Events Utility - ok
19:20:25.0265 4640 [ 1FF8B4431C353CE385C875F194924C0C ] amdide C:\Windows\system32\drivers\amdide.sys
19:20:25.0281 4640 amdide - ok
19:20:25.0312 4640 [ 7024F087CFF1833A806193EF9D22CDA9 ] AmdK8 C:\Windows\system32\DRIVERS\amdk8.sys
19:20:25.0359 4640 AmdK8 - ok
19:20:25.0968 4640 [ 22A14DF59FB8D0BE918C597988AF4296 ] amdkmdag C:\Windows\system32\DRIVERS\atikmdag.sys
19:20:26.0265 4640 amdkmdag - ok
19:20:26.0312 4640 [ EE22D3ED6D55A855E709F811CCCA97ED ] amdkmdap C:\Windows\system32\DRIVERS\atikmpag.sys
19:20:26.0359 4640 amdkmdap - ok
19:20:26.0390 4640 [ 1E56388B3FE0D031C44144EB8C4D6217 ] AmdPPM C:\Windows\system32\DRIVERS\amdppm.sys
19:20:26.0453 4640 AmdPPM - ok
19:20:26.0484 4640 [ D4121AE6D0C0E7E13AA221AA57EF2D49 ] amdsata C:\Windows\system32\drivers\amdsata.sys
19:20:26.0500 4640 amdsata - ok
19:20:26.0515 4640 [ F67F933E79241ED32FF46A4F29B5120B ] amdsbs C:\Windows\system32\DRIVERS\amdsbs.sys
19:20:26.0531 4640 amdsbs - ok
19:20:26.0546 4640 [ 540DAF1CEA6094886D72126FD7C33048 ] amdxata C:\Windows\system32\drivers\amdxata.sys
19:20:26.0562 4640 amdxata - ok
19:20:26.0578 4640 [ 4DE0D5D747A73797C95A97DCCE5018B5 ] androidusb C:\Windows\system32\Drivers\ssadadb.sys
19:20:26.0875 4640 androidusb - ok
19:20:26.0921 4640 [ 89A69C3F2F319B43379399547526D952 ] AppID C:\Windows\system32\drivers\appid.sys
19:20:27.0109 4640 AppID - ok
19:20:27.0125 4640 [ 0BC381A15355A3982216F7172F545DE1 ] AppIDSvc C:\Windows\System32\appidsvc.dll
19:20:27.0171 4640 AppIDSvc - ok
19:20:27.0218 4640 [ 3977D4A871CA0D4F2ED1E7DB46829731 ] Appinfo C:\Windows\System32\appinfo.dll
19:20:27.0265 4640 Appinfo - ok
19:20:27.0343 4640 [ A5299D04ED225D64CF07A568A3E1BF8C ] Apple Mobile Device C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
19:20:27.0359 4640 Apple Mobile Device - ok
19:20:27.0406 4640 [ 4ABA3E75A76195A3E38ED2766C962899 ] AppMgmt C:\Windows\System32\appmgmts.dll
19:20:27.0468 4640 AppMgmt - ok
19:20:27.0500 4640 [ C484F8CEB1717C540242531DB7845C4E ] arc C:\Windows\system32\DRIVERS\arc.sys
19:20:27.0515 4640 arc - ok
19:20:27.0531 4640 [ 019AF6924AEFE7839F61C830227FE79C ] arcsas C:\Windows\system32\DRIVERS\arcsas.sys
19:20:27.0546 4640 arcsas - ok
19:20:27.0968 4640 [ 9217D874131AE6FF8F642F124F00A555 ] aspnet_state C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
19:20:28.0000 4640 aspnet_state - ok
19:20:28.0031 4640 [ 4FCAEF0C5BE7629AEB878998E0FE959B ] aswFsBlk C:\Windows\system32\drivers\aswFsBlk.sys
19:20:28.0046 4640 aswFsBlk - ok
19:20:28.0078 4640 [ B50CDD87772D6A11CB90924AAD399DF8 ] aswMonFlt C:\Windows\system32\drivers\aswMonFlt.sys
19:20:28.0078 4640 aswMonFlt - ok
19:20:28.0109 4640 [ 57768C7DB4681F2510F247F82EF31D4F ] aswRdr C:\Windows\System32\Drivers\aswrdr2.sys
19:20:28.0125 4640 aswRdr - ok
19:20:28.0328 4640 [ E71D826A1F3CE9C9DE3E77F2D02AFFBF ] aswSnx C:\Windows\system32\drivers\aswSnx.sys
19:20:28.0390 4640 aswSnx - ok
19:20:28.0484 4640 [ 538A32E2C99BF073D4CA76C30BEDAA60 ] aswSP C:\Windows\system32\drivers\aswSP.sys
19:20:28.0500 4640 aswSP - ok
19:20:28.0531 4640 [ 6EDC79D73745FD44C41B55B2D13D0B70 ] aswTdi C:\Windows\system32\drivers\aswTdi.sys
19:20:28.0593 4640 aswTdi - ok
19:20:28.0625 4640 [ 769765CE2CC62867468CEA93969B2242 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys
19:20:28.0703 4640 AsyncMac - ok
19:20:28.0750 4640 [ 02062C0B390B7729EDC9E69C680A6F3C ] atapi C:\Windows\system32\drivers\atapi.sys
19:20:28.0765 4640 atapi - ok
19:20:28.0828 4640 [ 437F55435623D4D54D36197F5AD8B435 ] AtiHDAudioService C:\Windows\system32\drivers\AtihdW76.sys
19:20:28.0875 4640 AtiHDAudioService - ok
19:20:28.0937 4640 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
19:20:29.0015 4640 AudioEndpointBuilder - ok
19:20:29.0140 4640 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioSrv C:\Windows\System32\Audiosrv.dll
19:20:29.0171 4640 AudioSrv - ok
19:20:29.0234 4640 [ 332BBC97F90440E46DD621ADC2DC512A ] automap C:\Windows\system32\DRIVERS\automap.sys
19:20:29.0250 4640 automap - ok
19:20:29.0312 4640 [ 8FA553E9AE69808D99C164733A0F9590 ] avast! Antivirus C:\Program Files\AVAST Software\Avast\AvastSvc.exe
19:20:29.0328 4640 avast! Antivirus - ok
19:20:29.0359 4640 [ A6BF31A71B409DFA8CAC83159E1E2AFF ] AxInstSV C:\Windows\System32\AxInstSV.dll
19:20:29.0437 4640 AxInstSV - ok
19:20:29.0468 4640 [ 3E5B191307609F7514148C6832BB0842 ] b06bdrv C:\Windows\system32\DRIVERS\bxvbda.sys
19:20:29.0531 4640 b06bdrv - ok
19:20:29.0562 4640 [ B5ACE6968304A3900EEB1EBFD9622DF2 ] b57nd60a C:\Windows\system32\DRIVERS\b57nd60a.sys
19:20:29.0593 4640 b57nd60a - ok
19:20:29.0656 4640 [ FDE360167101B4E45A96F939F388AEB0 ] BDESVC C:\Windows\System32\bdesvc.dll
19:20:29.0703 4640 BDESVC - ok
19:20:29.0718 4640 [ 16A47CE2DECC9B099349A5F840654746 ] Beep C:\Windows\system32\drivers\Beep.sys
19:20:29.0765 4640 Beep - ok
19:20:29.0859 4640 [ B62ABDC39B36184B6B8B9E71A8685F52 ] BEHRINGER_2902 C:\Windows\system32\Drivers\BUSB2902.sys
19:20:29.0890 4640 BEHRINGER_2902 - ok
19:20:29.0937 4640 [ 82974D6A2FD19445CC5171FC378668A4 ] BFE C:\Windows\System32\bfe.dll
19:20:30.0000 4640 BFE - ok
19:20:30.0140 4640 [ 1EA7969E3271CBC59E1730697DC74682 ] BITS C:\Windows\System32\qmgr.dll
19:20:30.0203 4640 BITS - ok
19:20:30.0234 4640 [ 61583EE3C3A17003C4ACD0475646B4D3 ] blbdrive C:\Windows\system32\DRIVERS\blbdrive.sys
19:20:30.0281 4640 blbdrive - ok
19:20:30.0390 4640 [ EBBCD5DFBB1DE70E8F4AF8FA59E401FD ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe
19:20:30.0421 4640 Bonjour Service - ok
19:20:30.0453 4640 [ 6C02A83164F5CC0A262F4199F0871CF5 ] bowser C:\Windows\system32\DRIVERS\bowser.sys
19:20:30.0468 4640 bowser - ok
19:20:30.0500 4640 [ F09EEE9EDC320B5E1501F749FDE686C8 ] BrFiltLo C:\Windows\system32\DRIVERS\BrFiltLo.sys
19:20:30.0562 4640 BrFiltLo - ok
19:20:30.0578 4640 [ B114D3098E9BDB8BEA8B053685831BE6 ] BrFiltUp C:\Windows\system32\DRIVERS\BrFiltUp.sys
19:20:30.0593 4640 BrFiltUp - ok
19:20:30.0609 4640 [ 05F5A0D14A2EE1D8255C2AA0E9E8E694 ] Browser C:\Windows\System32\browser.dll
19:20:30.0656 4640 Browser - ok
19:20:30.0687 4640 [ 43BEA8D483BF1870F018E2D02E06A5BD ] Brserid C:\Windows\System32\Drivers\Brserid.sys
19:20:30.0750 4640 Brserid - ok
19:20:30.0765 4640 [ A6ECA2151B08A09CACECA35C07F05B42 ] BrSerWdm C:\Windows\System32\Drivers\BrSerWdm.sys
19:20:30.0812 4640 BrSerWdm - ok
19:20:30.0843 4640 [ B79968002C277E869CF38BD22CD61524 ] BrUsbMdm C:\Windows\System32\Drivers\BrUsbMdm.sys
19:20:30.0875 4640 BrUsbMdm - ok
19:20:30.0890 4640 [ A87528880231C54E75EA7A44943B38BF ] BrUsbSer C:\Windows\System32\Drivers\BrUsbSer.sys
19:20:30.0921 4640 BrUsbSer - ok
19:20:30.0953 4640 [ CF98190A94F62E405C8CB255018B2315 ] BthEnum C:\Windows\system32\DRIVERS\BthEnum.sys
19:20:31.0015 4640 BthEnum - ok
19:20:31.0046 4640 [ 9DA669F11D1F894AB4EB69BF546A42E8 ] BTHMODEM C:\Windows\system32\DRIVERS\bthmodem.sys
19:20:31.0078 4640 BTHMODEM - ok
19:20:31.0125 4640 [ 02DD601B708DD0667E1331FA8518E9FF ] BthPan C:\Windows\system32\DRIVERS\bthpan.sys
19:20:31.0156 4640 BthPan - ok
19:20:31.0187 4640 [ 738D0E9272F59EB7A1449C3EC118E6C4 ] BTHPORT C:\Windows\system32\Drivers\BTHport.sys
19:20:31.0234 4640 BTHPORT - ok
19:20:31.0265 4640 [ 95F9C2976059462CBBF227F7AAB10DE9 ] bthserv C:\Windows\system32\bthserv.dll
19:20:31.0312 4640 bthserv - ok
19:20:31.0359 4640 [ F188B7394D81010767B6DF3178519A37 ] BTHUSB C:\Windows\system32\Drivers\BTHUSB.sys
19:20:31.0406 4640 BTHUSB - ok
19:20:31.0453 4640 [ AEC85FF9A00DD9EE7605AFC66949F228 ] BUSB_AUDIO_WDM C:\Windows\system32\drivers\busbwdm.sys
19:20:31.0453 4640 BUSB_AUDIO_WDM - ok
19:20:31.0500 4640 [ B8BD2BB284668C84865658C77574381A ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys
19:20:31.0562 4640 cdfs - ok
19:20:31.0609 4640 [ F036CE71586E93D94DAB220D7BDF4416 ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys
19:20:31.0640 4640 cdrom - ok
19:20:31.0671 4640 [ F17D1D393BBC69C5322FBFAFACA28C7F ] CertPropSvc C:\Windows\System32\certprop.dll
19:20:31.0718 4640 CertPropSvc - ok
19:20:31.0765 4640 [ D7CD5C4E1B71FA62050515314CFB52CF ] circlass C:\Windows\system32\DRIVERS\circlass.sys
19:20:31.0812 4640 circlass - ok
19:20:31.0875 4640 [ FE1EC06F2253F691FE36217C592A0206 ] CLFS C:\Windows\system32\CLFS.sys
19:20:31.0906 4640 CLFS - ok
19:20:31.0968 4640 [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
19:20:31.0984 4640 clr_optimization_v2.0.50727_32 - ok
19:20:32.0015 4640 [ D1CEEA2B47CB998321C579651CE3E4F8 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
19:20:32.0031 4640 clr_optimization_v2.0.50727_64 - ok
19:20:32.0078 4640 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
19:20:32.0171 4640 clr_optimization_v4.0.30319_32 - ok
19:20:32.0203 4640 [ C6F9AF94DCD58122A4D7E89DB6BED29D ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
19:20:32.0218 4640 clr_optimization_v4.0.30319_64 - ok
19:20:32.0250 4640 [ 0840155D0BDDF1190F84A663C284BD33 ] CmBatt C:\Windows\system32\DRIVERS\CmBatt.sys
19:20:32.0281 4640 CmBatt - ok
19:20:32.0296 4640 [ E19D3F095812725D88F9001985B94EDD ] cmdide C:\Windows\system32\drivers\cmdide.sys
19:20:32.0312 4640 cmdide - ok
19:20:32.0406 4640 [ AAFCB52FE0037207FB6FBEA070D25EFE ] CNG C:\Windows\system32\Drivers\cng.sys
19:20:32.0484 4640 CNG - ok
19:20:32.0515 4640 [ 102DE219C3F61415F964C88E9085AD14 ] Compbatt C:\Windows\system32\DRIVERS\compbatt.sys
19:20:32.0531 4640 Compbatt - ok
19:20:32.0546 4640 [ 03EDB043586CCEBA243D689BDDA370A8 ] CompositeBus C:\Windows\system32\drivers\CompositeBus.sys
19:20:32.0578 4640 CompositeBus - ok
19:20:32.0593 4640 COMSysApp - ok
19:20:32.0609 4640 [ 1C827878A998C18847245FE1F34EE597 ] crcdisk C:\Windows\system32\DRIVERS\crcdisk.sys
19:20:32.0625 4640 crcdisk - ok
19:20:32.0656 4640 [ 9C01375BE382E834CC26D1B7EAF2C4FE ] CryptSvc C:\Windows\system32\cryptsvc.dll
19:20:32.0703 4640 CryptSvc - ok
19:20:32.0734 4640 [ 54DA3DFD29ED9F1619B6F53F3CE55E49 ] CSC C:\Windows\system32\drivers\csc.sys
19:20:32.0796 4640 CSC - ok
19:20:32.0828 4640 [ 3AB183AB4D2C79DCF459CD2C1266B043 ] CscService C:\Windows\System32\cscsvc.dll
19:20:32.0890 4640 CscService - ok
19:20:32.0937 4640 [ 5C627D1B1138676C0A7AB2C2C190D123 ] DcomLaunch C:\Windows\system32\rpcss.dll
19:20:33.0000 4640 DcomLaunch - ok
19:20:33.0046 4640 [ 3CEC7631A84943677AA8FA8EE5B6B43D ] defragsvc C:\Windows\System32\defragsvc.dll
19:20:33.0109 4640 defragsvc - ok
19:20:33.0156 4640 [ 71D9CCEE8A3A70BBCE3E76B7B06A4784 ] DELTAII C:\Windows\system32\DRIVERS\MAudioDelta.sys
19:20:33.0171 4640 DELTAII - ok
19:20:33.0218 4640 [ 9BB2EF44EAA163B29C4A4587887A0FE4 ] DfsC C:\Windows\system32\Drivers\dfsc.sys
19:20:33.0265 4640 DfsC - ok
19:20:33.0296 4640 [ 43D808F5D9E1A18E5EEB5EBC83969E4E ] Dhcp C:\Windows\system32\dhcpcore.dll
19:20:33.0343 4640 Dhcp - ok
19:20:33.0359 4640 [ 13096B05847EC78F0977F2C0F79E9AB3 ] discache C:\Windows\system32\drivers\discache.sys
19:20:33.0406 4640 discache - ok
19:20:33.0437 4640 [ 9819EEE8B5EA3784EC4AF3B137A5244C ] Disk C:\Windows\system32\DRIVERS\disk.sys
19:20:33.0453 4640 Disk - ok
19:20:33.0468 4640 [ 16835866AAA693C7D7FCEBA8FFF706E4 ] Dnscache C:\Windows\System32\dnsrslvr.dll
19:20:33.0531 4640 Dnscache - ok
19:20:33.0562 4640 [ B1FB3DDCA0FDF408750D5843591AFBC6 ] dot3svc C:\Windows\System32\dot3svc.dll
19:20:33.0625 4640 dot3svc - ok
19:20:33.0671 4640 [ B26F4F737E8F9DF4F31AF6CF31D05820 ] DPS C:\Windows\system32\dps.dll
19:20:33.0718 4640 DPS - ok
19:20:33.0750 4640 [ 9B19F34400D24DF84C858A421C205754 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys
19:20:33.0781 4640 drmkaud - ok
19:20:33.0828 4640 [ F5BEE30450E18E6B83A5012C100616FD ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys
19:20:33.0859 4640 DXGKrnl - ok
19:20:33.0875 4640 [ E2DDA8726DA9CB5B2C4000C9018A9633 ] EapHost C:\Windows\System32\eapsvc.dll
19:20:33.0921 4640 EapHost - ok
19:20:34.0109 4640 [ DC5D737F51BE844D8C82C695EB17372F ] ebdrv C:\Windows\system32\DRIVERS\evbda.sys
19:20:34.0250 4640 ebdrv - ok
19:20:34.0265 4640 [ C118A82CD78818C29AB228366EBF81C3 ] EFS C:\Windows\System32\lsass.exe
19:20:34.0328 4640 EFS - ok
19:20:34.0484 4640 [ C4002B6B41975F057D98C439030CEA07 ] ehRecvr C:\Windows\ehome\ehRecvr.exe
19:20:34.0562 4640 ehRecvr - ok
19:20:34.0578 4640 [ 4705E8EF9934482C5BB488CE28AFC681 ] ehSched C:\Windows\ehome\ehsched.exe
19:20:34.0625 4640 ehSched - ok
19:20:34.0671 4640 [ 0E5DA5369A0FCAEA12456DD852545184 ] elxstor C:\Windows\system32\DRIVERS\elxstor.sys
19:20:34.0687 4640 elxstor - ok
19:20:34.0750 4640 [ ABDD5AD016AFFD34AD40E944CE94BF59 ] EpsonBidirectionalService C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBSVC.exe
19:20:34.0765 4640 EpsonBidirectionalService ( UnsignedFile.Multi.Generic ) - warning
19:20:34.0765 4640 EpsonBidirectionalService - detected UnsignedFile.Multi.Generic (1)
19:20:34.0828 4640 [ 7C5BFAAC8DCE7292B0C04EBF892E71F9 ] EPSON_EB_RPCV4_04 C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50STB.EXE
19:20:34.0859 4640 EPSON_EB_RPCV4_04 ( UnsignedFile.Multi.Generic ) - warning
19:20:34.0859 4640 EPSON_EB_RPCV4_04 - detected UnsignedFile.Multi.Generic (1)
19:20:34.0890 4640 [ 194E8100D57FC13BEF88129BAAD07E46 ] EPSON_PM_RPCV4_04 C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50RPB.EXE
19:20:34.0906 4640 EPSON_PM_RPCV4_04 - ok
19:20:34.0937 4640 [ 34A3C54752046E79A126E15C51DB409B ] ErrDev C:\Windows\system32\drivers\errdev.sys
19:20:34.0953 4640 ErrDev - ok
19:20:35.0000 4640 [ 4166F82BE4D24938977DD1746BE9B8A0 ] EventSystem C:\Windows\system32\es.dll
19:20:35.0046 4640 EventSystem - ok
19:20:35.0078 4640 [ A510C654EC00C1E9BDD91EEB3A59823B ] exfat C:\Windows\system32\drivers\exfat.sys
19:20:35.0156 4640 exfat - ok
19:20:35.0187 4640 [ 0ADC83218B66A6DB380C330836F3E36D ] fastfat C:\Windows\system32\drivers\fastfat.sys
19:20:35.0234 4640 fastfat - ok
19:20:35.0281 4640 [ DBEFD454F8318A0EF691FDD2EAAB44EB ] Fax C:\Windows\system32\fxssvc.exe
19:20:35.0312 4640 Fax - ok
19:20:35.0328 4640 [ D765D19CD8EF61F650C384F62FAC00AB ] fdc C:\Windows\system32\DRIVERS\fdc.sys
19:20:35.0359 4640 fdc - ok
19:20:35.0390 4640 [ 0438CAB2E03F4FB61455A7956026FE86 ] fdPHost C:\Windows\system32\fdPHost.dll
19:20:35.0421 4640 fdPHost - ok
19:20:35.0437 4640 [ 802496CB59A30349F9A6DD22D6947644 ] FDResPub C:\Windows\system32\fdrespub.dll
19:20:35.0500 4640 FDResPub - ok
19:20:35.0531 4640 [ 655661BE46B5F5F3FD454E2C3095B930 ] FileInfo C:\Windows\system32\drivers\fileinfo.sys
19:20:35.0546 4640 FileInfo - ok
19:20:35.0562 4640 [ 5F671AB5BC87EEA04EC38A6CD5962A47 ] Filetrace C:\Windows\system32\drivers\filetrace.sys
19:20:35.0609 4640 Filetrace - ok
19:20:35.0609 4640 [ C172A0F53008EAEB8EA33FE10E177AF5 ] flpydisk C:\Windows\system32\DRIVERS\flpydisk.sys
19:20:35.0625 4640 flpydisk - ok
19:20:35.0671 4640 [ DA6B67270FD9DB3697B20FCE94950741 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys
19:20:35.0687 4640 FltMgr - ok
19:20:35.0812 4640 [ 5C4CB4086FB83115B153E47ADD961A0C ] FontCache C:\Windows\system32\FntCache.dll
19:20:35.0906 4640 FontCache - ok
19:20:35.0968 4640 [ A8B7F3818AB65695E3A0BB3279F6DCE6 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
19:20:35.0968 4640 FontCache3.0.0.0 - ok
19:20:36.0031 4640 [ D43703496149971890703B4B1B723EAC ] FsDepends C:\Windows\system32\drivers\FsDepends.sys
19:20:36.0046 4640 FsDepends - ok
19:20:36.0062 4640 [ 6BD9295CC032DD3077C671FCCF579A7B ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys
19:20:36.0078 4640 Fs_Rec - ok
19:20:36.0109 4640 [ 1F7B25B858FA27015169FE95E54108ED ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys
19:20:36.0125 4640 fvevol - ok
19:20:36.0156 4640 [ 8C778D335C9D272CFD3298AB02ABE3B6 ] gagp30kx C:\Windows\system32\DRIVERS\gagp30kx.sys
19:20:36.0171 4640 gagp30kx - ok
19:20:36.0187 4640 [ 8E98D21EE06192492A5671A6144D092F ] GEARAspiWDM C:\Windows\system32\DRIVERS\GEARAspiWDM.sys
19:20:36.0203 4640 GEARAspiWDM - ok
19:20:36.0250 4640 [ 14908F4F9005C29DE8F5587E271390EE ] gfibto C:\Windows\system32\drivers\gfibto.sys
19:20:36.0265 4640 gfibto - ok
19:20:36.0296 4640 [ 277BBC7E1AA1EE957F573A10ECA7EF3A ] gpsvc C:\Windows\System32\gpsvc.dll
19:20:36.0359 4640 gpsvc - ok
19:20:36.0406 4640 [ B9893A68032A6D9ADDB5B98287C630F7 ] grmnusb C:\Windows\system32\drivers\grmnusb.sys
19:20:36.0421 4640 grmnusb - ok
19:20:36.0484 4640 [ F02A533F517EB38333CB12A9E8963773 ] gupdate C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
19:20:36.0500 4640 gupdate - ok
19:20:36.0515 4640 [ F02A533F517EB38333CB12A9E8963773 ] gupdatem C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
19:20:36.0515 4640 gupdatem - ok
19:20:36.0562 4640 [ F2523EF6460FC42405B12248338AB2F0 ] hcw85cir C:\Windows\system32\drivers\hcw85cir.sys
19:20:36.0640 4640 hcw85cir - ok
19:20:36.0703 4640 [ 6410F6F415B2A5A9037224C41DA8BF12 ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
19:20:36.0750 4640 HdAudAddService - ok
19:20:36.0781 4640 [ 97BFED39B6B79EB12CDDBFEED51F56BB ] HDAudBus C:\Windows\system32\drivers\HDAudBus.sys
19:20:36.0796 4640 HDAudBus - ok
19:20:36.0812 4640 [ 78E86380454A7B10A5EB255DC44A355F ] HidBatt C:\Windows\system32\DRIVERS\HidBatt.sys
19:20:36.0828 4640 HidBatt - ok
19:20:36.0843 4640 [ 7FD2A313F7AFE5C4DAB14798C48DD104 ] HidBth C:\Windows\system32\DRIVERS\hidbth.sys
19:20:36.0875 4640 HidBth - ok
19:20:36.0890 4640 [ 0A77D29F311B88CFAE3B13F9C1A73825 ] HidIr C:\Windows\system32\DRIVERS\hidir.sys
19:20:36.0921 4640 HidIr - ok
19:20:36.0953 4640 [ BD9EB3958F213F96B97B1D897DEE006D ] hidserv C:\Windows\system32\hidserv.dll
19:20:37.0015 4640 hidserv - ok
19:20:37.0078 4640 [ 9592090A7E2B61CD582B612B6DF70536 ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys
19:20:37.0109 4640 HidUsb - ok
19:20:37.0140 4640 [ 387E72E739E15E3D37907A86D9FF98E2 ] hkmsvc C:\Windows\system32\kmsvc.dll
19:20:37.0187 4640 hkmsvc - ok
19:20:37.0234 4640 [ EFDFB3DD38A4376F93E7985173813ABD ] HomeGroupListener C:\Windows\system32\ListSvc.dll
19:20:37.0312 4640 HomeGroupListener - ok
19:20:37.0343 4640 [ 908ACB1F594274965A53926B10C81E89 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
19:20:37.0359 4640 HomeGroupProvider - ok
19:20:37.0390 4640 [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC ] HpSAMD C:\Windows\system32\drivers\HpSAMD.sys
19:20:37.0406 4640 HpSAMD - ok
19:20:37.0453 4640 [ 0EA7DE1ACB728DD5A369FD742D6EEE28 ] HTTP C:\Windows\system32\drivers\HTTP.sys
19:20:37.0515 4640 HTTP - ok
19:20:37.0546 4640 HWiNFO32 - ok
19:20:37.0562 4640 [ A5462BD6884960C9DC85ED49D34FF392 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys
19:20:37.0578 4640 hwpolicy - ok
19:20:37.0609 4640 [ FA55C73D4AFFA7EE23AC4BE53B4592D3 ] i8042prt C:\Windows\system32\drivers\i8042prt.sys
19:20:37.0625 4640 i8042prt - ok
19:20:37.0656 4640 [ AAAF44DB3BD0B9D1FB6969B23ECC8366 ] iaStorV C:\Windows\system32\drivers\iaStorV.sys
19:20:37.0671 4640 iaStorV - ok
19:20:37.0906 4640 [ 5988FC40F8DB5B0739CD1E3A5D0D78BD ] idsvc C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
19:20:37.0968 4640 idsvc - ok
19:20:38.0000 4640 [ 5C18831C61933628F5BB0EA2675B9D21 ] iirsp C:\Windows\system32\DRIVERS\iirsp.sys
19:20:38.0015 4640 iirsp - ok
19:20:38.0078 4640 [ FCD84C381E0140AF901E58D48882D26B ] IKEEXT C:\Windows\System32\ikeext.dll
19:20:38.0140 4640 IKEEXT - ok
19:20:38.0187 4640 [ F00F20E70C6EC3AA366910083A0518AA ] intelide C:\Windows\system32\drivers\intelide.sys
19:20:38.0203 4640 intelide - ok
19:20:38.0234 4640 [ ADA036632C664CAA754079041CF1F8C1 ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys
19:20:38.0265 4640 intelppm - ok
19:20:38.0296 4640 [ 098A91C54546A3B878DAD6A7E90A455B ] IPBusEnum C:\Windows\system32\ipbusenum.dll
19:20:38.0328 4640 IPBusEnum - ok
19:20:38.0359 4640 [ C9F0E1BD74365A8771590E9008D22AB6 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
19:20:38.0406 4640 IpFilterDriver - ok
19:20:38.0437 4640 [ 08C2957BB30058E663720C5606885653 ] iphlpsvc C:\Windows\System32\iphlpsvc.dll
19:20:38.0484 4640 iphlpsvc - ok
19:20:38.0500 4640 [ 0FC1AEA580957AA8817B8F305D18CA3A ] IPMIDRV C:\Windows\system32\drivers\IPMIDrv.sys
19:20:38.0515 4640 IPMIDRV - ok
19:20:38.0546 4640 [ AF9B39A7E7B6CAA203B3862582E9F2D0 ] IPNAT C:\Windows\system32\drivers\ipnat.sys
19:20:38.0609 4640 IPNAT - ok
19:20:38.0671 4640 [ 6E50CFA46527B39015B750AAD161C5CC ] iPod Service C:\Program Files\iPod\bin\iPodService.exe
19:20:38.0703 4640 iPod Service - ok
19:20:38.0718 4640 [ 3ABF5E7213EB28966D55D58B515D5CE9 ] IRENUM C:\Windows\system32\drivers\irenum.sys
19:20:38.0765 4640 IRENUM - ok
19:20:38.0781 4640 [ 2F7B28DC3E1183E5EB418DF55C204F38 ] isapnp C:\Windows\system32\drivers\isapnp.sys
19:20:38.0796 4640 isapnp - ok
19:20:38.0875 4640 [ D931D7309DEB2317035B07C9F9E6B0BD ] iScsiPrt C:\Windows\system32\drivers\msiscsi.sys
19:20:38.0921 4640 iScsiPrt - ok
19:20:38.0953 4640 [ BC02336F1CBA7DCC7D1213BB588A68A5 ] kbdclass C:\Windows\system32\DRIVERS\kbdclass.sys
19:20:38.0968 4640 kbdclass - ok
19:20:38.0984 4640 [ 0705EFF5B42A9DB58548EEC3B26BB484 ] kbdhid C:\Windows\system32\DRIVERS\kbdhid.sys
19:20:39.0015 4640 kbdhid - ok
19:20:39.0031 4640 [ C118A82CD78818C29AB228366EBF81C3 ] KeyIso C:\Windows\system32\lsass.exe
19:20:39.0046 4640 KeyIso - ok
19:20:39.0078 4640 [ 97A7070AEA4C058B6418519E869A63B4 ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys
19:20:39.0093 4640 KSecDD - ok
19:20:39.0125 4640 [ 7EFB9333E4ECCE6AE4AE9D777D9E553E ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys
19:20:39.0140 4640 KSecPkg - ok
19:20:39.0171 4640 [ 6869281E78CB31A43E969F06B57347C4 ] ksthunk C:\Windows\system32\drivers\ksthunk.sys
19:20:39.0234 4640 ksthunk - ok
19:20:39.0281 4640 [ 6AB66E16AA859232F64DEB66887A8C9C ] KtmRm C:\Windows\system32\msdtckrm.dll
19:20:39.0312 4640 KtmRm - ok
19:20:39.0343 4640 [ D9F42719019740BAA6D1C6D536CBDAA6 ] LanmanServer C:\Windows\system32\srvsvc.dll
19:20:39.0406 4640 LanmanServer - ok
19:20:39.0437 4640 [ 851A1382EED3E3A7476DB004F4EE3E1A ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
19:20:39.0484 4640 LanmanWorkstation - ok
19:20:39.0546 4640 [ 7772DFAB22611050B79504E671B06E6E ] LBTServ C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe
19:20:39.0562 4640 LBTServ - ok
19:20:39.0578 4640 [ 241F2648ADF090E2A10095BD6D6F5DCB ] LHidFilt C:\Windows\system32\DRIVERS\LHidFilt.Sys
19:20:39.0593 4640 LHidFilt - ok
19:20:39.0609 4640 [ 1538831CF8AD2979A04C423779465827 ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys
19:20:39.0671 4640 lltdio - ok
19:20:39.0750 4640 [ C1185803384AB3FEED115F79F109427F ] lltdsvc C:\Windows\System32\lltdsvc.dll
19:20:39.0812 4640 lltdsvc - ok
19:20:39.0828 4640 [ F993A32249B66C9D622EA5592A8B76B8 ] lmhosts C:\Windows\System32\lmhsvc.dll
19:20:39.0890 4640 lmhosts - ok
19:20:39.0921 4640 [ 342ED5A4B3326014438F36D22D803737 ] LMouFilt C:\Windows\system32\DRIVERS\LMouFilt.Sys
19:20:39.0937 4640 LMouFilt - ok
19:20:39.0953 4640 [ 1A93E54EB0ECE102495A51266DCDB6A6 ] LSI_FC C:\Windows\system32\DRIVERS\lsi_fc.sys
19:20:39.0968 4640 LSI_FC - ok
19:20:39.0984 4640 [ 1047184A9FDC8BDBFF857175875EE810 ] LSI_SAS C:\Windows\system32\DRIVERS\lsi_sas.sys
19:20:40.0000 4640 LSI_SAS - ok
19:20:40.0015 4640 [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93 ] LSI_SAS2 C:\Windows\system32\DRIVERS\lsi_sas2.sys
19:20:40.0031 4640 LSI_SAS2 - ok
19:20:40.0046 4640 [ 0504EACAFF0D3C8AED161C4B0D369D4A ] LSI_SCSI C:\Windows\system32\DRIVERS\lsi_scsi.sys
19:20:40.0062 4640 LSI_SCSI - ok
19:20:40.0078 4640 [ 43D0F98E1D56CCDDB0D5254CFF7B356E ] luafv C:\Windows\system32\drivers\luafv.sys
19:20:40.0125 4640 luafv - ok
19:20:40.0171 4640 [ B8BE35421B9E8DC1AB4B0CB7B9B0328B ] LUsbFilt C:\Windows\system32\Drivers\LUsbFilt.Sys
19:20:40.0187 4640 LUsbFilt - ok
19:20:40.0203 4640 [ 02468F76924066505465352E2849EF97 ] MADFUCONECTIV C:\Windows\system32\DRIVERS\MAudioConectiv_DFU.sys
19:20:40.0218 4640 MADFUCONECTIV - ok
19:20:40.0234 4640 [ F0DCD0FD9D79668E34A660F49C8C00BC ] MADFULEGACYKEYBOARD C:\Windows\system32\DRIVERS\MAudioLegacyKeyboard_DFU.sys
19:20:40.0250 4640 MADFULEGACYKEYBOARD - ok
19:20:40.0281 4640 [ D33E2B74CF8B3A652BF0A9FBD068E87A ] ManyCam C:\Windows\system32\DRIVERS\ManyCam_x64.sys
19:20:40.0328 4640 ManyCam - ok
19:20:40.0390 4640 [ 024DA28053D57E9E32BEE52600576BBB ] MarvinBus C:\Windows\system32\DRIVERS\MarvinBus64.sys
19:20:40.0421 4640 MarvinBus ( UnsignedFile.Multi.Generic ) - warning
19:20:40.0421 4640 MarvinBus - detected UnsignedFile.Multi.Generic (1)
19:20:40.0468 4640 [ 4B2DCA111EA26EE2248E212F52562A14 ] MAUSBCONECTIV C:\Windows\system32\DRIVERS\MAudioConectiv.sys
19:20:40.0484 4640 MAUSBCONECTIV - ok
19:20:40.0515 4640 [ FAEDBEE189A877E302B023BD24FAEBF8 ] MAUSBLEGACYKEYBOARD C:\Windows\system32\DRIVERS\MAudioLegacyKeyboard.sys
19:20:40.0515 4640 MAUSBLEGACYKEYBOARD - ok
19:20:40.0546 4640 [ 0BE09CD858ABF9DF6ED259D57A1A1663 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll
19:20:40.0578 4640 Mcx2Svc - ok
19:20:40.0609 4640 [ A55805F747C6EDB6A9080D7C633BD0F4 ] megasas C:\Windows\system32\DRIVERS\megasas.sys
19:20:40.0625 4640 megasas - ok
19:20:40.0640 4640 [ BAF74CE0072480C3B6B7C13B2A94D6B3 ] MegaSR C:\Windows\system32\DRIVERS\MegaSR.sys
19:20:40.0656 4640 MegaSR - ok
19:20:40.0671 4640 [ E40E80D0304A73E8D269F7141D77250B ] MMCSS C:\Windows\system32\mmcss.dll
19:20:40.0703 4640 MMCSS - ok
19:20:40.0718 4640 [ 800BA92F7010378B09F9ED9270F07137 ] Modem C:\Windows\system32\drivers\modem.sys
19:20:40.0781 4640 Modem - ok
19:20:40.0812 4640 [ B03D591DC7DA45ECE20B3B467E6AADAA ] monitor C:\Windows\system32\DRIVERS\monitor.sys
19:20:40.0843 4640 monitor - ok
19:20:40.0875 4640 [ 7D27EA49F3C1F687D357E77A470AEA99 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys
19:20:40.0890 4640 mouclass - ok
19:20:40.0921 4640 [ D3BF052C40B0C4166D9FD86A4288C1E6 ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys
19:20:40.0953 4640 mouhid - ok
19:20:40.0984 4640 [ 32E7A3D591D671A6DF2DB515A5CBE0FA ] mountmgr C:\Windows\system32\drivers\mountmgr.sys
19:20:41.0000 4640 mountmgr - ok
19:20:41.0046 4640 [ ADFDD84260C9F66789F8E8061E9BD3A6 ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
19:20:41.0062 4640 MozillaMaintenance - ok
19:20:41.0093 4640 [ A44B420D30BD56E145D6A2BC8768EC58 ] mpio C:\Windows\system32\drivers\mpio.sys
19:20:41.0125 4640 mpio - ok
19:20:41.0140 4640 [ 6C38C9E45AE0EA2FA5E551F2ED5E978F ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys
19:20:41.0187 4640 mpsdrv - ok
19:20:41.0265 4640 [ 54FFC9C8898113ACE189D4AA7199D2C1 ] MpsSvc C:\Windows\system32\mpssvc.dll
19:20:41.0328 4640 MpsSvc - ok
19:20:41.0359 4640 [ DC722758B8261E1ABAFD31A3C0A66380 ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys
19:20:41.0421 4640 MRxDAV - ok
19:20:41.0437 4640 [ A5D9106A73DC88564C825D317CAC68AC ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys
19:20:41.0484 4640 mrxsmb - ok
19:20:41.0515 4640 [ D711B3C1D5F42C0C2415687BE09FC163 ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys
19:20:41.0546 4640 mrxsmb10 - ok
19:20:41.0562 4640 [ 9423E9D355C8D303E76B8CFBD8A5C30C ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys
19:20:41.0562 4640 mrxsmb20 - ok
19:20:41.0609 4640 [ C25F0BAFA182CBCA2DD3C851C2E75796 ] msahci C:\Windows\system32\drivers\msahci.sys
19:20:41.0640 4640 msahci - ok
19:20:41.0656 4640 [ DB801A638D011B9633829EB6F663C900 ] msdsm C:\Windows\system32\drivers\msdsm.sys
19:20:41.0671 4640 msdsm - ok
19:20:41.0718 4640 [ DE0ECE52236CFA3ED2DBFC03F28253A8 ] MSDTC C:\Windows\System32\msdtc.exe
19:20:41.0765 4640 MSDTC - ok
19:20:41.0828 4640 [ AA3FB40E17CE1388FA1BEDAB50EA8F96 ] Msfs C:\Windows\system32\drivers\Msfs.sys
19:20:41.0843 4640 Msfs - ok
19:20:41.0875 4640 [ F9D215A46A8B9753F61767FA72A20326 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys
19:20:41.0921 4640 mshidkmdf - ok
19:20:41.0953 4640 [ D916874BBD4F8B07BFB7FA9B3CCAE29D ] msisadrv C:\Windows\system32\drivers\msisadrv.sys
19:20:41.0984 4640 msisadrv - ok
19:20:42.0015 4640 [ 808E98FF49B155C522E6400953177B08 ] MSiSCSI C:\Windows\system32\iscsiexe.dll
19:20:42.0062 4640 MSiSCSI - ok
19:20:42.0078 4640 msiserver - ok
19:20:42.0109 4640 [ 49CCF2C4FEA34FFAD8B1B59D49439366 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys
19:20:42.0156 4640 MSKSSRV - ok
19:20:42.0171 4640 [ BDD71ACE35A232104DDD349EE70E1AB3 ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys
19:20:42.0218 4640 MSPCLOCK - ok
19:20:42.0250 4640 [ 4ED981241DB27C3383D72092B618A1D0 ] MSPQM C:\Windows\system32\drivers\MSPQM.sys
19:20:42.0296 4640 MSPQM - ok
19:20:42.0375 4640 [ 759A9EEB0FA9ED79DA1FB7D4EF78866D ] MsRPC C:\Windows\system32\drivers\MsRPC.sys
19:20:42.0406 4640 MsRPC - ok
19:20:42.0437 4640 [ 0EED230E37515A0EAEE3C2E1BC97B288 ] mssmbios C:\Windows\system32\drivers\mssmbios.sys
19:20:42.0437 4640 mssmbios - ok
19:20:42.0468 4640 [ 2E66F9ECB30B4221A318C92AC2250779 ] MSTEE C:\Windows\system32\drivers\MSTEE.sys
19:20:42.0515 4640 MSTEE - ok
19:20:42.0531 4640 [ 7EA404308934E675BFFDE8EDF0757BCD ] MTConfig C:\Windows\system32\DRIVERS\MTConfig.sys
19:20:42.0562 4640 MTConfig - ok
19:20:42.0593 4640 [ F9A18612FD3526FE473C1BDA678D61C8 ] Mup C:\Windows\system32\Drivers\mup.sys
19:20:42.0609 4640 Mup - ok
19:20:42.0687 4640 [ 582AC6D9873E31DFA28A4547270862DD ] napagent C:\Windows\system32\qagentRT.dll
19:20:42.0765 4640 napagent - ok
19:20:42.0796 4640 [ 1EA3749C4114DB3E3161156FFFFA6B33 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys
19:20:42.0828 4640 NativeWifiP - ok
19:20:42.0921 4640 [ 760E38053BF56E501D562B70AD796B88 ] NDIS C:\Windows\system32\drivers\ndis.sys
19:20:42.0953 4640 NDIS - ok
19:20:42.0968 4640 [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys
19:20:43.0015 4640 NdisCap - ok
19:20:43.0046 4640 [ 30639C932D9FEF22B31268FE25A1B6E5 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys
19:20:43.0078 4640 NdisTapi - ok
19:20:43.0125 4640 [ 136185F9FB2CC61E573E676AA5402356 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys
19:20:43.0156 4640 Ndisuio - ok
19:20:43.0187 4640 [ 53F7305169863F0A2BDDC49E116C2E11 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys
19:20:43.0250 4640 NdisWan - ok
19:20:43.0281 4640 [ 015C0D8E0E0421B4CFD48CFFE2825879 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys
19:20:43.0328 4640 NDProxy - ok
19:20:43.0375 4640 [ 86743D9F5D2B1048062B14B1D84501C4 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys
19:20:43.0421 4640 NetBIOS - ok
19:20:43.0468 4640 [ 09594D1089C523423B32A4229263F068 ] NetBT C:\Windows\system32\DRIVERS\netbt.sys
19:20:43.0500 4640 NetBT - ok
19:20:43.0515 4640 [ C118A82CD78818C29AB228366EBF81C3 ] Netlogon C:\Windows\system32\lsass.exe
19:20:43.0531 4640 Netlogon - ok
19:20:43.0562 4640 [ 847D3AE376C0817161A14A82C8922A9E ] Netman C:\Windows\System32\netman.dll
19:20:43.0609 4640 Netman - ok
19:20:43.0640 4640 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
19:20:43.0671 4640 NetMsmqActivator - ok
19:20:43.0687 4640 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetPipeActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
19:20:43.0687 4640 NetPipeActivator - ok
19:20:43.0734 4640 [ 5F28111C648F1E24F7DBC87CDEB091B8 ] netprofm C:\Windows\System32\netprofm.dll
19:20:43.0796 4640 netprofm - ok
19:20:43.0812 4640 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
19:20:43.0828 4640 NetTcpActivator - ok
19:20:43.0828 4640 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
19:20:43.0843 4640 NetTcpPortSharing - ok
19:20:43.0875 4640 [ 77889813BE4D166CDAB78DDBA990DA92 ] nfrd960 C:\Windows\system32\DRIVERS\nfrd960.sys
19:20:43.0890 4640 nfrd960 - ok
19:20:44.0765 4640 [ FDCFE6C98FCD64AA6D8411F44FAA2C29 ] NIHardwareService C:\Program Files\Common Files\Native Instruments\Hardware\NIHardwareService.exe
19:20:44.0937 4640 NIHardwareService ( UnsignedFile.Multi.Generic ) - warning
19:20:44.0937 4640 NIHardwareService - detected UnsignedFile.Multi.Generic (1)
19:20:44.0968 4640 [ 0ECAAFE210CD89D14992A53300FEBF45 ] NIWinCDEmu C:\Windows\system32\DRIVERS\NIWinCDEmu.sys
19:20:44.0968 4640 NIWinCDEmu - ok
19:20:45.0000 4640 [ 8AD77806D336673F270DB31645267293 ] NlaSvc C:\Windows\System32\nlasvc.dll
19:20:45.0031 4640 NlaSvc - ok
19:20:45.0062 4640 [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7 ] Npfs C:\Windows\system32\drivers\Npfs.sys
19:20:45.0093 4640 Npfs - ok
19:20:45.0125 4640 [ D54BFDF3E0C953F823B3D0BFE4732528 ] nsi C:\Windows\system32\nsisvc.dll
19:20:45.0171 4640 nsi - ok
19:20:45.0187 4640 [ E7F5AE18AF4168178A642A9247C63001 ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys
19:20:45.0234 4640 nsiproxy - ok
19:20:45.0296 4640 [ E453ACF4E7D44E5530B5D5F2B9CA8563 ] Ntfs C:\Windows\system32\drivers\Ntfs.sys
19:20:45.0375 4640 Ntfs - ok
19:20:45.0406 4640 [ 9899284589F75FA8724FF3D16AED75C1 ] Null C:\Windows\system32\drivers\Null.sys
19:20:45.0453 4640 Null - ok
19:20:45.0484 4640 [ 4CB891301E4339F8652A0ED6B1B50EF7 ] NvnUsbAudio C:\Windows\system32\DRIVERS\nvnusbaudio.sys
19:20:45.0500 4640 NvnUsbAudio - ok
19:20:45.0531 4640 [ 0A92CB65770442ED0DC44834632F66AD ] nvraid C:\Windows\system32\drivers\nvraid.sys
19:20:45.0562 4640 nvraid - ok
19:20:45.0578 4640 [ DAB0E87525C10052BF65F06152F37E4A ] nvstor C:\Windows\system32\drivers\nvstor.sys
19:20:45.0593 4640 nvstor - ok
19:20:45.0625 4640 [ 270D7CD42D6E3979F6DD0146650F0E05 ] nv_agp C:\Windows\system32\drivers\nv_agp.sys
19:20:45.0640 4640 nv_agp - ok
19:20:45.0671 4640 [ 3589478E4B22CE21B41FA1BFC0B8B8A0 ] ohci1394 C:\Windows\system32\drivers\ohci1394.sys
19:20:45.0703 4640 ohci1394 - ok
19:20:45.0734 4640 [ 3EAC4455472CC2C97107B5291E0DCAFE ] p2pimsvc C:\Windows\system32\pnrpsvc.dll
19:20:45.0781 4640 p2pimsvc - ok
19:20:45.0812 4640 [ 927463ECB02179F88E4B9A17568C63C3 ] p2psvc C:\Windows\system32\p2psvc.dll
19:20:45.0828 4640 p2psvc - ok
19:20:45.0953 4640 [ 05E4E87619D25370EEA0D368B58AA1F0 ] PaceLicenseDServices C:\Program Files (x86)\Common Files\PACE\Services\LicenseServices\LDSvc.exe
19:20:46.0062 4640 PaceLicenseDServices ( UnsignedFile.Multi.Generic ) - warning
19:20:46.0062 4640 PaceLicenseDServices - detected UnsignedFile.Multi.Generic (1)
19:20:46.0093 4640 [ 0086431C29C35BE1DBC43F52CC273887 ] Parport C:\Windows\system32\DRIVERS\parport.sys
19:20:46.0109 4640 Parport - ok
19:20:46.0125 4640 [ E9766131EEADE40A27DC27D2D68FBA9C ] partmgr C:\Windows\system32\drivers\partmgr.sys
19:20:46.0140 4640 partmgr - ok
19:20:46.0171 4640 [ 3AEAA8B561E63452C655DC0584922257 ] PcaSvc C:\Windows\System32\pcasvc.dll
19:20:46.0218 4640 PcaSvc - ok
19:20:46.0250 4640 [ 94575C0571D1462A0F70BDE6BD6EE6B3 ] pci C:\Windows\system32\drivers\pci.sys
19:20:46.0265 4640 pci - ok
19:20:46.0281 4640 [ B5B8B5EF2E5CB34DF8DCF8831E3534FA ] pciide C:\Windows\system32\drivers\pciide.sys
19:20:46.0296 4640 pciide - ok
19:20:46.0312 4640 [ B2E81D4E87CE48589F98CB8C05B01F2F ] pcmcia C:\Windows\system32\DRIVERS\pcmcia.sys
19:20:46.0343 4640 pcmcia - ok
19:20:46.0359 4640 [ D6B9C2E1A11A3A4B26A182FFEF18F603 ] pcw C:\Windows\system32\drivers\pcw.sys
19:20:46.0359 4640 pcw - ok
19:20:46.0390 4640 [ 68769C3356B3BE5D1C732C97B9A80D6E ] PEAUTH C:\Windows\system32\drivers\peauth.sys
19:20:46.0453 4640 PEAUTH - ok
19:20:46.0546 4640 [ B9B0A4299DD2D76A4243F75FD54DC680 ] PeerDistSvc C:\Windows\system32\peerdistsvc.dll
19:20:46.0656 4640 PeerDistSvc - ok
19:20:46.0812 4640 [ E495E408C93141E8FC72DC0C6046DDFA ] PerfHost C:\Windows\SysWow64\perfhost.exe
19:20:46.0859 4640 PerfHost - ok
19:20:46.0937 4640 [ C7CF6A6E137463219E1259E3F0F0DD6C ] pla C:\Windows\system32\pla.dll
19:20:47.0046 4640 pla - ok
19:20:47.0093 4640 [ 25FBDEF06C4D92815B353F6E792C8129 ] PlugPlay C:\Windows\system32\umpnpmgr.dll
19:20:47.0171 4640 PlugPlay - ok
19:20:47.0265 4640 [ CBCEC2C45E7D672EC6E46CBFF23BDF8E ] PMBDeviceInfoProvider C:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe
19:20:47.0312 4640 PMBDeviceInfoProvider - ok
19:20:47.0343 4640 [ 7195581CEC9BB7D12ABE54036ACC2E38 ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll
19:20:47.0359 4640 PNRPAutoReg - ok
19:20:47.0375 4640 [ 3EAC4455472CC2C97107B5291E0DCAFE ] PNRPsvc C:\Windows\system32\pnrpsvc.dll
19:20:47.0390 4640 PNRPsvc - ok
19:20:47.0515 4640 [ 4F15D75ADF6156BF56ECED6D4A55C389 ] PolicyAgent C:\Windows\System32\ipsecsvc.dll
19:20:47.0593 4640 PolicyAgent - ok
19:20:47.0687 4640 [ 6BA9D927DDED70BD1A9CADED45F8B184 ] Power C:\Windows\system32\umpo.dll
19:20:47.0765 4640 Power - ok
19:20:47.0859 4640 [ F92A2C41117A11A00BE01CA01A7FCDE9 ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys
19:20:47.0968 4640 PptpMiniport - ok
19:20:47.0984 4640 [ 0D922E23C041EFB1C3FAC2A6F943C9BF ] Processor C:\Windows\system32\DRIVERS\processr.sys
19:20:48.0109 4640 Processor - ok
19:20:48.0250 4640 [ 53E83F1F6CF9D62F32801CF66D8352A8 ] ProfSvc C:\Windows\system32\profsvc.dll
19:20:48.0406 4640 ProfSvc - ok
19:20:48.0453 4640 [ C118A82CD78818C29AB228366EBF81C3 ] ProtectedStorage C:\Windows\system32\lsass.exe
19:20:48.0468 4640 ProtectedStorage - ok
19:20:48.0609 4640 [ 0557CF5A2556BD58E26384169D72438D ] Psched C:\Windows\system32\DRIVERS\pacer.sys
19:20:48.0718 4640 Psched - ok
19:20:48.0859 4640 [ 4712CC14E720ECCCC0AA16949D18AAF1 ] PxHlpa64 C:\Windows\system32\Drivers\PxHlpa64.sys
19:20:48.0906 4640 PxHlpa64 - ok
19:20:49.0343 4640 [ A53A15A11EBFD21077463EE2C7AFEEF0 ] ql2300 C:\Windows\system32\DRIVERS\ql2300.sys
19:20:49.0515 4640 ql2300 - ok
19:20:49.0531 4640 [ 4F6D12B51DE1AAEFF7DC58C4D75423C8 ] ql40xx C:\Windows\system32\DRIVERS\ql40xx.sys
19:20:49.0593 4640 ql40xx - ok
19:20:49.0687 4640 [ 906191634E99AEA92C4816150BDA3732 ] QWAVE C:\Windows\system32\qwave.dll
19:20:49.0718 4640 QWAVE - ok
19:20:49.0781 4640 [ 76707BB36430888D9CE9D705398ADB6C ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys
19:20:49.0828 4640 QWAVEdrv - ok
19:20:49.0859 4640 [ 5A0DA8AD5762FA2D91678A8A01311704 ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys
19:20:49.0921 4640 RasAcd - ok
19:20:49.0984 4640 [ 7ECFF9B22276B73F43A99A15A6094E90 ] RasAgileVpn C:\Windows\system32\DRIVERS\AgileVpn.sys
19:20:50.0031 4640 RasAgileVpn - ok
19:20:50.0093 4640 [ 8F26510C5383B8DBE976DE1CD00FC8C7 ] RasAuto C:\Windows\System32\rasauto.dll
19:20:50.0125 4640 RasAuto - ok
19:20:50.0203 4640 [ 471815800AE33E6F1C32FB1B97C490CA ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys
19:20:50.0265 4640 Rasl2tp - ok
19:20:50.0312 4640 [ EE867A0870FC9E4972BA9EAAD35651E2 ] RasMan C:\Windows\System32\rasmans.dll
19:20:50.0375 4640 RasMan - ok
19:20:50.0406 4640 [ 855C9B1CD4756C5E9A2AA58A15F58C25 ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys
19:20:50.0453 4640 RasPppoe - ok
19:20:50.0484 4640 [ E8B1E447B008D07FF47D016C2B0EEECB ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys
19:20:50.0531 4640 RasSstp - ok
19:20:50.0578 4640 [ 77F665941019A1594D887A74F301FA2F ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys
19:20:50.0656 4640 rdbss - ok
19:20:50.0671 4640 [ 302DA2A0539F2CF54D7C6CC30C1F2D8D ] rdpbus C:\Windows\system32\DRIVERS\rdpbus.sys
19:20:50.0750 4640 rdpbus - ok
19:20:50.0765 4640 [ CEA6CC257FC9B7715F1C2B4849286D24 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys
19:20:50.0828 4640 RDPCDD - ok
19:20:50.0875 4640 [ 1B6163C503398B23FF8B939C67747683 ] RDPDR C:\Windows\system32\drivers\rdpdr.sys
19:20:50.0921 4640 RDPDR - ok
19:20:50.0937 4640 [ BB5971A4F00659529A5C44831AF22365 ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys
19:20:50.0984 4640 RDPENCDD - ok
19:20:51.0031 4640 [ 216F3FA57533D98E1F74DED70113177A ] RDPREFMP C:\Windows\system32\drivers\rdprefmp.sys
19:20:51.0078 4640 RDPREFMP - ok
19:20:51.0125 4640 [ 313F68E1A3E6345A4F47A36B07062F34 ] RdpVideoMiniport C:\Windows\system32\drivers\rdpvideominiport.sys
19:20:51.0171 4640 RdpVideoMiniport - ok
19:20:51.0218 4640 [ E61608AA35E98999AF9AAEEEA6114B0A ] RDPWD C:\Windows\system32\drivers\RDPWD.sys
19:20:51.0281 4640 RDPWD - ok
19:20:51.0312 4640 [ 34ED295FA0121C241BFEF24764FC4520 ] rdyboost C:\Windows\system32\drivers\rdyboost.sys
19:20:51.0328 4640 rdyboost - ok
19:20:51.0343 4640 [ 254FB7A22D74E5511C73A3F6D802F192 ] RemoteAccess C:\Windows\System32\mprdim.dll
19:20:51.0406 4640 RemoteAccess - ok
19:20:51.0468 4640 [ E4D94F24081440B5FC5AA556C7C62702 ] RemoteRegistry C:\Windows\system32\regsvc.dll
19:20:51.0562 4640 RemoteRegistry - ok
19:20:51.0593 4640 [ 3DD798846E2C28102B922C56E71B7932 ] RFCOMM C:\Windows\system32\DRIVERS\rfcomm.sys
19:20:51.0625 4640 RFCOMM - ok
19:20:51.0671 4640 [ E4DC58CF7B3EA515AE917FF0D402A7BB ] RpcEptMapper C:\Windows\System32\RpcEpMap.dll
19:20:51.0718 4640 RpcEptMapper - ok
19:20:51.0765 4640 [ D5BA242D4CF8E384DB90E6A8ED850B8C ] RpcLocator C:\Windows\system32\locator.exe
19:20:51.0828 4640 RpcLocator - ok
19:20:51.0890 4640 [ 5C627D1B1138676C0A7AB2C2C190D123 ] RpcSs C:\Windows\system32\rpcss.dll
19:20:51.0937 4640 RpcSs - ok
19:20:51.0968 4640 [ DDC86E4F8E7456261E637E3552E804FF ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys
19:20:52.0000 4640 rspndr - ok
19:20:52.0031 4640 [ ABCB5A38A0D85BDF69B7877E1AD1EED5 ] RTL8167 C:\Windows\system32\DRIVERS\Rt64win7.sys
19:20:52.0093 4640 RTL8167 - ok
19:20:52.0109 4640 [ E60C0A09F997826C7627B244195AB581 ] s3cap C:\Windows\system32\drivers\vms3cap.sys
19:20:52.0156 4640 s3cap - ok
19:20:52.0156 4640 [ C118A82CD78818C29AB228366EBF81C3 ] SamSs C:\Windows\system32\lsass.exe
19:20:52.0171 4640 SamSs - ok
19:20:52.0187 4640 [ AC03AF3329579FFFB455AA2DAABBE22B ] sbp2port C:\Windows\system32\drivers\sbp2port.sys
19:20:52.0203 4640 sbp2port - ok
19:20:52.0234 4640 [ 9B7395789E3791A3B6D000FE6F8B131E ] SCardSvr C:\Windows\System32\SCardSvr.dll
19:20:52.0281 4640 SCardSvr - ok
19:20:52.0296 4640 [ 253F38D0D7074C02FF8DEB9836C97D2B ] scfilter C:\Windows\system32\DRIVERS\scfilter.sys
19:20:52.0343 4640 scfilter - ok
19:20:52.0531 4640 [ 262F6592C3299C005FD6BEC90FC4463A ] Schedule C:\Windows\system32\schedsvc.dll
19:20:52.0625 4640 Schedule - ok
19:20:52.0671 4640 [ F17D1D393BBC69C5322FBFAFACA28C7F ] SCPolicySvc C:\Windows\System32\certprop.dll
19:20:52.0687 4640 SCPolicySvc - ok
19:20:52.0750 4640 [ 6EA4234DC55346E0709560FE7C2C1972 ] SDRSVC C:\Windows\System32\SDRSVC.dll
19:20:52.0812 4640 SDRSVC - ok
19:20:52.0906 4640 [ 206387AB881E93A1A6EB89966C8651F1 ] SDScannerService C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
19:20:52.0937 4640 SDScannerService - ok
19:20:52.0984 4640 [ A529CFE32565C0B145578FFB2B32C9A5 ] SDUpdateService C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
19:20:53.0000 4640 SDUpdateService - ok
19:20:53.0015 4640 [ CB63BDB77BB86549FC3303C2F11EDC18 ] SDWSCService C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
19:20:53.0031 4640 SDWSCService - ok
19:20:53.0046 4640 [ BC617A4E1B4FA8DF523A061739A0BD87 ] seclogon C:\Windows\system32\seclogon.dll
19:20:53.0093 4640 seclogon - ok
19:20:53.0125 4640 [ C32AB8FA018EF34C0F113BD501436D21 ] SENS C:\Windows\System32\sens.dll
19:20:53.0187 4640 SENS - ok
19:20:53.0203 4640 [ 0336CFFAFAAB87A11541F1CF1594B2B2 ] SensrSvc C:\Windows\system32\sensrsvc.dll
19:20:53.0281 4640 SensrSvc - ok
19:20:53.0296 4640 [ CB624C0035412AF0DEBEC78C41F5CA1B ] Serenum C:\Windows\system32\DRIVERS\serenum.sys
19:20:53.0343 4640 Serenum - ok
19:20:53.0375 4640 [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6 ] Serial C:\Windows\system32\DRIVERS\serial.sys
19:20:53.0406 4640 Serial - ok
19:20:53.0437 4640 [ 1C545A7D0691CC4A027396535691C3E3 ] sermouse C:\Windows\system32\DRIVERS\sermouse.sys
19:20:53.0453 4640 sermouse - ok
19:20:53.0500 4640 [ 0B6231BF38174A1628C4AC812CC75804 ] SessionEnv C:\Windows\system32\sessenv.dll
19:20:53.0546 4640 SessionEnv - ok
19:20:53.0578 4640 [ A554811BCD09279536440C964AE35BBF ] sffdisk C:\Windows\system32\drivers\sffdisk.sys
19:20:53.0609 4640 sffdisk - ok
19:20:53.0625 4640 [ FF414F0BAEFEBA59BC6C04B3DB0B87BF ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys
19:20:53.0656 4640 sffp_mmc - ok
19:20:53.0687 4640 [ DD85B78243A19B59F0637DCF284DA63C ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys
19:20:53.0703 4640 sffp_sd - ok
19:20:53.0734 4640 [ A9D601643A1647211A1EE2EC4E433FF4 ] sfloppy C:\Windows\system32\DRIVERS\sfloppy.sys
19:20:53.0750 4640 sfloppy - ok
19:20:53.0812 4640 [ B95F6501A2F8B2E78C697FEC401970CE ] SharedAccess C:\Windows\System32\ipnathlp.dll
19:20:53.0859 4640 SharedAccess - ok
19:20:53.0890 4640 [ AAF932B4011D14052955D4B212A4DA8D ] ShellHWDetection C:\Windows\System32\shsvcs.dll
19:20:53.0953 4640 ShellHWDetection - ok
19:20:53.0984 4640 [ 843CAF1E5FDE1FFD5FF768F23A51E2E1 ] SiSRaid2 C:\Windows\system32\DRIVERS\SiSRaid2.sys
19:20:54.0000 4640 SiSRaid2 - ok
19:20:54.0015 4640 [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4 ] SiSRaid4 C:\Windows\system32\DRIVERS\sisraid4.sys
19:20:54.0031 4640 SiSRaid4 - ok
19:20:54.0062 4640 [ 548260A7B8654E024DC30BF8A7C5BAA4 ] Smb C:\Windows\system32\DRIVERS\smb.sys
19:20:54.0109 4640 Smb - ok
19:20:54.0140 4640 [ 6313F223E817CC09AA41811DAA7F541D ] SNMPTRAP C:\Windows\System32\snmptrap.exe
19:20:54.0187 4640 SNMPTRAP - ok
19:20:54.0203 4640 [ B9E31E5CACDFE584F34F730A677803F9 ] spldr C:\Windows\system32\drivers\spldr.sys
19:20:54.0218 4640 spldr - ok
19:20:54.0250 4640 [ 85DAA09A98C9286D4EA2BA8D0E644377 ] Spooler C:\Windows\System32\spoolsv.exe
19:20:54.0296 4640 Spooler - ok
19:20:54.0437 4640 [ E17E0188BB90FAE42D83E98707EFA59C ] sppsvc C:\Windows\system32\sppsvc.exe
19:20:54.0593 4640 sppsvc - ok
19:20:54.0625 4640 [ 93D7D61317F3D4BC4F4E9F8A96A7DE45 ] sppuinotify C:\Windows\system32\sppuinotify.dll
19:20:54.0671 4640 sppuinotify - ok
19:20:54.0750 4640 [ 34F974F8B3C86DE03A30DCBE79091C97 ] sptd C:\Windows\system32\Drivers\sptd.sys
19:20:54.0750 4640 Suspicious file (NoAccess): C:\Windows\system32\Drivers\sptd.sys. md5: 34F974F8B3C86DE03A30DCBE79091C97
19:20:54.0750 4640 sptd ( LockedFile.Multi.Generic ) - warning
19:20:54.0750 4640 sptd - detected LockedFile.Multi.Generic (1)
19:20:54.0781 4640 [ 441FBA48BFF01FDB9D5969EBC1838F0B ] srv C:\Windows\system32\DRIVERS\srv.sys
19:20:54.0828 4640 srv - ok
19:20:54.0843 4640 [ B4ADEBBF5E3677CCE9651E0F01F7CC28 ] srv2 C:\Windows\system32\DRIVERS\srv2.sys
19:20:54.0875 4640 srv2 - ok
19:20:54.0875 4640 [ 27E461F0BE5BFF5FC737328F749538C3 ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys
19:20:54.0906 4640 srvnet - ok
19:20:54.0968 4640 [ 8F8324ED1DE63FFC7B1A02CD2D963C72 ] ssadbus C:\Windows\system32\DRIVERS\ssadbus.sys
19:20:55.0015 4640 ssadbus - ok
19:20:55.0046 4640 [ 58221EFCB74167B73667F0024C661CE0 ] ssadmdfl C:\Windows\system32\DRIVERS\ssadmdfl.sys
19:20:55.0078 4640 ssadmdfl - ok
19:20:55.0093 4640 [ 4DA7C71BFAC5AD71255B7E4CAB980163 ] ssadmdm C:\Windows\system32\DRIVERS\ssadmdm.sys
19:20:55.0109 4640 ssadmdm - ok
19:20:55.0125 4640 [ D33D1BD3EC0E766211A234F56A12726D ] ssadserd C:\Windows\system32\DRIVERS\ssadserd.sys
19:20:55.0171 4640 ssadserd - ok
19:20:55.0203 4640 [ 51B52FBD583CDE8AA9BA62B8B4298F33 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll
19:20:55.0250 4640 SSDPSRV - ok
19:20:55.0265 4640 [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB ] SstpSvc C:\Windows\system32\sstpsvc.dll
19:20:55.0296 4640 SstpSvc - ok
19:20:55.0328 4640 Steam Client Service - ok
19:20:55.0359 4640 [ F3817967ED533D08327DC73BC4D5542A ] stexstor C:\Windows\system32\DRIVERS\stexstor.sys
19:20:55.0375 4640 stexstor - ok
19:20:55.0421 4640 [ 8DD52E8E6128F4B2DA92CE27402871C1 ] stisvc C:\Windows\System32\wiaservc.dll
19:20:55.0468 4640 stisvc - ok
19:20:55.0515 4640 [ 7785DC213270D2FC066538DAF94087E7 ] storflt C:\Windows\system32\drivers\vmstorfl.sys
19:20:55.0531 4640 storflt - ok
19:20:55.0546 4640 [ C40841817EF57D491F22EB103DA587CC ] StorSvc C:\Windows\system32\storsvc.dll
19:20:55.0609 4640 StorSvc - ok
19:20:55.0640 4640 [ D34E4943D5AC096C8EDEEBFD80D76E23 ] storvsc C:\Windows\system32\drivers\storvsc.sys
19:20:55.0656 4640 storvsc - ok
19:20:55.0671 4640 [ D01EC09B6711A5F8E7E6564A4D0FBC90 ] swenum C:\Windows\system32\drivers\swenum.sys
19:20:55.0687 4640 swenum - ok
19:20:55.0781 4640 [ F577910A133A592234EBAAD3F3AFA258 ] SwitchBoard C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
19:20:55.0796 4640 SwitchBoard ( UnsignedFile.Multi.Generic ) - warning
19:20:55.0796 4640 SwitchBoard - detected UnsignedFile.Multi.Generic (1)
19:20:55.0828 4640 [ E08E46FDD841B7184194011CA1955A0B ] swprv C:\Windows\System32\swprv.dll
19:20:55.0890 4640 swprv - ok
19:20:55.0984 4640 [ BF9CCC0BF39B418C8D0AE8B05CF95B7D ] SysMain C:\Windows\system32\sysmain.dll
19:20:56.0078 4640 SysMain - ok
19:20:56.0109 4640 [ E3C61FD7B7C2557E1F1B0B4CEC713585 ] TabletInputService C:\Windows\System32\TabSvc.dll
19:20:56.0125 4640 TabletInputService - ok
19:20:56.0171 4640 [ 40F0849F65D13EE87B9A9AE3C1DD6823 ] TapiSrv C:\Windows\System32\tapisrv.dll
19:20:56.0218 4640 TapiSrv - ok
19:20:56.0265 4640 [ 1BE03AC720F4D302EA01D40F588162F6 ] TBS C:\Windows\System32\tbssvc.dll
19:20:56.0296 4640 TBS - ok
19:20:56.0375 4640 [ B62A953F2BF3922C8764A29C34A22899 ] Tcpip C:\Windows\system32\drivers\tcpip.sys
19:20:56.0468 4640 Tcpip - ok
19:20:56.0578 4640 [ B62A953F2BF3922C8764A29C34A22899 ] TCPIP6 C:\Windows\system32\DRIVERS\tcpip.sys
19:20:56.0609 4640 TCPIP6 - ok
19:20:56.0625 4640 [ 1B16D0BD9841794A6E0CDE0CEF744ABC ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys
19:20:56.0656 4640 tcpipreg - ok
19:20:56.0687 4640 [ 3371D21011695B16333A3934340C4E7C ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys
19:20:56.0750 4640 TDPIPE - ok
19:20:56.0765 4640 [ 51C5ECEB1CDEE2468A1748BE550CFBC8 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys
19:20:56.0796 4640 TDTCP - ok
19:20:56.0859 4640 [ DDAD5A7AB24D8B65F8D724F5C20FD806 ] tdx C:\Windows\system32\DRIVERS\tdx.sys
19:20:56.0921 4640 tdx - ok
19:20:56.0984 4640 [ 561E7E1F06895D78DE991E01DD0FB6E5 ] TermDD C:\Windows\system32\drivers\termdd.sys
19:20:56.0984 4640 TermDD - ok
19:20:57.0125 4640 [ 2E648163254233755035B46DD7B89123 ] TermService C:\Windows\System32\termsrv.dll
19:20:57.0187 4640 TermService - ok
19:20:57.0218 4640 [ F0344071948D1A1FA732231785A0664C ] Themes C:\Windows\system32\themeservice.dll
19:20:57.0234 4640 Themes - ok
19:20:57.0250 4640 [ E40E80D0304A73E8D269F7141D77250B ] THREADORDER C:\Windows\system32\mmcss.dll
19:20:57.0281 4640 THREADORDER - ok
19:20:57.0312 4640 [ BD672184765A3E3EE117105632472920 ] Tpkd C:\Windows\system32\drivers\Tpkd.sys
19:20:57.0312 4640 Tpkd - ok
19:20:57.0359 4640 [ 7E7AFD841694F6AC397E99D75CEAD49D ] TrkWks C:\Windows\System32\trkwks.dll
19:20:57.0406 4640 TrkWks - ok
19:20:57.0484 4640 [ 773212B2AAA24C1E31F10246B15B276C ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
19:20:57.0531 4640 TrustedInstaller - ok
19:20:57.0546 4640 [ CE18B2CDFC837C99E5FAE9CA6CBA5D30 ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys
19:20:57.0593 4640 tssecsrv - ok
19:20:57.0640 4640 [ 17C6B51CBCCDED95B3CC14E22791F85E ] TsUsbFlt C:\Windows\system32\drivers\tsusbflt.sys
19:20:57.0687 4640 TsUsbFlt - ok
19:20:57.0812 4640 [ 6AD9517C083D88BDE53DC9F5EAD8A0D9 ] TuneUp.UtilitiesSvc C:\Program Files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesService64.exe
19:20:57.0890 4640 TuneUp.UtilitiesSvc - ok
19:20:57.0906 4640 [ DCC94C51D27C7EC0DADECA8F64C94FCF ] TuneUpUtilitiesDrv C:\Program Files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesDriver64.sys
19:20:57.0921 4640 TuneUpUtilitiesDrv - ok
19:20:57.0937 4640 [ 3566A8DAAFA27AF944F5D705EAA64894 ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys
19:20:57.0984 4640 tunnel - ok
19:20:58.0015 4640 [ B4DD609BD7E282BFC683CEC7EAAAAD67 ] uagp35 C:\Windows\system32\DRIVERS\uagp35.sys
19:20:58.0046 4640 uagp35 - ok
19:20:58.0062 4640 [ FF4232A1A64012BAA1FD97C7B67DF593 ] udfs C:\Windows\system32\DRIVERS\udfs.sys
19:20:58.0109 4640 udfs - ok
19:20:58.0156 4640 [ 3CBDEC8D06B9968ABA702EBA076364A1 ] UI0Detect C:\Windows\system32\UI0Detect.exe
19:20:58.0187 4640 UI0Detect - ok
19:20:58.0234 4640 [ 4BFE1BC28391222894CBF1E7D0E42320 ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys
19:20:58.0250 4640 uliagpkx - ok
19:20:58.0265 4640 [ DC54A574663A895C8763AF0FA1FF7561 ] umbus C:\Windows\system32\DRIVERS\umbus.sys
19:20:58.0296 4640 umbus - ok
19:20:58.0328 4640 [ B2E8E8CB557B156DA5493BBDDCC1474D ] UmPass C:\Windows\system32\DRIVERS\umpass.sys
19:20:58.0359 4640 UmPass - ok
19:20:58.0421 4640 [ A293DCD756D04D8492A750D03B9A297C ] UmRdpService C:\Windows\System32\umrdp.dll
19:20:58.0468 4640 UmRdpService - ok
19:20:58.0500 4640 [ D47EC6A8E81633DD18D2436B19BAF6DE ] upnphost C:\Windows\System32\upnphost.dll
19:20:58.0562 4640 upnphost - ok
19:20:58.0625 4640 [ FB251567F41BC61988B26731DEC19E4B ] USBAAPL64 C:\Windows\system32\Drivers\usbaapl64.sys
19:20:58.0640 4640 USBAAPL64 ( UnsignedFile.Multi.Generic ) - warning
19:20:58.0640 4640 USBAAPL64 - detected UnsignedFile.Multi.Generic (1)
19:20:58.0671 4640 [ 82E8F44688E6FAC57B5B7C6FC7ADBC2A ] usbaudio C:\Windows\system32\drivers\usbaudio.sys
19:20:58.0703 4640 usbaudio - ok
19:20:58.0750 4640 [ 6F1A3157A1C89435352CEB543CDB359C ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys
19:20:58.0781 4640 usbccgp - ok
19:20:58.0796 4640 [ AF0892A803FDDA7492F595368E3B68E7 ] usbcir C:\Windows\system32\drivers\usbcir.sys
19:20:58.0812 4640 usbcir - ok
19:20:58.0843 4640 [ C025055FE7B87701EB042095DF1A2D7B ] usbehci C:\Windows\system32\DRIVERS\usbehci.sys
19:20:58.0875 4640 usbehci - ok
19:20:58.0906 4640 [ 287C6C9410B111B68B52CA298F7B8C24 ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys
19:20:58.0953 4640 usbhub - ok
19:20:58.0984 4640 [ 58E546BBAF87664FC57E0F6081E4F609 ] usbohci C:\Windows\system32\DRIVERS\usbohci.sys
19:20:59.0015 4640 usbohci - ok
19:20:59.0031 4640 [ 73188F58FB384E75C4063D29413CEE3D ] usbprint C:\Windows\system32\DRIVERS\usbprint.sys
19:20:59.0062 4640 usbprint - ok
19:20:59.0093 4640 [ AAA2513C8AED8B54B189FD0C6B1634C0 ] usbscan C:\Windows\system32\DRIVERS\usbscan.sys
19:20:59.0125 4640 usbscan - ok
19:20:59.0156 4640 [ FED648B01349A3C8395A5169DB5FB7D6 ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS
19:20:59.0203 4640 USBSTOR - ok
19:20:59.0218 4640 [ 62069A34518BCF9C1FD9E74B3F6DB7CD ] usbuhci C:\Windows\system32\DRIVERS\usbuhci.sys
19:20:59.0250 4640 usbuhci - ok
19:20:59.0296 4640 [ 454800C2BC7F3927CE030141EE4F4C50 ] usbvideo C:\Windows\system32\Drivers\usbvideo.sys
19:20:59.0312 4640 usbvideo - ok
19:20:59.0343 4640 [ EDBB23CBCF2CDF727D64FF9B51A6070E ] UxSms C:\Windows\System32\uxsms.dll
19:20:59.0390 4640 UxSms - ok
19:20:59.0437 4640 [ 69AF1428FE0E790F31CC2F10483B40C9 ] UxTuneUp C:\Windows\System32\uxtuneup.dll
19:20:59.0453 4640 UxTuneUp - ok
19:20:59.0468 4640 [ C118A82CD78818C29AB228366EBF81C3 ] VaultSvc C:\Windows\system32\lsass.exe
19:20:59.0468 4640 VaultSvc - ok
19:20:59.0500 4640 [ C5C876CCFC083FF3B128F933823E87BD ] vdrvroot C:\Windows\system32\drivers\vdrvroot.sys
19:20:59.0515 4640 vdrvroot - ok
19:20:59.0546 4640 [ 8D6B481601D01A456E75C3210F1830BE ] vds C:\Windows\System32\vds.exe
19:20:59.0609 4640 vds - ok
19:20:59.0656 4640 [ DA4DA3F5E02943C2DC8C6ED875DE68DD ] vga C:\Windows\system32\DRIVERS\vgapnp.sys
19:20:59.0656 4640 vga - ok
19:20:59.0687 4640 [ 53E92A310193CB3C03BEA963DE7D9CFC ] VgaSave C:\Windows\System32\drivers\vga.sys
19:20:59.0734 4640 VgaSave - ok
19:20:59.0781 4640 [ 2CE2DF28C83AEAF30084E1B1EB253CBB ] vhdmp C:\Windows\system32\drivers\vhdmp.sys
19:20:59.0812 4640 vhdmp - ok
19:20:59.0843 4640 [ E5689D93FFE4E5D66C0178761240DD54 ] viaide C:\Windows\system32\drivers\viaide.sys
19:20:59.0843 4640 viaide - ok
19:20:59.0859 4640 [ 86EA3E79AE350FEA5331A1303054005F ] vmbus C:\Windows\system32\drivers\vmbus.sys
19:20:59.0875 4640 vmbus - ok
19:20:59.0890 4640 [ 7DE90B48F210D29649380545DB45A187 ] VMBusHID C:\Windows\system32\drivers\VMBusHID.sys
19:20:59.0921 4640 VMBusHID - ok
19:20:59.0937 4640 [ D2AAFD421940F640B407AEFAAEBD91B0 ] volmgr C:\Windows\system32\drivers\volmgr.sys
19:20:59.0953 4640 volmgr - ok
19:20:59.0968 4640 [ A255814907C89BE58B79EF2F189B843B ] volmgrx C:\Windows\system32\drivers\volmgrx.sys
19:20:59.0984 4640 volmgrx - ok
19:21:00.0000 4640 [ 0D08D2F3B3FF84E433346669B5E0F639 ] volsnap C:\Windows\system32\drivers\volsnap.sys
19:21:00.0015 4640 volsnap - ok
19:21:00.0046 4640 [ 5E2016EA6EBACA03C04FEAC5F330D997 ] vsmraid C:\Windows\system32\DRIVERS\vsmraid.sys
19:21:00.0062 4640 vsmraid - ok
19:21:00.0156 4640 [ B60BA0BC31B0CB414593E169F6F21CC2 ] VSS C:\Windows\system32\vssvc.exe
19:21:00.0250 4640 VSS - ok
19:21:00.0281 4640 [ 36D4720B72B5C5D9CB2B9C29E9DF67A1 ] vwifibus C:\Windows\System32\drivers\vwifibus.sys
19:21:00.0312 4640 vwifibus - ok
19:21:00.0343 4640 [ 1C9D80CC3849B3788048078C26486E1A ] W32Time C:\Windows\system32\w32time.dll
19:21:00.0390 4640 W32Time - ok
19:21:00.0406 4640 [ 4E9440F4F152A7B944CB1663D3935A3E ] WacomPen C:\Windows\system32\DRIVERS\wacompen.sys
19:21:00.0437 4640 WacomPen - ok
19:21:00.0468 4640 [ 356AFD78A6ED4457169241AC3965230C ] WANARP C:\Windows\system32\DRIVERS\wanarp.sys
19:21:00.0515 4640 WANARP - ok
19:21:00.0546 4640 [ 356AFD78A6ED4457169241AC3965230C ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys
19:21:00.0562 4640 Wanarpv6 - ok
19:21:00.0718 4640 [ 78F4E7F5C56CB9716238EB57DA4B6A75 ] wbengine C:\Windows\system32\wbengine.exe
19:21:00.0796 4640 wbengine - ok
19:21:00.0828 4640 [ 3AA101E8EDAB2DB4131333F4325C76A3 ] WbioSrvc C:\Windows\System32\wbiosrvc.dll
19:21:00.0843 4640 WbioSrvc - ok
19:21:00.0875 4640 [ 7368A2AFD46E5A4481D1DE9D14848EDD ] wcncsvc C:\Windows\System32\wcncsvc.dll
19:21:00.0890 4640 wcncsvc - ok
19:21:00.0906 4640 [ 20F7441334B18CEE52027661DF4A6129 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
19:21:00.0937 4640 WcsPlugInService - ok
19:21:00.0953 4640 [ 72889E16FF12BA0F235467D6091B17DC ] Wd C:\Windows\system32\DRIVERS\wd.sys
19:21:00.0968 4640 Wd - ok
19:21:01.0031 4640 [ 442783E2CB0DA19873B7A63833FF4CB4 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys
19:21:01.0062 4640 Wdf01000 - ok
19:21:01.0078 4640 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiServiceHost C:\Windows\system32\wdi.dll
19:21:01.0203 4640 WdiServiceHost - ok
19:21:01.0218 4640 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiSystemHost C:\Windows\system32\wdi.dll
19:21:01.0234 4640 WdiSystemHost - ok
19:21:01.0296 4640 [ 3DB6D04E1C64272F8B14EB8BC4616280 ] WebClient C:\Windows\System32\webclnt.dll
19:21:01.0343 4640 WebClient - ok
19:21:01.0406 4640 [ C749025A679C5103E575E3B48E092C43 ] Wecsvc C:\Windows\system32\wecsvc.dll
19:21:01.0468 4640 Wecsvc - ok
19:21:01.0484 4640 [ 7E591867422DC788B9E5BD337A669A08 ] wercplsupport C:\Windows\System32\wercplsupport.dll
19:21:01.0562 4640 wercplsupport - ok
19:21:01.0578 4640 [ 6D137963730144698CBD10F202E9F251 ] WerSvc C:\Windows\System32\WerSvc.dll
19:21:01.0625 4640 WerSvc - ok
19:21:01.0656 4640 [ 611B23304BF067451A9FDEE01FBDD725 ] WfpLwf C:\Windows\system32\DRIVERS\wfplwf.sys
19:21:01.0687 4640 WfpLwf - ok
19:21:01.0703 4640 [ 05ECAEC3E4529A7153B3136CEB49F0EC ] WIMMount C:\Windows\system32\drivers\wimmount.sys
19:21:01.0734 4640 WIMMount - ok
19:21:01.0750 4640 WinDefend - ok
19:21:01.0750 4640 WinHttpAutoProxySvc - ok
19:21:01.0890 4640 [ 19B07E7E8915D701225DA41CB3877306 ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll
19:21:01.0968 4640 Winmgmt - ok
19:21:02.0046 4640 [ BCB1310604AA415C4508708975B3931E ] WinRM C:\Windows\system32\WsmSvc.dll
19:21:02.0156 4640 WinRM - ok
19:21:02.0218 4640 [ FE88B288356E7B47B74B13372ADD906D ] WinUsb C:\Windows\system32\DRIVERS\WinUsb.sys
19:21:02.0234 4640 WinUsb - ok
19:21:02.0359 4640 [ 4FADA86E62F18A1B2F42BA18AE24E6AA ] Wlansvc C:\Windows\System32\wlansvc.dll
19:21:02.0406 4640 Wlansvc - ok
19:21:02.0421 4640 [ F6FF8944478594D0E414D3F048F0D778 ] WmiAcpi C:\Windows\system32\drivers\wmiacpi.sys
19:21:02.0453 4640 WmiAcpi - ok
19:21:02.0500 4640 [ 38B84C94C5A8AF291ADFEA478AE54F93 ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe
19:21:02.0531 4640 wmiApSrv - ok
19:21:02.0562 4640 WMPNetworkSvc - ok
19:21:02.0609 4640 [ 96C6E7100D724C69FCF9E7BF590D1DCA ] WPCSvc C:\Windows\System32\wpcsvc.dll
19:21:02.0671 4640 WPCSvc - ok
19:21:02.0687 4640 [ 93221146D4EBBF314C29B23CD6CC391D ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll
19:21:02.0703 4640 WPDBusEnum - ok
19:21:02.0750 4640 [ 6BCC1D7D2FD2453957C5479A32364E52 ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys
19:21:02.0781 4640 ws2ifsl - ok
19:21:02.0812 4640 [ E8B1FE6669397D1772D8196DF0E57A9E ] wscsvc C:\Windows\System32\wscsvc.dll
19:21:02.0859 4640 wscsvc - ok
19:21:02.0859 4640 WSearch - ok
19:21:02.0984 4640 [ D9EF901DCA379CFE914E9FA13B73B4C4 ] wuauserv C:\Windows\system32\wuaueng.dll
19:21:03.0109 4640 wuauserv - ok
19:21:03.0140 4640 [ AB886378EEB55C6C75B4F2D14B6C869F ] WudfPf C:\Windows\system32\drivers\WudfPf.sys
19:21:03.0187 4640 WudfPf - ok
19:21:03.0203 4640 [ DDA4CAF29D8C0A297F886BFE561E6659 ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys
19:21:03.0234 4640 WUDFRd - ok
19:21:03.0265 4640 [ B20F051B03A966392364C83F009F7D17 ] wudfsvc C:\Windows\System32\WUDFSvc.dll
19:21:03.0296 4640 wudfsvc - ok
19:21:03.0359 4640 [ 9A3452B3C2A46C073166C5CF49FAD1AE ] WwanSvc C:\Windows\System32\wwansvc.dll
19:21:03.0406 4640 WwanSvc - ok
19:21:03.0421 4640 ================ Scan global ===============================
19:21:03.0437 4640 [ BA0CD8C393E8C9F83354106093832C7B ] C:\Windows\system32\basesrv.dll
19:21:03.0468 4640 [ 0C27239FEA4DB8A2AAC9E502186B7264 ] C:\Windows\system32\winsrv.dll
19:21:03.0484 4640 [ 0C27239FEA4DB8A2AAC9E502186B7264 ] C:\Windows\system32\winsrv.dll
19:21:03.0515 4640 [ D6160F9D869BA3AF0B787F971DB56368 ] C:\Windows\system32\sxssrv.dll
19:21:03.0531 4640 [ 24ACB7E5BE595468E3B9AA488B9B4FCB ] C:\Windows\system32\services.exe
19:21:03.0546 4640 [Global] - ok
19:21:03.0546 4640 ================ Scan MBR ==================================
19:21:03.0546 4640 [ 8F558EB6672622401DA993E1E865C861 ] \Device\Harddisk0\DR0
19:21:03.0765 4640 \Device\Harddisk0\DR0 - ok
19:21:03.0781 4640 [ 8F558EB6672622401DA993E1E865C861 ] \Device\Harddisk1\DR1
19:21:04.0046 4640 \Device\Harddisk1\DR1 - ok
19:21:04.0062 4640 [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk2\DR2
19:21:05.0843 4640 \Device\Harddisk2\DR2 - ok
19:21:05.0843 4640 ================ Scan VBR ==================================
19:21:05.0843 4640 [ CAB8B98E489FAF89CB6408B1C09730F1 ] \Device\Harddisk0\DR0\Partition1
19:21:05.0843 4640 \Device\Harddisk0\DR0\Partition1 - ok
19:21:05.0843 4640 [ 36C2A3ACA4ABCB9B4E58A6BCF9A185A6 ] \Device\Harddisk0\DR0\Partition2
19:21:05.0843 4640 \Device\Harddisk0\DR0\Partition2 - ok
19:21:05.0859 4640 [ 75EAB9F3044FB4D11C303AC9DB672F42 ] \Device\Harddisk0\DR0\Partition3
19:21:05.0859 4640 \Device\Harddisk0\DR0\Partition3 - ok
19:21:05.0875 4640 [ EEBA9F8CD9B6F627043AB3E32236D896 ] \Device\Harddisk1\DR1\Partition1
19:21:05.0875 4640 \Device\Harddisk1\DR1\Partition1 - ok
19:21:05.0890 4640 [ 976E47B31F85941F33CB8B8FD754C8CB ] \Device\Harddisk1\DR1\Partition2
19:21:05.0890 4640 \Device\Harddisk1\DR1\Partition2 - ok
19:21:05.0921 4640 [ 17719BC79677E0610196C50B97DC7124 ] \Device\Harddisk1\DR1\Partition3
19:21:05.0921 4640 \Device\Harddisk1\DR1\Partition3 - ok
19:21:05.0937 4640 [ 9995E64CE1BBD17EA0C8EFE6902B1F53 ] \Device\Harddisk2\DR2\Partition1
19:21:05.0984 4640 \Device\Harddisk2\DR2\Partition1 - ok
19:21:06.0015 4640 [ 2D85F0C49393631B33ED1ACDD03D4C0E ] \Device\Harddisk2\DR2\Partition2
19:21:06.0062 4640 \Device\Harddisk2\DR2\Partition2 - ok
19:21:06.0062 4640 ============================================================
19:21:06.0062 4640 Scan finished
19:21:06.0062 4640 ============================================================
19:21:06.0234 4632 Detected object count: 9
19:21:06.0234 4632 Actual detected object count: 9
19:36:36.0107 4632 Adobe LM Service ( UnsignedFile.Multi.Generic ) - skipped by user
19:36:36.0107 4632 Adobe LM Service ( UnsignedFile.Multi.Generic ) - User select action: Skip
19:36:36.0108 4632 EpsonBidirectionalService ( UnsignedFile.Multi.Generic ) - skipped by user
19:36:36.0108 4632 EpsonBidirectionalService ( UnsignedFile.Multi.Generic ) - User select action: Skip
19:36:36.0110 4632 EPSON_EB_RPCV4_04 ( UnsignedFile.Multi.Generic ) - skipped by user
19:36:36.0110 4632 EPSON_EB_RPCV4_04 ( UnsignedFile.Multi.Generic ) - User select action: Skip
19:36:36.0111 4632 MarvinBus ( UnsignedFile.Multi.Generic ) - skipped by user
19:36:36.0112 4632 MarvinBus ( UnsignedFile.Multi.Generic ) - User select action: Skip
19:36:36.0113 4632 NIHardwareService ( UnsignedFile.Multi.Generic ) - skipped by user
19:36:36.0113 4632 NIHardwareService ( UnsignedFile.Multi.Generic ) - User select action: Skip
19:36:36.0114 4632 PaceLicenseDServices ( UnsignedFile.Multi.Generic ) - skipped by user
19:36:36.0114 4632 PaceLicenseDServices ( UnsignedFile.Multi.Generic ) - User select action: Skip
19:36:36.0115 4632 sptd ( LockedFile.Multi.Generic ) - skipped by user
19:36:36.0115 4632 sptd ( LockedFile.Multi.Generic ) - User select action: Skip
19:36:36.0116 4632 SwitchBoard ( UnsignedFile.Multi.Generic ) - skipped by user
19:36:36.0116 4632 SwitchBoard ( UnsignedFile.Multi.Generic ) - User select action: Skip
19:36:36.0117 4632 USBAAPL64 ( UnsignedFile.Multi.Generic ) - skipped by user
19:36:36.0117 4632 USBAAPL64 ( UnsignedFile.Multi.Generic ) - User select action: Skip
19:38:39.0894 4448 Deinitialize success

Hi,
Scan mit Combofix

WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link

WICHTIG: Speichere Combofix auf deinem Desktop.

Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.

Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.

Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!

Wenn Combofix fertig ist, wird es ein Logfile erstellen.

Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).

Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.

Combofix Logfile:

Code:

ComboFix 13-02-18.01 - Sicky Popp 18.02.2013  17:31:06.1.2 - x64

Microsoft Windows 7 Professional   6.1.7601.1.1252.49.1031.18.8191.6862 [GMT 1:00]

ausgeführt von:: c:\users\Sicky Popp\Desktop\ComboFix.exe

AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}

SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}

SP: Spybot - Search and Destroy *Disabled/Outdated* {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}

SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

.

.

((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))

.

.

C:\prefs.js

c:\users\Sicky Popp\AppData\Roaming\chrtmp

c:\windows\SysWow64\muzapp.exe

.

.

(((((((((((((((((((((((   Dateien erstellt von 2013-01-18 bis 2013-02-18  ))))))))))))))))))))))))))))))

.

.

2013-02-18 16:40 . 2013-02-18 16:40        --------        d-----w-        c:\users\Default\AppData\Local\temp

2013-02-18 16:38 . 2013-02-18 16:38        76232        ----a-w-        c:\programdata\Microsoft\Windows Defender\Definition Updates\{133C7150-80F5-4E92-9B8B-DCD736B01EA8}\offreg.dll

2013-02-17 18:54 . 2013-02-17 18:54        --------        d-----w-        c:\program files (x86)\Free Video Converter

2013-02-17 18:54 . 2013-02-17 18:54        --------        d-----w-        c:\users\Sicky Popp\AppData\Roaming\FreeVideoConverter

2013-02-17 00:53 . 2013-02-17 00:58        --------        d-----w-        c:\programdata\Search Protection

2013-02-17 00:52 . 2013-02-17 00:52        --------        d-----w-        c:\programdata\Downloaded Installations

2013-02-17 00:51 . 2013-02-17 00:51        --------        d-----w-        c:\users\Sicky Popp\AppData\Roaming\LavasoftStatistics

2013-02-17 00:51 . 2013-02-17 00:51        14456        ----a-w-        c:\windows\system32\drivers\gfibto.sys

2013-02-16 21:24 . 2013-02-16 21:24        159744        ----a-w-        c:\program files (x86)\Internet Explorer\Plugins\npqtplugin7.dll

2013-02-16 21:24 . 2013-02-16 21:24        159744        ----a-w-        c:\program files (x86)\Internet Explorer\Plugins\npqtplugin6.dll

2013-02-16 21:24 . 2013-02-16 21:24        159744        ----a-w-        c:\program files (x86)\Internet Explorer\Plugins\npqtplugin5.dll

2013-02-16 21:24 . 2013-02-16 21:24        159744        ----a-w-        c:\program files (x86)\Internet Explorer\Plugins\npqtplugin4.dll

2013-02-16 21:24 . 2013-02-16 21:24        159744        ----a-w-        c:\program files (x86)\Internet Explorer\Plugins\npqtplugin3.dll

2013-02-16 21:24 . 2013-02-16 21:24        159744        ----a-w-        c:\program files (x86)\Internet Explorer\Plugins\npqtplugin2.dll

2013-02-16 21:24 . 2013-02-16 21:24        159744        ----a-w-        c:\program files (x86)\Internet Explorer\Plugins\npqtplugin.dll

2013-02-16 21:21 . 2012-07-01 23:15        4102656        ----a-w-        c:\windows\SysWow64\x264vfw.dll

2013-02-16 21:21 . 2011-12-07 18:32        216064        ----a-w-        c:\windows\SysWow64\lagarith.dll

2013-02-16 21:21 . 2011-06-24 15:44        243200        ----a-w-        c:\windows\SysWow64\xvidvfw.dll

2013-02-16 21:21 . 2012-06-09 18:21        178688        ----a-w-        c:\windows\SysWow64\unrar.dll

2013-02-16 21:21 . 2011-12-21 18:14        151552        ----a-w-        c:\windows\SysWow64\ac3acm.acm

2013-02-16 21:21 . 2013-02-06 18:00        112640        ----a-w-        c:\windows\SysWow64\ff_vfw.dll

2013-02-16 21:21 . 2013-02-16 21:21        --------        d-----w-        c:\program files (x86)\K-Lite Codec Pack

2013-02-15 11:26 . 2013-01-08 05:32        9161176        ----a-w-        c:\programdata\Microsoft\Windows Defender\Definition Updates\{133C7150-80F5-4E92-9B8B-DCD736B01EA8}\mpengine.dll

2013-02-14 01:05 . 2013-01-08 22:01        768000        ----a-w-        c:\program files (x86)\Common Files\Microsoft Shared\VGX\VGX.dll

2013-02-14 01:05 . 2013-01-09 01:10        996352        ----a-w-        c:\program files\Common Files\Microsoft Shared\VGX\VGX.dll

2013-02-13 20:13 . 2013-01-05 05:53        5553512        ----a-w-        c:\windows\system32\ntoskrnl.exe

2013-02-13 20:13 . 2013-01-05 05:00        3967848        ----a-w-        c:\windows\SysWow64\ntkrnlpa.exe

2013-02-13 20:13 . 2013-01-05 05:00        3913064        ----a-w-        c:\windows\SysWow64\ntoskrnl.exe

2013-02-13 20:13 . 2013-01-04 03:26        3153408        ----a-w-        c:\windows\system32\win32k.sys

2013-02-13 20:13 . 2013-01-04 05:46        215040        ----a-w-        c:\windows\system32\winsrv.dll

2013-02-13 20:13 . 2013-01-04 02:47        25600        ----a-w-        c:\windows\SysWow64\setup16.exe

2013-02-13 20:13 . 2013-01-04 02:47        7680        ----a-w-        c:\windows\SysWow64\instnm.exe

2013-02-13 20:13 . 2013-01-04 02:47        14336        ----a-w-        c:\windows\SysWow64\ntvdm64.dll

2013-02-13 20:13 . 2013-01-04 04:51        5120        ----a-w-        c:\windows\SysWow64\wow32.dll

2013-02-13 20:13 . 2013-01-04 02:47        2048        ----a-w-        c:\windows\SysWow64\user.exe

2013-02-13 20:13 . 2013-01-03 06:00        1913192        ----a-w-        c:\windows\system32\drivers\tcpip.sys

2013-02-13 20:13 . 2013-01-03 06:00        288088        ----a-w-        c:\windows\system32\drivers\FWPKCLNT.SYS

2013-02-13 09:59 . 2013-02-13 09:59        --------        d-----w-        c:\program files (x86)\Magellan

2013-02-12 23:26 . 2013-02-12 23:26        --------        d-----w-        c:\windows\SysWow64\wbem\en-US

2013-02-12 23:26 . 2013-02-12 23:26        --------        d-----w-        c:\windows\system32\wbem\en-US

2013-02-12 23:21 . 2013-02-12 23:21        --------        d-----w-        c:\program files\Microsoft Silverlight

2013-02-12 23:21 . 2013-02-12 23:21        --------        d-----w-        c:\program files (x86)\Microsoft Silverlight

2013-02-12 23:17 . 2012-08-23 15:09        3584        ----a-w-        c:\windows\system32\drivers\de-DE\tsusbflt.sys.mui

2013-02-12 23:16 . 2012-08-24 18:09        458712        ----a-w-        c:\windows\system32\drivers\cng.sys

2013-02-12 23:16 . 2012-08-24 18:05        340992        ----a-w-        c:\windows\system32\schannel.dll

2013-02-12 23:16 . 2012-08-24 16:57        247808        ----a-w-        c:\windows\SysWow64\schannel.dll

2013-02-12 23:16 . 2012-08-24 18:13        154480        ----a-w-        c:\windows\system32\drivers\ksecpkg.sys

2013-02-12 23:16 . 2012-08-24 18:03        1448448        ----a-w-        c:\windows\system32\lsasrv.dll

2013-02-12 23:16 . 2012-08-24 16:57        22016        ----a-w-        c:\windows\SysWow64\secur32.dll

2013-02-12 23:16 . 2012-08-24 16:53        96768        ----a-w-        c:\windows\SysWow64\sspicli.dll

2013-02-12 23:15 . 2013-02-12 23:15        --------        d-----w-        c:\programdata\ATI

2013-02-12 23:15 . 2013-02-12 23:15        --------        d-----w-        c:\program files (x86)\AMD AVT

2013-02-12 23:14 . 2013-02-12 23:14        --------        d-----w-        c:\program files (x86)\AMD APP

2013-02-12 22:26 . 2013-02-12 22:26        53248        ----a-r-        c:\users\Sicky Popp\AppData\Roaming\Microsoft\Installer\{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}\ARPPRODUCTICON.exe

2013-02-12 22:26 . 2013-02-12 22:26        --------        d-----w-        c:\users\Sicky Popp\AppData\Local\Logishrd

2013-02-12 22:25 . 2013-02-12 22:25        --------        d-----w-        c:\program files\Logitech

2013-02-10 18:10 . 2013-02-17 00:06        --------        d-----w-        c:\programdata\Eisenberg

2013-02-09 05:44 . 2013-02-09 05:48        --------        d-----w-        c:\users\Sicky Popp\AppData\Roaming\ImgBurn

2013-02-09 05:39 . 2013-02-09 05:39        --------        d-----w-        c:\program files (x86)\ImgBurn

2013-02-09 05:20 . 2013-02-09 05:20        --------        d-----w-        c:\programdata\XLN Audio

2013-02-09 05:20 . 2013-02-09 07:12        --------        d-----w-        c:\program files (x86)\XLN Audio

.

.

.

((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2013-02-14 01:08 . 2011-04-13 14:08        70004024        ----a-w-        c:\windows\system32\MRT.exe

2013-02-12 22:26 . 2011-04-13 13:41        18960        ----a-w-        c:\windows\system32\drivers\LNonPnP.sys

2013-02-08 06:53 . 2012-04-02 19:21        697712        ----a-w-        c:\windows\SysWow64\FlashPlayerApp.exe

2013-02-08 06:53 . 2011-05-19 09:26        74096        ----a-w-        c:\windows\SysWow64\FlashPlayerCPLApp.cpl

2013-01-17 00:28 . 2011-04-15 09:53        273840        ------w-        c:\windows\system32\MpSigStub.exe

2013-01-15 15:56 . 2012-07-02 08:08        477616        ----a-w-        c:\windows\SysWow64\npdeployJava1.dll

2013-01-15 15:56 . 2011-05-17 01:10        473520        ----a-w-        c:\windows\SysWow64\deployJava1.dll

2013-01-04 04:43 . 2013-02-13 20:13        44032        ----a-w-        c:\windows\apppatch\acwow64.dll

2012-12-19 20:50 . 2012-12-19 20:50        5630200        ----a-w-        c:\windows\SysWow64\atiumdag.dll

2012-12-19 20:48 . 2012-12-19 20:48        11278336        ----a-w-        c:\windows\system32\drivers\atikmdag.sys

2012-12-19 20:29 . 2012-12-19 20:29        23461376        ----a-w-        c:\windows\system32\atio6axx.dll

2012-12-19 20:22 . 2012-12-19 20:22        70144        ----a-w-        c:\windows\system32\coinst_9.012.dll

2012-12-19 20:19 . 2012-12-19 20:19        163840        ----a-w-        c:\windows\system32\atiapfxx.exe

2012-12-19 20:18 . 2012-12-19 20:18        51200        ----a-w-        c:\windows\system32\aticalrt64.dll

2012-12-19 20:18 . 2012-12-19 20:18        46080        ----a-w-        c:\windows\SysWow64\aticalrt.dll

2012-12-19 20:17 . 2012-12-19 20:17        44544        ----a-w-        c:\windows\system32\aticalcl64.dll

2012-12-19 20:17 . 2012-12-19 20:17        44032        ----a-w-        c:\windows\SysWow64\aticalcl.dll

2012-12-19 20:17 . 2012-12-19 20:17        16082944        ----a-w-        c:\windows\system32\aticaldd64.dll

2012-12-19 20:13 . 2012-12-19 20:13        13703168        ----a-w-        c:\windows\SysWow64\aticaldd.dll

2012-12-19 20:12 . 2012-12-19 20:12        18982400        ----a-w-        c:\windows\SysWow64\atioglxx.dll

2012-12-19 20:09 . 2012-12-19 20:09        960512        ----a-w-        c:\windows\SysWow64\aticfx32.dll

2012-12-19 20:08 . 2011-03-09 04:55        1151488        ----a-w-        c:\windows\system32\aticfx64.dll

2012-12-19 20:06 . 2012-12-19 20:06        6681088        ----a-w-        c:\windows\SysWow64\atidxx32.dll

2012-12-19 19:59 . 2012-09-28 01:31        5087744        ----a-w-        c:\windows\system32\atiumd6a.dll

2012-12-19 19:57 . 2012-09-28 01:39        442368        ----a-w-        c:\windows\system32\atidemgy.dll

2012-12-19 19:56 . 2012-12-19 19:56        550912        ----a-w-        c:\windows\system32\atieclxx.exe

2012-12-19 19:56 . 2012-12-19 19:56        240640        ----a-w-        c:\windows\system32\atiesrxx.exe

2012-12-19 19:54 . 2012-12-19 19:54        120320        ----a-w-        c:\windows\system32\atitmm64.dll

2012-12-19 19:54 . 2012-12-19 19:54        21504        ----a-w-        c:\windows\system32\atimuixx.dll

2012-12-19 19:54 . 2012-12-19 19:54        59392        ----a-w-        c:\windows\system32\atiedu64.dll

2012-12-19 19:54 . 2012-12-19 19:54        43520        ----a-w-        c:\windows\SysWow64\ati2edxx.dll

2012-12-19 19:49 . 2011-03-09 04:40        7370752        ----a-w-        c:\windows\system32\atidxx64.dll

2012-12-19 19:44 . 2012-12-19 19:44        4162048        ----a-w-        c:\windows\SysWow64\atiumdva.dll

2012-12-19 19:44 . 2012-09-28 01:25        6786560        ----a-w-        c:\windows\system32\atiumd64.dll

2012-12-19 19:33 . 2012-12-19 19:33        56320        ----a-w-        c:\windows\system32\atimpc64.dll

2012-12-19 19:33 . 2012-12-19 19:33        56320        ----a-w-        c:\windows\system32\amdpcom64.dll

2012-12-19 19:33 . 2012-09-28 01:13        619008        ----a-w-        c:\windows\system32\atiadlxx.dll

2012-12-19 19:33 . 2012-12-19 19:33        56832        ----a-w-        c:\windows\SysWow64\atimpc32.dll

2012-12-19 19:33 . 2012-12-19 19:33        56832        ----a-w-        c:\windows\SysWow64\amdpcom32.dll

2012-12-19 19:33 . 2012-12-19 19:33        421888        ----a-w-        c:\windows\SysWow64\atiadlxy.dll

2012-12-19 19:33 . 2012-12-19 19:33        17920        ----a-w-        c:\windows\system32\atig6pxx.dll

2012-12-19 19:33 . 2012-12-19 19:33        14848        ----a-w-        c:\windows\SysWow64\atiglpxx.dll

2012-12-19 19:33 . 2012-12-19 19:33        14848        ----a-w-        c:\windows\system32\atiglpxx.dll

2012-12-19 19:33 . 2012-12-19 19:33        41984        ----a-w-        c:\windows\system32\atig6txx.dll

2012-12-19 19:33 . 2012-12-19 19:33        33280        ----a-w-        c:\windows\SysWow64\atigktxx.dll

2012-12-19 19:32 . 2012-12-19 19:32        552960        ----a-w-        c:\windows\system32\drivers\atikmpag.sys

2012-12-19 19:31 . 2011-03-09 04:17        130048        ----a-w-        c:\windows\system32\atiuxp64.dll

2012-12-19 19:31 . 2012-12-19 19:31        109568        ----a-w-        c:\windows\SysWow64\atiuxpag.dll

2012-12-19 19:31 . 2012-06-13 01:35        104448        ----a-w-        c:\windows\system32\atiu9p64.dll

2012-12-19 19:30 . 2012-12-19 19:30        83968        ----a-w-        c:\windows\SysWow64\atiu9pag.dll

2012-12-19 19:30 . 2012-12-19 19:30        53248        ----a-w-        c:\windows\system32\drivers\ati2erec.dll

2012-12-19 14:45 . 2012-12-19 14:45        222720        ----a-w-        c:\windows\system32\clinfo.exe

2012-12-19 14:44 . 2012-12-19 14:44        76288        ----a-w-        c:\windows\system32\OpenVideo64.dll

2012-12-19 14:44 . 2012-12-19 14:44        65536        ----a-w-        c:\windows\SysWow64\OpenVideo.dll

2012-12-19 14:44 . 2012-12-19 14:44        64000        ----a-w-        c:\windows\system32\OVDecode64.dll

2012-12-19 14:44 . 2012-12-19 14:44        56320        ----a-w-        c:\windows\SysWow64\OVDecode.dll

2012-12-19 14:44 . 2012-12-19 14:44        34518016        ----a-w-        c:\windows\system32\amdocl64.dll

2012-12-19 14:38 . 2012-12-19 14:38        28732928        ----a-w-        c:\windows\SysWow64\amdocl.dll

2012-12-19 14:34 . 2012-12-19 14:34        54784        ----a-w-        c:\windows\system32\OpenCL.dll

2012-12-19 14:34 . 2012-12-19 14:34        50176        ----a-w-        c:\windows\SysWow64\OpenCL.dll

2012-12-16 17:11 . 2012-12-20 22:50        46080        ----a-w-        c:\windows\system32\atmlib.dll

2012-12-16 14:45 . 2012-12-20 22:50        367616        ----a-w-        c:\windows\system32\atmfd.dll

2012-12-16 14:13 . 2012-12-20 22:50        295424        ----a-w-        c:\windows\SysWow64\atmfd.dll

2012-12-16 14:13 . 2012-12-20 22:50        34304        ----a-w-        c:\windows\SysWow64\atmlib.dll

2012-12-07 13:20 . 2013-01-09 16:58        441856        ----a-w-        c:\windows\system32\Wpc.dll

2012-12-07 13:15 . 2013-01-09 16:58        2746368        ----a-w-        c:\windows\system32\gameux.dll

2012-12-07 12:26 . 2013-01-09 16:58        308736        ----a-w-        c:\windows\SysWow64\Wpc.dll

2012-12-07 12:20 . 2013-01-09 16:58        2576384        ----a-w-        c:\windows\SysWow64\gameux.dll

2012-12-07 11:20 . 2013-01-09 16:58        30720        ----a-w-        c:\windows\system32\usk.rs

2012-12-07 11:20 . 2013-01-09 16:58        43520        ----a-w-        c:\windows\system32\csrr.rs

2012-12-07 11:20 . 2013-01-09 16:58        23552        ----a-w-        c:\windows\system32\oflc.rs

2012-12-07 11:20 . 2013-01-09 16:58        45568        ----a-w-        c:\windows\system32\oflc-nz.rs

2012-12-07 11:20 . 2013-01-09 16:58        44544        ----a-w-        c:\windows\system32\pegibbfc.rs

2012-12-07 11:20 . 2013-01-09 16:58        20480        ----a-w-        c:\windows\system32\pegi-fi.rs

2012-12-07 11:20 . 2013-01-09 16:58        20480        ----a-w-        c:\windows\system32\pegi-pt.rs

2012-12-07 11:19 . 2013-01-09 16:58        20480        ----a-w-        c:\windows\system32\pegi.rs

2012-12-07 11:19 . 2013-01-09 16:58        46592        ----a-w-        c:\windows\system32\fpb.rs

2012-12-07 11:19 . 2013-01-09 16:58        40960        ----a-w-        c:\windows\system32\cob-au.rs

2012-12-07 11:19 . 2013-01-09 16:58        21504        ----a-w-        c:\windows\system32\grb.rs

2012-12-07 11:19 . 2013-01-09 16:58        15360        ----a-w-        c:\windows\system32\djctq.rs

2012-12-07 11:19 . 2013-01-09 16:58        55296        ----a-w-        c:\windows\system32\cero.rs

2012-12-07 11:19 . 2013-01-09 16:58        51712        ----a-w-        c:\windows\system32\esrb.rs

2012-12-07 10:46 . 2013-01-09 16:58        43520        ----a-w-        c:\windows\SysWow64\csrr.rs

2012-12-07 10:46 . 2013-01-09 16:58        30720        ----a-w-        c:\windows\SysWow64\usk.rs

2012-12-07 10:46 . 2013-01-09 16:58        45568        ----a-w-        c:\windows\SysWow64\oflc-nz.rs

2012-12-07 10:46 . 2013-01-09 16:58        44544        ----a-w-        c:\windows\SysWow64\pegibbfc.rs

2012-12-07 10:46 . 2013-01-09 16:58        20480        ----a-w-        c:\windows\SysWow64\pegi-pt.rs

2012-12-07 10:46 . 2013-01-09 16:58        23552        ----a-w-        c:\windows\SysWow64\oflc.rs

2012-12-07 10:46 . 2013-01-09 16:58        20480        ----a-w-        c:\windows\SysWow64\pegi-fi.rs

2012-12-07 10:46 . 2013-01-09 16:58        46592        ----a-w-        c:\windows\SysWow64\fpb.rs

2012-12-07 10:46 . 2013-01-09 16:58        20480        ----a-w-        c:\windows\SysWow64\pegi.rs

2012-12-07 10:46 . 2013-01-09 16:58        21504        ----a-w-        c:\windows\SysWow64\grb.rs

2012-12-07 10:46 . 2013-01-09 16:58        40960        ----a-w-        c:\windows\SysWow64\cob-au.rs

2012-12-07 10:46 . 2013-01-09 16:58        15360        ----a-w-        c:\windows\SysWow64\djctq.rs

2012-12-07 10:46 . 2013-01-09 16:58        55296        ----a-w-        c:\windows\SysWow64\cero.rs

2012-12-07 10:46 . 2013-01-09 16:58        51712        ----a-w-        c:\windows\SysWow64\esrb.rs

2012-11-30 05:45 . 2013-01-09 16:58        362496        ----a-w-        c:\windows\system32\wow64win.dll

2012-11-30 05:45 . 2013-01-09 16:58        243200        ----a-w-        c:\windows\system32\wow64.dll

2012-11-30 05:45 . 2013-01-09 16:58        13312        ----a-w-        c:\windows\system32\wow64cpu.dll

2012-11-30 05:43 . 2013-01-09 16:58        16384        ----a-w-        c:\windows\system32\ntvdm64.dll

.

.

((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))

.

.

*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 

REGEDIT4

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]

"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2012-10-30 4297136]

"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2012-10-11 59280]

"M-Audio Taskbar Icon"="c:\windows\system32\DeltaIITray.exe" [2012-01-25 237872]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"ConsentPromptBehaviorAdmin"= 5 (0x5)

"ConsentPromptBehaviorUser"= 3 (0x3)

"EnableUIADesktopToggle"= 0 (0x0)

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]

"mixer1"=wdmaud.drv

.

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]

BootExecute        REG_MULTI_SZ           autocheck autochk *\0\0sdnclean64.exe

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\run-]

"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe"

"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" -atboottime

"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun

"M-Audio Taskbar Icon"=c:\windows\system32\DeltaIITray.exe

"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

"AdobeCS5ServiceManager"="c:\program files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin

"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe"

"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe"

"SwitchBoard"=c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe

"DivXUpdate"="c:\program files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW

"AMD AVT"=Cmd.exe /c start "AMD Accelerated Video Transcoding device initialization" /min "c:\program files (x86)\AMD AVT\bin\kdbsync.exe" aml

"WD Spindown Utility"="c:\program files (x86)\Western Digital Technologies\Spindown\ExSpinDn.exe"

"PMBVolumeWatcher"=c:\program files (x86)\Sony\PlayMemories Home\PMBVolumeWatcher.exe

"DivXMediaServer"=c:\program files (x86)\DivX\DivX Media Server\DivXMediaServer.exe

"EEventManager"="c:\program files (x86)\Epson Software\Event Manager\EEventManager.exe"

.

R1 HWiNFO32;HWiNFO32/64 Kernel Driver;l:\tech_stick_programme\hw64_391_1485\HWiNFO64A.SYS [x]

R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]

R3 androidusb;SAMSUNG Android Composite ADB Interface Driver;c:\windows\system32\Drivers\ssadadb.sys [2011-10-27 36328]

R3 automap;Automap MIDI Driver;c:\windows\system32\DRIVERS\automap.sys [2011-07-06 19800]

R3 BEHRINGER_2902;usb-audio.de driver for BEHRINGER USB AUDIO;c:\windows\system32\Drivers\BUSB2902.sys [2009-10-30 460864]

R3 BUSB_AUDIO_WDM;BEHRINGER USB WDM AUDIO;c:\windows\system32\drivers\busbwdm.sys [2009-10-30 49728]

R3 MADFUCONECTIV;Service for M-Audio Conectiv DFU;c:\windows\system32\DRIVERS\MAudioConectiv_DFU.sys [2010-03-16 46088]

R3 MADFULEGACYKEYBOARD;Service for M-Audio Legacy Keyboard DFU;c:\windows\system32\DRIVERS\MAudioLegacyKeyboard_DFU.sys [2010-02-09 28680]

R3 ManyCam;ManyCam Virtual Webcam, WDM Video Capture Driver;c:\windows\system32\DRIVERS\ManyCam_x64.sys [2008-03-13 27136]

R3 MAUSBCONECTIV;Service for M-Audio Conectiv;c:\windows\system32\DRIVERS\MAudioConectiv.sys [2010-03-16 187912]

R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2012-08-23 19456]

R3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM);c:\windows\system32\DRIVERS\ssadbus.sys [2011-10-27 157672]

R3 ssadmdfl;SAMSUNG Android USB Modem (Filter);c:\windows\system32\DRIVERS\ssadmdfl.sys [2011-10-27 16872]

R3 ssadmdm;SAMSUNG Android USB Modem Drivers;c:\windows\system32\DRIVERS\ssadmdm.sys [2011-10-27 177640]

R3 ssadserd;SAMSUNG Android USB Diagnostic Serial Port (WDM);c:\windows\system32\DRIVERS\ssadserd.sys [2011-10-27 146920]

R3 SwitchBoard;SwitchBoard;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]

R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2012-08-23 57856]

R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys [2012-02-15 52736]

R4 ABBYY.Licensing.FineReader.Sprint.9.0;ABBYY FineReader 9.0 Sprint Licensing Service;c:\program files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe [2009-05-14 759048]

S0 gfibto;gfibto;c:\windows\system32\drivers\gfibto.sys [2013-02-17 14456]

S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys [2009-07-09 55280]

S0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [2012-04-05 503352]

S1 aswSnx;aswSnx; [x]

S1 aswSP;aswSP; [x]

S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2012-12-19 240640]

S2 aswFsBlk;aswFsBlk; [x]

S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2012-10-30 71600]

S2 EPSON_EB_RPCV4_04;EPSON V5 Service4(04);c:\program files\Common Files\EPSON\EPW!3 SSRP\E_S50STB.EXE [2011-01-12 168448]

S2 EPSON_PM_RPCV4_04;EPSON V3 Service4(04);c:\program files\Common Files\EPSON\EPW!3 SSRP\E_S50RPB.EXE [2012-11-09 151648]

S2 NIHardwareService;NIHardwareService;c:\program files\Common Files\Native Instruments\Hardware\NIHardwareService.exe [2011-12-05 5739008]

S2 PaceLicenseDServices;PACE License Services;c:\program files (x86)\Common Files\PACE\Services\LicenseServices\LDSvc.exe [2010-11-07 2647552]

S2 PMBDeviceInfoProvider;PMBDeviceInfoProvider;c:\program files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe [2012-11-27 479840]

S2 TuneUp.UtilitiesSvc;TuneUp Utilities Service;c:\program files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesService64.exe [2010-11-19 1974080]

S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys [2012-11-06 96256]

S3 DELTAII;Service for M-Audio Delta Driver (WDM);c:\windows\system32\DRIVERS\MAudioDelta.sys [2012-01-25 339760]

S3 MAUSBLEGACYKEYBOARD;Service for M-Audio Legacy Keyboard;c:\windows\system32\DRIVERS\MAudioLegacyKeyboard.sys [2010-02-09 196616]

S3 NIWinCDEmu;ISO Mounter driver;c:\windows\system32\DRIVERS\NIWinCDEmu.sys [2012-04-23 111696]

S3 NvnUsbAudio;Novation USB Audio Driver;c:\windows\system32\DRIVERS\nvnusbaudio.sys [2011-02-16 50232]

S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [2009-03-01 187392]

S3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesDriver64.sys [2010-10-07 11856]

.

.

--- Andere Dienste/Treiber im Speicher ---

.

*NewlyCreated* - WS2IFSL

.

Inhalt des "geplante Tasks" Ordners

.

2013-02-18 c:\windows\Tasks\Adobe Flash Player Updater.job

- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-02 06:53]

.

2013-02-18 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job

- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-12-14 12:29]

.

2013-02-18 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-12-14 12:29]

.

2013-02-17 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1303213111-1996448718-967368058-1001Core.job

- c:\users\Sicky Popp\AppData\Local\Google\Update\GoogleUpdate.exe [2011-11-19 12:16]

.

2013-02-18 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1303213111-1996448718-967368058-1001UA.job

- c:\users\Sicky Popp\AppData\Local\Google\Update\GoogleUpdate.exe [2011-11-19 12:16]

.

.

--------- X64 Entries -----------

.

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]

@="{472083B0-C522-11CF-8763-00608CC02F24}"

[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]

2012-10-30 22:50        133400        ----a-w-        c:\program files\AVAST Software\Avast\ashShA64.dll

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"IntelliType Pro"="c:\program files\Microsoft Mouse and Keyboard Center\itype.exe" [2012-11-02 1464944]

.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost  - NetSvcs

UxTuneUp

.

------- Zusätzlicher Suchlauf -------

.

uLocal Page = c:\windows\system32\blank.htm

uStart Page = hxxp://securesearch.lavasoft.com/?source=f439e2c0&tbp=homepage&toolbarid=adawaretb&v=2_5&u=A9DF01CB43AC7EC4704536512029F075

mLocal Page = c:\windows\SysWOW64\blank.htm

uInternet Settings,ProxyOverride = *.local

IE: Free YouTube Download - c:\users\Sicky Popp\AppData\Roaming\DVDVideoSoftIEHelpers\freeytvdownloader.htm

IE: Free YouTube to MP3 Converter - c:\users\Sicky Popp\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm

IE: {{9FB232C5-6909-4F81-99B4-BAB4998940F2}

TCP: DhcpNameServer = 192.168.0.1

.

- - - - Entfernte verwaiste Registrierungseinträge - - - -

.

Wow6432Node-HKLM-Run-SearchProtection - c:\programdata\Search Protection\_run.bat

.

.

.

--------------------- Gesperrte Registrierungsschluessel ---------------------

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

"BlindDial"=dword:00000000

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]

@Denied: (Full) (Everyone)

.

Zeit der Fertigstellung: 2013-02-18  17:42:19

ComboFix-quarantined-files.txt  2013-02-18 16:42

.

Vor Suchlauf: 10 Verzeichnis(se), 32.593.330.176 Bytes frei

Nach Suchlauf: 14 Verzeichnis(se), 32.614.952.960 Bytes frei

.

- - End Of File - - AD1632DECAA71C7B615396B910A39EF4

--- --- ---

Hi,
malwarebytes:
Downloade Dir bitte Malwarebytes

Installiere
das Programm in den vorgegebenen Pfad.
Vista und Win7 User mit Rechtsklick "als Administrator starten"
Starte Malwarebytes, klicke auf Aktualisierung --> Suche
nach Aktualisierung
Wenn das Update beendet wurde, aktiviere vollständiger Scan durchführen und drücke auf Scannen.
Wenn der Scan beendet
ist, klicke auf Ergebnisse anzeigen.
Versichere Dich, dass alle Funde markiert sind und drücke Entferne Auswahl.
Poste
das Logfile, welches sich in Notepad öffnet, hier in den Thread.
Nachträglich kannst du den Bericht unter "Log Dateien" finden.

Malwarebytes Anti-Malware 1.70.0.1100
Malwarebytes : Free anti-malware download

Datenbank Version: v2013.02.18.10

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
Sicky Popp :: TOWEROFPOWER [Administrator]

18.02.2013 20:21:40
mbam-log-2013-02-18 (20-21-40).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|E:\|F:\|G:\|H:\|I:\|J:\|)
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 613215
Laufzeit: 1 Stunde(n), 21 Minute(n), 36 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 11
D:\System Volume Information\_restore{F0BB7D97-ACEB-4657-92DC-B064E5399B39}\RP211\A0062593.exe (Backdoor.Bot) -> Erfolgreich gelöscht und in Quarantäne gestellt.
F:\Musik Content\VstPlugins\Toxic Biohazard\Plugins\Fruity\Generators\Toxic Biohazard\Toxic Biohazard.dll (Trojan.Backdoor) -> Erfolgreich gelöscht und in Quarantäne gestellt.
I:\System Volume Information\_restore{0960BA56-7E48-4D29-B919-C9F7C9E511F6}\RP37\A0022762.exe (PUP.RiskWareTool.CK) -> Erfolgreich gelöscht und in Quarantäne gestellt.
I:\System Volume Information\_restore{0960BA56-7E48-4D29-B919-C9F7C9E511F6}\RP37\A0022770.exe (Riskware.Tool.CK) -> Erfolgreich gelöscht und in Quarantäne gestellt.
I:\System Volume Information\_restore{0960BA56-7E48-4D29-B919-C9F7C9E511F6}\RP5\A0008324.exe (PUP.RiskWareTool.CK) -> Erfolgreich gelöscht und in Quarantäne gestellt.
I:\System Volume Information\_restore{0960BA56-7E48-4D29-B919-C9F7C9E511F6}\RP5\A0008332.exe (Riskware.Tool.CK) -> Erfolgreich gelöscht und in Quarantäne gestellt.
I:\System Volume Information\_restore{36DBDCE9-BD2A-40B2-83B1-DF2316C32A35}\RP43\A0003886.exe (Rootkit.Dropper) -> Erfolgreich gelöscht und in Quarantäne gestellt.
I:\System Volume Information\_restore{36DBDCE9-BD2A-40B2-83B1-DF2316C32A35}\RP43\A0003887.exe (Rootkit.Dropper) -> Erfolgreich gelöscht und in Quarantäne gestellt.
I:\System Volume Information\_restore{7F6ACDE0-D563-42EA-9D86-12F991513B41}\RP84\A0043242.exe (Trojan.Downloader) -> Erfolgreich gelöscht und in Quarantäne gestellt.
I:\System Volume Information\_restore{7F6ACDE0-D563-42EA-9D86-12F991513B41}\RP84\A0043246.exe (Trojan.Agent) -> Erfolgreich gelöscht und in Quarantäne gestellt.
I:\System Volume Information\_restore{C592EB3F-1021-4B98-A5F4-7E1DDFED006B}\RP16\A0008386.exe (Adware.TryMedia) -> Erfolgreich gelöscht und in Quarantäne gestellt.

(Ende)

Hi,
deaktiviere die Systemwiederherstellung:
Aktivieren und Deaktivieren der Systemwiederherstellung
Warte 5 Min.
starte neu, reaktiviere sie wieder.
lade den CCleaner standard:
CCleaner - Download - Filepony
falls der CCleaner
bereits instaliert, überspringen.
öffnen, Tools (extras),uninstall Llist, als txt speichern. öffnen.
hinter, jedes von dir benötigte programm, schreibe notwendig.
hinter, jedes, von dir nicht benötigte, unnötig.
hinter, dir unbekannte, unbekannt.
liste posten.

7-Zip 9.20 (x64 edition) Igor Pavlov 13.04.2011 4,53MB 9.20.00.0 benötigt
ABBYY FineReader 9.0 Sprint ABBYY 08.08.2012 9.01.513.58212 benötigt
Addictive Drums 1.5 09.02.2013 benötigt
Adobe AIR Adobe Systems Incorporated 28.11.2012 3.2.0.2070 benötigt
Adobe Audition 3.0 Adobe Systems Incorporated 08.07.2012 benötigt
Adobe Audition 3.0 Vista Compatibility 08.07.2012 benötigt
Adobe Download Assistant Adobe Systems Incorporated 28.11.2012 1.2.3 benötigt
Adobe Flash Player 11 ActiveX Adobe Systems Incorporated 08.02.2013 6,00MB 11.5.502.149 benötigt
Adobe Flash Player 11 Plugin Adobe Systems Incorporated 08.02.2013 6,00MB 11.5.502.149 benötigt
Adobe Help Manager Adobe Systems Incorporated 25.05.2012 4.0.244 benötigt
Adobe Photoshop CS5 Adobe Systems Incorporated 13.04.2011 1,68GB 12.0 benötigt
Adobe Reader X (10.1.0) - Deutsch Adobe Systems Incorporated 22.06.2011 165MB 10.1.0 benötigt
AMD Catalyst Install Manager Advanced Micro Devices, Inc. 13.02.2013 26,3MB 8.0.903.0 benötigt
AMP WinOFF 13.04.2011 benötigt
Apple Application Support Apple Inc. 16.02.2013 64,9MB 2.3benötigt
Apple Mobile Device Support Apple Inc. 22.09.2012 23,7MB 6.0.0.59benötigt
Apple Software Update Apple Inc. 06.08.2011 2,38MB 2.1.3.127benötigt
ASIO4ALL Michael Tippach 07.09.2011 2.10benötigt
avast! Free Antivirus AVAST Software 14.02.2013 7.0.1474.0benötigt
BeatportDownloader Beatport LLC 09.12.2011 1.003benötigt
Bonjour Apple Inc. 30.10.2011 2,00MB 3.0.0.10benötigt
Call of Duty: Modern Warfare 3 Infinity Ward - Sledgehammer Games 08.11.2011 benötigt
Call of Duty: Modern Warfare 3 - Dedicated Server Infinity Ward - Sledgehammer Games 08.11.2011 benötigt
Call of Duty: Modern Warfare 3 - Multiplayer Infinity Ward - Sledgehammer Games 08.11.2011 benötigt
Camtasia Studio 7 TechSmith Corporation 22.04.2011 225MB 7.1.0 benötigt
CCleaner Piriform 23.01.2013 3.27 unnötig
DivX-Setup DivX, LLC 03.12.2012 2.6.1.22 benötigt
Epson Easy Photo Print 2 SEIKO EPSON CORPORATION 09.11.2012 2.2.4.0benötigt
Epson Easy Photo Print Plug-in for PMB(Picture Motion Browser) SEIKO EPSON CORPORATION 09.11.2012 1.00.0000benötigt
Epson Event Manager SEIKO EPSON CORPORATION 08.08.2012 40,5MB 2.50.0000benötigt
EPSON Scan Seiko Epson Corporation 08.08.2012 benötigt
EPSON SX235 Series Printer Uninstall SEIKO EPSON Corporation 09.11.2012 benötigt
EpsonNet Print SEIKO EPSON CORPORATION 10.08.2012 2.5.00 benötigt
FireBird plus v1.11 Tone2 03.03.2012 benötigt
FL Studio 10 Image-Line 08.12.2011 benötigt
FL Studio 10.6 Image-Line 23.08.2012 benötigt
FL Studio 10.8 Image-Line 03.10.2012 benötigt
FL Studio 10.9 Image-Line 05.02.2013 benötigt
Fraps (remove only) 26.08.2012 benötigt
Free Studio version 5.7.4.918 DVDVideoSoft Ltd. 01.10.2012 857MB 5.7.4.918 evtl benötigt
Free Video Converter V 3.1 Koyote Soft 17.02.2013 10,7MB 3.1.0.0 benötigt
Free YouTube Download version 2.10.35.426 DVDVideoSoft Limited. 01.05.2011 27,2MB benötigt
Garmin BaseCamp Garmin Ltd or its subsidiaries 07.02.2013 102MB 4.1.1 benötigt
Garmin Communicator Plugin Garmin Ltd or its subsidiaries 05.10.2012 14,6MB 4.0.3benötigt
Garmin Communicator Plugin x64 Garmin Ltd or its subsidiaries 05.10.2012 22,7MB 4.0.3benötigt
Garmin USB Drivers Garmin Ltd or its subsidiaries 04.11.2012 573KB 2.3.1.0benötigt
Garmin WebUpdater Garmin Ltd or its subsidiaries 07.02.2013 15,7MB 2.5.6benötigt
Google Chrome Google Inc. 19.11.2011 24.0.1312.57benötigt
Google Earth Google 14.12.2011 92,7MB 6.1.0.5001benötigt
Groove Machine Image-Line bvba 23.05.2012 benötigt
HandBrake 0.9.8 15.12.2012 0.9.8 evtl benötigt
Hardcore Image-Line 14.05.2011 benötigt
IL Download Manager Image-Line 13.04.2011 benötigt
IL Gross Beat Image-Line 11.12.2011 benötigt
IL Harmor Image-Line 07.03.2012 benötigt
IL Shared Libraries Image-Line 17.04.2012 benötigt
ImgBurn LIGHTNING UK! 09.02.2013 2.5.7.0 unnötig
iTunes Apple Inc. 22.09.2012 182MB 10.7.0.21 benötigt
Java(TM) 6 Update 22 Oracle 03.06.2011 97,0MB 6.0.220 benötigt
Java(TM) 6 Update 39 Oracle 02.07.2012 95,6MB 6.0.390benötigt
Jing TechSmith Corporation 24.03.2012 11,1MB 2.6.12032.1benötigt
K-Lite Mega Codec Pack 9.7.5 16.02.2013 72,2MB 9.7.5benötigt
License Support PACE Anti-Piracy, Inc. 13.04.2011 4,06MB 1.00.0000benötigt
Logitech SetPoint 6.32 Logitech 12.02.2013 39,0MB 6.32.20benötigt
M-Audio Conectiv Driver 6.0.3 (x64) M-Audio 13.04.2011 3,84MB 6.0.3benötigt
M-Audio Delta 6.0.8 (x64) M-Audio 15.02.2013 3,79MB 6.0.8benötigt
M-Audio Legacy Keyboard Driver 5.0.0 (x64) M-Audio 25.02.2012 258KB 5.0.0benötigt
Magellan Communicator Magellan Navigation, Inc. 13.02.2013 4,02MB 1.15.020unnötig
Malwarebytes Anti-Malware Version 1.70.0.1100 Malwarebytes Corporation 18.02.2013 18,4MB 1.70.0.1100 unnötig
Microsoft .NET Framework 4 Client Profile Microsoft Corporation 14.04.2011 38,8MB 4.0.30319benötigt
Microsoft .NET Framework 4 Client Profile DEU Language Pack Microsoft Corporation 14.04.2011 2,93MB 4.0.30319benötigt
Microsoft .NET Framework 4 Extended Microsoft Corporation 03.05.2012 51,9MB 4.0.30319benötigt
Microsoft .NET Framework 4 Extended DEU Language Pack Microsoft Corporation 03.05.2012 10,6MB 4.0.30319benötigt
Microsoft Primary Interoperability Assemblies 2005 Microsoft Corporation 12.12.2012 7,75MB 9.0.21022benötigt
Microsoft Silverlight Microsoft Corporation 13.02.2013 50,6MB 5.1.10411.0benötigt
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 Microsoft Corporation 25.01.2012 250KB 8.0.50727.4053benötigt
Microsoft Visual C++ 2005 Redistributable Microsoft Corporation 17.09.2011 300KB 8.0.59193benötigt
Microsoft Visual C++ 2005 Redistributable (x64) Microsoft Corporation 25.05.2012 572KB 8.0.61000benötigt
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 Microsoft Corporation 13.04.2011 788KB 9.0.30729benötigt
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 Microsoft Corporation 03.06.2011 782KB 9.0.30729.4148benötigt
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 Microsoft Corporation 17.09.2011 788KB 9.0.30729.6161benötigt
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 Microsoft Corporation 03.10.2011 234KB 9.0.30729benötigt
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 Microsoft Corporation 13.04.2011 236KB 9.0.30729benötigt
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 Microsoft Corporation 13.04.2011 596KB 9.0.30729.4148benötigt
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 Microsoft Corporation 17.09.2011 600KB 9.0.30729.6161benötigt
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 Microsoft Corporation 25.05.2012 13,8MB 10.0.40219benötigt
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 Microsoft Corporation 25.05.2012 15,0MB 10.0.40219benötigt
Microsoft-Maus- und Tastatur-Center Microsoft Corporation 18.01.2013 2.0.162.0 benötigt
Mozilla Maintenance Service Mozilla 12.01.2013 330KB 17.0.2unnötig
Mozilla Thunderbird 17.0.2 (x86 de) Mozilla 12.01.2013 43,3MB 17.0.2benötigt
MSXML 4.0 SP2 (KB954430) Microsoft Corporation 13.12.2012 1,27MB 4.20.9870.0benötigt
MSXML 4.0 SP2 (KB973688) Microsoft Corporation 13.12.2012 1,33MB 4.20.9876.0benötigt
MyFreeCodec 01.12.2011 unbekannt evtl benötigt
Native Instruments Controller Editor benötigt 23.04.2012benötigt
Native Instruments Controller Editor Native Instruments 23.04.2012 benötigt
Native Instruments Driver Native Instruments 28.12.2012 146MB 1.0.1.288benötigt
Native Instruments Driver 13.04.2011 benötigt
Native Instruments Guitar Rig 5 23.04.2012 benötigt
Native Instruments Guitar Rig 5 Native Instruments 23.04.2012 benötigt
Native Instruments Guitar Rig Factory Selection for Maschine 23.04.2012 benötigt
Native Instruments Guitar Rig Factory Selection for Maschine Native Instruments 23.04.2012benötigt
Native Instruments Guitar Rig Mobile I/O 23.04.2012 benötigt
Native Instruments Guitar Rig Mobile I/O Native Instruments 23.04.2012 benötigt
Native Instruments Guitar Rig Session I/O 23.04.2012 benötigt
Native Instruments Guitar Rig Session I/O Native Instruments 23.04.2012 benötigt
Native Instruments Komplete 8 Players Native Instruments 23.04.2012 benötigt
Native Instruments Komplete 8 Players 23.04.2012 benötigt
Native Instruments Kontakt 5 23.04.2012 benötigt
Native Instruments Kontakt 5 Native Instruments 23.04.2012 benötigt
Native Instruments Kontakt Factory Selection 23.04.2012 benötigt
Native Instruments Kontakt Factory Selection Native Instruments 23.04.2012 benötigt
Native Instruments Massive Native Instruments 29.08.2011 benötigt
Native Instruments Massive 29.08.2011 benötigt
Native Instruments Reaktor 5 23.04.2012 benötigt
Native Instruments Reaktor 5 Native Instruments 23.04.2012 benötigt
Native Instruments Reaktor Factory Selection Native Instruments 23.04.2012benötigt
Native Instruments Reaktor Factory Selection 23.04.2012 benötigt
Native Instruments Rig Kontrol 3 23.04.2012 benötigt
Native Instruments Rig Kontrol 3 Native Instruments 23.04.2012 benötigt
Native Instruments Service Center 23.04.2012 benötigt
Native Instruments Service Center Native Instruments 28.12.2012 benötigt
Novation USB Audio Driver 2.1 Novation DMS Ltd. 23.08.2012 1,13MB 2.1benötigt
NVIDIA PhysX NVIDIA Corporation 03.10.2011 120MB 9.09.0814 benötigt
OpenOffice.org 3.3 OpenOffice.org 03.06.2011 414MB 3.3.9567benötigt
PlayMemories Home Sony Corporation 01.01.2013 7.0.00.11271benötigt
PoiZone Image-Line 14.05.2011 benötigt
QuickTime Apple Inc. 16.02.2013 73,1MB 7.73.80.64benötigt
Ravensburger tiptoi 28.12.2011 benötigt
reFX Nexus VSTi RTAS v2.2.0 13.04.2011 benötigt
rgc:audio z3ta+ 1.5 (x64) Cakewalk Music Software 03.03.2012 benötigt 1.5
Sakura Image-Line 14.05.2011 benötigt
SAMSUNG USB Driver for Mobile Phones SAMSUNG Electronics Co., Ltd. 29.11.2011 42,8MB 1.4.8.0benötigt
Sawer Image-Line 14.05.2011 benötigt
Steam Valve Corporation 13.04.2011 35,4MB 1.0.0.0benötigt
Studio Instruments 1.0 Cakewalk Music Software 15.04.2011 benötigt
SynthMasterBE x64 VSTi Software Synthesizer Plug-In version 1.0.4.7 KV331 Audio 10.02.2013 13,6MB 1.0.4.7unnötig
Torq 2 Avid Technology 31.12.2011 2.03.15405benötigt
Toxic Biohazard Image-Line 14.05.2011 unnötig
TuneUp Utilities 2011 TuneUp Software 13.04.2011 10.0.2020.1benötigt
Uninstall 1.0.0.1 01.05.2011 11,1MB unbekannt
Vegas Pro 11.0 (64-bit) Sony 28.11.2012 516MB 11.0.511benötigt
Visual C++ Redistributables PACE Anti-Piracy, Inc. 13.04.2011 4,24MB 1.00.0000benötigt
VLC media player 2.0.5 VideoLAN 18.02.2013 2.0.5benötigt
WD Spindown or Stop Utility for External Drive, v1.00 Western Digital Technologies 08.12.2012 285KB 1.0.0benötigt
Windows Driver Package - Garmin (grmnusb) GARMIN Devices (04/19/2012 2.3.1.0) Garmin 04.11.2012 04/19/2012 2.3.1.0benötigt
WinRAR 4.00 (64-Bit) win.rar GmbH 15.04.2011 4.00.0benötigt
WOW Sugar Bytes 15.04.2011 1.0benötigt

hi
die meisten Bezeichnungen stehen an den Programmen direkt drann, kann man schlecht bearbeiten, überarbeite das noch mal bitte.

hmm, ich hab das blöderweise so abgespeichert und teilweise auch zahlen weggemacht die mir unnötig erschienen...

muss ich nochmal neu scannen?

dann erstell die liste halt neu.

7-Zip 9.20 (x64 edition) Igor Pavlov 13.04.2011 4,53MB 9.20.00.0 benötigt

ABBYY FineReader 9.0 Sprint ABBYY 08.08.2012 9.01.513.58212 benötigt

Addictive Drums 1.5 09.02.2013 benötigt

Adobe AIR Adobe Systems Incorporated 28.11.2012 3.2.0.2070 benötigt

Adobe Audition 3.0 Adobe Systems Incorporated 08.07.2012 3.0 benötigt

Adobe Audition 3.0 Vista Compatibility 08.07.2012 benötigt

Adobe Download Assistant Adobe Systems Incorporated 28.11.2012 1.2.3 benötigt

Adobe Flash Player 11 ActiveX Adobe Systems Incorporated 08.02.2013 6,00MB 11.5.502.149 benötigt

Adobe Flash Player 11 Plugin Adobe Systems Incorporated 08.02.2013 6,00MB 11.5.502.149 benötigt

Adobe Help Manager Adobe Systems Incorporated 25.05.2012 4.0.244 benötigt

Adobe Photoshop CS5 Adobe Systems Incorporated 13.04.2011 1,68GB 12.0 benötigt

Adobe Reader X (10.1.0) - Deutsch Adobe Systems Incorporated 22.06.2011 165MB 10.1.0 benötigt

AMD Catalyst Install Manager Advanced Micro Devices, Inc. 13.02.2013 26,3MB 8.0.903.0 benötigt

Apple Application Support Apple Inc. 16.02.2013 64,9MB 2.3 benötigt

Apple Mobile Device Support Apple Inc. 22.09.2012 23,7MB 6.0.0.59 benötigt

Apple Software Update Apple Inc. 06.08.2011 2,38MB 2.1.3.127 benötigt

ASIO4ALL Michael Tippach 07.09.2011 2.10 benötigt

avast! Free Antivirus AVAST Software 14.02.2013 7.0.1474.0 benötigt

BeatportDownloader Beatport LLC 09.12.2011 1.003 benötigt

Bonjour Apple Inc. 30.10.2011 2,00MB 3.0.0.10 benötigt

Call of Duty: Modern Warfare 3 Infinity Ward - Sledgehammer Games 08.11.2011 benötigt

Call of Duty: Modern Warfare 3 - Dedicated Server Infinity Ward - Sledgehammer Games 08.11.2011 benötigt

Call of Duty: Modern Warfare 3 - Multiplayer Infinity Ward - Sledgehammer Games 08.11.2011 benötigt

Camtasia Studio 7 TechSmith Corporation 22.04.2011 225MB 7.1.0 benötigt

CCleaner Piriform 23.01.2013 3.27 unnötig

DivX-Setup DivX, LLC 03.12.2012 2.6.1.22 benötigt

Epson Easy Photo Print 2 SEIKO EPSON CORPORATION 09.11.2012 benötigt
2.2.4.0
Epson Easy Photo Print Plug-in for PMB(Picture Motion Browser) SEIKO EPSON CORPORATION 09.11.2012 1.00.0000 benötigt

Epson Event Manager SEIKO EPSON CORPORATION 08.08.2012 40,5MB 2.50.0000 benötigt

EPSON Scan Seiko Epson Corporation 08.08.2012 benötigt

EPSON SX235 Series Printer Uninstall SEIKO EPSON Corporation 09.11.2012 benötigt

EpsonNet Print SEIKO EPSON CORPORATION 10.08.2012 2.5.00 benötigt

FireBird plus v1.11 Tone2 03.03.2012 benötigt

FL Studio 10 Image-Line 08.12.2011 benötigt

FL Studio 10.6 Image-Line 23.08.2012 benötigt

FL Studio 10.8 Image-Line 03.10.2012 benötigt

FL Studio 10.9 Image-Line 05.02.2013 benötigt

Fraps (remove only) 26.08.2012 benötigt

Free Studio version 5.7.4.918 DVDVideoSoft Ltd. 01.10.2012 857MB 5.7.4.918 benötigt

Free Video Converter V 3.1 Koyote Soft 17.02.2013 10,7MB 3.1.0.0 benötigt

Free YouTube Download version 2.10.35.426 DVDVideoSoft Limited. 01.05.2011 27,2MB benötigt

Garmin BaseCamp Garmin Ltd or its subsidiaries 07.02.2013 102MB 4.1.1 benötigt

Garmin Communicator Plugin Garmin Ltd or its subsidiaries 05.10.2012 14,6MB 4.0.3 benötigt

Garmin Communicator Plugin x64 Garmin Ltd or its subsidiaries 05.10.2012 22,7MB 4.0.3 benötigt

Garmin USB Drivers Garmin Ltd or its subsidiaries 04.11.2012 573KB 2.3.1.0 benötigt

Garmin WebUpdater Garmin Ltd or its subsidiaries 07.02.2013 15,7MB 2.5.6 benötigt

Google Chrome Google Inc. 19.11.2011 24.0.1312.57 benötigt

Groove Machine Image-Line bvba 23.05.2012 benötigt

HandBrake 0.9.8 15.12.2012 0.9.8 benötigt

Hardcore Image-Line 14.05.2011 benötigt

IL Download Manager Image-Line 13.04.2011 benötigt

IL Gross Beat Image-Line 11.12.2011 benötigt

IL Harmor Image-Line 07.03.2012 benötigt

IL Shared Libraries Image-Line 17.04.2012 benötigt

ImgBurn LIGHTNING UK! 09.02.2013 2.5.7.0 unnötig

iTunes Apple Inc. 22.09.2012 182MB 10.7.0.21 benötigt

Java(TM) 6 Update 22 Oracle 03.06.2011 97,0MB 6.0.220 benötigt

Java(TM) 6 Update 39 Oracle 02.07.2012 95,6MB 6.0.390 benötigt

Jing TechSmith Corporation 24.03.2012 11,1MB 2.6.12032.1 benötigt

K-Lite Mega Codec Pack 9.7.5 16.02.2013 72,2MB 9.7.5 benötigt

License Support PACE Anti-Piracy, Inc. 13.04.2011 4,06MB 1.00.0000 benötigt

Logitech SetPoint 6.32 Logitech 12.02.2013 39,0MB 6.32.20 benötigt

M-Audio Conectiv Driver 6.0.3 (x64) M-Audio 13.04.2011 3,84MB 6.0.3 benötigt

M-Audio Delta 6.0.8 (x64) M-Audio 15.02.2013 3,79MB 6.0.8 benötigt

M-Audio Legacy Keyboard Driver 5.0.0 (x64) M-Audio 25.02.2012 258KB 5.0.0 benötigt

Magellan Communicator Magellan Navigation, Inc. 13.02.2013 4,02MB 1.15.020 benötigt

Malwarebytes Anti-Malware Version 1.70.0.1100 Malwarebytes Corporation 18.02.2013 18,4MB 1.70.0.1100 benötigt

Microsoft .NET Framework 4 Client Profile Microsoft Corporation 14.04.2011 38,8MB 4.0.30319 benötigt

Microsoft .NET Framework 4 Client Profile DEU Language Pack Microsoft Corporation 14.04.2011 2,93MB 4.0.30319 benötigt

Microsoft .NET Framework 4 Extended Microsoft Corporation 03.05.2012 51,9MB 4.0.30319 benötigt

Microsoft .NET Framework 4 Extended DEU Language Pack Microsoft Corporation 03.05.2012 10,6MB 4.0.30319 benötigt

Microsoft Primary Interoperability Assemblies 2005 Microsoft Corporation 12.12.2012 7,75MB 9.0.21022 benötigt

Microsoft Silverlight Microsoft Corporation 13.02.2013 50,6MB 5.1.10411.0 benötigt

Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 Microsoft Corporation 25.01.2012 250KB 8.0.50727.4053 benötigt

Microsoft Visual C++ 2005 Redistributable Microsoft Corporation 17.09.2011 300KB 8.0.59193 benötigt

Microsoft Visual C++ 2005 Redistributable (x64) Microsoft Corporation 25.05.2012 572KB 8.0.61000 benötigt

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 Microsoft Corporation 13.04.2011 788KB 9.0.30729 benötigt

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 Microsoft Corporation 03.06.2011 782KB 9.0.30729.4148 benötigt

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 Microsoft Corporation 17.09.2011 788KB 9.0.30729.6161 benötigt

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 Microsoft Corporation 03.10.2011 234KB 9.0.30729 benötigt

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 Microsoft Corporation 13.04.2011 236KB 9.0.30729 benötigt

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 Microsoft Corporation 13.04.2011 596KB 9.0.30729.4148 benötigt

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 Microsoft Corporation 17.09.2011 600KB 9.0.30729.6161 benötigt

Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 Microsoft Corporation 25.05.2012 13,8MB 10.0.40219 benötigt

Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 Microsoft Corporation 25.05.2012 15,0MB 10.0.40219 benötigt

Microsoft-Maus- und Tastatur-Center Microsoft Corporation 18.01.2013 2.0.162.0 benötigt

Mozilla Maintenance Service Mozilla 12.01.2013 330KB 17.0.2 benötigt

Mozilla Thunderbird 17.0.2 (x86 de) Mozilla 12.01.2013 43,3MB 17.0.2 benötigt

MSXML 4.0 SP2 (KB954430) Microsoft Corporation 13.12.2012 1,27MB 4.20.9870.0 benötigt

MSXML 4.0 SP2 (KB973688) Microsoft Corporation 13.12.2012 1,33MB 4.20.9876.0 benötigt

MyFreeCodec 01.12.2011 unnötig

Native Instruments Controller Editor 23.04.2012 benötigt

Native Instruments Controller Editor Native Instruments 23.04.2012 benötigt

Native Instruments Driver 13.04.2011 benötigt

Native Instruments Driver Native Instruments 28.12.2012 146MB 1.0.1.288 benötigt

Native Instruments Guitar Rig 5 23.04.2012 benötigt

Native Instruments Guitar Rig 5 Native Instruments 23.04.2012 benötigt

Native Instruments Guitar Rig Factory Selection for Maschine 23.04.2012 benötigt

Native Instruments Guitar Rig Factory Selection for Maschine Native Instruments 23.04.2012 benötigt

Native Instruments Guitar Rig Mobile I/O 23.04.2012 benötigt

Native Instruments Guitar Rig Mobile I/O Native Instruments 23.04.2012 benötigt

Native Instruments Guitar Rig Session I/O 23.04.2012 benötigt

Native Instruments Guitar Rig Session I/O Native Instruments 23.04.2012 benötigt

Native Instruments Komplete 8 Players 23.04.2012 benötigt

Native Instruments Komplete 8 Players Native Instruments 23.04.2012 benötigt

Native Instruments Kontakt 5 23.04.2012 benötigt

Native Instruments Kontakt 5 Native Instruments 23.04.2012 benötigt

Native Instruments Kontakt Factory Selection 23.04.2012 benötigt

Native Instruments Kontakt Factory Selection Native Instruments 23.04.2012 benötigt

Native Instruments Massive 29.08.2011 benötigt

Native Instruments Massive Native Instruments 29.08.2011 benötigt

Native Instruments Reaktor 5 23.04.2012 benötigt

Native Instruments Reaktor 5 Native Instruments 23.04.2012 benötigt

Native Instruments Reaktor Factory Selection 23.04.2012 benötigt

Native Instruments Reaktor Factory Selection Native Instruments 23.04.2012 benötigt

Native Instruments Rig Kontrol 3 23.04.2012 benötigt

Native Instruments Rig Kontrol 3 Native Instruments 23.04.2012 benötigt

Native Instruments Service Center 23.04.2012 benötigt

Native Instruments Service Center Native Instruments 28.12.2012 benötigt

Novation USB Audio Driver 2.1 Novation DMS Ltd. 23.08.2012 1,13MB 2.1 benötigt

NVIDIA PhysX NVIDIA Corporation 03.10.2011 120MB 9.09.0814 benötigt

OpenOffice.org 3.3 OpenOffice.org 03.06.2011 414MB 3.3.9567 benötigt

PlayMemories Home Sony Corporation 01.01.2013 7.0.00.11271 benötigt

PoiZone Image-Line 14.05.2011 benötigt

QuickTime Apple Inc. 16.02.2013 73,1MB 7.73.80.64 benötigt

Ravensburger tiptoi 28.12.2011 benötigt

reFX Nexus VSTi RTAS v2.2.0 13.04.2011 benötigt

rgc:audio z3ta+ 1.5 (x64) Cakewalk Music Software 03.03.2012 1.5 benötigt

Sakura Image-Line 14.05.2011
SAMSUNG USB Driver for Mobile Phones SAMSUNG Electronics Co., Ltd. 29.11.2011 42,8MB 1.4.8.0 benötigt

Sawer Image-Line 14.05.2011 benötigt

Steam Valve Corporation 13.04.2011 35,4MB 1.0.0.0 benötigt

Studio Instruments 1.0 Cakewalk Music Software 15.04.2011 1.0 benötigt

SynthMasterBE x64 VSTi Software Synthesizer Plug-In version 1.0.4.7 KV331 Audio 10.02.2013 13,6MB 1.0.4.7 unnötig

Torq 2 Avid Technology 31.12.2011 2.03.15405 benötigt

Toxic Biohazard Image-Line 14.05.2011 benötigt

TuneUp Utilities 2011 TuneUp Software 13.04.2011 10.0.2020.1 benötigt

Uninstall 1.0.0.1 01.05.2011 11,1MB unbekannt

Vegas Pro 11.0 (64-bit) Sony 28.11.2012 516MB 11.0.511 benötigt

Visual C++ Redistributables PACE Anti-Piracy, Inc. 13.04.2011 4,24MB 1.00.0000 benötigt

VLC media player 2.0.5 VideoLAN 18.02.2013 2.0.5 benötigt

WD Spindown or Stop Utility for External Drive, v1.00 Western Digital Technologies 08.12.2012 285KB 1.0.0 benötigt

Windows Driver Package - Garmin (grmnusb) GARMIN Devices (04/19/2012 2.3.1.0) Garmin 04.11.2012 04/19/2012 2.3.1.0 benötigt

WinRAR 4.00 (64-Bit) win.rar GmbH 15.04.2011 4.00.0 benötigt

WOW Sugar Bytes 15.04.2011 1.0 benötigt

deinstaliere:
Adobe Flash Player alle
Adobe - Adobe Flash Player installieren
neueste version laden, instalieren.
adobe reader:
Adobe - Adobe Reader herunterladen - Alle Versionen
haken bei mcafee security scan raus nehmen

bitte auch mal den adobe reader wie folgt konfigurieren:
adobe reader öffnen, bearbeiten, voreinstellungen.
allgemein:
nur zertifizierte zusatz module verwenden, anhaken.
Sicherheit (erweitert)
Erweiterte Sicherheit anhaken
und alle Dateien auswählen.
internet:
hier sollte alles deaktiviert werden, es ist sehr unsicher pdfs automatisch zu öffnen, zu downloaden etc.
es ist immer besser diese direkt abzuspeichern da man nur so die kontrolle hat was auf dem pc vor geht.
bei javascript den haken bei java script verwenden raus nehmen
bei updater, automatisch instalieren wählen.
übernehmen /ok

deinstaliere:
ImgBurn
Java: alle
downloade Java jre:
Java-Downloads für alle Betriebssysteme
klicke:
Download der Java-Software für Windows Offline
laden, und instalieren
deinstaliere:
MyFreeCodec
SynthMasterBE
TuneUp : verzichte auf solchen Quatsch, bringt nihchts, einige Funktionen können dem PC schaden.
VLC : nur behalten wenn er von vidiolan.org stammt, ansonsten deinstalieren und von hier laden:
VideoLAN - Official page for VLC media player, the Open Source video framework!

Öffne CCleaner, analysieren, starten, PC neustarten.

Lade Hitmanpro:
HitmanPro - Download - Filepony

Doppelklicken, Lizenz, Testlizenz.
Scan, nichts löschen.
Weiter, Log als xml exportieren, und posten.
Oder packen und anhängen

wenn ich java nach dem download installieren will, versucht er sich ins inet einzuwählen....scheitert aber mit dieser meldung

http://i60.photobucket.com/albums/h7...pse4bd010b.jpg

breche ich das alles ab, startet der installer? warum...

zu dem tune up ding: eigtl nutze ich da nur die funktion um autostart programme zu kontrollieren, da ich bisher keine bessere option gefunden autostart ordner von windows..ist oft leer obwohl zig programme beim hochfahren starten, die ich da gar nicht haben will...also beziogen auf manche neu installierte prigramme.....wie kann ich das selber steuern?

Hi
start ausführen
msconfig
systemstart da findest du die.
kannst du die Meldung von java als text posten bitte?

die meldung von dem bild?

warum will denn java da ins netz????

hier als zip

ja die meldung als text posten. evtl. will es nach updates suchen, gib ihm netzzugriff

hmm, nach abbruch hat es isch aber installiert

dann musst du eben hoffen das es passt, da du mir die Meldung ja immernoch nicht als klartext gepostet hast.

hmm, mist dachte die war als zip angehängt

ok ist io so, noch probleme?
Falls nein, öffne OTL, bereinigen, pc startet neu, remover werden gelöscht.
Lösche übrig gebliebene Remover, Logs, setups, leere den Papierkorb.
PC absichern:
als antimalware programm würde ich emsisoft empfehlen.
diese haben für mich den besten schutz kostet aber etwas.
Computeractive Software Store - Emsisoft Anti-Malware 7 [1-PC] - 63% off RRP
testversion:
Meine Antivirus-Empfehlung: Emsisoft Anti-Malware
insbesondere wenn du onlinebanking, einkäufe, sonstige zahlungsabwicklungen oder ähnlich wichtiges, wie zb berufliches machst, also sensible daten zu schützen sind, solltest du in sicherheitssoftware investieren.
vor dem aktivieren der lizenz die 30 tage testzeitraum ausnutzen.

kostenlos, aber eben nicht ganz so gut währe avast zu empfehlen.
http://www.trojaner-board.de/110895-...antivirus.html

sag mir welches du nutzt, dann gebe ich konfigurationshinweise.
bitte dein bisheriges av deinstalieren
die folgende anleitung ist umfangreich, dass ist mir klar, sie sollte aber umgesetzt werden, da nur dann dein pc sicher ist. stelle so viele fragen wie nötig, ich arbeite gern alles mit dir durch!

http://www.trojaner-board.de/96344-a...-rechners.html
Starte bitte mit der Passage, Windows Vista und Windows 7
Bitte beginne damit, Windows Updates zu instalieren.
Am besten geht dies, wenn du über Start, Suchen gehst, und dort Windows Updates eingibst.
Prüfe unter "Einstellungen ändern" dass folgendes ausgewählt ist:
- Updates automatisch Instalieren,
- Täglich
- Uhrzeit wählen
- Bitte den gesammten rest anhaken, außer:
- detailierte benachichtungen anzeigen, wenn neue Microsoft software verfügbar ist.
Klicke jetzt die Schaltfläche "OK"
Klicke jetzt "nach Updates suchen".
Bitte instaliere zunächst wichtige Updates.
Es wird nötig sein, den PC zwischendurch neu zu starten. falls dies der Fall ist, musst du erneut über Start, Suchen, Windows Update aufrufen, auf Updates suchen klicken und die nächsten instalieren.
Mache das selbe bitte mit den optionalen Updates.
Bitte übernimm den rest so, wie es im Abschnitt windows 7 / Vista zu lesen ist.
aus dem Abschnitt xp, bitte den punkt "datenausführungsverhinderung, dep" übernehmen.
als browser rate ich dir zu chrome:
Installation von Google Chrome für mehrere Nutzerkonten - Google Chrome-Hilfe
anleitung lesen bitte
falls du nen andern nutzen willst, sags mir dann muss ich teile der nun folgenden anleitung anpassen.

Sandboxie
Die devinition einer Sandbox ist hier nachzulesen:
Sandbox
Kurz gesagt, man kann Programme fast 100 %ig isuliert vom System ausführen.

Der Vorteil liegt klar auf der Hand, wenn über den Browser Schadcode eingeschläust wird, kann dieser nicht nach außen dringen.
Download Link:
Sandboxie - Download - Filepony

anleitung:
http://www.trojaner-board.de/71542-a...sandboxie.html
ausführliche anleitung als pdf, auch abarbeiten:
Sandbox Einstellungen |

bitte folgende zusatz konfiguration machen:
sandboxie control öffnen, menü sandbox anklicken, defauldbox wählen.
dort klicke auf sandbox einstellungen.
beschrenkungen, bei programm start und internet zugriff schreibe:
chrome.exe
dann gehe auf anwendungen, webbrowser, chrome.
dort aktiviere alles außer gesammten profil ordner freigeben.
Wie du evtl. schon gesehen hast, kannst du einige Funktionen nicht nutzen.
Dies ist nur in der Vollversion nötig, zu deren Kauf ich dir rate.
Du kannst zb unter "Erzwungene Programmstarts" festlegen, dass alle Browser in der Sandbox starten.
Ansonsten musst du immer auf "Sandboxed webbrowser" klicken bzw Rechtsklick, in Sandboxie starten.
Eine lebenslange Lizenz kostet 30 €, und ist auf allen deinen PC's nutzbar.

Weiter mit:
Maßnahmen für ALLE Windows-Versionen
alles komplett durcharbeiten
anmerkung zu file hippo.
in den settings zusätzlich auswählen:
hide beta updates.
Run updateChecker when Windows starts

Backup Programm:
in meiner Anleitung ist bereits ein Backup Programm verlinkt, als Alternative bietet sich auch das Windows eigene Backup Programm an:
http://www.trojaner-board.de/82962-w...en-backup.html
Dies ist aber leider nur für Windows 7 Nutzer vernünftig nutzbar.
Alle Anderen sollten sich aber auf jeden fall auch ein Backup Programm instalieren, denn dies kann unter Umständen sehr wichtig sein, zum Beispiel, wenn die Festplatte einmal kaputt ist.

Zum Schluss, die allgemeinen sicherheitstipps beachten, wenn es dich betrifft, den Tipp zum Onlinebanking beachten und alle Passwörter ändern
bitte auch lesen, wie mache ich programme für alle sichtbar:
Programme für alle Konten nutzbar machen - PCtipp.ch - Praxis & Hilfe
surfe jetzt also nur noch im standard nutzer konto und dort in der sandbox.
wenn du die kostenlose version nutzt, dann mit klick auf sandboxed web browser, wenn du die bezahlversion hast, kannst du erzwungene programm starts festlegen, dann wird sandboxie immer gestartet wenn du nen browser aufrufst.
wenn du mit der maus über den browser fährst sollte der eingerahmt sein, dann bist du im sandboxed web browser

passwort sicherheit:
jeder dienst benötigt ein eigenes, mindestens 12-stelliges passwort
bei der passwort verwaltung und erstellung hilft roboform
Passwort Manager, Formular Ausfueller, Passwort Management | RoboForm Passwort Manager
anleitung:
RoboForm-Bedienungsanleitung: Passwort-Manager, Verwalten von Passwörtern und persönlichen Daten

okay. AV hab ich avast,,würde ich gerne ersma weiter verwednen...den rst mach ich nach und nach..

updates fang ich mal an...

Ok melden bei Rückfragen oder erfolg.
Anmerkung, wenn du Zahlungsverkehr oder einkäufe etc über den PC machst, würd ich dir raten die 15 € im Jahr für Emsisoft zu investieren.

du hast 2 versionen von emisoft gepostet..sind die beide gleich, kosten allerdings unterschiedlich?

Hi, einmal ist die herstellerseite, da bezahlst du die Preise des Herstellers, das andere ist ein shop, die bieten es billiger an, wenn du einen pc hast, für 15 €, dann haben sie noch 3platz lizenzen für 19 €.